🔍

SAA-C03 — questions

Page 18 of 51 · 1019 total questions.

Topic 1 · Question 341

A company has an Amazon S3 data lake that is governed by AWS Lake Formation. The company wants to create a visualization in Amazon QuickSight by joining the data in the data lake with operational data that is stored in an Amazon Aurora MySQL database. The company wants to enforce column-level authorization so that the company’s marketing team can access only a subset of columns in the database. Which solution will meet these requirements with the LEAST operational overhead?

  • AUse Amazon EMR to ingest the data directly from the database to the QuickSight SPICE engine. Include only the required columns.
  • BUse AWS Glue Studio to ingest the data from the database to the S3 data lake. Attach an IAM policy to the QuickSight users to enforce column-level access control. Use Amazon S3 as the data source in QuickSight.
  • CUse AWS Glue Elastic Views to create a materialized view for the database in Amazon S3. Create an S3 bucket policy to enforce column-level access control for the QuickSight users. Use Amazon S3 as the data source in QuickSight.
  • DUse a Lake Formation blueprint to ingest the data from the database to the S3 data lake. Use Lake Formation to enforce column-level access control for the QuickSight users. Use Amazon Athena as the data source in QuickSight. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Use a Lake Formation blueprint to ingest the data from the database to the S3 data lake. Use Lake Formation to enforce column-level access control for the QuickSight users. Use Amazon Athena as the data source in Quic...

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon Athena runs serverless SQL queries directly on data in Amazon S3 with no infrastructure to manage. Amazon QuickSight is a serverless business-intelligence and dashboard service.

Topic 1 · Question 342

A transaction processing company has weekly scripted batch jobs that run on Amazon EC2 instances. The EC2 instances are in an Auto Scaling group. The number of transactions can vary, but the baseline CPU utilization that is noted on each run is at least 60%. The company needs to provision the capacity 30 minutes before the jobs run. Currently, engineers complete this task by manually modifying the Auto Scaling group parameters. The company does not have the resources to analyze the required capacity trends for the Auto Scaling group counts. The company needs an automated way to modify the Auto Scaling group’s desired capacity. Which solution will meet these requirements with the LEAST operational overhead?

  • ACreate a dynamic scaling policy for the Auto Scaling group. Configure the policy to scale based on the CPU utilization metric. Set the target value for the metric to 60%.
  • BCreate a scheduled scaling policy for the Auto Scaling group. Set the appropriate desired capacity, minimum capacity, and maximum capacity. Set the recurrence to weekly. Set the start time to 30 minutes before the batch jobs run.
  • CCreate a predictive scaling policy for the Auto Scaling group. Configure the policy to scale based on forecast. Set the scaling metric to CPU utilization. Set the target value for the metric to 60%. In the policy, set the instances to pre-launch 30 minutes before the jobs run. (correct answer)
  • DCreate an Amazon EventBridge event to invoke an AWS Lambda function when the CPU utilization metric value for the Auto Scaling group reaches 60%. Configure the Lambda function to increase the Auto Scaling group’s desired capacity and maximum capacity by 20%.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create a predictive scaling policy for the Auto Scaling group. Configure the policy to scale based on forecast. Set the scaling metric to CPU utilization. Set the target value for the metric to 60%. In the policy, set...

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Amazon Forecast produces time-series forecasts using machine learning. AWS Config tracks resource configuration changes and evaluates compliance.

Topic 1 · Question 343

A solutions architect is designing a company’s disaster recovery (DR) architecture. The company has a MySQL database that runs on an Amazon EC2 instance in a private subnet with scheduled backup. The DR design needs to include multiple AWS Regions. Which solution will meet these requirements with the LEAST operational overhead?

  • AMigrate the MySQL database to multiple EC2 instances. Configure a standby EC2 instance in the DR Region. Turn on replication.
  • BMigrate the MySQL database to Amazon RDS. Use a Multi-AZ deployment. Turn on read replication for the primary DB instance in the different Availability Zones.
  • CMigrate the MySQL database to an Amazon Aurora global database. Host the primary DB cluster in the primary Region. Host the secondary DB cluster in the DR Region. (correct answer)
  • DStore the scheduled backup of the MySQL database in an Amazon S3 bucket that is configured for S3 Cross-Region Replication (CRR). Use the data backup to restore the database in the DR Region.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Migrate the MySQL database to an Amazon Aurora global database. Host the primary DB cluster in the primary Region. Host the secondary DB cluster in the DR Region.

