🔍

SAA-C03 — questions

Page 24 of 51 · 1019 total questions.

SAA-C03 Question 461

Single page →
Topic 1 · Question 461

A company is developing a mobile gaming app in a single AWS Region. The app runs on multiple Amazon EC2 instances in an Auto Scaling group. The company stores the app data in Amazon DynamoDB. The app communicates by using TCP traffic and UDP traffic between the users and the servers. The application will be used globally. The company wants to ensure the lowest possible latency for all users. Which solution will meet these requirements?

  • AUse AWS Global Accelerator to create an accelerator. Create an Application Load Balancer (ALB) behind an accelerator endpoint that uses Global Accelerator integration and listening on the TCP and UDP ports. Update the Auto Scaling group to register instances on the ALB.
  • BUse AWS Global Accelerator to create an accelerator. Create a Network Load Balancer (NLB) behind an accelerator endpoint that uses Global Accelerator integration and listening on the TCP and UDP ports. Update the Auto Scaling group to register instances on the NLB. (correct answer)
  • CCreate an Amazon CloudFront content delivery network (CDN) endpoint. Create a Network Load Balancer (NLB) behind the endpoint and listening on the TCP and UDP ports. Update the Auto Scaling group to register instances on the NLB. Update CloudFront to use the NLB as the origin.
  • DCreate an Amazon CloudFront content delivery network (CDN) endpoint. Create an Application Load Balancer (ALB) behind the endpoint and listening on the TCP and UDP ports. Update the Auto Scaling group to register instances on the ALB. Update CloudFront to use the ALB as the origin.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use AWS Global Accelerator to create an accelerator. Create a Network Load Balancer (NLB) behind an accelerator endpoint that uses Global Accelerator integration and listening on the TCP and UDP ports. Update the Auto...

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. AWS Global Accelerator routes users over the AWS backbone to the optimal endpoint for lower latency and fast failover. A Network Load Balancer handles very high throughput TCP/UDP traffic with ultra-low latency and static IPs.

SAA-C03 Question 462

Single page →
Topic 1 · Question 462

A company has an application that processes customer orders. The company hosts the application on an Amazon EC2 instance that saves the orders to an Amazon Aurora database. Occasionally when traffic is high the workload does not process orders fast enough. What should a solutions architect do to write the orders reliably to the database as quickly as possible?

  • AIncrease the instance size of the EC2 instance when traffic is high. Write orders to Amazon Simple Notification Service (Amazon SNS). Subscribe the database endpoint to the SNS topic.
  • BWrite orders to an Amazon Simple Queue Service (Amazon SQS) queue. Use EC2 instances in an Auto Scaling group behind an Application Load Balancer to read from the SQS queue and process orders into the database. (correct answer)
  • CWrite orders to Amazon Simple Notification Service (Amazon SNS). Subscribe the database endpoint to the SNS topic. Use EC2 instances in an Auto Scaling group behind an Application Load Balancer to read from the SNS topic.
  • DWrite orders to an Amazon Simple Queue Service (Amazon SQS) queue when the EC2 instance reaches CPU threshold limits. Use scheduled scaling of EC2 instances in an Auto Scaling group behind an Application Load Balancer to read from the SQS queue and process orders into the database.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Write orders to an Amazon Simple Queue Service (Amazon SQS) queue. Use EC2 instances in an Auto Scaling group behind an Application Load Balancer to read from the SQS queue and process orders into the database.

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Amazon EC2 provides resizable virtual servers when you need full control of the operating system. An Application Load Balancer distributes HTTP/HTTPS traffic and supports path/host routing.

SAA-C03 Question 463

Single page →
Topic 1 · Question 463

An IoT company is releasing a mattress that has sensors to collect data about a user’s sleep. The sensors will send data to an Amazon S3 bucket. The sensors collect approximately 2 MB of data every night for each mattress. The company must process and summarize the data for each mattress. The results need to be available as soon as possible. Data processing will require 1 GB of memory and will finish within 30 seconds. Which solution will meet these requirements MOST cost-effectively?

  • AUse AWS Glue with a Scala job
  • BUse Amazon EMR with an Apache Spark script
  • CUse AWS Lambda with a Python script (correct answer)
  • DUse AWS Glue with a PySpark job
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Use AWS Lambda with a Python script

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. This option delivers the requirement at the lowest cost.

