🔍

SAA-C03 — questions

Page 34 of 51 · 1019 total questions.

SAA-C03 Question 661

Single page →
Topic 1 · Question 661

A company runs applications on AWS that connect to the company's Amazon RDS database. The applications scale on weekends and at peak times of the year. The company wants to scale the database more effectively for its applications that connect to the database. Which solution will meet these requirements with the LEAST operational overhead?

  • AUse Amazon DynamoDB with connection pooling with a target group configuration for the database. Change the applications to use the DynamoDB endpoint.
  • BUse Amazon RDS Proxy with a target group for the database. Change the applications to use the RDS Proxy endpoint. (correct answer)
  • CUse a custom proxy that runs on Amazon EC2 as an intermediary to the database. Change the applications to use the custom proxy endpoint.
  • DUse an AWS Lambda function to provide connection pooling with a target group configuration for the database. Change the applications to use the Lambda function.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use Amazon RDS Proxy with a target group for the database. Change the applications to use the RDS Proxy endpoint.

Explanation

Amazon RDS Proxy pools and shares database connections to improve scalability and resilience. Amazon RDS is a managed relational database that handles patching, backups and failover.

SAA-C03 Question 662

Single page →
Topic 1 · Question 662

A company uses AWS Cost Explorer to monitor its AWS costs. The company notices that Amazon Elastic Block Store (Amazon EBS) storage and snapshot costs increase every month. However, the company does not purchase additional EBS storage every month. The company wants to optimize monthly costs for its current storage usage. Which solution will meet these requirements with the LEAST operational overhead?

  • AUse logs in Amazon CloudWatch Logs to monitor the storage utilization of Amazon EBS. Use Amazon EBS Elastic Volumes to reduce the size of the EBS volumes.
  • BUse a custom script to monitor space usage. Use Amazon EBS Elastic Volumes to reduce the size of the EBS volumes.
  • CDelete all expired and unused snapshots to reduce snapshot costs.
  • DDelete all nonessential snapshots. Use Amazon Data Lifecycle Manager to create and manage the snapshots according to the company's snapshot policy requirements. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Delete all nonessential snapshots. Use Amazon Data Lifecycle Manager to create and manage the snapshots according to the company's snapshot policy requirements.

SAA-C03 Question 663

Single page →
Topic 1 · Question 663

A company is developing a new application on AWS. The application consists of an Amazon Elastic Container Service (Amazon ECS) cluster, an Amazon S3 bucket that contains assets for the application, and an Amazon RDS for MySQL database that contains the dataset for the application. The dataset contains sensitive information. The company wants to ensure that only the ECS cluster can access the data in the RDS for MySQL database and the data in the S3 bucket. Which solution will meet these requirements?

  • ACreate a new AWS Key Management Service (AWS KMS) customer managed key to encrypt both the S3 bucket and the RDS for MySQL database. Ensure that the KMS key policy includes encrypt and decrypt permissions for the ECS task execution role. (correct answer)
  • BCreate an AWS Key Management Service (AWS KMS) AWS managed key to encrypt both the S3 bucket and the RDS for MySQL database. Ensure that the S3 bucket policy specifies the ECS task execution role as a user.
  • CCreate an S3 bucket policy that restricts bucket access to the ECS task execution role. Create a VPC endpoint for Amazon RDS for MySQL. Update the RDS for MySQL security group to allow access from only the subnets that the ECS cluster will generate tasks in.
  • DCreate a VPC endpoint for Amazon RDS for MySQL. Update the RDS for MySQL security group to allow access from only the subnets that the ECS cluster will generate tasks in. Create a VPC endpoint for Amazon S3. Update the S3 bucket policy to allow access from only the S3 VPC endpoint.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create a new AWS Key Management Service (AWS KMS) customer managed key to encrypt both the S3 bucket and the RDS for MySQL database. Ensure that the KMS key policy includes encrypt and decrypt permissions for the ECS...

