SAA-C03 — questions

Page 25 of 51 · 1019 total questions.

SAA-C03 Question 481

Topic 1 · Question 481

A company hosts a three-tier web application in the AWS Cloud. A Multi-AZAmazon RDS for MySQL server forms the database layer Amazon ElastiCache forms the cache layer. The company wants a caching strategy that adds or updates data in the cache when a customer adds an item to the database. The data in the cache must always match the data in the database. Which solution will meet these requirements?

AImplement the lazy loading caching strategy
BImplement the write-through caching strategy (correct answer)
CImplement the adding TTL caching strategy
DImplement the AWS AppConfig caching strategy

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Implement the write-through caching strategy By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SAA-C03 Question 482

Single page →

Topic 1 · Question 482

A company wants to migrate 100 GB of historical data from an on-premises location to an Amazon S3 bucket. The company has a 100 megabits per second (Mbps) internet connection on premises. The company needs to encrypt the data in transit to the S3 bucket. The company will store new data directly in Amazon S3. Which solution will meet these requirements with the LEAST operational overhead?

AUse the s3 sync command in the AWS CLI to move the data directly to an S3 bucket
BUse AWS DataSync to migrate the data from the on-premises location to an S3 bucket (correct answer)
CUse AWS Snowball to move the data to an S3 bucket
DSet up an IPsec VPN from the on-premises location to AWS. Use the s3 cp command in the AWS CLI to move the data directly to an S3 bucket

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Use AWS DataSync to migrate the data from the on-premises location to an S3 bucket

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. AWS DataSync automates and accelerates online data transfer to AWS with minimal effort.

SAA-C03 Question 483

Single page →

Topic 1 · Question 483

A company containerized a Windows job that runs on .NET 6 Framework under a Windows container. The company wants to run this job in the AWS Cloud. The job runs every 10 minutes. The job’s runtime varies between 1 minute and 3 minutes. Which solution will meet these requirements MOST cost-effectively?

ACreate an AWS Lambda function based on the container image of the job. Configure Amazon EventBridge to invoke the function every 10 minutes.
BUse AWS Batch to create a job that uses AWS Fargate resources. Configure the job scheduling to run every 10 minutes.
CUse Amazon Elastic Container Service (Amazon ECS) on AWS Fargate to run the job. Create a scheduled task based on the container image of the job to run every 10 minutes. (correct answer)
DUse Amazon Elastic Container Service (Amazon ECS) on AWS Fargate to run the job. Create a standalone task based on the container image of the job. Use Windows task scheduler to run the job every10 minutes.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Use Amazon Elastic Container Service (Amazon ECS) on AWS Fargate to run the job. Create a scheduled task based on the container image of the job to run every 10 minutes.

Explanation

AWS Fargate runs containers serverlessly so there are no EC2 hosts to manage or patch. Amazon ECS orchestrates containers and integrates natively with AWS networking and IAM. This option delivers the requirement at the lowest cost.

SAA-C03 Question 484

Single page →

Topic 1 · Question 484 · Select all that apply

A company wants to move from many standalone AWS accounts to a consolidated, multi-account architecture. The company plans to create many new AWS accounts for different business units. The company needs to authenticate access to these AWS accounts by using a centralized corporate directory service. Which combination of actions should a solutions architect recommend to meet these requirements? (Choose two.)

ACreate a new organization in AWS Organizations with all features turned on. Create the new AWS accounts in the organization. (correct answer)
BSet up an Amazon Cognito identity pool. Configure AWS IAM Identity Center (AWS Single Sign-On) to accept Amazon Cognito authentication.
CConfigure a service control policy (SCP) to manage the AWS accounts. Add AWS IAM Identity Center (AWS Single Sign-On) to AWS Directory Service.
DCreate a new organization in AWS Organizations. Configure the organization's authentication mechanism to use AWS Directory Service directly.
ESet up AWS IAM Identity Center (AWS Single Sign-On) in the organization. Configure IAM Identity Center, and integrate it with the company's corporate directory service. (correct answer)

Reveal answer & explanation

Correct answer: A, E

The correct answer is A, E. Option A: Create a new organization in AWS Organizations with all features turned on. Create the new AWS accounts in the organization. Option E: Set up AWS IAM Identity Center (AWS Single Sign-On) in the organization. Configure IAM Identity Center, and integrate it with the company's corporate directory service.

