πŸ”

SAA-C03 β€” questions

Page 37 of 51 Β· 1019 total questions.

Topic 1 Β· Question 721

A company wants to rearchitect a large-scale web application to a serverless microservices architecture. The application uses Amazon EC2 instances and is written in Python. The company selected one component of the web application to test as a microservice. The component supports hundreds of requests each second. The company wants to create and test the microservice on an AWS solution that supports Python. The solution must also scale automatically and require minimal infrastructure and minimal operational support. Which solution will meet these requirements?

  • AUse a Spot Fleet with auto scaling of EC2 instances that run the most recent Amazon Linux operating system.
  • BUse an AWS Elastic Beanstalk web server environment that has high availability configured.
  • CUse Amazon Elastic Kubernetes Service (Amazon EKS). Launch Auto Scaling groups of self-managed EC2 instances.
  • DUse an AWS Lambda function that runs custom developed code. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Use an AWS Lambda function that runs custom developed code.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead.

Topic 1 Β· Question 722

A company has an AWS Direct Connect connection from its on-premises location to an AWS account. The AWS account has 30 different VPCs in the same AWS Region. The VPCs use private virtual interfaces (VIFs). Each VPC has a CIDR block that does not overlap with other networks under the company's control. The company wants to centrally manage the networking architecture while still allowing each VPC to communicate with all other VPCs and on-premises networks. Which solution will meet these requirements with the LEAST amount of operational overhead?

  • ACreate a transit gateway, and associate the Direct Connect connection with a new transit VIF. Turn on the transit gateway's route propagation feature. (correct answer)
  • BCreate a Direct Connect gateway. Recreate the private VIFs to use the new gateway. Associate each VPC by creating new virtual private gateways.
  • CCreate a transit VPConnect the Direct Connect connection to the transit VPCreate a peering connection between all other VPCs in the Region. Update the route tables.
  • DCreate AWS Site-to-Site VPN connections from on premises to each VPC. Ensure that both VPN tunnels are UP for each connection. Turn on the route propagation feature.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create a transit gateway, and associate the Direct Connect connection with a new transit VIF. Turn on the transit gateway's route propagation feature.

Explanation

AWS Direct Connect provides a dedicated, consistent private network link between on premises and AWS. AWS Transit Gateway centrally connects many VPCs and on-premises networks at scale.

Topic 1 Β· Question 723

A company has applications that run on Amazon EC2 instances. The EC2 instances connect to Amazon RDS databases by using an IAM role that has associated policies. The company wants to use AWS Systems Manager to patch the EC2 instances without disrupting the running applications. Which solution will meet these requirements?

  • ACreate a new IAM role. Attach the AmazonSSMManagedInstanceCore policy to the new IAM role. Attach the new IAM role to the EC2 instances and the existing IAM role.
  • BCreate an IAM user. Attach the AmazonSSMManagedInstanceCore policy to the IAM user. Configure Systems Manager to use the IAM user to manage the EC2 instances.
  • CEnable Default Host Configuration Management in Systems Manager to manage the EC2 instances. (correct answer)
  • DRemove the existing policies from the existing IAM role. Add the AmazonSSMManagedInstanceCore policy to the existing IAM role.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Enable Default Host Configuration Management in Systems Manager to manage the EC2 instances.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. AWS Config tracks resource configuration changes and evaluates compliance. AWS Systems Manager operates and automates management of fleets of resources.

Topic 1 Β· Question 724

A company runs container applications by using Amazon Elastic Kubernetes Service (Amazon EKS) and the Kubernetes Horizontal Pod Autoscaler. The workload is not consistent throughout the day. A solutions architect notices that the number of nodes does not automatically scale out when the existing nodes have reached maximum capacity in the cluster, which causes performance issues. Which solution will resolve this issue with the LEAST administrative overhead?

  • AScale out the nodes by tracking the memory usage.
  • BUse the Kubernetes Cluster Autoscaler to manage the number of nodes in the cluster. (correct answer)
  • CUse an AWS Lambda function to resize the EKS cluster automatically.
  • DUse an Amazon EC2 Auto Scaling group to distribute the workload.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use the Kubernetes Cluster Autoscaler to manage the number of nodes in the cluster.

Topic 1 Β· Question 725

A company maintains about 300 TB in Amazon S3 Standard storage month after month. The S3 objects are each typically around 50 GB in size and are frequently replaced with multipart uploads by their global application. The number and size of S3 objects remain constant, but the company's S3 storage costs are increasing each month. How should a solutions architect reduce costs in this situation?

