SAA-C03 practice questions 541–550

1. Question 541 · 1017 in bank

   An Amazon EventBridge rule targets a third-party API. The third-party API has not received any incoming traffic. A solutions architect needs to determine whether the rule conditions are being met and if the rule's target is being invoked. Which solution will meet these requirements?

   • ACheck for metrics in Amazon CloudWatch in the namespace for AWS/Events.
   • BReview events in the Amazon Simple Queue Service (Amazon SQS) dead-letter queue.
   • CCheck for the events in Amazon CloudWatch Logs.
   • DCheck the trails in AWS CloudTrail for the EventBridge events.

   Show answer

   Answer: A

   Explanation

   "EventBridge sends metrics to Amazon CloudWatch every minute for everything from the number of matched events to the number of times a target is invoked by a rule." from https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-monitoring.html B: SQS, irrelevant C: 'Check for events', this wording is confusing but could mean something in wrong context. I would have chosen C if A wasn't an option D: CloudTrail is for AWS resource monitoring so irrelevant

   Source: Adapted from community discussion — awsgeek75

   References

   • AWS documentation
   • AWS documentation

   Next question

2. Question 542 · 1017 in bank

   A company is running a popular social media website. The website gives users the ability to upload images to share with other users. The company wants to make sure that the images do not contain inappropriate content. The company needs a solution that minimizes development effort. What should a solutions architect do to meet these requirements?

   • AUse Amazon Comprehend to detect inappropriate content. Use human review for low-confidence predictions.
   • BUse Amazon Rekognition to detect inappropriate content. Use human review for low-confidence predictions.
   • CUse Amazon SageMaker to detect inappropriate content. Use ground truth to label low-confidence predictions.
   • DUse AWS Fargate to deploy a custom machine learning model to detect inappropriate content. Use ground truth to label low-confidence predictions.

   Show answer

   Answer: B

   Explanation

   The best solution to meet these requirements would be option B: Use Amazon Rekognition to detect inappropriate content, and use human review for low-confidence predictions. Amazon Rekognition is a cloud-based image and video analysis service that can detect inappropriate content in images using its pre-trained label detection model. It can identify a wide range of inappropriate content, including explicit or suggestive adult content, violent content, and offensive language. The service provides high accuracy and low latency, making it a good choice for this use case.

   Source: Adapted from community discussion — Buruguduystunstugudunstuy

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

3. Question 543 · 1017 in bank

   A company has a large workload that runs every Friday evening. The workload runs on Amazon EC2 instances that are in two Availability Zones in the us-east-1 Region. Normally, the company must run no more than two instances at all times. However, the company wants to scale up to six instances each Friday to handle a regularly repeating increased workload. Which solution will meet these requirements with the LEAST operational overhead?

   • ACreate a reminder in Amazon EventBridge to scale the instances.
   • BCreate an Auto Scaling group that has a scheduled action.
   • CCreate an Auto Scaling group that uses manual scaling.
   • DCreate an Auto Scaling group that uses automatic scaling.

   Show answer

   Answer: B

   Explanation

   The key reasons: Auto Scaling scheduled actions allow defining specific dates/times to scale out or in. This can be used to scale to 6 instances every Friday evening automatically. Scheduled scaling removes the need for manual intervention to scale up/down for the workload. EventBridge reminders and manual scaling require human involvement each week adding overhead. Automatic scaling responds to demand and may not align perfectly to scale out every Friday without additional tuning. Scheduled Auto Scaling actions provide the automation needed to scale for the weekly workload without ongoing operational overhead.

   Source: Adapted from community discussion — Guru4Cloud

   References

   • AWS documentation

   Next question

4. Question 544 · 1017 in bank

   A company is creating a REST API. The company has strict requirements for the use of TLS. The company requires TLSv1.3 on the API endpoints. The company also requires a specific public third-party certificate authority (CA) to sign the TLS certificate. Which solution will meet these requirements?

