🔍

SAA-C03 — questions

Page 45 of 51 · 1019 total questions.

SAA-C03 Question 881

Single page →
Topic 1 · Question 881 · Select all that apply

A company is hosting a high-traffic static website on Amazon S3 with an Amazon CloudFront distribution that has a default TTL of 0 seconds. The company wants to implement caching to improve performance for the website. However, the company also wants to ensure that stale content is not served for more than a few minutes after a deployment. Which combination of caching methods should a solutions architect implement to meet these requirements? (Choose two.)

  • ASet the CloudFront default TTL to 2 minutes. (correct answer)
  • BSet a default TTL of 2 minutes on the S3 bucket.
  • CAdd a Cache-Control private directive to the objects in Amazon S3.
  • DCreate an AWS Lambda@Edge function to add an Expires header to HTTP responses. Configure the function to run on viewer response.
  • EAdd a Cache-Control max-age directive of 24 hours to the objects in Amazon S3. On deployment, create a CloudFront invalidation to clear any changed files from edge caches. (correct answer)
Reveal answer & explanation
Correct answer: A, E

The correct answer is A, E. Option A: Set the CloudFront default TTL to 2 minutes. Option E: Add a Cache-Control max-age directive of 24 hours to the objects in Amazon S3. On deployment, create a CloudFront invalidation to clear any changed files from edge caches.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon CloudFront caches content at edge locations to reduce latency and offload origins.

SAA-C03 Question 882

Single page →
Topic 1 · Question 882

A company runs its application by using Amazon EC2 instances and AWS Lambda functions. The EC2 instances run in private subnets of a VPC. The Lambda functions need direct network access to the EC2 instances for the application to work. The application will run for 1 year. The number of Lambda functions that the application uses will increase during the 1-year period. The company must minimize costs on all application resources. Which solution will meet these requirements?

  • APurchase an EC2 Instance Savings Plan. Connect the Lambda functions to the private subnets that contain the EC2 instances.
  • BPurchase an EC2 Instance Savings Plan. Connect the Lambda functions to new public subnets in the same VPC where the EC2 instances run.
  • CPurchase a Compute Savings Plan. Connect the Lambda functions to the private subnets that contain the EC2 instances. (correct answer)
  • DPurchase a Compute Savings Plan. Keep the Lambda functions in the Lambda service VPC.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Purchase a Compute Savings Plan. Connect the Lambda functions to the private subnets that contain the EC2 instances.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon EC2 provides resizable virtual servers when you need full control of the operating system. This option delivers the requirement at the lowest cost.

SAA-C03 Question 883

Single page →
Topic 1 · Question 883

A company has deployed a multi-account strategy on AWS by using AWS Control Tower. The company has provided individual AWS accounts to each of its developers. The company wants to implement controls to limit AWS resource costs that the developers incur. Which solution will meet these requirements with the LEAST operational overhead?

  • AInstruct each developer to tag all their resources with a tag that has a key of CostCenter and a value of the developer's name. Use the required-tags AWS Config managed rule to check for the tag. Create an AWS Lambda function to terminate resources that do not have the tag. Configure AWS Cost Explorer to send a daily report to each developer to monitor their spending.
  • BUse AWS Budgets to establish budgets for each developer account. Set up budget alerts for actual and forecast values to notify developers when they exceed or expect to exceed their assigned budget. Use AWS Budgets actions to apply a DenyAll policy to the developer's IAM role to prevent additional resources from being launched when the assigned budget is reached. (correct answer)
  • CUse AWS Cost Explorer to monitor and report on costs for each developer account. Configure Cost Explorer to send a daily report to each developer to monitor their spending. Use AWS Cost Anomaly Detection to detect anomalous spending and provide alerts.
  • DUse AWS Service Catalog to allow developers to launch resources within a limited cost range. Create AWS Lambda functions in each AWS account to stop running resources at the end of each work day. Configure the Lambda functions to resume the resources at the start of each work day.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use AWS Budgets to establish budgets for each developer account. Set up budget alerts for actual and forecast values to notify developers when they exceed or expect to exceed their assigned budget. Use AWS Budgets act...

