SAA C02 ACTUAL EXAM PAPER 2026
QUESTIONS WITH SOLUTIONS GRADED A+
● #67. A company's website is used to sell products to the public The
site runs on Amazon EC2 instances in an Auto Scaling group behind an
Application Load Balancer (ALB) There is also an Amazon CloudFront
distribution and AWS WAF Is being used to protect against SQL
injection attacks The ALB is the origin for the CloudFront distribution A
recent review of security logs revealed an external malicious IP that
needs to be blocked from accessing the website What should a solutions
architect do to protect the application?
A. Modify the configuration of AWS WAF to add an IP match condition
to block the malicious IP address
B. Modify the security groups for the EC2 instances in the target groups
behind the ALB to deny the malicious IP address
C. Modify the network ACL on the CloudFront distribution to add a
deny rule for the malicious IP address
D. Modify the network ACL for the EC2 instances in the target groups
behind the. Answer: A
● #68. A company is running a multi-tier web application on AWS. The
application runs its database on Amazon Aurora MySQL. The
application and database tiers are in the us-easily Region.A database
administrator who monitors the Aurora DB cluster finds that an
intermittent increase in read traffic is creating high CPU utilization on
the read replic a. The result is increased read latency for the application.
,The memory and disk utilization of the DB instance are stable
throughout the event of increased latency.What should a solutions
architect do to improve the read scalability?
A. Create a cross-Region read replica
B. Reboot the DB cluster
C. Increase the provisioned read IOPS for the DB instance
D. Configure Aurora Auto Scaling for the read replica. Answer: A
● #69. A company runs its Infrastructure on AWS and has a registered
base of 700.000 users for res document management application The
company intends to create a product that converts large pdf files to jpg
Imago files. The .pdf files average 5 MB in size. The company needs to
store the original files and the converted files. A solutions architect must
design a scalable solution to accommodate demand that will grow
rapidly over lime.Which solution meets these requirements MOST cost-
effectively?
A. Save the pdf files to Amazon S3 Configure an S3 PUT event to
invoke an AWS Lambda function to convert the files to jpg format and
store them back in Amazon S3
B. Upload the .pdf files to an AWS Elastic Beanstalk application that
includes Amazon EC2 instances, Amazon Elastic File System (Amazon
EPS) storage, and an Auto Scaling group. Use a program in the EC2
instances to convert the file to jpg format Save the pdf files and. Answer:
B
,● #70. A company uses an Amazon S3 bucket to store static images for
its website. The company configured permissions to allow access to
Amazon S3 objects by privileged users only. What should a solutions
architect do to protect against data loss? (Select TWO.)
A. Enable access togging on the S3 bucket.
B. Use MFA Delete to require multi-factor authentication to delete an
object.
C. Enable server-side encryption on the S3 bucket.
D. Enable versioning on the S3 bucket
E. Configure an S3 lifecycle rule to transition objects to Amazon S3
Glacier.. Answer: B,D
● #71. A solutions architect must migrate a Windows Internet
Information Services (IIS) web application to AWS The application
currently relies on a file share hosted in the user's on-premises network-
attached storage (NAS) The solutions architect has proposed migrating
the MS web servers to Amazon EC2 instances in multiple Availability
Zones that are connected to the storage solution, and configuring an
Elastic Load Balancer attached to the instances Which replacement to
the on-premises file share is MOST resilient and durable?
A. Migrate the file share to Amazon FSx for Windows File Server
B. Migrate the file share to AWS Storage Gateway
C. Migrate the file share to Amazon Elastic File System (Amazon EFS)
D. Migrate the file share to Amazon RDS. Answer: A
, ● #72. The financial application at a company stores monthly reports in
an Amazon S3 bucket. The vice president of finance has mandated that
ail access to these reports be logged and that any modifications to the tog
files be detected Which actions can a solutions architect take to meet
these requirements?
A. Use S3 server access togging on the bucket that houses the reports
with the read and write data events and log file validation options
enabled
B. Use S3 server access logging on the bucket that houses the reports
with the read and write management events and log file validation
options enabled
C. Use AWS CloudTrail to create a new trail Configure the trail to log
read and write data events on the S3 bucket that houses the reports Log
these events to a new bucket and enable log file validation
D. Use AWS CloudTrail to create a new trail Configure the trail to log
read and write management events on the S3 bucket th. Answer: C
● #73. A solutions architect observes that a nightly batch processing job
is automatically scaled up for 1 hour before the desired Amazon EC2
capacity is reached The peak capacity is the same every night and the
batch jobs always start at 1 AM The solutions architect needs to find a
cost-effective solution that will allow for the desired EC2 capacity to be
reached quickly and allow the Auto Scaling group to scale down after
the batch jobs are complete What should the solutions architect do to
meet these requirements^
A. Increase the minimum capacity for the Auto Scaling group
QUESTIONS WITH SOLUTIONS GRADED A+
● #67. A company's website is used to sell products to the public The
site runs on Amazon EC2 instances in an Auto Scaling group behind an
Application Load Balancer (ALB) There is also an Amazon CloudFront
distribution and AWS WAF Is being used to protect against SQL
injection attacks The ALB is the origin for the CloudFront distribution A
recent review of security logs revealed an external malicious IP that
needs to be blocked from accessing the website What should a solutions
architect do to protect the application?
