SAA-C03 practice questions 601–610

1. Question 601 · 1017 in bank

   Select 2

   A company is creating a new web application for its subscribers. The application will consist of a static single page and a persistent database layer. The application will have millions of users for 4 hours in the morning, but the application will have only a few thousand users during the rest of the day. The company's data architects have requested the ability to rapidly evolve their schema. Which solutions will meet these requirements and provide the MOST scalability? (Choose two.)

   • ADeploy Amazon DynamoDB as the database solution. Provision on-demand capacity.
   • BDeploy Amazon Aurora as the database solution. Choose the serverless DB engine mode.
   • CDeploy Amazon DynamoDB as the database solution. Ensure that DynamoDB auto scaling is enabled.
   • DDeploy the static content into an Amazon S3 bucket. Provision an Amazon CloudFront distribution with the S3 bucket as the origin.
   • EDeploy the web servers for static content across a fleet of Amazon EC2 instances in Auto Scaling groups. Configure the instances to periodically refresh the content from an Amazon Elastic File System (Amazon EFS) volume.

   Show answer

   Answer: AD

   Explanation

   Question asks for "most scalability", not cost optimization. "DynamoDB auto scaling ... modifies provisioned throughput settings only when the actual workload stays elevated or depressed for a sustained period of several minutes. ... This means that provisioned capacity is probably best for you if you have relatively predictable application traffic, run applications whose traffic is consistent, and ramps up or down gradually."

   Source: Adapted from community discussion — pentium75

   References

   • AWS documentation
   • AWS documentation

   Next question

2. Question 602 · 1017 in bank

   A company uses Amazon API Gateway to manage its REST APIs that third-party service providers access. The company must protect the REST APIs from SQL injection and cross-site scripting attacks. What is the MOST operationally efficient solution that meets these requirements?

   • AConfigure AWS Shield.
   • BConfigure AWS WAF.
   • CSet up API Gateway with an Amazon CloudFront distribution. Configure AWS Shield in CloudFront.
   • DSet up API Gateway with an Amazon CloudFront distribution. Configure AWS WAF in CloudFront.

   Show answer

   Answer: B

   Explanation

   SQL Injection and Cross-Site Scripting = WAF so Either B or D. Both B and D are valid options but the question doesn't indicate a real need for CloudFront, so just use WAF with the API Gateway. Answer is B.

   Source: Adapted from community discussion — taustin2

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

3. Question 603 · 1017 in bank

   A company wants to provide users with access to AWS resources. The company has 1,500 users and manages their access to on-premises resources through Active Directory user groups on the corporate network. However, the company does not want users to have to maintain another identity to access the resources. A solutions architect must manage user access to the AWS resources while preserving access to the on-premises resources. What should the solutions architect do to meet these requirements?

   • ACreate an IAM user for each user in the company. Attach the appropriate policies to each user.
   • BUse Amazon Cognito with an Active Directory user pool. Create roles with the appropriate policies attached.
   • CDefine cross-account roles with the appropriate policies attached. Map the roles to the Active Directory groups.
   • DConfigure Security Assertion Markup Language (SAML) 2 0-based federation. Create roles with the appropriate policies attached Map the roles to the Active Directory groups.

   Show answer

   Answer: D

   Explanation

   Though you can federate Cognito with Active Directory, Cognito is for providing access to your own applications, NOT to AWS Resources.

   Source: Adapted from community discussion — pentium75

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

4. Question 604 · 1017 in bank

   A company is hosting a website behind multiple Application Load Balancers. The company has different distribution rights for its content around the world. A solutions architect needs to ensure that users are served the correct content without violating distribution rights. Which configuration should the solutions architect choose to meet these requirements?

   • AConfigure Amazon CloudFront with AWS WAF.
   • BConfigure Application Load Balancers with AWS WAF
   • CConfigure Amazon Route 53 with a geolocation policy
   • DConfigure Amazon Route 53 with a geoproximity routing policy

   Show answer

   Answer: C

   Explanation

   Geolocation routing policy — Use when you want to route traffic based on the location of users. Geo-proximity routing policy — Use when you want to route traffic based on the location of your resources and optionally switch resource traffic at one location to resources elsewhere.

   Source: Adapted from community discussion — potomac

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

5. Question 605 · 1017 in bank

   A company stores its data on premises. The amount of data is growing beyond the company's available capacity. The company wants to migrate its data from the on-premises location to an Amazon S3 bucket. The company needs a solution that will automatically validate the integrity of the data after the transfer. Which solution will meet these requirements?

