SAA-C03 practice questions 331–340

1. Question 331 · 1017 in bank

   A company hosts a frontend application that uses an Amazon API Gateway API backend that is integrated with AWS Lambda. When the API receives requests, the Lambda function loads many libraries. Then the Lambda function connects to an Amazon RDS database, processes the data, and returns the data to the frontend application. The company wants to ensure that response latency is as low as possible for all its users with the fewest number of changes to the company's operations. Which solution will meet these requirements?

   • AEstablish a connection between the frontend application and the database to make queries faster by bypassing the API.
   • BConfigure provisioned concurrency for the Lambda function that handles the requests.
   • CCache the results of the queries in Amazon S3 for faster retrieval of similar datasets.
   • DIncrease the size of the database to increase the number of connections Lambda can establish at one time.

   Show answer

   Answer: B

   Explanation

   Key: the Lambda function loads many libraries Configuring provisioned concurrency would get rid of the "cold start" of the function therefore speeding up the proccess.

   Source: Adapted from community discussion — UnluckyDucky

   References

   • AWS documentation

   Next question

2. Question 332 · 1017 in bank

   A company is hosting a static website on Amazon S3 and is using Amazon Route 53 for DNS. The website is experiencing increased demand from around the world. The company must decrease latency for users who access the website. Which solution meets these requirements MOST cost-effectively?

   • AReplicate the S3 bucket that contains the website to all AWS Regions. Add Route 53 geolocation routing entries.
   • BProvision accelerators in AWS Global Accelerator. Associate the supplied IP addresses with the S3 bucket. Edit the Route 53 entries to point to the IP addresses of the accelerators.
   • CAdd an Amazon CloudFront distribution in front of the S3 bucket. Edit the Route 53 entries to point to the CloudFront distribution.
   • DEnable S3 Transfer Acceleration on the bucket. Edit the Route 53 entries to point to the new endpoint.

   Show answer

   Answer: C

   Explanation

   Option A (replicating the S3 bucket to all AWS Regions) can be costly and complex, requiring replication of data across multiple Regions and managing synchronization. It may not provide a significant latency improvement compared to the CloudFront solution. Option B (provisioning accelerators in AWS Global Accelerator) can be more expensive as it adds an extra layer of infrastructure (accelerators) and requires associating IP addresses with the S3 bucket. CloudFront already includes global edge locations and provides similar acceleration capabilities. Option D (enabling S3 Transfer Acceleration) can help improve upload speed to the S3 bucket but may not have a significant impact on reducing latency for website visitors. Therefore, option C is the most cost-effective solution as it leverages CloudFront's caching and global distribution capabilities to decrease latency and improve website performance.

   Source: Adapted from community discussion — cookieMr

   Next question

3. Question 333 · 1017 in bank

   A company is migrating its on-premises workload to the AWS Cloud. The company already uses several Amazon EC2 instances and Amazon RDS DB instances. The company wants a solution that automatically starts and stops the EC2 instances and DB instances outside of business hours. The solution must minimize cost and infrastructure maintenance. Which solution will meet these requirements?

   • AScale the EC2 instances by using elastic resize. Scale the DB instances to zero outside of business hours.
   • BExplore AWS Marketplace for partner solutions that will automatically start and stop the EC2 instances and DB instances on a schedule.
   • CLaunch another EC2 instance. Configure a crontab schedule to run shell scripts that will start and stop the existing EC2 instances and DB instances on a schedule.
   • DCreate an AWS Lambda function that will start and stop the EC2 instances and DB instances. Configure Amazon EventBridge to invoke the Lambda function on a schedule.

   Show answer

   Answer: D

   Explanation

   The most efficient solution for automatically starting and stopping EC2 instances and DB instances on a schedule while minimizing cost and infrastructure maintenance is to create an AWS Lambda function and configure Amazon EventBridge to invoke the function on a schedule. Option A, scaling EC2 instances by using elastic resize and scaling DB instances to zero outside of business hours, is not feasible as DB instances cannot be scaled to zero. Option B, exploring AWS Marketplace for partner solutions, may be an option, but it may not be the most efficient solution and could potentially add additional costs. Option C, launching another EC2 instance and configuring a crontab schedule to run shell scripts that will start and stop the existing EC2 instances and DB instances on a schedule, adds unnecessary infrastructure and maintenance.

   Source: Adapted from community discussion — ktulu2602

   Next question

4. Question 334 · 1017 in bank

   A company hosts a three-tier web application that includes a PostgreSQL database. The database stores the metadata from documents. The company searches the metadata for key terms to retrieve documents that the company reviews in a report each month. The documents are stored in Amazon S3. The documents are usually written only once, but they are updated frequently. The reporting process takes a few hours with the use of relational queries. The reporting process must not prevent any document modifications or the addition of new documents. A solutions architect needs to implement a solution to speed up the reporting process. Which solution will meet these requirements with the LEAST amount of change to the application code?

