πŸ”

SAA-C03 β€” questions

Page 33 of 51 Β· 1019 total questions.

Topic 1 Β· Question 641

A company wants to monitor its AWS costs for financial review. The cloud operations team is designing an architecture in the AWS Organizations management account to query AWS Cost and Usage Reports for all member accounts. The team must run this query once a month and provide a detailed analysis of the bill. Which solution is the MOST scalable and cost-effective way to meet these requirements?

  • AEnable Cost and Usage Reports in the management account. Deliver reports to Amazon Kinesis. Use Amazon EMR for analysis.
  • BEnable Cost and Usage Reports in the management account. Deliver the reports to Amazon S3 Use Amazon Athena for analysis. (correct answer)
  • CEnable Cost and Usage Reports for member accounts. Deliver the reports to Amazon S3 Use Amazon Redshift for analysis.
  • DEnable Cost and Usage Reports for member accounts. Deliver the reports to Amazon Kinesis. Use Amazon QuickSight tor analysis.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Enable Cost and Usage Reports in the management account. Deliver the reports to Amazon S3 Use Amazon Athena for analysis.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon Athena runs serverless SQL queries directly on data in Amazon S3 with no infrastructure to manage. This option delivers the requirement at the lowest cost.

Topic 1 Β· Question 642

A company wants to run a gaming application on Amazon EC2 instances that are part of an Auto Scaling group in the AWS Cloud. The application will transmit data by using UDP packets. The company wants to ensure that the application can scale out and in as traffic increases and decreases. What should a solutions architect do to meet these requirements?

  • AAttach a Network Load Balancer to the Auto Scaling group. (correct answer)
  • BAttach an Application Load Balancer to the Auto Scaling group.
  • CDeploy an Amazon Route 53 record set with a weighted policy to route traffic appropriately.
  • DDeploy a NAT instance that is configured with port forwarding to the EC2 instances in the Auto Scaling group.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Attach a Network Load Balancer to the Auto Scaling group.

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. A Network Load Balancer handles very high throughput TCP/UDP traffic with ultra-low latency and static IPs. A load balancer distributes traffic across targets in multiple AZs for availability and scale.

Topic 1 Β· Question 643

A company runs several websites on AWS for its different brands. Each website generates tens of gigabytes of web traffic logs each day. A solutions architect needs to design a scalable solution to give the company's developers the ability to analyze traffic patterns across all the company's websites. This analysis by the developers will occur on demand once a week over the course of several months. The solution must support queries with standard SQL. Which solution will meet these requirements MOST cost-effectively?

  • AStore the logs in Amazon S3. Use Amazon Athena tor analysis. (correct answer)
  • BStore the logs in Amazon RDS. Use a database client for analysis.
  • CStore the logs in Amazon OpenSearch Service. Use OpenSearch Service for analysis.
  • DStore the logs in an Amazon EMR cluster Use a supported open-source framework for SQL-based analysis.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Store the logs in Amazon S3. Use Amazon Athena tor analysis.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon Athena runs serverless SQL queries directly on data in Amazon S3 with no infrastructure to manage. This option delivers the requirement at the lowest cost.

Topic 1 Β· Question 644 Β· Select all that apply

An international company has a subdomain for each country that the company operates in. The subdomains are formatted as example.com, country1.example.com, and country2.example.com. The company's workloads are behind an Application Load Balancer. The company wants to encrypt the website data that is in transit. Which combination of steps will meet these requirements? (Choose two.)

  • AUse the AWS Certificate Manager (ACM) console to request a public certificate for the apex top domain example com and a wildcard certificate for *.example.com. (correct answer)
  • BUse the AWS Certificate Manager (ACM) console to request a private certificate for the apex top domain example.com and a wildcard certificate for *.example.com.
  • CUse the AWS Certificate Manager (ACM) console to request a public and private certificate for the apex top domain example.com.
  • DValidate domain ownership by email address. Switch to DNS validation by adding the required DNS records to the DNS provider.
  • EValidate domain ownership for the domain by adding the required DNS records to the DNS provider. (correct answer)
Reveal answer & explanation
Correct answer: A, E

The correct answer is A, E. Option A: Use the AWS Certificate Manager (ACM) console to request a public certificate for the apex top domain example com and a wildcard certificate for *.example.com. Option E: Validate domain ownership for the domain by adding the required DNS records to the DNS provider.

Explanation

Amazon RDS is a managed relational database that handles patching, backups and failover. AWS Certificate Manager provisions and renews TLS certificates automatically.

