🔍

SAA-C03 — questions

Page 43 of 51 · 1019 total questions.

SAA-C03 Question 841

Single page →
Topic 1 · Question 841

A company uses Amazon EC2 instances and Amazon Elastic Block Store (Amazon EBS) to run its self-managed database. The company has 350 TB of data spread across all EBS volumes. The company takes daily EBS snapshots and keeps the snapshots for 1 month. The daily change rate is 5% of the EBS volumes. Because of new regulations, the company needs to keep the monthly snapshots for 7 years. The company needs to change its backup strategy to comply with the new regulations and to ensure that data is available with minimal administrative effort. Which solution will meet these requirements MOST cost-effectively?

  • AKeep the daily snapshot in the EBS snapshot standard tier for 1 month. Copy the monthly snapshot to Amazon S3 Glacier Deep Archive with a 7-year retention period.
  • BContinue with the current EBS snapshot policy. Add a new policy to move the monthly snapshot to Amazon EBS Snapshots Archive with a 7-year retention period. (correct answer)
  • CKeep the daily snapshot in the EBS snapshot standard tier for 1 month. Keep the monthly snapshot in the standard tier for 7 years. Use incremental snapshots.
  • DKeep the daily snapshot in the EBS snapshot standard tier. Use EBS direct APIs to take snapshots of all the EBS volumes every month. Store the snapshots in an Amazon S3 bucket in the Infrequent Access tier for 7 years.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Continue with the current EBS snapshot policy. Add a new policy to move the monthly snapshot to Amazon EBS Snapshots Archive with a 7-year retention period.

Explanation

Amazon EBS provides block storage attached to a single EC2 instance. This option delivers the requirement at the lowest cost.

SAA-C03 Question 842

Single page →
Topic 1 · Question 842

A company runs an application on several Amazon EC2 instances that store persistent data on an Amazon Elastic File System (Amazon EFS) file system. The company needs to replicate the data to another AWS Region by using an AWS managed service solution. Which solution will meet these requirements MOST cost-effectively?

  • AUse the EFS-to-EFS backup solution to replicate the data to an EFS file system in another Region.
  • BRun a nightly script to copy data from the EFS file system to an Amazon S3 bucket. Enable S3 Cross-Region Replication on the S3 bucket.
  • CCreate a VPC in another Region. Establish a cross-Region VPC peer. Run a nightly rsync to copy data from the original Region to the new Region.
  • DUse AWS Backup to create a backup plan with a rule that takes a daily backup and replicates it to another Region. Assign the EFS file system resource to the backup plan. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Use AWS Backup to create a backup plan with a rule that takes a daily backup and replicates it to another Region. Assign the EFS file system resource to the backup plan.

Explanation

Amazon EFS is a shared, elastic NFS file system that multiple instances can mount concurrently across AZs. AWS Backup centrally automates and manages backups across AWS services. This option delivers the requirement at the lowest cost.

SAA-C03 Question 843

Single page →
Topic 1 · Question 843

An ecommerce company is migrating its on-premises workload to the AWS Cloud. The workload currently consists of a web application and a backend Microsoft SQL database for storage. The company expects a high volume of customers during a promotional event. The new infrastructure in the AWS Cloud must be highly available and scalable. Which solution will meet these requirements with the LEAST administrative overhead?

  • AMigrate the web application to two Amazon EC2 instances across two Availability Zones behind an Application Load Balancer. Migrate the database to Amazon RDS for Microsoft SQL Server with read replicas in both Availability Zones.
  • BMigrate the web application to an Amazon EC2 instance that runs in an Auto Scaling group across two Availability Zones behind an Application Load Balancer. Migrate the database to two EC2 instances across separate AWS Regions with database replication.
  • CMigrate the web application to Amazon EC2 instances that run in an Auto Scaling group across two Availability Zones behind an Application Load Balancer. Migrate the database to Amazon RDS with Multi-AZ deployment. (correct answer)
  • DMigrate the web application to three Amazon EC2 instances across three Availability Zones behind an Application Load Balancer. Migrate the database to three EC2 instances across three Availability Zones.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Migrate the web application to Amazon EC2 instances that run in an Auto Scaling group across two Availability Zones behind an Application Load Balancer. Migrate the database to Amazon RDS with Multi-AZ deployment.