  • ASwitch from multipart uploads to Amazon S3 Transfer Acceleration.
  • BEnable an S3 Lifecycle policy that deletes incomplete multipart uploads. (correct answer)
  • CConfigure S3 inventory to prevent objects from being archived too quickly.
  • DConfigure Amazon CloudFront to reduce the number of objects stored in Amazon S3.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Enable an S3 Lifecycle policy that deletes incomplete multipart uploads.

Explanation

S3 Lifecycle policies automatically transition or expire objects to control storage cost. Amazon S3 provides durable, scalable object storage that is fully managed. This option delivers the requirement at the lowest cost.

Topic 1 Β· Question 726

A company has deployed a multiplayer game for mobile devices. The game requires live location tracking of players based on latitude and longitude. The data store for the game must support rapid updates and retrieval of locations. The game uses an Amazon RDS for PostgreSQL DB instance with read replicas to store the location data. During peak usage periods, the database is unable to maintain the performance that is needed for reading and writing updates. The game's user base is increasing rapidly. What should a solutions architect do to improve the performance of the data tier?

  • ATake a snapshot of the existing DB instance. Restore the snapshot with Multi-AZ enabled.
  • BMigrate from Amazon RDS to Amazon OpenSearch Service with OpenSearch Dashboards.
  • CDeploy Amazon DynamoDB Accelerator (DAX) in front of the existing DB instance. Modify the game to use DAX.
  • DDeploy an Amazon ElastiCache for Redis cluster in front of the existing DB instance. Modify the game to use Redis. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Deploy an Amazon ElastiCache for Redis cluster in front of the existing DB instance. Modify the game to use Redis.

Explanation

Amazon ElastiCache provides in-memory caching (Redis/Memcached) to reduce latency and offload the database.

Topic 1 Β· Question 727

A company stores critical data in Amazon DynamoDB tables in the company's AWS account. An IT administrator accidentally deleted a DynamoDB table. The deletion caused a significant loss of data and disrupted the company's operations. The company wants to prevent this type of disruption in the future. Which solution will meet this requirement with the LEAST operational overhead?

  • AConfigure a trail in AWS CloudTrail. Create an Amazon EventBridge rule for delete actions. Create an AWS Lambda function to automatically restore deleted DynamoDB tables.
  • BCreate a backup and restore plan for the DynamoDB tables. Recover the DynamoDB tables manually.
  • CConfigure deletion protection on the DynamoDB tables. (correct answer)
  • DEnable point-in-time recovery on the DynamoDB tables.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Configure deletion protection on the DynamoDB tables.

Explanation

Amazon DynamoDB is a fully managed, serverless NoSQL database with single-digit millisecond latency and automatic scaling. AWS Config tracks resource configuration changes and evaluates compliance.

Topic 1 Β· Question 728

A company has an on-premises data center that is running out of storage capacity. The company wants to migrate its storage infrastructure to AWS while minimizing bandwidth costs. The solution must allow for immediate retrieval of data at no additional cost. How can these requirements be met?

  • ADeploy Amazon S3 Glacier Vault and enable expedited retrieval. Enable provisioned retrieval capacity for the workload.
  • BDeploy AWS Storage Gateway using cached volumes. Use Storage Gateway to store data in Amazon S3 while retaining copies of frequently accessed data subsets locally. (correct answer)
  • CDeploy AWS Storage Gateway using stored volumes to store data locally. Use Storage Gateway to asynchronously back up point-in-time snapshots of the data to Amazon S3.
  • DDeploy AWS Direct Connect to connect with the on-premises data center. Configure AWS Storage Gateway to store data locally. Use Storage Gateway to asynchronously back up point-in-time snapshots of the data to Amazon S3.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Deploy AWS Storage Gateway using cached volumes. Use Storage Gateway to store data in Amazon S3 while retaining copies of frequently accessed data subsets locally.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. AWS Storage Gateway bridges on-premises apps to AWS storage with local caching.

Topic 1 Β· Question 729

A company runs a three-tier web application in a VPC across multiple Availability Zones. Amazon EC2 instances run in an Auto Scaling group for the application tier. The company needs to make an automated scaling plan that will analyze each resource's daily and weekly historical workload trends. The configuration must scale resources appropriately according to both the forecast and live changes in utilization. Which scaling strategy should a solutions architect recommend to meet these requirements?

