πŸ”

SAA-C03 β€” questions

Page 8 of 51 Β· 1019 total questions.

Topic 1 Β· Question 141

A company runs a web-based portal that provides users with global breaking news, local alerts, and weather updates. The portal delivers each user a personalized view by using mixture of static and dynamic content. Content is served over HTTPS through an API server running on an Amazon EC2 instance behind an Application Load Balancer (ALB). The company wants the portal to provide this content to its users across the world as quickly as possible. How should a solutions architect design the application to ensure the LEAST amount of latency for all users?

  • ADeploy the application stack in a single AWS Region. Use Amazon CloudFront to serve all static and dynamic content by specifying the ALB as an origin. (correct answer)
  • BDeploy the application stack in two AWS Regions. Use an Amazon Route 53 latency routing policy to serve all content from the ALB in the closest Region.
  • CDeploy the application stack in a single AWS Region. Use Amazon CloudFront to serve the static content. Serve the dynamic content directly from the ALB.
  • DDeploy the application stack in two AWS Regions. Use an Amazon Route 53 geolocation routing policy to serve all content from the ALB in the closest Region.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Deploy the application stack in a single AWS Region. Use Amazon CloudFront to serve all static and dynamic content by specifying the ALB as an origin.

Explanation

Amazon CloudFront caches content at edge locations to reduce latency and offload origins.

Topic 1 Β· Question 142

A gaming company is designing a highly available architecture. The application runs on a modified Linux kernel and supports only UDP-based traffic. The company needs the front-end tier to provide the best possible user experience. That tier must have low latency, route traffic to the nearest edge location, and provide static IP addresses for entry into the application endpoints. What should a solutions architect do to meet these requirements?

  • AConfigure Amazon Route 53 to forward requests to an Application Load Balancer. Use AWS Lambda for the application in AWS Application Auto Scaling.
  • BConfigure Amazon CloudFront to forward requests to a Network Load Balancer. Use AWS Lambda for the application in an AWS Application Auto Scaling group.
  • CConfigure AWS Global Accelerator to forward requests to a Network Load Balancer. Use Amazon EC2 instances for the application in an EC2 Auto Scaling group. (correct answer)
  • DConfigure Amazon API Gateway to forward requests to an Application Load Balancer. Use Amazon EC2 instances for the application in an EC2 Auto Scaling group.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Configure AWS Global Accelerator to forward requests to a Network Load Balancer. Use Amazon EC2 instances for the application in an EC2 Auto Scaling group.

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Amazon EC2 provides resizable virtual servers when you need full control of the operating system. AWS Global Accelerator routes users over the AWS backbone to the optimal endpoint for lower latency and fast failover. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

Topic 1 Β· Question 143

A company wants to migrate its existing on-premises monolithic application to AWS. The company wants to keep as much of the front-end code and the backend code as possible. However, the company wants to break the application into smaller applications. A different team will manage each application. The company needs a highly scalable solution that minimizes operational overhead. Which solution will meet these requirements?

  • AHost the application on AWS Lambda. Integrate the application with Amazon API Gateway.
  • BHost the application with AWS Amplify. Connect the application to an Amazon API Gateway API that is integrated with AWS Lambda.
  • CHost the application on Amazon EC2 instances. Set up an Application Load Balancer with EC2 instances in an Auto Scaling group as targets.
  • DHost the application on Amazon Elastic Container Service (Amazon ECS). Set up an Application Load Balancer with Amazon ECS as the target. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Host the application on Amazon Elastic Container Service (Amazon ECS). Set up an Application Load Balancer with Amazon ECS as the target.

Explanation

Amazon ECS orchestrates containers and integrates natively with AWS networking and IAM. An Application Load Balancer distributes HTTP/HTTPS traffic and supports path/host routing. A load balancer distributes traffic across targets in multiple AZs for availability and scale.