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon RDS is a managed relational database that handles patching, backups and failover. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SAA-C03 Question 844

Single page →
Topic 1 · Question 844

A company has an on-premises business application that generates hundreds of files each day. These files are stored on an SMB file share and require a low-latency connection to the application servers. A new company policy states all application-generated files must be copied to AWS. There is already a VPN connection to AWS. The application development team does not have time to make the necessary code modifications to move the application to AWS. Which service should a solutions architect recommend to allow the application to copy files to AWS?

  • AAmazon Elastic File System (Amazon EFS)
  • BAmazon FSx for Windows File Server
  • CAWS Snowball
  • DAWS Storage Gateway (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: AWS Storage Gateway

Explanation

AWS Storage Gateway bridges on-premises apps to AWS storage with local caching. This option meets the real-time / low-latency performance requirement.

SAA-C03 Question 845

Single page →
Topic 1 · Question 845

A company has 15 employees. The company stores employee start dates in an Amazon DynamoDB table. The company wants to send an email message to each employee on the day of the employee's work anniversary. Which solution will meet these requirements with the MOST operational efficiency?

  • ACreate a script that scans the DynamoDB table and uses Amazon Simple Notification Service (Amazon SNS) to send email messages to employees when necessary. Use a cron job to run this script every day on an Amazon EC2 instance.
  • BCreate a script that scans the DynamoDB table and uses Amazon Simple Queue Service (Amazon SQS) to send email messages to employees when necessary. Use a cron job to run this script every day on an Amazon EC2 instance.
  • CCreate an AWS Lambda function that scans the DynamoDB table and uses Amazon Simple Notification Service (Amazon SNS) to send email messages to employees when necessary. Schedule this Lambda function to run every day. (correct answer)
  • DCreate an AWS Lambda function that scans the DynamoDB table and uses Amazon Simple Queue Service (Amazon SQS) to send email messages to employees when necessary. Schedule this Lambda function to run every day.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create an AWS Lambda function that scans the DynamoDB table and uses Amazon Simple Notification Service (Amazon SNS) to send email messages to employees when necessary. Schedule this Lambda function to run every day.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon DynamoDB is a fully managed, serverless NoSQL database with single-digit millisecond latency and automatic scaling. Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers.

SAA-C03 Question 846

Single page →
Topic 1 · Question 846

A company’s application is running on Amazon EC2 instances within an Auto Scaling group behind an Elastic Load Balancing (ELB) load balancer. Based on the application's history, the company anticipates a spike in traffic during a holiday each year. A solutions architect must design a strategy to ensure that the Auto Scaling group proactively increases capacity to minimize any performance impact on application users. Which solution will meet these requirements?

  • ACreate an Amazon CloudWatch alarm to scale up the EC2 instances when CPU utilization exceeds 90%.
  • BCreate a recurring scheduled action to scale up the Auto Scaling group before the expected period of peak demand. (correct answer)
  • CIncrease the minimum and maximum number of EC2 instances in the Auto Scaling group during the peak demand period.
  • DConfigure an Amazon Simple Notification Service (Amazon SNS) notification to send alerts when there are autoscaling:EC2_INSTANCE_LAUNCH events.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create a recurring scheduled action to scale up the Auto Scaling group before the expected period of peak demand.

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. This option decouples the components so they scale independently and absorb load spikes.

SAA-C03 Question 847

Single page →
Topic 1 · Question 847

A company uses Amazon RDS for PostgreSQL databases for its data tier. The company must implement password rotation for the databases. Which solution meets this requirement with the LEAST operational overhead?