   • ASet up a new Amazon DocumentDB (with MongoDB compatibility) cluster that includes a read replica. Scale the read replica to generate the reports.
   • BSet up a new Amazon Aurora PostgreSQL DB cluster that includes an Aurora Replica. Issue queries to the Aurora Replica to generate the reports.
   • CSet up a new Amazon RDS for PostgreSQL Multi-AZ DB instance. Configure the reporting module to query the secondary RDS node so that the reporting module does not affect the primary node.
   • DSet up a new Amazon DynamoDB table to store the documents. Use a fixed write capacity to support new document entries. Automatically scale the read capacity to support the reports.

   Show answer

   Answer: B

   Explanation

   The key reasons are: Aurora PostgreSQL provides native PostgreSQL compatibility, so minimal code changes would be required. Using an Aurora Replica separates the reporting workload from the main workload, preventing any slowdown of document updates/inserts. Aurora can auto-scale read replicas to handle the reporting load. This allows leveraging the existing PostgreSQL database without major changes. DynamoDB would require more significant rewrite of data access code. RDS Multi-AZ alone would not fully separate the workloads, as the secondary is for HA/failover more than scaling read workloads.

   Source: Adapted from community discussion — Guru4Cloud

   Next question

5. Question 335 · 1017 in bank

   A company has a three-tier application on AWS that ingests sensor data from its users’ devices. The traffic flows through a Network Load Balancer (NLB), then to Amazon EC2 instances for the web tier, and finally to EC2 instances for the application tier. The application tier makes calls to a database. What should a solutions architect do to improve the security of the data in transit?

   • AConfigure a TLS listener. Deploy the server certificate on the NLB.
   • BConfigure AWS Shield Advanced. Enable AWS WAF on the NLB.
   • CChange the load balancer to an Application Load Balancer (ALB). Enable AWS WAF on the ALB.
   • DEncrypt the Amazon Elastic Block Store (Amazon EBS) volume on the EC2 instances by using AWS Key Management Service (AWS KMS).

   Show answer

   Answer: A

   Explanation

   Network Load Balancers now support TLS protocol. With this launch, you can now offload resource intensive decryption/encryption from your application servers to a high throughput, and low latency Network Load Balancer. Network Load Balancer is now able to terminate TLS traffic and set up connections with your targets either over TCP or TLS protocol. https://docs.aws.amazon.com/elasticloadbalancing/latest/network/create-tls-listener.html https://exampleloadbalancer.com/nlbtls_demo.html

   Source: Adapted from community discussion — fruto123

   References

   • AWS documentation

   Next question

6. Question 336 · 1017 in bank

   A company is planning to migrate a commercial off-the-shelf application from its on-premises data center to AWS. The software has a software licensing model using sockets and cores with predictable capacity and uptime requirements. The company wants to use its existing licenses, which were purchased earlier this year. Which Amazon EC2 pricing option is the MOST cost-effective?

   • ADedicated Reserved Hosts
   • BDedicated On-Demand Hosts
   • CDedicated Reserved Instances
   • DDedicated On-Demand Instances

   Show answer

   Answer: A

   Explanation

   Dedicated Host Reservations provide a billing discount compared to running On-Demand Dedicated Hosts. Reservations are available in three payment options. https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/dedicated-hosts-overview.html

   Source: Adapted from community discussion — fruto123

   References

   • AWS documentation
   • AWS documentation

   Next question

7. Question 337 · 1017 in bank

   A company runs an application on Amazon EC2 Linux instances across multiple Availability Zones. The application needs a storage layer that is highly available and Portable Operating System Interface (POSIX)-compliant. The storage layer must provide maximum data durability and must be shareable across the EC2 instances. The data in the storage layer will be accessed frequently for the first 30 days and will be accessed infrequently after that time. Which solution will meet these requirements MOST cost-effectively?

   • AUse the Amazon S3 Standard storage class. Create an S3 Lifecycle policy to move infrequently accessed data to S3 Glacier.
   • BUse the Amazon S3 Standard storage class. Create an S3 Lifecycle policy to move infrequently accessed data to S3 Standard-Infrequent Access (S3 Standard-IA).
   • CUse the Amazon Elastic File System (Amazon EFS) Standard storage class. Create a lifecycle management policy to move infrequently accessed data to EFS Standard-Infrequent Access (EFS Standard-IA).
   • DUse the Amazon Elastic File System (Amazon EFS) One Zone storage class. Create a lifecycle management policy to move infrequently accessed data to EFS One Zone-Infrequent Access (EFS One Zone-IA).

