SAA-C03 practice questions 341–350

1. Question 341 · 1017 in bank

   A company is deploying a two-tier web application in a VPC. The web tier is using an Amazon EC2 Auto Scaling group with public subnets that span multiple Availability Zones. The database tier consists of an Amazon RDS for MySQL DB instance in separate private subnets. The web tier requires access to the database to retrieve product information. The web application is not working as intended. The web application reports that it cannot connect to the database. The database is confirmed to be up and running. All configurations for the network ACLs, security groups, and route tables are still in their default states. What should a solutions architect recommend to fix the application?

   • AAdd an explicit rule to the private subnet’s network ACL to allow traffic from the web tier’s EC2 instances.
   • BAdd a route in the VPC route table to allow traffic between the web tier’s EC2 instances and the database tier.
   • CDeploy the web tier's EC2 instances and the database tier’s RDS instance into two separate VPCs, and configure VPC peering.
   • DAdd an inbound rule to the security group of the database tier’s RDS instance to allow traffic from the web tiers security group.

   Show answer

   Answer: D

   Explanation

   Security group defaults block all inbound traffic..Add an inbound rule to the security group of the database tier’s RDS instance to allow traffic from the web tiers security group

   Source: Adapted from community discussion — TariqKipkemei

   References

   • AWS documentation

   Next question

2. Question 342 · 1017 in bank

   A company has a large dataset for its online advertising business stored in an Amazon RDS for MySQL DB instance in a single Availability Zone. The company wants business reporting queries to run without impacting the write operations to the production DB instance. Which solution meets these requirements?

   • ADeploy RDS read replicas to process the business reporting queries.
   • BScale out the DB instance horizontally by placing it behind an Elastic Load Balancer.
   • CScale up the DB instance to a larger instance type to handle write operations and queries.
   • DDeploy the DB instance in multiple Availability Zones to process the business reporting queries.

   Show answer

   Answer: A

   Explanation

   A) Deploy RDS read replicas to process the business reporting queries. The key points are: RDS read replicas allow read-only copies of the production DB instance to be created Queries to the read replica don't affect the source DB instance performance This isolates reporting queries from production traffic and write operations So using RDS read replicas is the best way to meet the requirements of running reporting queries without impacting production write operations.

   Source: Adapted from community discussion — Guru4Cloud

   Next question

3. Question 343 · 1017 in bank

   A company maintains a searchable repository of items on its website. The data is stored in an Amazon RDS for MySQL database table that contains more than 10 million rows. The database has 2 TB of General Purpose SSD storage. There are millions of updates against this data every day through the company's website. The company has noticed that some insert operations are taking 10 seconds or longer. The company has determined that the database storage performance is the problem. Which solution addresses this performance issue?

   • AChange the storage type to Provisioned IOPS SSD.
   • BChange the DB instance to a memory optimized instance class.
   • CChange the DB instance to a burstable performance instance class.
   • DEnable Multi-AZ RDS read replicas with MySQL native asynchronous replication.

   Show answer

   Answer: A

   Explanation

   A: Made for high levels of I/O opps for consistent, predictable performance. B: Can improve performance of insert opps, but it's a storage performance rather than processing power problem C: for moderate CPU usage D: for scale read-only replicas and doesn't improve performance of insert opps on the primary DB instance

   Source: Adapted from community discussion — pazabal

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

4. Question 344 · 1017 in bank

   Select 2

   A company hosts a three-tier ecommerce application on a fleet of Amazon EC2 instances. The instances run in an Auto Scaling group behind an Application Load Balancer (ALB). All ecommerce data is stored in an Amazon RDS for MariaDB Multi-AZ DB instance. The company wants to optimize customer session management during transactions. The application must store session data durably. Which solutions will meet these requirements? (Choose two.)

   • ATurn on the sticky sessions feature (session affinity) on the ALB.
   • BUse an Amazon DynamoDB table to store customer session information.
   • CDeploy an Amazon Cognito user pool to manage user session information.
   • DDeploy an Amazon ElastiCache for Redis cluster to store customer session information.
   • EUse AWS Systems Manager Application Manager in the application to manage user session information.

   Show answer

   Answer: AD

   Explanation

   A. Turn on the sticky sessions feature (session affinity) on the ALB. D. Deploy an Amazon ElastiCache for Redis cluster to store customer session information. The best solution for optimizing customer session management during transactions is to turn on the sticky sessions feature (session affinity) on the ALB to ensure that each client request is routed to the same web server in the Auto Scaling group. This will ensure that the customer session is maintained throughout the transaction. In addition, the company should deploy an Amazon ElastiCache for Redis cluster to store customer session information durably. This will ensure that the customer session information is readily available and easily accessible during a transaction.

