🔍

SAA-C03 — questions

Page 50 of 51 · 1019 total questions.

SAA-C03 Question 981

Single page →
Topic 1 · Question 981

A company is building a cloud-based application on AWS that will handle sensitive customer data. The application uses Amazon RDS for the database, Amazon S3 for object storage, and S3 Event Notifications that invoke AWS Lambda for serverless processing. The company uses AWS IAM Identity Center to manage user credentials. The development, testing, and operations teams need secure access to Amazon RDS and Amazon S3 while ensuring the confidentiality of sensitive customer data. The solution must comply with the principle of least privilege. Which solution meets these requirements with the LEAST operational overhead?

  • AUse IAM roles with least privilege to grant all the teams access. Assign IAM roles to each team with customized IAM policies defining specific permission for Amazon RDS and S3 object access based on team responsibilities.
  • BEnable IAM Identity Center with an Identity Center directory. Create and configure permission sets with granular access to Amazon RDS and Amazon S3. Assign all the teams to groups that have specific access with the permission sets. (correct answer)
  • CCreate individual IAM users for each member in all the teams with role-based permissions. Assign the IAM roles with predefined policies for RDS and S3 access to each user based on user needs. Implement IAM Access Analyzer for periodic credential evaluation.
  • DUse AWS Organizations to create separate accounts for each team. Implement cross-account IAM roles with least privilege. Grant specific permission for RDS and S3 access based on team roles and responsibilities.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Enable IAM Identity Center with an Identity Center directory. Create and configure permission sets with granular access to Amazon RDS and Amazon S3. Assign all the teams to groups that have specific access with the pe...

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon RDS is a managed relational database that handles patching, backups and failover. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

SAA-C03 Question 982

Single page →
Topic 1 · Question 982

A company has an Amazon S3 bucket that contains sensitive data files. The company has an application that runs on virtual machines in an on-premises data center. The company currently uses AWS IAM Identity Center. The application requires temporary access to files in the S3 bucket. The company wants to grant the application secure access to the files in the S3 bucket. Which solution will meet these requirements?

  • ACreate an S3 bucket policy that permits access to the bucket from the public IP address range of the company’s on-premises data center.
  • BUse IAM Roles Anywhere to obtain security credentials in IAM Identity Center that grant access to the S3 bucket. Configure the virtual machines to assume the role by using the AWS CLI. (correct answer)
  • CInstall the AWS CLI on the virtual machine. Configure the AWS CLI with access keys from an IAM user that has access to the bucket.
  • DCreate an IAM user and policy that grants access to the bucket. Store the access key and secret key for the IAM user in AWS Secrets Manager. Configure the application to retrieve the access key and secret key at startup.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use IAM Roles Anywhere to obtain security credentials in IAM Identity Center that grant access to the S3 bucket. Configure the virtual machines to assume the role by using the AWS CLI.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

SAA-C03 Question 983

Single page →
Topic 1 · Question 983

A company hosts its core network services, including directory services and DNS, in its on-premises data center. The data center is connected to the AWS Cloud using AWS Direct Connect (DX). Additional AWS accounts are planned that will require quick, cost-effective, and consistent access to these network services. What should a solutions architect implement to meet these requirements with the LEAST amount of operational overhead?

  • ACreate a DX connection in each new account. Route the network traffic to the on-premises servers.
  • BConfigure VPC endpoints in the DX VPC for all required services. Route the network traffic to the on-premises servers.
  • CCreate a VPN connection between each new account and the DX VPRoute the network traffic to the on-premises servers.
  • DConfigure AWS Transit Gateway between the accounts. Assign DX to the transit gateway and route network traffic to the on-premises servers. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Configure AWS Transit Gateway between the accounts. Assign DX to the transit gateway and route network traffic to the on-premises servers.

Explanation

AWS Transit Gateway centrally connects many VPCs and on-premises networks at scale. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 984

Single page →
Topic 1 · Question 984

A company hosts its main public web application in one AWS Region across multiple Availability Zones. The application uses an Amazon EC2 Auto Scaling group and an Application Load Balancer (ALB). A web development team needs a cost-optimized compute solution to improve the company’s ability to serve dynamic content globally to millions of customers. Which solution will meet these requirements?