Explanation

Amazon ECS orchestrates containers and integrates natively with AWS networking and IAM. Amazon S3 provides durable, scalable object storage that is fully managed. Amazon RDS is a managed relational database that handles patching, backups and failover.

SAA-C03 Question 664

Single page →
Topic 1 · Question 664

A company has a web application that runs on premises. The application experiences latency issues during peak hours. The latency issues occur twice each month. At the start of a latency issue, the application's CPU utilization immediately increases to 10 times its normal amount. The company wants to migrate the application to AWS to improve latency. The company also wants to scale the application automatically when application demand increases. The company will use AWS Elastic Beanstalk for application deployment. Which solution will meet these requirements?

  • AConfigure an Elastic Beanstalk environment to use burstable performance instances in unlimited mode. Configure the environment to scale based on requests. (correct answer)
  • BConfigure an Elastic Beanstalk environment to use compute optimized instances. Configure the environment to scale based on requests.
  • CConfigure an Elastic Beanstalk environment to use compute optimized instances. Configure the environment to scale on a schedule.
  • DConfigure an Elastic Beanstalk environment to use burstable performance instances in unlimited mode. Configure the environment to scale on predictive metrics.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Configure an Elastic Beanstalk environment to use burstable performance instances in unlimited mode. Configure the environment to scale based on requests.

Explanation

AWS Elastic Beanstalk provisions and manages the underlying environment for you with little operational effort. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 665

Single page →
Topic 1 · Question 665

A company has customers located across the world. The company wants to use automation to secure its systems and network infrastructure. The company's security team must be able to track and audit all incremental changes to the infrastructure. Which solution will meet these requirements?

  • AUse AWS Organizations to set up the infrastructure. Use AWS Config to track changes.
  • BUse AWS CloudFormation to set up the infrastructure. Use AWS Config to track changes. (correct answer)
  • CUse AWS Organizations to set up the infrastructure. Use AWS Service Catalog to track changes.
  • DUse AWS CloudFormation to set up the infrastructure. Use AWS Service Catalog to track changes.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use AWS CloudFormation to set up the infrastructure. Use AWS Config to track changes.

Explanation

AWS Config tracks resource configuration changes and evaluates compliance. AWS CloudFormation provisions infrastructure as code repeatably.

SAA-C03 Question 666

Single page →
Topic 1 · Question 666 · Select all that apply

A startup company is hosting a website for its customers on an Amazon EC2 instance. The website consists of a stateless Python application and a MySQL database. The website serves only a small amount of traffic. The company is concerned about the reliability of the instance and needs to migrate to a highly available architecture. The company cannot modify the application code. Which combination of actions should a solutions architect take to achieve high availability for the website? (Choose two.)

  • AProvision an internet gateway in each Availability Zone in use.
  • BMigrate the database to an Amazon RDS for MySQL Multi-AZ DB instance. (correct answer)
  • CMigrate the database to Amazon DynamoDB, and enable DynamoDB auto scaling.
  • DUse AWS DataSync to synchronize the database data across multiple EC2 instances.
  • ECreate an Application Load Balancer to distribute traffic to an Auto Scaling group of EC2 instances that are distributed across two Availability Zones. (correct answer)
Reveal answer & explanation
Correct answer: B, E

The correct answer is B, E. Option B: Migrate the database to an Amazon RDS for MySQL Multi-AZ DB instance. Option E: Create an Application Load Balancer to distribute traffic to an Auto Scaling group of EC2 instances that are distributed across two Availability Zones.

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon RDS is a managed relational database that handles patching, backups and failover. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SAA-C03 Question 667

Single page →
Topic 1 · Question 667

A company is moving its data and applications to AWS during a multiyear migration project. The company wants to securely access data on Amazon S3 from the company's AWS Region and from the company's on-premises location. The data must not traverse the internet. The company has established an AWS Direct Connect connection between its Region and its on-premises location. Which solution will meet these requirements?

