πŸ”

SAA-C03 β€” questions

Page 23 of 51 Β· 1019 total questions.

Topic 1 Β· Question 441

A company hosts a multi-tier web application on Amazon Linux Amazon EC2 instances behind an Application Load Balancer. The instances run in an Auto Scaling group across multiple Availability Zones. The company observes that the Auto Scaling group launches more On-Demand Instances when the application's end users access high volumes of static web content. The company wants to optimize cost. What should a solutions architect do to redesign the application MOST cost-effectively?

  • AUpdate the Auto Scaling group to use Reserved Instances instead of On-Demand Instances.
  • BUpdate the Auto Scaling group to scale by launching Spot Instances instead of On-Demand Instances.
  • CCreate an Amazon CloudFront distribution to host the static web contents from an Amazon S3 bucket. (correct answer)
  • DCreate an AWS Lambda function behind an Amazon API Gateway API to host the static website contents.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create an Amazon CloudFront distribution to host the static web contents from an Amazon S3 bucket.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon CloudFront caches content at edge locations to reduce latency and offload origins. This option delivers the requirement at the lowest cost.

Topic 1 Β· Question 442

A company stores several petabytes of data across multiple AWS accounts. The company uses AWS Lake Formation to manage its data lake. The company's data science team wants to securely share selective data from its accounts with the company's engineering team for analytical purposes. Which solution will meet these requirements with the LEAST operational overhead?

  • ACopy the required data to a common account. Create an IAM access role in that account. Grant access by specifying a permission policy that includes users from the engineering team accounts as trusted entities.
  • BUse the Lake Formation permissions Grant command in each account where the data is stored to allow the required engineering team users to access the data.
  • CUse AWS Data Exchange to privately publish the required data to the required engineering team accounts.
  • DUse Lake Formation tag-based access control to authorize and grant cross-account permissions for the required data to the engineering team accounts. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Use Lake Formation tag-based access control to authorize and grant cross-account permissions for the required data to the engineering team accounts.

Explanation

AWS Lake Formation builds and secures data lakes quickly.

Topic 1 Β· Question 443

A company wants to host a scalable web application on AWS. The application will be accessed by users from different geographic regions of the world. Application users will be able to download and upload unique data up to gigabytes in size. The development team wants a cost-effective solution to minimize upload and download latency and maximize performance. What should a solutions architect do to accomplish this?

  • AUse Amazon S3 with Transfer Acceleration to host the application. (correct answer)
  • BUse Amazon S3 with CacheControl headers to host the application.
  • CUse Amazon EC2 with Auto Scaling and Amazon CloudFront to host the application.
  • DUse Amazon EC2 with Auto Scaling and Amazon ElastiCache to host the application.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use Amazon S3 with Transfer Acceleration to host the application.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. This option delivers the requirement at the lowest cost.

Topic 1 Β· Question 444

A company has hired a solutions architect to design a reliable architecture for its application. The application consists of one Amazon RDS DB instance and two manually provisioned Amazon EC2 instances that run web servers. The EC2 instances are located in a single Availability Zone. An employee recently deleted the DB instance, and the application was unavailable for 24 hours as a result. The company is concerned with the overall reliability of its environment. What should the solutions architect do to maximize reliability of the application's infrastructure?

  • ADelete one EC2 instance and enable termination protection on the other EC2 instance. Update the DB instance to be Multi-AZ, and enable deletion protection.
  • BUpdate the DB instance to be Multi-AZ, and enable deletion protection. Place the EC2 instances behind an Application Load Balancer, and run them in an EC2 Auto Scaling group across multiple Availability Zones. (correct answer)
  • CCreate an additional DB instance along with an Amazon API Gateway and an AWS Lambda function. Configure the application to invoke the Lambda function through API Gateway. Have the Lambda function write the data to the two DB instances.
  • DPlace the EC2 instances in an EC2 Auto Scaling group that has multiple subnets located in multiple Availability Zones. Use Spot Instances instead of On-Demand Instances. Set up Amazon CloudWatch alarms to monitor the health of the instances Update the DB instance to be Multi-AZ, and enable deletion protection.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Update the DB instance to be Multi-AZ, and enable deletion protection. Place the EC2 instances behind an Application Load Balancer, and run them in an EC2 Auto Scaling group across multiple Availability Zones.

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Amazon EC2 provides resizable virtual servers when you need full control of the operating system. An Application Load Balancer distributes HTTP/HTTPS traffic and supports path/host routing.

