πŸ”

SAA-C03 β€” questions

Page 15 of 51 Β· 1019 total questions.

Topic 1 Β· Question 281

A company runs a fleet of web servers using an Amazon RDS for PostgreSQL DB instance. After a routine compliance check, the company sets a standard that requires a recovery point objective (RPO) of less than 1 second for all its production databases. Which solution meets these requirements?

  • AEnable a Multi-AZ deployment for the DB instance. (correct answer)
  • BEnable auto scaling for the DB instance in one Availability Zone.
  • CConfigure the DB instance in one Availability Zone, and create multiple read replicas in a separate Availability Zone.
  • DConfigure the DB instance in one Availability Zone, and configure AWS Database Migration Service (AWS DMS) change data capture (CDC) tasks.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Enable a Multi-AZ deployment for the DB instance.

Topic 1 Β· Question 282

A company runs a web application that is deployed on Amazon EC2 instances in the private subnet of a VPC. An Application Load Balancer (ALB) that extends across the public subnets directs web traffic to the EC2 instances. The company wants to implement new security measures to restrict inbound traffic from the ALB to the EC2 instances while preventing access from any other source inside or outside the private subnet of the EC2 instances. Which solution will meet these requirements?

  • AConfigure a route in a route table to direct traffic from the internet to the private IP addresses of the EC2 instances.
  • BConfigure the security group for the EC2 instances to only allow traffic that comes from the security group for the ALB. (correct answer)
  • CMove the EC2 instances into the public subnet. Give the EC2 instances a set of Elastic IP addresses.
  • DConfigure the security group for the ALB to allow any TCP traffic on any port.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Configure the security group for the EC2 instances to only allow traffic that comes from the security group for the ALB.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. AWS Config tracks resource configuration changes and evaluates compliance.

Topic 1 Β· Question 283

A research company runs experiments that are powered by a simulation application and a visualization application. The simulation application runs on Linux and outputs intermediate data to an NFS share every 5 minutes. The visualization application is a Windows desktop application that displays the simulation output and requires an SMB file system. The company maintains two synchronized file systems. This strategy is causing data duplication and inefficient resource usage. The company needs to migrate the applications to AWS without making code changes to either application. Which solution will meet these requirements?

  • AMigrate both applications to AWS Lambda. Create an Amazon S3 bucket to exchange data between the applications.
  • BMigrate both applications to Amazon Elastic Container Service (Amazon ECS). Configure Amazon FSx File Gateway for storage.
  • CMigrate the simulation application to Linux Amazon EC2 instances. Migrate the visualization application to Windows EC2 instances. Configure Amazon Simple Queue Service (Amazon SQS) to exchange data between the applications.
  • DMigrate the simulation application to Linux Amazon EC2 instances. Migrate the visualization application to Windows EC2 instances. Configure Amazon FSx for NetApp ONTAP for storage. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Migrate the simulation application to Linux Amazon EC2 instances. Migrate the visualization application to Windows EC2 instances. Configure Amazon FSx for NetApp ONTAP for storage.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon FSx provides fully managed third-party file systems. AWS Config tracks resource configuration changes and evaluates compliance. This option needs the least custom development effort.

Topic 1 Β· Question 284

As part of budget planning, management wants a report of AWS billed items listed by user. The data will be used to create department budgets. A solutions architect needs to determine the most efficient way to obtain this report information. Which solution meets these requirements?

  • ARun a query with Amazon Athena to generate the report.
  • BCreate a report in Cost Explorer and download the report. (correct answer)
  • CAccess the bill details from the billing dashboard and download the bill.
  • DModify a cost budget in AWS Budgets to alert with Amazon Simple Email Service (Amazon SES).
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create a report in Cost Explorer and download the report.

Explanation

AWS Cost Explorer analyzes and visualizes AWS spend.

Topic 1 Β· Question 285

A company hosts its static website by using Amazon S3. The company wants to add a contact form to its webpage. The contact form will have dynamic server-side components for users to input their name, email address, phone number, and user message. The company anticipates that there will be fewer than 100 site visits each month. Which solution will meet these requirements MOST cost-effectively?

  • AHost a dynamic contact form page in Amazon Elastic Container Service (Amazon ECS). Set up Amazon Simple Email Service (Amazon SES) to connect to any third-party email provider.
  • BCreate an Amazon API Gateway endpoint with an AWS Lambda backend that makes a call to Amazon Simple Email Service (Amazon SES). (correct answer)
  • CConvert the static webpage to dynamic by deploying Amazon Lightsail. Use client-side scripting to build the contact form. Integrate the form with Amazon WorkMail.
  • DCreate a t2.micro Amazon EC2 instance. Deploy a LAMP (Linux, Apache, MySQL, PHP/Perl/Python) stack to host the webpage. Use client-side scripting to build the contact form. Integrate the form with Amazon WorkMail.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create an Amazon API Gateway endpoint with an AWS Lambda backend that makes a call to Amazon Simple Email Service (Amazon SES).

