🔍

SAA-C03 — questions

Page 40 of 51 · 1019 total questions.

SAA-C03 Question 781

Single page →
Topic 1 · Question 781

A company wants to run its experimental workloads in the AWS Cloud. The company has a budget for cloud spending. The company's CFO is concerned about cloud spending accountability for each department. The CFO wants to receive notification when the spending threshold reaches 60% of the budget. Which solution will meet these requirements?

  • AUse cost allocation tags on AWS resources to label owners. Create usage budgets in AWS Budgets. Add an alert threshold to receive notification when spending exceeds 60% of the budget. (correct answer)
  • BUse AWS Cost Explorer forecasts to determine resource owners. Use AWS Cost Anomaly Detection to create alert threshold notifications when spending exceeds 60% of the budget.
  • CUse cost allocation tags on AWS resources to label owners. Use AWS Support API on AWS Trusted Advisor to create alert threshold notifications when spending exceeds 60% of the budget.
  • DUse AWS Cost Explorer forecasts to determine resource owners. Create usage budgets in AWS Budgets. Add an alert threshold to receive notification when spending exceeds 60% of the budget.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use cost allocation tags on AWS resources to label owners. Create usage budgets in AWS Budgets. Add an alert threshold to receive notification when spending exceeds 60% of the budget.

Explanation

AWS Budgets alerts on cost and usage thresholds.

SAA-C03 Question 782

Single page →
Topic 1 · Question 782

A company wants to deploy an internal web application on AWS. The web application must be accessible only from the company's office. The company needs to download security patches for the web application from the internet. The company has created a VPC and has configured an AWS Site-to-Site VPN connection to the company's office. A solutions architect must design a secure architecture for the web application. Which solution will meet these requirements?

  • ADeploy the web application on Amazon EC2 instances in public subnets behind a public Application Load Balancer (ALB). Attach an internet gateway to the VPC. Set the inbound source of the ALB's security group to 0.0.0.0/0.
  • BDeploy the web application on Amazon EC2 instances in private subnets behind an internal Application Load Balancer (ALB). Deploy NAT gateways in public subnets. Attach an internet gateway to the VPC. Set the inbound source of the ALB's security group to the company's office network CIDR block. (correct answer)
  • CDeploy the web application on Amazon EC2 instances in public subnets behind an internal Application Load Balancer (ALB). Deploy NAT gateways in private subnets. Attach an internet gateway to the VPSet the outbound destination of the ALB’s security group to the company's office network CIDR block.
  • DDeploy the web application on Amazon EC2 instances in private subnets behind a public Application Load Balancer (ALB). Attach an internet gateway to the VPC. Set the outbound destination of the ALB’s security group to 0.0.0.0/0.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Deploy the web application on Amazon EC2 instances in private subnets behind an internal Application Load Balancer (ALB). Deploy NAT gateways in public subnets. Attach an internet gateway to the VPC. Set the inbound s...

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. An Application Load Balancer distributes HTTP/HTTPS traffic and supports path/host routing. A load balancer distributes traffic across targets in multiple AZs for availability and scale.

SAA-C03 Question 783

Single page →
Topic 1 · Question 783

A company maintains its accounting records in a custom application that runs on Amazon EC2 instances. The company needs to migrate the data to an AWS managed service for development and maintenance of the application data. The solution must require minimal operational support and provide immutable, cryptographically verifiable logs of data changes. Which solution will meet these requirements MOST cost-effectively?

  • ACopy the records from the application into an Amazon Redshift cluster.
  • BCopy the records from the application into an Amazon Neptune cluster.
  • CCopy the records from the application into an Amazon Timestream database.
  • DCopy the records from the application into an Amazon Quantum Ledger Database (Amazon QLDB) ledger. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Copy the records from the application into an Amazon Quantum Ledger Database (Amazon QLDB) ledger.

Explanation

Amazon RDS is a managed relational database that handles patching, backups and failover. This option delivers the requirement at the lowest cost.

SAA-C03 Question 784

Single page →
Topic 1 · Question 784

A company's marketing data is uploaded from multiple sources to an Amazon S3 bucket. A series of data preparation jobs aggregate the data for reporting. The data preparation jobs need to run at regular intervals in parallel. A few jobs need to run in a specific order later. The company wants to remove the operational overhead of job error handling, retry logic, and state management. Which solution will meet these requirements?