Topic 1 Β· Question 445

A company is storing 700 terabytes of data on a large network-attached storage (NAS) system in its corporate data center. The company has a hybrid environment with a 10 Gbps AWS Direct Connect connection. After an audit from a regulator, the company has 90 days to move the data to the cloud. The company needs to move the data efficiently and without disruption. The company still needs to be able to access and update the data during the transfer window. Which solution will meet these requirements?

  • ACreate an AWS DataSync agent in the corporate data center. Create a data transfer task Start the transfer to an Amazon S3 bucket. (correct answer)
  • BBack up the data to AWS Snowball Edge Storage Optimized devices. Ship the devices to an AWS data center. Mount a target Amazon S3 bucket on the on-premises file system.
  • CUse rsync to copy the data directly from local storage to a designated Amazon S3 bucket over the Direct Connect connection.
  • DBack up the data on tapes. Ship the tapes to an AWS data center. Mount a target Amazon S3 bucket on the on-premises file system.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create an AWS DataSync agent in the corporate data center. Create a data transfer task Start the transfer to an Amazon S3 bucket.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. AWS DataSync automates and accelerates online data transfer to AWS with minimal effort.

Topic 1 Β· Question 446

A company stores data in PDF format in an Amazon S3 bucket. The company must follow a legal requirement to retain all new and existing data in Amazon S3 for 7 years. Which solution will meet these requirements with the LEAST operational overhead?

  • ATurn on the S3 Versioning feature for the S3 bucket. Configure S3 Lifecycle to delete the data after 7 years. Configure multi-factor authentication (MFA) delete for all S3 objects.
  • BTurn on S3 Object Lock with governance retention mode for the S3 bucket. Set the retention period to expire after 7 years. Recopy all existing objects to bring the existing data into compliance.
  • CTurn on S3 Object Lock with compliance retention mode for the S3 bucket. Set the retention period to expire after 7 years. Recopy all existing objects to bring the existing data into compliance.
  • DTurn on S3 Object Lock with compliance retention mode for the S3 bucket. Set the retention period to expire after 7 years. Use S3 Batch Operations to bring the existing data into compliance. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Turn on S3 Object Lock with compliance retention mode for the S3 bucket. Set the retention period to expire after 7 years. Use S3 Batch Operations to bring the existing data into compliance.

Explanation

AWS Batch schedules and runs batch computing jobs at any scale without managing clusters. Amazon S3 provides durable, scalable object storage that is fully managed.

Topic 1 Β· Question 447

A company has a stateless web application that runs on AWS Lambda functions that are invoked by Amazon API Gateway. The company wants to deploy the application across multiple AWS Regions to provide Regional failover capabilities. What should a solutions architect do to route traffic to multiple Regions?

  • ACreate Amazon Route 53 health checks for each Region. Use an active-active failover configuration. (correct answer)
  • BCreate an Amazon CloudFront distribution with an origin for each Region. Use CloudFront health checks to route traffic.
  • CCreate a transit gateway. Attach the transit gateway to the API Gateway endpoint in each Region. Configure the transit gateway to route requests.
  • DCreate an Application Load Balancer in the primary Region. Set the target group to point to the API Gateway endpoint hostnames in each Region.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create Amazon Route 53 health checks for each Region. Use an active-active failover configuration.

Explanation

Amazon Route 53 provides DNS with health checks and routing policies for availability and latency. AWS Config tracks resource configuration changes and evaluates compliance.

Topic 1 Β· Question 448

A company has two VPCs named Management and Production. The Management VPC uses VPNs through a customer gateway to connect to a single device in the data center. The Production VPC uses a virtual private gateway with two attached AWS Direct Connect connections. The Management and Production VPCs both use a single VPC peering connection to allow communication between the applications. What should a solutions architect do to mitigate any single point of failure in this architecture?

  • AAdd a set of VPNs between the Management and Production VPCs.
  • BAdd a second virtual private gateway and attach it to the Management VPC.
  • CAdd a second set of VPNs to the Management VPC from a second customer gateway device. (correct answer)
  • DAdd a second VPC peering connection between the Management VPC and the Production VPC.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Add a second set of VPNs to the Management VPC from a second customer gateway device.

Topic 1 Β· Question 449

A company runs its application on an Oracle database. The company plans to quickly migrate to AWS because of limited resources for the database, backup administration, and data center maintenance. The application uses third-party database features that require privileged access. Which solution will help the company migrate the database to AWS MOST cost-effectively?