Explanation

Amazon Aurora is a high-performance managed relational database with built-in replication and failover.

Topic 1 · Question 344

A company has a Java application that uses Amazon Simple Queue Service (Amazon SQS) to parse messages. The application cannot parse messages that are larger than 256 KB in size. The company wants to implement a solution to give the application the ability to parse messages as large as 50 MB. Which solution will meet these requirements with the FEWEST changes to the code?

  • AUse the Amazon SQS Extended Client Library for Java to host messages that are larger than 256 KB in Amazon S3. (correct answer)
  • BUse Amazon EventBridge to post large messages from the application instead of Amazon SQS.
  • CChange the limit in Amazon SQS to handle messages that are larger than 256 KB.
  • DStore messages that are larger than 256 KB in Amazon Elastic File System (Amazon EFS). Configure Amazon SQS to reference this location in the messages.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use the Amazon SQS Extended Client Library for Java to host messages that are larger than 256 KB in Amazon S3.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon SQS is a fully managed message queue that decouples components and absorbs traffic spikes.

Topic 1 · Question 345

A company wants to restrict access to the content of one of its main web applications and to protect the content by using authorization techniques available on AWS. The company wants to implement a serverless architecture and an authentication solution for fewer than 100 users. The solution needs to integrate with the main web application and serve web content globally. The solution must also scale as the company's user base grows while providing the lowest login latency possible. Which solution will meet these requirements MOST cost-effectively?

  • AUse Amazon Cognito for authentication. Use Lambda@Edge for authorization. Use Amazon CloudFront to serve the web application globally. (correct answer)
  • BUse AWS Directory Service for Microsoft Active Directory for authentication. Use AWS Lambda for authorization. Use an Application Load Balancer to serve the web application globally.
  • CUse Amazon Cognito for authentication. Use AWS Lambda for authorization. Use Amazon S3 Transfer Acceleration to serve the web application globally.
  • DUse AWS Directory Service for Microsoft Active Directory for authentication. Use Lambda@Edge for authorization. Use AWS Elastic Beanstalk to serve the web application globally.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use Amazon Cognito for authentication. Use Lambda@Edge for authorization. Use Amazon CloudFront to serve the web application globally.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon CloudFront caches content at edge locations to reduce latency and offload origins. Amazon Cognito manages user sign-up, sign-in and federated identity for applications. This option delivers the requirement at the lowest cost.

Topic 1 · Question 346

A company has an aging network-attached storage (NAS) array in its data center. The NAS array presents SMB shares and NFS shares to client workstations. The company does not want to purchase a new NAS array. The company also does not want to incur the cost of renewing the NAS array’s support contract. Some of the data is accessed frequently, but much of the data is inactive. A solutions architect needs to implement a solution that migrates the data to Amazon S3, uses S3 Lifecycle policies, and maintains the same look and feel for the client workstations. The solutions architect has identified AWS Storage Gateway as part of the solution. Which type of storage gateway should the solutions architect provision to meet these requirements?

  • AVolume Gateway
  • BTape Gateway
  • CAmazon FSx File Gateway
  • DAmazon S3 File Gateway (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Amazon S3 File Gateway

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. S3 File Gateway presents S3 as an NFS/SMB file share to on-premises applications.

Topic 1 · Question 347

A company has an application that is running on Amazon EC2 instances. A solutions architect has standardized the company on a particular instance family and various instance sizes based on the current needs of the company. The company wants to maximize cost savings for the application over the next 3 years. The company needs to be able to change the instance family and sizes in the next 6 months based on application popularity and usage. Which solution will meet these requirements MOST cost-effectively?

  • ACompute Savings Plan (correct answer)
  • BEC2 Instance Savings Plan
  • CZonal Reserved Instances
  • DStandard Reserved Instances
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Compute Savings Plan This option delivers the requirement at the lowest cost.

Topic 1 · Question 348

A company collects data from a large number of participants who use wearable devices. The company stores the data in an Amazon DynamoDB table and uses applications to analyze the data. The data workload is constant and predictable. The company wants to stay at or below its forecasted budget for DynamoDB. Which solution will meet these requirements MOST cost-effectively?

  • AUse provisioned mode and DynamoDB Standard-Infrequent Access (DynamoDB Standard-IA). Reserve capacity for the forecasted workload.
  • BUse provisioned mode. Specify the read capacity units (RCUs) and write capacity units (WCUs). (correct answer)
  • CUse on-demand mode. Set the read capacity units (RCUs) and write capacity units (WCUs) high enough to accommodate changes in the workload.
  • DUse on-demand mode. Specify the read capacity units (RCUs) and write capacity units (WCUs) with reserved capacity.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use provisioned mode. Specify the read capacity units (RCUs) and write capacity units (WCUs). This option delivers the requirement at the lowest cost.