  • ACreate an Amazon CloudFront distribution. Configure the existing ALB as the origin. (correct answer)
  • BUse Amazon Route 53 to serve traffic to the ALB and EC2 instances based on the geographic location of each customer.
  • CCreate an Amazon S3 bucket with public read access enabled. Migrate the web application to the S3 bucket. Configure the S3 bucket for website hosting.
  • DUse AWS Direct Connect to directly serve content from the web application to the location of each customer.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create an Amazon CloudFront distribution. Configure the existing ALB as the origin.

Explanation

Amazon CloudFront caches content at edge locations to reduce latency and offload origins. AWS Config tracks resource configuration changes and evaluates compliance. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SAA-C03 Question 985

Single page →
Topic 1 · Question 985

A company stores user data in AWS. The data is used continuously with peak usage during business hours. Access patterns vary, with some data not being used for months at a time. A solutions architect must choose a cost-effective solution that maintains the highest level of durability while maintaining high availability. Which storage solution meets these requirements?

  • AAmazon S3 Standard
  • BAmazon S3 Intelligent-Tiering (correct answer)
  • CAmazon S3 Glacier Deep Archive
  • DAmazon S3 One Zone-Infrequent Access (S3 One Zone-IA)
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Amazon S3 Intelligent-Tiering

Explanation

S3 Intelligent-Tiering automatically moves objects between tiers to optimize cost with no operational effort. Amazon S3 provides durable, scalable object storage that is fully managed. This option delivers the requirement at the lowest cost.

SAA-C03 Question 986

Single page →
Topic 1 · Question 986

A company is testing an application that runs on an Amazon EC2 Linux instance. A single 500 GB Amazon Elastic Block Store (Amazon EBS) General Purpose SSO (gp2) volume is attached to the EC2 instance. The company will deploy the application on multiple EC2 instances in an Auto Scaling group. All instances require access to the data that is stored in the EBS volume. The company needs a highly available and resilient solution that does not introduce significant changes to the application's code. Which solution will meet these requirements?

  • AProvision an EC2 instance that uses NFS server software. Attach a single 500 GB gp2 EBS volume to the instance.
  • BProvision an Amazon FSx for Windows File Server file system. Configure the file system as an SMB file store within a single Availability Zone.
  • CProvision an EC2 instance with two 250 GB Provisioned IOPS SSD EBS volumes.
  • DProvision an Amazon Elastic File System (Amazon EFS) file system. Configure the file system to use General Purpose performance mode. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Provision an Amazon Elastic File System (Amazon EFS) file system. Configure the file system to use General Purpose performance mode.

Explanation

Amazon EFS is a shared, elastic NFS file system that multiple instances can mount concurrently across AZs. AWS Config tracks resource configuration changes and evaluates compliance. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SAA-C03 Question 987

Single page →
Topic 1 · Question 987 · Select all that apply

A company recently launched a new application for its customers. The application runs on multiple Amazon EC2 instances across two Availability Zones. End users use TCP to communicate with the application. The application must be highly available and must automatically scale as the number of users increases. Which combination of steps will meet these requirements MOST cost-effectively? (Choose two.)

  • AAdd a Network Load Balancer in front of the EC2 instances. (correct answer)
  • BConfigure an Auto Scaling group for the EC2 instances. (correct answer)
  • CAdd an Application Load Balancer in front of the EC2 instances.
  • DManually add more EC2 instances for the application.
  • EAdd a Gateway Load Balancer in front of the EC2 instances.
Reveal answer & explanation
Correct answer: A, B

The correct answer is A, B. Option A: Add a Network Load Balancer in front of the EC2 instances. Option B: Configure an Auto Scaling group for the EC2 instances.

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Amazon EC2 provides resizable virtual servers when you need full control of the operating system. A Network Load Balancer handles very high throughput TCP/UDP traffic with ultra-low latency and static IPs. This option delivers the requirement at the lowest cost.

SAA-C03 Question 988

Single page →
Topic 1 · Question 988 · Select all that apply

A company is designing the architecture for a new mobile app that uses the AWS Cloud. The company uses organizational units (OUs) in AWS Organizations to manage its accounts. The company wants to tag Amazon EC2 instances with data sensitivity by using values of sensitive and nonsensitive. IAM identities must not be able to delete a tag or create instances without a tag. Which combination of steps will meet these requirements? (Choose two.)

