SAA-C03 practice questions 221–230

1. Question 221 · 1017 in bank

   A company is migrating applications to AWS. The applications are deployed in different accounts. The company manages the accounts centrally by using AWS Organizations. The company's security team needs a single sign-on (SSO) solution across all the company's accounts. The company must continue managing the users and groups in its on-premises self-managed Microsoft Active Directory. Which solution will meet these requirements?

   • AEnable AWS Single Sign-On (AWS SSO) from the AWS SSO console. Create a one-way forest trust or a one-way domain trust to connect the company's self-managed Microsoft Active Directory with AWS SSO by using AWS Directory Service for Microsoft Active Directory.
   • BEnable AWS Single Sign-On (AWS SSO) from the AWS SSO console. Create a two-way forest trust to connect the company's self-managed Microsoft Active Directory with AWS SSO by using AWS Directory Service for Microsoft Active Directory.
   • CUse AWS Directory Service. Create a two-way trust relationship with the company's self-managed Microsoft Active Directory.
   • DDeploy an identity provider (IdP) on premises. Enable AWS Single Sign-On (AWS SSO) from the AWS SSO console.

   Show answer

   Answer: B

   Explanation

   Tricky question!!! forget one-way or two-way. In this scenario, AWS applications (Amazon Chime, Amazon Connect, Amazon QuickSight, AWS Single Sign-On, Amazon WorkDocs, Amazon WorkMail, Amazon WorkSpaces, AWS Client VPN, AWS Management Console, and AWS Transfer Family) need to be able to look up objects from the on-premises domain in order for them to function. This tells you that authentication needs to flow both ways. This scenario requires a two-way trust between the on-premises and AWS Managed Microsoft AD domains. It is a requirement of the application Scenario 2: https://aws.amazon.com/es/blogs/security/everything-you-wanted-to-know-about-trusts-with-aws-managed-microsoft-ad/

   Source: Adapted from community discussion — 17Master

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

2. Question 222 · 1017 in bank

   A company is using Amazon CloudFront with its website. The company has enabled logging on the CloudFront distribution, and logs are saved in one of the company’s Amazon S3 buckets. The company needs to perform advanced analyses on the logs and build visualizations. What should a solutions architect do to meet these requirements?

   • AUse standard SQL queries in Amazon Athena to analyze the CloudFront logs in the S3 bucket. Visualize the results with AWS Glue.
   • BUse standard SQL queries in Amazon Athena to analyze the CloudFront logs in the S3 bucket. Visualize the results with Amazon QuickSight.
   • CUse standard SQL queries in Amazon DynamoDB to analyze the CloudFront logs in the S3 bucket. Visualize the results with AWS Glue.
   • DUse standard SQL queries in Amazon DynamoDB to analyze the CloudFront logs in the S3 bucket. Visualize the results with Amazon QuickSight.

   Show answer

   Answer: B

   Explanation

   Amazon Athena can be used to analyze data in S3 buckets using standard SQL queries without requiring any data transformation. By using Athena, a solutions architect can easily and efficiently query the CloudFront logs stored in the S3 bucket. The results of the queries can be visualized using Amazon QuickSight, which provides powerful data visualization capabilities and easy-to-use dashboards. Together, Athena and QuickSight provide a cost-effective and scalable solution to analyze CloudFront logs and build visualizations.

   Source: Adapted from community discussion — kpato87

   References

   • AWS documentation

   Next question

3. Question 223 · 1017 in bank

   A company runs a fleet of web servers using an Amazon RDS for PostgreSQL DB instance. After a routine compliance check, the company sets a standard that requires a recovery point objective (RPO) of less than 1 second for all its production databases. Which solution meets these requirements?

   • AEnable a Multi-AZ deployment for the DB instance.
   • BEnable auto scaling for the DB instance in one Availability Zone.
   • CConfigure the DB instance in one Availability Zone, and create multiple read replicas in a separate Availability Zone.
   • DConfigure the DB instance in one Availability Zone, and configure AWS Database Migration Service (AWS DMS) change data capture (CDC) tasks.

   Show answer

   Answer: A

   Explanation

   A: By using Multi-AZ deployment, the company can achieve an RPO of less than 1 second because the standby instance is always in sync with the primary instance, ensuring that data changes are continuously replicated.

   Source: Adapted from community discussion — KZM

   Next question

4. Question 224 · 1017 in bank

   A company runs a web application that is deployed on Amazon EC2 instances in the private subnet of a VPC. An Application Load Balancer (ALB) that extends across the public subnets directs web traffic to the EC2 instances. The company wants to implement new security measures to restrict inbound traffic from the ALB to the EC2 instances while preventing access from any other source inside or outside the private subnet of the EC2 instances. Which solution will meet these requirements?