  • ACreate gateway endpoints for Amazon S3. Use the gateway endpoints to securely access the data from the Region and the on-premises location.
  • BCreate a gateway in AWS Transit Gateway to access Amazon S3 securely from the Region and the on-premises location.
  • CCreate interface endpoints for Amazon S3. Use the interface endpoints to securely access the data from the Region and the on-premises location. (correct answer)
  • DUse an AWS Key Management Service (AWS KMS) key to access the data securely from the Region and the on-premises location.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create interface endpoints for Amazon S3. Use the interface endpoints to securely access the data from the Region and the on-premises location.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed.

SAA-C03 Question 668

Single page →
Topic 1 · Question 668

A company created a new organization in AWS Organizations. The organization has multiple accounts for the company's development teams. The development team members use AWS IAM Identity Center (AWS Single Sign-On) to access the accounts. For each of the company's applications, the development teams must use a predefined application name to tag resources that are created. A solutions architect needs to design a solution that gives the development team the ability to create resources only if the application name tag has an approved value. Which solution will meet these requirements?

  • ACreate an IAM group that has a conditional Allow policy that requires the application name tag to be specified for resources to be created.
  • BCreate a cross-account role that has a Deny policy for any resource that has the application name tag.
  • CCreate a resource group in AWS Resource Groups to validate that the tags are applied to all resources in all accounts.
  • DCreate a tag policy in Organizations that has a list of allowed application names. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Create a tag policy in Organizations that has a list of allowed application names.

Explanation

AWS Organizations centrally governs and secures multiple AWS accounts.

SAA-C03 Question 669

Single page →
Topic 1 · Question 669

A company runs its databases on Amazon RDS for PostgreSQL. The company wants a secure solution to manage the master user password by rotating the password every 30 days. Which solution will meet these requirements with the LEAST operational overhead?

  • AUse Amazon EventBridge to schedule a custom AWS Lambda function to rotate the password every 30 days.
  • BUse the modify-db-instance command in the AWS CLI to change the password.
  • CIntegrate AWS Secrets Manager with Amazon RDS for PostgreSQL to automate password rotation. (correct answer)
  • DIntegrate AWS Systems Manager Parameter Store with Amazon RDS for PostgreSQL to automate password rotation.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Integrate AWS Secrets Manager with Amazon RDS for PostgreSQL to automate password rotation.

Explanation

Amazon RDS is a managed relational database that handles patching, backups and failover. AWS Secrets Manager stores and automatically rotates secrets such as database credentials.

SAA-C03 Question 670

Single page →
Topic 1 · Question 670

A company performs tests on an application that uses an Amazon DynamoDB table. The tests run for 4 hours once a week. The company knows how many read and write operations the application performs to the table each second during the tests. The company does not currently use DynamoDB for any other use case. A solutions architect needs to optimize the costs for the table. Which solution will meet these requirements?

  • AChoose on-demand mode. Update the read and write capacity units appropriately.
  • BChoose provisioned mode. Update the read and write capacity units appropriately. (correct answer)
  • CPurchase DynamoDB reserved capacity for a 1-year term.
  • DPurchase DynamoDB reserved capacity for a 3-year term.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Choose provisioned mode. Update the read and write capacity units appropriately.

SAA-C03 Question 671

Single page →
Topic 1 · Question 671

A company runs its applications on Amazon EC2 instances. The company performs periodic financial assessments of its AWS costs. The company recently identified unusual spending. The company needs a solution to prevent unusual spending. The solution must monitor costs and notify responsible stakeholders in the event of unusual spending. Which solution will meet these requirements?

  • AUse an AWS Budgets template to create a zero spend budget.
  • BCreate an AWS Cost Anomaly Detection monitor in the AWS Billing and Cost Management console. (correct answer)
  • CCreate AWS Pricing Calculator estimates for the current running workload pricing details.
  • DUse Amazon CloudWatch to monitor costs and to identify unusual spending.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create an AWS Cost Anomaly Detection monitor in the AWS Billing and Cost Management console.