  • AIn Organizations, create a new tag policy that specifies the data sensitivity tag key and the required values. Enforce the tag values for the EC2 instances. Attach the tag policy to the appropriate OU. (correct answer)
  • BIn Organizations, create a new service control policy (SCP) that specifies the data sensitivity tag key and the required tag values. Enforce the tag values for the EC2 instances. Attach the SCP to the appropriate OU.
  • CCreate a tag policy to deny running instances when a tag key is not specified. Create another tag policy that prevents identities from deleting tags. Attach the tag policies to the appropriate OU.
  • DCreate a service control policy (SCP) to deny creating instances when a tag key is not specified. Create another SCP that prevents identities from deleting tags. Attach the SCPs to the appropriate OU. (correct answer)
  • ECreate an AWS Config rule to check if EC2 instances use the data sensitivity tag and the specified values. Configure an AWS Lambda function to delete the resource if a noncompliant resource is found.
Reveal answer & explanation
Correct answer: A, D

The correct answer is A, D. Option A: In Organizations, create a new tag policy that specifies the data sensitivity tag key and the required values. Enforce the tag values for the EC2 instances. Attach the tag policy to the appropriate OU. Option D: Create a service control policy (SCP) to deny creating instances when a tag key is not specified. Create another SCP that prevents identities from deleting tags. Attach the SCPs to the appropriate OU.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. AWS Organizations centrally governs and secures multiple AWS accounts. Service Control Policies set guardrails on what accounts in an organization can do.

SAA-C03 Question 989

Single page →
Topic 1 · Question 989

A company runs database workloads on AWS that are the backend for the company's customer portals. The company runs a Multi-AZ database cluster on Amazon RDS for PostgreSQL. The company needs to implement a 30-day backup retention policy. The company currently has both automated RDS backups and manual RDS backups. The company wants to maintain both types of existing RDS backups that are less than 30 days old. Which solution will meet these requirements MOST cost-effectively?

  • AConfigure the RDS backup retention policy to 30 days for automated backups by using AWS Backup. Manually delete manual backups that are older than 30 days.
  • BDisable RDS automated backups. Delete automated backups and manual backups that are older than 30 days. Configure the RDS backup retention policy to 30 days for automated backups.
  • CConfigure the RDS backup retention policy to 30 days for automated backups. Manually delete manual backups that are older than 30 days. (correct answer)
  • DDisable RDS automated backups. Delete automated backups and manual backups that are older than 30 days automatically by using AWS CloudFormation. Configure the RDS backup retention policy to 30 days for automated backups.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Configure the RDS backup retention policy to 30 days for automated backups. Manually delete manual backups that are older than 30 days.

Explanation

AWS Backup centrally automates and manages backups across AWS services. Amazon RDS is a managed relational database that handles patching, backups and failover. AWS Config tracks resource configuration changes and evaluates compliance. This option delivers the requirement at the lowest cost.

SAA-C03 Question 990

Single page →
Topic 1 · Question 990

A company is planning to migrate a legacy application to AWS. The application currently uses NFS to communicate to an on-premises storage solution to store application data. The application cannot be modified to use any other communication protocols other than NFS for this purpose. Which storage solution should a solutions architect recommend for use after the migration?

  • AAWS DataSync
  • BAmazon Elastic Block Store (Amazon EBS)
  • CAmazon Elastic File System (Amazon EFS) (correct answer)
  • DAmazon EMR File System (Amazon EMRFS)
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Amazon Elastic File System (Amazon EFS)

Explanation

Amazon EFS is a shared, elastic NFS file system that multiple instances can mount concurrently across AZs.

SAA-C03 Question 991

Single page →
Topic 1 · Question 991

A company uses GPS trackers to document the migration patterns of thousands of sea turtles. The trackers check every 5 minutes to see if a turtle has moved more than 100 yards (91.4 meters). If a turtle has moved, its tracker sends the new coordinates to a web application running on three Amazon EC2 instances that are in multiple Availability Zones in one AWS Region. Recently, the web application was overwhelmed while processing an unexpected volume of tracker data. Data was lost with no way to replay the events. A solutions architect must prevent this problem from happening again and needs a solution with the least operational overhead. What should the solutions architect do to meet these requirements?

