🔍

SAA-C03 — questions

Page 16 of 51 · 1019 total questions.

Topic 1 · Question 301

A university research laboratory needs to migrate 30 TB of data from an on-premises Windows file server to Amazon FSx for Windows File Server. The laboratory has a 1 Gbps network link that many other departments in the university share. The laboratory wants to implement a data migration service that will maximize the performance of the data transfer. However, the laboratory needs to be able to control the amount of bandwidth that the service uses to minimize the impact on other departments. The data migration must take place within the next 5 days. Which AWS solution will meet these requirements?

  • AAWS Snowcone
  • BAmazon FSx File Gateway
  • CAWS DataSync (correct answer)
  • DAWS Transfer Family
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: AWS DataSync

Explanation

AWS DataSync automates and accelerates online data transfer to AWS with minimal effort.

Topic 1 · Question 302

A company wants to create a mobile app that allows users to stream slow-motion video clips on their mobile devices. Currently, the app captures video clips and uploads the video clips in raw format into an Amazon S3 bucket. The app retrieves these video clips directly from the S3 bucket. However, the videos are large in their raw format. Users are experiencing issues with buffering and playback on mobile devices. The company wants to implement solutions to maximize the performance and scalability of the app while minimizing operational overhead. Which combination of solutions will meet these requirements? (Choose two.)

  • ADeploy Amazon CloudFront for content delivery and caching. (correct answer)
  • BUse AWS DataSync to replicate the video files across AW'S Regions in other S3 buckets.
  • CUse Amazon Elastic Transcoder to convert the video files to more appropriate formats.
  • DDeploy an Auto Sealing group of Amazon EC2 instances in Local Zones for content delivery and caching.
  • EDeploy an Auto Scaling group of Amazon EC2 instances to convert the video files to more appropriate formats.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Deploy Amazon CloudFront for content delivery and caching.

Explanation

Amazon CloudFront caches content at edge locations to reduce latency and offload origins. This option decouples the components so they scale independently and absorb load spikes.

Topic 1 · Question 303

A company is launching a new application deployed on an Amazon Elastic Container Service (Amazon ECS) cluster and is using the Fargate launch type for ECS tasks. The company is monitoring CPU and memory usage because it is expecting high traffic to the application upon its launch. However, the company wants to reduce costs when utilization decreases. What should a solutions architect recommend?

  • AUse Amazon EC2 Auto Scaling to scale at certain periods based on previous traffic patterns.
  • BUse an AWS Lambda function to scale Amazon ECS based on metric breaches that trigger an Amazon CloudWatch alarm.
  • CUse Amazon EC2 Auto Scaling with simple scaling policies to scale when ECS metric breaches trigger an Amazon CloudWatch alarm.
  • DUse AWS Application Auto Scaling with target tracking policies to scale when ECS metric breaches trigger an Amazon CloudWatch alarm. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Use AWS Application Auto Scaling with target tracking policies to scale when ECS metric breaches trigger an Amazon CloudWatch alarm.

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Amazon ECS orchestrates containers and integrates natively with AWS networking and IAM. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health. This option delivers the requirement at the lowest cost.

Topic 1 · Question 304

A company recently created a disaster recovery site in a different AWS Region. The company needs to transfer large amounts of data back and forth between NFS file systems in the two Regions on a periodic basis. Which solution will meet these requirements with the LEAST operational overhead?

  • AUse AWS DataSync. (correct answer)
  • BUse AWS Snowball devices.
  • CSet up an SFTP server on Amazon EC2.
  • DUse AWS Database Migration Service (AWS DMS).
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use AWS DataSync.

Explanation

AWS DataSync automates and accelerates online data transfer to AWS with minimal effort.

Topic 1 · Question 305

A company is designing a shared storage solution for a gaming application that is hosted in the AWS Cloud. The company needs the ability to use SMB clients to access data. The solution must be fully managed. Which AWS solution meets these requirements?

  • ACreate an AWS DataSync task that shares the data as a mountable file system. Mount the file system to the application server.
  • BCreate an Amazon EC2 Windows instance. Install and configure a Windows file share role on the instance. Connect the application server to the file share.
  • CCreate an Amazon FSx for Windows File Server file system. Attach the file system to the origin server. Connect the application server to the file system. (correct answer)
  • DCreate an Amazon S3 bucket. Assign an IAM role to the application to grant access to the S3 bucket. Mount the S3 bucket to the application server.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create an Amazon FSx for Windows File Server file system. Attach the file system to the origin server. Connect the application server to the file system.