Explanation

Amazon Forecast produces time-series forecasts using machine learning. An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

SAA-C03 Question 884

Single page →
Topic 1 · Question 884 · Select all that apply

A solutions architect is designing a three-tier web application. The architecture consists of an internet-facing Application Load Balancer (ALB) and a web tier that is hosted on Amazon EC2 instances in private subnets. The application tier with the business logic runs on EC2 instances in private subnets. The database tier consists of Microsoft SQL Server that runs on EC2 instances in private subnets. Security is a high priority for the company. Which combination of security group configurations should the solutions architect use? (Choose three.)

  • AConfigure the security group for the web tier to allow inbound HTTPS traffic from the security group for the ALB. (correct answer)
  • BConfigure the security group for the web tier to allow outbound HTTPS traffic to 0.0.0.0/0.
  • CConfigure the security group for the database tier to allow inbound Microsoft SQL Server traffic from the security group for the application tier. (correct answer)
  • DConfigure the security group for the database tier to allow outbound HTTPS traffic and Microsoft SQL Server traffic to the security group for the web tier.
  • EConfigure the security group for the application tier to allow inbound HTTPS traffic from the security group for the web tier. (correct answer)
  • FConfigure the security group for the application tier to allow outbound HTTPS traffic and Microsoft SQL Server traffic to the security group for the web tier.
Reveal answer & explanation
Correct answer: A, C, E

The correct answer is A, C, E. Option A: Configure the security group for the web tier to allow inbound HTTPS traffic from the security group for the ALB. Option C: Configure the security group for the database tier to allow inbound Microsoft SQL Server traffic from the security group for the application tier. Option E: Configure the security group for the application tier to allow inbound HTTPS traffic from the security group for the web tier.

Explanation

AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 885

Single page →
Topic 1 · Question 885 · Select all that apply

A company has released a new version of its production application. The company's workload uses Amazon EC2, AWS Lambda, AWS Fargate, and Amazon SageMaker. The company wants to cost optimize the workload now that usage is at a steady state. The company wants to cover the most services with the fewest savings plans. Which combination of savings plans will meet these requirements? (Choose two.)

  • APurchase an EC2 Instance Savings Plan for Amazon EC2 and SageMaker.
  • BPurchase a Compute Savings Plan for Amazon EC2, Lambda, and SageMaker.
  • CPurchase a SageMaker Savings Plan. (correct answer)
  • DPurchase a Compute Savings Plan for Lambda, Fargate, and Amazon EC2. (correct answer)
  • EPurchase an EC2 Instance Savings Plan for Amazon EC2 and Fargate.
Reveal answer & explanation
Correct answer: C, D

The correct answer is C, D. Option C: Purchase a SageMaker Savings Plan. Option D: Purchase a Compute Savings Plan for Lambda, Fargate, and Amazon EC2.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. AWS Fargate runs containers serverlessly so there are no EC2 hosts to manage or patch. Amazon EC2 provides resizable virtual servers when you need full control of the operating system.

SAA-C03 Question 886

Single page →
Topic 1 · Question 886 · Select all that apply

A company uses a Microsoft SQL Server database. The company's applications are connected to the database. The company wants to migrate to an Amazon Aurora PostgreSQL database with minimal changes to the application code. Which combination of steps will meet these requirements? (Choose two.)

  • AUse the AWS Schema Conversion Tool (AWS SCT) to rewrite the SQL queries in the applications.
  • BEnable Babelfish on Aurora PostgreSQL to run the SQL queries from the applications. (correct answer)
  • CMigrate the database schema and data by using the AWS Schema Conversion Tool (AWS SCT) and AWS Database Migration Service (AWS DMS). (correct answer)
  • DUse Amazon RDS Proxy to connect the applications to Aurora PostgreSQL.
  • EUse AWS Database Migration Service (AWS DMS) to rewrite the SQL queries in the applications.
Reveal answer & explanation
Correct answer: B, C

The correct answer is B, C. Option B: Enable Babelfish on Aurora PostgreSQL to run the SQL queries from the applications. Option C: Migrate the database schema and data by using the AWS Schema Conversion Tool (AWS SCT) and AWS Database Migration Service (AWS DMS).

Explanation

Amazon Aurora is a high-performance managed relational database with built-in replication and failover. AWS Database Migration Service migrates databases with minimal downtime.