  • AStore the password in AWS Secrets Manager. Enable automatic rotation on the secret. (correct answer)
  • BStore the password in AWS Systems Manager Parameter Store. Enable automatic rotation on the parameter.
  • CStore the password in AWS Systems Manager Parameter Store. Write an AWS Lambda function that rotates the password.
  • DStore the password in AWS Key Management Service (AWS KMS). Enable automatic rotation on the AWS KMS key.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Store the password in AWS Secrets Manager. Enable automatic rotation on the secret.

Explanation

AWS Secrets Manager stores and automatically rotates secrets such as database credentials.

SAA-C03 Question 848

Single page →
Topic 1 · Question 848

A company runs its application on Oracle Database Enterprise Edition. The company needs to migrate the application and the database to AWS. The company can use the Bring Your Own License (BYOL) model while migrating to AWS. The application uses third-party database features that require privileged access. A solutions architect must design a solution for the database migration. Which solution will meet these requirements MOST cost-effectively?

  • AMigrate the database to Amazon RDS for Oracle by using native tools. Replace the third-party features with AWS Lambda.
  • BMigrate the database to Amazon RDS Custom for Oracle by using native tools. Customize the new database settings to support the third-party features. (correct answer)
  • CMigrate the database to Amazon DynamoDB by using AWS Database Migration Service (AWS DMS). Customize the new database settings to support the third-party features.
  • DMigrate the database to Amazon RDS for PostgreSQL by using AWS Database Migration Service (AWS DMS). Rewrite the application code to remove the dependency on third-party features.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Migrate the database to Amazon RDS Custom for Oracle by using native tools. Customize the new database settings to support the third-party features.

Explanation

Amazon RDS is a managed relational database that handles patching, backups and failover. This option delivers the requirement at the lowest cost.

SAA-C03 Question 849

Single page →
Topic 1 · Question 849

A large international university has deployed all of its compute services in the AWS Cloud. These services include Amazon EC2, Amazon RDS, and Amazon DynamoDB. The university currently relies on many custom scripts to back up its infrastructure. However, the university wants to centralize management and automate data backups as much as possible by using AWS native options. Which solution will meet these requirements?

  • AUse third-party backup software with an AWS Storage Gateway tape gateway virtual tape library.
  • BUse AWS Backup to configure and monitor all backups for the services in use. (correct answer)
  • CUse AWS Config to set lifecycle management to take snapshots of all data sources on a schedule.
  • DUse AWS Systems Manager State Manager to manage the configuration and monitoring of backup tasks.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use AWS Backup to configure and monitor all backups for the services in use.

Explanation

AWS Backup centrally automates and manages backups across AWS services. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 850

Single page →
Topic 1 · Question 850

A company wants to build a map of its IT infrastructure to identify and enforce policies on resources that pose security risks. The company's security team must be able to query data in the IT infrastructure map and quickly identify security risks. Which solution will meet these requirements with the LEAST operational overhead?

  • AUse Amazon RDS to store the data. Use SQL to query the data to identify security risks.
  • BUse Amazon Neptune to store the data. Use SPARQL to query the data to identify security risks. (correct answer)
  • CUse Amazon Redshift to store the data. Use SQL to query the data to identify security risks.
  • DUse Amazon DynamoDB to store the data. Use PartiQL to query the data to identify security risks.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use Amazon Neptune to store the data. Use SPARQL to query the data to identify security risks.

Explanation

Amazon Neptune is a managed graph database for highly connected data.

SAA-C03 Question 851

Single page →
Topic 1 · Question 851

A large company wants to provide its globally located developers separate, limited size, managed PostgreSQL databases for development purposes. The databases will be low volume. The developers need the databases only when they are actively working. Which solution will meet these requirements MOST cost-effectively?

