🔍

SAA-C03 — questions

Page 49 of 51 · 1019 total questions.

SAA-C03 Question 961

Single page →
Topic 1 · Question 961

A company uses AWS to host its public ecommerce website. The website uses an AWS Global Accelerator accelerator for traffic from the internet. The Global Accelerator accelerator forwards the traffic to an Application Load Balancer (ALB) that is the entry point for an Auto Scaling group. The company recently identified a DDoS attack on the website. The company needs a solution to mitigate future attacks. Which solution will meet these requirements with the LEAST implementation effort?

  • AConfigure an AWS WAF web ACL for the Global Accelerator accelerator to block traffic by using rate-based rules
  • BConfigure an AWS Lambda function to read the ALB metrics to block attacks by updating a VPC network ACL
  • CConfigure an AWS WAF web ACL on the ALB to block traffic by using rate-based rules (correct answer)
  • DConfigure an Amazon CloudFront distribution in front of the Global Accelerator accelerator
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Configure an AWS WAF web ACL on the ALB to block traffic by using rate-based rules

Explanation

AWS WAF protects web applications from common exploits and malicious requests. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 962

Single page →
Topic 1 · Question 962

A company uses an Amazon DynamoDB table to store data that the company receives from devices. The DynamoDB table supports a customer-facing website to display recent activity on customer devices. The company configured the table with provisioned throughput for writes and reads. The company wants to calculate performance metrics for customer device data on a daily basis. The solution must have minimal effect on the table's provisioned read and write capacity. Which solution will meet these requirements?

  • AUse an Amazon Athena SQL query with the Amazon Athena DynamoDB connector to calculate performance metrics on a recurring schedule.
  • BUse an AWS Glue job with the AWS Glue DynamoDB export connector to calculate performance metrics on a recurring schedule. (correct answer)
  • CUse an Amazon Redshift COPY command to calculate performance metrics on a recurring schedule.
  • DUse an Amazon EMR job with an Apache Hive external table to calculate performance metrics on a recurring schedule.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use an AWS Glue job with the AWS Glue DynamoDB export connector to calculate performance metrics on a recurring schedule.

Explanation

Amazon DynamoDB is a fully managed, serverless NoSQL database with single-digit millisecond latency and automatic scaling. AWS Glue is a serverless ETL and data-catalog service that prepares and integrates data.

SAA-C03 Question 963

Single page →
Topic 1 · Question 963

A solutions architect is designing the cloud architecture for a new stateless application that will be deployed on AWS. The solutions architect created an Amazon Machine Image (AMI) and launch template for the application. Based on the number of jobs that need to be processed, the processing must run in parallel while adding and removing application Amazon EC2 instances as needed. The application must be loosely coupled. The job items must be durably stored. Which solution will meet these requirements?

  • ACreate an Amazon Simple Notification Service (Amazon SNS) topic to send the jobs that need to be processed. Create an Auto Scaling group by using the launch template with the scaling policy set to add and remove EC2 instances based on CPU usage.
  • BCreate an Amazon Simple Queue Service (Amazon SQS) queue to hold the jobs that need to be processed. Create an Auto Scaling group by using the launch template with the scaling policy set to add and remove EC2 instances based on network usage.
  • CCreate an Amazon Simple Queue Service (Amazon SQS) queue to hold the jobs that need to be processed. Create an Auto Scaling group by using the launch template with the scaling policy set to add and remove EC2 instances based on the number of items in the SQS queue. (correct answer)
  • DCreate an Amazon Simple Notification Service (Amazon SNS) topic to send the jobs that need to be processed. Create an Auto Scaling group by using the launch template with the scaling policy set to add and remove EC2 instances based on the number of messages published to the SNS topic.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create an Amazon Simple Queue Service (Amazon SQS) queue to hold the jobs that need to be processed. Create an Auto Scaling group by using the launch template with the scaling policy set to add and remove EC2 instance...