   • AConfigure a route in a route table to direct traffic from the internet to the private IP addresses of the EC2 instances.
   • BConfigure the security group for the EC2 instances to only allow traffic that comes from the security group for the ALB.
   • CMove the EC2 instances into the public subnet. Give the EC2 instances a set of Elastic IP addresses.
   • DConfigure the security group for the ALB to allow any TCP traffic on any port.

   Show answer

   Answer: B

   Explanation

   Read the discussion, that’s the whole point why examtopics picks the wrong answer. Follow most voted answer not examtopics answer

   Source: Adapted from community discussion — Abrar2022

   Next question

5. Question 225 · 1017 in bank

   A research company runs experiments that are powered by a simulation application and a visualization application. The simulation application runs on Linux and outputs intermediate data to an NFS share every 5 minutes. The visualization application is a Windows desktop application that displays the simulation output and requires an SMB file system. The company maintains two synchronized file systems. This strategy is causing data duplication and inefficient resource usage. The company needs to migrate the applications to AWS without making code changes to either application. Which solution will meet these requirements?

   • AMigrate both applications to AWS Lambda. Create an Amazon S3 bucket to exchange data between the applications.
   • BMigrate both applications to Amazon Elastic Container Service (Amazon ECS). Configure Amazon FSx File Gateway for storage.
   • CMigrate the simulation application to Linux Amazon EC2 instances. Migrate the visualization application to Windows EC2 instances. Configure Amazon Simple Queue Service (Amazon SQS) to exchange data between the applications.
   • DMigrate the simulation application to Linux Amazon EC2 instances. Migrate the visualization application to Windows EC2 instances. Configure Amazon FSx for NetApp ONTAP for storage.

   Show answer

   Answer: D

   Explanation

   This solution satisfies the needs in the following ways: • Amazon EC2 provides a seamless migration path for the existing server-based applications without code changes. The simulation app can run on Linux EC2 instances and the visualization app on Windows EC2 instances. • Amazon FSx for NetApp ONTAP provides highly performant file storage that is accessible via both NFS and SMB. This allows the simulation app to write to NFS shares as currently designed, and the visualization app to access the same data via SMB. • FSx for NetApp ONTAP ensures the data is synchronized and up to date across the file systems. This addresses the data duplication issues of the current setup. • Resources can be scaled efficiently since EC2 and FSx provide scalable compute and storage on demand.

   Source: Adapted from community discussion — kruasan

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

6. Question 226 · 1017 in bank

   As part of budget planning, management wants a report of AWS billed items listed by user. The data will be used to create department budgets. A solutions architect needs to determine the most efficient way to obtain this report information. Which solution meets these requirements?

   • ARun a query with Amazon Athena to generate the report.
   • BCreate a report in Cost Explorer and download the report.
   • CAccess the bill details from the billing dashboard and download the bill.
   • DModify a cost budget in AWS Budgets to alert with Amazon Simple Email Service (Amazon SES).

   Show answer

   Answer: B

   Explanation

   ­ ° Cost Explorer is a AWS service that allows you to view, analyze, and manage your AWS costs and usage. It provides a variety of reports that you can use to track your costs, including a report of AWS billed items listed by user. ° Creating a report in Cost Explorer is a quick and easy way to get the information you need. You can customize the report to include the specific data you want, and you can download the report in a variety of formats, including CSV, Excel, and PDF.

   Source: Adapted from community discussion — Guru4Cloud

   References

   • aws.amazon.com documentation
   • AWS documentation

   Next question

7. Question 227 · 1017 in bank

   A company hosts its static website by using Amazon S3. The company wants to add a contact form to its webpage. The contact form will have dynamic server-side components for users to input their name, email address, phone number, and user message. The company anticipates that there will be fewer than 100 site visits each month. Which solution will meet these requirements MOST cost-effectively?

   • AHost a dynamic contact form page in Amazon Elastic Container Service (Amazon ECS). Set up Amazon Simple Email Service (Amazon SES) to connect to any third-party email provider.
   • BCreate an Amazon API Gateway endpoint with an AWS Lambda backend that makes a call to Amazon Simple Email Service (Amazon SES).
   • CConvert the static webpage to dynamic by deploying Amazon Lightsail. Use client-side scripting to build the contact form. Integrate the form with Amazon WorkMail.
   • DCreate a t2.micro Amazon EC2 instance. Deploy a LAMP (Linux, Apache, MySQL, PHP/Perl/Python) stack to host the webpage. Use client-side scripting to build the contact form. Integrate the form with Amazon WorkMail.

