🔍

SAA-C03 — questions

Page 35 of 51 · 1019 total questions.

SAA-C03 Question 681

Single page →
Topic 1 · Question 681

A company uses Amazon EC2 instances and stores data on Amazon Elastic Block Store (Amazon EBS) volumes. The company must ensure that all data is encrypted at rest by using AWS Key Management Service (AWS KMS). The company must be able to control rotation of the encryption keys. Which solution will meet these requirements with the LEAST operational overhead?

  • ACreate a customer managed key. Use the key to encrypt the EBS volumes. (correct answer)
  • BUse an AWS managed key to encrypt the EBS volumes. Use the key to configure automatic key rotation.
  • CCreate an external KMS key with imported key material. Use the key to encrypt the EBS volumes.
  • DUse an AWS owned key to encrypt the EBS volumes.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create a customer managed key. Use the key to encrypt the EBS volumes.

Explanation

Amazon EBS provides block storage attached to a single EC2 instance.

SAA-C03 Question 682

Single page →
Topic 1 · Question 682

A company needs a solution to enforce data encryption at rest on Amazon EC2 instances. The solution must automatically identify noncompliant resources and enforce compliance policies on findings. Which solution will meet these requirements with the LEAST administrative overhead?

  • AUse an IAM policy that allows users to create only encrypted Amazon Elastic Block Store (Amazon EBS) volumes. Use AWS Config and AWS Systems Manager to automate the detection and remediation of unencrypted EBS volumes. (correct answer)
  • BUse AWS Key Management Service (AWS KMS) to manage access to encrypted Amazon Elastic Block Store (Amazon EBS) volumes. Use AWS Lambda and Amazon EventBridge to automate the detection and remediation of unencrypted EBS volumes.
  • CUse Amazon Macie to detect unencrypted Amazon Elastic Block Store (Amazon EBS) volumes. Use AWS Systems Manager Automation rules to automatically encrypt existing and new EBS volumes.
  • DUse Amazon inspector to detect unencrypted Amazon Elastic Block Store (Amazon EBS) volumes. Use AWS Systems Manager Automation rules to automatically encrypt existing and new EBS volumes.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use an IAM policy that allows users to create only encrypted Amazon Elastic Block Store (Amazon EBS) volumes. Use AWS Config and AWS Systems Manager to automate the detection and remediation of unencrypted EBS volumes.

Explanation

Amazon EBS provides block storage attached to a single EC2 instance. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 683

Single page →
Topic 1 · Question 683 · Select all that apply

A company is migrating its multi-tier on-premises application to AWS. The application consists of a single-node MySQL database and a multi-node web tier. The company must minimize changes to the application during the migration. The company wants to improve application resiliency after the migration. Which combination of steps will meet these requirements? (Choose two.)

  • AMigrate the web tier to Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer. (correct answer)
  • BMigrate the database to Amazon EC2 instances in an Auto Scaling group behind a Network Load Balancer.
  • CMigrate the database to an Amazon RDS Multi-AZ deployment. (correct answer)
  • DMigrate the web tier to an AWS Lambda function.
  • EMigrate the database to an Amazon DynamoDB table.
Reveal answer & explanation
Correct answer: A, C

The correct answer is A, C. Option A: Migrate the web tier to Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer. Option C: Migrate the database to an Amazon RDS Multi-AZ deployment.

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon RDS is a managed relational database that handles patching, backups and failover. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SAA-C03 Question 684

Single page →
Topic 1 · Question 684

A company wants to migrate its web applications from on premises to AWS. The company is located close to the eu-central-1 Region. Because of regulations, the company cannot launch some of its applications in eu-central-1. The company wants to achieve single-digit millisecond latency. Which solution will meet these requirements?

  • ADeploy the applications in eu-central-1. Extend the company’s VPC from eu-central-1 to an edge location in Amazon CloudFront.
  • BDeploy the applications in AWS Local Zones by extending the company's VPC from eu-central-1 to the chosen Local Zone. (correct answer)
  • CDeploy the applications in eu-central-1. Extend the company’s VPC from eu-central-1 to the regional edge caches in Amazon CloudFront.
  • DDeploy the applications in AWS Wavelength Zones by extending the company’s VPC from eu-central-1 to the chosen Wavelength Zone.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Deploy the applications in AWS Local Zones by extending the company's VPC from eu-central-1 to the chosen Local Zone.