Topic 1 Β· Question 645

A company is required to use cryptographic keys in its on-premises key manager. The key manager is outside of the AWS Cloud because of regulatory and compliance requirements. The company wants to manage encryption and decryption by using cryptographic keys that are retained outside of the AWS Cloud and that support a variety of external key managers from different vendors. Which solution will meet these requirements with the LEAST operational overhead?

  • AUse AWS CloudHSM key store backed by a CloudHSM cluster.
  • BUse an AWS Key Management Service (AWS KMS) external key store backed by an external key manager. (correct answer)
  • CUse the default AWS Key Management Service (AWS KMS) managed key store.
  • DUse a custom key store backed by an AWS CloudHSM cluster.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use an AWS Key Management Service (AWS KMS) external key store backed by an external key manager.

Explanation

AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

Topic 1 Β· Question 646

A solutions architect needs to host a high performance computing (HPC) workload in the AWS Cloud. The workload will run on hundreds of Amazon EC2 instances and will require parallel access to a shared file system to enable distributed processing of large datasets. Datasets will be accessed across multiple instances simultaneously. The workload requires access latency within 1 ms. After processing has completed, engineers will need access to the dataset for manual postprocessing. Which solution will meet these requirements?

  • AUse Amazon Elastic File System (Amazon EFS) as a shared file system. Access the dataset from Amazon EFS.
  • BMount an Amazon S3 bucket to serve as the shared file system. Perform postprocessing directly from the S3 bucket.
  • CUse Amazon FSx for Lustre as a shared file system. Link the file system to an Amazon S3 bucket for postprocessing. (correct answer)
  • DConfigure AWS Resource Access Manager to share an Amazon S3 bucket so that it can be mounted to all instances for processing and postprocessing.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Use Amazon FSx for Lustre as a shared file system. Link the file system to an Amazon S3 bucket for postprocessing.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon FSx for Lustre delivers high-performance file storage for compute-intensive workloads. Amazon FSx provides fully managed third-party file systems.

Topic 1 Β· Question 647

A gaming company is building an application with Voice over IP capabilities. The application will serve traffic to users across the world. The application needs to be highly available with an automated failover across AWS Regions. The company wants to minimize the latency of users without relying on IP address caching on user devices. What should a solutions architect do to meet these requirements?

  • AUse AWS Global Accelerator with health checks. (correct answer)
  • BUse Amazon Route 53 with a geolocation routing policy.
  • CCreate an Amazon CloudFront distribution that includes multiple origins.
  • DCreate an Application Load Balancer that uses path-based routing.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use AWS Global Accelerator with health checks.

Explanation

AWS Global Accelerator routes users over the AWS backbone to the optimal endpoint for lower latency and fast failover. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

Topic 1 Β· Question 648

A weather forecasting company needs to process hundreds of gigabytes of data with sub-millisecond latency. The company has a high performance computing (HPC) environment in its data center and wants to expand its forecasting capabilities. A solutions architect must identify a highly available cloud storage solution that can handle large amounts of sustained throughput. Files that are stored in the solution should be accessible to thousands of compute instances that will simultaneously access and process the entire dataset. What should the solutions architect do to meet these requirements?

  • AUse Amazon FSx for Lustre scratch file systems.
  • BUse Amazon FSx for Lustre persistent file systems. (correct answer)
  • CUse Amazon Elastic File System (Amazon EFS) with Bursting Throughput mode.
  • DUse Amazon Elastic File System (Amazon EFS) with Provisioned Throughput mode.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use Amazon FSx for Lustre persistent file systems.

Explanation

Amazon FSx for Lustre delivers high-performance file storage for compute-intensive workloads. Amazon FSx provides fully managed third-party file systems. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

Topic 1 Β· Question 649

An ecommerce company runs a PostgreSQL database on premises. The database stores data by using high IOPS Amazon Elastic Block Store (Amazon EBS) block storage. The daily peak I/O transactions per second do not exceed 15,000 IOPS. The company wants to migrate the database to Amazon RDS for PostgreSQL and provision disk IOPS performance independent of disk storage capacity. Which solution will meet these requirements MOST cost-effectively?

  • AConfigure the General Purpose SSD (gp2) EBS volume storage type and provision 15,000 IOPS.
  • BConfigure the Provisioned IOPS SSD (io1) EBS volume storage type and provision 15,000 IOPS.
  • CConfigure the General Purpose SSD (gp3) EBS volume storage type and provision 15,000 IOPS. (correct answer)
  • DConfigure the EBS magnetic volume type to achieve maximum IOPS.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Configure the General Purpose SSD (gp3) EBS volume storage type and provision 15,000 IOPS.

