🔍

SAA-C03 — questions

Page 2 of 51 · 1019 total questions.

SAA-C03 Question 21

Single page →
Topic 1 · Question 21

An ecommerce company wants to launch a one-deal-a-day website on AWS. Each day will feature exactly one product on sale for a period of 24 hours. The company wants to be able to handle millions of requests each hour with millisecond latency during peak hours. Which solution will meet these requirements with the LEAST operational overhead?

  • AUse Amazon S3 to host the full website in different S3 buckets. Add Amazon CloudFront distributions. Set the S3 buckets as origins for the distributions. Store the order data in Amazon S3.
  • BDeploy the full website on Amazon EC2 instances that run in Auto Scaling groups across multiple Availability Zones. Add an Application Load Balancer (ALB) to distribute the website traffic. Add another ALB for the backend APIs. Store the data in Amazon RDS for MySQL.
  • CMigrate the full application to run in containers. Host the containers on Amazon Elastic Kubernetes Service (Amazon EKS). Use the Kubernetes Cluster Autoscaler to increase and decrease the number of pods to process bursts in traffic. Store the data in Amazon RDS for MySQL.
  • DUse an Amazon S3 bucket to host the website's static content. Deploy an Amazon CloudFront distribution. Set the S3 bucket as the origin. Use Amazon API Gateway and AWS Lambda functions for the backend APIs. Store the data in Amazon DynamoDB. (correct answer)
Reveal answer & explanation
Correct answer: D

Correct: D. A fully serverless design — S3 + CloudFront for static content and API Gateway + Lambda + DynamoDB for the backend — handles millions of requests per hour at millisecond latency and scales automatically with the least to operate. A stores order data in S3, which isn't a transactional store. B (EC2 + RDS) and C (EKS + RDS) require managing servers or clusters and their scaling — more overhead for a spiky one-deal-a-day site.

SAA-C03 Question 22

Single page →
Topic 1 · Question 22

A solutions architect is using Amazon S3 to design the storage architecture of a new digital media application. The media files must be resilient to the loss of an Availability Zone. Some files are accessed frequently while other files are rarely accessed in an unpredictable pattern. The solutions architect must minimize the costs of storing and retrieving the media files. Which storage option meets these requirements?

  • AS3 Standard
  • BS3 Intelligent-Tiering (correct answer)
  • CS3 Standard-Infrequent Access (S3 Standard-IA)
  • DS3 One Zone-Infrequent Access (S3 One Zone-IA)
Reveal answer & explanation
Correct answer: B

Correct: B. Access is frequent for some files and rare for others in an unpredictable pattern, which is exactly what S3 Intelligent-Tiering handles: it moves objects between frequent and infrequent tiers automatically with no retrieval fees, and stores data across multiple AZs. A (S3 Standard) doesn't optimize cost for cold objects. C (Standard-IA) adds retrieval charges that hurt with unpredictable access. D (One Zone-IA) can't survive the loss of an Availability Zone.

SAA-C03 Question 23

Single page →
Topic 1 · Question 23

A company is storing backup files by using Amazon S3 Standard storage. The files are accessed frequently for 1 month. However, the files are not accessed after 1 month. The company must keep the files indefinitely. Which storage solution will meet these requirements MOST cost-effectively?

  • AConfigure S3 Intelligent-Tiering to automatically migrate objects.
  • BCreate an S3 Lifecycle configuration to transition objects from S3 Standard to S3 Glacier Deep Archive after 1 month. (correct answer)
  • CCreate an S3 Lifecycle configuration to transition objects from S3 Standard to S3 Standard-Infrequent Access (S3 Standard-IA) after 1 month.
  • DCreate an S3 Lifecycle configuration to transition objects from S3 Standard to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 1 month.
Reveal answer & explanation
Correct answer: B

Correct: B. Files are hot for one month, then never accessed but kept forever, so a lifecycle rule transitioning to Glacier Deep Archive after 30 days gives the lowest long-term cost. C (Standard-IA) and D (One Zone-IA) cost far more than Deep Archive for indefinite retention. A (Intelligent-Tiering) suits unpredictable access, but here the pattern is known — cold after a month — so Deep Archive is cheaper.