SAA-C03 Question 685

Single page →
Topic 1 · Question 685

A company’s ecommerce website has unpredictable traffic and uses AWS Lambda functions to directly access a private Amazon RDS for PostgreSQL DB instance. The company wants to maintain predictable database performance and ensure that the Lambda invocations do not overload the database with too many connections. What should a solutions architect do to meet these requirements?

  • APoint the client driver at an RDS custom endpoint. Deploy the Lambda functions inside a VPC.
  • BPoint the client driver at an RDS proxy endpoint. Deploy the Lambda functions inside a VPC. (correct answer)
  • CPoint the client driver at an RDS custom endpoint. Deploy the Lambda functions outside a VPC.
  • DPoint the client driver at an RDS proxy endpoint. Deploy the Lambda functions outside a VPC.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Point the client driver at an RDS proxy endpoint. Deploy the Lambda functions inside a VPC.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon RDS Proxy pools and shares database connections to improve scalability and resilience. Amazon RDS is a managed relational database that handles patching, backups and failover.

SAA-C03 Question 686

Single page →
Topic 1 · Question 686

A company is creating an application. The company stores data from tests of the application in multiple on-premises locations. The company needs to connect the on-premises locations to VPCs in an AWS Region in the AWS Cloud. The number of accounts and VPCs will increase during the next year. The network architecture must simplify the administration of new connections and must provide the ability to scale. Which solution will meet these requirements with the LEAST administrative overhead?

  • ACreate a peering connection between the VPCs. Create a VPN connection between the VPCs and the on-premises locations.
  • BLaunch an Amazon EC2 instance. On the instance, include VPN software that uses a VPN connection to connect all VPCs and on-premises locations.
  • CCreate a transit gateway. Create VPC attachments for the VPC connections. Create VPN attachments for the on-premises connections. (correct answer)
  • DCreate an AWS Direct Connect connection between the on-premises locations and a central VPC. Connect the central VPC to other VPCs by using peering connections.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create a transit gateway. Create VPC attachments for the VPC connections. Create VPN attachments for the on-premises connections.

Explanation

AWS Transit Gateway centrally connects many VPCs and on-premises networks at scale.

SAA-C03 Question 687

Single page →
Topic 1 · Question 687 · Select all that apply

A company that uses AWS needs a solution to predict the resources needed for manufacturing processes each month. The solution must use historical values that are currently stored in an Amazon S3 bucket. The company has no machine learning (ML) experience and wants to use a managed service for the training and predictions. Which combination of steps will meet these requirements? (Choose two.)

  • ADeploy an Amazon SageMaker model. Create a SageMaker endpoint for inference. (correct answer)
  • BUse Amazon SageMaker to train a model by using the historical data in the S3 bucket. (correct answer)
  • CConfigure an AWS Lambda function with a function URL that uses Amazon SageMaker endpoints to create predictions based on the inputs.
  • DConfigure an AWS Lambda function with a function URL that uses an Amazon Forecast predictor to create a prediction based on the inputs.
  • ETrain an Amazon Forsecast predictor by using the historical data in the S3 bucket.
Reveal answer & explanation
Correct answer: A, B

The correct answer is A, B. Option A: Deploy an Amazon SageMaker model. Create a SageMaker endpoint for inference. Option B: Use Amazon SageMaker to train a model by using the historical data in the S3 bucket.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon SageMaker builds, trains and deploys machine learning models in a fully managed service.

SAA-C03 Question 688

Single page →
Topic 1 · Question 688

A company manages AWS accounts in AWS Organizations. AWS IAM Identity Center (AWS Single Sign-On) and AWS Control Tower are configured for the accounts. The company wants to manage multiple user permissions across all the accounts. The permissions will be used by multiple IAM users and must be split between the developer and administrator teams. Each team requires different permissions. The company wants a solution that includes new users that are hired on both teams. Which solution will meet these requirements with the LEAST operational overhead?