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon SQS is a fully managed message queue that decouples components and absorbs traffic spikes. This option decouples the components so they scale independently and absorb load spikes.

SAA-C03 Question 964

Single page →
Topic 1 · Question 964

A global ecommerce company uses a monolithic architecture. The company needs a solution to manage the increasing volume of product data. The solution must be scalable and have a modular service architecture. The company needs to maintain its structured database schemas. The company also needs a storage solution to store product data and product images. Which solution will meet these requirements with the LEAST operational overhead?

  • AUse an Amazon EC2 instance in an Auto Scaling group to deploy a containerized application. Use an Application Load Balancer to distribute web traffic. Use an Amazon RDS DB instance to store product data and product images.
  • BUse AWS Lambda functions to manage the existing monolithic application. Use Amazon DynamoDB to store product data and product images. Use Amazon Simple Notification Service (Amazon SNS) for event-driven communication between the Lambda functions.
  • CUse Amazon Elastic Kubernetes Service (Amazon EKS) with an Amazon EC2 deployment to deploy a containerized application. Use an Amazon Aurora cluster to store the product data. Use AWS Step Functions to manage workflows. Store the product images in Amazon S3 Glacier Deep Archive.
  • DUse Amazon Elastic Container Service (Amazon ECS) with AWS Fargate to deploy a containerized application. Use Amazon RDS with a Multi-AZ deployment to store the product data. Store the product images in an Amazon S3 bucket. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Use Amazon Elastic Container Service (Amazon ECS) with AWS Fargate to deploy a containerized application. Use Amazon RDS with a Multi-AZ deployment to store the product data. Store the product images in an Amazon S3 b...

Explanation

AWS Fargate runs containers serverlessly so there are no EC2 hosts to manage or patch. Amazon ECS orchestrates containers and integrates natively with AWS networking and IAM. Amazon S3 provides durable, scalable object storage that is fully managed.

SAA-C03 Question 965

Single page →
Topic 1 · Question 965

A company is migrating an application from an on-premises environment to AWS. The application will store sensitive data in Amazon S3. The company must encrypt the data before storing the data in Amazon S3. Which solution will meet these requirements?

  • AEncrypt the data by using client-side encryption with customer managed keys. (correct answer)
  • BEncrypt the data by using server-side encryption with AWS KMS keys (SSE-KMS).
  • CEncrypt the data by using server-side encryption with customer-provided keys (SSE-C).
  • DEncrypt the data by using client-side encryption with Amazon S3 managed keys.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Encrypt the data by using client-side encryption with customer managed keys.

SAA-C03 Question 966

Single page →
Topic 1 · Question 966

A company wants to create an Amazon EMR cluster that multiple teams will use. The company wants to ensure that each team’s big data workloads can access only the AWS services that each team needs to interact with. The company does not want the workloads to have access to Instance Metadata Service Version 2 (IMDSv2) on the cluster’s underlying EC2 instances. Which solution will meet these requirements?

  • AConfigure interface VPC endpoints for each AWS service that the teams need. Use the required interface VPC endpoints to submit the big data workloads.
  • BCreate EMR runtime roles. Configure the cluster to use the runtime roles. Use the runtime roles to submit the big data workloads. (correct answer)
  • CCreate an EC2 IAM instance profile that has the required permissions for each team. Use the instance profile to submit the big data workloads.
  • DCreate an EMR security configuration that has the EnableApplicationScopedIAMRole option set to false. Use the security configuration to submit the big data workloads.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create EMR runtime roles. Configure the cluster to use the runtime roles. Use the runtime roles to submit the big data workloads.

Explanation

Amazon EMR runs big-data frameworks like Spark and Hadoop on managed clusters. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 967

Single page →
Topic 1 · Question 967

A solutions architect is designing an application that helps users fill out and submit registration forms. The solutions architect plans to use a two-tier architecture that includes a web application server tier and a worker tier. The application needs to process submitted forms quickly. The application needs to process each form exactly once. The solution must ensure that no data is lost. Which solution will meet these requirements?

