SAA-C03 practice questions 311–320

1. Question 311 · 1017 in bank

   A company uses Amazon API Gateway to run a private gateway with two REST APIs in the same VPC. The BuyStock RESTful web service calls the CheckFunds RESTful web service to ensure that enough funds are available before a stock can be purchased. The company has noticed in the VPC flow logs that the BuyStock RESTful web service calls the CheckFunds RESTful web service over the internet instead of through the VPC. A solutions architect must implement a solution so that the APIs communicate through the VPC. Which solution will meet these requirements with the FEWEST changes to the code?

   • AAdd an X-API-Key header in the HTTP header for authorization.
   • BUse an interface endpoint.
   • CUse a gateway endpoint.
   • DAdd an Amazon Simple Queue Service (Amazon SQS) queue between the two REST APIs.

   Show answer

   Answer: B

   Explanation

   an interface endpoint is a horizontally scaled, redundant VPC endpoint that provides private connectivity to a service. It is an elastic network interface with a private IP address that serves as an entry point for traffic destined to the AWS service. Interface endpoints are used to connect VPCs with AWS services

   Source: Adapted from community discussion — everfly

   References

   • AWS documentation

   Next question

2. Question 312 · 1017 in bank

   A company hosts a multiplayer gaming application on AWS. The company wants the application to read data with sub-millisecond latency and run one-time queries on historical data. Which solution will meet these requirements with the LEAST operational overhead?

   • AUse Amazon RDS for data that is frequently accessed. Run a periodic custom script to export the data to an Amazon S3 bucket.
   • BStore the data directly in an Amazon S3 bucket. Implement an S3 Lifecycle policy to move older data to S3 Glacier Deep Archive for long-term storage. Run one-time queries on the data in Amazon S3 by using Amazon Athena.
   • CUse Amazon DynamoDB with DynamoDB Accelerator (DAX) for data that is frequently accessed. Export the data to an Amazon S3 bucket by using DynamoDB table export. Run one-time queries on the data in Amazon S3 by using Amazon Athena.
   • DUse Amazon DynamoDB for data that is frequently accessed. Turn on streaming to Amazon Kinesis Data Streams. Use Amazon Kinesis Data Firehose to read the data from Kinesis Data Streams. Store the records in an Amazon S3 bucket.

   Show answer

   Answer: C

   Explanation

   DAX delivers up to a 10 times performance improvement—from milliseconds to microseconds. Using DynamoDB export to S3, you can export data from an Amazon DynamoDB table to an Amazon S3 bucket. This feature enables you to perform analytics and complex queries on your data using other AWS services such as Athena, AWS Glue.

   Source: Adapted from community discussion — TariqKipkemei

   References

   • AWS documentation

   Next question

3. Question 313 · 1017 in bank

   Select 2

   A company uses a payment processing system that requires messages for a particular payment ID to be received in the same order that they were sent. Otherwise, the payments might be processed incorrectly. Which actions should a solutions architect take to meet this requirement? (Choose two.)

   • AWrite the messages to an Amazon DynamoDB table with the payment ID as the partition key.
   • BWrite the messages to an Amazon Kinesis data stream with the payment ID as the partition key.
   • CWrite the messages to an Amazon ElastiCache for Memcached cluster with the payment ID as the key.
   • DWrite the messages to an Amazon Simple Queue Service (Amazon SQS) queue. Set the message attribute to use the payment ID.
   • EWrite the messages to an Amazon Simple Queue Service (Amazon SQS) FIFO queue. Set the message group to use the payment ID.

   Show answer

   Answer: BE

   Explanation

   Option B is preferred over A because Amazon Kinesis Data Streams inherently maintain the order of records within a shard, which is crucial for the given requirement of preserving the order of messages for a particular payment ID. When you use the payment ID as the partition key, all messages for that payment ID will be sent to the same shard, ensuring that the order of messages is maintained. On the other hand, Amazon DynamoDB is a NoSQL database service that provides fast and predictable performance with seamless scalability. While it can store data with partition keys, it does not guarantee the order of records within a partition, which is essential for the given use case. Hence, using Kinesis Data Streams is more suitable for this requirement. As DynamoDB does not keep the order, I think BE is the correct answer here.