Topic 1 Β· Question 144

A company recently started using Amazon Aurora as the data store for its global ecommerce application. When large reports are run, developers report that the ecommerce application is performing poorly. After reviewing metrics in Amazon CloudWatch, a solutions architect finds that the ReadIOPS and CPUUtilizalion metrics are spiking when monthly reports run. What is the MOST cost-effective solution?

  • AMigrate the monthly reporting to Amazon Redshift.
  • BMigrate the monthly reporting to an Aurora Replica. (correct answer)
  • CMigrate the Aurora database to a larger instance class.
  • DIncrease the Provisioned IOPS on the Aurora instance.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Migrate the monthly reporting to an Aurora Replica.

Explanation

Amazon Aurora is a high-performance managed relational database with built-in replication and failover. This option delivers the requirement at the lowest cost.

Topic 1 Β· Question 145

A company hosts a website analytics application on a single Amazon EC2 On-Demand Instance. The analytics software is written in PHP and uses a MySQL database. The analytics software, the web server that provides PHP, and the database server are all hosted on the EC2 instance. The application is showing signs of performance degradation during busy times and is presenting 5xx errors. The company needs to make the application scale seamlessly. Which solution will meet these requirements MOST cost-effectively?

  • AMigrate the database to an Amazon RDS for MySQL DB instance. Create an AMI of the web application. Use the AMI to launch a second EC2 On-Demand Instance. Use an Application Load Balancer to distribute the load to each EC2 instance.
  • BMigrate the database to an Amazon RDS for MySQL DB instance. Create an AMI of the web application. Use the AMI to launch a second EC2 On-Demand Instance. Use Amazon Route 53 weighted routing to distribute the load across the two EC2 instances.
  • CMigrate the database to an Amazon Aurora MySQL DB instance. Create an AWS Lambda function to stop the EC2 instance and change the instance type. Create an Amazon CloudWatch alarm to invoke the Lambda function when CPU utilization surpasses 75%.
  • DMigrate the database to an Amazon Aurora MySQL DB instance. Create an AMI of the web application. Apply the AMI to a launch template. Create an Auto Scaling group with the launch template Configure the launch template to use a Spot Fleet. Attach an Application Load Balancer to the Auto Scaling group. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Migrate the database to an Amazon Aurora MySQL DB instance. Create an AMI of the web application. Apply the AMI to a launch template. Create an Auto Scaling group with the launch template Configure the launch template...

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Amazon Aurora is a high-performance managed relational database with built-in replication and failover. An Application Load Balancer distributes HTTP/HTTPS traffic and supports path/host routing. This option delivers the requirement at the lowest cost.

Topic 1 Β· Question 146

A company runs a stateless web application in production on a group of Amazon EC2 On-Demand Instances behind an Application Load Balancer. The application experiences heavy usage during an 8-hour period each business day. Application usage is moderate and steady overnight. Application usage is low during weekends. The company wants to minimize its EC2 costs without affecting the availability of the application. Which solution will meet these requirements?

  • AUse Spot Instances for the entire workload.
  • BUse Reserved Instances for the baseline level of usage. Use Spot instances for any additional capacity that the application needs. (correct answer)
  • CUse On-Demand Instances for the baseline level of usage. Use Spot Instances for any additional capacity that the application needs.
  • DUse Dedicated Instances for the baseline level of usage. Use On-Demand Instances for any additional capacity that the application needs.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use Reserved Instances for the baseline level of usage. Use Spot instances for any additional capacity that the application needs.

Explanation

Spot Instances use spare capacity at a large discount, ideal for fault-tolerant or interruptible workloads. Reserved Instances lower cost for steady-state, predictable long-running workloads.

Topic 1 Β· Question 147

A company needs to retain application log files for a critical application for 10 years. The application team regularly accesses logs from the past month for troubleshooting, but logs older than 1 month are rarely accessed. The application generates more than 10 TB of logs per month. Which storage option meets these requirements MOST cost-effectively?