Explanation

Amazon FSx for Windows File Server provides fully managed SMB/Windows shared file storage. Amazon FSx provides fully managed third-party file systems.

Topic 1 · Question 306

A company wants to run an in-memory database for a latency-sensitive application that runs on Amazon EC2 instances. The application processes more than 100,000 transactions each minute and requires high network throughput. A solutions architect needs to provide a cost-effective network design that minimizes data transfer charges. Which solution meets these requirements?

  • ALaunch all EC2 instances in the same Availability Zone within the same AWS Region. Specify a placement group with cluster strategy when launching EC2 instances. (correct answer)
  • BLaunch all EC2 instances in different Availability Zones within the same AWS Region. Specify a placement group with partition strategy when launching EC2 instances.
  • CDeploy an Auto Scaling group to launch EC2 instances in different Availability Zones based on a network utilization target.
  • DDeploy an Auto Scaling group with a step scaling policy to launch EC2 instances in different Availability Zones.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Launch all EC2 instances in the same Availability Zone within the same AWS Region. Specify a placement group with cluster strategy when launching EC2 instances.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. This option delivers the requirement at the lowest cost.

Topic 1 · Question 307

A company that primarily runs its application servers on premises has decided to migrate to AWS. The company wants to minimize its need to scale its Internet Small Computer Systems Interface (iSCSI) storage on premises. The company wants only its recently accessed data to remain stored locally. Which AWS solution should the company use to meet these requirements?

  • AAmazon S3 File Gateway
  • BAWS Storage Gateway Tape Gateway
  • CAWS Storage Gateway Volume Gateway stored volumes
  • DAWS Storage Gateway Volume Gateway cached volumes (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: AWS Storage Gateway Volume Gateway cached volumes

Explanation

AWS Storage Gateway bridges on-premises apps to AWS storage with local caching.

Topic 1 · Question 308 · Select all that apply

A company has multiple AWS accounts that use consolidated billing. The company runs several active high performance Amazon RDS for Oracle On-Demand DB instances for 90 days. The company’s finance team has access to AWS Trusted Advisor in the consolidated billing account and all other AWS accounts. The finance team needs to use the appropriate AWS account to access the Trusted Advisor check recommendations for RDS. The finance team must review the appropriate Trusted Advisor check to reduce RDS costs. Which combination of steps should the finance team take to meet these requirements? (Choose two.)

  • AUse the Trusted Advisor recommendations from the account where the RDS instances are running.
  • BUse the Trusted Advisor recommendations from the consolidated billing account to see all RDS instance checks at the same time. (correct answer)
  • CReview the Trusted Advisor check for Amazon RDS Reserved Instance Optimization.
  • DReview the Trusted Advisor check for Amazon RDS Idle DB Instances. (correct answer)
  • EReview the Trusted Advisor check for Amazon Redshift Reserved Node Optimization.
Reveal answer & explanation
Correct answer: B, D

The correct answer is B, D. Option B: Use the Trusted Advisor recommendations from the consolidated billing account to see all RDS instance checks at the same time. Option D: Review the Trusted Advisor check for Amazon RDS Idle DB Instances.

Explanation

Amazon RDS is a managed relational database that handles patching, backups and failover. AWS Trusted Advisor recommends cost, performance and security optimizations.

Topic 1 · Question 309

A solutions architect needs to optimize storage costs. The solutions architect must identify any Amazon S3 buckets that are no longer being accessed or are rarely accessed. Which solution will accomplish this goal with the LEAST operational overhead?

  • AAnalyze bucket access patterns by using the S3 Storage Lens dashboard for advanced activity metrics. (correct answer)
  • BAnalyze bucket access patterns by using the S3 dashboard in the AWS Management Console.
  • CTurn on the Amazon CloudWatch BucketSizeBytes metric for buckets. Analyze bucket access patterns by using the metrics data with Amazon Athena.
  • DTurn on AWS CloudTrail for S3 object monitoring. Analyze bucket access patterns by using CloudTrail logs that are integrated with Amazon CloudWatch Logs.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Analyze bucket access patterns by using the S3 Storage Lens dashboard for advanced activity metrics.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed.