  • AMigrate the database to Amazon RDS for Oracle. Replace third-party features with cloud services.
  • BMigrate the database to Amazon RDS Custom for Oracle. Customize the database settings to support third-party features. (correct answer)
  • CMigrate the database to an Amazon EC2 Amazon Machine Image (AMI) for Oracle. Customize the database settings to support third-party features.
  • DMigrate the database to Amazon RDS for PostgreSQL by rewriting the application code to remove dependency on Oracle APEX.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Migrate the database to Amazon RDS Custom for Oracle. Customize the database settings to support third-party features.

Explanation

Amazon RDS is a managed relational database that handles patching, backups and failover. This option delivers the requirement at the lowest cost.

Topic 1 Β· Question 450 Β· Select all that apply

A company has a three-tier web application that is in a single server. The company wants to migrate the application to the AWS Cloud. The company also wants the application to align with the AWS Well-Architected Framework and to be consistent with AWS recommended best practices for security, scalability, and resiliency. Which combination of solutions will meet these requirements? (Choose three.)

  • ACreate a VPC across two Availability Zones with the application's existing architecture. Host the application with existing architecture on an Amazon EC2 instance in a private subnet in each Availability Zone with EC2 Auto Scaling groups. Secure the EC2 instance with security groups and network access control lists (network ACLs).
  • BSet up security groups and network access control lists (network ACLs) to control access to the database layer. Set up a single Amazon RDS database in a private subnet.
  • CCreate a VPC across two Availability Zones. Refactor the application to host the web tier, application tier, and database tier. Host each tier on its own private subnet with Auto Scaling groups for the web tier and application tier. (correct answer)
  • DUse a single Amazon RDS database. Allow database access only from the application tier security group.
  • EUse Elastic Load Balancers in front of the web tier. Control access by using security groups containing references to each layer's security groups. (correct answer)
  • FUse an Amazon RDS database Multi-AZ cluster deployment in private subnets. Allow database access only from application tier security groups. (correct answer)
Reveal answer & explanation
Correct answer: C, E, F

The correct answer is C, E, F. Option C: Create a VPC across two Availability Zones. Refactor the application to host the web tier, application tier, and database tier. Host each tier on its own private subnet with Auto Scaling groups for the web tier and ap... Option E: Use Elastic Load Balancers in front of the web tier. Control access by using security groups containing references to each layer's security groups. Option F: Use an Amazon RDS database Multi-AZ cluster deployment in private subnets. Allow database access only from application tier security groups.

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Amazon RDS is a managed relational database that handles patching, backups and failover. Elastic Load Balancing spreads traffic across targets in multiple AZs for availability. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

Topic 1 Β· Question 451 Β· Select all that apply

A company is migrating its applications and databases to the AWS Cloud. The company will use Amazon Elastic Container Service (Amazon ECS), AWS Direct Connect, and Amazon RDS. Which activities will be managed by the company's operational team? (Choose three.)

  • AManagement of the Amazon RDS infrastructure layer, operating system, and platforms
  • BCreation of an Amazon RDS DB instance and configuring the scheduled maintenance window (correct answer)
  • CConfiguration of additional software components on Amazon ECS for monitoring, patch management, log management, and host intrusion detection (correct answer)
  • DInstallation of patches for all minor and major database versions for Amazon RDS
  • EEnsure the physical security of the Amazon RDS infrastructure in the data center
  • FEncryption of the data that moves in transit through Direct Connect (correct answer)
Reveal answer & explanation
Correct answer: B, C, F

The correct answer is B, C, F. Option B: Creation of an Amazon RDS DB instance and configuring the scheduled maintenance window Option C: Configuration of additional software components on Amazon ECS for monitoring, patch management, log management, and host intrusion detection Option F: Encryption of the data that moves in transit through Direct Connect

Explanation

Amazon ECS orchestrates containers and integrates natively with AWS networking and IAM. Amazon RDS is a managed relational database that handles patching, backups and failover. AWS Direct Connect provides a dedicated, consistent private network link between on premises and AWS.

Topic 1 Β· Question 452

A company runs a Java-based job on an Amazon EC2 instance. The job runs every hour and takes 10 seconds to run. The job runs on a scheduled interval and consumes 1 GB of memory. The CPU utilization of the instance is low except for short surges during which the job uses the maximum CPU available. The company wants to optimize the costs to run the job. Which solution will meet these requirements?