  • AStore the logs in Amazon S3. Use AWS Backup to move logs more than 1 month old to S3 Glacier Deep Archive.
  • BStore the logs in Amazon S3. Use S3 Lifecycle policies to move logs more than 1 month old to S3 Glacier Deep Archive. (correct answer)
  • CStore the logs in Amazon CloudWatch Logs. Use AWS Backup to move logs more than 1 month old to S3 Glacier Deep Archive.
  • DStore the logs in Amazon CloudWatch Logs. Use Amazon S3 Lifecycle policies to move logs more than 1 month old to S3 Glacier Deep Archive.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Store the logs in Amazon S3. Use S3 Lifecycle policies to move logs more than 1 month old to S3 Glacier Deep Archive.

Explanation

S3 Glacier Deep Archive is the lowest-cost storage for long-term archival with retrieval in hours. Amazon S3 Glacier offers low-cost archival storage for infrequently accessed data. S3 Lifecycle policies automatically transition or expire objects to control storage cost. This option delivers the requirement at the lowest cost.

Topic 1 Β· Question 148

A company has a data ingestion workflow that includes the following components: An Amazon Simple Notification Service (Amazon SNS) topic that receives notifications about new data deliveries An AWS Lambda function that processes and stores the data The ingestion workflow occasionally fails because of network connectivity issues. When failure occurs, the corresponding data is not ingested unless the company manually reruns the job. What should a solutions architect do to ensure that all notifications are eventually processed?

  • AConfigure the Lambda function for deployment across multiple Availability Zones.
  • BModify the Lambda function's configuration to increase the CPU and memory allocations for the function.
  • CConfigure the SNS topic’s retry strategy to increase both the number of retries and the wait time between retries.
  • DConfigure an Amazon Simple Queue Service (Amazon SQS) queue as the on-failure destination. Modify the Lambda function to process messages in the queue. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Configure an Amazon Simple Queue Service (Amazon SQS) queue as the on-failure destination. Modify the Lambda function to process messages in the queue.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon SQS is a fully managed message queue that decouples components and absorbs traffic spikes. AWS Config tracks resource configuration changes and evaluates compliance.

Topic 1 Β· Question 149

A company has a service that produces event data. The company wants to use AWS to process the event data as it is received. The data is written in a specific order that must be maintained throughout processing. The company wants to implement a solution that minimizes operational overhead. How should a solutions architect accomplish this?

  • ACreate an Amazon Simple Queue Service (Amazon SQS) FIFO queue to hold messages. Set up an AWS Lambda function to process messages from the queue. (correct answer)
  • BCreate an Amazon Simple Notification Service (Amazon SNS) topic to deliver notifications containing payloads to process. Configure an AWS Lambda function as a subscriber.
  • CCreate an Amazon Simple Queue Service (Amazon SQS) standard queue to hold messages. Set up an AWS Lambda function to process messages from the queue independently.
  • DCreate an Amazon Simple Notification Service (Amazon SNS) topic to deliver notifications containing payloads to process. Configure an Amazon Simple Queue Service (Amazon SQS) queue as a subscriber.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create an Amazon Simple Queue Service (Amazon SQS) FIFO queue to hold messages. Set up an AWS Lambda function to process messages from the queue.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon SQS is a fully managed message queue that decouples components and absorbs traffic spikes.

Topic 1 Β· Question 150

A company is migrating an application from on-premises servers to Amazon EC2 instances. As part of the migration design requirements, a solutions architect must implement infrastructure metric alarms. The company does not need to take action if CPU utilization increases to more than 50% for a short burst of time. However, if the CPU utilization increases to more than 50% and read IOPS on the disk are high at the same time, the company needs to act as soon as possible. The solutions architect also must reduce false alarms. What should the solutions architect do to meet these requirements?