Explanation

AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies. AWS Organizations centrally governs and secures multiple AWS accounts. AWS IAM Identity Center (SSO) centrally manages workforce access to multiple accounts and apps.

SAA-C03 Question 485

Single page →

Topic 1 · Question 485

A company is looking for a solution that can store video archives in AWS from old news footage. The company needs to minimize costs and will rarely need to restore these files. When the files are needed, they must be available in a maximum of five minutes. What is the MOST cost-effective solution?

AStore the video archives in Amazon S3 Glacier and use Expedited retrievals. (correct answer)
BStore the video archives in Amazon S3 Glacier and use Standard retrievals.
CStore the video archives in Amazon S3 Standard-Infrequent Access (S3 Standard-IA).
DStore the video archives in Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA).

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Store the video archives in Amazon S3 Glacier and use Expedited retrievals.

Explanation

Amazon S3 Glacier offers low-cost archival storage for infrequently accessed data. Amazon S3 provides durable, scalable object storage that is fully managed. This option delivers the requirement at the lowest cost.

SAA-C03 Question 486

Single page →

Topic 1 · Question 486

A company is building a three-tier application on AWS. The presentation tier will serve a static website The logic tier is a containerized application. This application will store data in a relational database. The company wants to simplify deployment and to reduce operational costs. Which solution will meet these requirements?

AUse Amazon S3 to host static content. Use Amazon Elastic Container Service (Amazon ECS) with AWS Fargate for compute power. Use a managed Amazon RDS cluster for the database. (correct answer)
BUse Amazon CloudFront to host static content. Use Amazon Elastic Container Service (Amazon ECS) with Amazon EC2 for compute power. Use a managed Amazon RDS cluster for the database.
CUse Amazon S3 to host static content. Use Amazon Elastic Kubernetes Service (Amazon EKS) with AWS Fargate for compute power. Use a managed Amazon RDS cluster for the database.
DUse Amazon EC2 Reserved Instances to host static content. Use Amazon Elastic Kubernetes Service (Amazon EKS) with Amazon EC2 for compute power. Use a managed Amazon RDS cluster for the database.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Use Amazon S3 to host static content. Use Amazon Elastic Container Service (Amazon ECS) with AWS Fargate for compute power. Use a managed Amazon RDS cluster for the database.

Explanation

AWS Fargate runs containers serverlessly so there are no EC2 hosts to manage or patch. Amazon ECS orchestrates containers and integrates natively with AWS networking and IAM. Amazon S3 provides durable, scalable object storage that is fully managed.

SAA-C03 Question 487

Single page →

Topic 1 · Question 487

A company seeks a storage solution for its application. The solution must be highly available and scalable. The solution also must function as a file system be mountable by multiple Linux instances in AWS and on premises through native protocols, and have no minimum size requirements. The company has set up a Site-to-Site VPN for access from its on-premises network to its VPC. Which storage solution meets these requirements?

AAmazon FSx Multi-AZ deployments
BAmazon Elastic Block Store (Amazon EBS) Multi-Attach volumes
CAmazon Elastic File System (Amazon EFS) with multiple mount targets (correct answer)
DAmazon Elastic File System (Amazon EFS) with a single mount target and multiple access points

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Amazon Elastic File System (Amazon EFS) with multiple mount targets

Explanation

Amazon EFS is a shared, elastic NFS file system that multiple instances can mount concurrently across AZs. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SAA-C03 Question 488

Single page →

Topic 1 · Question 488

A 4-year-old media company is using the AWS Organizations all features feature set to organize its AWS accounts. According to the company's finance team, the billing information on the member accounts must not be accessible to anyone, including the root user of the member accounts. Which solution will meet these requirements?