  • ACreate an Amazon S3 bucket to store the data. Configure the application to scan for new data in the bucket for processing.
  • BCreate an Amazon API Gateway endpoint to handle transmitted location coordinates. Use an AWS Lambda function to process each item concurrently.
  • CCreate an Amazon Simple Queue Service (Amazon SQS) queue to store the incoming data. Configure the application to poll for new messages for processing. (correct answer)
  • DCreate an Amazon DynamoDB table to store transmitted location coordinates. Configure the application to query the table for new data for processing. Use TTL to remove data that has been processed.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create an Amazon Simple Queue Service (Amazon SQS) queue to store the incoming data. Configure the application to poll for new messages for processing.

Explanation

Amazon SQS is a fully managed message queue that decouples components and absorbs traffic spikes. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 992

Single page →
Topic 1 · Question 992

A company's software development team needs an Amazon RDS Multi-AZ cluster. The RDS cluster will serve as a backend for a desktop client that is deployed on premises. The desktop client requires direct connectivity to the RDS cluster. The company must give the development team the ability to connect to the cluster by using the client when the team is in the office. Which solution provides the required connectivity MOST securely?

  • ACreate a VPC and two public subnets. Create the RDS cluster in the public subnets. Use AWS Site-to-Site VPN with a customer gateway in the company's office.
  • BCreate a VPC and two private subnets. Create the RDS cluster in the private subnets. Use AWS Site-to-Site VPN with a customer gateway in the company's office. (correct answer)
  • CCreate a VPC and two private subnets. Create the RDS cluster in the private subnets. Use RDS security groups to allow the company's office IP ranges to access the cluster.
  • DCreate a VPC and two public subnets. Create the RDS cluster in the public subnets. Create a cluster user for each developer. Use RDS security groups to allow the users to access the cluster.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create a VPC and two private subnets. Create the RDS cluster in the private subnets. Use AWS Site-to-Site VPN with a customer gateway in the company's office.

Explanation

Amazon RDS is a managed relational database that handles patching, backups and failover. AWS Site-to-Site VPN provides encrypted connectivity between on premises and a VPC. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SAA-C03 Question 993

Single page →
Topic 1 · Question 993

A solutions architect is creating an application that will handle batch processing of large amounts of data. The input data will be held in Amazon S3 and the output data will be stored in a different S3 bucket. For processing, the application will transfer the data over the network between multiple Amazon EC2 instances. What should the solutions architect do to reduce the overall data transfer costs?

  • APlace all the EC2 instances in an Auto Scaling group.
  • BPlace all the EC2 instances in the same AWS Region.
  • CPlace all the EC2 instances in the same Availability Zone. (correct answer)
  • DPlace all the EC2 instances in private subnets in multiple Availability Zones.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Place all the EC2 instances in the same Availability Zone.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system.

SAA-C03 Question 994

Single page →
Topic 1 · Question 994

A company hosts a multi-tier web application that uses an Amazon Aurora MySQL DB cluster for storage. The application tier is hosted on Amazon EC2 instances. The company's IT security guidelines mandate that the database credentials be encrypted and rotated every 14 days. What should a solutions architect do to meet this requirement with the LEAST operational effort?

  • ACreate a new AWS Key Management Service (AWS KMS) encryption key. Use AWS Secrets Manager to create a new secret that uses the KMS key with the appropriate credentials. Associate the secret with the Aurora DB cluster. Configure a custom rotation period of 14 days. (correct answer)
  • BCreate two parameters in AWS Systems Manager Parameter Store: one for the user name as a string parameter and one that uses the SecureString type for the password. Select AWS Key Management Service (AWS KMS) encryption for the password parameter, and load these parameters in the application tier. Implement an AWS Lambda function that rotates the password every 14 days.
  • CStore a file that contains the credentials in an AWS Key Management Service (AWS KMS) encrypted Amazon Elastic File System (Amazon EFS) file system. Mount the EFS file system in all EC2 instances of the application tier. Restrict the access to the file on the file system so that the application can read the file and that only super users can modify the file. Implement an AWS Lambda function that rotates the key in Aurora every 14 days and writes new credentials into the file.
  • DStore a file that contains the credentials in an AWS Key Management Service (AWS KMS) encrypted Amazon S3 bucket that the application uses to load the credentials. Download the file to the application regularly to ensure that the correct credentials are used. Implement an AWS Lambda function that rotates the Aurora credentials every 14 days and uploads these credentials to the file in the S3 bucket.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create a new AWS Key Management Service (AWS KMS) encryption key. Use AWS Secrets Manager to create a new secret that uses the KMS key with the appropriate credentials. Associate the secret with the Aurora DB cluster....