Topic 1 · Question 349

A company stores confidential data in an Amazon Aurora PostgreSQL database in the ap-southeast-3 Region. The database is encrypted with an AWS Key Management Service (AWS KMS) customer managed key. The company was recently acquired and must securely share a backup of the database with the acquiring company’s AWS account in ap-southeast-3. What should a solutions architect do to meet these requirements?

  • ACreate a database snapshot. Copy the snapshot to a new unencrypted snapshot. Share the new snapshot with the acquiring company’s AWS account.
  • BCreate a database snapshot. Add the acquiring company’s AWS account to the KMS key policy. Share the snapshot with the acquiring company’s AWS account. (correct answer)
  • CCreate a database snapshot that uses a different AWS managed KMS key. Add the acquiring company’s AWS account to the KMS key alias. Share the snapshot with the acquiring company's AWS account.
  • DCreate a database snapshot. Download the database snapshot. Upload the database snapshot to an Amazon S3 bucket. Update the S3 bucket policy to allow access from the acquiring company’s AWS account.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create a database snapshot. Add the acquiring company’s AWS account to the KMS key policy. Share the snapshot with the acquiring company’s AWS account.

Explanation

AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

Topic 1 · Question 350 · Select all that apply

A company uses a 100 GB Amazon RDS for Microsoft SQL Server Single-AZ DB instance in the us-east-1 Region to store customer transactions. The company needs high availability and automatic recovery for the DB instance. The company must also run reports on the RDS database several times a year. The report process causes transactions to take longer than usual to post to the customers’ accounts. The company needs a solution that will improve the performance of the report process. Which combination of steps will meet these requirements? (Choose two.)

  • AModify the DB instance from a Single-AZ DB instance to a Multi-AZ deployment. (correct answer)
  • BTake a snapshot of the current DB instance. Restore the snapshot to a new RDS deployment in another Availability Zone.
  • CCreate a read replica of the DB instance in a different Availability Zone. Point all requests for reports to the read replica. (correct answer)
  • DMigrate the database to RDS Custom.
  • EUse RDS Proxy to limit reporting requests to the maintenance window.
Reveal answer & explanation
Correct answer: A, C

The correct answer is A, C. Option A: Modify the DB instance from a Single-AZ DB instance to a Multi-AZ deployment. Option C: Create a read replica of the DB instance in a different Availability Zone. Point all requests for reports to the read replica.

Topic 1 · Question 351

A company is moving its data management application to AWS. The company wants to transition to an event-driven architecture. The architecture needs to be more distributed and to use serverless concepts while performing the different aspects of the workflow. The company also wants to minimize operational overhead. Which solution will meet these requirements?

  • ABuild out the workflow in AWS Glue. Use AWS Glue to invoke AWS Lambda functions to process the workflow steps.
  • BBuild out the workflow in AWS Step Functions. Deploy the application on Amazon EC2 instances. Use Step Functions to invoke the workflow steps on the EC2 instances.
  • CBuild out the workflow in Amazon EventBridge. Use EventBridge to invoke AWS Lambda functions on a schedule to process the workflow steps.
  • DBuild out the workflow in AWS Step Functions. Use Step Functions to create a state machine. Use the state machine to invoke AWS Lambda functions to process the workflow steps. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Build out the workflow in AWS Step Functions. Use Step Functions to create a state machine. Use the state machine to invoke AWS Lambda functions to process the workflow steps.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. AWS Step Functions coordinates multi-step workflows as a managed state machine.

Topic 1 · Question 352

A company is designing the network for an online multi-player game. The game uses the UDP networking protocol and will be deployed in eight AWS Regions. The network architecture needs to minimize latency and packet loss to give end users a high-quality gaming experience. Which solution will meet these requirements?

  • ASetup a transit gateway in each Region. Create inter-Region peering attachments between each transit gateway.
  • BSet up AWS Global Accelerator with UDP listeners and endpoint groups in each Region. (correct answer)
  • CSet up Amazon CloudFront with UDP turned on. Configure an origin in each Region.
  • DSet up a VPC peering mesh between each Region. Turn on UDP for each VPC.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Set up AWS Global Accelerator with UDP listeners and endpoint groups in each Region.

Explanation

AWS Global Accelerator routes users over the AWS backbone to the optimal endpoint for lower latency and fast failover.