AAdd all finance team users to an IAM group. Attach an AWS managed policy named Billing to the group.
BAttach an identity-based policy to deny access to the billing information to all users, including the root user.
CCreate a service control policy (SCP) to deny access to the billing information. Attach the SCP to the root organizational unit (OU). (correct answer)
DConvert from the Organizations all features feature set to the Organizations consolidated billing feature set.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Create a service control policy (SCP) to deny access to the billing information. Attach the SCP to the root organizational unit (OU).

Explanation

Service Control Policies set guardrails on what accounts in an organization can do.

SAA-C03 Question 489

Single page →

Topic 1 · Question 489

An ecommerce company runs an application in the AWS Cloud that is integrated with an on-premises warehouse solution. The company uses Amazon Simple Notification Service (Amazon SNS) to send order messages to an on-premises HTTPS endpoint so the warehouse application can process the orders. The local data center team has detected that some of the order messages were not received. A solutions architect needs to retain messages that are not delivered and analyze the messages for up to 14 days. Which solution will meet these requirements with the LEAST development effort?

AConfigure an Amazon SNS dead letter queue that has an Amazon Kinesis Data Stream target with a retention period of 14 days.
BAdd an Amazon Simple Queue Service (Amazon SQS) queue with a retention period of 14 days between the application and Amazon SNS.
CConfigure an Amazon SNS dead letter queue that has an Amazon Simple Queue Service (Amazon SQS) target with a retention period of 14 days. (correct answer)
DConfigure an Amazon SNS dead letter queue that has an Amazon DynamoDB target with a TTL attribute set for a retention period of 14 days.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Configure an Amazon SNS dead letter queue that has an Amazon Simple Queue Service (Amazon SQS) target with a retention period of 14 days.

Explanation

Amazon SQS is a fully managed message queue that decouples components and absorbs traffic spikes. Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers. AWS Config tracks resource configuration changes and evaluates compliance. This option needs the least custom development effort.

SAA-C03 Question 490

Single page →

Topic 1 · Question 490

A gaming company uses Amazon DynamoDB to store user information such as geographic location, player data, and leaderboards. The company needs to configure continuous backups to an Amazon S3 bucket with a minimal amount of coding. The backups must not affect availability of the application and must not affect the read capacity units (RCUs) that are defined for the table. Which solution meets these requirements?

AUse an Amazon EMR cluster. Create an Apache Hive job to back up the data to Amazon S3.
BExport the data directly from DynamoDB to Amazon S3 with continuous backups. Turn on point-in-time recovery for the table. (correct answer)
CConfigure Amazon DynamoDB Streams. Create an AWS Lambda function to consume the stream and export the data to an Amazon S3 bucket.
DCreate an AWS Lambda function to export the data from the database tables to Amazon S3 on a regular basis. Turn on point-in-time recovery for the table.

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Export the data directly from DynamoDB to Amazon S3 with continuous backups. Turn on point-in-time recovery for the table.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. AWS Backup centrally automates and manages backups across AWS services. Amazon DynamoDB is a fully managed, serverless NoSQL database with single-digit millisecond latency and automatic scaling.

SAA-C03 Question 491

Single page →

Topic 1 · Question 491

A solutions architect is designing an asynchronous application to process credit card data validation requests for a bank. The application must be secure and be able to process each request at least once. Which solution will meet these requirements MOST cost-effectively?