  • AUse an Amazon Simple Queue Service (Amazon SQS) FIFO queue between the web application server tier and the worker tier to store and forward form data. (correct answer)
  • BUse an Amazon API Gateway HTTP API between the web application server tier and the worker tier to store and forward form data.
  • CUse an Amazon Simple Queue Service (Amazon SQS) standard queue between the web application server tier and the worker tier to store and forward form data.
  • DUse an AWS Step Functions workflow. Create a synchronous workflow between the web application server tier and the worker tier that stores and forwards form data.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use an Amazon Simple Queue Service (Amazon SQS) FIFO queue between the web application server tier and the worker tier to store and forward form data.

Explanation

Amazon SQS is a fully managed message queue that decouples components and absorbs traffic spikes.

SAA-C03 Question 968

Single page →
Topic 1 · Question 968

A finance company uses an on-premises search application to collect streaming data from various producers. The application provides real-time updates to search and visualization features. The company is planning to migrate to AWS and wants to use an AWS native solution. Which solution will meet these requirements?

  • AUse Amazon EC2 instances to ingest and process the data streams to Amazon S3 buckets tor storage. Use Amazon Athena to search the data. Use Amazon Managed Grafana to create visualizations.
  • BUse Amazon EMR to ingest and process the data streams to Amazon Redshift for storage. Use Amazon Redshift Spectrum to search the data. Use Amazon QuickSight to create visualizations.
  • CUse Amazon Elastic Kubernetes Service (Amazon EKS) to ingest and process the data streams to Amazon DynamoDB for storage. Use Amazon CloudWatch to create graphical dashboards to search and visualize the data.
  • DUse Amazon Kinesis Data Streams to ingest and process the data streams to Amazon OpenSearch Service. Use OpenSearch Service to search the data. Use Amazon QuickSight to create visualizations. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Use Amazon Kinesis Data Streams to ingest and process the data streams to Amazon OpenSearch Service. Use OpenSearch Service to search the data. Use Amazon QuickSight to create visualizations.

Explanation

Kinesis Data Streams ingests and processes high-volume real-time streaming data. Amazon Kinesis ingests and processes real-time streaming data at scale. Amazon QuickSight is a serverless business-intelligence and dashboard service. This option meets the real-time / low-latency performance requirement.

SAA-C03 Question 969

Single page →
Topic 1 · Question 969

A company currently runs an on-premises application that usesASP.NET on Linux machines. The application is resource-intensive and serves customers directly. The company wants to modernize the application to .NET. The company wants to run the application on containers and to scale based on Amazon CloudWatch metrics. The company also wants to reduce the time spent on operational maintenance activities. Which solution will meet these requirements with the LEAST operational overhead?

  • AUse AWS App2Container to containerize the application. Use an AWS CloudFormation template to deploy the application to Amazon Elastic Container Service (Amazon ECS) on AWS Fargate. (correct answer)
  • BUse AWS App2Container to containerize the application. Use an AWS CloudFormation template to deploy the application to Amazon Elastic Container Service (Amazon ECS) on Amazon EC2 instances.
  • CUse AWS App Runner to containerize the application. Use App Runner to deploy the application to Amazon Elastic Container Service (Amazon ECS) on AWS Fargate.
  • DUse AWS App Runner to containerize the application. Use App Runner to deploy the application to Amazon Elastic Kubernetes Service (Amazon EKS) on Amazon EC2 instances.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use AWS App2Container to containerize the application. Use an AWS CloudFormation template to deploy the application to Amazon Elastic Container Service (Amazon ECS) on AWS Fargate.

Explanation

AWS Fargate runs containers serverlessly so there are no EC2 hosts to manage or patch. Amazon ECS orchestrates containers and integrates natively with AWS networking and IAM. AWS CloudFormation provisions infrastructure as code repeatably.