SAA-C03 Question 464

Single page →
Topic 1 · Question 464

A company hosts an online shopping application that stores all orders in an Amazon RDS for PostgreSQL Single-AZ DB instance. Management wants to eliminate single points of failure and has asked a solutions architect to recommend an approach to minimize database downtime without requiring any changes to the application code. Which solution meets these requirements?

  • AConvert the existing database instance to a Multi-AZ deployment by modifying the database instance and specifying the Multi-AZ option. (correct answer)
  • BCreate a new RDS Multi-AZ deployment. Take a snapshot of the current RDS instance and restore the new Multi-AZ deployment with the snapshot.
  • CCreate a read-only replica of the PostgreSQL database in another Availability Zone. Use Amazon Route 53 weighted record sets to distribute requests across the databases.
  • DPlace the RDS for PostgreSQL database in an Amazon EC2 Auto Scaling group with a minimum group size of two. Use Amazon Route 53 weighted record sets to distribute requests across instances.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Convert the existing database instance to a Multi-AZ deployment by modifying the database instance and specifying the Multi-AZ option. This option needs the least custom development effort.

SAA-C03 Question 465

Single page →
Topic 1 · Question 465

A company is developing an application to support customer demands. The company wants to deploy the application on multiple Amazon EC2 Nitro-based instances within the same Availability Zone. The company also wants to give the application the ability to write to multiple block storage volumes in multiple EC2 Nitro-based instances simultaneously to achieve higher application availability. Which solution will meet these requirements?

  • AUse General Purpose SSD (gp3) EBS volumes with Amazon Elastic Block Store (Amazon EBS) Multi-Attach
  • BUse Throughput Optimized HDD (st1) EBS volumes with Amazon Elastic Block Store (Amazon EBS) Multi-Attach
  • CUse Provisioned IOPS SSD (io2) EBS volumes with Amazon Elastic Block Store (Amazon EBS) Multi-Attach (correct answer)
  • DUse General Purpose SSD (gp2) EBS volumes with Amazon Elastic Block Store (Amazon EBS) Multi-Attach
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Use Provisioned IOPS SSD (io2) EBS volumes with Amazon Elastic Block Store (Amazon EBS) Multi-Attach

Explanation

Amazon EBS provides block storage attached to a single EC2 instance.

SAA-C03 Question 466

Single page →
Topic 1 · Question 466

A company designed a stateless two-tier application that uses Amazon EC2 in a single Availability Zone and an Amazon RDS Multi-AZ DB instance. New company management wants to ensure the application is highly available. What should a solutions architect do to meet this requirement?

  • AConfigure the application to use Multi-AZ EC2 Auto Scaling and create an Application Load Balancer (correct answer)
  • BConfigure the application to take snapshots of the EC2 instances and send them to a different AWS Region
  • CConfigure the application to use Amazon Route 53 latency-based routing to feed requests to the application
  • DConfigure Amazon Route 53 rules to handle incoming requests and create a Multi-AZ Application Load Balancer
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Configure the application to use Multi-AZ EC2 Auto Scaling and create an Application Load Balancer

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Amazon EC2 provides resizable virtual servers when you need full control of the operating system. An Application Load Balancer distributes HTTP/HTTPS traffic and supports path/host routing. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SAA-C03 Question 467

Single page →
Topic 1 · Question 467

A company uses AWS Organizations. A member account has purchased a Compute Savings Plan. Because of changes in the workloads inside the member account, the account no longer receives the full benefit of the Compute Savings Plan commitment. The company uses less than 50% of its purchased compute power.

  • ATurn on discount sharing from the Billing Preferences section of the account console in the member account that purchased the Compute Savings Plan.
  • BTurn on discount sharing from the Billing Preferences section of the account console in the company's Organizations management account. (correct answer)
  • CMigrate additional compute workloads from another AWS account to the account that has the Compute Savings Plan.
  • DSell the excess Savings Plan commitment in the Reserved Instance Marketplace.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Turn on discount sharing from the Billing Preferences section of the account console in the company's Organizations management account.

Explanation

AWS Organizations centrally governs and secures multiple AWS accounts.

SAA-C03 Question 468

Single page →
Topic 1 · Question 468

A company is developing a microservices application that will provide a search catalog for customers. The company must use REST APIs to present the frontend of the application to users. The REST APIs must access the backend services that the company hosts in containers in private VPC subnets. Which solution will meet these requirements?