AUse AWS Lambda event source mapping. Set Amazon Simple Queue Service (Amazon SQS) standard queues as the event source. Use AWS Key Management Service (SSE-KMS) for encryption. Add the kms:Decrypt permission for the Lambda execution role. (correct answer)
BUse AWS Lambda event source mapping. Use Amazon Simple Queue Service (Amazon SQS) FIFO queues as the event source. Use SQS managed encryption keys (SSE-SQS) for encryption. Add the encryption key invocation permission for the Lambda function.
CUse the AWS Lambda event source mapping. Set Amazon Simple Queue Service (Amazon SQS) FIFO queues as the event source. Use AWS KMS keys (SSE-KMS). Add the kms:Decrypt permission for the Lambda execution role.
DUse the AWS Lambda event source mapping. Set Amazon Simple Queue Service (Amazon SQS) standard queues as the event source. Use AWS KMS keys (SSE-KMS) for encryption. Add the encryption key invocation permission for the Lambda function.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Use AWS Lambda event source mapping. Set Amazon Simple Queue Service (Amazon SQS) standard queues as the event source. Use AWS Key Management Service (SSE-KMS) for encryption. Add the kms:Decrypt permission for the La...

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon SQS is a fully managed message queue that decouples components and absorbs traffic spikes. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest. This option delivers the requirement at the lowest cost.

SAA-C03 Question 492

Single page →

Topic 1 · Question 492

A company has multiple AWS accounts for development work. Some staff consistently use oversized Amazon EC2 instances, which causes the company to exceed the yearly budget for the development accounts. The company wants to centrally restrict the creation of AWS resources in these accounts. Which solution will meet these requirements with the LEAST development effort?

ADevelop AWS Systems Manager templates that use an approved EC2 creation process. Use the approved Systems Manager templates to provision EC2 instances.
BUse AWS Organizations to organize the accounts into organizational units (OUs). Define and attach a service control policy (SCP) to control the usage of EC2 instance types. (correct answer)
CConfigure an Amazon EventBridge rule that invokes an AWS Lambda function when an EC2 instance is created. Stop disallowed EC2 instance types.
DSet up AWS Service Catalog products for the staff to create the allowed EC2 instance types. Ensure that staff can deploy EC2 instances only by using the Service Catalog products.

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Use AWS Organizations to organize the accounts into organizational units (OUs). Define and attach a service control policy (SCP) to control the usage of EC2 instance types.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. AWS Organizations centrally governs and secures multiple AWS accounts. Service Control Policies set guardrails on what accounts in an organization can do. This option needs the least custom development effort.

SAA-C03 Question 493

Single page →

Topic 1 · Question 493 · Select all that apply

A company wants to use artificial intelligence (AI) to determine the quality of its customer service calls. The company currently manages calls in four different languages, including English. The company will offer new languages in the future. The company does not have the resources to regularly maintain machine learning (ML) models. The company needs to create written sentiment analysis reports from the customer service call recordings. The customer service call recording text must be translated into English. Which combination of steps will meet these requirements? (Choose three.)

AUse Amazon Comprehend to translate the audio recordings into English.
BUse Amazon Lex to create the written sentiment analysis reports.
CUse Amazon Polly to convert the audio recordings into text.
DUse Amazon Transcribe to convert the audio recordings in any language into text. (correct answer)
EUse Amazon Translate to translate text in any language to English. (correct answer)
FUse Amazon Comprehend to create the sentiment analysis reports. (correct answer)

Reveal answer & explanation

Correct answer: D, E, F

The correct answer is D, E, F. Option D: Use Amazon Transcribe to convert the audio recordings in any language into text. Option E: Use Amazon Translate to translate text in any language to English. Option F: Use Amazon Comprehend to create the sentiment analysis reports.

Explanation

Amazon Comprehend extracts insights and entities from text using NLP. Amazon Transcribe converts speech to text. Amazon Translate provides neural machine translation.

SAA-C03 Question 494

Single page →

Topic 1 · Question 494

A company uses Amazon EC2 instances to host its internal systems. As part of a deployment operation, an administrator tries to use the AWS CLI to terminate an EC2 instance. However, the administrator receives a 403 (Access Denied) error message. The administrator is using an IAM role that has the following IAM policy attached: What is the cause of the unsuccessful request?