  • ACreate individual users in IAM Identity Center for each account. Create separate developer and administrator groups in IAM Identity Center. Assign the users to the appropriate groups. Create a custom IAM policy for each group to set fine-grained permissions.
  • BCreate individual users in IAM Identity Center for each account. Create separate developer and administrator groups in IAM Identity Center. Assign the users to the appropriate groups. Attach AWS managed IAM policies to each user as needed for fine-grained permissions.
  • CCreate individual users in IAM Identity Center. Create new developer and administrator groups in IAM Identity Center. Create new permission sets that include the appropriate IAM policies for each group. Assign the new groups to the appropriate accounts. Assign the new permission sets to the new groups. When new users are hired, add them to the appropriate group. (correct answer)
  • DCreate individual users in IAM Identity Center. Create new permission sets that include the appropriate IAM policies for each user. Assign the users to the appropriate accounts. Grant additional IAM permissions to the users from within specific accounts. When new users are hired, add them to IAM Identity Center and assign them to the accounts.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create individual users in IAM Identity Center. Create new developer and administrator groups in IAM Identity Center. Create new permission sets that include the appropriate IAM policies for each group. Assign the new...

Explanation

AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies. AWS IAM Identity Center (SSO) centrally manages workforce access to multiple accounts and apps.

SAA-C03 Question 689

Single page →
Topic 1 · Question 689

A company wants to standardize its Amazon Elastic Block Store (Amazon EBS) volume encryption strategy. The company also wants to minimize the cost and configuration effort required to operate the volume encryption check. Which solution will meet these requirements?

  • AWrite API calls to describe the EBS volumes and to confirm the EBS volumes are encrypted. Use Amazon EventBridge to schedule an AWS Lambda function to run the API calls.
  • BWrite API calls to describe the EBS volumes and to confirm the EBS volumes are encrypted. Run the API calls on an AWS Fargate task.
  • CCreate an AWS Identity and Access Management (IAM) policy that requires the use of tags on EBS volumes. Use AWS Cost Explorer to display resources that are not properly tagged. Encrypt the untagged resources manually.
  • DCreate an AWS Config rule for Amazon EBS to evaluate if a volume is encrypted and to flag the volume if it is not encrypted. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Create an AWS Config rule for Amazon EBS to evaluate if a volume is encrypted and to flag the volume if it is not encrypted.

Explanation

Amazon EBS provides block storage attached to a single EC2 instance. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 690

Single page →
Topic 1 · Question 690 · Select all that apply

A company regularly uploads GB-sized files to Amazon S3. After the company uploads the files, the company uses a fleet of Amazon EC2 Spot Instances to transcode the file format. The company needs to scale throughput when the company uploads data from the on-premises data center to Amazon S3 and when the company downloads data from Amazon S3 to the EC2 instances. Which solutions will meet these requirements? (Choose two.)

  • AUse the S3 bucket access point instead of accessing the S3 bucket directly.
  • BUpload the files into multiple S3 buckets.
  • CUse S3 multipart uploads. (correct answer)
  • DFetch multiple byte-ranges of an object in parallel. (correct answer)
  • EAdd a random prefix to each object when uploading the files.
Reveal answer & explanation
Correct answer: C, D

The correct answer is C, D. Option C: Use S3 multipart uploads. Option D: Fetch multiple byte-ranges of an object in parallel.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed.

SAA-C03 Question 691

Single page →
Topic 1 · Question 691 · Select all that apply

A solutions architect is designing a shared storage solution for a web application that is deployed across multiple Availability Zones. The web application runs on Amazon EC2 instances that are in an Auto Scaling group. The company plans to make frequent changes to the content. The solution must have strong consistency in returning the new content as soon as the changes occur. Which solutions meet these requirements? (Choose two.)