  • AImplement dynamic scaling with step scaling based on average CPU utilization from the EC2 instances.
  • BEnable predictive scaling to forecast and scale. Configure dynamic scaling with target tracking (correct answer)
  • CCreate an automated scheduled scaling action based on the traffic patterns of the web application.
  • DSet up a simple scaling policy. Increase the cooldown period based on the EC2 instance startup time.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Enable predictive scaling to forecast and scale. Configure dynamic scaling with target tracking

Explanation

Amazon Forecast produces time-series forecasts using machine learning. AWS Config tracks resource configuration changes and evaluates compliance. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

Topic 1 Β· Question 730

A package delivery company has an application that uses Amazon EC2 instances and an Amazon Aurora MySQL DB cluster. As the application becomes more popular, EC2 instance usage increases only slightly. DB cluster usage increases at a much faster rate. The company adds a read replica, which reduces the DB cluster usage for a short period of time. However, the load continues to increase. The operations that cause the increase in DB cluster usage are all repeated read statements that are related to delivery details. The company needs to alleviate the effect of repeated reads on the DB cluster. Which solution will meet these requirements MOST cost-effectively?

  • AImplement an Amazon ElastiCache for Redis cluster between the application and the DB cluster. (correct answer)
  • BAdd an additional read replica to the DB cluster.
  • CConfigure Aurora Auto Scaling for the Aurora read replicas.
  • DModify the DB cluster to have multiple writer instances.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Implement an Amazon ElastiCache for Redis cluster between the application and the DB cluster.

Explanation

Amazon ElastiCache provides in-memory caching (Redis/Memcached) to reduce latency and offload the database. This option delivers the requirement at the lowest cost.

Topic 1 Β· Question 731

A company has an application that uses an Amazon DynamoDB table for storage. A solutions architect discovers that many requests to the table are not returning the latest data. The company's users have not reported any other issues with database performance. Latency is in an acceptable range. Which design change should the solutions architect recommend?

  • AAdd read replicas to the table.
  • BUse a global secondary index (GSI).
  • CRequest strongly consistent reads for the table. (correct answer)
  • DRequest eventually consistent reads for the table.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Request strongly consistent reads for the table.

Topic 1 Β· Question 732

A company has deployed its application on Amazon EC2 instances with an Amazon RDS database. The company used the principle of least privilege to configure the database access credentials. The company's security team wants to protect the application and the database from SQL injection and other web-based attacks. Which solution will meet these requirements with the LEAST operational overhead?

  • AUse security groups and network ACLs to secure the database and application servers.
  • BUse AWS WAF to protect the application. Use RDS parameter groups to configure the security settings. (correct answer)
  • CUse AWS Network Firewall to protect the application and the database.
  • DUse different database accounts in the application code for different functions. Avoid granting excessive privileges to the database users.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use AWS WAF to protect the application. Use RDS parameter groups to configure the security settings.

Explanation

Amazon RDS is a managed relational database that handles patching, backups and failover. AWS WAF protects web applications from common exploits and malicious requests. AWS Config tracks resource configuration changes and evaluates compliance.

Topic 1 Β· Question 733

An ecommerce company runs applications in AWS accounts that are part of an organization in AWS Organizations. The applications run on Amazon Aurora PostgreSQL databases across all the accounts. The company needs to prevent malicious activity and must identify abnormal failed and incomplete login attempts to the databases. Which solution will meet these requirements in the MOST operationally efficient way?

  • AAttach service control policies (SCPs) to the root of the organization to identity the failed login attempts.
  • BEnable the Amazon RDS Protection feature in Amazon GuardDuty for the member accounts of the organization. (correct answer)
  • CPublish the Aurora general logs to a log group in Amazon CloudWatch Logs. Export the log data to a central Amazon S3 bucket.
  • DPublish all the Aurora PostgreSQL database events in AWS CloudTrail to a central Amazon S3 bucket.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Enable the Amazon RDS Protection feature in Amazon GuardDuty for the member accounts of the organization.

Explanation

Amazon RDS is a managed relational database that handles patching, backups and failover. Amazon GuardDuty continuously monitors for threats and malicious activity.

Topic 1 Β· Question 734

A company has an AWS Direct Connect connection from its corporate data center to its VPC in the us-east-1 Region. The company recently acquired a corporation that has several VPCs and a Direct Connect connection between its on-premises data center and the eu-west-2 Region. The CIDR blocks for the VPCs of the company and the corporation do not overlap. The company requires connectivity between two Regions and the data centers. The company needs a solution that is scalable while reducing operational overhead. What should a solutions architect do to meet these requirements?

  • ASet up inter-Region VPC peering between the VPC in us-east-1 and the VPCs in eu-west-2.
  • BCreate private virtual interfaces from the Direct Connect connection in us-east-1 to the VPCs in eu-west-2.
  • CEstablish VPN appliances in a fully meshed VPN network hosted by Amazon EC2. Use AWS VPN CloudHub to send and receive data between the data centers and each VPC.
  • DConnect the existing Direct Connect connection to a Direct Connect gateway. Route traffic from the virtual private gateways of the VPCs in each Region to the Direct Connect gateway. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Connect the existing Direct Connect connection to a Direct Connect gateway. Route traffic from the virtual private gateways of the VPCs in each Region to the Direct Connect gateway.

