🔍

SAA-C03 — questions

Page 32 of 51 · 1019 total questions.

SAA-C03 Question 621

Single page →
Topic 1 · Question 621

An online photo-sharing company stores its photos in an Amazon S3 bucket that exists in the us-west-1 Region. The company needs to store a copy of all new photos in the us-east-1 Region. Which solution will meet this requirement with the LEAST operational effort?

  • ACreate a second S3 bucket in us-east-1. Use S3 Cross-Region Replication to copy photos from the existing S3 bucket to the second S3 bucket. (correct answer)
  • BCreate a cross-origin resource sharing (CORS) configuration of the existing S3 bucket. Specify us-east-1 in the CORS rule's AllowedOrigin element.
  • CCreate a second S3 bucket in us-east-1 across multiple Availability Zones. Create an S3 Lifecycle rule to save photos into the second S3 bucket.
  • DCreate a second S3 bucket in us-east-1. Configure S3 event notifications on object creation and update events to invoke an AWS Lambda function to copy photos from the existing S3 bucket to the second S3 bucket.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create a second S3 bucket in us-east-1. Use S3 Cross-Region Replication to copy photos from the existing S3 bucket to the second S3 bucket.

Explanation

S3 Cross-Region Replication asynchronously copies objects to another Region for compliance or latency. Amazon S3 provides durable, scalable object storage that is fully managed.

SAA-C03 Question 622

Single page →
Topic 1 · Question 622 · Select all that apply

A company is creating a new web application for its subscribers. The application will consist of a static single page and a persistent database layer. The application will have millions of users for 4 hours in the morning, but the application will have only a few thousand users during the rest of the day. The company's data architects have requested the ability to rapidly evolve their schema. Which solutions will meet these requirements and provide the MOST scalability? (Choose two.)

  • ADeploy Amazon DynamoDB as the database solution. Provision on-demand capacity. (correct answer)
  • BDeploy Amazon Aurora as the database solution. Choose the serverless DB engine mode.
  • CDeploy Amazon DynamoDB as the database solution. Ensure that DynamoDB auto scaling is enabled.
  • DDeploy the static content into an Amazon S3 bucket. Provision an Amazon CloudFront distribution with the S3 bucket as the origin. (correct answer)
  • EDeploy the web servers for static content across a fleet of Amazon EC2 instances in Auto Scaling groups. Configure the instances to periodically refresh the content from an Amazon Elastic File System (Amazon EFS) volume.
Reveal answer & explanation
Correct answer: A, D

The correct answer is A, D. Option A: Deploy Amazon DynamoDB as the database solution. Provision on-demand capacity. Option D: Deploy the static content into an Amazon S3 bucket. Provision an Amazon CloudFront distribution with the S3 bucket as the origin.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon DynamoDB is a fully managed, serverless NoSQL database with single-digit millisecond latency and automatic scaling. Amazon CloudFront caches content at edge locations to reduce latency and offload origins.

SAA-C03 Question 623

Single page →
Topic 1 · Question 623

A company uses Amazon API Gateway to manage its REST APIs that third-party service providers access. The company must protect the REST APIs from SQL injection and cross-site scripting attacks. What is the MOST operationally efficient solution that meets these requirements?

  • AConfigure AWS Shield.
  • BConfigure AWS WAF. (correct answer)
  • CSet up API Gateway with an Amazon CloudFront distribution. Configure AWS Shield in CloudFront.
  • DSet up API Gateway with an Amazon CloudFront distribution. Configure AWS WAF in CloudFront.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Configure AWS WAF.

Explanation

AWS WAF protects web applications from common exploits and malicious requests. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 624

Single page →
Topic 1 · Question 624

A company wants to provide users with access to AWS resources. The company has 1,500 users and manages their access to on-premises resources through Active Directory user groups on the corporate network. However, the company does not want users to have to maintain another identity to access the resources. A solutions architect must manage user access to the AWS resources while preserving access to the on-premises resources. What should the solutions architect do to meet these requirements?