SAA-C03 Question 24

Single page →
Topic 1 · Question 24

A company observes an increase in Amazon EC2 costs in its most recent bill. The billing team notices unwanted vertical scaling of instance types for a couple of EC2 instances. A solutions architect needs to create a graph comparing the last 2 months of EC2 costs and perform an in-depth analysis to identify the root cause of the vertical scaling. How should the solutions architect generate the information with the LEAST operational overhead?

  • AUse AWS Budgets to create a budget report and compare EC2 costs based on instance types.
  • BUse Cost Explorer's granular filtering feature to perform an in-depth analysis of EC2 costs based on instance types. (correct answer)
  • CUse graphs from the AWS Billing and Cost Management dashboard to compare EC2 costs based on instance types for the last 2 months.
  • DUse AWS Cost and Usage Reports to create a report and send it to an Amazon S3 bucket. Use Amazon QuickSight with Amazon S3 as a source to generate an interactive graph based on instance types.
Reveal answer & explanation
Correct answer: B

Correct: B. Cost Explorer offers ready-made cost graphs and can filter and group by instance type over the last two months with no setup — the least-overhead way to investigate the vertical-scaling cost jump. A (Budgets) tracks spend against thresholds rather than analyzing it. C (Billing dashboard graphs) can't filter granularly by instance type. D (Cost and Usage Reports + QuickSight) works but requires building a reporting pipeline.

SAA-C03 Question 25

Single page →
Topic 1 · Question 25

A company is designing an application. The application uses an AWS Lambda function to receive information through Amazon API Gateway and to store the information in an Amazon Aurora PostgreSQL database. During the proof-of-concept stage, the company has to increase the Lambda quotas significantly to handle the high volumes of data that the company needs to load into the database. A solutions architect must recommend a new design to improve scalability and minimize the configuration effort. Which solution will meet these requirements?

  • ARefactor the Lambda function code to Apache Tomcat code that runs on Amazon EC2 instances. Connect the database by using native Java Database Connectivity (JDBC) drivers.
  • BChange the platform from Aurora to Amazon DynamoDProvision a DynamoDB Accelerator (DAX) cluster. Use the DAX client SDK to point the existing DynamoDB API calls at the DAX cluster.
  • CSet up two Lambda functions. Configure one function to receive the information. Configure the other function to load the information into the database. Integrate the Lambda functions by using Amazon Simple Notification Service (Amazon SNS).
  • DSet up two Lambda functions. Configure one function to receive the information. Configure the other function to load the information into the database. Integrate the Lambda functions by using an Amazon Simple Queue Service (Amazon SQS) queue. (correct answer)
Reveal answer & explanation
Correct answer: D

Correct: D. Splitting into a receiver Lambda and a loader Lambda with an SQS queue between them lets the queue buffer bursts and feed the database at a controlled rate, so you stop hitting Lambda concurrency limits — a small config change that improves scalability. C uses SNS, which pushes messages immediately with no buffering and wouldn't smooth the load into the database. A (rewrite to Tomcat on EC2) is a large re-architecture. B swaps Aurora for DynamoDB/DAX, changing the data model unnecessarily.

SAA-C03 Question 26

Single page →
Topic 1 · Question 26

A company needs to review its AWS Cloud deployment to ensure that its Amazon S3 buckets do not have unauthorized configuration changes. What should a solutions architect do to accomplish this goal?

  • ATurn on AWS Config with the appropriate rules. (correct answer)
  • BTurn on AWS Trusted Advisor with the appropriate checks.
  • CTurn on Amazon Inspector with the appropriate assessment template.
  • DTurn on Amazon S3 server access logging. Configure Amazon EventBridge (Amazon Cloud Watch Events).
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Turn on AWS Config with the appropriate rules.

Explanation

AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 27

Single page →
Topic 1 · Question 27

A company is launching a new application and will display application metrics on an Amazon CloudWatch dashboard. The company's product manager needs to access this dashboard periodically. The product manager does not have an AWS account. A solutions architect must provide access to the product manager by following the principle of least privilege. Which solution will meet these requirements?