Explanation

AWS Direct Connect provides a dedicated, consistent private network link between on premises and AWS.

Topic 1 Β· Question 735

A company is developing a mobile game that streams score updates to a backend processor and then posts results on a leaderboard. A solutions architect needs to design a solution that can handle large traffic spikes, process the mobile game updates in order of receipt, and store the processed updates in a highly available database. The company also wants to minimize the management overhead required to maintain the solution. What should the solutions architect do to meet these requirements?

  • APush score updates to Amazon Kinesis Data Streams. Process the updates in Kinesis Data Streams with AWS Lambda. Store the processed updates in Amazon DynamoDB. (correct answer)
  • BPush score updates to Amazon Kinesis Data Streams. Process the updates with a fleet of Amazon EC2 instances set up for Auto Scaling. Store the processed updates in Amazon Redshift.
  • CPush score updates to an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe an AWS Lambda function to the SNS topic to process the updates. Store the processed updates in a SQL database running on Amazon EC2.
  • DPush score updates to an Amazon Simple Queue Service (Amazon SQS) queue. Use a fleet of Amazon EC2 instances with Auto Scaling to process the updates in the SQS queue. Store the processed updates in an Amazon RDS Multi-AZ DB instance.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Push score updates to Amazon Kinesis Data Streams. Process the updates in Kinesis Data Streams with AWS Lambda. Store the processed updates in Amazon DynamoDB.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon DynamoDB is a fully managed, serverless NoSQL database with single-digit millisecond latency and automatic scaling. Kinesis Data Streams ingests and processes high-volume real-time streaming data. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

Topic 1 Β· Question 736

A company has multiple AWS accounts with applications deployed in the us-west-2 Region. Application logs are stored within Amazon S3 buckets in each account. The company wants to build a centralized log analysis solution that uses a single S3 bucket. Logs must not leave us-west-2, and the company wants to incur minimal operational overhead. Which solution meets these requirements and is MOST cost-effective?

  • ACreate an S3 Lifecycle policy that copies the objects from one of the application S3 buckets to the centralized S3 bucket.
  • BUse S3 Same-Region Replication to replicate logs from the S3 buckets to another S3 bucket in us-west-2. Use this S3 bucket for log analysis. (correct answer)
  • CWrite a script that uses the PutObject API operation every day to copy the entire contents of the buckets to another S3 bucket in us-west-2. Use this S3 bucket for log analysis.
  • DWrite AWS Lambda functions in these accounts that are triggered every time logs are delivered to the S3 buckets (s3:ObjectCreated:* event). Copy the logs to another S3 bucket in us-west-2. Use this S3 bucket for log analysis.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use S3 Same-Region Replication to replicate logs from the S3 buckets to another S3 bucket in us-west-2. Use this S3 bucket for log analysis.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed.

Topic 1 Β· Question 737 Β· Select all that apply

A company has an application that delivers on-demand training videos to students around the world. The application also allows authorized content developers to upload videos. The data is stored in an Amazon S3 bucket in the us-east-2 Region. The company has created an S3 bucket in the eu-west-2 Region and an S3 bucket in the ap-southeast-1 Region. The company wants to replicate the data to the new S3 buckets. The company needs to minimize latency for developers who upload videos and students who stream videos near eu-west-2 and ap-southeast-1. Which combination of steps will meet these requirements with the FEWEST changes to the application? (Choose two.)

  • AConfigure one-way replication from the us-east-2 S3 bucket to the eu-west-2 S3 bucket. Configure one-way replication from the us-east-2 S3 bucket to the ap-southeast-1 S3 bucket.
  • BConfigure one-way replication from the us-east-2 S3 bucket to the eu-west-2 S3 bucket. Configure one-way replication from the eu-west-2 S3 bucket to the ap-southeast-1 S3 bucket.
  • CConfigure two-way (bidirectional) replication among the S3 buckets that are in all three Regions. (correct answer)
  • DCreate an S3 Multi-Region Access Point. Modify the application to use the Amazon Resource Name (ARN) of the Multi-Region Access Point for video streaming. Do not modify the application for video uploads.
  • ECreate an S3 Multi-Region Access Point. Modify the application to use the Amazon Resource Name (ARN) of the Multi-Region Access Point for video streaming and uploads. (correct answer)
Reveal answer & explanation
Correct answer: C, E

The correct answer is C, E. Option C: Configure two-way (bidirectional) replication among the S3 buckets that are in all three Regions. Option E: Create an S3 Multi-Region Access Point. Modify the application to use the Amazon Resource Name (ARN) of the Multi-Region Access Point for video streaming and uploads.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. AWS Config tracks resource configuration changes and evaluates compliance.

