SAA-C03 — questions

Page 26 of 51 · 1019 total questions.

SAA-C03 Question 501

Single page →

Topic 1 · Question 501

A company wants to ingest customer payment data into the company's data lake in Amazon S3. The company receives payment data every minute on average. The company wants to analyze the payment data in real time. Then the company wants to ingest the data into the data lake. Which solution will meet these requirements with the MOST operational efficiency?

AUse Amazon Kinesis Data Streams to ingest data. Use AWS Lambda to analyze the data in real time.
BUse AWS Glue to ingest data. Use Amazon Kinesis Data Analytics to analyze the data in real time.
CUse Amazon Kinesis Data Firehose to ingest data. Use Amazon Kinesis Data Analytics to analyze the data in real time. (correct answer)
DUse Amazon API Gateway to ingest data. Use AWS Lambda to analyze the data in real time.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Use Amazon Kinesis Data Firehose to ingest data. Use Amazon Kinesis Data Analytics to analyze the data in real time.

Explanation

Kinesis Data Firehose delivers streaming data to destinations like S3/Redshift with no servers to manage. Amazon Kinesis ingests and processes real-time streaming data at scale. This option meets the real-time / low-latency performance requirement.

SAA-C03 Question 502

Single page →

Topic 1 · Question 502 · Select all that apply

A company runs a website that uses a content management system (CMS) on Amazon EC2. The CMS runs on a single EC2 instance and uses an Amazon Aurora MySQL Multi-AZ DB instance for the data tier. Website images are stored on an Amazon Elastic Block Store (Amazon EBS) volume that is mounted inside the EC2 instance. Which combination of actions should a solutions architect take to improve the performance and resilience of the website? (Choose two.)

AMove the website images into an Amazon S3 bucket that is mounted on every EC2 instance
BShare the website images by using an NFS share from the primary EC2 instance. Mount this share on the other EC2 instances.
CMove the website images onto an Amazon Elastic File System (Amazon EFS) file system that is mounted on every EC2 instance. (correct answer)
DCreate an Amazon Machine Image (AMI) from the existing EC2 instance. Use the AMI to provision new instances behind an Application Load Balancer as part of an Auto Scaling group. Configure the Auto Scaling group to maintain a minimum of two instances. Configure an accelerator in AWS Global Accelerator for the website
ECreate an Amazon Machine Image (AMI) from the existing EC2 instance. Use the AMI to provision new instances behind an Application Load Balancer as part of an Auto Scaling group. Configure the Auto Scaling group to maintain a minimum of two instances. Configure an Amazon CloudFront distribution for the website. (correct answer)

Reveal answer & explanation

Correct answer: C, E

The correct answer is C, E. Option C: Move the website images onto an Amazon Elastic File System (Amazon EFS) file system that is mounted on every EC2 instance. Option E: Create an Amazon Machine Image (AMI) from the existing EC2 instance. Use the AMI to provision new instances behind an Application Load Balancer as part of an Auto Scaling group. Configure the Auto Scaling group to mai...

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon EFS is a shared, elastic NFS file system that multiple instances can mount concurrently across AZs. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SAA-C03 Question 503

Single page →

Topic 1 · Question 503

A company runs an infrastructure monitoring service. The company is building a new feature that will enable the service to monitor data in customer AWS accounts. The new feature will call AWS APIs in customer accounts to describe Amazon EC2 instances and read Amazon CloudWatch metrics. What should the company do to obtain access to customer accounts in the MOST secure way?

AEnsure that the customers create an IAM role in their account with read-only EC2 and CloudWatch permissions and a trust policy to the company’s account. (correct answer)
BCreate a serverless API that implements a token vending machine to provide temporary AWS credentials for a role with read-only EC2 and CloudWatch permissions.
CEnsure that the customers create an IAM user in their account with read-only EC2 and CloudWatch permissions. Encrypt and store customer access and secret keys in a secrets management system.
DEnsure that the customers create an Amazon Cognito user in their account to use an IAM role with read-only EC2 and CloudWatch permissions. Encrypt and store the Amazon Cognito user and password in a secrets management system.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Ensure that the customers create an IAM role in their account with read-only EC2 and CloudWatch permissions and a trust policy to the company’s account.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

SAA-C03 Question 504

Single page →

Topic 1 · Question 504

A company needs to connect several VPCs in the us-east-1 Region that span hundreds of AWS accounts. The company's networking team has its own AWS account to manage the cloud network. What is the MOST operationally efficient solution to connect the VPCs?

