SAA-C03 — questions

Page 13 of 51 · 1019 total questions.

SAA-C03 Question 241

Topic 1 · Question 241

An online learning company is migrating to the AWS Cloud. The company maintains its student records in a PostgreSQL database. The company needs a solution in which its data is available and online across multiple AWS Regions at all times. Which solution will meet these requirements with the LEAST amount of operational overhead?

AMigrate the PostgreSQL database to a PostgreSQL cluster on Amazon EC2 instances.
BMigrate the PostgreSQL database to an Amazon RDS for PostgreSQL DB instance with the Multi-AZ feature turned on.
CMigrate the PostgreSQL database to an Amazon RDS for PostgreSQL DB instance. Create a read replica in another Region. (correct answer)
DMigrate the PostgreSQL database to an Amazon RDS for PostgreSQL DB instance. Set up DB snapshots to be copied to another Region.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Migrate the PostgreSQL database to an Amazon RDS for PostgreSQL DB instance. Create a read replica in another Region.

Explanation

Amazon RDS is a managed relational database that handles patching, backups and failover.

SAA-C03 Question 242

Single page →

Topic 1 · Question 242

A company hosts its web application on AWS using seven Amazon EC2 instances. The company requires that the IP addresses of all healthy EC2 instances be returned in response to DNS queries. Which policy should be used to meet this requirement?

ASimple routing policy
BLatency routing policy
CMultivalue routing policy (correct answer)
DGeolocation routing policy

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Multivalue routing policy.

SAA-C03 Question 243

Single page →

Topic 1 · Question 243

A medical research lab produces data that is related to a new study. The lab wants to make the data available with minimum latency to clinics across the country for their on-premises, file-based applications. The data files are stored in an Amazon S3 bucket that has read-only permissions for each clinic. What should a solutions architect recommend to meet these requirements?

ADeploy an AWS Storage Gateway file gateway as a virtual machine (VM) on premises at each clinic (correct answer)
BMigrate the files to each clinic’s on-premises applications by using AWS DataSync for processing.
CDeploy an AWS Storage Gateway volume gateway as a virtual machine (VM) on premises at each clinic.
DAttach an Amazon Elastic File System (Amazon EFS) file system to each clinic’s on-premises servers.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Deploy an AWS Storage Gateway file gateway as a virtual machine (VM) on premises at each clinic

Explanation

AWS Storage Gateway bridges on-premises apps to AWS storage with local caching.

SAA-C03 Question 244

Single page →

Topic 1 · Question 244

A company is using a content management system that runs on a single Amazon EC2 instance. The EC2 instance contains both the web server and the database software. The company must make its website platform highly available and must enable the website to scale to meet user demand. What should a solutions architect recommend to meet these requirements?

AMove the database to Amazon RDS, and enable automatic backups. Manually launch another EC2 instance in the same Availability Zone. Configure an Application Load Balancer in the Availability Zone, and set the two instances as targets.
BMigrate the database to an Amazon Aurora instance with a read replica in the same Availability Zone as the existing EC2 instance. Manually launch another EC2 instance in the same Availability Zone. Configure an Application Load Balancer, and set the two EC2 instances as targets.
CMove the database to Amazon Aurora with a read replica in another Availability Zone. Create an Amazon Machine Image (AMI) from the EC2 instance. Configure an Application Load Balancer in two Availability Zones. Attach an Auto Scaling group that uses the AMI across two Availability Zones. (correct answer)
DMove the database to a separate EC2 instance, and schedule backups to Amazon S3. Create an Amazon Machine Image (AMI) from the original EC2 instance. Configure an Application Load Balancer in two Availability Zones. Attach an Auto Scaling group that uses the AMI across two Availability Zones.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Move the database to Amazon Aurora with a read replica in another Availability Zone. Create an Amazon Machine Image (AMI) from the EC2 instance. Configure an Application Load Balancer in two Availability Zones. Attach...