  • ADesign a WebSocket API by using Amazon API Gateway. Host the application in Amazon Elastic Container Service (Amazon ECS) in a private subnet. Create a private VPC link for API Gateway to access Amazon ECS.
  • BDesign a REST API by using Amazon API Gateway. Host the application in Amazon Elastic Container Service (Amazon ECS) in a private subnet. Create a private VPC link for API Gateway to access Amazon ECS. (correct answer)
  • CDesign a WebSocket API by using Amazon API Gateway. Host the application in Amazon Elastic Container Service (Amazon ECS) in a private subnet. Create a security group for API Gateway to access Amazon ECS.
  • DDesign a REST API by using Amazon API Gateway. Host the application in Amazon Elastic Container Service (Amazon ECS) in a private subnet. Create a security group for API Gateway to access Amazon ECS.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Design a REST API by using Amazon API Gateway. Host the application in Amazon Elastic Container Service (Amazon ECS) in a private subnet. Create a private VPC link for API Gateway to access Amazon ECS.

Explanation

Amazon ECS orchestrates containers and integrates natively with AWS networking and IAM. Amazon API Gateway is a fully managed front door for creating and securing APIs at scale.

SAA-C03 Question 469

Single page →
Topic 1 · Question 469

A company stores raw collected data in an Amazon S3 bucket. The data is used for several types of analytics on behalf of the company's customers. The type of analytics requested determines the access pattern on the S3 objects. The company cannot predict or control the access pattern. The company wants to reduce its S3 costs. Which solution will meet these requirements?

  • AUse S3 replication to transition infrequently accessed objects to S3 Standard-Infrequent Access (S3 Standard-IA)
  • BUse S3 Lifecycle rules to transition objects from S3 Standard to Standard-Infrequent Access (S3 Standard-IA)
  • CUse S3 Lifecycle rules to transition objects from S3 Standard to S3 Intelligent-Tiering (correct answer)
  • DUse S3 Inventory to identify and transition objects that have not been accessed from S3 Standard to S3 Intelligent-Tiering
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Use S3 Lifecycle rules to transition objects from S3 Standard to S3 Intelligent-Tiering

Explanation

S3 Intelligent-Tiering automatically moves objects between tiers to optimize cost with no operational effort. S3 Lifecycle policies automatically transition or expire objects to control storage cost. Amazon S3 provides durable, scalable object storage that is fully managed.

SAA-C03 Question 470

Single page →
Topic 1 · Question 470

A company has applications hosted on Amazon EC2 instances with IPv6 addresses. The applications must initiate communications with other external applications using the internet. However the company’s security policy states that any external service cannot initiate a connection to the EC2 instances. What should a solutions architect recommend to resolve this issue?

  • ACreate a NAT gateway and make it the destination of the subnet's route table
  • BCreate an internet gateway and make it the destination of the subnet's route table
  • CCreate a virtual private gateway and make it the destination of the subnet's route table
  • DCreate an egress-only internet gateway and make it the destination of the subnet's route table (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Create an egress-only internet gateway and make it the destination of the subnet's route table.

SAA-C03 Question 471

Single page →
Topic 1 · Question 471

A company is creating an application that runs on containers in a VPC. The application stores and accesses data in an Amazon S3 bucket. During the development phase, the application will store and access 1 TB of data in Amazon S3 each day. The company wants to minimize costs and wants to prevent traffic from traversing the internet whenever possible. Which solution will meet these requirements?

  • AEnable S3 Intelligent-Tiering for the S3 bucket
  • BEnable S3 Transfer Acceleration for the S3 bucket
  • CCreate a gateway VPC endpoint for Amazon S3. Associate this endpoint with all route tables in the VPC (correct answer)
  • DCreate an interface endpoint for Amazon S3 in the VPC. Associate this endpoint with all route tables in the VPC
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create a gateway VPC endpoint for Amazon S3. Associate this endpoint with all route tables in the VPC

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. A gateway VPC endpoint gives private, no-cost access to Amazon S3 and DynamoDB from within the VPC. A VPC endpoint provides private connectivity to AWS services without traversing the public internet. This option delivers the requirement at the lowest cost.

SAA-C03 Question 472

Single page →
Topic 1 · Question 472

A company has a mobile chat application with a data store based in Amazon DynamoDB. Users would like new messages to be read with as little latency as possible. A solutions architect needs to design an optimal solution that requires minimal application changes. Which method should the solutions architect select?