   Source: Adapted from community discussion — cegama543

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

5. Question 345 · 1017 in bank

   A company needs a backup strategy for its three-tier stateless web application. The web application runs on Amazon EC2 instances in an Auto Scaling group with a dynamic scaling policy that is configured to respond to scaling events. The database tier runs on Amazon RDS for PostgreSQL. The web application does not require temporary local storage on the EC2 instances. The company’s recovery point objective (RPO) is 2 hours. The backup strategy must maximize scalability and optimize resource utilization for this environment. Which solution will meet these requirements?

   • ATake snapshots of Amazon Elastic Block Store (Amazon EBS) volumes of the EC2 instances and database every 2 hours to meet the RPO.
   • BConfigure a snapshot lifecycle policy to take Amazon Elastic Block Store (Amazon EBS) snapshots. Enable automated backups in Amazon RDS to meet the RPO.
   • CRetain the latest Amazon Machine Images (AMIs) of the web and application tiers. Enable automated backups in Amazon RDS and use point-in-time recovery to meet the RPO.
   • DTake snapshots of Amazon Elastic Block Store (Amazon EBS) volumes of the EC2 instances every 2 hours. Enable automated backups in Amazon RDS and use point-in-time recovery to meet the RPO.

   Show answer

   Answer: C

   Explanation

   that if there is no temporary local storage on the EC2 instances, then snapshots of EBS volumes are not necessary. Therefore, if your application does not require temporary storage on EC2 instances, using AMIs to back up the web and application tiers is sufficient to restore the system after a failure. Snapshots of EBS volumes would be necessary if you want to back up the entire EC2 instance, including any applications and temporary data stored on the EBS volumes attached to the instances. When you take a snapshot of an EBS volume, it backs up the entire contents of that volume. This ensures that you can restore the entire EC2 instance to a specific point in time more quickly. However, if there is no temporary data stored on the EBS volumes, then snapshots of EBS volumes are not necessary.

   Source: Adapted from community discussion — elearningtakai

   References

   • repost.aws documentation

   Next question

6. Question 346 · 1017 in bank

   A company wants to deploy a new public web application on AWS. The application includes a web server tier that uses Amazon EC2 instances. The application also includes a database tier that uses an Amazon RDS for MySQL DB instance. The application must be secure and accessible for global customers that have dynamic IP addresses. How should a solutions architect configure the security groups to meet these requirements?

   • AConfigure the security group for the web servers to allow inbound traffic on port 443 from 0.0.0.0/0. Configure the security group for the DB instance to allow inbound traffic on port 3306 from the security group of the web servers.
   • BConfigure the security group for the web servers to allow inbound traffic on port 443 from the IP addresses of the customers. Configure the security group for the DB instance to allow inbound traffic on port 3306 from the security group of the web servers.
   • CConfigure the security group for the web servers to allow inbound traffic on port 443 from the IP addresses of the customers. Configure the security group for the DB instance to allow inbound traffic on port 3306 from the IP addresses of the customers.
   • DConfigure the security group for the web servers to allow inbound traffic on port 443 from 0.0.0.0/0. Configure the security group for the DB instance to allow inbound traffic on port 3306 from 0.0.0.0/0.

   Show answer

   Answer: A

   Explanation

   "The application must be secure and accessible for global customers that have dynamic IP addresses." This just means "anyone" so BC are wrong as you cannot know in advance about the dynamic IP addresses. D is just opening the DB to the internet. A is most secure as web is open to internet and db is open to web only.

   Source: Adapted from community discussion — awsgeek75

   Next question

7. Question 347 · 1017 in bank

   A payment processing company records all voice communication with its customers and stores the audio files in an Amazon S3 bucket. The company needs to capture the text from the audio files. The company must remove from the text any personally identifiable information (PII) that belongs to customers. What should a solutions architect do to meet these requirements?

   • AProcess the audio files by using Amazon Kinesis Video Streams. Use an AWS Lambda function to scan for known PII patterns.
   • BWhen an audio file is uploaded to the S3 bucket, invoke an AWS Lambda function to start an Amazon Textract task to analyze the call recordings.
   • CConfigure an Amazon Transcribe transcription job with PII redaction turned on. When an audio file is uploaded to the S3 bucket, invoke an AWS Lambda function to start the transcription job. Store the output in a separate S3 bucket.
   • DCreate an Amazon Connect contact flow that ingests the audio files with transcription turned on. Embed an AWS Lambda function to scan for known PII patterns. Use Amazon EventBridge to start the contact flow when an audio file is uploaded to the S3 bucket.