Explanation

Amazon Aurora is a high-performance managed relational database with built-in replication and failover. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest. AWS Secrets Manager stores and automatically rotates secrets such as database credentials.

SAA-C03 Question 995

Single page →
Topic 1 · Question 995

A streaming media company is rebuilding its infrastructure to accommodate increasing demand for video content that users consume daily. The company needs to process terabyte-sized videos to block some content in the videos. Video processing can take up to 20 minutes. The company needs a solution that will scale with demand and remain cost-effective. Which solution will meet these requirements?

  • AUse AWS Lambda functions to process videos. Store video metadata in Amazon DynamoDB. Store video content in Amazon S3 Intelligent-Tiering.
  • BUse Amazon Elastic Container Service (Amazon ECS) and AWS Fargate to implement microservices to process videos. Store video metadata in Amazon Aurora. Store video content in Amazon S3 Intelligent-Tiering. (correct answer)
  • CUse Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB) to process videos. Store video content in Amazon S3 Standard. Use Amazon Simple Queue Service (Amazon SQS) for queuing and to decouple processing tasks.
  • DDeploy a containerized video processing application on Amazon Elastic Kubernetes Service (Amazon EKS) on Amazon EC2. Store video metadata in Amazon RDS in a single Availability Zone. Store video content in Amazon S3 Glacier Deep Archive.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use Amazon Elastic Container Service (Amazon ECS) and AWS Fargate to implement microservices to process videos. Store video metadata in Amazon Aurora. Store video content in Amazon S3 Intelligent-Tiering.

Explanation

AWS Fargate runs containers serverlessly so there are no EC2 hosts to manage or patch. Amazon ECS orchestrates containers and integrates natively with AWS networking and IAM. S3 Intelligent-Tiering automatically moves objects between tiers to optimize cost with no operational effort. This option delivers the requirement at the lowest cost.

SAA-C03 Question 996

Single page →
Topic 1 · Question 996

A company runs an on-premises application on a Kubernetes cluster. The company recently added millions of new customers. The company's existing on-premises infrastructure is unable to handle the large number of new customers. The company needs to migrate the on-premises application to the AWS Cloud. The company will migrate to an Amazon Elastic Kubernetes Service (Amazon EKS) cluster. The company does not want to manage the underlying compute infrastructure for the new architecture on AWS. Which solution will meet these requirements with the LEAST operational overhead?

  • AUse a self-managed node to supply compute capacity. Deploy the application to the new EKS cluster.
  • BUse managed node groups to supply compute capacity. Deploy the application to the new EKS cluster.
  • CUse AWS Fargate to supply compute capacity. Create a Fargate profile. Use the Fargate profile to deploy the application. (correct answer)
  • DUse managed node groups with Karpenter to supply compute capacity. Deploy the application to the new EKS cluster.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Use AWS Fargate to supply compute capacity. Create a Fargate profile. Use the Fargate profile to deploy the application.

Explanation

AWS Fargate runs containers serverlessly so there are no EC2 hosts to manage or patch.

SAA-C03 Question 997

Single page →
Topic 1 · Question 997

A company is launching a new application that requires a structured database to store user profiles, application settings, and transactional data. The database must be scalable with application traffic and must offer backups. Which solution will meet these requirements MOST cost-effectively?

  • ADeploy a self-managed database on Amazon EC2 instances by using open source software. Use Spot Instances for cost optimization. Configure automated backups to Amazon S3.
  • BUse Amazon RDS. Use on-demand capacity mode for the database with General Purpose SSD storage. Configure automatic backups with a retention period of 7 days.
  • CUse Amazon Aurora Serverless for the database. Use serverless capacity scaling. Configure automated backups to Amazon S3. (correct answer)
  • DDeploy a self-managed NoSQL database on Amazon EC2 instances. Use Reserved Instances for cost optimization. Configure automated backups directly to Amazon S3 Glacier Flexible Retrieval.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Use Amazon Aurora Serverless for the database. Use serverless capacity scaling. Configure automated backups to Amazon S3.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. AWS Backup centrally automates and manages backups across AWS services. Aurora Serverless auto-scales database capacity and is cost-effective for variable workloads. This option delivers the requirement at the lowest cost.