ASet up VPC peering connections between each VPC. Update each associated subnet’s route table
BConfigure a NAT gateway and an internet gateway in each VPC to connect each VPC through the internet
CCreate an AWS Transit Gateway in the networking team’s AWS account. Configure static routes from each VPC. (correct answer)
DDeploy VPN gateways in each VPC. Create a transit VPC in the networking team’s AWS account to connect to each VPC.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Create an AWS Transit Gateway in the networking team’s AWS account. Configure static routes from each VPC.

Explanation

AWS Transit Gateway centrally connects many VPCs and on-premises networks at scale. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 505

Single page →

Topic 1 · Question 505

A company has Amazon EC2 instances that run nightly batch jobs to process data. The EC2 instances run in an Auto Scaling group that uses On-Demand billing. If a job fails on one instance, another instance will reprocess the job. The batch jobs run between 12:00 AM and 06:00 AM local time every day. Which solution will provide EC2 instances to meet these requirements MOST cost-effectively?

APurchase a 1-year Savings Plan for Amazon EC2 that covers the instance family of the Auto Scaling group that the batch job uses.
BPurchase a 1-year Reserved Instance for the specific instance type and operating system of the instances in the Auto Scaling group that the batch job uses.
CCreate a new launch template for the Auto Scaling group. Set the instances to Spot Instances. Set a policy to scale out based on CPU usage. (correct answer)
DCreate a new launch template for the Auto Scaling group. Increase the instance size. Set a policy to scale out based on CPU usage.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Create a new launch template for the Auto Scaling group. Set the instances to Spot Instances. Set a policy to scale out based on CPU usage.

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Spot Instances use spare capacity at a large discount, ideal for fault-tolerant or interruptible workloads. This option delivers the requirement at the lowest cost.

SAA-C03 Question 506

Single page →

Topic 1 · Question 506

A social media company is building a feature for its website. The feature will give users the ability to upload photos. The company expects significant increases in demand during large events and must ensure that the website can handle the upload traffic from users. Which solution meets these requirements with the MOST scalability?

AUpload files from the user's browser to the application servers. Transfer the files to an Amazon S3 bucket.
BProvision an AWS Storage Gateway file gateway. Upload files directly from the user's browser to the file gateway.
CGenerate Amazon S3 presigned URLs in the application. Upload files directly from the user's browser into an S3 bucket. (correct answer)
DProvision an Amazon Elastic File System (Amazon EFS) file system. Upload files directly from the user's browser to the file system.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Generate Amazon S3 presigned URLs in the application. Upload files directly from the user's browser into an S3 bucket.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed.

SAA-C03 Question 507

Single page →

Topic 1 · Question 507

A company has a web application for travel ticketing. The application is based on a database that runs in a single data center in North America. The company wants to expand the application to serve a global user base. The company needs to deploy the application to multiple AWS Regions. Average latency must be less than 1 second on updates to the reservation database. The company wants to have separate deployments of its web platform across multiple Regions. However, the company must maintain a single primary reservation database that is globally consistent. Which solution should a solutions architect recommend to meet these requirements?

AConvert the application to use Amazon DynamoDB. Use a global table for the center reservation table. Use the correct Regional endpoint in each Regional deployment. (correct answer)
BMigrate the database to an Amazon Aurora MySQL database. Deploy Aurora Read Replicas in each Region. Use the correct Regional endpoint in each Regional deployment for access to the database.
CMigrate the database to an Amazon RDS for MySQL database. Deploy MySQL read replicas in each Region. Use the correct Regional endpoint in each Regional deployment for access to the database.
DMigrate the application to an Amazon Aurora Serverless database. Deploy instances of the database to each Region. Use the correct Regional endpoint in each Regional deployment to access the database. Use AWS Lambda functions to process event streams in each Region to synchronize the databases.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Convert the application to use Amazon DynamoDB. Use a global table for the center reservation table. Use the correct Regional endpoint in each Regional deployment.

Explanation

Amazon DynamoDB is a fully managed, serverless NoSQL database with single-digit millisecond latency and automatic scaling.

SAA-C03 Question 508

Single page →

Topic 1 · Question 508 · Select all that apply

A company has migrated multiple Microsoft Windows Server workloads to Amazon EC2 instances that run in the us-west-1 Region. The company manually backs up the workloads to create an image as needed. In the event of a natural disaster in the us-west-1 Region, the company wants to recover workloads quickly in the us-west-2 Region. The company wants no more than 24 hours of data loss on the EC2 instances. The company also wants to automate any backups of the EC2 instances. Which solutions will meet these requirements with the LEAST administrative effort? (Choose two.)