  • AShare the dashboard from the CloudWatch console. Enter the product manager's email address, and complete the sharing steps. Provide a shareable link for the dashboard to the product manager. (correct answer)
  • BCreate an IAM user specifically for the product manager. Attach the CloudWatchReadOnlyAccess AWS managed policy to the user. Share the new login credentials with the product manager. Share the browser URL of the correct dashboard with the product manager.
  • CCreate an IAM user for the company's employees. Attach the ViewOnlyAccess AWS managed policy to the IAM user. Share the new login credentials with the product manager. Ask the product manager to navigate to the CloudWatch console and locate the dashboard by name in the Dashboards section.
  • DDeploy a bastion server in a public subnet. When the product manager requires access to the dashboard, start the server and share the RDP credentials. On the bastion server, ensure that the browser is configured to open the dashboard URL with cached AWS credentials that have appropriate permissions to view the dashboard.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Share the dashboard from the CloudWatch console. Enter the product manager's email address, and complete the sharing steps. Provide a shareable link for the dashboard to the product manager.

Explanation

Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health.

SAA-C03 Question 28

Single page →
Topic 1 · Question 28

A company is migrating applications to AWS. The applications are deployed in different accounts. The company manages the accounts centrally by using AWS Organizations. The company's security team needs a single sign-on (SSO) solution across all the company's accounts. The company must continue managing the users and groups in its on-premises self-managed Microsoft Active Directory. Which solution will meet these requirements?

  • AEnable AWS Single Sign-On (AWS SSO) from the AWS SSO console. Create a one-way forest trust or a one-way domain trust to connect the company's self-managed Microsoft Active Directory with AWS SSO by using AWS Directory Service for Microsoft Active Directory.
  • BEnable AWS Single Sign-On (AWS SSO) from the AWS SSO console. Create a two-way forest trust to connect the company's self-managed Microsoft Active Directory with AWS SSO by using AWS Directory Service for Microsoft Active Directory. (correct answer)
  • CUse AWS Directory Service. Create a two-way trust relationship with the company's self-managed Microsoft Active Directory.
  • DDeploy an identity provider (IdP) on premises. Enable AWS Single Sign-On (AWS SSO) from the AWS SSO console.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Enable AWS Single Sign-On (AWS SSO) from the AWS SSO console. Create a two-way forest trust to connect the company's self-managed Microsoft Active Directory with AWS SSO by using AWS Directory Service for Microsoft Ac...

Explanation

AWS Directory Service provides managed Microsoft Active Directory in the cloud.

SAA-C03 Question 29

Single page →
Topic 1 · Question 29

A company provides a Voice over Internet Protocol (VoIP) service that uses UDP connections. The service consists of Amazon EC2 instances that run in an Auto Scaling group. The company has deployments across multiple AWS Regions. The company needs to route users to the Region with the lowest latency. The company also needs automated failover between Regions. Which solution will meet these requirements?

  • ADeploy a Network Load Balancer (NLB) and an associated target group. Associate the target group with the Auto Scaling group. Use the NLB as an AWS Global Accelerator endpoint in each Region. (correct answer)
  • BDeploy an Application Load Balancer (ALB) and an associated target group. Associate the target group with the Auto Scaling group. Use the ALB as an AWS Global Accelerator endpoint in each Region.
  • CDeploy a Network Load Balancer (NLB) and an associated target group. Associate the target group with the Auto Scaling group. Create an Amazon Route 53 latency record that points to aliases for each NLB. Create an Amazon CloudFront distribution that uses the latency record as an origin.
  • DDeploy an Application Load Balancer (ALB) and an associated target group. Associate the target group with the Auto Scaling group. Create an Amazon Route 53 weighted record that points to aliases for each ALB. Deploy an Amazon CloudFront distribution that uses the weighted record as an origin.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Deploy a Network Load Balancer (NLB) and an associated target group. Associate the target group with the Auto Scaling group. Use the NLB as an AWS Global Accelerator endpoint in each Region.

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. AWS Global Accelerator routes users over the AWS backbone to the optimal endpoint for lower latency and fast failover. A Network Load Balancer handles very high throughput TCP/UDP traffic with ultra-low latency and static IPs.