  • AGive the developers the ability to launch separate Amazon Aurora instances. Set up a process to shut down Aurora instances at the end of the workday and to start Aurora instances at the beginning of the next workday.
  • BDevelop an AWS Service Catalog product that enforces size restrictions for launching Amazon Aurora instances. Give the developers access to launch the product when they need a development database.
  • CCreate an Amazon Aurora Serverless cluster. Develop an AWS Service Catalog product to launch databases in the cluster with the default capacity settings. Grant the developers access to the product. (correct answer)
  • DMonitor AWS Trusted Advisor checks for idle Amazon RDS databases. Create a process to terminate identified idle RDS databases.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create an Amazon Aurora Serverless cluster. Develop an AWS Service Catalog product to launch databases in the cluster with the default capacity settings. Grant the developers access to the product.

Explanation

Aurora Serverless auto-scales database capacity and is cost-effective for variable workloads. Amazon Aurora is a high-performance managed relational database with built-in replication and failover. This option delivers the requirement at the lowest cost.

SAA-C03 Question 852

Single page →
Topic 1 · Question 852

A company is building a web application that serves a content management system. The content management system runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The EC2 instances run in an Auto Scaling group across multiple Availability Zones. Users are constantly adding and updating files, blogs, and other website assets in the content management system. A solutions architect must implement a solution in which all the EC2 instances share up-to-date website content with the least possible lag time. Which solution meets these requirements?

  • AUpdate the EC2 user data in the Auto Scaling group lifecycle policy to copy the website assets from the EC2 instance that was launched most recently. Configure the ALB to make changes to the website assets only in the newest EC2 instance.
  • BCopy the website assets to an Amazon Elastic File System (Amazon EFS) file system. Configure each EC2 instance to mount the EFS file system locally. Configure the website hosting application to reference the website assets that are stored in the EFS file system. (correct answer)
  • CCopy the website assets to an Amazon S3 bucket. Ensure that each EC2 instance downloads the website assets from the S3 bucket to the attached Amazon Elastic Block Store (Amazon EBS) volume. Run the S3 sync command once each hour to keep files up to date.
  • DRestore an Amazon Elastic Block Store (Amazon EBS) snapshot with the website assets. Attach the EBS snapshot as a secondary EBS volume when a new EC2 instance is launched. Configure the website hosting application to reference the website assets that are stored in the secondary EBS volume.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Copy the website assets to an Amazon Elastic File System (Amazon EFS) file system. Configure each EC2 instance to mount the EFS file system locally. Configure the website hosting application to reference the website a...

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon EFS is a shared, elastic NFS file system that multiple instances can mount concurrently across AZs. Amazon EBS provides block storage attached to a single EC2 instance. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SAA-C03 Question 853

Single page →
Topic 1 · Question 853

A company's web application consists of multiple Amazon EC2 instances that run behind an Application Load Balancer in a VPC. An Amazon RDS for MySQL DB instance contains the data. The company needs the ability to automatically detect and respond to suspicious or unexpected behavior in its AWS environment. The company already has added AWS WAF to its architecture. What should a solutions architect do next to protect against threats?

  • AUse Amazon GuardDuty to perform threat detection. Configure Amazon EventBridge to filter for GuardDuty findings and to invoke an AWS Lambda function to adjust the AWS WAF rules. (correct answer)
  • BUse AWS Firewall Manager to perform threat detection. Configure Amazon EventBridge to filter for Firewall Manager findings and to invoke an AWS Lambda function to adjust the AWS WAF web ACL.
  • CUse Amazon Inspector to perform threat detection and to update the AWS WAF rules. Create a VPC network ACL to limit access to the web application.
  • DUse Amazon Macie to perform threat detection and to update the AWS WAF rules. Create a VPC network ACL to limit access to the web application.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use Amazon GuardDuty to perform threat detection. Configure Amazon EventBridge to filter for GuardDuty findings and to invoke an AWS Lambda function to adjust the AWS WAF rules.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon EventBridge routes events between services with rules, enabling event-driven, decoupled architectures. AWS WAF protects web applications from common exploits and malicious requests.