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon Aurora is a high-performance managed relational database with built-in replication and failover. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SAA-C03 Question 245

Single page →

Topic 1 · Question 245

A company is launching an application on AWS. The application uses an Application Load Balancer (ALB) to direct traffic to at least two Amazon EC2 instances in a single target group. The instances are in an Auto Scaling group for each environment. The company requires a development environment and a production environment. The production environment will have periods of high traffic. Which solution will configure the development environment MOST cost-effectively?

AReconfigure the target group in the development environment to have only one EC2 instance as a target.
BChange the ALB balancing algorithm to least outstanding requests.
CReduce the size of the EC2 instances in both environments.
DReduce the maximum number of EC2 instances in the development environment’s Auto Scaling group. (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Reduce the maximum number of EC2 instances in the development environment’s Auto Scaling group.

Explanation

SAA-C03 Question 246

Single page →

Topic 1 · Question 246

A company runs a web application on Amazon EC2 instances in multiple Availability Zones. The EC2 instances are in private subnets. A solutions architect implements an internet-facing Application Load Balancer (ALB) and specifies the EC2 instances as the target group. However, the internet traffic is not reaching the EC2 instances. How should the solutions architect reconfigure the architecture to resolve this issue?

AReplace the ALB with a Network Load Balancer. Configure a NAT gateway in a public subnet to allow internet traffic.
BMove the EC2 instances to public subnets. Add a rule to the EC2 instances’ security groups to allow outbound traffic to 0.0.0.0/0.
CUpdate the route tables for the EC2 instances’ subnets to send 0.0.0.0/0 traffic through the internet gateway route. Add a rule to the EC2 instances’ security groups to allow outbound traffic to 0.0.0.0/0.
DCreate public subnets in each Availability Zone. Associate the public subnets with the ALB. Update the route tables for the public subnets with a route to the private subnets. (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Create public subnets in each Availability Zone. Associate the public subnets with the ALB. Update the route tables for the public subnets with a route to the private subnets. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SAA-C03 Question 247

Single page →

Topic 1 · Question 247 · Select all that apply

A company has deployed a database in Amazon RDS for MySQL. Due to increased transactions, the database support team is reporting slow reads against the DB instance and recommends adding a read replica. Which combination of actions should a solutions architect take before implementing this change? (Choose two.)

AEnable binlog replication on the RDS primary node.
BChoose a failover priority for the source DB instance.
CAllow long-running transactions to complete on the source DB instance. (correct answer)
DCreate a global table and specify the AWS Regions where the table will be available.
EEnable automatic backups on the source instance by setting the backup retention period to a value other than 0. (correct answer)

Reveal answer & explanation

Correct answer: C, E

The correct answer is C, E. Option C: Allow long-running transactions to complete on the source DB instance. Option E: Enable automatic backups on the source instance by setting the backup retention period to a value other than 0.

Explanation

AWS Backup centrally automates and manages backups across AWS services.

SAA-C03 Question 248

Single page →

Topic 1 · Question 248

A company runs analytics software on Amazon EC2 instances. The software accepts job requests from users to process data that has been uploaded to Amazon S3. Users report that some submitted data is not being processed Amazon CloudWatch reveals that the EC2 instances have a consistent CPU utilization at or near 100%. The company wants to improve system performance and scale the system based on user load. What should a solutions architect do to meet these requirements?

ACreate a copy of the instance. Place all instances behind an Application Load Balancer.
BCreate an S3 VPC endpoint for Amazon S3. Update the software to reference the endpoint.
CStop the EC2 instances. Modify the instance type to one with a more powerful CPU and more memory. Restart the instances.
DRoute incoming requests to Amazon Simple Queue Service (Amazon SQS). Configure an EC2 Auto Scaling group based on queue size. Update the software to read from the queue. (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Route incoming requests to Amazon Simple Queue Service (Amazon SQS). Configure an EC2 Auto Scaling group based on queue size. Update the software to read from the queue.

Explanation

SAA-C03 Question 249

Single page →

Topic 1 · Question 249

A company is implementing a shared storage solution for a media application that is hosted in the AWS Cloud. The company needs the ability to use SMB clients to access data. The solution must be fully managed. Which AWS solution meets these requirements?