  • ACreate an IAM user for each user in the company. Attach the appropriate policies to each user.
  • BUse Amazon Cognito with an Active Directory user pool. Create roles with the appropriate policies attached.
  • CDefine cross-account roles with the appropriate policies attached. Map the roles to the Active Directory groups.
  • DConfigure Security Assertion Markup Language (SAML) 2 0-based federation. Create roles with the appropriate policies attached Map the roles to the Active Directory groups. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Configure Security Assertion Markup Language (SAML) 2 0-based federation. Create roles with the appropriate policies attached Map the roles to the Active Directory groups.

Explanation

AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 625

Single page →
Topic 1 · Question 625

A company is hosting a website behind multiple Application Load Balancers. The company has different distribution rights for its content around the world. A solutions architect needs to ensure that users are served the correct content without violating distribution rights. Which configuration should the solutions architect choose to meet these requirements?

  • AConfigure Amazon CloudFront with AWS WAF.
  • BConfigure Application Load Balancers with AWS WAF
  • CConfigure Amazon Route 53 with a geolocation policy (correct answer)
  • DConfigure Amazon Route 53 with a geoproximity routing policy
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Configure Amazon Route 53 with a geolocation policy

Explanation

Amazon Route 53 provides DNS with health checks and routing policies for availability and latency. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 626

Single page →
Topic 1 · Question 626

A company stores its data on premises. The amount of data is growing beyond the company's available capacity. The company wants to migrate its data from the on-premises location to an Amazon S3 bucket. The company needs a solution that will automatically validate the integrity of the data after the transfer. Which solution will meet these requirements?

  • AOrder an AWS Snowball Edge device. Configure the Snowball Edge device to perform the online data transfer to an S3 bucket
  • BDeploy an AWS DataSync agent on premises. Configure the DataSync agent to perform the online data transfer to an S3 bucket. (correct answer)
  • CCreate an Amazon S3 File Gateway on premises Configure the S3 File Gateway to perform the online data transfer to an S3 bucket
  • DConfigure an accelerator in Amazon S3 Transfer Acceleration on premises. Configure the accelerator to perform the online data transfer to an S3 bucket.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Deploy an AWS DataSync agent on premises. Configure the DataSync agent to perform the online data transfer to an S3 bucket.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. AWS DataSync automates and accelerates online data transfer to AWS with minimal effort. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 627

Single page →
Topic 1 · Question 627

A company wants to migrate two DNS servers to AWS. The servers host a total of approximately 200 zones and receive 1 million requests each day on average. The company wants to maximize availability while minimizing the operational overhead that is related to the management of the two servers. What should a solutions architect recommend to meet these requirements?

  • ACreate 200 new hosted zones in the Amazon Route 53 console Import zone files. (correct answer)
  • BLaunch a single large Amazon EC2 instance Import zone tiles. Configure Amazon CloudWatch alarms and notifications to alert the company about any downtime.
  • CMigrate the servers to AWS by using AWS Server Migration Service (AWS SMS). Configure Amazon CloudWatch alarms and notifications to alert the company about any downtime.
  • DLaunch an Amazon EC2 instance in an Auto Scaling group across two Availability Zones. Import zone files. Set the desired capacity to 1 and the maximum capacity to 3 for the Auto Scaling group. Configure scaling alarms to scale based on CPU utilization.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create 200 new hosted zones in the Amazon Route 53 console Import zone files.

Explanation

Amazon Route 53 provides DNS with health checks and routing policies for availability and latency.

SAA-C03 Question 628

Single page →
Topic 1 · Question 628

A global company runs its applications in multiple AWS accounts in AWS Organizations. The company's applications use multipart uploads to upload data to multiple Amazon S3 buckets across AWS Regions. The company wants to report on incomplete multipart uploads for cost compliance purposes. Which solution will meet these requirements with the LEAST operational overhead?