Topic 1 · Question 353

A company hosts a three-tier web application on Amazon EC2 instances in a single Availability Zone. The web application uses a self-managed MySQL database that is hosted on an EC2 instance to store data in an Amazon Elastic Block Store (Amazon EBS) volume. The MySQL database currently uses a 1 TB Provisioned IOPS SSD (io2) EBS volume. The company expects traffic of 1,000 IOPS for both reads and writes at peak traffic. The company wants to minimize any disruptions, stabilize performance, and reduce costs while retaining the capacity for double the IOPS. The company wants to move the database tier to a fully managed solution that is highly available and fault tolerant. Which solution will meet these requirements MOST cost-effectively?

  • AUse a Multi-AZ deployment of an Amazon RDS for MySQL DB instance with an io2 Block Express EBS volume.
  • BUse a Multi-AZ deployment of an Amazon RDS for MySQL DB instance with a General Purpose SSD (gp2) EBS volume. (correct answer)
  • CUse Amazon S3 Intelligent-Tiering access tiers.
  • DUse two large EC2 instances to host the database in active-passive mode.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use a Multi-AZ deployment of an Amazon RDS for MySQL DB instance with a General Purpose SSD (gp2) EBS volume.

Explanation

Amazon EBS provides block storage attached to a single EC2 instance. Amazon RDS is a managed relational database that handles patching, backups and failover. This option delivers the requirement at the lowest cost.

Topic 1 · Question 354

A company hosts a serverless application on AWS. The application uses Amazon API Gateway, AWS Lambda, and an Amazon RDS for PostgreSQL database. The company notices an increase in application errors that result from database connection timeouts during times of peak traffic or unpredictable traffic. The company needs a solution that reduces the application failures with the least amount of change to the code. What should a solutions architect do to meet these requirements?

  • AReduce the Lambda concurrency rate.
  • BEnable RDS Proxy on the RDS DB instance. (correct answer)
  • CResize the RDS DB instance class to accept more connections.
  • DMigrate the database to Amazon DynamoDB with on-demand scaling.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Enable RDS Proxy on the RDS DB instance.

Explanation

Amazon RDS Proxy pools and shares database connections to improve scalability and resilience. Amazon RDS is a managed relational database that handles patching, backups and failover.

Topic 1 · Question 355

A company is migrating an old application to AWS. The application runs a batch job every hour and is CPU intensive. The batch job takes 15 minutes on average with an on-premises server. The server has 64 virtual CPU (vCPU) and 512 GiB of memory. Which solution will run the batch job within 15 minutes with the LEAST operational overhead?

  • AUse AWS Lambda with functional scaling.
  • BUse Amazon Elastic Container Service (Amazon ECS) with AWS Fargate.
  • CUse Amazon Lightsail with AWS Auto Scaling.
  • DUse AWS Batch on Amazon EC2. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Use AWS Batch on Amazon EC2.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. AWS Batch schedules and runs batch computing jobs at any scale without managing clusters.

Topic 1 · Question 356

A company stores its data objects in Amazon S3 Standard storage. A solutions architect has found that 75% of the data is rarely accessed after 30 days. The company needs all the data to remain immediately accessible with the same high availability and resiliency, but the company wants to minimize storage costs. Which storage solution will meet these requirements?

  • AMove the data objects to S3 Glacier Deep Archive after 30 days.
  • BMove the data objects to S3 Standard-Infrequent Access (S3 Standard-IA) after 30 days. (correct answer)
  • CMove the data objects to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 30 days.
  • DMove the data objects to S3 One Zone-Infrequent Access (S3 One Zone-IA) immediately.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Move the data objects to S3 Standard-Infrequent Access (S3 Standard-IA) after 30 days.

Explanation

S3 Standard-IA reduces cost for infrequently accessed data that still needs high availability. Amazon S3 provides durable, scalable object storage that is fully managed. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

Topic 1 · Question 357 · Select all that apply

A gaming company is moving its public scoreboard from a data center to the AWS Cloud. The company uses Amazon EC2 Windows Server instances behind an Application Load Balancer to host its dynamic application. The company needs a highly available storage solution for the application. The application consists of static files and dynamic server-side code. Which combination of steps should a solutions architect take to meet these requirements? (Choose two.)

