SAA-C03 practice questions 401–410

1. Question 401 · 1017 in bank

   A company hosts a multi-tier web application on Amazon Linux Amazon EC2 instances behind an Application Load Balancer. The instances run in an Auto Scaling group across multiple Availability Zones. The company observes that the Auto Scaling group launches more On-Demand Instances when the application's end users access high volumes of static web content. The company wants to optimize cost. What should a solutions architect do to redesign the application MOST cost-effectively?

   • AUpdate the Auto Scaling group to use Reserved Instances instead of On-Demand Instances.
   • BUpdate the Auto Scaling group to scale by launching Spot Instances instead of On-Demand Instances.
   • CCreate an Amazon CloudFront distribution to host the static web contents from an Amazon S3 bucket.
   • DCreate an AWS Lambda function behind an Amazon API Gateway API to host the static website contents.

   Show answer

   Answer: C

   Explanation

   C: Cost effective static content scaling = CloudFront A and B scale instances so not the best use of money for static content D Probably most expensive way of service static content at scale as you'll be charged for Lambda execution also

   Source: Adapted from community discussion — awsgeek75

   Next question

2. Question 402 · 1017 in bank

   A company stores several petabytes of data across multiple AWS accounts. The company uses AWS Lake Formation to manage its data lake. The company's data science team wants to securely share selective data from its accounts with the company's engineering team for analytical purposes. Which solution will meet these requirements with the LEAST operational overhead?

   • ACopy the required data to a common account. Create an IAM access role in that account. Grant access by specifying a permission policy that includes users from the engineering team accounts as trusted entities.
   • BUse the Lake Formation permissions Grant command in each account where the data is stored to allow the required engineering team users to access the data.
   • CUse AWS Data Exchange to privately publish the required data to the required engineering team accounts.
   • DUse Lake Formation tag-based access control to authorize and grant cross-account permissions for the required data to the engineering team accounts.

   Show answer

   Answer: D

   Explanation

   By utilizing Lake Formation's tag-based access control, you can define tags and tag-based policies to grant selective access to the required data for the engineering team accounts. This approach allows you to control access at a granular level without the need to copy or move the data to a common account or manage permissions individually in each account. It provides a centralized and scalable solution for securely sharing data across accounts with minimal operational overhead.

   Source: Adapted from community discussion — cloudenthusiast

   References

   • AWS documentation

   Next question

3. Question 403 · 1017 in bank

   A company wants to host a scalable web application on AWS. The application will be accessed by users from different geographic regions of the world. Application users will be able to download and upload unique data up to gigabytes in size. The development team wants a cost-effective solution to minimize upload and download latency and maximize performance. What should a solutions architect do to accomplish this?

   • AUse Amazon S3 with Transfer Acceleration to host the application.
   • BUse Amazon S3 with CacheControl headers to host the application.
   • CUse Amazon EC2 with Auto Scaling and Amazon CloudFront to host the application.
   • DUse Amazon EC2 with Auto Scaling and Amazon ElastiCache to host the application.

   Show answer

   Answer: A

   Explanation

   The question asks for "a cost-effective solution [ONLY TO] to minimize upload and download latency and maximize performance", not for the actual application. And the 'cost-effective solution to minimize upload and download latency and maximize performance' is S3 Transfer Acceleration. Obviously there is more required to host the app, but that is not asked for.

   Source: Adapted from community discussion — pentium75

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

4. Question 404 · 1017 in bank

   A company has hired a solutions architect to design a reliable architecture for its application. The application consists of one Amazon RDS DB instance and two manually provisioned Amazon EC2 instances that run web servers. The EC2 instances are located in a single Availability Zone. An employee recently deleted the DB instance, and the application was unavailable for 24 hours as a result. The company is concerned with the overall reliability of its environment. What should the solutions architect do to maximize reliability of the application's infrastructure?