ACreate an Amazon EC2-backed Amazon Machine Image (AMI) lifecycle policy to create a backup based on tags. Schedule the backup to run twice daily. Copy the image on demand.
BCreate an Amazon EC2-backed Amazon Machine Image (AMI) lifecycle policy to create a backup based on tags. Schedule the backup to run twice daily. Configure the copy to the us-west-2 Region. (correct answer)
CCreate backup vaults in us-west-1 and in us-west-2 by using AWS Backup. Create a backup plan for the EC2 instances based on tag values. Create an AWS Lambda function to run as a scheduled job to copy the backup data to us-west-2.
DCreate a backup vault by using AWS Backup. Use AWS Backup to create a backup plan for the EC2 instances based on tag values. Define the destination for the copy as us-west-2. Specify the backup schedule to run twice daily. (correct answer)
ECreate a backup vault by using AWS Backup. Use AWS Backup to create a backup plan for the EC2 instances based on tag values. Specify the backup schedule to run twice daily. Copy on demand to us-west-2.

Reveal answer & explanation

Correct answer: B, D

The correct answer is B, D. Option B: Create an Amazon EC2-backed Amazon Machine Image (AMI) lifecycle policy to create a backup based on tags. Schedule the backup to run twice daily. Configure the copy to the us-west-2 Region. Option D: Create a backup vault by using AWS Backup. Use AWS Backup to create a backup plan for the EC2 instances based on tag values. Define the destination for the copy as us-west-2. Specify the backup schedule to run twice d...

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. AWS Backup centrally automates and manages backups across AWS services. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 509

Single page →

Topic 1 · Question 509

A company operates a two-tier application for image processing. The application uses two Availability Zones, each with one public subnet and one private subnet. An Application Load Balancer (ALB) for the web tier uses the public subnets. Amazon EC2 instances for the application tier use the private subnets. Users report that the application is running more slowly than expected. A security audit of the web server log files shows that the application is receiving millions of illegitimate requests from a small number of IP addresses. A solutions architect needs to resolve the immediate performance problem while the company investigates a more permanent solution. What should the solutions architect recommend to meet this requirement?

AModify the inbound security group for the web tier. Add a deny rule for the IP addresses that are consuming resources.
BModify the network ACL for the web tier subnets. Add an inbound deny rule for the IP addresses that are consuming resources. (correct answer)
CModify the inbound security group for the application tier. Add a deny rule for the IP addresses that are consuming resources.
DModify the network ACL for the application tier subnets. Add an inbound deny rule for the IP addresses that are consuming resources.

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Modify the network ACL for the web tier subnets. Add an inbound deny rule for the IP addresses that are consuming resources.

SAA-C03 Question 510

Single page →

Topic 1 · Question 510

A global marketing company has applications that run in the ap-southeast-2 Region and the eu-west-1 Region. Applications that run in a VPC in eu-west-1 need to communicate securely with databases that run in a VPC in ap-southeast-2. Which network design will meet these requirements?

ACreate a VPC peering connection between the eu-west-1 VPC and the ap-southeast-2 VPC. Create an inbound rule in the eu-west-1 application security group that allows traffic from the database server IP addresses in the ap-southeast-2 security group.
BConfigure a VPC peering connection between the ap-southeast-2 VPC and the eu-west-1 VPC. Update the subnet route tables. Create an inbound rule in the ap-southeast-2 database security group that references the security group ID of the application servers in eu-west-1.
CConfigure a VPC peering connection between the ap-southeast-2 VPC and the eu-west-1 VPUpdate the subnet route tables. Create an inbound rule in the ap-southeast-2 database security group that allows traffic from the eu-west-1 application server IP addresses. (correct answer)
DCreate a transit gateway with a peering attachment between the eu-west-1 VPC and the ap-southeast-2 VPC. After the transit gateways are properly peered and routing is configured, create an inbound rule in the database security group that references the security group ID of the application servers in eu-west-1.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Configure a VPC peering connection between the ap-southeast-2 VPC and the eu-west-1 VPUpdate the subnet route tables. Create an inbound rule in the ap-southeast-2 database security group that allows traffic from the e...

Explanation

VPC peering privately connects two VPCs without a gateway. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 511

Single page →

Topic 1 · Question 511

A company is developing software that uses a PostgreSQL database schema. The company needs to configure multiple development environments and databases for the company's developers. On average, each development environment is used for half of the 8-hour workday. Which solution will meet these requirements MOST cost-effectively?

