SAA-C03 practice questions 411–420

1. Question 411 · 1017 in bank

   Select 3

   A company has a three-tier web application that is in a single server. The company wants to migrate the application to the AWS Cloud. The company also wants the application to align with the AWS Well-Architected Framework and to be consistent with AWS recommended best practices for security, scalability, and resiliency. Which combination of solutions will meet these requirements? (Choose three.)

   • ACreate a VPC across two Availability Zones with the application's existing architecture. Host the application with existing architecture on an Amazon EC2 instance in a private subnet in each Availability Zone with EC2 Auto Scaling groups. Secure the EC2 instance with security groups and network access control lists (network ACLs).
   • BSet up security groups and network access control lists (network ACLs) to control access to the database layer. Set up a single Amazon RDS database in a private subnet.
   • CCreate a VPC across two Availability Zones. Refactor the application to host the web tier, application tier, and database tier. Host each tier on its own private subnet with Auto Scaling groups for the web tier and application tier.
   • DUse a single Amazon RDS database. Allow database access only from the application tier security group.
   • EUse Elastic Load Balancers in front of the web tier. Control access by using security groups containing references to each layer's security groups.
   • FUse an Amazon RDS database Multi-AZ cluster deployment in private subnets. Allow database access only from application tier security groups.

   Show answer

   Answer: CEF

   Explanation

   The wording on this question makes things ambiguous for C. But, remember well-architected so: A: Not ideal as it is suggesting using existing architecture but with autoscaling EC2. Doesn't leave room for improvement on scaling or reliability on each tier. B: Single RDS, not well-architected D: Again, single RDS E,F are good options and C is only remaining good one.

   Source: Adapted from community discussion — awsgeek75

   Next question

2. Question 412 · 1017 in bank

   Select 3

   A company is migrating its applications and databases to the AWS Cloud. The company will use Amazon Elastic Container Service (Amazon ECS), AWS Direct Connect, and Amazon RDS. Which activities will be managed by the company's operational team? (Choose three.)

   • AManagement of the Amazon RDS infrastructure layer, operating system, and platforms
   • BCreation of an Amazon RDS DB instance and configuring the scheduled maintenance window
   • CConfiguration of additional software components on Amazon ECS for monitoring, patch management, log management, and host intrusion detection
   • DInstallation of patches for all minor and major database versions for Amazon RDS
   • EEnsure the physical security of the Amazon RDS infrastructure in the data center
   • FEncryption of the data that moves in transit through Direct Connect

   Show answer

   Answer: BCF

   Explanation

   Just to clarify on F. Direct Connect is an ISP and AWS offering, I consider it as a physical connection just like you get from your ISP at home. There is not security on it until you build security on the connection. AWS provides Direct Connect but it does not provide encryption level security on data movement through it by default. It's the customer's responsibility.

   Source: Adapted from community discussion — awsgeek75

   Next question

3. Question 413 · 1017 in bank

   A company runs a Java-based job on an Amazon EC2 instance. The job runs every hour and takes 10 seconds to run. The job runs on a scheduled interval and consumes 1 GB of memory. The CPU utilization of the instance is low except for short surges during which the job uses the maximum CPU available. The company wants to optimize the costs to run the job. Which solution will meet these requirements?

   • AUse AWS App2Container (A2C) to containerize the job. Run the job as an Amazon Elastic Container Service (Amazon ECS) task on AWS Fargate with 0.5 virtual CPU (vCPU) and 1 GB of memory.
   • BCopy the code into an AWS Lambda function that has 1 GB of memory. Create an Amazon EventBridge scheduled rule to run the code each hour.
   • CUse AWS App2Container (A2C) to containerize the job. Install the container in the existing Amazon Machine Image (AMI). Ensure that the schedule stops the container when the task finishes.
   • DConfigure the existing schedule to stop the EC2 instance at the completion of the job and restart the EC2 instance when the next job starts.

   Show answer

   Answer: B

   Explanation

   "AWS Batch jobs as EventBridge targets" at https://docs.aws.amazon.com/batch/latest/userguide/batch-cwe-target.html AWS Batch + Amazon EventBridge https://docs.aws.amazon.com/batch/latest/userguide/batch-cwe-target.html . AWS Lambda just for a point of time per period. Choose B.