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon API Gateway is a fully managed front door for creating and securing APIs at scale. This option delivers the requirement at the lowest cost.

Topic 1 Β· Question 286

A company has a static website that is hosted on Amazon CloudFront in front of Amazon S3. The static website uses a database backend. The company notices that the website does not reflect updates that have been made in the website’s Git repository. The company checks the continuous integration and continuous delivery (CI/CD) pipeline between the Git repository and Amazon S3. The company verifies that the webhooks are configured properly and that the CI/CD pipeline is sending messages that indicate successful deployments. A solutions architect needs to implement a solution that displays the updates on the website. Which solution will meet these requirements?

  • AAdd an Application Load Balancer.
  • BAdd Amazon ElastiCache for Redis or Memcached to the database layer of the web application.
  • CInvalidate the CloudFront cache. (correct answer)
  • DUse AWS Certificate Manager (ACM) to validate the website’s SSL certificate.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Invalidate the CloudFront cache.

Explanation

Amazon CloudFront caches content at edge locations to reduce latency and offload origins.

Topic 1 Β· Question 287

A company wants to migrate a Windows-based application from on premises to the AWS Cloud. The application has three tiers: an application tier, a business tier, and a database tier with Microsoft SQL Server. The company wants to use specific features of SQL Server such as native backups and Data Quality Services. The company also needs to share files for processing between the tiers. How should a solutions architect design the architecture to meet these requirements?

  • AHost all three tiers on Amazon EC2 instances. Use Amazon FSx File Gateway for file sharing between the tiers.
  • BHost all three tiers on Amazon EC2 instances. Use Amazon FSx for Windows File Server for file sharing between the tiers. (correct answer)
  • CHost the application tier and the business tier on Amazon EC2 instances. Host the database tier on Amazon RDS. Use Amazon Elastic File System (Amazon EFS) for file sharing between the tiers.
  • DHost the application tier and the business tier on Amazon EC2 instances. Host the database tier on Amazon RDS. Use a Provisioned IOPS SSD (io2) Amazon Elastic Block Store (Amazon EBS) volume for file sharing between the tiers.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Host all three tiers on Amazon EC2 instances. Use Amazon FSx for Windows File Server for file sharing between the tiers.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon FSx for Windows File Server provides fully managed SMB/Windows shared file storage. Amazon FSx provides fully managed third-party file systems.

Topic 1 Β· Question 288

A company is migrating a Linux-based web server group to AWS. The web servers must access files in a shared file store for some content. The company must not make any changes to the application. What should a solutions architect do to meet these requirements?

  • ACreate an Amazon S3 Standard bucket with access to the web servers.
  • BConfigure an Amazon CloudFront distribution with an Amazon S3 bucket as the origin.
  • CCreate an Amazon Elastic File System (Amazon EFS) file system. Mount the EFS file system on all web servers. (correct answer)
  • DConfigure a General Purpose SSD (gp3) Amazon Elastic Block Store (Amazon EBS) volume. Mount the EBS volume to all web servers.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create an Amazon Elastic File System (Amazon EFS) file system. Mount the EFS file system on all web servers.

Explanation

Amazon EFS is a shared, elastic NFS file system that multiple instances can mount concurrently across AZs.

Topic 1 Β· Question 289

A company has an AWS Lambda function that needs read access to an Amazon S3 bucket that is located in the same AWS account. Which solution will meet these requirements in the MOST secure manner?

  • AApply an S3 bucket policy that grants read access to the S3 bucket.
  • BApply an IAM role to the Lambda function. Apply an IAM policy to the role to grant read access to the S3 bucket. (correct answer)
  • CEmbed an access key and a secret key in the Lambda function’s code to grant the required IAM permissions for read access to the S3 bucket.
  • DApply an IAM role to the Lambda function. Apply an IAM policy to the role to grant read access to all S3 buckets in the account.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Apply an IAM role to the Lambda function. Apply an IAM policy to the role to grant read access to the S3 bucket.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon S3 provides durable, scalable object storage that is fully managed. An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials.