AConfigure each development environment with its own Amazon Aurora PostgreSQL database
BConfigure each development environment with its own Amazon RDS for PostgreSQL Single-AZ DB instances
CConfigure each development environment with its own Amazon Aurora On-Demand PostgreSQL-Compatible database (correct answer)
DConfigure each development environment with its own Amazon S3 bucket by using Amazon S3 Object Select

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Configure each development environment with its own Amazon Aurora On-Demand PostgreSQL-Compatible database

Explanation

Amazon Aurora is a high-performance managed relational database with built-in replication and failover. AWS Config tracks resource configuration changes and evaluates compliance. This option delivers the requirement at the lowest cost.

SAA-C03 Question 512

Single page →

Topic 1 · Question 512

A company uses AWS Organizations with resources tagged by account. The company also uses AWS Backup to back up its AWS infrastructure resources. The company needs to back up all AWS resources. Which solution will meet these requirements with the LEAST operational overhead?

AUse AWS Config to identify all untagged resources. Tag the identified resources programmatically. Use tags in the backup plan. (correct answer)
BUse AWS Config to identify all resources that are not running. Add those resources to the backup vault.
CRequire all AWS account owners to review their resources to identify the resources that need to be backed up.
DUse Amazon Inspector to identify all noncompliant resources.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Use AWS Config to identify all untagged resources. Tag the identified resources programmatically. Use tags in the backup plan.

Explanation

AWS Backup centrally automates and manages backups across AWS services. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 513

Single page →

Topic 1 · Question 513

A social media company wants to allow its users to upload images in an application that is hosted in the AWS Cloud. The company needs a solution that automatically resizes the images so that the images can be displayed on multiple device types. The application experiences unpredictable traffic patterns throughout the day. The company is seeking a highly available solution that maximizes scalability. What should a solutions architect do to meet these requirements?

ACreate a static website hosted in Amazon S3 that invokes AWS Lambda functions to resize the images and store the images in an Amazon S3 bucket. (correct answer)
BCreate a static website hosted in Amazon CloudFront that invokes AWS Step Functions to resize the images and store the images in an Amazon RDS database.
CCreate a dynamic website hosted on a web server that runs on an Amazon EC2 instance. Configure a process that runs on the EC2 instance to resize the images and store the images in an Amazon S3 bucket.
DCreate a dynamic website hosted on an automatically scaling Amazon Elastic Container Service (Amazon ECS) cluster that creates a resize job in Amazon Simple Queue Service (Amazon SQS). Set up an image-resizing program that runs on an Amazon EC2 instance to process the resize jobs.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Create a static website hosted in Amazon S3 that invokes AWS Lambda functions to resize the images and store the images in an Amazon S3 bucket.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon S3 provides durable, scalable object storage that is fully managed. Amazon EBS provides block storage attached to a single EC2 instance. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SAA-C03 Question 514

Single page →

Topic 1 · Question 514

A company is running a microservices application on Amazon EC2 instances. The company wants to migrate the application to an Amazon Elastic Kubernetes Service (Amazon EKS) cluster for scalability. The company must configure the Amazon EKS control plane with endpoint private access set to true and endpoint public access set to false to maintain security compliance. The company must also put the data plane in private subnets. However, the company has received error notifications because the node cannot join the cluster. Which solution will allow the node to join the cluster?

AGrant the required permission in AWS Identity and Access Management (IAM) to the AmazonEKSNodeRole IAM role.
BCreate interface VPC endpoints to allow nodes to access the control plane. (correct answer)
CRecreate nodes in the public subnet. Restrict security groups for EC2 nodes.
DAllow outbound traffic in the security group of the nodes.

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Create interface VPC endpoints to allow nodes to access the control plane.

Explanation

A VPC endpoint provides private connectivity to AWS services without traversing the public internet.

SAA-C03 Question 515

Single page →

Topic 1 · Question 515 · Select all that apply

A company is migrating an on-premises application to AWS. The company wants to use Amazon Redshift as a solution. Which use cases are suitable for Amazon Redshift in this scenario? (Choose three.)

ASupporting data APIs to access data with traditional, containerized, and event-driven applications
BSupporting client-side and server-side encryption (correct answer)
CBuilding analytics workloads during specified hours and when the application is not active (correct answer)
DCaching data to reduce the pressure on the backend database
EScaling globally to support petabytes of data and tens of millions of requests per minute (correct answer)
FCreating a secondary replica of the cluster by using the AWS Management Console

Reveal answer & explanation

Correct answer: B, C, E

The correct answer is B, C, E. Option B: Supporting client-side and server-side encryption Option C: Building analytics workloads during specified hours and when the application is not active Option E: Scaling globally to support petabytes of data and tens of millions of requests per minute.