   Source: Adapted from community discussion — james2033

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

4. Question 414 · 1017 in bank

   A company wants to implement a backup strategy for Amazon EC2 data and multiple Amazon S3 buckets. Because of regulatory requirements, the company must retain backup files for a specific time period. The company must not alter the files for the duration of the retention period. Which solution will meet these requirements?

   • AUse AWS Backup to create a backup vault that has a vault lock in governance mode. Create the required backup plan.
   • BUse Amazon Data Lifecycle Manager to create the required automated snapshot policy.
   • CUse Amazon S3 File Gateway to create the backup. Configure the appropriate S3 Lifecycle management.
   • DUse AWS Backup to create a backup vault that has a vault lock in compliance mode. Create the required backup plan.

   Show answer

   Answer: D

   Explanation

   D, Governance is like the goverment, they can do things you cannot , like delete files or backups :D Compliance, nobody can!

   Source: Adapted from community discussion — Efren

   References

   • AWS documentation

   Next question

5. Question 415 · 1017 in bank

   A company has resources across multiple AWS Regions and accounts. A newly hired solutions architect discovers a previous employee did not provide details about the resources inventory. The solutions architect needs to build and map the relationship details of the various workloads across all accounts. Which solution will meet these requirements in the MOST operationally efficient way?

   • AUse AWS Systems Manager Inventory to generate a map view from the detailed view report.
   • BUse AWS Step Functions to collect workload details. Build architecture diagrams of the workloads manually.
   • CUse Workload Discovery on AWS to generate architecture diagrams of the workloads.
   • DUse AWS X-Ray to view the workload details. Build architecture diagrams with relationships.

   Show answer

   Answer: C

   Explanation

   Option A: AWS SSM offers "Software inventory": Collect software catalog and configuration for your instances. Option C: Workload Discovery on AWS: is a tool for maintaining an inventory of the AWS resources across your accounts and various Regions and mapping relationships between them, and displaying them in a web UI.

   Source: Adapted from community discussion — MrAWSAssociate

   References

   • AWS documentation
   • AWS documentation

   Next question

6. Question 416 · 1017 in bank

   Select 3

   A company uses AWS Organizations. The company wants to operate some of its AWS accounts with different budgets. The company wants to receive alerts and automatically prevent provisioning of additional resources on AWS accounts when the allocated budget threshold is met during a specific period. Which combination of solutions will meet these requirements? (Choose three.)

   • AUse AWS Budgets to create a budget. Set the budget amount under the Cost and Usage Reports section of the required AWS accounts.
   • BUse AWS Budgets to create a budget. Set the budget amount under the Billing dashboards of the required AWS accounts.
   • CCreate an IAM user for AWS Budgets to run budget actions with the required permissions.
   • DCreate an IAM role for AWS Budgets to run budget actions with the required permissions.
   • EAdd an alert to notify the company when each account meets its budget threshold. Add a budget action that selects the IAM identity created with the appropriate config rule to prevent provisioning of additional resources.
   • FAdd an alert to notify the company when each account meets its budget threshold. Add a budget action that selects the IAM identity created with the appropriate service control policy (SCP) to prevent provisioning of additional resources.

   Show answer

   Answer: BDF

   References

   • AWS documentation
   • AWS documentation

   Next question

7. Question 417 · 1017 in bank

   A company runs applications on Amazon EC2 instances in one AWS Region. The company wants to back up the EC2 instances to a second Region. The company also wants to provision EC2 resources in the second Region and manage the EC2 instances centrally from one AWS account. Which solution will meet these requirements MOST cost-effectively?

   • ACreate a disaster recovery (DR) plan that has a similar number of EC2 instances in the second Region. Configure data replication.
   • BCreate point-in-time Amazon Elastic Block Store (Amazon EBS) snapshots of the EC2 instances. Copy the snapshots to the second Region periodically.
   • CCreate a backup plan by using AWS Backup. Configure cross-Region backup to the second Region for the EC2 instances.
   • DDeploy a similar number of EC2 instances in the second Region. Use AWS DataSync to transfer the data from the source Region to the second Region.