Explanation

Amazon EBS provides block storage attached to a single EC2 instance. AWS Config tracks resource configuration changes and evaluates compliance. This option delivers the requirement at the lowest cost.

Topic 1 Β· Question 650

A company wants to migrate its on-premises Microsoft SQL Server Enterprise edition database to AWS. The company's online application uses the database to process transactions. The data analysis team uses the same production database to run reports for analytical processing. The company wants to reduce operational overhead by moving to managed services wherever possible. Which solution will meet these requirements with the LEAST operational overhead?

  • AMigrate to Amazon RDS for Microsoft SOL Server. Use read replicas for reporting purposes (correct answer)
  • BMigrate to Microsoft SQL Server on Amazon EC2. Use Always On read replicas for reporting purposes
  • CMigrate to Amazon DynamoDB. Use DynamoDB on-demand replicas for reporting purposes
  • DMigrate to Amazon Aurora MySQL. Use Aurora read replicas for reporting purposes
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Migrate to Amazon RDS for Microsoft SOL Server. Use read replicas for reporting purposes

Explanation

Amazon RDS is a managed relational database that handles patching, backups and failover.

Topic 1 Β· Question 651

A company stores a large volume of image files in an Amazon S3 bucket. The images need to be readily available for the first 180 days. The images are infrequently accessed for the next 180 days. After 360 days, the images need to be archived but must be available instantly upon request. After 5 years, only auditors can access the images. The auditors must be able to retrieve the images within 12 hours. The images cannot be lost during this process. A developer will use S3 Standard storage for the first 180 days. The developer needs to configure an S3 Lifecycle rule. Which solution will meet these requirements MOST cost-effectively?

  • ATransition the objects to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 180 days. S3 Glacier Instant Retrieval after 360 days, and S3 Glacier Deep Archive after 5 years.
  • BTransition the objects to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 180 days. S3 Glacier Flexible Retrieval after 360 days, and S3 Glacier Deep Archive after 5 years.
  • CTransition the objects to S3 Standard-Infrequent Access (S3 Standard-IA) after 180 days, S3 Glacier Instant Retrieval after 360 days, and S3 Glacier Deep Archive after 5 years. (correct answer)
  • DTransition the objects to S3 Standard-Infrequent Access (S3 Standard-IA) after 180 days, S3 Glacier Flexible Retrieval after 360 days, and S3 Glacier Deep Archive after 5 years.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Transition the objects to S3 Standard-Infrequent Access (S3 Standard-IA) after 180 days, S3 Glacier Instant Retrieval after 360 days, and S3 Glacier Deep Archive after 5 years.

Explanation

S3 Glacier Deep Archive is the lowest-cost storage for long-term archival with retrieval in hours. Amazon S3 Glacier offers low-cost archival storage for infrequently accessed data. S3 Standard-IA reduces cost for infrequently accessed data that still needs high availability. This option delivers the requirement at the lowest cost.

Topic 1 Β· Question 652

A company has a large data workload that runs for 6 hours each day. The company cannot lose any data while the process is running. A solutions architect is designing an Amazon EMR cluster configuration to support this critical data workload. Which solution will meet these requirements MOST cost-effectively?

  • AConfigure a long-running cluster that runs the primary node and core nodes on On-Demand Instances and the task nodes on Spot Instances.
  • BConfigure a transient cluster that runs the primary node and core nodes on On-Demand Instances and the task nodes on Spot Instances. (correct answer)
  • CConfigure a transient cluster that runs the primary node on an On-Demand Instance and the core nodes and task nodes on Spot Instances.
  • DConfigure a long-running cluster that runs the primary node on an On-Demand Instance, the core nodes on Spot Instances, and the task nodes on Spot Instances.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Configure a transient cluster that runs the primary node and core nodes on On-Demand Instances and the task nodes on Spot Instances.

Explanation

Spot Instances use spare capacity at a large discount, ideal for fault-tolerant or interruptible workloads. AWS Config tracks resource configuration changes and evaluates compliance. This option delivers the requirement at the lowest cost.

Topic 1 Β· Question 653

A company maintains an Amazon RDS database that maps users to cost centers. The company has accounts in an organization in AWS Organizations. The company needs a solution that will tag all resources that are created in a specific AWS account in the organization. The solution must tag each resource with the cost center ID of the user who created the resource. Which solution will meet these requirements?

