🔍

SAA-C03 — questions

Page 27 of 51 · 1019 total questions.

SAA-C03 Question 521

Single page →
Topic 1 · Question 521

A retail company has several businesses. The IT team for each business manages its own AWS account. Each team account is part of an organization in AWS Organizations. Each team monitors its product inventory levels in an Amazon DynamoDB table in the team's own AWS account. The company is deploying a central inventory reporting application into a shared AWS account. The application must be able to read items from all the teams' DynamoDB tables. Which authentication option will meet these requirements MOST securely?

  • AIntegrate DynamoDB with AWS Secrets Manager in the inventory application account. Configure the application to use the correct secret from Secrets Manager to authenticate and read the DynamoDB table. Schedule secret rotation for every 30 days.
  • BIn every business account, create an IAM user that has programmatic access. Configure the application to use the correct IAM user access key ID and secret access key to authenticate and read the DynamoDB table. Manually rotate IAM access keys every 30 days.
  • CIn every business account, create an IAM role named BU_ROLE with a policy that gives the role access to the DynamoDB table and a trust policy to trust a specific role in the inventory application account. In the inventory account, create a role named APP_ROLE that allows access to the STS AssumeRole API operation. Configure the application to use APP_ROLE and assume the crossaccount role BU_ROLE to read the DynamoDB table. (correct answer)
  • DIntegrate DynamoDB with AWS Certificate Manager (ACM). Generate identity certificates to authenticate DynamoDB. Configure the application to use the correct certificate to authenticate and read the DynamoDB table.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: In every business account, create an IAM role named BU_ROLE with a policy that gives the role access to the DynamoDB table and a trust policy to trust a specific role in the inventory application account. In the inven...

Explanation

Amazon DynamoDB is a fully managed, serverless NoSQL database with single-digit millisecond latency and automatic scaling. An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

SAA-C03 Question 522

Single page →
Topic 1 · Question 522 · Select all that apply

A company runs container applications by using Amazon Elastic Kubernetes Service (Amazon EKS). The company's workload is not consistent throughout the day. The company wants Amazon EKS to scale in and out according to the workload. Which combination of steps will meet these requirements with the LEAST operational overhead? (Choose two.)

  • AUse an AWS Lambda function to resize the EKS cluster.
  • BUse the Kubernetes Metrics Server to activate horizontal pod autoscaling. (correct answer)
  • CUse the Kubernetes Cluster Autoscaler to manage the number of nodes in the cluster. (correct answer)
  • DUse Amazon API Gateway and connect it to Amazon EKS.
  • EUse AWS App Mesh to observe network activity.
Reveal answer & explanation
Correct answer: B, C

The correct answer is B, C. Option B: Use the Kubernetes Metrics Server to activate horizontal pod autoscaling. Option C: Use the Kubernetes Cluster Autoscaler to manage the number of nodes in the cluster.

SAA-C03 Question 523

Single page →
Topic 1 · Question 523

A company runs a microservice-based serverless web application. The application must be able to retrieve data from multiple Amazon DynamoDB tables A solutions architect needs to give the application the ability to retrieve the data with no impact on the baseline performance of the application. Which solution will meet these requirements in the MOST operationally efficient way?

  • AAWS AppSync pipeline resolvers
  • BAmazon CloudFront with Lambda@Edge functions
  • CEdge-optimized Amazon API Gateway with AWS Lambda functions
  • DAmazon Athena Federated Query with a DynamoDB connector (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Amazon Athena Federated Query with a DynamoDB connector

Explanation

Amazon DynamoDB is a fully managed, serverless NoSQL database with single-digit millisecond latency and automatic scaling. Amazon Athena runs serverless SQL queries directly on data in Amazon S3 with no infrastructure to manage.

SAA-C03 Question 524

Single page →
Topic 1 · Question 524

A company wants to analyze and troubleshoot Access Denied errors and Unauthorized errors that are related to IAM permissions. The company has AWS CloudTrail turned on. Which solution will meet these requirements with the LEAST effort?

  • AUse AWS Glue and write custom scripts to query CloudTrail logs for the errors.
  • BUse AWS Batch and write custom scripts to query CloudTrail logs for the errors.
  • CSearch CloudTrail logs with Amazon Athena queries to identify the errors. (correct answer)
  • DSearch CloudTrail logs with Amazon QuickSight. Create a dashboard to identify the errors.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Search CloudTrail logs with Amazon Athena queries to identify the errors.