AThe EC2 instance has a resource-based policy with a Deny statement.
BThe principal has not been specified in the policy statement.
CThe "Action" field does not grant the actions that are required to terminate the EC2 instance.
DThe request to terminate the EC2 instance does not originate from the CIDR blocks 192.0.2.0/24 or 203.0.113.0/24. (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: The request to terminate the EC2 instance does not originate from the CIDR blocks 192.0.2.0/24 or 203.0.113.0/24.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system.

SAA-C03 Question 495

Single page →

Topic 1 · Question 495

A company is conducting an internal audit. The company wants to ensure that the data in an Amazon S3 bucket that is associated with the company’s AWS Lake Formation data lake does not contain sensitive customer or employee data. The company wants to discover personally identifiable information (PII) or financial information, including passport numbers and credit card numbers. Which solution will meet these requirements?

AConfigure AWS Audit Manager on the account. Select the Payment Card Industry Data Security Standards (PCI DSS) for auditing.
BConfigure Amazon S3 Inventory on the S3 bucket Configure Amazon Athena to query the inventory.
CConfigure Amazon Macie to run a data discovery job that uses managed identifiers for the required data types. (correct answer)
DUse Amazon S3 Select to run a report across the S3 bucket.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Configure Amazon Macie to run a data discovery job that uses managed identifiers for the required data types.

Explanation

Amazon Macie discovers and protects sensitive data such as PII in S3. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 496

Single page →

Topic 1 · Question 496 · Select all that apply

A company uses on-premises servers to host its applications. The company is running out of storage capacity. The applications use both block storage and NFS storage. The company needs a high-performing solution that supports local caching without re-architecting its existing applications. Which combination of actions should a solutions architect take to meet these requirements? (Choose two.)

AMount Amazon S3 as a file system to the on-premises servers.
BDeploy an AWS Storage Gateway file gateway to replace NFS storage. (correct answer)
CDeploy AWS Snowball Edge to provision NFS mounts to on-premises servers.
DDeploy an AWS Storage Gateway volume gateway to replace the block storage. (correct answer)
EDeploy Amazon Elastic File System (Amazon EFS) volumes and mount them to on-premises servers.

Reveal answer & explanation

Correct answer: B, D

The correct answer is B, D. Option B: Deploy an AWS Storage Gateway file gateway to replace NFS storage. Option D: Deploy an AWS Storage Gateway volume gateway to replace the block storage.

Explanation

AWS Storage Gateway bridges on-premises apps to AWS storage with local caching.

SAA-C03 Question 497

Single page →

Topic 1 · Question 497

A company has a service that reads and writes large amounts of data from an Amazon S3 bucket in the same AWS Region. The service is deployed on Amazon EC2 instances within the private subnet of a VPC. The service communicates with Amazon S3 over a NAT gateway in the public subnet. However, the company wants a solution that will reduce the data output costs. Which solution will meet these requirements MOST cost-effectively?

AProvision a dedicated EC2 NAT instance in the public subnet. Configure the route table for the private subnet to use the elastic network interface of this instance as the destination for all S3 traffic.
BProvision a dedicated EC2 NAT instance in the private subnet. Configure the route table for the public subnet to use the elastic network interface of this instance as the destination for all S3 traffic.
CProvision a VPC gateway endpoint. Configure the route table for the private subnet to use the gateway endpoint as the route for all S3 traffic. (correct answer)
DProvision a second NAT gateway. Configure the route table for the private subnet to use this NAT gateway as the destination for all S3 traffic.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Provision a VPC gateway endpoint. Configure the route table for the private subnet to use the gateway endpoint as the route for all S3 traffic.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. AWS Config tracks resource configuration changes and evaluates compliance. This option delivers the requirement at the lowest cost.