Topic 1 Β· Question 290

A company hosts a web application on multiple Amazon EC2 instances. The EC2 instances are in an Auto Scaling group that scales in response to user demand. The company wants to optimize cost savings without making a long-term commitment. Which EC2 instance purchasing option should a solutions architect recommend to meet these requirements?

  • ADedicated Instances only
  • BOn-Demand Instances only
  • CA mix of On-Demand Instances and Spot Instances (correct answer)
  • DA mix of On-Demand Instances and Reserved Instances
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: A mix of On-Demand Instances and Spot Instances

Explanation

Spot Instances use spare capacity at a large discount, ideal for fault-tolerant or interruptible workloads.

Topic 1 Β· Question 291 Β· Select all that apply

A media company uses Amazon CloudFront for its publicly available streaming video content. The company wants to secure the video content that is hosted in Amazon S3 by controlling who has access. Some of the company’s users are using a custom HTTP client that does not support cookies. Some of the company’s users are unable to change the hardcoded URLs that they are using for access. Which services or methods will meet these requirements with the LEAST impact to the users? (Choose two.)

  • ASigned cookies (correct answer)
  • BSigned URLs (correct answer)
  • CAWS AppSync
  • DJSON Web Token (JWT)
  • EAWS Secrets Manager
Reveal answer & explanation
Correct answer: A, B

The correct answer is A, B. Option A: Signed cookies Option B: Signed URLs This option meets the real-time / low-latency performance requirement.

Topic 1 Β· Question 292 Β· Select all that apply

A company is preparing a new data platform that will ingest real-time streaming data from multiple sources. The company needs to transform the data before writing the data to Amazon S3. The company needs the ability to use SQL to query the transformed data. Which solutions will meet these requirements? (Choose two.)

  • AUse Amazon Kinesis Data Streams to stream the data. Use Amazon Kinesis Data Analytics to transform the data. Use Amazon Kinesis Data Firehose to write the data to Amazon S3. Use Amazon Athena to query the transformed data from Amazon S3. (correct answer)
  • BUse Amazon Managed Streaming for Apache Kafka (Amazon MSK) to stream the data. Use AWS Glue to transform the data and to write the data to Amazon S3. Use Amazon Athena to query the transformed data from Amazon S3. (correct answer)
  • CUse AWS Database Migration Service (AWS DMS) to ingest the data. Use Amazon EMR to transform the data and to write the data to Amazon S3. Use Amazon Athena to query the transformed data from Amazon S3.
  • DUse Amazon Managed Streaming for Apache Kafka (Amazon MSK) to stream the data. Use Amazon Kinesis Data Analytics to transform the data and to write the data to Amazon S3. Use the Amazon RDS query editor to query the transformed data from Amazon S3.
  • EUse Amazon Kinesis Data Streams to stream the data. Use AWS Glue to transform the data. Use Amazon Kinesis Data Firehose to write the data to Amazon S3. Use the Amazon RDS query editor to query the transformed data from Amazon S3.
Reveal answer & explanation
Correct answer: A, B

The correct answer is A, B. Option A: Use Amazon Kinesis Data Streams to stream the data. Use Amazon Kinesis Data Analytics to transform the data. Use Amazon Kinesis Data Firehose to write the data to Amazon S3. Use Amazon Athena to query the transformed... Option B: Use Amazon Managed Streaming for Apache Kafka (Amazon MSK) to stream the data. Use AWS Glue to transform the data and to write the data to Amazon S3. Use Amazon Athena to query the transformed data from Amazon S3.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Kinesis Data Firehose delivers streaming data to destinations like S3/Redshift with no servers to manage. Kinesis Data Streams ingests and processes high-volume real-time streaming data. This option meets the real-time / low-latency performance requirement.

Topic 1 Β· Question 293

A company has an on-premises volume backup solution that has reached its end of life. The company wants to use AWS as part of a new backup solution and wants to maintain local access to all the data while it is backed up on AWS. The company wants to ensure that the data backed up on AWS is automatically and securely transferred. Which solution meets these requirements?

  • AUse AWS Snowball to migrate data out of the on-premises solution to Amazon S3. Configure on-premises systems to mount the Snowball S3 endpoint to provide local access to the data.
  • BUse AWS Snowball Edge to migrate data out of the on-premises solution to Amazon S3. Use the Snowball Edge file interface to provide on-premises systems with local access to the data.
  • CUse AWS Storage Gateway and configure a cached volume gateway. Run the Storage Gateway software appliance on premises and configure a percentage of data to cache locally. Mount the gateway storage volumes to provide local access to the data.
  • DUse AWS Storage Gateway and configure a stored volume gateway. Run the Storage Gateway software appliance on premises and map the gateway storage volumes to on-premises storage. Mount the gateway storage volumes to provide local access to the data. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Use AWS Storage Gateway and configure a stored volume gateway. Run the Storage Gateway software appliance on premises and map the gateway storage volumes to on-premises storage. Mount the gateway storage volumes to pr...