ACreate an AWS Storage Gateway volume gateway. Create a file share that uses the required client protocol. Connect the application server to the file share.
BCreate an AWS Storage Gateway tape gateway. Configure tapes to use Amazon S3. Connect the application server to the tape gateway.
CCreate an Amazon EC2 Windows instance. Install and configure a Windows file share role on the instance. Connect the application server to the file share.
DCreate an Amazon FSx for Windows File Server file system. Attach the file system to the origin server. Connect the application server to the file system. (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Create an Amazon FSx for Windows File Server file system. Attach the file system to the origin server. Connect the application server to the file system.

Explanation

Amazon FSx for Windows File Server provides fully managed SMB/Windows shared file storage. Amazon FSx provides fully managed third-party file systems.

SAA-C03 Question 250

Single page →

Topic 1 · Question 250

A company’s security team requests that network traffic be captured in VPC Flow Logs. The logs will be frequently accessed for 90 days and then accessed intermittently. What should a solutions architect do to meet these requirements when configuring the logs?

AUse Amazon CloudWatch as the target. Set the CloudWatch log group with an expiration of 90 days
BUse Amazon Kinesis as the target. Configure the Kinesis stream to always retain the logs for 90 days.
CUse AWS CloudTrail as the target. Configure CloudTrail to save to an Amazon S3 bucket, and enable S3 Intelligent-Tiering.
DUse Amazon S3 as the target. Enable an S3 Lifecycle policy to transition the logs to S3 Standard-Infrequent Access (S3 Standard-IA) after 90 days. (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Use Amazon S3 as the target. Enable an S3 Lifecycle policy to transition the logs to S3 Standard-Infrequent Access (S3 Standard-IA) after 90 days.

Explanation

S3 Standard-IA reduces cost for infrequently accessed data that still needs high availability. S3 Lifecycle policies automatically transition or expire objects to control storage cost. Amazon S3 provides durable, scalable object storage that is fully managed.

SAA-C03 Question 251

Single page →

Topic 1 · Question 251

An Amazon EC2 instance is located in a private subnet in a new VPC. This subnet does not have outbound internet access, but the EC2 instance needs the ability to download monthly security updates from an outside vendor. What should a solutions architect do to meet these requirements?

ACreate an internet gateway, and attach it to the VPC. Configure the private subnet route table to use the internet gateway as the default route.
BCreate a NAT gateway, and place it in a public subnet. Configure the private subnet route table to use the NAT gateway as the default route. (correct answer)
CCreate a NAT instance, and place it in the same subnet where the EC2 instance is located. Configure the private subnet route table to use the NAT instance as the default route.
DCreate an internet gateway, and attach it to the VPC. Create a NAT instance, and place it in the same subnet where the EC2 instance is located. Configure the private subnet route table to use the internet gateway as the default route.

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Create a NAT gateway, and place it in a public subnet. Configure the private subnet route table to use the NAT gateway as the default route.

Explanation

A NAT gateway lets private subnet resources reach the internet for outbound traffic only. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 252

Single page →

Topic 1 · Question 252

A solutions architect needs to design a system to store client case files. The files are core company assets and are important. The number of files will grow over time. The files must be simultaneously accessible from multiple application servers that run on Amazon EC2 instances. The solution must have built-in redundancy. Which solution meets these requirements?

AAmazon Elastic File System (Amazon EFS) (correct answer)
BAmazon Elastic Block Store (Amazon EBS)
CAmazon S3 Glacier Deep Archive
DAWS Backup

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Amazon Elastic File System (Amazon EFS)

Explanation

Amazon EFS is a shared, elastic NFS file system that multiple instances can mount concurrently across AZs.

SAA-C03 Question 253

Single page →

Topic 1 · Question 253

A solutions architect has created two IAM policies: Policy1 and Policy2. Both policies are attached to an IAM group. A cloud engineer is added as an IAM user to the IAM group. Which action will the cloud engineer be able to perform?

ADeleting IAM users
BDeleting directories
CDeleting Amazon EC2 instances (correct answer)
DDeleting logs from Amazon CloudWatch Logs

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Deleting Amazon EC2 instances

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system.