   • AUse a local machine to create a certificate that is signed by the third-party CImport the certificate into AWS Certificate Manager (ACM). Create an HTTP API in Amazon API Gateway with a custom domain. Configure the custom domain to use the certificate.
   • BCreate a certificate in AWS Certificate Manager (ACM) that is signed by the third-party CA. Create an HTTP API in Amazon API Gateway with a custom domain. Configure the custom domain to use the certificate.
   • CUse AWS Certificate Manager (ACM) to create a certificate that is signed by the third-party CA. Import the certificate into AWS Certificate Manager (ACM). Create an AWS Lambda function with a Lambda function URL. Configure the Lambda function URL to use the certificate.
   • DCreate a certificate in AWS Certificate Manager (ACM) that is signed by the third-party CA. Create an AWS Lambda function with a Lambda function URL. Configure the Lambda function URL to use the certificate.

   Show answer

   Answer: A

   Explanation

   I don't understand why some many people vote B. In ACM, you can either request certificate from Amazon CA or import an existing certificate. There is no option in ACM that allow you to request a certificate that can be signed by third party CA.

   Source: Adapted from community discussion — bjexamprep

   References

   • AWS documentation
   • AWS documentation

   Next question

5. Question 545 · 1017 in bank

   A company runs an application on AWS. The application receives inconsistent amounts of usage. The application uses AWS Direct Connect to connect to an on-premises MySQL-compatible database. The on-premises database consistently uses a minimum of 2 GiB of memory. The company wants to migrate the on-premises database to a managed AWS service. The company wants to use auto scaling capabilities to manage unexpected workload increases. Which solution will meet these requirements with the LEAST administrative overhead?

   • AProvision an Amazon DynamoDB database with default read and write capacity settings.
   • BProvision an Amazon Aurora database with a minimum capacity of 1 Aurora capacity unit (ACU).
   • CProvision an Amazon Aurora Serverless v2 database with a minimum capacity of 1 Aurora capacity unit (ACU).
   • DProvision an Amazon RDS for MySQL database with 2 GiB of memory.

   Show answer

   Answer: C

   Explanation

   The key reasons: Aurora Serverless v2 provides auto-scaling so the database can handle inconsistent workloads and spikes automatically without admin intervention. It can scale down to zero when not in use to minimize costs. The minimum 1 ACU capacity is sufficient to replace the on-prem 2 GiB database based on the info given. Serverless capabilities reduce admin overhead for capacity management. DynamoDB lacks MySQL compatibility and requires more hands-on management. RDS and provisioned Aurora require manually resizing instances to scale, increasing admin overhead.

   Source: Adapted from community discussion — Guru4Cloud

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

6. Question 546 · 1017 in bank

   A company wants to use an event-driven programming model with AWS Lambda. The company wants to reduce startup latency for Lambda functions that run on Java 11. The company does not have strict latency requirements for the applications. The company wants to reduce cold starts and outlier latencies when a function scales up. Which solution will meet these requirements MOST cost-effectively?

   • AConfigure Lambda provisioned concurrency.
   • BIncrease the timeout of the Lambda functions.
   • CIncrease the memory of the Lambda functions.
   • DConfigure Lambda SnapStart.

   Show answer

   Answer: D

   Explanation

   The key reasons: SnapStart keeps functions initialized and ready to respond quickly, eliminating cold starts. SnapStart is optimized for applications without aggressive latency needs, reducing costs. It scales automatically to match traffic spikes, eliminating outliers when scaling up. SnapStart is a native Lambda feature with no additional charges, keeping costs low. Provisioned concurrency incurs charges for always-on capacity reserved. More costly than SnapStart. Increasing timeout and memory do not directly improve startup performance like SnapStart.

   Source: Adapted from community discussion — Guru4Cloud

   References

   • AWS documentation

   Next question

7. Question 547 · 1017 in bank

   A financial services company launched a new application that uses an Amazon RDS for MySQL database. The company uses the application to track stock market trends. The company needs to operate the application for only 2 hours at the end of each week. The company needs to optimize the cost of running the database. Which solution will meet these requirements MOST cost-effectively?

   • AMigrate the existing RDS for MySQL database to an Aurora Serverless v2 MySQL database cluster.
   • BMigrate the existing RDS for MySQL database to an Aurora MySQL database cluster.
   • CMigrate the existing RDS for MySQL database to an Amazon EC2 instance that runs MySQL. Purchase an instance reservation for the EC2 instance.
   • DMigrate the existing RDS for MySQL database to an Amazon Elastic Container Service (Amazon ECS) cluster that uses MySQL container images to run tasks.