SAA-C03 Question 30

Single page →
Topic 1 · Question 30

A development team runs monthly resource-intensive tests on its general purpose Amazon RDS for MySQL DB instance with Performance Insights enabled. The testing lasts for 48 hours once a month and is the only process that uses the database. The team wants to reduce the cost of running the tests without reducing the compute and memory attributes of the DB instance. Which solution meets these requirements MOST cost-effectively?

  • AStop the DB instance when tests are completed. Restart the DB instance when required.
  • BUse an Auto Scaling policy with the DB instance to automatically scale when tests are completed.
  • CCreate a snapshot when tests are completed. Terminate the DB instance and restore the snapshot when required. (correct answer)
  • DModify the DB instance to a low-capacity instance when tests are completed. Modify the DB instance again when required.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create a snapshot when tests are completed. Terminate the DB instance and restore the snapshot when required. This option delivers the requirement at the lowest cost.

SAA-C03 Question 31

Single page →
Topic 1 · Question 31

A company that hosts its web application on AWS wants to ensure all Amazon EC2 instances. Amazon RDS DB instances. and Amazon Redshift clusters are configured with tags. The company wants to minimize the effort of configuring and operating this check. What should a solutions architect do to accomplish this?

  • AUse AWS Config rules to define and detect resources that are not properly tagged. (correct answer)
  • BUse Cost Explorer to display resources that are not properly tagged. Tag those resources manually.
  • CWrite API calls to check all resources for proper tag allocation. Periodically run the code on an EC2 instance.
  • DWrite API calls to check all resources for proper tag allocation. Schedule an AWS Lambda function through Amazon CloudWatch to periodically run the code.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use AWS Config rules to define and detect resources that are not properly tagged.

Explanation

AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 32

Single page →
Topic 1 · Question 32

A development team needs to host a website that will be accessed by other teams. The website contents consist of HTML, CSS, client-side JavaScript, and images. Which method is the MOST cost-effective for hosting the website?

  • AContainerize the website and host it in AWS Fargate.
  • BCreate an Amazon S3 bucket and host the website there. (correct answer)
  • CDeploy a web server on an Amazon EC2 instance to host the website.
  • DConfigure an Application Load Balancer with an AWS Lambda target that uses the Express.js framework.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create an Amazon S3 bucket and host the website there.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon EBS provides block storage attached to a single EC2 instance. This option delivers the requirement at the lowest cost.

SAA-C03 Question 33

Single page →
Topic 1 · Question 33

A company runs an online marketplace web application on AWS. The application serves hundreds of thousands of users during peak hours. The company needs a scalable, near-real-time solution to share the details of millions of financial transactions with several other internal applications. Transactions also need to be processed to remove sensitive data before being stored in a document database for low-latency retrieval. What should a solutions architect recommend to meet these requirements?

  • AStore the transactions data into Amazon DynamoDB. Set up a rule in DynamoDB to remove sensitive data from every transaction upon write. Use DynamoDB Streams to share the transactions data with other applications.
  • BStream the transactions data into Amazon Kinesis Data Firehose to store data in Amazon DynamoDB and Amazon S3. Use AWS Lambda integration with Kinesis Data Firehose to remove sensitive data. Other applications can consume the data stored in Amazon S3.
  • CStream the transactions data into Amazon Kinesis Data Streams. Use AWS Lambda integration to remove sensitive data from every transaction and then store the transactions data in Amazon DynamoDB. Other applications can consume the transactions data off the Kinesis data stream. (correct answer)
  • DStore the batched transactions data in Amazon S3 as files. Use AWS Lambda to process every file and remove sensitive data before updating the files in Amazon S3. The Lambda function then stores the data in Amazon DynamoDB. Other applications can consume transaction files stored in Amazon S3.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Stream the transactions data into Amazon Kinesis Data Streams. Use AWS Lambda integration to remove sensitive data from every transaction and then store the transactions data in Amazon DynamoDB. Other applications can...

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon DynamoDB is a fully managed, serverless NoSQL database with single-digit millisecond latency and automatic scaling. Kinesis Data Streams ingests and processes high-volume real-time streaming data. This option meets the real-time / low-latency performance requirement.