SAA-C03 Question 970

Single page →
Topic 1 · Question 970

A company is designing a new internal web application in the AWS Cloud. The new application must securely retrieve and store multiple employee usernames and passwords from an AWS managed service. Which solution will meet these requirements with the LEAST operational overhead?

  • AStore the employee credentials in AWS Systems Manager Parameter Store. Use AWS CloudFormation and the BatchGetSecretValue API to retrieve usernames and passwords from Parameter Store.
  • BStore the employee credentials in AWS Secrets Manager. Use AWS CloudFormation and AWS Batch with the BatchGetSecretValue API to retrieve the usernames and passwords from Secrets Manager.
  • CStore the employee credentials in AWS Systems Manager Parameter Store. Use AWS CloudFormation and AWS Batch with the BatchGetSecretValue API to retrieve the usernames and passwords from Parameter Store.
  • DStore the employee credentials in AWS Secrets Manager. Use AWS CloudFormation and the BatchGetSecretValue API to retrieve the usernames and passwords from Secrets Manager. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Store the employee credentials in AWS Secrets Manager. Use AWS CloudFormation and the BatchGetSecretValue API to retrieve the usernames and passwords from Secrets Manager.

Explanation

AWS Batch schedules and runs batch computing jobs at any scale without managing clusters. Amazon RDS is a managed relational database that handles patching, backups and failover. AWS Secrets Manager stores and automatically rotates secrets such as database credentials.

SAA-C03 Question 971

Single page →
Topic 1 · Question 971

A company that is in the ap-northeast-1 Region has a fleet of thousands of AWS Outposts servers. The company has deployed the servers at remote locations around the world. All the servers regularly download new software versions that consist of 100 files. There is significant latency before all servers run the new software versions. The company must reduce the deployment latency for new software versions. Which solution will meet this requirement with the LEAST operational overhead?

  • ACreate an Amazon S3 bucket in ap-northeast-1. Set up an Amazon CloudFront distribution in ap-northeast-1 that includes a CachingDisabled cache policy. Configure the S3 bucket as the origin. Download the software by using signed URLs.
  • BCreate an Amazon S3 bucket in ap-northeast-1. Create a second S3 bucket in the us-east-1 Region. Configure replication between the buckets. Set up an Amazon CloudFront distribution that uses ap-northeast-1 as the primary origin and us-east-1 as the secondary origin. Download the software by using signed URLs.
  • CCreate an Amazon S3 bucket in ap-northeast-1. Configure Amazon S3 Transfer Acceleration. Download the software by using the S3 Transfer Acceleration endpoint.
  • DCreate an Amazon S3 bucket in ap-northeast-1. Set up an Amazon CloudFront distribution. Configure the S3 bucket as the origin. Download the software by using signed URLs. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Create an Amazon S3 bucket in ap-northeast-1. Set up an Amazon CloudFront distribution. Configure the S3 bucket as the origin. Download the software by using signed URLs.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon CloudFront caches content at edge locations to reduce latency and offload origins. AWS Config tracks resource configuration changes and evaluates compliance.

SAA-C03 Question 972

Single page →
Topic 1 · Question 972

A company currently runs an on-premises stock trading application by using Microsoft Windows Server. The company wants to migrate the application to the AWS Cloud. The company needs to design a highly available solution that provides low-latency access to block storage across multiple Availability Zones. Which solution will meet these requirements with the LEAST implementation effort?