  • AUse an AWS Lambda function to process the data as soon as the data is uploaded to the S3 bucket. Invoke other Lambda functions at regularly scheduled intervals.
  • BUse Amazon Athena to process the data. Use Amazon EventBridge Scheduler to invoke Athena on a regular internal.
  • CUse AWS Glue DataBrew to process the data. Use an AWS Step Functions state machine to run the DataBrew data preparation jobs. (correct answer)
  • DUse AWS Data Pipeline to process the data. Schedule Data Pipeline to process the data once at midnight.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Use AWS Glue DataBrew to process the data. Use an AWS Step Functions state machine to run the DataBrew data preparation jobs.

Explanation

AWS Step Functions coordinates multi-step workflows as a managed state machine. AWS Glue is a serverless ETL and data-catalog service that prepares and integrates data.

SAA-C03 Question 785

Single page →
Topic 1 · Question 785

A solutions architect is designing a payment processing application that runs on AWS Lambda in private subnets across multiple Availability Zones. The application uses multiple Lambda functions and processes millions of transactions each day. The architecture must ensure that the application does not process duplicate payments. Which solution will meet these requirements?

  • AUse Lambda to retrieve all due payments. Publish the due payments to an Amazon S3 bucket. Configure the S3 bucket with an event notification to invoke another Lambda function to process the due payments.
  • BUse Lambda to retrieve all due payments. Publish the due payments to an Amazon Simple Queue Service (Amazon SQS) queue. Configure another Lambda function to poll the SQS queue and to process the due payments.
  • CUse Lambda to retrieve all due payments. Publish the due payments to an Amazon Simple Queue Service (Amazon SQS) FIFO queue. Configure another Lambda function to poll the FIFO queue and to process the due payments. (correct answer)
  • DUse Lambda to retrieve all due payments. Store the due payments in an Amazon DynamoDB table. Configure streams on the DynamoDB table to invoke another Lambda function to process the due payments.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Use Lambda to retrieve all due payments. Publish the due payments to an Amazon Simple Queue Service (Amazon SQS) FIFO queue. Configure another Lambda function to poll the FIFO queue and to process the due payments.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon SQS is a fully managed message queue that decouples components and absorbs traffic spikes. AWS Config tracks resource configuration changes and evaluates compliance. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SAA-C03 Question 786

Single page →
Topic 1 · Question 786

A company runs multiple workloads in its on-premises data center. The company's data center cannot scale fast enough to meet the company's expanding business needs. The company wants to collect usage and configuration data about the on-premises servers and workloads to plan a migration to AWS. Which solution will meet these requirements?

  • ASet the home AWS Region in AWS Migration Hub. Use AWS Systems Manager to collect data about the on-premises servers.
  • BSet the home AWS Region in AWS Migration Hub. Use AWS Application Discovery Service to collect data about the on-premises servers. (correct answer)
  • CUse the AWS Schema Conversion Tool (AWS SCT) to create the relevant templates. Use AWS Trusted Advisor to collect data about the on-premises servers.
  • DUse the AWS Schema Conversion Tool (AWS SCT) to create the relevant templates. Use AWS Database Migration Service (AWS DMS) to collect data about the on-premises servers.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Set the home AWS Region in AWS Migration Hub. Use AWS Application Discovery Service to collect data about the on-premises servers.

Explanation

AWS Migration Hub tracks application migrations across services.

SAA-C03 Question 787

Single page →
Topic 1 · Question 787

A company has an organization in AWS Organizations that has all features enabled. The company requires that all API calls and logins in any existing or new AWS account must be audited. The company needs a managed solution to prevent additional work and to minimize costs. The company also needs to know when any AWS account is not compliant with the AWS Foundational Security Best Practices (FSBP) standard. Which solution will meet these requirements with the LEAST operational overhead?

  • ADeploy an AWS Control Tower environment in the Organizations management account. Enable AWS Security Hub and AWS Control Tower Account Factory in the environment. (correct answer)
  • BDeploy an AWS Control Tower environment in a dedicated Organizations member account. Enable AWS Security Hub and AWS Control Tower Account Factory in the environment.
  • CUse AWS Managed Services (AMS) Accelerate to build a multi-account landing zone (MALZ). Submit an RFC to self-service provision Amazon GuardDuty in the MALZ.
  • DUse AWS Managed Services (AMS) Accelerate to build a multi-account landing zone (MALZ). Submit an RFC to self-service provision AWS Security Hub in the MALZ.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Deploy an AWS Control Tower environment in the Organizations management account. Enable AWS Security Hub and AWS Control Tower Account Factory in the environment.