  • AMove the specific AWS account to a new organizational unit (OU) in Organizations from the management account. Create a service control policy (SCP) that requires all existing resources to have the correct cost center tag before the resources are created. Apply the SCP to the new OU.
  • BCreate an AWS Lambda function to tag the resources after the Lambda function looks up the appropriate cost center from the RDS database. Configure an Amazon EventBridge rule that reacts to AWS CloudTrail events to invoke the Lambda function. (correct answer)
  • CCreate an AWS CloudFormation stack to deploy an AWS Lambda function. Configure the Lambda function to look up the appropriate cost center from the RDS database and to tag resources. Create an Amazon EventBridge scheduled rule to invoke the CloudFormation stack.
  • DCreate an AWS Lambda function to tag the resources with a default value. Configure an Amazon EventBridge rule that reacts to AWS CloudTrail events to invoke the Lambda function when a resource is missing the cost center tag.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create an AWS Lambda function to tag the resources after the Lambda function looks up the appropriate cost center from the RDS database. Configure an Amazon EventBridge rule that reacts to AWS CloudTrail events to inv...

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon RDS is a managed relational database that handles patching, backups and failover. Amazon EventBridge routes events between services with rules, enabling event-driven, decoupled architectures.

Topic 1 Β· Question 654

A company recently migrated its web application to the AWS Cloud. The company uses an Amazon EC2 instance to run multiple processes to host the application. The processes include an Apache web server that serves static content. The Apache web server makes requests to a PHP application that uses a local Redis server for user sessions. The company wants to redesign the architecture to be highly available and to use AWS managed solutions. Which solution will meet these requirements?

  • AUse AWS Elastic Beanstalk to host the static content and the PHP application. Configure Elastic Beanstalk to deploy its EC2 instance into a public subnet. Assign a public IP address.
  • BUse AWS Lambda to host the static content and the PHP application. Use an Amazon API Gateway REST API to proxy requests to the Lambda function. Set the API Gateway CORS configuration to respond to the domain name. Configure Amazon ElastiCache for Redis to handle session information.
  • CKeep the backend code on the EC2 instance. Create an Amazon ElastiCache for Redis cluster that has Multi-AZ enabled. Configure the ElastiCache for Redis cluster in cluster mode. Copy the frontend resources to Amazon S3. Configure the backend code to reference the EC2 instance.
  • DConfigure an Amazon CloudFront distribution with an Amazon S3 endpoint to an S3 bucket that is configured to host the static content. Configure an Application Load Balancer that targets an Amazon Elastic Container Service (Amazon ECS) service that runs AWS Fargate tasks for the PHP application. Configure the PHP application to use an Amazon ElastiCache for Redis cluster that runs in multiple Availability Zones. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Configure an Amazon CloudFront distribution with an Amazon S3 endpoint to an S3 bucket that is configured to host the static content. Configure an Application Load Balancer that targets an Amazon Elastic Container Ser...

Explanation

AWS Fargate runs containers serverlessly so there are no EC2 hosts to manage or patch. Amazon ECS orchestrates containers and integrates natively with AWS networking and IAM. Amazon S3 provides durable, scalable object storage that is fully managed. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

Topic 1 Β· Question 655 Β· Select all that apply

A company runs a web application on Amazon EC2 instances in an Auto Scaling group that has a target group. The company designed the application to work with session affinity (sticky sessions) for a better user experience. The application must be available publicly over the internet as an endpoint. A WAF must be applied to the endpoint for additional security. Session affinity (sticky sessions) must be configured on the endpoint. Which combination of steps will meet these requirements? (Choose two.)

  • ACreate a public Network Load Balancer. Specify the application target group.
  • BCreate a Gateway Load Balancer. Specify the application target group.
  • CCreate a public Application Load Balancer. Specify the application target group. (correct answer)
  • DCreate a second target group. Add Elastic IP addresses to the EC2 instances.
  • ECreate a web ACL in AWS WAF. Associate the web ACL with the endpoint (correct answer)
Reveal answer & explanation
Correct answer: C, E

The correct answer is C, E. Option C: Create a public Application Load Balancer. Specify the application target group. Option E: Create a web ACL in AWS WAF. Associate the web ACL with the endpoint

Explanation

An Application Load Balancer distributes HTTP/HTTPS traffic and supports path/host routing. A load balancer distributes traffic across targets in multiple AZs for availability and scale. AWS WAF protects web applications from common exploits and malicious requests.

Topic 1 Β· Question 656

A company runs a website that stores images of historical events. Website users need the ability to search and view images based on the year that the event in the image occurred. On average, users request each image only once or twice a year. The company wants a highly available solution to store and deliver the images to users. Which solution will meet these requirements MOST cost-effectively?