Explanation

Amazon Athena runs serverless SQL queries directly on data in Amazon S3 with no infrastructure to manage. AWS CloudTrail records API activity for auditing and governance.

SAA-C03 Question 525

Single page →
Topic 1 · Question 525

A company wants to add its existing AWS usage cost to its operation cost dashboard. A solutions architect needs to recommend a solution that will give the company access to its usage cost programmatically. The company must be able to access cost data for the current year and forecast costs for the next 12 months. Which solution will meet these requirements with the LEAST operational overhead?

  • AAccess usage cost-related data by using the AWS Cost Explorer API with pagination. (correct answer)
  • BAccess usage cost-related data by using downloadable AWS Cost Explorer report .csv files.
  • CConfigure AWS Budgets actions to send usage cost data to the company through FTP.
  • DCreate AWS Budgets reports for usage cost data. Send the data to the company through SMTP.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Access usage cost-related data by using the AWS Cost Explorer API with pagination.

Explanation

AWS Cost Explorer analyzes and visualizes AWS spend.

SAA-C03 Question 526

Single page →
Topic 1 · Question 526

A solutions architect is reviewing the resilience of an application. The solutions architect notices that a database administrator recently failed over the application's Amazon Aurora PostgreSQL database writer instance as part of a scaling exercise. The failover resulted in 3 minutes of downtime for the application. Which solution will reduce the downtime for scaling exercises with the LEAST operational overhead?

  • ACreate more Aurora PostgreSQL read replicas in the cluster to handle the load during failover.
  • BSet up a secondary Aurora PostgreSQL cluster in the same AWS Region. During failover, update the application to use the secondary cluster's writer endpoint.
  • CCreate an Amazon ElastiCache for Memcached cluster to handle the load during failover.
  • DSet up an Amazon RDS proxy for the database. Update the application to use the proxy endpoint. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Set up an Amazon RDS proxy for the database. Update the application to use the proxy endpoint.

Explanation

Amazon RDS Proxy pools and shares database connections to improve scalability and resilience. Amazon RDS is a managed relational database that handles patching, backups and failover.

SAA-C03 Question 527

Single page →
Topic 1 · Question 527

A company has a regional subscription-based streaming service that runs in a single AWS Region. The architecture consists of web servers and application servers on Amazon EC2 instances. The EC2 instances are in Auto Scaling groups behind Elastic Load Balancers. The architecture includes an Amazon Aurora global database cluster that extends across multiple Availability Zones. The company wants to expand globally and to ensure that its application has minimal downtime. Which solution will provide the MOST fault tolerance?

  • AExtend the Auto Scaling groups for the web tier and the application tier to deploy instances in Availability Zones in a second Region. Use an Aurora global database to deploy the database in the primary Region and the second Region. Use Amazon Route 53 health checks with a failover routing policy to the second Region.
  • BDeploy the web tier and the application tier to a second Region. Add an Aurora PostgreSQL cross-Region Aurora Replica in the second Region. Use Amazon Route 53 health checks with a failover routing policy to the second Region. Promote the secondary to primary as needed.
  • CDeploy the web tier and the application tier to a second Region. Create an Aurora PostgreSQL database in the second Region. Use AWS Database Migration Service (AWS DMS) to replicate the primary database to the second Region. Use Amazon Route 53 health checks with a failover routing policy to the second Region.
  • DDeploy the web tier and the application tier to a second Region. Use an Amazon Aurora global database to deploy the database in the primary Region and the second Region. Use Amazon Route 53 health checks with a failover routing policy to the second Region. Promote the secondary to primary as needed. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Deploy the web tier and the application tier to a second Region. Use an Amazon Aurora global database to deploy the database in the primary Region and the second Region. Use Amazon Route 53 health checks with a failov...

Explanation

Amazon Aurora is a high-performance managed relational database with built-in replication and failover. Amazon Route 53 provides DNS with health checks and routing policies for availability and latency. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SAA-C03 Question 528

Single page →
Topic 1 · Question 528

A data analytics company wants to migrate its batch processing system to AWS. The company receives thousands of small data files periodically during the day through FTP. An on-premises batch job processes the data files overnight. However, the batch job takes hours to finish running. The company wants the AWS solution to process incoming data files as soon as possible with minimal changes to the FTP clients that send the files. The solution must delete the incoming data files after the files have been processed successfully. Processing for each file needs to take 3-8 minutes. Which solution will meet these requirements in the MOST operationally efficient way?