SAA-C03 Question 998

Single page →
Topic 1 · Question 998

A company runs its legacy web application on AWS. The web application server runs on an Amazon EC2 instance in the public subnet of a VPC. The web application server collects images from customers and stores the image files in a locally attached Amazon Elastic Block Store (Amazon EBS) volume. The image files are uploaded every night to an Amazon S3 bucket for backup. A solutions architect discovers that the image files are being uploaded to Amazon S3 through the public endpoint. The solutions architect needs to ensure that traffic to Amazon S3 does not use the public endpoint. Which solution will meet these requirements?

  • ACreate a gateway VPC endpoint for the S3 bucket that has the necessary permissions for the VPC. Configure the subnet route table to use the gateway VPC endpoint. (correct answer)
  • BMove the S3 bucket inside the VPC. Configure the subnet route table to access the S3 bucket through private IP addresses.
  • CCreate an Amazon S3 access point for the Amazon EC2 instance inside the VPConfigure the web application to upload by using the Amazon S3 access point.
  • DConfigure an AWS Direct Connect connection between the VPC that has the Amazon EC2 instance and Amazon S3 to provide a dedicated network path.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create a gateway VPC endpoint for the S3 bucket that has the necessary permissions for the VPC. Configure the subnet route table to use the gateway VPC endpoint.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. A gateway VPC endpoint gives private, no-cost access to Amazon S3 and DynamoDB from within the VPC. A VPC endpoint provides private connectivity to AWS services without traversing the public internet.

SAA-C03 Question 999

Single page →
Topic 1 · Question 999

A company is creating a prototype of an ecommerce website on AWS. The website consists of an Application Load Balancer, an Auto Scaling group of Amazon EC2 instances for web servers, and an Amazon RDS for MySQL DB instance that runs with the Single-AZ configuration. The website is slow to respond during searches of the product catalog. The product catalog is a group of tables in the MySQL database that the company does not update frequently. A solutions architect has determined that the CPU utilization on the DB instance is high when product catalog searches occur. What should the solutions architect recommend to improve the performance of the website during searches of the product catalog?

  • AMigrate the product catalog to an Amazon Redshift database. Use the COPY command to load the product catalog tables.
  • BImplement an Amazon ElastiCache for Redis cluster to cache the product catalog. Use lazy loading to populate the cache. (correct answer)
  • CAdd an additional scaling policy to the Auto Scaling group to launch additional EC2 instances when database response is slow.
  • DTurn on the Multi-AZ configuration for the DB instance. Configure the EC2 instances to throttle the product catalog queries that are sent to the database.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Implement an Amazon ElastiCache for Redis cluster to cache the product catalog. Use lazy loading to populate the cache.

Explanation

Amazon ElastiCache provides in-memory caching (Redis/Memcached) to reduce latency and offload the database.

SAA-C03 Question 1000

Single page →
Topic 1 · Question 1000

A company currently stores 5 TB of data in on-premises block storage systems. The company's current storage solution provides limited space for additional data. The company runs applications on premises that must be able to retrieve frequently accessed data with low latency. The company requires a cloud-based storage solution. Which solution will meet these requirements with the MOST operational efficiency?

  • AUse Amazon S3 File Gateway. Integrate S3 File Gateway with the on-premises applications to store and directly retrieve files by using the SMB file system.
  • BUse an AWS Storage Gateway Volume Gateway with cached volumes as iSCSI targets. (correct answer)
  • CUse an AWS Storage Gateway Volume Gateway with stored volumes as iSCSI targets.
  • DUse an AWS Storage Gateway Tape Gateway. Integrate Tape Gateway with the on-premises applications to store virtual tapes in Amazon S3.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use an AWS Storage Gateway Volume Gateway with cached volumes as iSCSI targets.

Explanation

AWS Storage Gateway bridges on-premises apps to AWS storage with local caching. This option meets the real-time / low-latency performance requirement.

Showing questions 981–1000 of 1019 · Page 50 of 51