SAA-C03 Question 887

Single page →
Topic 1 · Question 887

A company plans to rehost an application to Amazon EC2 instances that use Amazon Elastic Block Store (Amazon EBS) as the attached storage. A solutions architect must design a solution to ensure that all newly created Amazon EBS volumes are encrypted by default. The solution must also prevent the creation of unencrypted EBS volumes. Which solution will meet these requirements?

  • AConfigure the EC2 account attributes to always encrypt new EBS volumes. (correct answer)
  • BUse AWS Config. Configure the encrypted-volumes identifier. Apply the default AWS Key Management Service (AWS KMS) key.
  • CConfigure AWS Systems Manager to create encrypted copies of the EBS volumes. Reconfigure the EC2 instances to use the encrypted volumes.
  • DCreate a customer managed key in AWS Key Management Service (AWS KMS). Configure AWS Migration Hub to use the key when the company migrates workloads.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Configure the EC2 account attributes to always encrypt new EBS volumes.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon EBS provides block storage attached to a single EC2 instance. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 888

Single page →
Topic 1 · Question 888

An ecommerce company wants to collect user clickstream data from the company's website for real-time analysis. The website experiences fluctuating traffic patterns throughout the day. The company needs a scalable solution that can adapt to varying levels of traffic. Which solution will meet these requirements?

  • AUse a data stream in Amazon Kinesis Data Streams in on-demand mode to capture the clickstream data. Use AWS Lambda to process the data in real time. (correct answer)
  • BUse Amazon Kinesis Data Firehose to capture the clickstream data. Use AWS Glue to process the data in real time.
  • CUse Amazon Kinesis Video Streams to capture the clickstream data. Use AWS Glue to process the data in real time.
  • DUse Amazon Managed Service for Apache Flink (previously known as Amazon Kinesis Data Analytics) to capture the clickstream data. Use AWS Lambda to process the data in real time.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use a data stream in Amazon Kinesis Data Streams in on-demand mode to capture the clickstream data. Use AWS Lambda to process the data in real time.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Kinesis Data Streams ingests and processes high-volume real-time streaming data. Amazon Kinesis ingests and processes real-time streaming data at scale. This option meets the real-time / low-latency performance requirement.

SAA-C03 Question 889

Single page →
Topic 1 · Question 889

A global company runs its workloads on AWS. The company's application uses Amazon S3 buckets across AWS Regions for sensitive data storage and analysis. The company stores millions of objects in multiple S3 buckets daily. The company wants to identify all S3 buckets that are not versioning-enabled. Which solution will meet these requirements?

  • ASet up an AWS CloudTrail event that has a rule to identify all S3 buckets that are not versioning-enabled across Regions.
  • BUse Amazon S3 Storage Lens to identify all S3 buckets that are not versioning-enabled across Regions. (correct answer)
  • CEnable IAM Access Analyzer for S3 to identify all S3 buckets that are not versioning-enabled across Regions.
  • DCreate an S3 Multi-Region Access Point to identify all S3 buckets that are not versioning-enabled across Regions.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use Amazon S3 Storage Lens to identify all S3 buckets that are not versioning-enabled across Regions.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed.

SAA-C03 Question 890

Single page →
Topic 1 · Question 890

A company needs to optimize its Amazon S3 storage costs for an application that generates many files that cannot be recreated. Each file is approximately 5 MB and is stored in Amazon S3 Standard storage. The company must store the files for 4 years before the files can be deleted. The files must be immediately accessible. The files are frequently accessed in the first 30 days of object creation, but they are rarely accessed after the first 30 days. Which solution will meet these requirements MOST cost-effectively?

  • ACreate an S3 Lifecycle policy to move the files to S3 Glacier Instant Retrieval 30 days after object creation. Delete the files 4 years after object creation. (correct answer)
  • BCreate an S3 Lifecycle policy to move the files to S3 One Zone-Infrequent Access (S3 One Zone-IA) 30 days after object creation. Delete the files 4 years after object creation.
  • CCreate an S3 Lifecycle policy to move the files to S3 Standard-Infrequent Access (S3 Standard-IA) 30 days after object creation. Delete the files 4 years after object creation.
  • DCreate an S3 Lifecycle policy to move the files to S3 Standard-Infrequent Access (S3 Standard-IA) 30 days after object creation. Move the files to S3 Glacier Flexible Retrieval 4 years after object creation.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create an S3 Lifecycle policy to move the files to S3 Glacier Instant Retrieval 30 days after object creation. Delete the files 4 years after object creation.