SAA-C03 Question 34

Single page →
Topic 1 · Question 34

A company hosts its multi-tier applications on AWS. For compliance, governance, auditing, and security, the company must track configuration changes on its AWS resources and record a history of API calls made to these resources. What should a solutions architect do to meet these requirements?

  • AUse AWS CloudTrail to track configuration changes and AWS Config to record API calls.
  • BUse AWS Config to track configuration changes and AWS CloudTrail to record API calls. (correct answer)
  • CUse AWS Config to track configuration changes and Amazon CloudWatch to record API calls.
  • DUse AWS CloudTrail to track configuration changes and Amazon CloudWatch to record API calls.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use AWS Config to track configuration changes and AWS CloudTrail to record API calls.

Explanation

AWS CloudTrail records API activity for auditing and governance. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 35

Single page →
Topic 1 · Question 35

A company is preparing to launch a public-facing web application in the AWS Cloud. The architecture consists of Amazon EC2 instances within a VPC behind an Elastic Load Balancer (ELB). A third-party service is used for the DNS. The company's solutions architect must recommend a solution to detect and protect against large-scale DDoS attacks. Which solution meets these requirements?

  • AEnable Amazon GuardDuty on the account.
  • BEnable Amazon Inspector on the EC2 instances.
  • CEnable AWS Shield and assign Amazon Route 53 to it.
  • DEnable AWS Shield Advanced and assign the ELB to it. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Enable AWS Shield Advanced and assign the ELB to it.

Explanation

AWS Shield provides managed DDoS protection.

SAA-C03 Question 36

Single page →
Topic 1 · Question 36

A company is building an application in the AWS Cloud. The application will store data in Amazon S3 buckets in two AWS Regions. The company must use an AWS Key Management Service (AWS KMS) customer managed key to encrypt all data that is stored in the S3 buckets. The data in both S3 buckets must be encrypted and decrypted with the same KMS key. The data and the key must be stored in each of the two Regions. Which solution will meet these requirements with the LEAST operational overhead?

  • ACreate an S3 bucket in each Region. Configure the S3 buckets to use server-side encryption with Amazon S3 managed encryption keys (SSE-S3). Configure replication between the S3 buckets.
  • BCreate a customer managed multi-Region KMS key. Create an S3 bucket in each Region. Configure replication between the S3 buckets. Configure the application to use the KMS key with client-side encryption. (correct answer)
  • CCreate a customer managed KMS key and an S3 bucket in each Region. Configure the S3 buckets to use server-side encryption with Amazon S3 managed encryption keys (SSE-S3). Configure replication between the S3 buckets.
  • DCreate a customer managed KMS key and an S3 bucket in each Region. Configure the S3 buckets to use server-side encryption with AWS KMS keys (SSE-KMS). Configure replication between the S3 buckets.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create a customer managed multi-Region KMS key. Create an S3 bucket in each Region. Configure replication between the S3 buckets. Configure the application to use the KMS key with client-side encryption.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 37

Single page →
Topic 1 · Question 37

A company recently launched a variety of new workloads on Amazon EC2 instances in its AWS account. The company needs to create a strategy to access and administer the instances remotely and securely. The company needs to implement a repeatable process that works with native AWS services and follows the AWS Well-Architected Framework. Which solution will meet these requirements with the LEAST operational overhead?

  • AUse the EC2 serial console to directly access the terminal interface of each instance for administration.
  • BAttach the appropriate IAM role to each existing instance and new instance. Use AWS Systems Manager Session Manager to establish a remote SSH session. (correct answer)
  • CCreate an administrative SSH key pair. Load the public key into each EC2 instance. Deploy a bastion host in a public subnet to provide a tunnel for administration of each instance.
  • DEstablish an AWS Site-to-Site VPN connection. Instruct administrators to use their local on-premises machines to connect directly to the instances by using SSH keys across the VPN tunnel.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Attach the appropriate IAM role to each existing instance and new instance. Use AWS Systems Manager Session Manager to establish a remote SSH session.

Explanation

An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies. AWS Systems Manager operates and automates management of fleets of resources.

SAA-C03 Question 38

Single page →
Topic 1 · Question 38

A company is hosting a static website on Amazon S3 and is using Amazon Route 53 for DNS. The website is experiencing increased demand from around the world. The company must decrease latency for users who access the website. Which solution meets these requirements MOST cost-effectively?