  • AStore images in Amazon Elastic Block Store (Amazon EBS). Use a web server that runs on Amazon EC2.
  • BStore images in Amazon Elastic File System (Amazon EFS). Use a web server that runs on Amazon EC2.
  • CStore images in Amazon S3 Standard. Use S3 Standard to directly deliver images by using a static website.
  • DStore images in Amazon S3 Standard-Infrequent Access (S3 Standard-IA). Use S3 Standard-IA to directly deliver images by using a static website. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Store images in Amazon S3 Standard-Infrequent Access (S3 Standard-IA). Use S3 Standard-IA to directly deliver images by using a static website.

Explanation

S3 Standard-IA reduces cost for infrequently accessed data that still needs high availability. Amazon S3 provides durable, scalable object storage that is fully managed. Amazon EBS provides block storage attached to a single EC2 instance. This option delivers the requirement at the lowest cost.

Topic 1 Β· Question 657

A company has multiple AWS accounts in an organization in AWS Organizations that different business units use. The company has multiple offices around the world. The company needs to update security group rules to allow new office CIDR ranges or to remove old CIDR ranges across the organization. The company wants to centralize the management of security group rules to minimize the administrative overhead that updating CIDR ranges requires. Which solution will meet these requirements MOST cost-effectively?

  • ACreate VPC security groups in the organization's management account. Update the security groups when a CIDR range update is necessary.
  • BCreate a VPC customer managed prefix list that contains the list of CIDRs. Use AWS Resource Access Manager (AWS RAM) to share the prefix list across the organization. Use the prefix list in the security groups across the organization. (correct answer)
  • CCreate an AWS managed prefix list. Use an AWS Security Hub policy to enforce the security group update across the organization. Use an AWS Lambda function to update the prefix list automatically when the CIDR ranges change.
  • DCreate security groups in a central administrative AWS account. Create an AWS Firewall Manager common security group policy for the whole organization. Select the previously created security groups as primary groups in the policy.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create a VPC customer managed prefix list that contains the list of CIDRs. Use AWS Resource Access Manager (AWS RAM) to share the prefix list across the organization. Use the prefix list in the security groups across... This option delivers the requirement at the lowest cost.

Topic 1 Β· Question 658 Β· Select all that apply

A company uses an on-premises network-attached storage (NAS) system to provide file shares to its high performance computing (HPC) workloads. The company wants to migrate its latency-sensitive HPC workloads and its storage to the AWS Cloud. The company must be able to provide NFS and SMB multi-protocol access from the file system. Which solution will meet these requirements with the LEAST latency? (Choose two.)

  • ADeploy compute optimized EC2 instances into a cluster placement group. (correct answer)
  • BDeploy compute optimized EC2 instances into a partition placement group.
  • CAttach the EC2 instances to an Amazon FSx for Lustre file system.
  • DAttach the EC2 instances to an Amazon FSx for OpenZFS file system.
  • EAttach the EC2 instances to an Amazon FSx for NetApp ONTAP file system. (correct answer)
Reveal answer & explanation
Correct answer: A, E

The correct answer is A, E. Option A: Deploy compute optimized EC2 instances into a cluster placement group. Option E: Attach the EC2 instances to an Amazon FSx for NetApp ONTAP file system.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon FSx provides fully managed third-party file systems.

Topic 1 Β· Question 659

A company is relocating its data center and wants to securely transfer 50 TB of data to AWS within 2 weeks. The existing data center has a Site-to-Site VPN connection to AWS that is 90% utilized. Which AWS service should a solutions architect use to meet these requirements?

  • AAWS DataSync with a VPC endpoint
  • BAWS Direct Connect
  • CAWS Snowball Edge Storage Optimized (correct answer)
  • DAWS Storage Gateway
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: AWS Snowball Edge Storage Optimized

Explanation

AWS Snowball physically ships data to AWS, ideal when bandwidth is limited or data is very large.

Topic 1 Β· Question 660

A company hosts an application on Amazon EC2 On-Demand Instances in an Auto Scaling group. Application peak hours occur at the same time each day. Application users report slow application performance at the start of peak hours. The application performs normally 2-3 hours after peak hours begin. The company wants to ensure that the application works properly at the start of peak hours. Which solution will meet these requirements?

  • AConfigure an Application Load Balancer to distribute traffic properly to the instances.
  • BConfigure a dynamic scaling policy for the Auto Scaling group to launch new instances based on memory utilization.
  • CConfigure a dynamic scaling policy for the Auto Scaling group to launch new instances based on CPU utilization.
  • DConfigure a scheduled scaling policy for the Auto Scaling group to launch new instances before peak hours. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Configure a scheduled scaling policy for the Auto Scaling group to launch new instances before peak hours.

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. AWS Config tracks resource configuration changes and evaluates compliance.

Showing questions 641–660 of 1019 Β· Page 33 of 51