Topic 1 · Question 310

A company sells datasets to customers who do research in artificial intelligence and machine learning (AI/ML). The datasets are large, formatted files that are stored in an Amazon S3 bucket in the us-east-1 Region. The company hosts a web application that the customers use to purchase access to a given dataset. The web application is deployed on multiple Amazon EC2 instances behind an Application Load Balancer. After a purchase is made, customers receive an S3 signed URL that allows access to the files. The customers are distributed across North America and Europe. The company wants to reduce the cost that is associated with data transfers and wants to maintain or improve performance. What should a solutions architect do to meet these requirements?

  • AConfigure S3 Transfer Acceleration on the existing S3 bucket. Direct customer requests to the S3 Transfer Acceleration endpoint. Continue to use S3 signed URLs for access control.
  • BDeploy an Amazon CloudFront distribution with the existing S3 bucket as the origin. Direct customer requests to the CloudFront URL. Switch to CloudFront signed URLs for access control. (correct answer)
  • CSet up a second S3 bucket in the eu-central-1 Region with S3 Cross-Region Replication between the buckets. Direct customer requests to the closest Region. Continue to use S3 signed URLs for access control.
  • DModify the web application to enable streaming of the datasets to end users. Configure the web application to read the data from the existing S3 bucket. Implement access control directly in the application.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Deploy an Amazon CloudFront distribution with the existing S3 bucket as the origin. Direct customer requests to the CloudFront URL. Switch to CloudFront signed URLs for access control.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon CloudFront caches content at edge locations to reduce latency and offload origins.

Topic 1 · Question 311

A company is using AWS to design a web application that will process insurance quotes. Users will request quotes from the application. Quotes must be separated by quote type, must be responded to within 24 hours, and must not get lost. The solution must maximize operational efficiency and must minimize maintenance. Which solution meets these requirements?

  • ACreate multiple Amazon Kinesis data streams based on the quote type. Configure the web application to send messages to the proper data stream. Configure each backend group of application servers to use the Kinesis Client Library (KCL) to pool messages from its own data stream.
  • BCreate an AWS Lambda function and an Amazon Simple Notification Service (Amazon SNS) topic for each quote type. Subscribe the Lambda function to its associated SNS topic. Configure the application to publish requests for quotes to the appropriate SNS topic.
  • CCreate a single Amazon Simple Notification Service (Amazon SNS) topic. Subscribe Amazon Simple Queue Service (Amazon SQS) queues to the SNS topic. Configure SNS message filtering to publish messages to the proper SQS queue based on the quote type. Configure each backend application server to use its own SQS queue. (correct answer)
  • DCreate multiple Amazon Kinesis Data Firehose delivery streams based on the quote type to deliver data streams to an Amazon OpenSearch Service cluster. Configure the application to send messages to the proper delivery stream. Configure each backend group of application servers to search for the messages from OpenSearch Service and process them accordingly.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create a single Amazon Simple Notification Service (Amazon SNS) topic. Subscribe Amazon Simple Queue Service (Amazon SQS) queues to the SNS topic. Configure SNS message filtering to publish messages to the proper SQS...

Explanation

Amazon SQS is a fully managed message queue that decouples components and absorbs traffic spikes. Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers. AWS Config tracks resource configuration changes and evaluates compliance.

Topic 1 · Question 312

A company has an application that runs on several Amazon EC2 instances. Each EC2 instance has multiple Amazon Elastic Block Store (Amazon EBS) data volumes attached to it. The application’s EC2 instance configuration and data need to be backed up nightly. The application also needs to be recoverable in a different AWS Region. Which solution will meet these requirements in the MOST operationally efficient way?

  • AWrite an AWS Lambda function that schedules nightly snapshots of the application’s EBS volumes and copies the snapshots to a different Region.
  • BCreate a backup plan by using AWS Backup to perform nightly backups. Copy the backups to another Region. Add the application’s EC2 instances as resources. (correct answer)
  • CCreate a backup plan by using AWS Backup to perform nightly backups. Copy the backups to another Region. Add the application’s EBS volumes as resources.
  • DWrite an AWS Lambda function that schedules nightly snapshots of the application's EBS volumes and copies the snapshots to a different Availability Zone.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create a backup plan by using AWS Backup to perform nightly backups. Copy the backups to another Region. Add the application’s EC2 instances as resources.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. AWS Backup centrally automates and manages backups across AWS services.