Explanation

AWS Security Hub centralizes security findings and compliance checks. AWS Organizations centrally governs and secures multiple AWS accounts. AWS Control Tower sets up and governs a secure multi-account landing zone.

SAA-C03 Question 788

Single page →
Topic 1 · Question 788

A company has stored 10 TB of log files in Apache Parquet format in an Amazon S3 bucket. The company occasionally needs to use SQL to analyze the log files. Which solution will meet these requirements MOST cost-effectively?

  • ACreate an Amazon Aurora MySQL database. Migrate the data from the S3 bucket into Aurora by using AWS Database Migration Service (AWS DMS). Issue SQL statements to the Aurora database.
  • BCreate an Amazon Redshift cluster. Use Redshift Spectrum to run SQL statements directly on the data in the S3 bucket.
  • CCreate an AWS Glue crawler to store and retrieve table metadata from the S3 bucket. Use Amazon Athena to run SQL statements directly on the data in the S3 bucket. (correct answer)
  • DCreate an Amazon EMR cluster. Use Apache Spark SQL to run SQL statements directly on the data in the S3 bucket.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create an AWS Glue crawler to store and retrieve table metadata from the S3 bucket. Use Amazon Athena to run SQL statements directly on the data in the S3 bucket.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon Athena runs serverless SQL queries directly on data in Amazon S3 with no infrastructure to manage. AWS Glue is a serverless ETL and data-catalog service that prepares and integrates data. This option delivers the requirement at the lowest cost.

SAA-C03 Question 789

Single page →
Topic 1 · Question 789

A company needs a solution to prevent AWS CloudFormation stacks from deploying AWS Identity and Access Management (IAM) resources that include an inline policy or “*” in the statement. The solution must also prohibit deployment of Amazon EC2 instances with public IP addresses. The company has AWS Control Tower enabled in its organization in AWS Organizations. Which solution will meet these requirements?

  • AUse AWS Control Tower proactive controls to block deployment of EC2 instances with public IP addresses and inline policies with elevated access or “*”. (correct answer)
  • BUse AWS Control Tower detective controls to block deployment of EC2 instances with public IP addresses and inline policies with elevated access or “*”.
  • CUse AWS Config to create rules for EC2 and IAM compliance. Configure the rules to run an AWS Systems Manager Session Manager automation to delete a resource when it is not compliant.
  • DUse a service control policy (SCP) to block actions for the EC2 instances and IAM resources if the actions lead to noncompliance.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use AWS Control Tower proactive controls to block deployment of EC2 instances with public IP addresses and inline policies with elevated access or “*”.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. AWS Control Tower sets up and governs a secure multi-account landing zone.

SAA-C03 Question 790

Single page →
Topic 1 · Question 790 · Select all that apply

A company's web application that is hosted in the AWS Cloud recently increased in popularity. The web application currently exists on a single Amazon EC2 instance in a single public subnet. The web application has not been able to meet the demand of the increased web traffic. The company needs a solution that will provide high availability and scalability to meet the increased user demand without rewriting the web application. Which combination of steps will meet these requirements? (Choose two.)

  • AReplace the EC2 instance with a larger compute optimized instance.
  • BConfigure Amazon EC2 Auto Scaling with multiple Availability Zones in private subnets. (correct answer)
  • CConfigure a NAT gateway in a public subnet to handle web requests.
  • DReplace the EC2 instance with a larger memory optimized instance.
  • EConfigure an Application Load Balancer in a public subnet to distribute web traffic. (correct answer)
Reveal answer & explanation
Correct answer: B, E

The correct answer is B, E. Option B: Configure Amazon EC2 Auto Scaling with multiple Availability Zones in private subnets. Option E: Configure an Application Load Balancer in a public subnet to distribute web traffic.

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Amazon EC2 provides resizable virtual servers when you need full control of the operating system. An Application Load Balancer distributes HTTP/HTTPS traffic and supports path/host routing.

SAA-C03 Question 791

Single page →
Topic 1 · Question 791

A company has AWS Lambda functions that use environment variables. The company does not want its developers to see environment variables in plaintext. Which solution will meet these requirements?