  • AUse AWS Storage Gateway Volume Gateway Internet Small Computer Systems Interface (iSCSI) block storage that is mounted to the individual EC2 instances.
  • BCreate an Amazon Elastic File System (Amazon EFS) file system. Mount the EFS file system on the individual EC2 instances. (correct answer)
  • CCreate a shared Amazon Elastic Block Store (Amazon EBS) volume. Mount the EBS volume on the individual EC2 instances.
  • DUse AWS DataSync to perform continuous synchronization of data between EC2 hosts in the Auto Scaling group.
  • ECreate an Amazon S3 bucket to store the web content. Set the metadata for the Cache-Control header to no-cache. Use Amazon CloudFront to deliver the content. (correct answer)
Reveal answer & explanation
Correct answer: B, E

The correct answer is B, E. Option B: Create an Amazon Elastic File System (Amazon EFS) file system. Mount the EFS file system on the individual EC2 instances. Option E: Create an Amazon S3 bucket to store the web content. Set the metadata for the Cache-Control header to no-cache. Use Amazon CloudFront to deliver the content.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon S3 provides durable, scalable object storage that is fully managed. Amazon EFS is a shared, elastic NFS file system that multiple instances can mount concurrently across AZs. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SAA-C03 Question 692

Single page →
Topic 1 · Question 692

A company is deploying an application in three AWS Regions using an Application Load Balancer. Amazon Route 53 will be used to distribute traffic between these Regions. Which Route 53 configuration should a solutions architect use to provide the MOST high-performing experience?

  • ACreate an A record with a latency policy. (correct answer)
  • BCreate an A record with a geolocation policy.
  • CCreate a CNAME record with a failover policy.
  • DCreate a CNAME record with a geoproximity policy.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create an A record with a latency policy.

SAA-C03 Question 693

Single page →
Topic 1 · Question 693

A company has a web application that includes an embedded NoSQL database. The application runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances run in an Amazon EC2 Auto Scaling group in a single Availability Zone. A recent increase in traffic requires the application to be highly available and for the database to be eventually consistent. Which solution will meet these requirements with the LEAST operational overhead?

  • AReplace the ALB with a Network Load Balancer. Maintain the embedded NoSQL database with its replication service on the EC2 instances.
  • BReplace the ALB with a Network Load Balancer. Migrate the embedded NoSQL database to Amazon DynamoDB by using AWS Database Migration Service (AWS DMS).
  • CModify the Auto Scaling group to use EC2 instances across three Availability Zones. Maintain the embedded NoSQL database with its replication service on the EC2 instances.
  • DModify the Auto Scaling group to use EC2 instances across three Availability Zones. Migrate the embedded NoSQL database to Amazon DynamoDB by using AWS Database Migration Service (AWS DMS). (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Modify the Auto Scaling group to use EC2 instances across three Availability Zones. Migrate the embedded NoSQL database to Amazon DynamoDB by using AWS Database Migration Service (AWS DMS).

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon DynamoDB is a fully managed, serverless NoSQL database with single-digit millisecond latency and automatic scaling.

SAA-C03 Question 694

Single page →
Topic 1 · Question 694

A company is building a shopping application on AWS. The application offers a catalog that changes once each month and needs to scale with traffic volume. The company wants the lowest possible latency from the application. Data from each user's shopping cart needs to be highly available. User session data must be available even if the user is disconnected and reconnects. What should a solutions architect do to ensure that the shopping cart data is preserved at all times?

  • AConfigure an Application Load Balancer to enable the sticky sessions feature (session affinity) for access to the catalog in Amazon Aurora.
  • BConfigure Amazon ElastiCache for Redis to cache catalog data from Amazon DynamoDB and shopping cart data from the user's session. (correct answer)
  • CConfigure Amazon OpenSearch Service to cache catalog data from Amazon DynamoDB and shopping cart data from the user's session.
  • DConfigure an Amazon EC2 instance with Amazon Elastic Block Store (Amazon EBS) storage for the catalog and shopping cart. Configure automated snapshots.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Configure Amazon ElastiCache for Redis to cache catalog data from Amazon DynamoDB and shopping cart data from the user's session.

Explanation

Amazon DynamoDB is a fully managed, serverless NoSQL database with single-digit millisecond latency and automatic scaling. Amazon ElastiCache provides in-memory caching (Redis/Memcached) to reduce latency and offload the database. AWS Config tracks resource configuration changes and evaluates compliance. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SAA-C03 Question 695

Single page →
Topic 1 · Question 695

A company is building a microservices-based application that will be deployed on Amazon Elastic Kubernetes Service (Amazon EKS). The microservices will interact with each other. The company wants to ensure that the application is observable to identify performance issues in the future. Which solution will meet these requirements?

