SAA-C03 practice questions 1,001–1,010

1. Question 1001 · 1017 in bank

   A company hosts its main public web application in one AWS Region across multiple Availability Zones. The application uses an Amazon EC2 Auto Scaling group and an Application Load Balancer (ALB). A web development team needs a cost-optimized compute solution to improve the company’s ability to serve dynamic content globally to millions of customers. Which solution will meet these requirements?

   • ACreate an Amazon CloudFront distribution. Configure the existing ALB as the origin.
   • BUse Amazon Route 53 to serve traffic to the ALB and EC2 instances based on the geographic location of each customer.
   • CCreate an Amazon S3 bucket with public read access enabled. Migrate the web application to the S3 bucket. Configure the S3 bucket for website hosting.
   • DUse AWS Direct Connect to directly serve content from the web application to the location of each customer.

   Show answer

   Answer: A

   Explanation

   CloudFront: is a content delivery network (CDN) service from AWS, designed to distribute content globally at high speeds by caching content in edge locations close to users. This is the most cost-effective way to serve dynamic content globally, which is exactly what the scenario requires. ALB as the origin: By setting the existing ALB as the origin for CloudFront, the CDN will fetch content from the web application running on the EC2 instances behind the ALB, effectively caching and delivering content from geographically closer locations to users

   Source: Adapted from community discussion — JA2018

   References

   • AWS documentation

   Next question

2. Question 1002 · 1017 in bank

   A company stores user data in AWS. The data is used continuously with peak usage during business hours. Access patterns vary, with some data not being used for months at a time. A solutions architect must choose a cost-effective solution that maintains the highest level of durability while maintaining high availability. Which storage solution meets these requirements?

   • AAmazon S3 Standard
   • BAmazon S3 Intelligent-Tiering
   • CAmazon S3 Glacier Deep Archive
   • DAmazon S3 One Zone-Infrequent Access (S3 One Zone-IA)

   Show answer

   Answer: B

   Next question

3. Question 1003 · 1017 in bank

   A company is testing an application that runs on an Amazon EC2 Linux instance. A single 500 GB Amazon Elastic Block Store (Amazon EBS) General Purpose SSO (gp2) volume is attached to the EC2 instance. The company will deploy the application on multiple EC2 instances in an Auto Scaling group. All instances require access to the data that is stored in the EBS volume. The company needs a highly available and resilient solution that does not introduce significant changes to the application's code. Which solution will meet these requirements?

   • AProvision an EC2 instance that uses NFS server software. Attach a single 500 GB gp2 EBS volume to the instance.
   • BProvision an Amazon FSx for Windows File Server file system. Configure the file system as an SMB file store within a single Availability Zone.
   • CProvision an EC2 instance with two 250 GB Provisioned IOPS SSD EBS volumes.
   • DProvision an Amazon Elastic File System (Amazon EFS) file system. Configure the file system to use General Purpose performance mode.

   Show answer

   Answer: D

   Explanation

   3 reasons why I will choose Option D: #1 - Highly Available and Scalable: EFS is a managed file system designed for high availability and can automatically scale to accommodate the needs of multiple EC2 instances in an Auto Scaling group, which perfectly aligns with the company's requirement. # 2 - No code changes: Since EFS is a network file system, the application doesn't need significant code changes to access the data stored on it, as it can mount the file system like a local disk. #3 - General Purpose performance mode: This mode provides a balance between cost and performance, suitable for most application workloads.

   Source: Adapted from community discussion — JA2018

   Next question

4. Question 1004 · 1017 in bank

   Select 2

   A company recently launched a new application for its customers. The application runs on multiple Amazon EC2 instances across two Availability Zones. End users use TCP to communicate with the application. The application must be highly available and must automatically scale as the number of users increases. Which combination of steps will meet these requirements MOST cost-effectively? (Choose two.)

   • AAdd a Network Load Balancer in front of the EC2 instances.
   • BConfigure an Auto Scaling group for the EC2 instances.
   • CAdd an Application Load Balancer in front of the EC2 instances.
   • DManually add more EC2 instances for the application.
   • EAdd a Gateway Load Balancer in front of the EC2 instances.

   Show answer

   Answer: AB

   Explanation

   This is A and B. TCP best option is NLB. I know tons of you want to use chat GPT and it's going to tell you application load balancer, then ask chatgpt if an application load balancer really is the best option for TCP and it will be like "aw dang dawg, its not, you're right". Then it will switch to A and B. Because chatgpt doesn't know everything. It's a great tool but you still need to research because it doesn't have all the answers.