Topic 1 · Question 313

A company is building a mobile app on AWS. The company wants to expand its reach to millions of users. The company needs to build a platform so that authorized users can watch the company’s content on their mobile devices. What should a solutions architect recommend to meet these requirements?

  • APublish content to a public Amazon S3 bucket. Use AWS Key Management Service (AWS KMS) keys to stream content.
  • BSet up IPsec VPN between the mobile app and the AWS environment to stream content.
  • CUse Amazon CloudFront. Provide signed URLs to stream content. (correct answer)
  • DSet up AWS Client VPN between the mobile app and the AWS environment to stream content.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Use Amazon CloudFront. Provide signed URLs to stream content.

Explanation

Amazon CloudFront caches content at edge locations to reduce latency and offload origins.

Topic 1 · Question 314

A company has an on-premises MySQL database used by the global sales team with infrequent access patterns. The sales team requires the database to have minimal downtime. A database administrator wants to migrate this database to AWS without selecting a particular instance type in anticipation of more users in the future. Which service should a solutions architect recommend?

  • AAmazon Aurora MySQL
  • BAmazon Aurora Serverless for MySQL (correct answer)
  • CAmazon Redshift Spectrum
  • DAmazon RDS for MySQL
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Amazon Aurora Serverless for MySQL

Explanation

Aurora Serverless auto-scales database capacity and is cost-effective for variable workloads. Amazon Aurora is a high-performance managed relational database with built-in replication and failover.

Topic 1 · Question 315

A company experienced a breach that affected several applications in its on-premises data center. The attacker took advantage of vulnerabilities in the custom applications that were running on the servers. The company is now migrating its applications to run on Amazon EC2 instances. The company wants to implement a solution that actively scans for vulnerabilities on the EC2 instances and sends a report that details the findings. Which solution will meet these requirements?

  • ADeploy AWS Shield to scan the EC2 instances for vulnerabilities. Create an AWS Lambda function to log any findings to AWS CloudTrail.
  • BDeploy Amazon Macie and AWS Lambda functions to scan the EC2 instances for vulnerabilities. Log any findings to AWS CloudTrail.
  • CTurn on Amazon GuardDuty. Deploy the GuardDuty agents to the EC2 instances. Configure an AWS Lambda function to automate the generation and distribution of reports that detail the findings.
  • DTurn on Amazon Inspector. Deploy the Amazon Inspector agent to the EC2 instances. Configure an AWS Lambda function to automate the generation and distribution of reports that detail the findings. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Turn on Amazon Inspector. Deploy the Amazon Inspector agent to the EC2 instances. Configure an AWS Lambda function to automate the generation and distribution of reports that detail the findings.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon Inspector automatically scans workloads for software vulnerabilities.

Topic 1 · Question 316

A company uses an Amazon EC2 instance to run a script to poll for and process messages in an Amazon Simple Queue Service (Amazon SQS) queue. The company wants to reduce operational costs while maintaining its ability to process a growing number of messages that are added to the queue. What should a solutions architect recommend to meet these requirements?

  • AIncrease the size of the EC2 instance to process messages faster.
  • BUse Amazon EventBridge to turn off the EC2 instance when the instance is underutilized.
  • CMigrate the script on the EC2 instance to an AWS Lambda function with the appropriate runtime. (correct answer)
  • DUse AWS Systems Manager Run Command to run the script on demand.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Migrate the script on the EC2 instance to an AWS Lambda function with the appropriate runtime.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon EC2 provides resizable virtual servers when you need full control of the operating system.

Topic 1 · Question 317

A company uses a legacy application to produce data in CSV format. The legacy application stores the output data in Amazon S3. The company is deploying a new commercial off-the-shelf (COTS) application that can perform complex SQL queries to analyze data that is stored in Amazon Redshift and Amazon S3 only. However, the COTS application cannot process the .csv files that the legacy application produces. The company cannot update the legacy application to produce data in another format. The company needs to implement a solution so that the COTS application can use the data that the legacy application produces. Which solution will meet these requirements with the LEAST operational overhead?