   Show answer

   Answer: C

   Explanation

   Using AWS Backup, you can create backup plans that automate the backup process for your EC2 instances. By configuring cross-Region backup, you can ensure that backups are replicated to the second Region, providing a disaster recovery capability. This solution is cost-effective as it leverages AWS Backup's built-in features and eliminates the need for manual snapshot management or deploying and managing additional EC2 instances in the second Region.

   Source: Adapted from community discussion — cloudenthusiast

   References

   • AWS documentation

   Next question

8. Question 418 · 1017 in bank

   A company that uses AWS is building an application to transfer data to a product manufacturer. The company has its own identity provider (IdP). The company wants the IdP to authenticate application users while the users use the application to transfer data. The company must use Applicability Statement 2 (AS2) protocol. Which solution will meet these requirements?

   • AUse AWS DataSync to transfer the data. Create an AWS Lambda function for IdP authentication.
   • BUse Amazon AppFlow flows to transfer the data. Create an Amazon Elastic Container Service (Amazon ECS) task for IdP authentication.
   • CUse AWS Transfer Family to transfer the data. Create an AWS Lambda function for IdP authentication.
   • DUse AWS Storage Gateway to transfer the data. Create an Amazon Cognito identity pool for IdP authentication.

   Show answer

   Answer: C

   Explanation

   Option C stands out stronger because AWS Transfer Family securely scales your recurring business-to-business file transfers to AWS Storage services using SFTP, FTPS, FTP, and AS2 protocols. And AWS Lambda can be used to authenticate users with the company's IdP.

   Source: Adapted from community discussion — TariqKipkemei

   References

   • AWS documentation
   • AWS documentation
   • repost.aws documentation

   Next question

9. Question 419 · 1017 in bank

   Select 2

   A solutions architect is designing a RESTAPI in Amazon API Gateway for a cash payback service. The application requires 1 GB of memory and 2 GB of storage for its computation resources. The application will require that the data is in a relational format. Which additional combination ofAWS services will meet these requirements with the LEAST administrative effort? (Choose two.)

   • AAmazon EC2
   • BAWS Lambda
   • CAmazon RDS
   • DAmazon DynamoDB
   • EAmazon Elastic Kubernetes Services (Amazon EKS)

   Show answer

   Answer: BC

   Explanation

   "The application will require that the data is in a relational format" so DynamoDB is out. RDS is the choice. Lambda is severless.

   Source: Adapted from community discussion — cloudenthusiast

   References

   • AWS documentation

   Next question

10. Question 420 · 1017 in bank

    A company uses AWS Organizations to run workloads within multiple AWS accounts. A tagging policy adds department tags to AWS resources when the company creates tags. An accounting team needs to determine spending on Amazon EC2 consumption. The accounting team must determine which departments are responsible for the costs regardless ofAWS account. The accounting team has access to AWS Cost Explorer for all AWS accounts within the organization and needs to access all reports from Cost Explorer. Which solution meets these requirements in the MOST operationally efficient way?

    • AFrom the Organizations management account billing console, activate a user-defined cost allocation tag named department. Create one cost report in Cost Explorer grouping by tag name, and filter by EC2.
    • BFrom the Organizations management account billing console, activate an AWS-defined cost allocation tag named department. Create one cost report in Cost Explorer grouping by tag name, and filter by EC2.
    • CFrom the Organizations member account billing console, activate a user-defined cost allocation tag named department. Create one cost report in Cost Explorer grouping by the tag name, and filter by EC2.
    • DFrom the Organizations member account billing console, activate an AWS-defined cost allocation tag named department. Create one cost report in Cost Explorer grouping by tag name, and filter by EC2.

    Show answer

    Answer: A

    Explanation

    By activating a user-defined cost allocation tag named "department" and creating a cost report in Cost Explorer that groups by the tag name and filters by EC2, the accounting team will be able to track and attribute costs to specific departments across all AWS accounts within the organization. This approach allows for consistent cost allocation and reporting regardless of the AWS account structure.

    Source: Adapted from community discussion — cloudenthusiast

    References

    • AWS documentation
    • AWS documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SAA-C03 practice, question 411. 1017 questions available.