SAA-C03 Question 672

Single page →
Topic 1 · Question 672

A marketing company receives a large amount of new clickstream data in Amazon S3 from a marketing campaign. The company needs to analyze the clickstream data in Amazon S3 quickly. Then the company needs to determine whether to process the data further in the data pipeline. Which solution will meet these requirements with the LEAST operational overhead?

  • ACreate external tables in a Spark catalog. Configure jobs in AWS Glue to query the data.
  • BConfigure an AWS Glue crawler to crawl the data. Configure Amazon Athena to query the data. (correct answer)
  • CCreate external tables in a Hive metastore. Configure Spark jobs in Amazon EMR to query the data.
  • DConfigure an AWS Glue crawler to crawl the data. Configure Amazon Kinesis Data Analytics to use SQL to query the data.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Configure an AWS Glue crawler to crawl the data. Configure Amazon Athena to query the data.

Explanation

Amazon Athena runs serverless SQL queries directly on data in Amazon S3 with no infrastructure to manage. AWS Glue is a serverless ETL and data-catalog service that prepares and integrates data. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 673

Single page →
Topic 1 · Question 673

A company runs an SMB file server in its data center. The file server stores large files that the company frequently accesses for up to 7 days after the file creation date. After 7 days, the company needs to be able to access the files with a maximum retrieval time of 24 hours. Which solution will meet these requirements?

  • AUse AWS DataSync to copy data that is older than 7 days from the SMB file server to AWS.
  • BCreate an Amazon S3 File Gateway to increase the company's storage space. Create an S3 Lifecycle policy to transition the data to S3 Glacier Deep Archive after 7 days. (correct answer)
  • CCreate an Amazon FSx File Gateway to increase the company's storage space. Create an Amazon S3 Lifecycle policy to transition the data after 7 days.
  • DConfigure access to Amazon S3 for each user. Create an S3 Lifecycle policy to transition the data to S3 Glacier Flexible Retrieval after 7 days.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create an Amazon S3 File Gateway to increase the company's storage space. Create an S3 Lifecycle policy to transition the data to S3 Glacier Deep Archive after 7 days.

Explanation

S3 Glacier Deep Archive is the lowest-cost storage for long-term archival with retrieval in hours. Amazon S3 Glacier offers low-cost archival storage for infrequently accessed data. S3 Lifecycle policies automatically transition or expire objects to control storage cost.

SAA-C03 Question 674

Single page →
Topic 1 · Question 674 · Select all that apply

A company runs a web application on Amazon EC2 instances in an Auto Scaling group. The application uses a database that runs on an Amazon RDS for PostgreSQL DB instance. The application performs slowly when traffic increases. The database experiences a heavy read load during periods of high traffic. Which actions should a solutions architect take to resolve these performance issues? (Choose two.)

  • ATurn on auto scaling for the DB instance.
  • BCreate a read replica for the DB instance. Configure the application to send read traffic to the read replica. (correct answer)
  • CConvert the DB instance to a Multi-AZ DB instance deployment. Configure the application to send read traffic to the standby DB instance.
  • DCreate an Amazon ElastiCache cluster. Configure the application to cache query results in the ElastiCache cluster. (correct answer)
  • EConfigure the Auto Scaling group subnets to ensure that the EC2 instances are provisioned in the same Availability Zone as the DB instance.
Reveal answer & explanation
Correct answer: B, D

The correct answer is B, D. Option B: Create a read replica for the DB instance. Configure the application to send read traffic to the read replica. Option D: Create an Amazon ElastiCache cluster. Configure the application to cache query results in the ElastiCache cluster.