A. Modify the configuration of AWS WAF to add an IP match condition
to block the malicious IP address
B. Modify the security groups for the EC2 instances in the target groups
behind the ALB to deny the malicious IP address
C. Modify the network ACL on the CloudFront distribution to add a
deny rule for the malicious IP address
D. Modify the network ACL for the EC2 instances in the target groups
behind the. Answer: A
● #68. A company is running a multi-tier web application on AWS. The
application runs its database on Amazon Aurora MySQL. The
application and database tiers are in the us-easily Region.A database
administrator who monitors the Aurora DB cluster finds that an
intermittent increase in read traffic is creating high CPU utilization on
the read replic a. The result is increased read latency for the application.
,The memory and disk utilization of the DB instance are stable
throughout the event of increased latency.What should a solutions
architect do to improve the read scalability?
A. Create a cross-Region read replica
B. Reboot the DB cluster
C. Increase the provisioned read IOPS for the DB instance
D. Configure Aurora Auto Scaling for the read replica. Answer: A
● #69. A company runs its Infrastructure on AWS and has a registered
base of 700.000 users for res document management application The
company intends to create a product that converts large pdf files to jpg
Imago files. The .pdf files average 5 MB in size. The company needs to
store the original files and the converted files. A solutions architect must
design a scalable solution to accommodate demand that will grow
rapidly over lime.Which solution meets these requirements MOST cost-
effectively?
A. Save the pdf files to Amazon S3 Configure an S3 PUT event to
invoke an AWS Lambda function to convert the files to jpg format and
store them back in Amazon S3
B. Upload the .pdf files to an AWS Elastic Beanstalk application that
includes Amazon EC2 instances, Amazon Elastic File System (Amazon
EPS) storage, and an Auto Scaling group. Use a program in the EC2
instances to convert the file to jpg format Save the pdf files and. Answer:
B
,● #70. A company uses an Amazon S3 bucket to store static images for
its website. The company configured permissions to allow access to
Amazon S3 objects by privileged users only. What should a solutions
architect do to protect against data loss? (Select TWO.)
A. Enable access togging on the S3 bucket.
B. Use MFA Delete to require multi-factor authentication to delete an
object.
C. Enable server-side encryption on the S3 bucket.
D. Enable versioning on the S3 bucket
E. Configure an S3 lifecycle rule to transition objects to Amazon S3
Glacier.. Answer: B,D
● #71. A solutions architect must migrate a Windows Internet
Information Services (IIS) web application to AWS The application
currently relies on a file share hosted in the user's on-premises network-
attached storage (NAS) The solutions architect has proposed migrating
the MS web servers to Amazon EC2 instances in multiple Availability
Zones that are connected to the storage solution, and configuring an
Elastic Load Balancer attached to the instances Which replacement to
the on-premises file share is MOST resilient and durable?
A. Migrate the file share to Amazon FSx for Windows File Server
B. Migrate the file share to AWS Storage Gateway
C. Migrate the file share to Amazon Elastic File System (Amazon EFS)
D. Migrate the file share to Amazon RDS. Answer: A
, ● #72. The financial application at a company stores monthly reports in
an Amazon S3 bucket. The vice president of finance has mandated that
ail access to these reports be logged and that any modifications to the tog
files be detected Which actions can a solutions architect take to meet
these requirements?
A. Use S3 server access togging on the bucket that houses the reports
with the read and write data events and log file validation options
enabled
B. Use S3 server access logging on the bucket that houses the reports
with the read and write management events and log file validation
options enabled
C. Use AWS CloudTrail to create a new trail Configure the trail to log
read and write data events on the S3 bucket that houses the reports Log
these events to a new bucket and enable log file validation
D. Use AWS CloudTrail to create a new trail Configure the trail to log
read and write management events on the S3 bucket th. Answer: C
● #73. A solutions architect observes that a nightly batch processing job
is automatically scaled up for 1 hour before the desired Amazon EC2
capacity is reached The peak capacity is the same every night and the
batch jobs always start at 1 AM The solutions architect needs to find a
cost-effective solution that will allow for the desired EC2 capacity to be
reached quickly and allow the Auto Scaling group to scale down after
the batch jobs are complete What should the solutions architect do to
meet these requirements^
A. Increase the minimum capacity for the Auto Scaling group