  • ACreate Amazon CloudWatch composite alarms where possible. (correct answer)
  • BCreate Amazon CloudWatch dashboards to visualize the metrics and react to issues quickly.
  • CCreate Amazon CloudWatch Synthetics canaries to monitor the application and raise an alarm.
  • DCreate single Amazon CloudWatch metric alarms with multiple metric thresholds where possible.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create Amazon CloudWatch composite alarms where possible.

Explanation

Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health.

Topic 1 Β· Question 151 Β· Select all that apply

A company wants to migrate its on-premises data center to AWS. According to the company's compliance requirements, the company can use only the ap-northeast-3 Region. Company administrators are not permitted to connect VPCs to the internet. Which solutions will meet these requirements? (Choose two.)

  • AUse AWS Control Tower to implement data residency guardrails to deny internet access and deny access to all AWS Regions except ap-northeast-3. (correct answer)
  • BUse rules in AWS WAF to prevent internet access. Deny access to all AWS Regions except ap-northeast-3 in the AWS account settings.
  • CUse AWS Organizations to configure service control policies (SCPS) that prevent VPCs from gaining internet access. Deny access to all AWS Regions except ap-northeast-3. (correct answer)
  • DCreate an outbound rule for the network ACL in each VPC to deny all traffic from 0.0.0.0/0. Create an IAM policy for each user to prevent the use of any AWS Region other than ap-northeast-3.
  • EUse AWS Config to activate managed rules to detect and alert for internet gateways and to detect and alert for new resources deployed outside of ap-northeast-3.
Reveal answer & explanation
Correct answer: A, C

The correct answer is A, C. Option A: Use AWS Control Tower to implement data residency guardrails to deny internet access and deny access to all AWS Regions except ap-northeast-3. Option C: Use AWS Organizations to configure service control policies (SCPS) that prevent VPCs from gaining internet access. Deny access to all AWS Regions except ap-northeast-3.

Explanation

AWS Organizations centrally governs and secures multiple AWS accounts. Service Control Policies set guardrails on what accounts in an organization can do. AWS Config tracks resource configuration changes and evaluates compliance.

Topic 1 Β· Question 152

A company uses a three-tier web application to provide training to new employees. The application is accessed for only 12 hours every day. The company is using an Amazon RDS for MySQL DB instance to store information and wants to minimize costs. What should a solutions architect do to meet these requirements?

  • AConfigure an IAM policy for AWS Systems Manager Session Manager. Create an IAM role for the policy. Update the trust relationship of the role. Set up automatic start and stop for the DB instance.
  • BCreate an Amazon ElastiCache for Redis cache cluster that gives users the ability to access the data from the cache when the DB instance is stopped. Invalidate the cache after the DB instance is started.
  • CLaunch an Amazon EC2 instance. Create an IAM role that grants access to Amazon RDS. Attach the role to the EC2 instance. Configure a cron job to start and stop the EC2 instance on the desired schedule.
  • DCreate AWS Lambda functions to start and stop the DB instance. Create Amazon EventBridge (Amazon CloudWatch Events) scheduled rules to invoke the Lambda functions. Configure the Lambda functions as event targets for the rules. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Create AWS Lambda functions to start and stop the DB instance. Create Amazon EventBridge (Amazon CloudWatch Events) scheduled rules to invoke the Lambda functions. Configure the Lambda functions as event targets for t...

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon EventBridge routes events between services with rules, enabling event-driven, decoupled architectures. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health. This option delivers the requirement at the lowest cost.

Topic 1 Β· Question 153

A company sells ringtones created from clips of popular songs. The files containing the ringtones are stored in Amazon S3 Standard and are at least 128 KB in size. The company has millions of files, but downloads are infrequent for ringtones older than 90 days. The company needs to save money on storage while keeping the most accessed files readily available for its users. Which action should the company take to meet these requirements MOST cost-effectively?