  • AConfigure AWS Config with a rule to report the incomplete multipart upload object count.
  • BCreate a service control policy (SCP) to report the incomplete multipart upload object count.
  • CConfigure S3 Storage Lens to report the incomplete multipart upload object count. (correct answer)
  • DCreate an S3 Multi-Region Access Point to report the incomplete multipart upload object count.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Configure S3 Storage Lens to report the incomplete multipart upload object count.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 629

Single page →
Topic 1 · Question 629

A company runs a production database on Amazon RDS for MySQL. The company wants to upgrade the database version for security compliance reasons. Because the database contains critical data, the company wants a quick solution to upgrade and test functionality without losing any data. Which solution will meet these requirements with the LEAST operational overhead?

  • ACreate an RDS manual snapshot. Upgrade to the new version of Amazon RDS for MySQL.
  • BUse native backup and restore. Restore the data to the upgraded new version of Amazon RDS for MySQL.
  • CUse AWS Database Migration Service (AWS DMS) to replicate the data to the upgraded new version of Amazon RDS for MySQL.
  • DUse Amazon RDS Blue/Green Deployments to deploy and test production changes. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Use Amazon RDS Blue/Green Deployments to deploy and test production changes.

Explanation

Amazon RDS is a managed relational database that handles patching, backups and failover.

SAA-C03 Question 630

Single page →
Topic 1 · Question 630

A solutions architect is creating a data processing job that runs once daily and can take up to 2 hours to complete. If the job is interrupted, it has to restart from the beginning. How should the solutions architect address this issue in the MOST cost-effective manner?

  • ACreate a script that runs locally on an Amazon EC2 Reserved Instance that is triggered by a cron job.
  • BCreate an AWS Lambda function triggered by an Amazon EventBridge scheduled event.
  • CUse an Amazon Elastic Container Service (Amazon ECS) Fargate task triggered by an Amazon EventBridge scheduled event. (correct answer)
  • DUse an Amazon Elastic Container Service (Amazon ECS) task running on Amazon EC2 triggered by an Amazon EventBridge scheduled event.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Use an Amazon Elastic Container Service (Amazon ECS) Fargate task triggered by an Amazon EventBridge scheduled event.

Explanation

AWS Fargate runs containers serverlessly so there are no EC2 hosts to manage or patch. Amazon ECS orchestrates containers and integrates natively with AWS networking and IAM. Amazon EventBridge routes events between services with rules, enabling event-driven, decoupled architectures. This option delivers the requirement at the lowest cost.

SAA-C03 Question 631

Single page →
Topic 1 · Question 631

A social media company wants to store its database of user profiles, relationships, and interactions in the AWS Cloud. The company needs an application to monitor any changes in the database. The application needs to analyze the relationships between the data entities and to provide recommendations to users. Which solution will meet these requirements with the LEAST operational overhead?

  • AUse Amazon Neptune to store the information. Use Amazon Kinesis Data Streams to process changes in the database.
  • BUse Amazon Neptune to store the information. Use Neptune Streams to process changes in the database. (correct answer)
  • CUse Amazon Quantum Ledger Database (Amazon QLDB) to store the information. Use Amazon Kinesis Data Streams to process changes in the database.
  • DUse Amazon Quantum Ledger Database (Amazon QLDB) to store the information. Use Neptune Streams to process changes in the database.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use Amazon Neptune to store the information. Use Neptune Streams to process changes in the database.

Explanation

Amazon Neptune is a managed graph database for highly connected data.

SAA-C03 Question 632

Single page →
Topic 1 · Question 632

A company is creating a new application that will store a large amount of data. The data will be analyzed hourly and will be modified by several Amazon EC2 Linux instances that are deployed across multiple Availability Zones. The needed amount of storage space will continue to grow for the next 6 months. Which storage solution should a solutions architect recommend to meet these requirements?

  • AStore the data in Amazon S3 Glacier. Update the S3 Glacier vault policy to allow access to the application instances.
  • BStore the data in an Amazon Elastic Block Store (Amazon EBS) volume. Mount the EBS volume on the application instances.
  • CStore the data in an Amazon Elastic File System (Amazon EFS) file system. Mount the file system on the application instances. (correct answer)
  • DStore the data in an Amazon Elastic Block Store (Amazon EBS) Provisioned IOPS volume shared between the application instances.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Store the data in an Amazon Elastic File System (Amazon EFS) file system. Mount the file system on the application instances.