  • AConfigure the application to use Amazon ElastiCache to reduce the number of requests that are sent to the microservices.
  • BConfigure Amazon CloudWatch Container Insights to collect metrics from the EKS clusters. Configure AWS X-Ray to trace the requests between the microservices. (correct answer)
  • CConfigure AWS CloudTrail to review the API calls. Build an Amazon QuickSight dashboard to observe the microservice interactions.
  • DUse AWS Trusted Advisor to understand the performance of the application.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Configure Amazon CloudWatch Container Insights to collect metrics from the EKS clusters. Configure AWS X-Ray to trace the requests between the microservices.

Explanation

Amazon EKS runs managed Kubernetes when you need the Kubernetes ecosystem. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 696

Single page →
Topic 1 · Question 696

A company needs to provide customers with secure access to its data. The company processes customer data and stores the results in an Amazon S3 bucket. All the data is subject to strong regulations and security requirements. The data must be encrypted at rest. Each customer must be able to access only their data from their AWS account. Company employees must not be able to access the data. Which solution will meet these requirements?

  • AProvision an AWS Certificate Manager (ACM) certificate for each customer. Encrypt the data client-side. In the private certificate policy, deny access to the certificate for all principals except an IAM role that the customer provides.
  • BProvision a separate AWS Key Management Service (AWS KMS) key for each customer. Encrypt the data server-side. In the S3 bucket policy, deny decryption of data for all principals except an IAM role that the customer provides.
  • CProvision a separate AWS Key Management Service (AWS KMS) key for each customer. Encrypt the data server-side. In each KMS key policy, deny decryption of data for all principals except an IAM role that the customer provides. (correct answer)
  • DProvision an AWS Certificate Manager (ACM) certificate for each customer. Encrypt the data client-side. In the public certificate policy, deny access to the certificate for all principals except an IAM role that the customer provides.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Provision a separate AWS Key Management Service (AWS KMS) key for each customer. Encrypt the data server-side. In each KMS key policy, deny decryption of data for all principals except an IAM role that the customer pr...

Explanation

An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

SAA-C03 Question 697

Single page →
Topic 1 · Question 697

A solutions architect creates a VPC that includes two public subnets and two private subnets. A corporate security mandate requires the solutions architect to launch all Amazon EC2 instances in a private subnet. However, when the solutions architect launches an EC2 instance that runs a web server on ports 80 and 443 in a private subnet, no external internet traffic can connect to the server. What should the solutions architect do to resolve this issue?

  • AAttach the EC2 instance to an Auto Scaling group in a private subnet. Ensure that the DNS record for the website resolves to the Auto Scaling group identifier.
  • BProvision an internet-facing Application Load Balancer (ALB) in a public subnet. Add the EC2 instance to the target group that is associated with the ALEnsure that the DNS record for the website resolves to the ALB. (correct answer)
  • CLaunch a NAT gateway in a private subnet. Update the route table for the private subnets to add a default route to the NAT gateway. Attach a public Elastic IP address to the NAT gateway.
  • DEnsure that the security group that is attached to the EC2 instance allows HTTP traffic on port 80 and HTTPS traffic on port 443. Ensure that the DNS record for the website resolves to the public IP address of the EC2 instance.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Provision an internet-facing Application Load Balancer (ALB) in a public subnet. Add the EC2 instance to the target group that is associated with the ALEnsure that the DNS record for the website resolves to the ALB.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon EBS provides block storage attached to a single EC2 instance. An Application Load Balancer distributes HTTP/HTTPS traffic and supports path/host routing.

SAA-C03 Question 698

Single page →
Topic 1 · Question 698

A company is deploying a new application to Amazon Elastic Kubernetes Service (Amazon EKS) with an AWS Fargate cluster. The application needs a storage solution for data persistence. The solution must be highly available and fault tolerant. The solution also must be shared between multiple application containers. Which solution will meet these requirements with the LEAST operational overhead?