Explanation

AWS Storage Gateway bridges on-premises apps to AWS storage with local caching. AWS Config tracks resource configuration changes and evaluates compliance.

Topic 1 Β· Question 294

An application that is hosted on Amazon EC2 instances needs to access an Amazon S3 bucket. Traffic must not traverse the internet. How should a solutions architect configure access to meet these requirements?

  • ACreate a private hosted zone by using Amazon Route 53.
  • BSet up a gateway VPC endpoint for Amazon S3 in the VPC. (correct answer)
  • CConfigure the EC2 instances to use a NAT gateway to access the S3 bucket.
  • DEstablish an AWS Site-to-Site VPN connection between the VPC and the S3 bucket.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Set up a gateway VPC endpoint for Amazon S3 in the VPC.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. A gateway VPC endpoint gives private, no-cost access to Amazon S3 and DynamoDB from within the VPC. A VPC endpoint provides private connectivity to AWS services without traversing the public internet.

Topic 1 Β· Question 295

An ecommerce company stores terabytes of customer data in the AWS Cloud. The data contains personally identifiable information (PII). The company wants to use the data in three applications. Only one of the applications needs to process the PII. The PII must be removed before the other two applications process the data. Which solution will meet these requirements with the LEAST operational overhead?

  • AStore the data in an Amazon DynamoDB table. Create a proxy application layer to intercept and process the data that each application requests.
  • BStore the data in an Amazon S3 bucket. Process and transform the data by using S3 Object Lambda before returning the data to the requesting application. (correct answer)
  • CProcess the data and store the transformed data in three separate Amazon S3 buckets so that each application has its own custom dataset. Point each application to its respective S3 bucket.
  • DProcess the data and store the transformed data in three separate Amazon DynamoDB tables so that each application has its own custom dataset. Point each application to its respective DynamoDB table.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Store the data in an Amazon S3 bucket. Process and transform the data by using S3 Object Lambda before returning the data to the requesting application.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon S3 provides durable, scalable object storage that is fully managed.

Topic 1 Β· Question 296

A development team has launched a new application that is hosted on Amazon EC2 instances inside a development VPC. A solutions architect needs to create a new VPC in the same account. The new VPC will be peered with the development VPC. The VPC CIDR block for the development VPC is 192.168.0.0/24. The solutions architect needs to create a CIDR block for the new VPC. The CIDR block must be valid for a VPC peering connection to the development VPC. What is the SMALLEST CIDR block that meets these requirements?

  • A10.0.1.0/32
  • B192.168.0.0/24
  • C192.168.1.0/32
  • D10.0.1.0/24 (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: 10.0.1.0/24.

Topic 1 Β· Question 297

A company deploys an application on five Amazon EC2 instances. An Application Load Balancer (ALB) distributes traffic to the instances by using a target group. The average CPU usage on each of the instances is below 10% most of the time, with occasional surges to 65%. A solutions architect needs to implement a solution to automate the scalability of the application. The solution must optimize the cost of the architecture and must ensure that the application has enough CPU resources when surges occur. Which solution will meet these requirements?

  • ACreate an Amazon CloudWatch alarm that enters the ALARM state when the CPUUtilization metric is less than 20%. Create an AWS Lambda function that the CloudWatch alarm invokes to terminate one of the EC2 instances in the ALB target group.
  • BCreate an EC2 Auto Scaling group. Select the existing ALB as the load balancer and the existing target group as the target group. Set a target tracking scaling policy that is based on the ASGAverageCPUUtilization metric. Set the minimum instances to 2, the desired capacity to 3, the maximum instances to 6, and the target value to 50%. Add the EC2 instances to the Auto Scaling group. (correct answer)
  • CCreate an EC2 Auto Scaling group. Select the existing ALB as the load balancer and the existing target group as the target group. Set the minimum instances to 2, the desired capacity to 3, and the maximum instances to 6. Add the EC2 instances to the Auto Scaling group.
  • DCreate two Amazon CloudWatch alarms. Configure the first CloudWatch alarm to enter the ALARM state when the average CPUUtilization metric is below 20%. Configure the second CloudWatch alarm to enter the ALARM state when the average CPUUtilization matric is above 50%. Configure the alarms to publish to an Amazon Simple Notification Service (Amazon SNS) topic to send an email message. After receiving the message, log in to decrease or increase the number of EC2 instances that are running.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create an EC2 Auto Scaling group. Select the existing ALB as the load balancer and the existing target group as the target group. Set a target tracking scaling policy that is based on the ASGAverageCPUUtilization metr...