  • ADeploy code to Amazon EC2 instances instead of using Lambda functions.
  • BConfigure SSL encryption on the Lambda functions to use AWS CloudHSM to store and encrypt the environment variables.
  • CCreate a certificate in AWS Certificate Manager (ACM). Configure the Lambda functions to use the certificate to encrypt the environment variables.
  • DCreate an AWS Key Management Service (AWS KMS) key. Enable encryption helpers on the Lambda functions to use the KMS key to store and encrypt the environment variables. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Create an AWS Key Management Service (AWS KMS) key. Enable encryption helpers on the Lambda functions to use the KMS key to store and encrypt the environment variables.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

SAA-C03 Question 792

Single page →
Topic 1 · Question 792

An analytics company uses Amazon VPC to run its multi-tier services. The company wants to use RESTful APIs to offer a web analytics service to millions of users. Users must be verified by using an authentication service to access the APIs. Which solution will meet these requirements with the MOST operational efficiency?

  • AConfigure an Amazon Cognito user pool for user authentication. Implement Amazon API Gateway REST APIs with a Cognito authorizer. (correct answer)
  • BConfigure an Amazon Cognito identity pool for user authentication. Implement Amazon API Gateway HTTP APIs with a Cognito authorizer.
  • CConfigure an AWS Lambda function to handle user authentication. Implement Amazon API Gateway REST APIs with a Lambda authorizer.
  • DConfigure an IAM user to handle user authentication. Implement Amazon API Gateway HTTP APIs with an IAM authorizer.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Configure an Amazon Cognito user pool for user authentication. Implement Amazon API Gateway REST APIs with a Cognito authorizer.

Explanation

Amazon API Gateway is a fully managed front door for creating and securing APIs at scale. Amazon Cognito manages user sign-up, sign-in and federated identity for applications. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 793

Single page →
Topic 1 · Question 793

A company has a mobile app for customers. The app’s data is sensitive and must be encrypted at rest. The company uses AWS Key Management Service (AWS KMS). The company needs a solution that prevents the accidental deletion of KMS keys. The solution must use Amazon Simple Notification Service (Amazon SNS) to send an email notification to administrators when a user attempts to delete a KMS key. Which solution will meet these requirements with the LEAST operational overhead?

  • ACreate an Amazon EventBridge rule that reacts when a user tries to delete a KMS key. Configure an AWS Config rule that cancels any deletion of a KMS key. Add the AWS Config rule as a target of the EventBridge rule. Create an SNS topic that notifies the administrators.
  • BCreate an AWS Lambda function that has custom logic to prevent KMS key deletion. Create an Amazon CloudWatch alarm that is activated when a user tries to delete a KMS key. Create an Amazon EventBridge rule that invokes the Lambda function when the DeleteKey operation is performed. Create an SNS topic. Configure the EventBridge rule to publish an SNS message that notifies the administrators.
  • CCreate an Amazon EventBridge rule that reacts when the KMS DeleteKey operation is performed. Configure the rule to initiate an AWS Systems Manager Automation runbook. Configure the runbook to cancel the deletion of the KMS key. Create an SNS topic. Configure the EventBridge rule to publish an SNS message that notifies the administrators. (correct answer)
  • DCreate an AWS CloudTrail trail. Configure the trail to deliver logs to a new Amazon CloudWatch log group. Create a CloudWatch alarm based on the metric filter for the CloudWatch log group. Configure the alarm to use Amazon SNS to notify the administrators when the KMS DeleteKey operation is performed.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create an Amazon EventBridge rule that reacts when the KMS DeleteKey operation is performed. Configure the rule to initiate an AWS Systems Manager Automation runbook. Configure the runbook to cancel the deletion of th...

Explanation

Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers. Amazon EventBridge routes events between services with rules, enabling event-driven, decoupled architectures. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

SAA-C03 Question 794

Single page →
Topic 1 · Question 794

A company wants to analyze and generate reports to track the usage of its mobile app. The app is popular and has a global user base. The company uses a custom report building program to analyze application usage. The program generates multiple reports during the last week of each month. The program takes less than 10 minutes to produce each report. The company rarely uses the program to generate reports outside of the last week of each month The company wants to generate reports in the least amount of time when the reports are requested. Which solution will meet these requirements MOST cost-effectively?