  • AConfigure S3 Standard-Infrequent Access (S3 Standard-IA) storage for the initial storage tier of the objects.
  • BMove the files to S3 Intelligent-Tiering and configure it to move objects to a less expensive storage tier after 90 days.
  • CConfigure S3 inventory to manage objects and move them to S3 Standard-Infrequent Access (S3 Standard-1A) after 90 days.
  • DImplement an S3 Lifecycle policy that moves the objects from S3 Standard to S3 Standard-Infrequent Access (S3 Standard-1A) after 90 days. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Implement an S3 Lifecycle policy that moves the objects from S3 Standard to S3 Standard-Infrequent Access (S3 Standard-1A) after 90 days.

Explanation

S3 Lifecycle policies automatically transition or expire objects to control storage cost. Amazon S3 provides durable, scalable object storage that is fully managed. This option delivers the requirement at the lowest cost.

Topic 1 Β· Question 154

A company needs to save the results from a medical trial to an Amazon S3 repository. The repository must allow a few scientists to add new files and must restrict all other users to read-only access. No users can have the ability to modify or delete any files in the repository. The company must keep every file in the repository for a minimum of 1 year after its creation date. Which solution will meet these requirements?

  • AUse S3 Object Lock in governance mode with a legal hold of 1 year.
  • BUse S3 Object Lock in compliance mode with a retention period of 365 days. (correct answer)
  • CUse an IAM role to restrict all users from deleting or changing objects in the S3 bucket. Use an S3 bucket policy to only allow the IAM role.
  • DConfigure the S3 bucket to invoke an AWS Lambda function every time an object is added. Configure the function to track the hash of the saved object so that modified objects can be marked accordingly.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use S3 Object Lock in compliance mode with a retention period of 365 days.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed.

Topic 1 Β· Question 155

A large media company hosts a web application on AWS. The company wants to start caching confidential media files so that users around the world will have reliable access to the files. The content is stored in Amazon S3 buckets. The company must deliver the content quickly, regardless of where the requests originate geographically. Which solution will meet these requirements?

  • AUse AWS DataSync to connect the S3 buckets to the web application.
  • BDeploy AWS Global Accelerator to connect the S3 buckets to the web application.
  • CDeploy Amazon CloudFront to connect the S3 buckets to CloudFront edge servers. (correct answer)
  • DUse Amazon Simple Queue Service (Amazon SQS) to connect the S3 buckets to the web application.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Deploy Amazon CloudFront to connect the S3 buckets to CloudFront edge servers.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon CloudFront caches content at edge locations to reduce latency and offload origins.

Topic 1 Β· Question 156 Β· Select all that apply

A company produces batch data that comes from different databases. The company also produces live stream data from network sensors and application APIs. The company needs to consolidate all the data into one place for business analytics. The company needs to process the incoming data and then stage the data in different Amazon S3 buckets. Teams will later run one-time queries and import the data into a business intelligence tool to show key performance indicators (KPIs). Which combination of steps will meet these requirements with the LEAST operational overhead? (Choose two.)

  • AUse Amazon Athena for one-time queries. Use Amazon QuickSight to create dashboards for KPIs. (correct answer)
  • BUse Amazon Kinesis Data Analytics for one-time queries. Use Amazon QuickSight to create dashboards for KPIs.
  • CCreate custom AWS Lambda functions to move the individual records from the databases to an Amazon Redshift cluster.
  • DUse an AWS Glue extract, transform, and load (ETL) job to convert the data into JSON format. Load the data into multiple Amazon OpenSearch Service (Amazon Elasticsearch Service) clusters.
  • EUse blueprints in AWS Lake Formation to identify the data that can be ingested into a data lake. Use AWS Glue to crawl the source, extract the data, and load the data into Amazon S3 in Apache Parquet format. (correct answer)
Reveal answer & explanation
Correct answer: A, E

The correct answer is A, E. Option A: Use Amazon Athena for one-time queries. Use Amazon QuickSight to create dashboards for KPIs. Option E: Use blueprints in AWS Lake Formation to identify the data that can be ingested into a data lake. Use AWS Glue to crawl the source, extract the data, and load the data into Amazon S3 in Apache Parquet format.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon RDS is a managed relational database that handles patching, backups and failover. Amazon Athena runs serverless SQL queries directly on data in Amazon S3 with no infrastructure to manage.