   Source: Adapted from community discussion — blehbleh

   Next question

5. Question 1005 · 1017 in bank

   Select 2

   A company is designing the architecture for a new mobile app that uses the AWS Cloud. The company uses organizational units (OUs) in AWS Organizations to manage its accounts. The company wants to tag Amazon EC2 instances with data sensitivity by using values of sensitive and nonsensitive. IAM identities must not be able to delete a tag or create instances without a tag. Which combination of steps will meet these requirements? (Choose two.)

   • AIn Organizations, create a new tag policy that specifies the data sensitivity tag key and the required values. Enforce the tag values for the EC2 instances. Attach the tag policy to the appropriate OU.
   • BIn Organizations, create a new service control policy (SCP) that specifies the data sensitivity tag key and the required tag values. Enforce the tag values for the EC2 instances. Attach the SCP to the appropriate OU.
   • CCreate a tag policy to deny running instances when a tag key is not specified. Create another tag policy that prevents identities from deleting tags. Attach the tag policies to the appropriate OU.
   • DCreate a service control policy (SCP) to deny creating instances when a tag key is not specified. Create another SCP that prevents identities from deleting tags. Attach the SCPs to the appropriate OU.
   • ECreate an AWS Config rule to check if EC2 instances use the data sensitivity tag and the specified values. Configure an AWS Lambda function to delete the resource if a noncompliant resource is found.

   Show answer

   Answer: AD

   Explanation

   B - SCPs cannot directly enforce tag values; they can only allow or deny actions based on tags. C - Tag policies in AWS Organizations can't deny actions, such as launching untagged instances or deleting tags. E - AWS Lambda is definitely irrelevent.

   Source: Adapted from community discussion — LeonSauveterre

   References

   • AWS documentation
   • AWS documentation

   Next question

6. Question 1006 · 1017 in bank

   A company runs database workloads on AWS that are the backend for the company's customer portals. The company runs a Multi-AZ database cluster on Amazon RDS for PostgreSQL. The company needs to implement a 30-day backup retention policy. The company currently has both automated RDS backups and manual RDS backups. The company wants to maintain both types of existing RDS backups that are less than 30 days old. Which solution will meet these requirements MOST cost-effectively?

   • AConfigure the RDS backup retention policy to 30 days for automated backups by using AWS Backup. Manually delete manual backups that are older than 30 days.
   • BDisable RDS automated backups. Delete automated backups and manual backups that are older than 30 days. Configure the RDS backup retention policy to 30 days for automated backups.
   • CConfigure the RDS backup retention policy to 30 days for automated backups. Manually delete manual backups that are older than 30 days.
   • DDisable RDS automated backups. Delete automated backups and manual backups that are older than 30 days automatically by using AWS CloudFormation. Configure the RDS backup retention policy to 30 days for automated backups.

   Show answer

   Answer: C

   Explanation

   This is C, you are looking for the most cost effective solution. Again if any of you use ChatGPT it will say A because it makes the most sense for automation and less management. But it is not the most cost effective. AWS Backup costs extra money. So A, is not correct. It is C.

   Source: Adapted from community discussion — blehbleh

   Next question

7. Question 1007 · 1017 in bank

   A company is implementing a shared storage solution for a gaming application that is hosted in an on-premises data center. The company needs the ability to use Lustre clients to access data. The solution must be fully managed. Which solution meets these requirements?

   • ACreate an AWS Storage Gateway file gateway. Create a file share that uses the required client protocol. Connect the application server to the file share.
   • BCreate an Amazon EC2 Windows instance. Install and configure a Windows file share role on the instance. Connect the application server to the file share.
   • CCreate an Amazon Elastic File System (Amazon EFS) file system, and configure it to support Lustre. Attach the file system to the origin server. Connect the application server to the file system.
   • DCreate an Amazon FSx for Lustre file system. Attach the file system to the origin server. Connect the application server to the file system.

   Show answer

   Answer: D

   Explanation

   Option D. Create an Amazon FSx for Lustre file system. Attach the file system to the origin server. Connect the application server to the file system. Amazon FSx for Lustre is a fully managed file system that is designed for high-performance workloads, such as gaming applications. It provides a high-performance, scalable, and fully managed file system that is optimized for Lustre clients, and it is fully integrated with Amazon EC2. It is the only option that meets the requirements of being fully managed and able to support Lustre clients.