  • AUse an Amazon EC2 instance that runs an FTP server to store incoming files as objects in Amazon S3 Glacier Flexible Retrieval. Configure a job queue in AWS Batch. Use Amazon EventBridge rules to invoke the job to process the objects nightly from S3 Glacier Flexible Retrieval. Delete the objects after the job has processed the objects.
  • BUse an Amazon EC2 instance that runs an FTP server to store incoming files on an Amazon Elastic Block Store (Amazon EBS) volume. Configure a job queue in AWS Batch. Use Amazon EventBridge rules to invoke the job to process the files nightly from the EBS volume. Delete the files after the job has processed the files.
  • CUse AWS Transfer Family to create an FTP server to store incoming files on an Amazon Elastic Block Store (Amazon EBS) volume. Configure a job queue in AWS Batch. Use an Amazon S3 event notification when each file arrives to invoke the job in AWS Batch. Delete the files after the job has processed the files.
  • DUse AWS Transfer Family to create an FTP server to store incoming files in Amazon S3 Standard. Create an AWS Lambda function to process the files and to delete the files after they are processed. Use an S3 event notification to invoke the Lambda function when the files arrive. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Use AWS Transfer Family to create an FTP server to store incoming files in Amazon S3 Standard. Create an AWS Lambda function to process the files and to delete the files after they are processed. Use an S3 event notif...

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon S3 provides durable, scalable object storage that is fully managed. AWS Transfer Family provides managed SFTP/FTPS/FTP access to S3 and EFS.

SAA-C03 Question 529

Single page →
Topic 1 · Question 529

A company is migrating its workloads to AWS. The company has transactional and sensitive data in its databases. The company wants to use AWS Cloud solutions to increase security and reduce operational overhead for the databases. Which solution will meet these requirements?

  • AMigrate the databases to Amazon EC2. Use an AWS Key Management Service (AWS KMS) AWS managed key for encryption.
  • BMigrate the databases to Amazon RDS Configure encryption at rest. (correct answer)
  • CMigrate the data to Amazon S3 Use Amazon Macie for data security and protection
  • DMigrate the database to Amazon RDS. Use Amazon CloudWatch Logs for data security and protection.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Migrate the databases to Amazon RDS Configure encryption at rest.

Explanation

Amazon RDS is a managed relational database that handles patching, backups and failover. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 530

Single page →
Topic 1 · Question 530

A company has an online gaming application that has TCP and UDP multiplayer gaming capabilities. The company uses Amazon Route 53 to point the application traffic to multiple Network Load Balancers (NLBs) in different AWS Regions. The company needs to improve application performance and decrease latency for the online game in preparation for user growth. Which solution will meet these requirements?

  • AAdd an Amazon CloudFront distribution in front of the NLBs. Increase the Cache-Control max-age parameter.
  • BReplace the NLBs with Application Load Balancers (ALBs). Configure Route 53 to use latency-based routing.
  • CAdd AWS Global Accelerator in front of the NLBs. Configure a Global Accelerator endpoint to use the correct listener ports. (correct answer)
  • DAdd an Amazon API Gateway endpoint behind the NLBs. Enable API caching. Override method caching for the different stages.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Add AWS Global Accelerator in front of the NLBs. Configure a Global Accelerator endpoint to use the correct listener ports.

Explanation

AWS Global Accelerator routes users over the AWS backbone to the optimal endpoint for lower latency and fast failover. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 531

Single page →
Topic 1 · Question 531

A company needs to integrate with a third-party data feed. The data feed sends a webhook to notify an external service when new data is ready for consumption. A developer wrote an AWS Lambda function to retrieve data when the company receives a webhook callback. The developer must make the Lambda function available for the third party to call. Which solution will meet these requirements with the MOST operational efficiency?

  • ACreate a function URL for the Lambda function. Provide the Lambda function URL to the third party for the webhook. (correct answer)
  • BDeploy an Application Load Balancer (ALB) in front of the Lambda function. Provide the ALB URL to the third party for the webhook.
  • CCreate an Amazon Simple Notification Service (Amazon SNS) topic. Attach the topic to the Lambda function. Provide the public hostname of the SNS topic to the third party for the webhook.
  • DCreate an Amazon Simple Queue Service (Amazon SQS) queue. Attach the queue to the Lambda function. Provide the public hostname of the SQS queue to the third party for the webhook.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create a function URL for the Lambda function. Provide the Lambda function URL to the third party for the webhook.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead.