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Amazon EC2 provides resizable virtual servers when you need full control of the operating system. A load balancer distributes traffic across targets in multiple AZs for availability and scale.

Topic 1 Β· Question 298

A company is running a critical business application on Amazon EC2 instances behind an Application Load Balancer. The EC2 instances run in an Auto Scaling group and access an Amazon RDS DB instance. The design did not pass an operational review because the EC2 instances and the DB instance are all located in a single Availability Zone. A solutions architect must update the design to use a second Availability Zone. Which solution will make the application highly available?

  • AProvision a subnet in each Availability Zone. Configure the Auto Scaling group to distribute the EC2 instances across both Availability Zones. Configure the DB instance with connections to each network.
  • BProvision two subnets that extend across both Availability Zones. Configure the Auto Scaling group to distribute the EC2 instances across both Availability Zones. Configure the DB instance with connections to each network.
  • CProvision a subnet in each Availability Zone. Configure the Auto Scaling group to distribute the EC2 instances across both Availability Zones. Configure the DB instance for Multi-AZ deployment. (correct answer)
  • DProvision a subnet that extends across both Availability Zones. Configure the Auto Scaling group to distribute the EC2 instances across both Availability Zones. Configure the DB instance for Multi-AZ deployment.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Provision a subnet in each Availability Zone. Configure the Auto Scaling group to distribute the EC2 instances across both Availability Zones. Configure the DB instance for Multi-AZ deployment.

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Amazon EC2 provides resizable virtual servers when you need full control of the operating system. AWS Config tracks resource configuration changes and evaluates compliance. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

Topic 1 Β· Question 299

A research laboratory needs to process approximately 8 TB of data. The laboratory requires sub-millisecond latencies and a minimum throughput of 6 GBps for the storage subsystem. Hundreds of Amazon EC2 instances that run Amazon Linux will distribute and process the data. Which solution will meet the performance requirements?

  • ACreate an Amazon FSx for NetApp ONTAP file system. Sat each volume’ tiering policy to ALL. Import the raw data into the file system. Mount the fila system on the EC2 instances.
  • BCreate an Amazon S3 bucket to store the raw data. Create an Amazon FSx for Lustre file system that uses persistent SSD storage. Select the option to import data from and export data to Amazon S3. Mount the file system on the EC2 instances. (correct answer)
  • CCreate an Amazon S3 bucket to store the raw data. Create an Amazon FSx for Lustre file system that uses persistent HDD storage. Select the option to import data from and export data to Amazon S3. Mount the file system on the EC2 instances.
  • DCreate an Amazon FSx for NetApp ONTAP file system. Set each volume’s tiering policy to NONE. Import the raw data into the file system. Mount the file system on the EC2 instances.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create an Amazon S3 bucket to store the raw data. Create an Amazon FSx for Lustre file system that uses persistent SSD storage. Select the option to import data from and export data to Amazon S3. Mount the file system...

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon S3 provides durable, scalable object storage that is fully managed. Amazon FSx for Lustre delivers high-performance file storage for compute-intensive workloads.

Topic 1 Β· Question 300

A company needs to migrate a legacy application from an on-premises data center to the AWS Cloud because of hardware capacity constraints. The application runs 24 hours a day, 7 days a week. The application’s database storage continues to grow over time. What should a solutions architect do to meet these requirements MOST cost-effectively?

  • AMigrate the application layer to Amazon EC2 Spot Instances. Migrate the data storage layer to Amazon S3.
  • BMigrate the application layer to Amazon EC2 Reserved Instances. Migrate the data storage layer to Amazon RDS On-Demand Instances.
  • CMigrate the application layer to Amazon EC2 Reserved Instances. Migrate the data storage layer to Amazon Aurora Reserved Instances. (correct answer)
  • DMigrate the application layer to Amazon EC2 On-Demand Instances. Migrate the data storage layer to Amazon RDS Reserved Instances.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Migrate the application layer to Amazon EC2 Reserved Instances. Migrate the data storage layer to Amazon Aurora Reserved Instances.

Explanation

Reserved Instances lower cost for steady-state, predictable long-running workloads. Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon Aurora is a high-performance managed relational database with built-in replication and failover. This option delivers the requirement at the lowest cost.

Showing questions 281–300 of 1019 Β· Page 15 of 51