  • ARun the program by using Amazon EC2 On-Demand Instances. Create an Amazon EventBridge rule to start the EC2 instances when reports are requested. Run the EC2 instances continuously during the last week of each month.
  • BRun the program in AWS Lambda. Create an Amazon EventBridge rule to run a Lambda function when reports are requested. (correct answer)
  • CRun the program in Amazon Elastic Container Service (Amazon ECS). Schedule Amazon ECS to run the program when reports are requested.
  • DRun the program by using Amazon EC2 Spot Instances. Create an Amazon EventBndge rule to start the EC2 instances when reports are requested. Run the EC2 instances continuously during the last week of each month.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Run the program in AWS Lambda. Create an Amazon EventBridge rule to run a Lambda function when reports are requested.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon EventBridge routes events between services with rules, enabling event-driven, decoupled architectures. This option delivers the requirement at the lowest cost.

SAA-C03 Question 795

Single page →
Topic 1 · Question 795 · Select all that apply

A company is designing a tightly coupled high performance computing (HPC) environment in the AWS Cloud. The company needs to include features that will optimize the HPC environment for networking and storage. Which combination of solutions will meet these requirements? (Choose two.)

  • ACreate an accelerator in AWS Global Accelerator. Configure custom routing for the accelerator.
  • BCreate an Amazon FSx for Lustre file system. Configure the file system with scratch storage. (correct answer)
  • CCreate an Amazon CloudFront distribution. Configure the viewer protocol policy to be HTTP and HTTPS.
  • DLaunch Amazon EC2 instances. Attach an Elastic Fabric Adapter (EFA) to the instances. (correct answer)
  • ECreate an AWS Elastic Beanstalk deployment to manage the environment.
Reveal answer & explanation
Correct answer: B, D

The correct answer is B, D. Option B: Create an Amazon FSx for Lustre file system. Configure the file system with scratch storage. Option D: Launch Amazon EC2 instances. Attach an Elastic Fabric Adapter (EFA) to the instances.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon FSx for Lustre delivers high-performance file storage for compute-intensive workloads. Amazon FSx provides fully managed third-party file systems.

SAA-C03 Question 796

Single page →
Topic 1 · Question 796

A company needs a solution to prevent photos with unwanted content from being uploaded to the company's web application. The solution must not involve training a machine learning (ML) model. Which solution will meet these requirements?

  • ACreate and deploy a model by using Amazon SageMaker Autopilot. Create a real-time endpoint that the web application invokes when new photos are uploaded.
  • BCreate an AWS Lambda function that uses Amazon Rekognition to detect unwanted content. Create a Lambda function URL that the web application invokes when new photos are uploaded. (correct answer)
  • CCreate an Amazon CloudFront function that uses Amazon Comprehend to detect unwanted content. Associate the function with the web application.
  • DCreate an AWS Lambda function that uses Amazon Rekognition Video to detect unwanted content. Create a Lambda function URL that the web application invokes when new photos are uploaded.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create an AWS Lambda function that uses Amazon Rekognition to detect unwanted content. Create a Lambda function URL that the web application invokes when new photos are uploaded.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon Rekognition adds image and video analysis with pre-trained models.

SAA-C03 Question 797

Single page →
Topic 1 · Question 797

A company uses AWS to run its ecommerce platform. The platform is critical to the company's operations and has a high volume of traffic and transactions. The company configures a multi-factor authentication (MFA) device to secure its AWS account root user credentials. The company wants to ensure that it will not lose access to the root user account if the MFA device is lost. Which solution will meet these requirements?

  • ASet up a backup administrator account that the company can use to log in if the company loses the MFA device.
  • BAdd multiple MFA devices for the root user account to handle the disaster scenario. (correct answer)
  • CCreate a new administrator account when the company cannot access the root account.
  • DAttach the administrator policy to another IAM user when the company cannot access the root account.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Add multiple MFA devices for the root user account to handle the disaster scenario.

SAA-C03 Question 798

Single page →
Topic 1 · Question 798

A social media company is creating a rewards program website for its users. The company gives users points when users create and upload videos to the website. Users redeem their points for gifts or discounts from the company's affiliated partners. A unique ID identifies users. The partners refer to this ID to verify user eligibility for rewards. The partners want to receive notification of user IDs through an HTTP endpoint when the company gives users points. Hundreds of vendors are interested in becoming affiliated partners every day. The company wants to design an architecture that gives the website the ability to add partners rapidly in a scalable way. Which solution will meet these requirements with the LEAST implementation effort?