  • AUse AWS App2Container (A2C) to containerize the job. Run the job as an Amazon Elastic Container Service (Amazon ECS) task on AWS Fargate with 0.5 virtual CPU (vCPU) and 1 GB of memory.
  • BCopy the code into an AWS Lambda function that has 1 GB of memory. Create an Amazon EventBridge scheduled rule to run the code each hour. (correct answer)
  • CUse AWS App2Container (A2C) to containerize the job. Install the container in the existing Amazon Machine Image (AMI). Ensure that the schedule stops the container when the task finishes.
  • DConfigure the existing schedule to stop the EC2 instance at the completion of the job and restart the EC2 instance when the next job starts.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Copy the code into an AWS Lambda function that has 1 GB of memory. Create an Amazon EventBridge scheduled rule to run the code each hour.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon EventBridge routes events between services with rules, enabling event-driven, decoupled architectures.

Topic 1 Β· Question 453

A company wants to implement a backup strategy for Amazon EC2 data and multiple Amazon S3 buckets. Because of regulatory requirements, the company must retain backup files for a specific time period. The company must not alter the files for the duration of the retention period. Which solution will meet these requirements?

  • AUse AWS Backup to create a backup vault that has a vault lock in governance mode. Create the required backup plan.
  • BUse Amazon Data Lifecycle Manager to create the required automated snapshot policy.
  • CUse Amazon S3 File Gateway to create the backup. Configure the appropriate S3 Lifecycle management.
  • DUse AWS Backup to create a backup vault that has a vault lock in compliance mode. Create the required backup plan. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Use AWS Backup to create a backup vault that has a vault lock in compliance mode. Create the required backup plan.

Explanation

AWS Backup centrally automates and manages backups across AWS services.

Topic 1 Β· Question 454

A company has resources across multiple AWS Regions and accounts. A newly hired solutions architect discovers a previous employee did not provide details about the resources inventory. The solutions architect needs to build and map the relationship details of the various workloads across all accounts. Which solution will meet these requirements in the MOST operationally efficient way?

  • AUse AWS Systems Manager Inventory to generate a map view from the detailed view report.
  • BUse AWS Step Functions to collect workload details. Build architecture diagrams of the workloads manually.
  • CUse Workload Discovery on AWS to generate architecture diagrams of the workloads. (correct answer)
  • DUse AWS X-Ray to view the workload details. Build architecture diagrams with relationships.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Use Workload Discovery on AWS to generate architecture diagrams of the workloads.

Topic 1 Β· Question 455 Β· Select all that apply

A company uses AWS Organizations. The company wants to operate some of its AWS accounts with different budgets. The company wants to receive alerts and automatically prevent provisioning of additional resources on AWS accounts when the allocated budget threshold is met during a specific period. Which combination of solutions will meet these requirements? (Choose three.)

  • AUse AWS Budgets to create a budget. Set the budget amount under the Cost and Usage Reports section of the required AWS accounts.
  • BUse AWS Budgets to create a budget. Set the budget amount under the Billing dashboards of the required AWS accounts. (correct answer)
  • CCreate an IAM user for AWS Budgets to run budget actions with the required permissions.
  • DCreate an IAM role for AWS Budgets to run budget actions with the required permissions. (correct answer)
  • EAdd an alert to notify the company when each account meets its budget threshold. Add a budget action that selects the IAM identity created with the appropriate config rule to prevent provisioning of additional resources.
  • FAdd an alert to notify the company when each account meets its budget threshold. Add a budget action that selects the IAM identity created with the appropriate service control policy (SCP) to prevent provisioning of additional resources. (correct answer)
Reveal answer & explanation
Correct answer: B, D, F

The correct answer is B, D, F. Option B: Use AWS Budgets to create a budget. Set the budget amount under the Billing dashboards of the required AWS accounts. Option D: Create an IAM role for AWS Budgets to run budget actions with the required permissions. Option F: Add an alert to notify the company when each account meets its budget threshold. Add a budget action that selects the IAM identity created with the appropriate service control policy (SCP) to prevent provisioning of a...

Explanation

Amazon RDS is a managed relational database that handles patching, backups and failover. An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

Topic 1 Β· Question 456

A company runs applications on Amazon EC2 instances in one AWS Region. The company wants to back up the EC2 instances to a second Region. The company also wants to provision EC2 resources in the second Region and manage the EC2 instances centrally from one AWS account. Which solution will meet these requirements MOST cost-effectively?

  • ACreate a disaster recovery (DR) plan that has a similar number of EC2 instances in the second Region. Configure data replication.
  • BCreate point-in-time Amazon Elastic Block Store (Amazon EBS) snapshots of the EC2 instances. Copy the snapshots to the second Region periodically.
  • CCreate a backup plan by using AWS Backup. Configure cross-Region backup to the second Region for the EC2 instances. (correct answer)
  • DDeploy a similar number of EC2 instances in the second Region. Use AWS DataSync to transfer the data from the source Region to the second Region.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create a backup plan by using AWS Backup. Configure cross-Region backup to the second Region for the EC2 instances.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. AWS Backup centrally automates and manages backups across AWS services. AWS Config tracks resource configuration changes and evaluates compliance. This option delivers the requirement at the lowest cost.