   Source: Adapted from community discussion — Ashkan_10

   References

   • AWS documentation
   • AWS documentation

   Next question

4. Question 314 · 1017 in bank

   A company is building a game system that needs to send unique events to separate leaderboard, matchmaking, and authentication services concurrently. The company needs an AWS event-driven system that guarantees the order of the events. Which solution will meet these requirements?

   • AAmazon EventBridge event bus
   • BAmazon Simple Notification Service (Amazon SNS) FIFO topics
   • CAmazon Simple Notification Service (Amazon SNS) standard topics
   • DAmazon Simple Queue Service (Amazon SQS) FIFO queues

   Show answer

   Answer: B

   Explanation

   I don't honestly / can't understand why people go to ChapGPT to ask for the answers.... if I recall correctly they only consolidated their DB until 2021...

   Source: Adapted from community discussion — bella

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

5. Question 315 · 1017 in bank

   Select 2

   A hospital is designing a new application that gathers symptoms from patients. The hospital has decided to use Amazon Simple Queue Service (Amazon SQS) and Amazon Simple Notification Service (Amazon SNS) in the architecture. A solutions architect is reviewing the infrastructure design. Data must be encrypted at rest and in transit. Only authorized personnel of the hospital should be able to access the data. Which combination of steps should the solutions architect take to meet these requirements? (Choose two.)

   • ATurn on server-side encryption on the SQS components. Update the default key policy to restrict key usage to a set of authorized principals.
   • BTurn on server-side encryption on the SNS components by using an AWS Key Management Service (AWS KMS) customer managed key. Apply a key policy to restrict key usage to a set of authorized principals.
   • CTurn on encryption on the SNS components. Update the default key policy to restrict key usage to a set of authorized principals. Set a condition in the topic policy to allow only encrypted connections over TLS.
   • DTurn on server-side encryption on the SQS components by using an AWS Key Management Service (AWS KMS) customer managed key. Apply a key policy to restrict key usage to a set of authorized principals. Set a condition in the queue policy to allow only encrypted connections over TLS.
   • ETurn on server-side encryption on the SQS components by using an AWS Key Management Service (AWS KMS) customer managed key. Apply an IAM policy to restrict key usage to a set of authorized principals. Set a condition in the queue policy to allow only encrypted connections over TLS.

   Show answer

   Answer: BD

   Explanation

   My god! Every other question is about SQS! I thought this was AWS Solution Architect test not "How to solve any problem in AWS using SQS" test!

   Source: Adapted from community discussion — awsgeek75

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

6. Question 316 · 1017 in bank

   A company runs a web application that is backed by Amazon RDS. A new database administrator caused data loss by accidentally editing information in a database table. To help recover from this type of incident, the company wants the ability to restore the database to its state from 5 minutes before any change within the last 30 days. Which feature should the solutions architect include in the design to meet this requirement?

   • ARead replicas
   • BManual snapshots
   • CAutomated backups
   • DMulti-AZ deployments

   Show answer

   Answer: C

   Explanation

   Amazon RDS provides automated backups, which can be configured to take regular snapshots of the database instance. By enabling automated backups and setting the retention period to 30 days, the company can ensure that it retains backups for up to 30 days. Additionally, Amazon RDS allows for point-in-time recovery within the retention period, enabling the restoration of the database to its state from any point within the last 30 days, including 5 minutes before any change. This feature provides the required capability to recover from accidental data loss incidents.

   Source: Adapted from community discussion — Uzbekistan

   References

   • AWS documentation
   • AWS documentation

   Next question

7. Question 317 · 1017 in bank

   A company’s web application consists of an Amazon API Gateway API in front of an AWS Lambda function and an Amazon DynamoDB database. The Lambda function handles the business logic, and the DynamoDB table hosts the data. The application uses Amazon Cognito user pools to identify the individual users of the application. A solutions architect needs to update the application so that only users who have a subscription can access premium content. Which solution will meet this requirement with the LEAST operational overhead?

   • AEnable API caching and throttling on the API Gateway API.
   • BSet up AWS WAF on the API Gateway API. Create a rule to filter users who have a subscription.
   • CApply fine-grained IAM permissions to the premium content in the DynamoDB table.
   • DImplement API usage plans and API keys to limit the access of users who do not have a subscription.