Explanation

Amazon S3 Glacier offers low-cost archival storage for infrequently accessed data. S3 Lifecycle policies automatically transition or expire objects to control storage cost. Amazon S3 provides durable, scalable object storage that is fully managed. This option delivers the requirement at the lowest cost.

SAA-C03 Question 891

Single page →
Topic 1 · Question 891

A company runs its critical storage application in the AWS Cloud. The application uses Amazon S3 in two AWS Regions. The company wants the application to send remote user data to the nearest S3 bucket with no public network congestion. The company also wants the application to fail over with the least amount of management of Amazon S3. Which solution will meet these requirements?

  • AImplement an active-active design between the two Regions. Configure the application to use the regional S3 endpoints closest to the user.
  • BUse an active-passive configuration with S3 Multi-Region Access Points. Create a global endpoint for each of the Regions.
  • CSend user data to the regional S3 endpoints closest to the user. Configure an S3 cross-account replication rule to keep the S3 buckets synchronized.
  • DSet up Amazon S3 to use Multi-Region Access Points in an active-active configuration with a single global endpoint. Configure S3 Cross-Region Replication. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Set up Amazon S3 to use Multi-Region Access Points in an active-active configuration with a single global endpoint. Configure S3 Cross-Region Replication.

Explanation

S3 Cross-Region Replication asynchronously copies objects to another Region for compliance or latency. Amazon S3 provides durable, scalable object storage that is fully managed. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 892

Single page →
Topic 1 · Question 892

A company is migrating a data center from its on-premises location to AWS. The company has several legacy applications that are hosted on individual virtual servers. Changes to the application designs cannot be made. Each individual virtual server currently runs as its own EC2 instance. A solutions architect needs to ensure that the applications are reliable and fault tolerant after migration to AWS. The applications will run on Amazon EC2 instances. Which solution will meet these requirements?

  • ACreate an Auto Scaling group that has a minimum of one and a maximum of one. Create an Amazon Machine Image (AMI) of each application instance. Use the AMI to create EC2 instances in the Auto Scaling group Configure an Application Load Balancer in front of the Auto Scaling group. (correct answer)
  • BUse AWS Backup to create an hourly backup of the EC2 instance that hosts each application. Store the backup in Amazon S3 in a separate Availability Zone. Configure a disaster recovery process to restore the EC2 instance for each application from its most recent backup.
  • CCreate an Amazon Machine Image (AMI) of each application instance. Launch two new EC2 instances from the AMI. Place each EC2 instance in a separate Availability Zone. Configure a Network Load Balancer that has the EC2 instances as targets.
  • DUse AWS Mitigation Hub Refactor Spaces to migrate each application off the EC2 instance. Break down functionality from each application into individual components. Host each application on Amazon Elastic Container Service (Amazon ECS) with an AWS Fargate launch type.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create an Auto Scaling group that has a minimum of one and a maximum of one. Create an Amazon Machine Image (AMI) of each application instance. Use the AMI to create EC2 instances in the Auto Scaling group Configure a...

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Amazon EC2 provides resizable virtual servers when you need full control of the operating system. An Application Load Balancer distributes HTTP/HTTPS traffic and supports path/host routing. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SAA-C03 Question 893

Single page →
Topic 1 · Question 893

A company wants to isolate its workloads by creating an AWS account for each workload. The company needs a solution that centrally manages networking components for the workloads. The solution also must create accounts with automatic security controls (guardrails). Which solution will meet these requirements with the LEAST operational overhead?

  • AUse AWS Control Tower to deploy accounts. Create a networking account that has a VPC with private subnets and public subnets. Use AWS Resource Access Manager (AWS RAM) to share the subnets with the workload accounts. (correct answer)
  • BUse AWS Organizations to deploy accounts. Create a networking account that has a VPC with private subnets and public subnets. Use AWS Resource Access Manager (AWS RAM) to share the subnets with the workload accounts.
  • CUse AWS Control Tower to deploy accounts. Deploy a VPC in each workload account. Configure each VPC to route through an inspection VPC by using a transit gateway attachment.
  • DUse AWS Organizations to deploy accounts. Deploy a VPC in each workload account. Configure each VPC to route through an inspection VPC by using a transit gateway attachment.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use AWS Control Tower to deploy accounts. Create a networking account that has a VPC with private subnets and public subnets. Use AWS Resource Access Manager (AWS RAM) to share the subnets with the workload accounts.