   Show answer

   Answer: A

   Explanation

   The key reasons are: Aurora Serverless v2 scales compute capacity automatically based on actual usage, down to zero when not in use. This minimizes costs for intermittent usage. Since it only runs for 2 hours per week, the application is ideal for a serverless architecture like Aurora Serverless. Aurora Serverless v2 charges per second when the database is active, unlike RDS which charges hourly. Aurora Serverless provides higher availability than self-managed MySQL on EC2 or ECS. Using reserved EC2 instances or ECS still incurs charges when not in use versus the fine-grained scaling of serverless. Standard Aurora clusters have a minimum capacity unlike the auto-scaling serverless architecture.

   Source: Adapted from community discussion — Guru4Cloud

   References

   • AWS documentation

   Next question

8. Question 548 · 1017 in bank

   A company deploys its applications on Amazon Elastic Kubernetes Service (Amazon EKS) behind an Application Load Balancer in an AWS Region. The application needs to store data in a PostgreSQL database engine. The company wants the data in the database to be highly available. The company also needs increased capacity for read workloads. Which solution will meet these requirements with the MOST operational efficiency?

   • ACreate an Amazon DynamoDB database table configured with global tables.
   • BCreate an Amazon RDS database with Multi-AZ deployments.
   • CCreate an Amazon RDS database with Multi-AZ DB cluster deployment.
   • DCreate an Amazon RDS database configured with cross-Region read replicas.

   Show answer

   Answer: C

   Explanation

   RDS Multi-AZ DB cluster deployments provide high availability, automatic failover, and increased read capacity. A multi-AZ cluster automatically handles replicating data across AZs in a single region. This maintains operational efficiency as it is natively managed by RDS without needing external replication. DynamoDB global tables involve complex provisioning and requires app changes. RDS read replicas require manual setup and management of replication. RDS Multi-AZ clustering is purpose-built by AWS for HA PostgreSQL deployments and balancing read workloads.

   Source: Adapted from community discussion — Guru4Cloud

   References

   • AWS documentation

   Next question

9. Question 549 · 1017 in bank

   A company is building a RESTful serverless web application on AWS by using Amazon API Gateway and AWS Lambda. The users of this web application will be geographically distributed, and the company wants to reduce the latency of API requests to these users. Which type of endpoint should a solutions architect use to meet these requirements?

   • APrivate endpoint
   • BRegional endpoint
   • CInterface VPC endpoint
   • DEdge-optimized endpoint

   Show answer

   Answer: D

   Explanation

   The correct answer is D API Gateway - Endpoint Types • Edge-Optimized (default): For global clients • Requests are routed through the CloudFront Edge locations (improves latency) • The API Gateway still lives in only one region • Regional: • For clients within the same region • Could manually combine with CloudFront (more control over the caching strategies and the distribution) • Private: • Can only be accessed from your VPC using an interface VPC endpoint (ENI) • Use a resource policy to define access

   Source: Adapted from community discussion — mrsoa

   References

   • AWS documentation

   Next question

10. Question 550 · 1017 in bank

    A company uses an Amazon CloudFront distribution to serve content pages for its website. The company needs to ensure that clients use a TLS certificate when accessing the company's website. The company wants to automate the creation and renewal of the TLS certificates. Which solution will meet these requirements with the MOST operational efficiency?

    • AUse a CloudFront security policy to create a certificate.
    • BUse a CloudFront origin access control (OAC) to create a certificate.
    • CUse AWS Certificate Manager (ACM) to create a certificate. Use DNS validation for the domain.
    • DUse AWS Certificate Manager (ACM) to create a certificate. Use email validation for the domain.

    Show answer

    Answer: C

    Explanation

    C is correct. "ACM provides managed renewal for your Amazon-issued SSL/TLS certificates. This means that ACM will either renew your certificates automatically (if you are using DNS validation), or it will send you email notices when expiration is approaching. These services are provided for both public and private ACM certificates." https://docs.aws.amazon.com/acm/latest/userguide/managed-renewal.html

    Source: Adapted from community discussion — Bmaster

    References

    • AWS documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SAA-C03 practice, question 541. 1017 questions available.