SAA-C03 Question 532

Single page →
Topic 1 · Question 532 · Select all that apply

A company has a workload in an AWS Region. Customers connect to and access the workload by using an Amazon API Gateway REST API. The company uses Amazon Route 53 as its DNS provider. The company wants to provide individual and secure URLs for all customers. Which combination of steps will meet these requirements with the MOST operational efficiency? (Choose three.)

  • ARegister the required domain in a registrar. Create a wildcard custom domain name in a Route 53 hosted zone and record in the zone that points to the API Gateway endpoint. (correct answer)
  • BRequest a wildcard certificate that matches the domains in AWS Certificate Manager (ACM) in a different Region.
  • CCreate hosted zones for each customer as required in Route 53. Create zone records that point to the API Gateway endpoint.
  • DRequest a wildcard certificate that matches the custom domain name in AWS Certificate Manager (ACM) in the same Region. (correct answer)
  • ECreate multiple API endpoints for each customer in API Gateway.
  • FCreate a custom domain name in API Gateway for the REST API. Import the certificate from AWS Certificate Manager (ACM). (correct answer)
Reveal answer & explanation
Correct answer: A, D, F

The correct answer is A, D, F. Option A: Register the required domain in a registrar. Create a wildcard custom domain name in a Route 53 hosted zone and record in the zone that points to the API Gateway endpoint. Option D: Request a wildcard certificate that matches the custom domain name in AWS Certificate Manager (ACM) in the same Region. Option F: Create a custom domain name in API Gateway for the REST API. Import the certificate from AWS Certificate Manager (ACM).

Explanation

Amazon Route 53 provides DNS with health checks and routing policies for availability and latency. Amazon API Gateway is a fully managed front door for creating and securing APIs at scale. AWS Certificate Manager provisions and renews TLS certificates automatically.

SAA-C03 Question 533

Single page →
Topic 1 · Question 533

A company stores data in Amazon S3. According to regulations, the data must not contain personally identifiable information (PII). The company recently discovered that S3 buckets have some objects that contain PII. The company needs to automatically detect PII in S3 buckets and to notify the company’s security team. Which solution will meet these requirements?

  • AUse Amazon Macie. Create an Amazon EventBridge rule to filter the SensitiveData event type from Macie findings and to send an Amazon Simple Notification Service (Amazon SNS) notification to the security team. (correct answer)
  • BUse Amazon GuardDuty. Create an Amazon EventBridge rule to filter the CRITICAL event type from GuardDuty findings and to send an Amazon Simple Notification Service (Amazon SNS) notification to the security team.
  • CUse Amazon Macie. Create an Amazon EventBridge rule to filter the SensitiveData:S3Object/Personal event type from Macie findings and to send an Amazon Simple Queue Service (Amazon SQS) notification to the security team.
  • DUse Amazon GuardDuty. Create an Amazon EventBridge rule to filter the CRITICAL event type from GuardDuty findings and to send an Amazon Simple Queue Service (Amazon SQS) notification to the security team.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use Amazon Macie. Create an Amazon EventBridge rule to filter the SensitiveData event type from Macie findings and to send an Amazon Simple Notification Service (Amazon SNS) notification to the security team.

Explanation

Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers. Amazon EventBridge routes events between services with rules, enabling event-driven, decoupled architectures. Amazon Macie discovers and protects sensitive data such as PII in S3.

SAA-C03 Question 534

Single page →
Topic 1 · Question 534

A company wants to build a logging solution for its multiple AWS accounts. The company currently stores the logs from all accounts in a centralized account. The company has created an Amazon S3 bucket in the centralized account to store the VPC flow logs and AWS CloudTrail logs. All logs must be highly available for 30 days for frequent analysis, retained for an additional 60 days for backup purposes, and deleted 90 days after creation. Which solution will meet these requirements MOST cost-effectively?