  • AStore the static files on Amazon S3. Use Amazon CloudFront to cache objects at the edge. (correct answer)
  • BStore the static files on Amazon S3. Use Amazon ElastiCache to cache objects at the edge.
  • CStore the server-side code on Amazon Elastic File System (Amazon EFS). Mount the EFS volume on each EC2 instance to share the files.
  • DStore the server-side code on Amazon FSx for Windows File Server. Mount the FSx for Windows File Server volume on each EC2 instance to share the files. (correct answer)
  • EStore the server-side code on a General Purpose SSD (gp2) Amazon Elastic Block Store (Amazon EBS) volume. Mount the EBS volume on each EC2 instance to share the files.
Reveal answer & explanation
Correct answer: A, D

The correct answer is A, D. Option A: Store the static files on Amazon S3. Use Amazon CloudFront to cache objects at the edge. Option D: Store the server-side code on Amazon FSx for Windows File Server. Mount the FSx for Windows File Server volume on each EC2 instance to share the files.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon S3 provides durable, scalable object storage that is fully managed. Amazon FSx for Windows File Server provides fully managed SMB/Windows shared file storage. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

Topic 1 · Question 358

A social media company runs its application on Amazon EC2 instances behind an Application Load Balancer (ALB). The ALB is the origin for an Amazon CloudFront distribution. The application has more than a billion images stored in an Amazon S3 bucket and processes thousands of images each second. The company wants to resize the images dynamically and serve appropriate formats to clients. Which solution will meet these requirements with the LEAST operational overhead?

  • AInstall an external image management library on an EC2 instance. Use the image management library to process the images.
  • BCreate a CloudFront origin request policy. Use the policy to automatically resize images and to serve the appropriate format based on the User-Agent HTTP header in the request.
  • CUse a Lambda@Edge function with an external image management library. Associate the Lambda@Edge function with the CloudFront behaviors that serve the images. (correct answer)
  • DCreate a CloudFront response headers policy. Use the policy to automatically resize images and to serve the appropriate format based on the User-Agent HTTP header in the request.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Use a Lambda@Edge function with an external image management library. Associate the Lambda@Edge function with the CloudFront behaviors that serve the images.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon CloudFront caches content at edge locations to reduce latency and offload origins.

Topic 1 · Question 359

A hospital needs to store patient records in an Amazon S3 bucket. The hospital’s compliance team must ensure that all protected health information (PHI) is encrypted in transit and at rest. The compliance team must administer the encryption key for data at rest. Which solution will meet these requirements?

  • ACreate a public SSL/TLS certificate in AWS Certificate Manager (ACM). Associate the certificate with Amazon S3. Configure default encryption for each S3 bucket to use server-side encryption with AWS KMS keys (SSE-KMS). Assign the compliance team to manage the KMS keys.
  • BUse the aws:SecureTransport condition on S3 bucket policies to allow only encrypted connections over HTTPS (TLS). Configure default encryption for each S3 bucket to use server-side encryption with S3 managed encryption keys (SSE-S3). Assign the compliance team to manage the SSE-S3 keys.
  • CUse the aws:SecureTransport condition on S3 bucket policies to allow only encrypted connections over HTTPS (TLS). Configure default encryption for each S3 bucket to use server-side encryption with AWS KMS keys (SSE-KMS). Assign the compliance team to manage the KMS keys. (correct answer)
  • DUse the aws:SecureTransport condition on S3 bucket policies to allow only encrypted connections over HTTPS (TLS). Use Amazon Macie to protect the sensitive data that is stored in Amazon S3. Assign the compliance team to manage Macie.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Use the aws:SecureTransport condition on S3 bucket policies to allow only encrypted connections over HTTPS (TLS). Configure default encryption for each S3 bucket to use server-side encryption with AWS KMS keys (SSE-KM...

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest. AWS Config tracks resource configuration changes and evaluates compliance.

Topic 1 · Question 360

A company uses Amazon API Gateway to run a private gateway with two REST APIs in the same VPC. The BuyStock RESTful web service calls the CheckFunds RESTful web service to ensure that enough funds are available before a stock can be purchased. The company has noticed in the VPC flow logs that the BuyStock RESTful web service calls the CheckFunds RESTful web service over the internet instead of through the VPC. A solutions architect must implement a solution so that the APIs communicate through the VPC. Which solution will meet these requirements with the FEWEST changes to the code?

  • AAdd an X-API-Key header in the HTTP header for authorization.
  • BUse an interface endpoint. (correct answer)
  • CUse a gateway endpoint.
  • DAdd an Amazon Simple Queue Service (Amazon SQS) queue between the two REST APIs.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use an interface endpoint.

Showing questions 341360 of 1019 · Page 18 of 51