  • AConfigure a Windows Server cluster that spans two Availability Zones on Amazon EC2 instances. Install the application on both cluster nodes. Use Amazon FSx for Windows File Server as shared storage between the two cluster nodes.
  • BConfigure a Windows Server cluster that spans two Availability Zones on Amazon EC2 instances. Install the application on both cluster nodes. Use Amazon Elastic Block Store (Amazon EBS) General Purpose SSD (gp3) volumes as storage attached to the EC2 instances. Set up application-level replication to sync data from one EBS volume in one Availability Zone to another EBS volume in the second Availability Zone.
  • CDeploy the application on Amazon EC2 instances in two Availability Zones. Configure one EC2 instance as active and the second EC2 instance in standby mode. Use an Amazon FSx for NetApp ONTAP Multi-AZ file system to access the data by using Internet Small Computer Systems Interface (iSCSI) protocol. (correct answer)
  • DDeploy the application on Amazon EC2 instances in two Availability Zones. Configure one EC2 instance as active and the second EC2 instance in standby mode. Use Amazon Elastic Block Store (Amazon EBS) Provisioned IOPS SSD (io2) volumes as storage attached to the EC2 instances. Set up Amazon EBS level replication to sync data from one io2 volume in one Availability Zone to another io2 volume in the second Availability Zone.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Deploy the application on Amazon EC2 instances in two Availability Zones. Configure one EC2 instance as active and the second EC2 instance in standby mode. Use an Amazon FSx for NetApp ONTAP Multi-AZ file system to ac...

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon FSx provides fully managed third-party file systems. AWS Config tracks resource configuration changes and evaluates compliance. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SAA-C03 Question 973

Single page →
Topic 1 · Question 973 · Select all that apply

A company is designing a web application with an internet-facing Application Load Balancer (ALB). The company needs the ALB to receive HTTPS web traffic from the public internet. The ALB must send only HTTPS traffic to the web application servers hosted on the Amazon EC2 instances on port 443. The ALB must perform a health check of the web application servers over HTTPS on port 8443. Which combination of configurations of the security group that is associated with the ALB will meet these requirements? (Choose three.)

  • AAllow HTTPS inbound traffic from 0.0.0.0/0 for port 443. (correct answer)
  • BAllow all outbound traffic to 0.0.0.0/0 for port 443.
  • CAllow HTTPS outbound traffic to the web application instances for port 443. (correct answer)
  • DAllow HTTPS inbound traffic from the web application instances for port 443.
  • EAllow HTTPS outbound traffic to the web application instances for the health check on port 8443. (correct answer)
  • FAllow HTTPS inbound traffic from the web application instances for the health check on port 8443.
Reveal answer & explanation
Correct answer: A, C, E

The correct answer is A, C, E. Option A: Allow HTTPS inbound traffic from 0.0.0.0/0 for port 443. Option C: Allow HTTPS outbound traffic to the web application instances for port 443. Option E: Allow HTTPS outbound traffic to the web application instances for the health check on port 8443.

SAA-C03 Question 974

Single page →
Topic 1 · Question 974 · Select all that apply

A company hosts an application on AWS. The application gives users the ability to upload photos and store the photos in an Amazon S3 bucket. The company wants to use Amazon CloudFront and a custom domain name to upload the photo files to the S3 bucket in the eu-west-1 Region. Which solution will meet these requirements? (Choose two.)

  • AUse AWS Certificate Manager (ACM) to create a public certificate in the us-east-1 Region. Use the certificate in CloudFront. (correct answer)
  • BUse AWS Certificate Manager (ACM) to create a public certificate in eu-west-1. Use the certificate in CloudFront.
  • CConfigure Amazon S3 to allow uploads from CloudFront. Configure S3 Transfer Acceleration.
  • DConfigure Amazon S3 to allow uploads from CloudFront origin access control (OAC). (correct answer)
  • EConfigure Amazon S3 to allow uploads from CloudFront. Configure an Amazon S3 website endpoint.
Reveal answer & explanation
Correct answer: A, D

The correct answer is A, D. Option A: Use AWS Certificate Manager (ACM) to create a public certificate in the us-east-1 Region. Use the certificate in CloudFront. Option D: Configure Amazon S3 to allow uploads from CloudFront origin access control (OAC).