  • ATransition objects to the S3 Standard storage class 30 days after creation. Write an expiration action that directs Amazon S3 to delete objects after 90 days.
  • BTransition objects to the S3 Standard-Infrequent Access (S3 Standard-IA) storage class 30 days after creation. Move all objects to the S3 Glacier Flexible Retrieval storage class after 90 days. Write an expiration action that directs Amazon S3 to delete objects after 90 days.
  • CTransition objects to the S3 Glacier Flexible Retrieval storage class 30 days after creation. Write an expiration action that directs Amazon S3 to delete objects after 90 days. (correct answer)
  • DTransition objects to the S3 One Zone-Infrequent Access (S3 One Zone-IA) storage class 30 days after creation. Move all objects to the S3 Glacier Flexible Retrieval storage class after 90 days. Write an expiration action that directs Amazon S3 to delete objects after 90 days.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Transition objects to the S3 Glacier Flexible Retrieval storage class 30 days after creation. Write an expiration action that directs Amazon S3 to delete objects after 90 days.

Explanation

Amazon S3 Glacier offers low-cost archival storage for infrequently accessed data. Amazon S3 provides durable, scalable object storage that is fully managed. This option delivers the requirement at the lowest cost.

SAA-C03 Question 535

Single page →
Topic 1 · Question 535

A company is building an Amazon Elastic Kubernetes Service (Amazon EKS) cluster for its workloads. All secrets that are stored in Amazon EKS must be encrypted in the Kubernetes etcd key-value store. Which solution will meet these requirements?

  • ACreate a new AWS Key Management Service (AWS KMS) key. Use AWS Secrets Manager to manage, rotate, and store all secrets in Amazon EKS.
  • BCreate a new AWS Key Management Service (AWS KMS) key. Enable Amazon EKS KMS secrets encryption on the Amazon EKS cluster. (correct answer)
  • CCreate the Amazon EKS cluster with default options. Use the Amazon Elastic Block Store (Amazon EBS) Container Storage Interface (CSI) driver as an add-on.
  • DCreate a new AWS Key Management Service (AWS KMS) key with the alias/aws/ebs alias. Enable default Amazon Elastic Block Store (Amazon EBS) volume encryption for the account.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create a new AWS Key Management Service (AWS KMS) key. Enable Amazon EKS KMS secrets encryption on the Amazon EKS cluster.

Explanation

Amazon EKS runs managed Kubernetes when you need the Kubernetes ecosystem. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

SAA-C03 Question 536

Single page →
Topic 1 · Question 536

A company wants to provide data scientists with near real-time read-only access to the company's production Amazon RDS for PostgreSQL database. The database is currently configured as a Single-AZ database. The data scientists use complex queries that will not affect the production database. The company needs a solution that is highly available. Which solution will meet these requirements MOST cost-effectively?

  • AScale the existing production database in a maintenance window to provide enough power for the data scientists.
  • BChange the setup from a Single-AZ to a Multi-AZ instance deployment with a larger secondary standby instance. Provide the data scientists access to the secondary instance.
  • CChange the setup from a Single-AZ to a Multi-AZ instance deployment. Provide two additional read replicas for the data scientists.
  • DChange the setup from a Single-AZ to a Multi-AZ cluster deployment with two readable standby instances. Provide read endpoints to the data scientists. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Change the setup from a Single-AZ to a Multi-AZ cluster deployment with two readable standby instances. Provide read endpoints to the data scientists. This option delivers the requirement at the lowest cost.

SAA-C03 Question 537

Single page →
Topic 1 · Question 537

A company runs a three-tier web application in the AWS Cloud that operates across three Availability Zones. The application architecture has an Application Load Balancer, an Amazon EC2 web server that hosts user session states, and a MySQL database that runs on an EC2 instance. The company expects sudden increases in application traffic. The company wants to be able to scale to meet future application capacity demands and to ensure high availability across all three Availability Zones. Which solution will meet these requirements?

  • AMigrate the MySQL database to Amazon RDS for MySQL with a Multi-AZ DB cluster deployment. Use Amazon ElastiCache for Redis with high availability to store session data and to cache reads. Migrate the web server to an Auto Scaling group that is in three Availability Zones. (correct answer)
  • BMigrate the MySQL database to Amazon RDS for MySQL with a Multi-AZ DB cluster deployment. Use Amazon ElastiCache for Memcached with high availability to store session data and to cache reads. Migrate the web server to an Auto Scaling group that is in three Availability Zones.
  • CMigrate the MySQL database to Amazon DynamoDB Use DynamoDB Accelerator (DAX) to cache reads. Store the session data in DynamoDB. Migrate the web server to an Auto Scaling group that is in three Availability Zones.
  • DMigrate the MySQL database to Amazon RDS for MySQL in a single Availability Zone. Use Amazon ElastiCache for Redis with high availability to store session data and to cache reads. Migrate the web server to an Auto Scaling group that is in three Availability Zones.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Migrate the MySQL database to Amazon RDS for MySQL with a Multi-AZ DB cluster deployment. Use Amazon ElastiCache for Redis with high availability to store session data and to cache reads. Migrate the web server to an...