  • ACreate Amazon Elastic Block Store (Amazon EBS) volumes in the same Availability Zones where EKS worker nodes are placed. Register the volumes in a StorageClass object on an EKS cluster. Use EBS Multi-Attach to share the data between containers.
  • BCreate an Amazon Elastic File System (Amazon EFS) file system. Register the file system in a StorageClass object on an EKS cluster. Use the same file system for all containers. (correct answer)
  • CCreate an Amazon Elastic Block Store (Amazon EBS) volume. Register the volume in a StorageClass object on an EKS cluster. Use the same volume for all containers.
  • DCreate Amazon Elastic File System (Amazon EFS) file systems in the same Availability Zones where EKS worker nodes are placed. Register the file systems in a StorageClass object on an EKS cluster. Create an AWS Lambda function to synchronize the data between file systems.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create an Amazon Elastic File System (Amazon EFS) file system. Register the file system in a StorageClass object on an EKS cluster. Use the same file system for all containers.

Explanation

Amazon EKS runs managed Kubernetes when you need the Kubernetes ecosystem. Amazon EFS is a shared, elastic NFS file system that multiple instances can mount concurrently across AZs.

SAA-C03 Question 699

Single page →
Topic 1 · Question 699

A company has an application that uses Docker containers in its local data center. The application runs on a container host that stores persistent data in a volume on the host. The container instances use the stored persistent data. The company wants to move the application to a fully managed service because the company does not want to manage any servers or storage infrastructure. Which solution will meet these requirements?

  • AUse Amazon Elastic Kubernetes Service (Amazon EKS) with self-managed nodes. Create an Amazon Elastic Block Store (Amazon EBS) volume attached to an Amazon EC2 instance. Use the EBS volume as a persistent volume mounted in the containers.
  • BUse Amazon Elastic Container Service (Amazon ECS) with an AWS Fargate launch type. Create an Amazon Elastic File System (Amazon EFS) volume. Add the EFS volume as a persistent storage volume mounted in the containers. (correct answer)
  • CUse Amazon Elastic Container Service (Amazon ECS) with an AWS Fargate launch type. Create an Amazon S3 bucket. Map the S3 bucket as a persistent storage volume mounted in the containers.
  • DUse Amazon Elastic Container Service (Amazon ECS) with an Amazon EC2 launch type. Create an Amazon Elastic File System (Amazon EFS) volume. Add the EFS volume as a persistent storage volume mounted in the containers.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use Amazon Elastic Container Service (Amazon ECS) with an AWS Fargate launch type. Create an Amazon Elastic File System (Amazon EFS) volume. Add the EFS volume as a persistent storage volume mounted in the containers.

Explanation

AWS Fargate runs containers serverlessly so there are no EC2 hosts to manage or patch. Amazon ECS orchestrates containers and integrates natively with AWS networking and IAM. Amazon EFS is a shared, elastic NFS file system that multiple instances can mount concurrently across AZs.

SAA-C03 Question 700

Single page →
Topic 1 · Question 700 · Select all that apply

A gaming company wants to launch a new internet-facing application in multiple AWS Regions. The application will use the TCP and UDP protocols for communication. The company needs to provide high availability and minimum latency for global users. Which combination of actions should a solutions architect take to meet these requirements? (Choose two.)

  • ACreate internal Network Load Balancers in front of the application in each Region. (correct answer)
  • BCreate external Application Load Balancers in front of the application in each Region.
  • CCreate an AWS Global Accelerator accelerator to route traffic to the load balancers in each Region. (correct answer)
  • DConfigure Amazon Route 53 to use a geolocation routing policy to distribute the traffic.
  • EConfigure Amazon CloudFront to handle the traffic and route requests to the application in each Region
Reveal answer & explanation
Correct answer: A, C

The correct answer is A, C. Option A: Create internal Network Load Balancers in front of the application in each Region. Option C: Create an AWS Global Accelerator accelerator to route traffic to the load balancers in each Region.

Explanation

AWS Global Accelerator routes users over the AWS backbone to the optimal endpoint for lower latency and fast failover. A Network Load Balancer handles very high throughput TCP/UDP traffic with ultra-low latency and static IPs. A load balancer distributes traffic across targets in multiple AZs for availability and scale.

Showing questions 681–700 of 1019 · Page 35 of 51