Explanation

Amazon ElastiCache provides in-memory caching (Redis/Memcached) to reduce latency and offload the database. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 675

Single page →
Topic 1 · Question 675

A company uses Amazon EC2 instances and Amazon Elastic Block Store (Amazon EBS) volumes to run an application. The company creates one snapshot of each EBS volume every day to meet compliance requirements. The company wants to implement an architecture that prevents the accidental deletion of EBS volume snapshots. The solution must not change the administrative rights of the storage administrator user. Which solution will meet these requirements with the LEAST administrative effort?

  • ACreate an IAM role that has permission to delete snapshots. Attach the role to a new EC2 instance. Use the AWS CLI from the new EC2 instance to delete snapshots.
  • BCreate an IAM policy that denies snapshot deletion. Attach the policy to the storage administrator user.
  • CAdd tags to the snapshots. Create retention rules in Recycle Bin for EBS snapshots that have the tags.
  • DLock the EBS snapshots to prevent deletion. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Lock the EBS snapshots to prevent deletion.

Explanation

Amazon EBS provides block storage attached to a single EC2 instance.

SAA-C03 Question 676

Single page →
Topic 1 · Question 676

A company's application uses Network Load Balancers, Auto Scaling groups, Amazon EC2 instances, and databases that are deployed in an Amazon VPC. The company wants to capture information about traffic to and from the network interfaces in near real time in its Amazon VPC. The company wants to send the information to Amazon OpenSearch Service for analysis. Which solution will meet these requirements?

  • ACreate a log group in Amazon CloudWatch Logs. Configure VPC Flow Logs to send the log data to the log group. Use Amazon Kinesis Data Streams to stream the logs from the log group to OpenSearch Service.
  • BCreate a log group in Amazon CloudWatch Logs. Configure VPC Flow Logs to send the log data to the log group. Use Amazon Kinesis Data Firehose to stream the logs from the log group to OpenSearch Service. (correct answer)
  • CCreate a trail in AWS CloudTrail. Configure VPC Flow Logs to send the log data to the trail. Use Amazon Kinesis Data Streams to stream the logs from the trail to OpenSearch Service.
  • DCreate a trail in AWS CloudTrail. Configure VPC Flow Logs to send the log data to the trail. Use Amazon Kinesis Data Firehose to stream the logs from the trail to OpenSearch Service.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create a log group in Amazon CloudWatch Logs. Configure VPC Flow Logs to send the log data to the log group. Use Amazon Kinesis Data Firehose to stream the logs from the log group to OpenSearch Service.

Explanation

Kinesis Data Firehose delivers streaming data to destinations like S3/Redshift with no servers to manage. Amazon Kinesis ingests and processes real-time streaming data at scale. Amazon OpenSearch Service provides managed search and log analytics. This option meets the real-time / low-latency performance requirement.

SAA-C03 Question 677

Single page →
Topic 1 · Question 677

A company is developing an application that will run on a production Amazon Elastic Kubernetes Service (Amazon EKS) cluster. The EKS cluster has managed node groups that are provisioned with On-Demand Instances. The company needs a dedicated EKS cluster for development work. The company will use the development cluster infrequently to test the resiliency of the application. The EKS cluster must manage all the nodes. Which solution will meet these requirements MOST cost-effectively?

  • ACreate a managed node group that contains only Spot Instances. (correct answer)
  • BCreate two managed node groups. Provision one node group with On-Demand Instances. Provision the second node group with Spot Instances.
  • CCreate an Auto Scaling group that has a launch configuration that uses Spot Instances. Configure the user data to add the nodes to the EKS cluster.
  • DCreate a managed node group that contains only On-Demand Instances.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create a managed node group that contains only Spot Instances.

Explanation

Spot Instances use spare capacity at a large discount, ideal for fault-tolerant or interruptible workloads. This option delivers the requirement at the lowest cost.