Explanation

AWS Control Tower sets up and governs a secure multi-account landing zone.

SAA-C03 Question 894

Single page →
Topic 1 · Question 894

A company hosts a website on Amazon EC2 instances behind an Application Load Balancer (ALB). The website serves static content. Website traffic is increasing. The company wants to minimize the website hosting costs. Which solution will meet these requirements?

  • AMove the website to an Amazon S3 bucket. Configure an Amazon CloudFront distribution for the S3 bucket. (correct answer)
  • BMove the website to an Amazon S3 bucket. Configure an Amazon ElastiCache cluster for the S3 bucket.
  • CMove the website to AWS Amplify. Configure an ALB to resolve to the Amplify website.
  • DMove the website to AWS Amplify. Configure EC2 instances to cache the website.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Move the website to an Amazon S3 bucket. Configure an Amazon CloudFront distribution for the S3 bucket.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon EBS provides block storage attached to a single EC2 instance. Amazon CloudFront caches content at edge locations to reduce latency and offload origins.

SAA-C03 Question 895

Single page →
Topic 1 · Question 895

A company is implementing a shared storage solution for a media application that the company hosts on AWS. The company needs the ability to use SMB clients to access stored data. Which solution will meet these requirements with the LEAST administrative overhead?

  • ACreate an AWS Storage Gateway Volume Gateway. Create a file share that uses the required client protocol. Connect the application server to the file share.
  • BCreate an AWS Storage Gateway Tape Gateway. Configure tapes to use Amazon S3. Connect the application server to the Tape Gateway.
  • CCreate an Amazon EC2 Windows instance. Install and configure a Windows file share role on the instance. Connect the application server to the file share.
  • DCreate an Amazon FSx for Windows File Server file system. Connect the application server to the file system. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Create an Amazon FSx for Windows File Server file system. Connect the application server to the file system.

Explanation

Amazon FSx for Windows File Server provides fully managed SMB/Windows shared file storage. Amazon FSx provides fully managed third-party file systems.

SAA-C03 Question 896

Single page →
Topic 1 · Question 896

A company is designing its production application's disaster recovery (DR) strategy. The application is backed by a MySQL database on an Amazon Aurora cluster in the us-east-1 Region. The company has chosen the us-west-1 Region as its DR Region. The company's target recovery point objective (RPO) is 5 minutes and the target recovery time objective (RTO) is 20 minutes. The company wants to minimize configuration changes. Which solution will meet these requirements with the MOST operational efficiency?

  • ACreate an Aurora read replica in us-west-1 similar in size to the production application's Aurora MySQL cluster writer instance.
  • BConvert the Aurora cluster to an Aurora global database. Configure managed failover. (correct answer)
  • CCreate a new Aurora cluster in us-west-1 that has Cross-Region Replication.
  • DCreate a new Aurora cluster in us-west-1. Use AWS Database Migration Service (AWS DMS) to sync both clusters.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Convert the Aurora cluster to an Aurora global database. Configure managed failover.

Explanation

Amazon Aurora is a high-performance managed relational database with built-in replication and failover. AWS Config tracks resource configuration changes and evaluates compliance. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SAA-C03 Question 897

Single page →
Topic 1 · Question 897

A company runs a critical data analysis job each week before the first day of the work week. The job requires at least 1 hour to complete the analysis. The job is stateful and cannot tolerate interruptions. The company needs a solution to run the job on AWS. Which solution will meet these requirements?

  • ACreate a container for the job. Schedule the job to run as an AWS Fargate task on an Amazon Elastic Container Service (Amazon ECS) cluster by using Amazon EventBridge Scheduler. (correct answer)
  • BConfigure the job to run in an AWS Lambda function. Create a scheduled rule in Amazon EventBridge to invoke the Lambda function.
  • CConfigure an Auto Scaling group of Amazon EC2 Spot Instances that run Amazon Linux. Configure a crontab entry on the instances to run the analysis.
  • DConfigure an AWS DataSync task to run the job. Configure a cron expression to run the task on a schedule.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create a container for the job. Schedule the job to run as an AWS Fargate task on an Amazon Elastic Container Service (Amazon ECS) cluster by using Amazon EventBridge Scheduler.