Topic 1 Β· Question 157 Β· Select all that apply

A company stores data in an Amazon Aurora PostgreSQL DB cluster. The company must store all the data for 5 years and must delete all the data after 5 years. The company also must indefinitely keep audit logs of actions that are performed within the database. Currently, the company has automated backups configured for Aurora. Which combination of steps should a solutions architect take to meet these requirements? (Choose two.)

  • ATake a manual snapshot of the DB cluster.
  • BCreate a lifecycle policy for the automated backups.
  • CConfigure automated backup retention for 5 years.
  • DConfigure an Amazon CloudWatch Logs export for the DB cluster. (correct answer)
  • EUse AWS Backup to take the backups and to keep the backups for 5 years. (correct answer)
Reveal answer & explanation
Correct answer: D, E

The correct answer is D, E. Option D: Configure an Amazon CloudWatch Logs export for the DB cluster. Option E: Use AWS Backup to take the backups and to keep the backups for 5 years.

Explanation

AWS Backup centrally automates and manages backups across AWS services. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health. AWS Config tracks resource configuration changes and evaluates compliance.

Topic 1 Β· Question 158

A solutions architect is optimizing a website for an upcoming musical event. Videos of the performances will be streamed in real time and then will be available on demand. The event is expected to attract a global online audience. Which service will improve the performance of both the real-time and on-demand streaming?

  • AAmazon CloudFront (correct answer)
  • BAWS Global Accelerator
  • CAmazon Route 53
  • DAmazon S3 Transfer Acceleration
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Amazon CloudFront

Explanation

Amazon CloudFront caches content at edge locations to reduce latency and offload origins. This option meets the real-time / low-latency performance requirement.

Topic 1 Β· Question 159 Β· Select all that apply

A company is running a publicly accessible serverless application that uses Amazon API Gateway and AWS Lambda. The application’s traffic recently spiked due to fraudulent requests from botnets. Which steps should a solutions architect take to block requests from unauthorized users? (Choose two.)

  • ACreate a usage plan with an API key that is shared with genuine users only. (correct answer)
  • BIntegrate logic within the Lambda function to ignore the requests from fraudulent IP addresses.
  • CImplement an AWS WAF rule to target malicious requests and trigger actions to filter them out. (correct answer)
  • DConvert the existing public API to a private API. Update the DNS records to redirect users to the new API endpoint.
  • ECreate an IAM role for each user attempting to access the API. A user will assume the role when making the API call.
Reveal answer & explanation
Correct answer: A, C

The correct answer is A, C. Option A: Create a usage plan with an API key that is shared with genuine users only. Option C: Implement an AWS WAF rule to target malicious requests and trigger actions to filter them out.

Explanation

AWS WAF protects web applications from common exploits and malicious requests. This option decouples the components so they scale independently and absorb load spikes.

Topic 1 Β· Question 160

An ecommerce company hosts its analytics application in the AWS Cloud. The application generates about 300 MB of data each month. The data is stored in JSON format. The company is evaluating a disaster recovery solution to back up the data. The data must be accessible in milliseconds if it is needed, and the data must be kept for 30 days. Which solution meets these requirements MOST cost-effectively?

  • AAmazon OpenSearch Service (Amazon Elasticsearch Service)
  • BAmazon S3 Glacier
  • CAmazon S3 Standard (correct answer)
  • DAmazon RDS for PostgreSQL
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Amazon S3 Standard

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. This option delivers the requirement at the lowest cost.

Showing questions 141–160 of 1019 Β· Page 8 of 51