Explanation

Amazon EFS is a shared, elastic NFS file system that multiple instances can mount concurrently across AZs. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SAA-C03 Question 633

Single page →
Topic 1 · Question 633

A company manages an application that stores data on an Amazon RDS for PostgreSQL Multi-AZ DB instance. Increases in traffic are causing performance problems. The company determines that database queries are the primary reason for the slow performance. What should a solutions architect do to improve the application's performance?

  • AServe read traffic from the Multi-AZ standby replica.
  • BConfigure the DB instance to use Transfer Acceleration.
  • CCreate a read replica from the source DB instance. Serve read traffic from the read replica. (correct answer)
  • DUse Amazon Kinesis Data Firehose between the application and Amazon RDS to increase the concurrency of database requests.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create a read replica from the source DB instance. Serve read traffic from the read replica. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SAA-C03 Question 634

Single page →
Topic 1 · Question 634

A company collects 10 GB of telemetry data daily from various machines. The company stores the data in an Amazon S3 bucket in a source data account. The company has hired several consulting agencies to use this data for analysis. Each agency needs read access to the data for its analysts. The company must share the data from the source data account by choosing a solution that maximizes security and operational efficiency. Which solution will meet these requirements?

  • AConfigure S3 global tables to replicate data for each agency.
  • BMake the S3 bucket public for a limited time. Inform only the agencies.
  • CConfigure cross-account access for the S3 bucket to the accounts that the agencies own. (correct answer)
  • DSet up an IAM user for each analyst in the source data account. Grant each user access to the S3 bucket.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Configure cross-account access for the S3 bucket to the accounts that the agencies own.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 635

Single page →
Topic 1 · Question 635

A company uses Amazon FSx for NetApp ONTAP in its primary AWS Region for CIFS and NFS file shares. Applications that run on Amazon EC2 instances access the file shares. The company needs a storage disaster recovery (DR) solution in a secondary Region. The data that is replicated in the secondary Region needs to be accessed by using the same protocols as the primary Region. Which solution will meet these requirements with the LEAST operational overhead?

  • ACreate an AWS Lambda function to copy the data to an Amazon S3 bucket. Replicate the S3 bucket to the secondary Region.
  • BCreate a backup of the FSx for ONTAP volumes by using AWS Backup. Copy the volumes to the secondary Region. Create a new FSx for ONTAP instance from the backup.
  • CCreate an FSx for ONTAP instance in the secondary Region. Use NetApp SnapMirror to replicate data from the primary Region to the secondary Region. (correct answer)
  • DCreate an Amazon Elastic File System (Amazon EFS) volume. Migrate the current data to the volume. Replicate the volume to the secondary Region.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create an FSx for ONTAP instance in the secondary Region. Use NetApp SnapMirror to replicate data from the primary Region to the secondary Region.

Explanation

Amazon FSx provides fully managed third-party file systems.

SAA-C03 Question 636

Single page →
Topic 1 · Question 636

A development team is creating an event-based application that uses AWS Lambda functions. Events will be generated when files are added to an Amazon S3 bucket. The development team currently has Amazon Simple Notification Service (Amazon SNS) configured as the event target from Amazon S3. What should a solutions architect do to process the events from Amazon S3 in a scalable way?

  • ACreate an SNS subscription that processes the event in Amazon Elastic Container Service (Amazon ECS) before the event runs in Lambda.
  • BCreate an SNS subscription that processes the event in Amazon Elastic Kubernetes Service (Amazon EKS) before the event runs in Lambda
  • CCreate an SNS subscription that sends the event to Amazon Simple Queue Service (Amazon SQS). Configure the SOS queue to trigger a Lambda function. (correct answer)
  • DCreate an SNS subscription that sends the event to AWS Server Migration Service (AWS SMS). Configure the Lambda function to poll from the SMS event.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create an SNS subscription that sends the event to Amazon Simple Queue Service (Amazon SQS). Configure the SOS queue to trigger a Lambda function.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon SQS is a fully managed message queue that decouples components and absorbs traffic spikes. Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers.