SAA-C03 Question 854

Single page →
Topic 1 · Question 854

A company is planning to run a group of Amazon EC2 instances that connect to an Amazon Aurora database. The company has built an AWS CloudFormation template to deploy the EC2 instances and the Aurora DB cluster. The company wants to allow the instances to authenticate to the database in a secure way. The company does not want to maintain static database credentials. Which solution meets these requirements with the LEAST operational effort?

  • ACreate a database user with a user name and password. Add parameters for the database user name and password to the CloudFormation template. Pass the parameters to the EC2 instances when the instances are launched.
  • BCreate a database user with a user name and password. Store the user name and password in AWS Systems Manager Parameter Store. Configure the EC2 instances to retrieve the database credentials from Parameter Store.
  • CConfigure the DB cluster to use IAM database authentication. Create a database user to use with IAM authentication. Associate a role with the EC2 instances to allow applications on the instances to access the database. (correct answer)
  • DConfigure the DB cluster to use IAM database authentication with an IAM user. Create a database user that has a name that matches the IAM user. Associate the IAM user with the EC2 instances to allow applications on the instances to access the database.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Configure the DB cluster to use IAM database authentication. Create a database user to use with IAM authentication. Associate a role with the EC2 instances to allow applications on the instances to access the database.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 855

Single page →
Topic 1 · Question 855

A company wants to configure its Amazon CloudFront distribution to use SSL/TLS certificates. The company does not want to use the default domain name for the distribution. Instead, the company wants to use a different domain name for the distribution. Which solution will deploy the certificate without incurring any additional costs?

  • ARequest an Amazon issued private certificate from AWS Certificate Manager (ACM) in the us-east-1 Region.
  • BRequest an Amazon issued private certificate from AWS Certificate Manager (ACM) in the us-west-1 Region.
  • CRequest an Amazon issued public certificate from AWS Certificate Manager (ACM) in the us-east-1 Region. (correct answer)
  • DRequest an Amazon issued public certificate from AWS Certificate Manager (ACM) in the us-west-1 Region.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Request an Amazon issued public certificate from AWS Certificate Manager (ACM) in the us-east-1 Region.

Explanation

AWS Certificate Manager provisions and renews TLS certificates automatically.

SAA-C03 Question 856

Single page →
Topic 1 · Question 856

A company creates operations data and stores the data in an Amazon S3 bucket. For the company's annual audit, an external consultant needs to access an annual report that is stored in the S3 bucket. The external consultant needs to access the report for 7 days. The company must implement a solution to allow the external consultant access to only the report. Which solution will meet these requirements with the MOST operational efficiency?

  • ACreate a new S3 bucket that is configured to host a public static website. Migrate the operations data to the new S3 bucket. Share the S3 website URL with the external consultant.
  • BEnable public access to the S3 bucket for 7 days. Remove access to the S3 bucket when the external consultant completes the audit.
  • CCreate a new IAM user that has access to the report in the S3 bucket. Provide the access keys to the external consultant. Revoke the access keys after 7 days.
  • DGenerate a presigned URL that has the required access to the location of the report on the S3 bucket. Share the presigned URL with the external consultant. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Generate a presigned URL that has the required access to the location of the report on the S3 bucket. Share the presigned URL with the external consultant.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed.

SAA-C03 Question 857

Single page →
Topic 1 · Question 857

A company plans to run a high performance computing (HPC) workload on Amazon EC2 Instances. The workload requires low-latency network performance and high network throughput with tightly coupled node-to-node communication. Which solution will meet these requirements?