SAA-C03 Question 254

Single page →

Topic 1 · Question 254

A company is reviewing a recent migration of a three-tier application to a VPC. The security team discovers that the principle of least privilege is not being applied to Amazon EC2 security group ingress and egress rules between the application tiers. What should a solutions architect do to correct this issue?

ACreate security group rules using the instance ID as the source or destination.
BCreate security group rules using the security group ID as the source or destination. (correct answer)
CCreate security group rules using the VPC CIDR blocks as the source or destination.
DCreate security group rules using the subnet CIDR blocks as the source or destination.

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Create security group rules using the security group ID as the source or destination.

SAA-C03 Question 255

Single page →

Topic 1 · Question 255

A company has an ecommerce checkout workflow that writes an order to a database and calls a service to process the payment. Users are experiencing timeouts during the checkout process. When users resubmit the checkout form, multiple unique orders are created for the same desired transaction. How should a solutions architect refactor this workflow to prevent the creation of multiple orders?

AConfigure the web application to send an order message to Amazon Kinesis Data Firehose. Set the payment service to retrieve the message from Kinesis Data Firehose and process the order.
BCreate a rule in AWS CloudTrail to invoke an AWS Lambda function based on the logged application path request. Use Lambda to query the database, call the payment service, and pass in the order information.
CStore the order in the database. Send a message that includes the order number to Amazon Simple Notification Service (Amazon SNS). Set the payment service to poll Amazon SNS, retrieve the message, and process the order.
DStore the order in the database. Send a message that includes the order number to an Amazon Simple Queue Service (Amazon SQS) FIFO queue. Set the payment service to retrieve the message and process the order. Delete the message from the queue. (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Store the order in the database. Send a message that includes the order number to an Amazon Simple Queue Service (Amazon SQS) FIFO queue. Set the payment service to retrieve the message and process the order. Delete t...

Explanation

Amazon SQS is a fully managed message queue that decouples components and absorbs traffic spikes.

SAA-C03 Question 256

Single page →

Topic 1 · Question 256 · Select all that apply

A solutions architect is implementing a document review application using an Amazon S3 bucket for storage. The solution must prevent accidental deletion of the documents and ensure that all versions of the documents are available. Users must be able to download, modify, and upload documents. Which combination of actions should be taken to meet these requirements? (Choose two.)

AEnable a read-only bucket ACL.
BEnable versioning on the bucket. (correct answer)
CAttach an IAM policy to the bucket.
DEnable MFA Delete on the bucket. (correct answer)
EEncrypt the bucket using AWS KMS.

Reveal answer & explanation

Correct answer: B, D

The correct answer is B, D. Option B: Enable versioning on the bucket. Option D: Enable MFA Delete on the bucket.

SAA-C03 Question 257

Single page →

Topic 1 · Question 257

A company is building a solution that will report Amazon EC2 Auto Scaling events across all the applications in an AWS account. The company needs to use a serverless solution to store the EC2 Auto Scaling status data in Amazon S3. The company then will use the data in Amazon S3 to provide near-real-time updates in a dashboard. The solution must not affect the speed of EC2 instance launches. How should the company move the data to Amazon S3 to meet these requirements?

AUse an Amazon CloudWatch metric stream to send the EC2 Auto Scaling status data to Amazon Kinesis Data Firehose. Store the data in Amazon S3. (correct answer)
BLaunch an Amazon EMR cluster to collect the EC2 Auto Scaling status data and send the data to Amazon Kinesis Data Firehose. Store the data in Amazon S3.
CCreate an Amazon EventBridge rule to invoke an AWS Lambda function on a schedule. Configure the Lambda function to send the EC2 Auto Scaling status data directly to Amazon S3.
DUse a bootstrap script during the launch of an EC2 instance to install Amazon Kinesis Agent. Configure Kinesis Agent to collect the EC2 Auto Scaling status data and send the data to Amazon Kinesis Data Firehose. Store the data in Amazon S3.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Use an Amazon CloudWatch metric stream to send the EC2 Auto Scaling status data to Amazon Kinesis Data Firehose. Store the data in Amazon S3.