   Show answer

   Answer: B

   Explanation

   This solution is the most cost-efficient for the anticipated 100 monthly visits because: • API Gateway charges are based on API calls. With only 100 visits, charges would be minimal. • AWS Lambda provides compute time for the backend code in increments of 100ms, so charges would also be negligible for this workload. • Amazon SES is used only for sending emails from the submitted contact forms. SES has a generous free tier of 62,000 emails per month, so there would be no charges for sending the contact emails. • No EC2 instances or other infrastructure needs to be run and paid for.

   Source: Adapted from community discussion — kruasan

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

8. Question 228 · 1017 in bank

   A company has a static website that is hosted on Amazon CloudFront in front of Amazon S3. The static website uses a database backend. The company notices that the website does not reflect updates that have been made in the website’s Git repository. The company checks the continuous integration and continuous delivery (CI/CD) pipeline between the Git repository and Amazon S3. The company verifies that the webhooks are configured properly and that the CI/CD pipeline is sending messages that indicate successful deployments. A solutions architect needs to implement a solution that displays the updates on the website. Which solution will meet these requirements?

   • AAdd an Application Load Balancer.
   • BAdd Amazon ElastiCache for Redis or Memcached to the database layer of the web application.
   • CInvalidate the CloudFront cache.
   • DUse AWS Certificate Manager (ACM) to validate the website’s SSL certificate.

   Show answer

   Answer: C

   Explanation

   Invalidate the CloudFront cache: The solutions architect should invalidate the CloudFront cache to ensure that the latest version of the website is being served to users.

   Source: Adapted from community discussion — fulingyu288

   Next question

9. Question 229 · 1017 in bank

   A company wants to migrate a Windows-based application from on premises to the AWS Cloud. The application has three tiers: an application tier, a business tier, and a database tier with Microsoft SQL Server. The company wants to use specific features of SQL Server such as native backups and Data Quality Services. The company also needs to share files for processing between the tiers. How should a solutions architect design the architecture to meet these requirements?

   • AHost all three tiers on Amazon EC2 instances. Use Amazon FSx File Gateway for file sharing between the tiers.
   • BHost all three tiers on Amazon EC2 instances. Use Amazon FSx for Windows File Server for file sharing between the tiers.
   • CHost the application tier and the business tier on Amazon EC2 instances. Host the database tier on Amazon RDS. Use Amazon Elastic File System (Amazon EFS) for file sharing between the tiers.
   • DHost the application tier and the business tier on Amazon EC2 instances. Host the database tier on Amazon RDS. Use a Provisioned IOPS SSD (io2) Amazon Elastic Block Store (Amazon EBS) volume for file sharing between the tiers.

   Show answer

   Answer: B

   Explanation

   It is B: A: Incorrect> FSx file Gateway designed for low latency and efficient access to in-cloud FSx for Windows File Server file shares from your on-premises facility. B: Correct> This solution will allow the company to host all three tiers on Amazon EC2 instances while using Amazon FSx for Windows File Server to provide Windows-based file sharing between the tiers. This will allow the company to use specific features of SQL Server, such as native backups and Data Quality Services, while sharing files for processing between the tiers. C: Incorrect> Currently, Amazon EFS supports the NFSv4.1 protocol and does not natively support the SMB protocol, and can't be used in Windows instances yet. D: Incorrect> Amazon EBS is a block-level storage solution that is typically used to store data at the operating system level, rather than for file sharing between servers.

   Source: Adapted from community discussion — KZM

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

10. Question 230 · 1017 in bank

    A company is migrating a Linux-based web server group to AWS. The web servers must access files in a shared file store for some content. The company must not make any changes to the application. What should a solutions architect do to meet these requirements?

    • ACreate an Amazon S3 Standard bucket with access to the web servers.
    • BConfigure an Amazon CloudFront distribution with an Amazon S3 bucket as the origin.
    • CCreate an Amazon Elastic File System (Amazon EFS) file system. Mount the EFS file system on all web servers.
    • DConfigure a General Purpose SSD (gp3) Amazon Elastic Block Store (Amazon EBS) volume. Mount the EBS volume to all web servers.

    Show answer

    Answer: C

    Explanation

    Since no code change is permitted, below choice makes sense for the unix server's file sharing: C. Create an Amazon Elastic File System (Amazon EFS) file system. Mount the EFS file system on all web servers.

    Source: Adapted from community discussion — Bhawesh

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SAA-C03 practice, question 221. 1017 questions available.