  • AConfigure Amazon DynamoDB Accelerator (DAX) for the new messages table. Update the code to use the DAX endpoint. (correct answer)
  • BAdd DynamoDB read replicas to handle the increased read load. Update the application to point to the read endpoint for the read replicas.
  • CDouble the number of read capacity units for the new messages table in DynamoDB. Continue to use the existing DynamoDB endpoint.
  • DAdd an Amazon ElastiCache for Redis cache to the application stack. Update the application to point to the Redis cache endpoint instead of DynamoDB.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Configure Amazon DynamoDB Accelerator (DAX) for the new messages table. Update the code to use the DAX endpoint.

Explanation

Amazon DynamoDB is a fully managed, serverless NoSQL database with single-digit millisecond latency and automatic scaling. DynamoDB Accelerator (DAX) adds an in-memory cache for microsecond DynamoDB reads. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 473

Single page →
Topic 1 · Question 473

A company hosts a website on Amazon EC2 instances behind an Application Load Balancer (ALB). The website serves static content. Website traffic is increasing, and the company is concerned about a potential increase in cost.

  • ACreate an Amazon CloudFront distribution to cache state files at edge locations (correct answer)
  • BCreate an Amazon ElastiCache cluster. Connect the ALB to the ElastiCache cluster to serve cached files
  • CCreate an AWS WAF web ACL and associate it with the ALB. Add a rule to the web ACL to cache static files
  • DCreate a second ALB in an alternative AWS Region. Route user traffic to the closest Region to minimize data transfer costs
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create an Amazon CloudFront distribution to cache state files at edge locations

Explanation

Amazon CloudFront caches content at edge locations to reduce latency and offload origins.

SAA-C03 Question 474

Single page →
Topic 1 · Question 474

A company has multiple VPCs across AWS Regions to support and run workloads that are isolated from workloads in other Regions. Because of a recent application launch requirement, the company’s VPCs must communicate with all other VPCs across all Regions. Which solution will meet these requirements with the LEAST amount of administrative effort?

  • AUse VPC peering to manage VPC communication in a single Region. Use VPC peering across Regions to manage VPC communications.
  • BUse AWS Direct Connect gateways across all Regions to connect VPCs across regions and manage VPC communications.
  • CUse AWS Transit Gateway to manage VPC communication in a single Region and Transit Gateway peering across Regions to manage VPC communications. (correct answer)
  • DUse AWS PrivateLink across all Regions to connect VPCs across Regions and manage VPC communications
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Use AWS Transit Gateway to manage VPC communication in a single Region and Transit Gateway peering across Regions to manage VPC communications.

Explanation

AWS Transit Gateway centrally connects many VPCs and on-premises networks at scale.

SAA-C03 Question 475

Single page →
Topic 1 · Question 475

A company is designing a containerized application that will use Amazon Elastic Container Service (Amazon ECS). The application needs to access a shared file system that is highly durable and can recover data to another AWS Region with a recovery point objective (RPO) of 8 hours. The file system needs to provide a mount target m each Availability Zone within a Region. A solutions architect wants to use AWS Backup to manage the replication to another Region. Which solution will meet these requirements?

  • AAmazon FSx for Windows File Server with a Multi-AZ deployment
  • BAmazon FSx for NetApp ONTAP with a Multi-AZ deployment
  • CAmazon Elastic File System (Amazon EFS) with the Standard storage class (correct answer)
  • DAmazon FSx for OpenZFS
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Amazon Elastic File System (Amazon EFS) with the Standard storage class

Explanation

Amazon EFS is a shared, elastic NFS file system that multiple instances can mount concurrently across AZs.

SAA-C03 Question 476

Single page →
Topic 1 · Question 476

A company is expecting rapid growth in the near future. A solutions architect needs to configure existing users and grant permissions to new users on AWS. The solutions architect has decided to create IAM groups. The solutions architect will add the new users to IAM groups based on department. Which additional action is the MOST secure way to grant permissions to the new users?

  • AApply service control policies (SCPs) to manage access permissions
  • BCreate IAM roles that have least privilege permission. Attach the roles to the IAM groups
  • CCreate an IAM policy that grants least privilege permission. Attach the policy to the IAM groups (correct answer)
  • DCreate IAM roles. Associate the roles with a permissions boundary that defines the maximum permissions
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create an IAM policy that grants least privilege permission. Attach the policy to the IAM groups

Explanation

AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

SAA-C03 Question 477

Single page →
Topic 1 · Question 477

A group requires permissions to list an Amazon S3 bucket and delete objects from that bucket. An administrator has created the following IAM policy to provide access to the bucket and applied that policy to the group. The group is not able to delete objects in the bucket. The company follows least-privilege access rules.<br/><br/> <br/><br/>Which statement should a solutions architect add to the policy to correct bucket access?