   • ADelete one EC2 instance and enable termination protection on the other EC2 instance. Update the DB instance to be Multi-AZ, and enable deletion protection.
   • BUpdate the DB instance to be Multi-AZ, and enable deletion protection. Place the EC2 instances behind an Application Load Balancer, and run them in an EC2 Auto Scaling group across multiple Availability Zones.
   • CCreate an additional DB instance along with an Amazon API Gateway and an AWS Lambda function. Configure the application to invoke the Lambda function through API Gateway. Have the Lambda function write the data to the two DB instances.
   • DPlace the EC2 instances in an EC2 Auto Scaling group that has multiple subnets located in multiple Availability Zones. Use Spot Instances instead of On-Demand Instances. Set up Amazon CloudWatch alarms to monitor the health of the instances Update the DB instance to be Multi-AZ, and enable deletion protection.

   Show answer

   Answer: B

   Explanation

   A: Deleting one EC2 instance makes no sense. Why would you do that? C: API Gateway, Lambda etc are all nice but they don't solve the problem of DB instance deletion D: EC2 subnet blah blah, what? The problem is reliability, not networking! B is correct as it solves the DB deletion issue and increases reliability by Multi AZ scaling of EC2 instances

   Source: Adapted from community discussion — awsgeek75

   Next question

5. Question 405 · 1017 in bank

   A company is storing 700 terabytes of data on a large network-attached storage (NAS) system in its corporate data center. The company has a hybrid environment with a 10 Gbps AWS Direct Connect connection. After an audit from a regulator, the company has 90 days to move the data to the cloud. The company needs to move the data efficiently and without disruption. The company still needs to be able to access and update the data during the transfer window. Which solution will meet these requirements?

   • ACreate an AWS DataSync agent in the corporate data center. Create a data transfer task Start the transfer to an Amazon S3 bucket.
   • BBack up the data to AWS Snowball Edge Storage Optimized devices. Ship the devices to an AWS data center. Mount a target Amazon S3 bucket on the on-premises file system.
   • CUse rsync to copy the data directly from local storage to a designated Amazon S3 bucket over the Direct Connect connection.
   • DBack up the data on tapes. Ship the tapes to an AWS data center. Mount a target Amazon S3 bucket on the on-premises file system.

   Show answer

   Answer: A

   Explanation

   For those who wonders why not B. Snowball Edge Storage Optimized device for data transfer is up to 100TB https://docs.aws.amazon.com/snowball/latest/developer-guide/device-differences.html

   Source: Adapted from community discussion — wRhlH

   References

   • AWS documentation

   Next question

6. Question 406 · 1017 in bank

   A company stores data in PDF format in an Amazon S3 bucket. The company must follow a legal requirement to retain all new and existing data in Amazon S3 for 7 years. Which solution will meet these requirements with the LEAST operational overhead?

   • ATurn on the S3 Versioning feature for the S3 bucket. Configure S3 Lifecycle to delete the data after 7 years. Configure multi-factor authentication (MFA) delete for all S3 objects.
   • BTurn on S3 Object Lock with governance retention mode for the S3 bucket. Set the retention period to expire after 7 years. Recopy all existing objects to bring the existing data into compliance.
   • CTurn on S3 Object Lock with compliance retention mode for the S3 bucket. Set the retention period to expire after 7 years. Recopy all existing objects to bring the existing data into compliance.
   • DTurn on S3 Object Lock with compliance retention mode for the S3 bucket. Set the retention period to expire after 7 years. Use S3 Batch Operations to bring the existing data into compliance.

   Show answer

   Answer: D

   Explanation

   A: Versioning, not relevant B: Governance, it won't enforce object lock C: Recopy existing objects may work but lots of operational overhead (see link) D: Compliance on existing objects with batch operations is least operational overhead https://repost.aws/questions/QUGKrl8XRLTEeuIzUHq0Ikew/s3-object-lock-on-existing-s3-objects

   Source: Adapted from community discussion — awsgeek75

   References

   • AWS documentation
   • repost.aws documentation
   • AWS documentation

   Next question

7. Question 407 · 1017 in bank

   A company has a stateless web application that runs on AWS Lambda functions that are invoked by Amazon API Gateway. The company wants to deploy the application across multiple AWS Regions to provide Regional failover capabilities. What should a solutions architect do to route traffic to multiple Regions?