   Source: Adapted from community discussion — Buruguduystunstugudunstuy

   References

   • AWS documentation
   • AWS documentation

   Next question

8. Question 1008 · 1017 in bank

   A company is planning to migrate a legacy application to AWS. The application currently uses NFS to communicate to an on-premises storage solution to store application data. The application cannot be modified to use any other communication protocols other than NFS for this purpose. Which storage solution should a solutions architect recommend for use after the migration?

   • AAWS DataSync
   • BAmazon Elastic Block Store (Amazon EBS)
   • CAmazon Elastic File System (Amazon EFS)
   • DAmazon EMR File System (Amazon EMRFS)

   Show answer

   Answer: C

   Next question

9. Question 1009 · 1017 in bank

   A company uses GPS trackers to document the migration patterns of thousands of sea turtles. The trackers check every 5 minutes to see if a turtle has moved more than 100 yards (91.4 meters). If a turtle has moved, its tracker sends the new coordinates to a web application running on three Amazon EC2 instances that are in multiple Availability Zones in one AWS Region. Recently, the web application was overwhelmed while processing an unexpected volume of tracker data. Data was lost with no way to replay the events. A solutions architect must prevent this problem from happening again and needs a solution with the least operational overhead. What should the solutions architect do to meet these requirements?

   • ACreate an Amazon S3 bucket to store the data. Configure the application to scan for new data in the bucket for processing.
   • BCreate an Amazon API Gateway endpoint to handle transmitted location coordinates. Use an AWS Lambda function to process each item concurrently.
   • CCreate an Amazon Simple Queue Service (Amazon SQS) queue to store the incoming data. Configure the application to poll for new messages for processing.
   • DCreate an Amazon DynamoDB table to store transmitted location coordinates. Configure the application to query the table for new data for processing. Use TTL to remove data that has been processed.

   Show answer

   Answer: C

   Explanation

   The correct Answer is C. Amazon SQS is a fully managed message queuing service that allows you to decouple and scale applications by buffering the incoming data. This would ensure that data is stored in a reliable, scalable queue until the web application is ready to process it. SQS provides high availability and fault tolerance, and guarantees that no data will be lost, as the messages remain in the queue until they are processed. The web application can poll the SQS queue for new messages and process them at its own pace, preventing the application from being overwhelmed by large volumes of tracker data. Operational overhead is minimal because SQS is a fully managed service. The application only needs to poll the queue for messages, and there is no need to manage infrastructure.

   Source: Adapted from community discussion — Bwhizzy

   Next question

10. Question 1010 · 1017 in bank

    A company's software development team needs an Amazon RDS Multi-AZ cluster. The RDS cluster will serve as a backend for a desktop client that is deployed on premises. The desktop client requires direct connectivity to the RDS cluster. The company must give the development team the ability to connect to the cluster by using the client when the team is in the office. Which solution provides the required connectivity MOST securely?

    • ACreate a VPC and two public subnets. Create the RDS cluster in the public subnets. Use AWS Site-to-Site VPN with a customer gateway in the company's office.
    • BCreate a VPC and two private subnets. Create the RDS cluster in the private subnets. Use AWS Site-to-Site VPN with a customer gateway in the company's office.
    • CCreate a VPC and two private subnets. Create the RDS cluster in the private subnets. Use RDS security groups to allow the company's office IP ranges to access the cluster.
    • DCreate a VPC and two public subnets. Create the RDS cluster in the public subnets. Create a cluster user for each developer. Use RDS security groups to allow the users to access the cluster.

    Show answer

    Answer: B

    Explanation

    The Correct Answer is B. Explanation: VPC and Private Subnets: By placing the RDS cluster in private subnets, you ensure that the RDS cluster is not publicly accessible from the internet. This significantly improves security as the database is only accessible through secure channels, not directly from the public internet. AWS Site-to-Site VPN: Using a Site-to-Site VPN establishes a secure, encrypted connection between the on-premises office and the AWS environment. This provides secure access to the RDS cluster without exposing it to the internet, ensuring that the developers can only access the cluster when connected to the office network. Customer Gateway: The customer gateway is configured in the company's office to handle the VPN connection, providing secure connectivity for the desktop client to the RDS cluster when the development team is in the office.

    Source: Adapted from community discussion — Bwhizzy

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SAA-C03 practice, question 1001. 1017 questions available.