   Show answer

   Answer: C

   Explanation

   Multi AZ = both EFS and S3 support Storage classes = both EFS and S3 support POSIX file system access = only Amazon EFS supports

   Source: Adapted from community discussion — TariqKipkemei

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

8. Question 338 · 1017 in bank

   A solutions architect is creating a new VPC design. There are two public subnets for the load balancer, two private subnets for web servers, and two private subnets for MySQL. The web servers use only HTTPS. The solutions architect has already created a security group for the load balancer allowing port 443 from 0.0.0.0/0. Company policy requires that each resource has the least access required to still be able to perform its tasks. Which additional configuration strategy should the solutions architect use to meet these requirements?

   • ACreate a security group for the web servers and allow port 443 from 0.0.0.0/0. Create a security group for the MySQL servers and allow port 3306 from the web servers security group.
   • BCreate a network ACL for the web servers and allow port 443 from 0.0.0.0/0. Create a network ACL for the MySQL servers and allow port 3306 from the web servers security group.
   • CCreate a security group for the web servers and allow port 443 from the load balancer. Create a security group for the MySQL servers and allow port 3306 from the web servers security group.
   • DCreate a network ACL for the web servers and allow port 443 from the load balancer. Create a network ACL for the MySQL servers and allow port 3306 from the web servers security group.

   Show answer

   Answer: C

   Explanation

   Load balancer is public facing accepting all traffic coming towards the VPC (0.0.0.0/0). The web server needs to trust traffic originating from the ALB. The DB will only trust traffic originating from the Web server on port 3306 for Mysql

   Source: Adapted from community discussion — WherecanIstart

   Next question

9. Question 339 · 1017 in bank

   An ecommerce company is running a multi-tier application on AWS. The front-end and backend tiers both run on Amazon EC2, and the database runs on Amazon RDS for MySQL. The backend tier communicates with the RDS instance. There are frequent calls to return identical datasets from the database that are causing performance slowdowns. Which action should be taken to improve the performance of the backend?

   • AImplement Amazon SNS to store the database calls.
   • BImplement Amazon ElastiCache to cache the large datasets.
   • CImplement an RDS for MySQL read replica to cache database calls.
   • DImplement Amazon Kinesis Data Firehose to stream the calls to the database.

   Show answer

   Answer: B

   Explanation

   the best solution is to implement Amazon ElastiCache to cache the large datasets, which will store the frequently accessed data in memory, allowing for faster retrieval times. This can help to alleviate the frequent calls to the database, reduce latency, and improve the overall performance of the backend tier.

   Source: Adapted from community discussion — elearningtakai

   Next question

10. Question 340 · 1017 in bank

    Select 2

    A new employee has joined a company as a deployment engineer. The deployment engineer will be using AWS CloudFormation templates to create multiple AWS resources. A solutions architect wants the deployment engineer to perform job activities while following the principle of least privilege. Which combination of actions should the solutions architect take to accomplish this goal? (Choose two.)

    • AHave the deployment engineer use AWS account root user credentials for performing AWS CloudFormation stack operations.
    • BCreate a new IAM user for the deployment engineer and add the IAM user to a group that has the PowerUsers IAM policy attached.
    • CCreate a new IAM user for the deployment engineer and add the IAM user to a group that has the AdministratorAccess IAM policy attached.
    • DCreate a new IAM user for the deployment engineer and add the IAM user to a group that has an IAM policy that allows AWS CloudFormation actions only.
    • ECreate an IAM role for the deployment engineer to explicitly define the permissions specific to the AWS CloudFormation stack and launch stacks using that IAM role.

    Show answer

    Answer: DE

    Explanation

    Option D, creating a new IAM user and adding them to a group with an IAM policy that allows AWS CloudFormation actions only, ensures that the deployment engineer has the necessary permissions to perform AWS CloudFormation operations while limiting access to other resources and actions. This aligns with the principle of least privilege by providing the minimum required permissions for their job activities. Option E, creating an IAM role with specific permissions for AWS CloudFormation stack operations and allowing the deployment engineer to assume that role, is another valid approach. By using an IAM role, the deployment engineer can assume the role when necessary, granting them temporary permissions to perform CloudFormation actions. This provides a level of separation and limits the permissions granted to the engineer to only the required CloudFormation operations.

    Source: Adapted from community discussion — alexandercamachop

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SAA-C03 practice, question 331. 1017 questions available.