Topic 1 Β· Question 457

A company that uses AWS is building an application to transfer data to a product manufacturer. The company has its own identity provider (IdP). The company wants the IdP to authenticate application users while the users use the application to transfer data. The company must use Applicability Statement 2 (AS2) protocol. Which solution will meet these requirements?

  • AUse AWS DataSync to transfer the data. Create an AWS Lambda function for IdP authentication.
  • BUse Amazon AppFlow flows to transfer the data. Create an Amazon Elastic Container Service (Amazon ECS) task for IdP authentication.
  • CUse AWS Transfer Family to transfer the data. Create an AWS Lambda function for IdP authentication. (correct answer)
  • DUse AWS Storage Gateway to transfer the data. Create an Amazon Cognito identity pool for IdP authentication.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Use AWS Transfer Family to transfer the data. Create an AWS Lambda function for IdP authentication.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. AWS Transfer Family provides managed SFTP/FTPS/FTP access to S3 and EFS.

Topic 1 Β· Question 458 Β· Select all that apply

A solutions architect is designing a RESTAPI in Amazon API Gateway for a cash payback service. The application requires 1 GB of memory and 2 GB of storage for its computation resources. The application will require that the data is in a relational format. Which additional combination ofAWS services will meet these requirements with the LEAST administrative effort? (Choose two.)

  • AAmazon EC2
  • BAWS Lambda (correct answer)
  • CAmazon RDS (correct answer)
  • DAmazon DynamoDB
  • EAmazon Elastic Kubernetes Services (Amazon EKS)
Reveal answer & explanation
Correct answer: B, C

The correct answer is B, C. Option B: AWS Lambda Option C: Amazon RDS

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon RDS is a managed relational database that handles patching, backups and failover.

Topic 1 Β· Question 459

A company uses AWS Organizations to run workloads within multiple AWS accounts. A tagging policy adds department tags to AWS resources when the company creates tags. An accounting team needs to determine spending on Amazon EC2 consumption. The accounting team must determine which departments are responsible for the costs regardless ofAWS account. The accounting team has access to AWS Cost Explorer for all AWS accounts within the organization and needs to access all reports from Cost Explorer. Which solution meets these requirements in the MOST operationally efficient way?

  • AFrom the Organizations management account billing console, activate a user-defined cost allocation tag named department. Create one cost report in Cost Explorer grouping by tag name, and filter by EC2. (correct answer)
  • BFrom the Organizations management account billing console, activate an AWS-defined cost allocation tag named department. Create one cost report in Cost Explorer grouping by tag name, and filter by EC2.
  • CFrom the Organizations member account billing console, activate a user-defined cost allocation tag named department. Create one cost report in Cost Explorer grouping by the tag name, and filter by EC2.
  • DFrom the Organizations member account billing console, activate an AWS-defined cost allocation tag named department. Create one cost report in Cost Explorer grouping by tag name, and filter by EC2.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: From the Organizations management account billing console, activate a user-defined cost allocation tag named department. Create one cost report in Cost Explorer grouping by tag name, and filter by EC2.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. AWS Organizations centrally governs and secures multiple AWS accounts. AWS Cost Explorer analyzes and visualizes AWS spend.

Topic 1 Β· Question 460

A company wants to securely exchange data between its software as a service (SaaS) application Salesforce account and Amazon S3. The company must encrypt the data at rest by using AWS Key Management Service (AWS KMS) customer managed keys (CMKs). The company must also encrypt the data in transit. The company has enabled API access for the Salesforce account.

  • ACreate AWS Lambda functions to transfer the data securely from Salesforce to Amazon S3.
  • BCreate an AWS Step Functions workflow. Define the task to transfer the data securely from Salesforce to Amazon S3.
  • CCreate Amazon AppFlow flows to transfer the data securely from Salesforce to Amazon S3. (correct answer)
  • DCreate a custom connector for Salesforce to transfer the data securely from Salesforce to Amazon S3.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create Amazon AppFlow flows to transfer the data securely from Salesforce to Amazon S3.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon AppFlow securely transfers data between SaaS apps and AWS without code.

Showing questions 441–460 of 1019 Β· Page 23 of 51