   • ACreate Amazon Route 53 health checks for each Region. Use an active-active failover configuration.
   • BCreate an Amazon CloudFront distribution with an origin for each Region. Use CloudFront health checks to route traffic.
   • CCreate a transit gateway. Attach the transit gateway to the API Gateway endpoint in each Region. Configure the transit gateway to route requests.
   • DCreate an Application Load Balancer in the primary Region. Set the target group to point to the API Gateway endpoint hostnames in each Region.

   Show answer

   Answer: A

   Explanation

   Global, Reduce latency, health checks, no failover = Amazon CloudFront Global ,Reduce latency, health checks, failover, Route traffic = Amazon Route 53 option A has more weight.

   Source: Adapted from community discussion — TariqKipkemei

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

8. Question 408 · 1017 in bank

   A company has two VPCs named Management and Production. The Management VPC uses VPNs through a customer gateway to connect to a single device in the data center. The Production VPC uses a virtual private gateway with two attached AWS Direct Connect connections. The Management and Production VPCs both use a single VPC peering connection to allow communication between the applications. What should a solutions architect do to mitigate any single point of failure in this architecture?

   • AAdd a set of VPNs between the Management and Production VPCs.
   • BAdd a second virtual private gateway and attach it to the Management VPC.
   • CAdd a second set of VPNs to the Management VPC from a second customer gateway device.
   • DAdd a second VPC peering connection between the Management VPC and the Production VPC.

   Show answer

   Answer: C

   Explanation

   C is the correct option to mitigate the single point of failure. The Management VPC currently has a single VPN connection through one customer gateway device. This is a single point of failure. Adding a second set of VPN connections from the Management VPC to a second customer gateway device provides redundancy and eliminates this single point of failure.

   Source: Adapted from community discussion — Guru4Cloud

   Next question

9. Question 409 · 1017 in bank

   A company runs its application on an Oracle database. The company plans to quickly migrate to AWS because of limited resources for the database, backup administration, and data center maintenance. The application uses third-party database features that require privileged access. Which solution will help the company migrate the database to AWS MOST cost-effectively?

   • AMigrate the database to Amazon RDS for Oracle. Replace third-party features with cloud services.
   • BMigrate the database to Amazon RDS Custom for Oracle. Customize the database settings to support third-party features.
   • CMigrate the database to an Amazon EC2 Amazon Machine Image (AMI) for Oracle. Customize the database settings to support third-party features.
   • DMigrate the database to Amazon RDS for PostgreSQL by rewriting the application code to remove dependency on Oracle APEX.

   Show answer

   Answer: B

   Explanation

   Key constraints: Limited resources for DB admin and cost. 3rd party db features with privileged access. A: Won't work due to 3rd party features C: AMI with Oracle may work but again overhead of backed, maintenance etc D: Too much overhead in rewrite B: Actually supports Oracle 3rd party features Caution: If this is only about APEX as suggested in option D, then A is also a possible answer: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Appendix.Oracle.Options.APEX.html

   Source: Adapted from community discussion — awsgeek75

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

10. Question 410 · 1017 in bank

    Select 2

    A company has a data ingestion workflow that consists of the following: • An Amazon Simple Notification Service (Amazon SNS) topic for notifications about new data deliveries • An AWS Lambda function to process the data and record metadata The company observes that the ingestion workflow fails occasionally because of network connectivity issues. When such a failure occurs, the Lambda function does not ingest the corresponding data unless the company manually reruns the job. Which combination of actions should a solutions architect take to ensure that the Lambda function ingests all data in the future? (Choose two.)

    • ADeploy the Lambda function in multiple Availability Zones.
    • BCreate an Amazon Simple Queue Service (Amazon SQS) queue, and subscribe it to the SNS topic.
    • CIncrease the CPU and memory that are allocated to the Lambda function.
    • DIncrease provisioned throughput for the Lambda function.
    • EModify the Lambda function to read from an Amazon Simple Queue Service (Amazon SQS) queue.

    Show answer

    Answer: BE

    Explanation

    A, C, D options are out, since Lambda is fully managed service which provides high availability and scalability by its own Answers are B and E

    Source: Adapted from community discussion — Incognito013

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SAA-C03 practice, question 401. 1017 questions available.