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Amazon RDS is a managed relational database that handles patching, backups and failover. Amazon ElastiCache provides in-memory caching (Redis/Memcached) to reduce latency and offload the database.

SAA-C03 Question 538

Single page →
Topic 1 · Question 538

A global video streaming company uses Amazon CloudFront as a content distribution network (CDN). The company wants to roll out content in a phased manner across multiple countries. The company needs to ensure that viewers who are outside the countries to which the company rolls out content are not able to view the content. Which solution will meet these requirements?

  • AAdd geographic restrictions to the content in CloudFront by using an allow list. Set up a custom error message. (correct answer)
  • BSet up a new URL tor restricted content. Authorize access by using a signed URL and cookies. Set up a custom error message.
  • CEncrypt the data for the content that the company distributes. Set up a custom error message.
  • DCreate a new URL for restricted content. Set up a time-restricted access policy for signed URLs.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Add geographic restrictions to the content in CloudFront by using an allow list. Set up a custom error message.

Explanation

Amazon CloudFront caches content at edge locations to reduce latency and offload origins. This option meets the real-time / low-latency performance requirement.

SAA-C03 Question 539

Single page →
Topic 1 · Question 539

A company wants to use the AWS Cloud to improve its on-premises disaster recovery (DR) configuration. The company's core production business application uses Microsoft SQL Server Standard, which runs on a virtual machine (VM). The application has a recovery point objective (RPO) of 30 seconds or fewer and a recovery time objective (RTO) of 60 minutes. The DR solution needs to minimize costs wherever possible. Which solution will meet these requirements?

  • AConfigure a multi-site active/active setup between the on-premises server and AWS by using Microsoft SQL Server Enterprise with Always On availability groups.
  • BConfigure a warm standby Amazon RDS for SQL Server database on AWS. Configure AWS Database Migration Service (AWS DMS) to use change data capture (CDC). (correct answer)
  • CUse AWS Elastic Disaster Recovery configured to replicate disk changes to AWS as a pilot light.
  • DUse third-party backup software to capture backups every night. Store a secondary set of backups in Amazon S3.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Configure a warm standby Amazon RDS for SQL Server database on AWS. Configure AWS Database Migration Service (AWS DMS) to use change data capture (CDC).

Explanation

Amazon RDS is a managed relational database that handles patching, backups and failover. AWS Config tracks resource configuration changes and evaluates compliance. AWS Database Migration Service migrates databases with minimal downtime. This option delivers the requirement at the lowest cost.

SAA-C03 Question 540

Single page →
Topic 1 · Question 540

A company has an on-premises server that uses an Oracle database to process and store customer information. The company wants to use an AWS database service to achieve higher availability and to improve application performance. The company also wants to offload reporting from its primary database system. Which solution will meet these requirements in the MOST operationally efficient way?

  • AUse AWS Database Migration Service (AWS DMS) to create an Amazon RDS DB instance in multiple AWS Regions. Point the reporting functions toward a separate DB instance from the primary DB instance.
  • BUse Amazon RDS in a Single-AZ deployment to create an Oracle database. Create a read replica in the same zone as the primary DB instance. Direct the reporting functions to the read replica.
  • CUse Amazon RDS deployed in a Multi-AZ cluster deployment to create an Oracle database. Direct the reporting functions to use the reader instance in the cluster deployment.
  • DUse Amazon RDS deployed in a Multi-AZ instance deployment to create an Amazon Aurora database. Direct the reporting functions to the reader instances. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Use Amazon RDS deployed in a Multi-AZ instance deployment to create an Amazon Aurora database. Direct the reporting functions to the reader instances.

Explanation

Amazon Aurora is a high-performance managed relational database with built-in replication and failover. Amazon RDS is a managed relational database that handles patching, backups and failover.

Showing questions 521–540 of 1019 · Page 27 of 51