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon S3 provides durable, scalable object storage that is fully managed. This option meets the real-time / low-latency performance requirement.

SAA-C03 Question 258

Single page →

Topic 1 · Question 258

A company has an application that places hundreds of .csv files into an Amazon S3 bucket every hour. The files are 1 GB in size. Each time a file is uploaded, the company needs to convert the file to Apache Parquet format and place the output file into an S3 bucket. Which solution will meet these requirements with the LEAST operational overhead?

ACreate an AWS Lambda function to download the .csv files, convert the files to Parquet format, and place the output files in an S3 bucket. Invoke the Lambda function for each S3 PUT event.
BCreate an Apache Spark job to read the .csv files, convert the files to Parquet format, and place the output files in an S3 bucket. Create an AWS Lambda function for each S3 PUT event to invoke the Spark job.
CCreate an AWS Glue table and an AWS Glue crawler for the S3 bucket where the application places the .csv files. Schedule an AWS Lambda function to periodically use Amazon Athena to query the AWS Glue table, convert the query results into Parquet format, and place the output files into an S3 bucket.
DCreate an AWS Glue extract, transform, and load (ETL) job to convert the .csv files to Parquet format and place the output files into an S3 bucket. Create an AWS Lambda function for each S3 PUT event to invoke the ETL job. (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Create an AWS Glue extract, transform, and load (ETL) job to convert the.csv files to Parquet format and place the output files into an S3 bucket. Create an AWS Lambda function for each S3 PUT event to invoke the ETL...

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon S3 provides durable, scalable object storage that is fully managed. AWS Glue is a serverless ETL and data-catalog service that prepares and integrates data.

SAA-C03 Question 259

Single page →

Topic 1 · Question 259

A company is implementing new data retention policies for all databases that run on Amazon RDS DB instances. The company must retain daily backups for a minimum period of 2 years. The backups must be consistent and restorable. Which solution should a solutions architect recommend to meet these requirements?

ACreate a backup vault in AWS Backup to retain RDS backups. Create a new backup plan with a daily schedule and an expiration period of 2 years after creation. Assign the RDS DB instances to the backup plan. (correct answer)
BConfigure a backup window for the RDS DB instances for daily snapshots. Assign a snapshot retention policy of 2 years to each RDS DB instance. Use Amazon Data Lifecycle Manager (Amazon DLM) to schedule snapshot deletions.
CConfigure database transaction logs to be automatically backed up to Amazon CloudWatch Logs with an expiration period of 2 years.
DConfigure an AWS Database Migration Service (AWS DMS) replication task. Deploy a replication instance, and configure a change data capture (CDC) task to stream database changes to Amazon S3 as the target. Configure S3 Lifecycle policies to delete the snapshots after 2 years.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Create a backup vault in AWS Backup to retain RDS backups. Create a new backup plan with a daily schedule and an expiration period of 2 years after creation. Assign the RDS DB instances to the backup plan.

Explanation

AWS Backup centrally automates and manages backups across AWS services. Amazon RDS is a managed relational database that handles patching, backups and failover.

SAA-C03 Question 260

Single page →

Topic 1 · Question 260

A company’s compliance team needs to move its file shares to AWS. The shares run on a Windows Server SMB file share. A self-managed on-premises Active Directory controls access to the files and folders. The company wants to use Amazon FSx for Windows File Server as part of the solution. The company must ensure that the on-premises Active Directory groups restrict access to the FSx for Windows File Server SMB compliance shares, folders, and files after the move to AWS. The company has created an FSx for Windows File Server file system. Which solution will meet these requirements?

ACreate an Active Directory Connector to connect to the Active Directory. Map the Active Directory groups to IAM groups to restrict access.
BAssign a tag with a Restrict tag key and a Compliance tag value. Map the Active Directory groups to IAM groups to restrict access.
CCreate an IAM service-linked role that is linked directly to FSx for Windows File Server to restrict access.
DJoin the file system to the Active Directory to restrict access. (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Join the file system to the Active Directory to restrict access.

Showing questions 241–260 of 1019 · Page 13 of 51