Topic 1 Β· Question 738

A company has a new mobile app. Anywhere in the world, users can see local news on topics they choose. Users also can post photos and videos from inside the app. Users access content often in the first minutes after the content is posted. New content quickly replaces older content, and then the older content disappears. The local nature of the news means that users consume 90% of the content within the AWS Region where it is uploaded. Which solution will optimize the user experience by providing the LOWEST latency for content uploads?

  • AUpload and store content in Amazon S3. Use Amazon CloudFront for the uploads.
  • BUpload and store content in Amazon S3. Use S3 Transfer Acceleration for the uploads. (correct answer)
  • CUpload content to Amazon EC2 instances in the Region that is closest to the user. Copy the data to Amazon S3.
  • DUpload and store content in Amazon S3 in the Region that is closest to the user. Use multiple distributions of Amazon CloudFront.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Upload and store content in Amazon S3. Use S3 Transfer Acceleration for the uploads.

Explanation

S3 Transfer Acceleration speeds up long-distance uploads to S3 over the AWS edge network. Amazon S3 provides durable, scalable object storage that is fully managed.

Topic 1 Β· Question 739

A company is building a new application that uses serverless architecture. The architecture will consist of an Amazon API Gateway REST API and AWS Lambda functions to manage incoming requests. The company wants to add a service that can send messages received from the API Gateway REST API to multiple target Lambda functions for processing. The service must offer message filtering that gives the target Lambda functions the ability to receive only the messages the functions need. Which solution will meet these requirements with the LEAST operational overhead?

  • ASend the requests from the API Gateway REST API to an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe Amazon Simple Queue Service (Amazon SQS) queues to the SNS topic. Configure the target Lambda functions to poll the different SQS queues. (correct answer)
  • BSend the requests from the API Gateway REST API to Amazon EventBridge. Configure EventBridge to invoke the target Lambda functions.
  • CSend the requests from the API Gateway REST API to Amazon Managed Streaming for Apache Kafka (Amazon MSK). Configure Amazon MSK to publish the messages to the target Lambda functions.
  • DSend the requests from the API Gateway REST API to multiple Amazon Simple Queue Service (Amazon SQS) queues. Configure the target Lambda functions to poll the different SQS queues.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Send the requests from the API Gateway REST API to an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe Amazon Simple Queue Service (Amazon SQS) queues to the SNS topic. Configure the target Lambda func...

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon SQS is a fully managed message queue that decouples components and absorbs traffic spikes. Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers.

Topic 1 Β· Question 740

A company migrated millions of archival files to Amazon S3. A solutions architect needs to implement a solution that will encrypt all the archival data by using a customer-provided key. The solution must encrypt existing unencrypted objects and future objects. Which solution will meet these requirements?

  • ACreate a list of unencrypted objects by filtering an Amazon S3 Inventory report. Configure an S3 Batch Operations job to encrypt the objects from the list with a server-side encryption with a customer-provided key (SSE-C). Configure the S3 default encryption feature to use a server-side encryption with a customer-provided key (SSE-C). (correct answer)
  • BUse S3 Storage Lens metrics to identify unencrypted S3 buckets. Configure the S3 default encryption feature to use a server-side encryption with AWS KMS keys (SSE-KMS).
  • CCreate a list of unencrypted objects by filtering the AWS usage report for Amazon S3. Configure an AWS Batch job to encrypt the objects from the list with a server-side encryption with AWS KMS keys (SSE-KMS). Configure the S3 default encryption feature to use a server-side encryption with AWS KMS keys (SSE-KMS).
  • DCreate a list of unencrypted objects by filtering the AWS usage report for Amazon S3. Configure the S3 default encryption feature to use a server-side encryption with a customer-provided key (SSE-C).
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create a list of unencrypted objects by filtering an Amazon S3 Inventory report. Configure an S3 Batch Operations job to encrypt the objects from the list with a server-side encryption with a customer-provided key (SS...

Explanation

AWS Batch schedules and runs batch computing jobs at any scale without managing clusters. Amazon S3 provides durable, scalable object storage that is fully managed. AWS Config tracks resource configuration changes and evaluates compliance.

Showing questions 721–740 of 1019 Β· Page 37 of 51