   Show answer

   Answer: C

   Explanation

   Option C is the most suitable solution as it suggests using Amazon Transcribe with PII redaction turned on. When an audio file is uploaded to the S3 bucket, an AWS Lambda function can be used to start the transcription job. The output can be stored in a separate S3 bucket to ensure that the PII redaction is applied to the transcript. Amazon Transcribe can redact PII such as credit card numbers, social security numbers, and phone numbers.

   Source: Adapted from community discussion — elearningtakai

   References

   • AWS documentation
   • AWS documentation

   Next question

8. Question 348 · 1017 in bank

   A company is running a multi-tier ecommerce web application in the AWS Cloud. The application runs on Amazon EC2 instances with an Amazon RDS for MySQL Multi-AZ DB instance. Amazon RDS is configured with the latest generation DB instance with 2,000 GB of storage in a General Purpose SSD (gp3) Amazon Elastic Block Store (Amazon EBS) volume. The database performance affects the application during periods of high demand. A database administrator analyzes the logs in Amazon CloudWatch Logs and discovers that the application performance always degrades when the number of read and write IOPS is higher than 20,000. What should a solutions architect do to improve the application performance?

   • AReplace the volume with a magnetic volume.
   • BIncrease the number of IOPS on the gp3 volume.
   • CReplace the volume with a Provisioned IOPS SSD (io2) volume.
   • DReplace the 2,000 GB gp3 volume with two 1,000 GB gp3 volumes.

   Show answer

   Answer: C

   Explanation

   https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Storage.html - Right there in the first paragraph: "Amazon RDS provides three storage types: General Purpose SSD (also known as gp2 and gp3), Provisioned IOPS SSD (also known as io1 and io2 Block Express), and magnetic (also known as standard). They differ in performance characteristics and price, which means that you can tailor your storage performance and cost to the needs of your database workload. You can create Db2, MySQL, MariaDB, Oracle, and PostgreSQL RDS DB instances with up to 64 tebibytes (TiB) of storage. "

   Source: Adapted from community discussion — zits88

   References

   • AWS documentation
   • repost.aws documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

9. Question 349 · 1017 in bank

   An IAM user made several configuration changes to AWS resources in their company's account during a production deployment last week. A solutions architect learned that a couple of security group rules are not configured as desired. The solutions architect wants to confirm which IAM user was responsible for making changes. Which service should the solutions architect use to find the desired information?

   • AAmazon GuardDuty
   • BAmazon Inspector
   • CAWS CloudTrail
   • DAWS Config

   Show answer

   Answer: C

   Explanation

   C. AWS CloudTrail The best option is to use AWS CloudTrail to find the desired information. AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of AWS account activities. CloudTrail can be used to log all changes made to resources in an AWS account, including changes made by IAM users, EC2 instances, AWS management console, and other AWS services. By using CloudTrail, the solutions architect can identify the IAM user who made the configuration changes to the security group rules.

   Source: Adapted from community discussion — cegama543

   Next question

10. Question 350 · 1017 in bank

    A company has implemented a self-managed DNS service on AWS. The solution consists of the following: • Amazon EC2 instances in different AWS Regions • Endpoints of a standard accelerator in AWS Global Accelerator The company wants to protect the solution against DDoS attacks. What should a solutions architect do to meet this requirement?

    • ASubscribe to AWS Shield Advanced. Add the accelerator as a resource to protect.
    • BSubscribe to AWS Shield Advanced. Add the EC2 instances as resources to protect.
    • CCreate an AWS WAF web ACL that includes a rate-based rule. Associate the web ACL with the accelerator.
    • DCreate an AWS WAF web ACL that includes a rate-based rule. Associate the web ACL with the EC2 instances.

    Show answer

    Answer: A

    Explanation

    AWS Shield is a managed service that provides protection against Distributed Denial of Service (DDoS) attacks for applications running on AWS. AWS Shield Standard is automatically enabled to all AWS customers at no additional cost. AWS Shield Advanced is an optional paid service. AWS Shield Advanced provides additional protections against more sophisticated and larger attacks for your applications running on Amazon Elastic Compute Cloud (EC2), Elastic Load Balancing (ELB), Amazon CloudFront, AWS Global Accelerator, and Route 53.

    Source: Adapted from community discussion — ktulu2602

    References

    • AWS documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SAA-C03 practice, question 341. 1017 questions available.