  • ACreate an AWS Glue extract, transform, and load (ETL) job that runs on a schedule. Configure the ETL job to process the .csv files and store the processed data in Amazon Redshift. (correct answer)
  • BDevelop a Python script that runs on Amazon EC2 instances to convert the .csv files to .sql files. Invoke the Python script on a cron schedule to store the output files in Amazon S3.
  • CCreate an AWS Lambda function and an Amazon DynamoDB table. Use an S3 event to invoke the Lambda function. Configure the Lambda function to perform an extract, transform, and load (ETL) job to process the .csv files and store the processed data in the DynamoDB table.
  • DUse Amazon EventBridge to launch an Amazon EMR cluster on a weekly schedule. Configure the EMR cluster to perform an extract, transform, and load (ETL) job to process the .csv files and store the processed data in an Amazon Redshift table.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create an AWS Glue extract, transform, and load (ETL) job that runs on a schedule. Configure the ETL job to process the.csv files and store the processed data in Amazon Redshift.

Explanation

Amazon Redshift is a managed petabyte-scale data warehouse for complex analytical queries. AWS Glue is a serverless ETL and data-catalog service that prepares and integrates data. AWS Config tracks resource configuration changes and evaluates compliance.

Topic 1 · Question 318 · Select all that apply

A company recently migrated its entire IT environment to the AWS Cloud. The company discovers that users are provisioning oversized Amazon EC2 instances and modifying security group rules without using the appropriate change control process. A solutions architect must devise a strategy to track and audit these inventory and configuration changes. Which actions should the solutions architect take to meet these requirements? (Choose two.)

  • AEnable AWS CloudTrail and use it for auditing. (correct answer)
  • BUse data lifecycle policies for the Amazon EC2 instances.
  • CEnable AWS Trusted Advisor and reference the security dashboard.
  • DEnable AWS Config and create rules for auditing and compliance purposes. (correct answer)
  • ERestore previous resource configurations with an AWS CloudFormation template.
Reveal answer & explanation
Correct answer: A, D

The correct answer is A, D. Option A: Enable AWS CloudTrail and use it for auditing. Option D: Enable AWS Config and create rules for auditing and compliance purposes.

Explanation

AWS CloudTrail records API activity for auditing and governance. AWS Config tracks resource configuration changes and evaluates compliance.

Topic 1 · Question 319

A company has hundreds of Amazon EC2 Linux-based instances in the AWS Cloud. Systems administrators have used shared SSH keys to manage the instances. After a recent audit, the company’s security team is mandating the removal of all shared keys. A solutions architect must design a solution that provides secure access to the EC2 instances. Which solution will meet this requirement with the LEAST amount of administrative overhead?

  • AUse AWS Systems Manager Session Manager to connect to the EC2 instances. (correct answer)
  • BUse AWS Security Token Service (AWS STS) to generate one-time SSH keys on demand.
  • CAllow shared SSH access to a set of bastion instances. Configure all other instances to allow only SSH access from the bastion instances.
  • DUse an Amazon Cognito custom authorizer to authenticate users. Invoke an AWS Lambda function to generate a temporary SSH key.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use AWS Systems Manager Session Manager to connect to the EC2 instances.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. AWS Systems Manager operates and automates management of fleets of resources.

Topic 1 · Question 320

A company is using a fleet of Amazon EC2 instances to ingest data from on-premises data sources. The data is in JSON format and ingestion rates can be as high as 1 MB/s. When an EC2 instance is rebooted, the data in-flight is lost. The company’s data science team wants to query ingested data in near-real time. Which solution provides near-real-time data querying that is scalable with minimal data loss?

  • APublish data to Amazon Kinesis Data Streams, Use Kinesis Data Analytics to query the data. (correct answer)
  • BPublish data to Amazon Kinesis Data Firehose with Amazon Redshift as the destination. Use Amazon Redshift to query the data.
  • CStore ingested data in an EC2 instance store. Publish data to Amazon Kinesis Data Firehose with Amazon S3 as the destination. Use Amazon Athena to query the data.
  • DStore ingested data in an Amazon Elastic Block Store (Amazon EBS) volume. Publish data to Amazon ElastiCache for Redis. Subscribe to the Redis channel to query the data.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Publish data to Amazon Kinesis Data Streams, Use Kinesis Data Analytics to query the data.

Explanation

Kinesis Data Streams ingests and processes high-volume real-time streaming data. Amazon Kinesis ingests and processes real-time streaming data at scale. This option meets the real-time / low-latency performance requirement.

Showing questions 301320 of 1019 · Page 16 of 51