  • ACreate an Amazon Timestream database to keep a list of affiliated partners. Implement an AWS Lambda function to read the list. Configure the Lambda function to send user IDs to each partner when the company gives users points.
  • BCreate an Amazon Simple Notification Service (Amazon SNS) topic. Choose an endpoint protocol. Subscribe the partners to the topic. Publish user IDs to the topic when the company gives users points. (correct answer)
  • CCreate an AWS Step Functions state machine. Create a task for every affiliated partner. Invoke the state machine with user IDs as input when the company gives users points.
  • DCreate a data stream in Amazon Kinesis Data Streams. Implement producer and consumer applications. Store a list of affiliated partners in the data stream. Send user IDs when the company gives users points.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create an Amazon Simple Notification Service (Amazon SNS) topic. Choose an endpoint protocol. Subscribe the partners to the topic. Publish user IDs to the topic when the company gives users points.

Explanation

Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers.

SAA-C03 Question 799

Single page →
Topic 1 · Question 799

A company needs to extract the names of ingredients from recipe records that are stored as text files in an Amazon S3 bucket. A web application will use the ingredient names to query an Amazon DynamoDB table and determine a nutrition score. The application can handle non-food records and errors. The company does not have any employees who have machine learning knowledge to develop this solution. Which solution will meet these requirements MOST cost-effectively?

  • AUse S3 Event Notifications to invoke an AWS Lambda function when PutObject requests occur. Program the Lambda function to analyze the object and extract the ingredient names by using Amazon Comprehend. Store the Amazon Comprehend output in the DynamoDB table. (correct answer)
  • BUse an Amazon EventBridge rule to invoke an AWS Lambda function when PutObject requests occur. Program the Lambda function to analyze the object by using Amazon Forecast to extract the ingredient names. Store the Forecast output in the DynamoDB table.
  • CUse S3 Event Notifications to invoke an AWS Lambda function when PutObject requests occur. Use Amazon Polly to create audio recordings of the recipe records. Save the audio files in the S3 bucket. Use Amazon Simple Notification Service (Amazon SNS) to send a URL as a message to employees. Instruct the employees to listen to the audio files and calculate the nutrition score. Store the ingredient names in the DynamoDB table.
  • DUse an Amazon EventBridge rule to invoke an AWS Lambda function when a PutObject request occurs. Program the Lambda function to analyze the object and extract the ingredient names by using Amazon SageMaker. Store the inference output from the SageMaker endpoint in the DynamoDB table.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use S3 Event Notifications to invoke an AWS Lambda function when PutObject requests occur. Program the Lambda function to analyze the object and extract the ingredient names by using Amazon Comprehend. Store the Amazo...

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon S3 provides durable, scalable object storage that is fully managed. Amazon DynamoDB is a fully managed, serverless NoSQL database with single-digit millisecond latency and automatic scaling. This option delivers the requirement at the lowest cost.

SAA-C03 Question 800

Single page →
Topic 1 · Question 800

A company needs to create an AWS Lambda function that will run in a VPC in the company's primary AWS account. The Lambda function needs to access files that the company stores in an Amazon Elastic File System (Amazon EFS) file system. The EFS file system is located in a secondary AWS account. As the company adds files to the file system, the solution must scale to meet the demand. Which solution will meet these requirements MOST cost-effectively?

  • ACreate a new EFS file system in the primary account. Use AWS DataSync to copy the contents of the original EFS file system to the new EFS file system.
  • BCreate a VPC peering connection between the VPCs that are in the primary account and the secondary account. (correct answer)
  • CCreate a second Lambda function in the secondary account that has a mount that is configured for the file system. Use the primary account's Lambda function to invoke the secondary account's Lambda function.
  • DMove the contents of the file system to a Lambda layer. Configure the Lambda layer's permissions to allow the company's secondary account to use the Lambda layer.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create a VPC peering connection between the VPCs that are in the primary account and the secondary account.

Explanation

VPC peering privately connects two VPCs without a gateway. This option delivers the requirement at the lowest cost.

Showing questions 781–800 of 1019 · Page 40 of 51