   Show answer

   Answer: D

   Explanation

   Implementing API usage plans and API keys is a straightforward way to restrict access to specific users or groups based on subscriptions. It allows you to control access at the API level and doesn't require extensive changes to your existing architecture. This solution provides a clear and manageable way to enforce access restrictions without complicating other parts of the application

   Source: Adapted from community discussion — Guru4Cloud

   References

   • AWS documentation

   Next question

8. Question 318 · 1017 in bank

   A company is using Amazon Route 53 latency-based routing to route requests to its UDP-based application for users around the world. The application is hosted on redundant servers in the company's on-premises data centers in the United States, Asia, and Europe. The company’s compliance requirements state that the application must be hosted on premises. The company wants to improve the performance and availability of the application. What should a solutions architect do to meet these requirements?

   • AConfigure three Network Load Balancers (NLBs) in the three AWS Regions to address the on-premises endpoints. Create an accelerator by using AWS Global Accelerator, and register the NLBs as its endpoints. Provide access to the application by using a CNAME that points to the accelerator DNS.
   • BConfigure three Application Load Balancers (ALBs) in the three AWS Regions to address the on-premises endpoints. Create an accelerator by using AWS Global Accelerator, and register the ALBs as its endpoints. Provide access to the application by using a CNAME that points to the accelerator DNS.
   • CConfigure three Network Load Balancers (NLBs) in the three AWS Regions to address the on-premises endpoints. In Route 53, create a latency-based record that points to the three NLBs, and use it as an origin for an Amazon CloudFront distribution. Provide access to the application by using a CNAME that points to the CloudFront DNS.
   • DConfigure three Application Load Balancers (ALBs) in the three AWS Regions to address the on-premises endpoints. In Route 53, create a latency-based record that points to the three ALBs, and use it as an origin for an Amazon CloudFront distribution. Provide access to the application by using a CNAME that points to the CloudFront DNS.

   Show answer

   Answer: A

   Explanation

   NLBs allow UDP traffic (ALBs don't support UDP) Global Accelerator uses Anycast IP addresses and its global network to intelligently route users to the optimal endpoint Using NLBs as Global Accelerator endpoints provides improved availability and DDoS protection.

   Source: Adapted from community discussion — Guru4Cloud

   References

   • AWS documentation

   Next question

9. Question 319 · 1017 in bank

   A solutions architect wants all new users to have specific complexity requirements and mandatory rotation periods for IAM user passwords. What should the solutions architect do to accomplish this?

   • ASet an overall password policy for the entire AWS account.
   • BSet a password policy for each IAM user in the AWS account.
   • CUse third-party vendor software to set password requirements.
   • DAttach an Amazon CloudWatch rule to the Create_newuser event to set the password with the appropriate requirements.

   Show answer

   Answer: A

   Explanation

   i get confused, the question saids "NEW" users... if you apply this password policy it would affect all the users in the AWS account....

   Source: Adapted from community discussion — lostmagnet001

   References

   • AWS documentation

   Next question

10. Question 320 · 1017 in bank

    A company has migrated an application to Amazon EC2 Linux instances. One of these EC2 instances runs several 1-hour tasks on a schedule. These tasks were written by different teams and have no common programming language. The company is concerned about performance and scalability while these tasks run on a single instance. A solutions architect needs to implement a solution to resolve these concerns. Which solution will meet these requirements with the LEAST operational overhead?

    • AUse AWS Batch to run the tasks as jobs. Schedule the jobs by using Amazon EventBridge (Amazon CloudWatch Events).
    • BConvert the EC2 instance to a container. Use AWS App Runner to create the container on demand to run the tasks as jobs.
    • CCopy the tasks into AWS Lambda functions. Schedule the Lambda functions by using Amazon EventBridge (Amazon CloudWatch Events).
    • DCreate an Amazon Machine Image (AMI) of the EC2 instance that runs the tasks. Create an Auto Scaling group with the AMI to run multiple copies of the instance.

    Show answer

    Answer: A

    Explanation

    But the question states "several 1-hour tasks on a schedule", and the maximum runtime for Lambda is 15 minutes, so it can't be A.

    Source: Adapted from community discussion — FourOfAKind

    References

    • AWS documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SAA-C03 practice, question 311. 1017 questions available.