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon CloudFront caches content at edge locations to reduce latency and offload origins. AWS Certificate Manager provisions and renews TLS certificates automatically.

SAA-C03 Question 975

Single page →
Topic 1 · Question 975

A weather forecasting company collects temperature readings from various sensors on a continuous basis. An existing data ingestion process collects the readings and aggregates the readings into larger Apache Parquet files. Then the process encrypts the files by using client-side encryption with KMS managed keys (CSE-KMS). Finally, the process writes the files to an Amazon S3 bucket with separate prefixes for each calendar day. The company wants to run occasional SQL queries on the data to take sample moving averages for a specific calendar day. Which solution will meet these requirements MOST cost-effectively?

  • AConfigure Amazon Athena to read the encrypted files. Run SQL queries on the data directly in Amazon S3. (correct answer)
  • BUse Amazon S3 Select to run SQL queries on the data directly in Amazon S3.
  • CConfigure Amazon Redshift to read the encrypted files. Use Redshift Spectrum and Redshift query editor v2 to run SQL queries on the data directly in Amazon S3.
  • DConfigure Amazon EMR Serverless to read the encrypted files. Use Apache SparkSQL to run SQL queries on the data directly in Amazon S3.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Configure Amazon Athena to read the encrypted files. Run SQL queries on the data directly in Amazon S3.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon Athena runs serverless SQL queries directly on data in Amazon S3 with no infrastructure to manage. AWS Config tracks resource configuration changes and evaluates compliance. This option delivers the requirement at the lowest cost.

SAA-C03 Question 976

Single page →
Topic 1 · Question 976

A company is implementing a new application on AWS. The company will run the application on multiple Amazon EC2 instances across multiple Availability Zones within multiple AWS Regions. The application will be available through the internet. Users will access the application from around the world. The company wants to ensure that each user who accesses the application is sent to the EC2 instances that are closest to the user’s location. Which solution will meet these requirements?

  • AImplement an Amazon Route 53 geolocation routing policy. Use an internet-facing Application Load Balancer to distribute the traffic across all Availability Zones within the same Region.
  • BImplement an Amazon Route 53 geoproximity routing policy. Use an internet-facing Network Load Balancer to distribute the traffic across all Availability Zones within the same Region. (correct answer)
  • CImplement an Amazon Route 53 multivalue answer routing policy. Use an internet-facing Application Load Balancer to distribute the traffic across all Availability Zones within the same Region.
  • DImplement an Amazon Route 53 weighted routing policy. Use an internet-facing Network Load Balancer to distribute the traffic across all Availability Zones within the same Region.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Implement an Amazon Route 53 geoproximity routing policy. Use an internet-facing Network Load Balancer to distribute the traffic across all Availability Zones within the same Region.

Explanation

Amazon Route 53 provides DNS with health checks and routing policies for availability and latency. A Network Load Balancer handles very high throughput TCP/UDP traffic with ultra-low latency and static IPs. A load balancer distributes traffic across targets in multiple AZs for availability and scale. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SAA-C03 Question 977

Single page →
Topic 1 · Question 977

A financial services company plans to launch a new application on AWS to handle sensitive financial transactions. The company will deploy the application on Amazon EC2 instances. The company will use Amazon RDS for MySQL as the database. The company’s security policies mandate that data must be encrypted at rest and in transit. Which solution will meet these requirements with the LEAST operational overhead?

  • AConfigure encryption at rest for Amazon RDS for MySQL by using AWS KMS managed keys. Configure AWS Certificate Manager (ACM) SSL/TLS certificates for encryption in transit. (correct answer)
  • BConfigure encryption at rest for Amazon RDS for MySQL by using AWS KMS managed keys. Configure IPsec tunnels for encryption in transit.
  • CImplement third-party application-level data encryption before storing data in Amazon RDS for MySQL. Configure AWS Certificate Manager (ACM) SSL/TLS certificates for encryption in transit.
  • DConfigure encryption at rest for Amazon RDS for MySQL by using AWS KMS managed keys. Configure a VPN connection to enable private connectivity to encrypt data in transit.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Configure encryption at rest for Amazon RDS for MySQL by using AWS KMS managed keys. Configure AWS Certificate Manager (ACM) SSL/TLS certificates for encryption in transit.