Exhibit 1 for question 477Exhibit 2 for question 477Exhibit 3 for question 477Exhibit 4 for question 477Exhibit 5 for question 477
    Reveal answer & explanation
    Correct answer: D

    Refer to the exhibit image(s). The correct answer is D.

    SAA-C03 Question 478

    Single page →
    Topic 1 · Question 478

    A law firm needs to share information with the public. The information includes hundreds of files that must be publicly readable. Modifications or deletions of the files by anyone before a designated future date are prohibited. Which solution will meet these requirements in the MOST secure way?

    • AUpload all files to an Amazon S3 bucket that is configured for static website hosting. Grant read-only IAM permissions to any AWS principals that access the S3 bucket until the designated date.
    • BCreate a new Amazon S3 bucket with S3 Versioning enabled. Use S3 Object Lock with a retention period in accordance with the designated date. Configure the S3 bucket for static website hosting. Set an S3 bucket policy to allow read-only access to the objects. (correct answer)
    • CCreate a new Amazon S3 bucket with S3 Versioning enabled. Configure an event trigger to run an AWS Lambda function in case of object modification or deletion. Configure the Lambda function to replace the objects with the original versions from a private S3 bucket.
    • DUpload all files to an Amazon S3 bucket that is configured for static website hosting. Select the folder that contains the files. Use S3 Object Lock with a retention period in accordance with the designated date. Grant read-only IAM permissions to any AWS principals that access the S3 bucket.
    Reveal answer & explanation
    Correct answer: B

    The correct answer is B. Option B: Create a new Amazon S3 bucket with S3 Versioning enabled. Use S3 Object Lock with a retention period in accordance with the designated date. Configure the S3 bucket for static website hosting. Set an S3 bucket policy...

    Explanation

    Amazon S3 provides durable, scalable object storage that is fully managed. Amazon EBS provides block storage attached to a single EC2 instance. AWS Config tracks resource configuration changes and evaluates compliance.

    SAA-C03 Question 479

    Single page →
    Topic 1 · Question 479

    A company is making a prototype of the infrastructure for its new website by manually provisioning the necessary infrastructure. This infrastructure includes an Auto Scaling group, an Application Load Balancer and an Amazon RDS database. After the configuration has been thoroughly validated, the company wants the capability to immediately deploy the infrastructure for development and production use in two Availability Zones in an automated fashion. What should a solutions architect recommend to meet these requirements?

    • AUse AWS Systems Manager to replicate and provision the prototype infrastructure in two Availability Zones
    • BDefine the infrastructure as a template by using the prototype infrastructure as a guide. Deploy the infrastructure with AWS CloudFormation. (correct answer)
    • CUse AWS Config to record the inventory of resources that are used in the prototype infrastructure. Use AWS Config to deploy the prototype infrastructure into two Availability Zones.
    • DUse AWS Elastic Beanstalk and configure it to use an automated reference to the prototype infrastructure to automatically deploy new environments in two Availability Zones.
    Reveal answer & explanation
    Correct answer: B

    The correct answer is B. Option B: Define the infrastructure as a template by using the prototype infrastructure as a guide. Deploy the infrastructure with AWS CloudFormation.

    Explanation

    AWS CloudFormation provisions infrastructure as code repeatably.

    SAA-C03 Question 480

    Single page →
    Topic 1 · Question 480

    A business application is hosted on Amazon EC2 and uses Amazon S3 for encrypted object storage. The chief information security officer has directed that no application traffic between the two services should traverse the public internet. Which capability should the solutions architect use to meet the compliance requirements?

    • AAWS Key Management Service (AWS KMS)
    • BVPC endpoint (correct answer)
    • CPrivate subnet
    • DVirtual private gateway
    Reveal answer & explanation
    Correct answer: B

    The correct answer is B. Option B: VPC endpoint

    Explanation

    A VPC endpoint provides private connectivity to AWS services without traversing the public internet.

    Showing questions 461–480 of 1019 · Page 24 of 51