Explanation

AWS Fargate runs containers serverlessly so there are no EC2 hosts to manage or patch. Amazon ECS orchestrates containers and integrates natively with AWS networking and IAM. Amazon EventBridge routes events between services with rules, enabling event-driven, decoupled architectures.

SAA-C03 Question 898

Single page →
Topic 1 · Question 898

A company runs workloads in the AWS Cloud. The company wants to centrally collect security data to assess security across the entire company and to improve workload protection. Which solution will meet these requirements with the LEAST development effort?

  • AConfigure a data lake in AWS Lake Formation. Use AWS Glue crawlers to ingest the security data into the data lake.
  • BConfigure an AWS Lambda function to collect the security data in .csv format. Upload the data to an Amazon S3 bucket.
  • CConfigure a data lake in Amazon Security Lake to collect the security data. Upload the data to an Amazon S3 bucket. (correct answer)
  • DConfigure an AWS Database Migration Service (AWS DMS) replication instance to load the security data into an Amazon RDS cluster.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Configure a data lake in Amazon Security Lake to collect the security data. Upload the data to an Amazon S3 bucket.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 899

Single page →
Topic 1 · Question 899

A company is migrating five on-premises applications to VPCs in the AWS Cloud. Each application is currently deployed in isolated virtual networks on premises and should be deployed similarly in the AWS Cloud. The applications need to reach a shared services VPC. All the applications must be able to communicate with each other. If the migration is successful, the company will repeat the migration process for more than 100 applications. Which solution will meet these requirements with the LEAST administrative overhead?

  • ADeploy software VPN tunnels between the application VPCs and the shared services VPC. Add routes between the application VPCs in their subnets to the shared services VPC.
  • BDeploy VPC peering connections between the application VPCs and the shared services VPC. Add routes between the application VPCs in their subnets to the shared services VPC through the peering connection.
  • CDeploy an AWS Direct Connect connection between the application VPCs and the shared services VPAdd routes from the application VPCs in their subnets to the shared services VPC and the applications VPCs. Add routes from the shared services VPC subnets to the applications VPCs.
  • DDeploy a transit gateway with associations between the transit gateway and the application VPCs and the shared services VPC. Add routes between the application VPCs in their subnets and the application VPCs to the shared services VPC through the transit gateway. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Deploy a transit gateway with associations between the transit gateway and the application VPCs and the shared services VPC. Add routes between the application VPCs in their subnets and the application VPCs to the sha...

Explanation

AWS Transit Gateway centrally connects many VPCs and on-premises networks at scale.

SAA-C03 Question 900

Single page →
Topic 1 · Question 900 · Select all that apply

A company wants to use Amazon Elastic Container Service (Amazon ECS) to run its on-premises application in a hybrid environment. The application currently runs on containers on premises. The company needs a single container solution that can scale in an on-premises, hybrid, or cloud environment. The company must run new application containers in the AWS Cloud and must use a load balancer for HTTP traffic. Which combination of actions will meet these requirements? (Choose two.)

  • ASet up an ECS cluster that uses the AWS Fargate launch type for the cloud application containers. Use an Amazon ECS Anywhere external launch type for the on-premises application containers. (correct answer)
  • BSet up an Application Load Balancer for cloud ECS services. (correct answer)
  • CSet up a Network Load Balancer for cloud ECS services.
  • DSet up an ECS cluster that uses the AWS Fargate launch type. Use Fargate for the cloud application containers and the on-premises application containers.
  • ESet up an ECS cluster that uses the Amazon EC2 launch type for the cloud application containers. Use Amazon ECS Anywhere with an AWS Fargate launch type for the on-premises application containers.
Reveal answer & explanation
Correct answer: A, B

The correct answer is A, B. Option A: Set up an ECS cluster that uses the AWS Fargate launch type for the cloud application containers. Use an Amazon ECS Anywhere external launch type for the on-premises application containers. Option B: Set up an Application Load Balancer for cloud ECS services.

Explanation

AWS Fargate runs containers serverlessly so there are no EC2 hosts to manage or patch. Amazon ECS orchestrates containers and integrates natively with AWS networking and IAM. An Application Load Balancer distributes HTTP/HTTPS traffic and supports path/host routing.

Showing questions 881–900 of 1019 · Page 45 of 51