SAA-C03 Question 678

Single page →
Topic 1 · Question 678

A company stores sensitive data in Amazon S3. A solutions architect needs to create an encryption solution. The company needs to fully control the ability of users to create, rotate, and disable encryption keys with minimal effort for any data that must be encrypted. Which solution will meet these requirements?

  • AUse default server-side encryption with Amazon S3 managed encryption keys (SSE-S3) to store the sensitive data.
  • BCreate a customer managed key by using AWS Key Management Service (AWS KMS). Use the new key to encrypt the S3 objects by using server-side encryption with AWS KMS keys (SSE-KMS). (correct answer)
  • CCreate an AWS managed key by using AWS Key Management Service (AWS KMS). Use the new key to encrypt the S3 objects by using server-side encryption with AWS KMS keys (SSE-KMS).
  • DDownload S3 objects to an Amazon EC2 instance. Encrypt the objects by using customer managed keys. Upload the encrypted objects back into Amazon S3.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create a customer managed key by using AWS Key Management Service (AWS KMS). Use the new key to encrypt the S3 objects by using server-side encryption with AWS KMS keys (SSE-KMS).

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

SAA-C03 Question 679

Single page →
Topic 1 · Question 679 · Select all that apply

A company wants to back up its on-premises virtual machines (VMs) to AWS. The company's backup solution exports on-premises backups to an Amazon S3 bucket as objects. The S3 backups must be retained for 30 days and must be automatically deleted after 30 days. Which combination of steps will meet these requirements? (Choose three.)

  • ACreate an S3 bucket that has S3 Object Lock enabled. (correct answer)
  • BCreate an S3 bucket that has object versioning enabled.
  • CConfigure a default retention period of 30 days for the objects. (correct answer)
  • DConfigure an S3 Lifecycle policy to protect the objects for 30 days.
  • EConfigure an S3 Lifecycle policy to expire the objects after 30 days. (correct answer)
  • FConfigure the backup solution to tag the objects with a 30-day retention period
Reveal answer & explanation
Correct answer: A, C, E

The correct answer is A, C, E. Option A: Create an S3 bucket that has S3 Object Lock enabled. Option C: Configure a default retention period of 30 days for the objects. Option E: Configure an S3 Lifecycle policy to expire the objects after 30 days.

Explanation

S3 Lifecycle policies automatically transition or expire objects to control storage cost. Amazon S3 provides durable, scalable object storage that is fully managed. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 680

Single page →
Topic 1 · Question 680

A solutions architect needs to copy files from an Amazon S3 bucket to an Amazon Elastic File System (Amazon EFS) file system and another S3 bucket. The files must be copied continuously. New files are added to the original S3 bucket consistently. The copied files should be overwritten only if the source file changes. Which solution will meet these requirements with the LEAST operational overhead?

  • ACreate an AWS DataSync location for both the destination S3 bucket and the EFS file system. Create a task for the destination S3 bucket and the EFS file system. Set the transfer mode to transfer only data that has changed. (correct answer)
  • BCreate an AWS Lambda function. Mount the file system to the function. Set up an S3 event notification to invoke the function when files are created and changed in Amazon S3. Configure the function to copy files to the file system and the destination S3 bucket.
  • CCreate an AWS DataSync location for both the destination S3 bucket and the EFS file system. Create a task for the destination S3 bucket and the EFS file system. Set the transfer mode to transfer all data.
  • DLaunch an Amazon EC2 instance in the same VPC as the file system. Mount the file system. Create a script to routinely synchronize all objects that changed in the origin S3 bucket to the destination S3 bucket and the mounted file system.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create an AWS DataSync location for both the destination S3 bucket and the EFS file system. Create a task for the destination S3 bucket and the EFS file system. Set the transfer mode to transfer only data that has cha...

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon EFS is a shared, elastic NFS file system that multiple instances can mount concurrently across AZs. AWS DataSync automates and accelerates online data transfer to AWS with minimal effort.

Showing questions 661–680 of 1019 · Page 34 of 51