SAA-C03 Question 516

Single page →

Topic 1 · Question 516

A company provides an API interface to customers so the customers can retrieve their financial information. Еhe company expects a larger number of requests during peak usage times of the year. The company requires the API to respond consistently with low latency to ensure customer satisfaction. The company needs to provide a compute host for the API. Which solution will meet these requirements with the LEAST operational overhead?

AUse an Application Load Balancer and Amazon Elastic Container Service (Amazon ECS).
BUse Amazon API Gateway and AWS Lambda functions with provisioned concurrency. (correct answer)
CUse an Application Load Balancer and an Amazon Elastic Kubernetes Service (Amazon EKS) cluster.
DUse Amazon API Gateway and AWS Lambda functions with reserved concurrency.

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Use Amazon API Gateway and AWS Lambda functions with provisioned concurrency.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon API Gateway is a fully managed front door for creating and securing APIs at scale.

SAA-C03 Question 517

Single page →

Topic 1 · Question 517

A company wants to send all AWS Systems Manager Session Manager logs to an Amazon S3 bucket for archival purposes. Which solution will meet this requirement with the MOST operational efficiency?

AEnable S3 logging in the Systems Manager console. Choose an S3 bucket to send the session data to. (correct answer)
BInstall the Amazon CloudWatch agent. Push all logs to a CloudWatch log group. Export the logs to an S3 bucket from the group for archival purposes.
CCreate a Systems Manager document to upload all server logs to a central S3 bucket. Use Amazon EventBridge to run the Systems Manager document against all servers that are in the account daily.
DInstall an Amazon CloudWatch agent. Push all logs to a CloudWatch log group. Create a CloudWatch logs subscription that pushes any incoming log events to an Amazon Kinesis Data Firehose delivery stream. Set Amazon S3 as the destination.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Enable S3 logging in the Systems Manager console. Choose an S3 bucket to send the session data to.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. AWS Systems Manager operates and automates management of fleets of resources.

SAA-C03 Question 518

Single page →

Topic 1 · Question 518

An application uses an Amazon RDS MySQL DB instance. The RDS database is becoming low on disk space. A solutions architect wants to increase the disk space without downtime. Which solution meets these requirements with the LEAST amount of effort?

AEnable storage autoscaling in RDS (correct answer)
BIncrease the RDS database instance size
CChange the RDS database instance storage type to Provisioned IOPS
DBack up the RDS database, increase the storage capacity, restore the database, and stop the previous instance

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Enable storage autoscaling in RDS

Explanation

Amazon RDS is a managed relational database that handles patching, backups and failover.

SAA-C03 Question 519

Single page →

Topic 1 · Question 519

A consulting company provides professional services to customers worldwide. The company provides solutions and tools for customers to expedite gathering and analyzing data on AWS. The company needs to centrally manage and deploy a common set of solutions and tools for customers to use for self-service purposes. Which solution will meet these requirements?

ACreate AWS CloudFormation templates for the customers.
BCreate AWS Service Catalog products for the customers. (correct answer)
CCreate AWS Systems Manager templates for the customers.
DCreate AWS Config items for the customers.

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Create AWS Service Catalog products for the customers.

SAA-C03 Question 520

Single page →

Topic 1 · Question 520

A company is designing a new web application that will run on Amazon EC2 Instances. The application will use Amazon DynamoDB for backend data storage. The application traffic will be unpredictable. The company expects that the application read and write throughput to the database will be moderate to high. The company needs to scale in response to application traffic. Which DynamoDB table configuration will meet these requirements MOST cost-effectively?

AConfigure DynamoDB with provisioned read and write by using the DynamoDB Standard table class. Set DynamoDB auto scaling to a maximum defined capacity.
BConfigure DynamoDB in on-demand mode by using the DynamoDB Standard table class. (correct answer)
CConfigure DynamoDB with provisioned read and write by using the DynamoDB Standard Infrequent Access (DynamoDB Standard-IA) table class. Set DynamoDB auto scaling to a maximum defined capacity.
DConfigure DynamoDB in on-demand mode by using the DynamoDB Standard Infrequent Access (DynamoDB Standard-IA) table class.

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Configure DynamoDB in on-demand mode by using the DynamoDB Standard table class.

Explanation

Amazon DynamoDB is a fully managed, serverless NoSQL database with single-digit millisecond latency and automatic scaling. AWS Config tracks resource configuration changes and evaluates compliance. This option delivers the requirement at the lowest cost.

Showing questions 501–520 of 1019 · Page 26 of 51