  • AConfigure the EC2 instances to be part of a cluster placement group. (correct answer)
  • BLaunch the EC2 instances with Dedicated Instance tenancy.
  • CLaunch the EC2 instances as Spot Instances.
  • DConfigure an On-Demand Capacity Reservation when the EC2 instances are launched.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Configure the EC2 instances to be part of a cluster placement group.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. AWS Config tracks resource configuration changes and evaluates compliance. This option meets the real-time / low-latency performance requirement.

SAA-C03 Question 858

Single page →
Topic 1 · Question 858

A company has primary and secondary data centers that are 500 miles (804.7 km) apart and interconnected with high-speed fiber-optic cable. The company needs a highly available and secure network connection between its data centers and a VPC on AWS for a mission-critical workload. A solutions architect must choose a connection solution that provides maximum resiliency. Which solution meets these requirements?

  • ATwo AWS Direct Connect connections from the primary data center terminating at two Direct Connect locations on two separate devices
  • BA single AWS Direct Connect connection from each of the primary and secondary data centers terminating at one Direct Connect location on the same device
  • CTwo AWS Direct Connect connections from each of the primary and secondary data centers terminating at two Direct Connect locations on two separate devices (correct answer)
  • DA single AWS Direct Connect connection from each of the primary and secondary data centers terminating at one Direct Connect location on two separate devices
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Two AWS Direct Connect connections from each of the primary and secondary data centers terminating at two Direct Connect locations on two separate devices

Explanation

AWS Direct Connect provides a dedicated, consistent private network link between on premises and AWS. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SAA-C03 Question 859

Single page →
Topic 1 · Question 859 · Select all that apply

A company runs several Amazon RDS for Oracle On-Demand DB instances that have high utilization. The RDS DB instances run in member accounts that are in an organization in AWS Organizations. The company's finance team has access to the organization's management account and member accounts. The finance team wants to find ways to optimize costs by using AWS Trusted Advisor. Which combination of steps will meet these requirements? (Choose two.)

  • AUse the Trusted Advisor recommendations in the management account. (correct answer)
  • BUse the Trusted Advisor recommendations in the member accounts where the RDS DB instances are running.
  • CReview the Trusted Advisor checks for Amazon RDS Reserved Instance Optimization. (correct answer)
  • DReview the Trusted Advisor checks for Amazon RDS Idle DB Instances.
  • EReview the Trusted Advisor checks for compute optimization. Crosscheck the results by using AWS Compute Optimizer.
Reveal answer & explanation
Correct answer: A, C

The correct answer is A, C. Option A: Use the Trusted Advisor recommendations in the management account. Option C: Review the Trusted Advisor checks for Amazon RDS Reserved Instance Optimization.

Explanation

Amazon RDS is a managed relational database that handles patching, backups and failover. AWS Trusted Advisor recommends cost, performance and security optimizations.

SAA-C03 Question 860

Single page →
Topic 1 · Question 860

A solutions architect is creating an application. The application will run on Amazon EC2 instances in private subnets across multiple Availability Zones in a VPC. The EC2 instances will frequently access large files that contain confidential information. These files are stored in Amazon S3 buckets for processing. The solutions architect must optimize the network architecture to minimize data transfer costs. What should the solutions architect do to meet these requirements?

  • ACreate a gateway endpoint for Amazon S3 in the VPC. In the route tables for the private subnets, add an entry for the gateway endpoint. (correct answer)
  • BCreate a single NAT gateway in a public subnet. In the route tables for the private subnets, add a default route that points to the NAT gateway.
  • CCreate an AWS PrivateLink interface endpoint for Amazon S3 in the VPIn the route tables for the private subnets, add an entry for the interface endpoint.
  • DCreate one NAT gateway for each Availability Zone in public subnets. In each of the route tables for the private subnets, add a default route that points to the NAT gateway in the same Availability Zone.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create a gateway endpoint for Amazon S3 in the VPC. In the route tables for the private subnets, add an entry for the gateway endpoint.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

Showing questions 841–860 of 1019 · Page 43 of 51