Explanation

Amazon RDS is a managed relational database that handles patching, backups and failover. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest. AWS Certificate Manager provisions and renews TLS certificates automatically.

SAA-C03 Question 978

Single page →
Topic 1 · Question 978

A company is migrating its on-premises Oracle database to an Amazon RDS for Oracle database. The company needs to retain data for 90 days to meet regulatory requirements. The company must also be able to restore the database to a specific point in time for up to 14 days. Which solution will meet these requirements with the LEAST operational overhead?

  • ACreate Amazon RDS automated backups. Set the retention period to 90 days.
  • BCreate an Amazon RDS manual snapshot every day. Delete manual snapshots that are older than 90 days.
  • CUse the Amazon Aurora Clone feature for Oracle to create a point-in-time restore. Delete clones that are older than 90 days.
  • DCreate a backup plan that has a retention period of 90 days by using AWS Backup for Amazon RDS. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Create a backup plan that has a retention period of 90 days by using AWS Backup for Amazon RDS.

Explanation

AWS Backup centrally automates and manages backups across AWS services. Amazon RDS is a managed relational database that handles patching, backups and failover.

SAA-C03 Question 979

Single page →
Topic 1 · Question 979

A company is developing a new application that uses a relational database to store user data and application configurations. The company expects the application to have steady user growth. The company expects the database usage to be variable and read-heavy, with occasional writes. The company wants to cost-optimize the database solution. The company wants to use an AWS managed database solution that will provide the necessary performance. Which solution will meet these requirements MOST cost-effectively?

  • ADeploy the database on Amazon RDS. Use Provisioned IOPS SSD storage to ensure consistent performance for read and write operations.
  • BDeploy the database on Amazon Aurora Serverless to automatically scale the database capacity based on actual usage to accommodate the workload. (correct answer)
  • CDeploy the database on Amazon DynamoDB. Use on-demand capacity mode to automatically scale throughput to accommodate the workload.
  • DDeploy the database on Amazon RDS. Use magnetic storage and use read replicas to accommodate the workload.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Deploy the database on Amazon Aurora Serverless to automatically scale the database capacity based on actual usage to accommodate the workload.

Explanation

Aurora Serverless auto-scales database capacity and is cost-effective for variable workloads. Amazon Aurora is a high-performance managed relational database with built-in replication and failover. This option delivers the requirement at the lowest cost.

SAA-C03 Question 980

Single page →
Topic 1 · Question 980

A company hosts its application on several Amazon EC2 instances inside a VPC. The company creates a dedicated Amazon S3 bucket for each customer to store their relevant information in Amazon S3. The company wants to ensure that the application running on EC2 instances can securely access only the S3 buckets that belong to the company’s AWS account. Which solution will meet these requirements with the LEAST operational overhead?

  • ACreate a gateway endpoint for Amazon S3 that is attached to the VPC. Update the IAM instance profile policy to provide access to only the specific buckets that the application needs.
  • BCreate a NAT gateway in a public subnet with a security group that allows access to only Amazon S3. Update the route tables to use the NAT Gateway.
  • CCreate a gateway endpoint for Amazon S3 that is attached to the VPUpdate the IAM instance profile policy with a Deny action and the following condition key: (correct answer)
  • DCreate a NAT Gateway in a public subnet. Update route tables to use the NAT Gateway. Assign bucket policies for all buckets with a Deny action and the following condition key:
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create a gateway endpoint for Amazon S3 that is attached to the VPUpdate the IAM instance profile policy with a Deny action and the following condition key:

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

Showing questions 961–980 of 1019 · Page 49 of 51