SAA-C03 Question 498

Single page →

Topic 1 · Question 498

A company uses Amazon S3 to store high-resolution pictures in an S3 bucket. To minimize application changes, the company stores the pictures as the latest version of an S3 object. The company needs to retain only the two most recent versions of the pictures. The company wants to reduce costs. The company has identified the S3 bucket as a large expense. Which solution will reduce the S3 costs with the LEAST operational overhead?

AUse S3 Lifecycle to delete expired object versions and retain the two most recent versions. (correct answer)
BUse an AWS Lambda function to check for older versions and delete all but the two most recent versions.
CUse S3 Batch Operations to delete noncurrent object versions and retain only the two most recent versions.
DDeactivate versioning on the S3 bucket and retain the two most recent versions.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Use S3 Lifecycle to delete expired object versions and retain the two most recent versions.

Explanation

S3 Lifecycle policies automatically transition or expire objects to control storage cost. Amazon S3 provides durable, scalable object storage that is fully managed.

SAA-C03 Question 499

Single page →

Topic 1 · Question 499

A company needs to minimize the cost of its 1 Gbps AWS Direct Connect connection. The company's average connection utilization is less than 10%. A solutions architect must recommend a solution that will reduce the cost without compromising security. Which solution will meet these requirements?

ASet up a new 1 Gbps Direct Connect connection. Share the connection with another AWS account.
BSet up a new 200 Mbps Direct Connect connection in the AWS Management Console.
CContact an AWS Direct Connect Partner to order a 1 Gbps connection. Share the connection with another AWS account.
DContact an AWS Direct Connect Partner to order a 200 Mbps hosted connection for an existing AWS account. (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Contact an AWS Direct Connect Partner to order a 200 Mbps hosted connection for an existing AWS account.

Explanation

AWS Direct Connect provides a dedicated, consistent private network link between on premises and AWS.

SAA-C03 Question 500

Single page →

Topic 1 · Question 500 · Select all that apply

A company has multiple Windows file servers on premises. The company wants to migrate and consolidate its files into an Amazon FSx for Windows File Server file system. File permissions must be preserved to ensure that access rights do not change. Which solutions will meet these requirements? (Choose two.)

ADeploy AWS DataSync agents on premises. Schedule DataSync tasks to transfer the data to the FSx for Windows File Server file system. (correct answer)
BCopy the shares on each file server into Amazon S3 buckets by using the AWS CLI. Schedule AWS DataSync tasks to transfer the data to the FSx for Windows File Server file system.
CRemove the drives from each file server. Ship the drives to AWS for import into Amazon S3. Schedule AWS DataSync tasks to transfer the data to the FSx for Windows File Server file system.
DOrder an AWS Snowcone device. Connect the device to the on-premises network. Launch AWS DataSync agents on the device. Schedule DataSync tasks to transfer the data to the FSx for Windows File Server file system. (correct answer)
EOrder an AWS Snowball Edge Storage Optimized device. Connect the device to the on-premises network. Copy data to the device by using the AWS CLI. Ship the device back to AWS for import into Amazon S3. Schedule AWS DataSync tasks to transfer the data to the FSx for Windows File Server file system.

Reveal answer & explanation

Correct answer: A, D

The correct answer is A, D. Option A: Deploy AWS DataSync agents on premises. Schedule DataSync tasks to transfer the data to the FSx for Windows File Server file system. Option D: Order an AWS Snowcone device. Connect the device to the on-premises network. Launch AWS DataSync agents on the device. Schedule DataSync tasks to transfer the data to the FSx for Windows File Server file system.

Explanation

Amazon FSx for Windows File Server provides fully managed SMB/Windows shared file storage. Amazon FSx provides fully managed third-party file systems. AWS DataSync automates and accelerates online data transfer to AWS with minimal effort.

Showing questions 481–500 of 1019 · Page 25 of 51