  • AReplicate the S3 bucket that contains the website to all AWS Regions. Add Route 53 geolocation routing entries.
  • BProvision accelerators in AWS Global Accelerator. Associate the supplied IP addresses with the S3 bucket. Edit the Route 53 entries to point to the IP addresses of the accelerators.
  • CAdd an Amazon CloudFront distribution in front of the S3 bucket. Edit the Route 53 entries to point to the CloudFront distribution. (correct answer)
  • DEnable S3 Transfer Acceleration on the bucket. Edit the Route 53 entries to point to the new endpoint.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Add an Amazon CloudFront distribution in front of the S3 bucket. Edit the Route 53 entries to point to the CloudFront distribution.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon CloudFront caches content at edge locations to reduce latency and offload origins. Amazon Route 53 provides DNS with health checks and routing policies for availability and latency. This option delivers the requirement at the lowest cost.

SAA-C03 Question 39

Single page →
Topic 1 · Question 39

A company maintains a searchable repository of items on its website. The data is stored in an Amazon RDS for MySQL database table that contains more than 10 million rows. The database has 2 TB of General Purpose SSD storage. There are millions of updates against this data every day through the company's website. The company has noticed that some insert operations are taking 10 seconds or longer. The company has determined that the database storage performance is the problem. Which solution addresses this performance issue?

  • AChange the storage type to Provisioned IOPS SSD. (correct answer)
  • BChange the DB instance to a memory optimized instance class.
  • CChange the DB instance to a burstable performance instance class.
  • DEnable Multi-AZ RDS read replicas with MySQL native asynchronous replication.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Change the storage type to Provisioned IOPS SSD.

SAA-C03 Question 40

Single page →
Topic 1 · Question 40

A company has thousands of edge devices that collectively generate 1 TB of status alerts each day. Each alert is approximately 2 KB in size. A solutions architect needs to implement a solution to ingest and store the alerts for future analysis. The company wants a highly available solution. However, the company needs to minimize costs and does not want to manage additional infrastructure. Additionally, the company wants to keep 14 days of data available for immediate analysis and archive any data older than 14 days. What is the MOST operationally efficient solution that meets these requirements?

  • ACreate an Amazon Kinesis Data Firehose delivery stream to ingest the alerts. Configure the Kinesis Data Firehose stream to deliver the alerts to an Amazon S3 bucket. Set up an S3 Lifecycle configuration to transition data to Amazon S3 Glacier after 14 days. (correct answer)
  • BLaunch Amazon EC2 instances across two Availability Zones and place them behind an Elastic Load Balancer to ingest the alerts. Create a script on the EC2 instances that will store the alerts in an Amazon S3 bucket. Set up an S3 Lifecycle configuration to transition data to Amazon S3 Glacier after 14 days.
  • CCreate an Amazon Kinesis Data Firehose delivery stream to ingest the alerts. Configure the Kinesis Data Firehose stream to deliver the alerts to an Amazon OpenSearch Service (Amazon Elasticsearch Service) cluster. Set up the Amazon OpenSearch Service (Amazon Elasticsearch Service) cluster to take manual snapshots every day and delete data from the cluster that is older than 14 days.
  • DCreate an Amazon Simple Queue Service (Amazon SQS) standard queue to ingest the alerts, and set the message retention period to 14 days. Configure consumers to poll the SQS queue, check the age of the message, and analyze the message data as needed. If the message is 14 days old, the consumer should copy the message to an Amazon S3 bucket and delete the message from the SQS queue.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create an Amazon Kinesis Data Firehose delivery stream to ingest the alerts. Configure the Kinesis Data Firehose stream to deliver the alerts to an Amazon S3 bucket. Set up an S3 Lifecycle configuration to transition...

Explanation

Amazon S3 Glacier offers low-cost archival storage for infrequently accessed data. S3 Lifecycle policies automatically transition or expire objects to control storage cost. Amazon S3 provides durable, scalable object storage that is fully managed. This option delivers the requirement at the lowest cost.

Showing questions 21–40 of 1019 · Page 2 of 51