SAA-C03 Question 637

Single page →
Topic 1 · Question 637 · Select all that apply

A solutions architect is designing a new service behind Amazon API Gateway. The request patterns for the service will be unpredictable and can change suddenly from 0 requests to over 500 per second. The total size of the data that needs to be persisted in a backend database is currently less than 1 GB with unpredictable future growth. Data can be queried using simple key-value requests. Which combination ofAWS services would meet these requirements? (Choose two.)

  • AAWS Fargate
  • BAWS Lambda (correct answer)
  • CAmazon DynamoDB (correct answer)
  • DAmazon EC2 Auto Scaling
  • EMySQL-compatible Amazon Aurora
Reveal answer & explanation
Correct answer: B, C

The correct answer is B, C. Option B: AWS Lambda Option C: Amazon DynamoDB

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon DynamoDB is a fully managed, serverless NoSQL database with single-digit millisecond latency and automatic scaling.

SAA-C03 Question 638

Single page →
Topic 1 · Question 638

A company collects and shares research data with the company's employees all over the world. The company wants to collect and store the data in an Amazon S3 bucket and process the data in the AWS Cloud. The company will share the data with the company's employees. The company needs a secure solution in the AWS Cloud that minimizes operational overhead. Which solution will meet these requirements?

  • AUse an AWS Lambda function to create an S3 presigned URL. Instruct employees to use the URL. (correct answer)
  • BCreate an IAM user for each employee. Create an IAM policy for each employee to allow S3 access. Instruct employees to use the AWS Management Console.
  • CCreate an S3 File Gateway. Create a share for uploading and a share for downloading. Allow employees to mount shares on their local computers to use S3 File Gateway.
  • DConfigure AWS Transfer Family SFTP endpoints. Select the custom identity provider options. Use AWS Secrets Manager to manage the user credentials Instruct employees to use Transfer Family.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use an AWS Lambda function to create an S3 presigned URL. Instruct employees to use the URL.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon S3 provides durable, scalable object storage that is fully managed.

SAA-C03 Question 639

Single page →
Topic 1 · Question 639

A company is building a new furniture inventory application. The company has deployed the application on a fleet ofAmazon EC2 instances across multiple Availability Zones. The EC2 instances run behind an Application Load Balancer (ALB) in their VPC. A solutions architect has observed that incoming traffic seems to favor one EC2 instance, resulting in latency for some requests. What should the solutions architect do to resolve this issue?

  • ADisable session affinity (sticky sessions) on the ALB (correct answer)
  • BReplace the ALB with a Network Load Balancer
  • CIncrease the number of EC2 instances in each Availability Zone
  • DAdjust the frequency of the health checks on the ALB's target group
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Disable session affinity (sticky sessions) on the ALB By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SAA-C03 Question 640

Single page →
Topic 1 · Question 640 · Select all that apply

A company has an application workflow that uses an AWS Lambda function to download and decrypt files from Amazon S3. These files are encrypted using AWS Key Management Service (AWS KMS) keys. A solutions architect needs to design a solution that will ensure the required permissions are set correctly. Which combination of actions accomplish this? (Choose two.)

  • AAttach the kms:decrypt permission to the Lambda function’s resource policy
  • BGrant the decrypt permission for the Lambda IAM role in the KMS key's policy (correct answer)
  • CGrant the decrypt permission for the Lambda resource policy in the KMS key's policy.
  • DCreate a new IAM policy with the kms:decrypt permission and attach the policy to the Lambda function.
  • ECreate a new IAM role with the kms:decrypt permission and attach the execution role to the Lambda function. (correct answer)
Reveal answer & explanation
Correct answer: B, E

The correct answer is B, E. Option B: Grant the decrypt permission for the Lambda IAM role in the KMS key's policy Option E: Create a new IAM role with the kms:decrypt permission and attach the execution role to the Lambda function.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

Showing questions 621–640 of 1019 · Page 32 of 51