   • AOrder an AWS Snowball Edge device. Configure the Snowball Edge device to perform the online data transfer to an S3 bucket
   • BDeploy an AWS DataSync agent on premises. Configure the DataSync agent to perform the online data transfer to an S3 bucket.
   • CCreate an Amazon S3 File Gateway on premises Configure the S3 File Gateway to perform the online data transfer to an S3 bucket
   • DConfigure an accelerator in Amazon S3 Transfer Acceleration on premises. Configure the accelerator to perform the online data transfer to an S3 bucket.

   Show answer

   Answer: B

   Explanation

   During a transfer, AWS DataSync always checks the integrity of your data, but you can specify how and when this verification happens with the following options: Verify only the data transferred (recommended) – DataSync calculates the checksum of transferred files and metadata at the source location. https://docs.aws.amazon.com/datasync/latest/userguide/configure-data-verification-options.html

   Source: Adapted from community discussion — potomac

   References

   • AWS documentation
   • AWS documentation

   Next question

6. Question 606 · 1017 in bank

   A company wants to migrate two DNS servers to AWS. The servers host a total of approximately 200 zones and receive 1 million requests each day on average. The company wants to maximize availability while minimizing the operational overhead that is related to the management of the two servers. What should a solutions architect recommend to meet these requirements?

   • ACreate 200 new hosted zones in the Amazon Route 53 console Import zone files.
   • BLaunch a single large Amazon EC2 instance Import zone tiles. Configure Amazon CloudWatch alarms and notifications to alert the company about any downtime.
   • CMigrate the servers to AWS by using AWS Server Migration Service (AWS SMS). Configure Amazon CloudWatch alarms and notifications to alert the company about any downtime.
   • DLaunch an Amazon EC2 instance in an Auto Scaling group across two Availability Zones. Import zone files. Set the desired capacity to 1 and the maximum capacity to 3 for the Auto Scaling group. Configure scaling alarms to scale based on CPU utilization.

   Show answer

   Answer: A

   Explanation

   Key requirement it "maximize availability while minimizing the operational overhead" of 200 zones to process million requests R53 is designed exactly to do this and supports zone import functionality so literally does the job of their EC2 servers but much better so BCD become "overhead" by default. I doubt D will work.

   Source: Adapted from community discussion — awsgeek75

   References

   • AWS documentation

   Next question

7. Question 607 · 1017 in bank

   A global company runs its applications in multiple AWS accounts in AWS Organizations. The company's applications use multipart uploads to upload data to multiple Amazon S3 buckets across AWS Regions. The company wants to report on incomplete multipart uploads for cost compliance purposes. Which solution will meet these requirements with the LEAST operational overhead?

   • AConfigure AWS Config with a rule to report the incomplete multipart upload object count.
   • BCreate a service control policy (SCP) to report the incomplete multipart upload object count.
   • CConfigure S3 Storage Lens to report the incomplete multipart upload object count.
   • DCreate an S3 Multi-Region Access Point to report the incomplete multipart upload object count.

   Show answer

   Answer: C

   Explanation

   S3 Storage Lens provides four Cost Efficiency metrics for analyzing incomplete multipart uploads in your S3 buckets. These metrics are free of charge and automatically configured for all S3 Storage Lens dashboards. Incomplete Multipart Upload Storage Bytes – The total bytes in scope with incomplete multipart uploads % Incomplete MPU Bytes – The percentage of bytes in scope that are results of incomplete multipart uploads Incomplete Multipart Upload Object Count – The number of objects in scope that are incomplete multipart uploads % Incomplete MPU Objects – The percentage of objects in scope that are incomplete multipart uploads https://aws.amazon.com/blogs/aws-cloud-financial-management/discovering-and-deleting-incomplete-multipart-uploads-to-lower-amazon-s3-costs/

   Source: Adapted from community discussion — LocNV

   References

   • AWS documentation

   Next question

8. Question 608 · 1017 in bank

   A company runs a production database on Amazon RDS for MySQL. The company wants to upgrade the database version for security compliance reasons. Because the database contains critical data, the company wants a quick solution to upgrade and test functionality without losing any data. Which solution will meet these requirements with the LEAST operational overhead?

   • ACreate an RDS manual snapshot. Upgrade to the new version of Amazon RDS for MySQL.
   • BUse native backup and restore. Restore the data to the upgraded new version of Amazon RDS for MySQL.
   • CUse AWS Database Migration Service (AWS DMS) to replicate the data to the upgraded new version of Amazon RDS for MySQL.
   • DUse Amazon RDS Blue/Green Deployments to deploy and test production changes.

   Show answer

   Answer: D

   Explanation

   A blue/green deployment copies a production database environment to a separate, synchronized staging environment. You can make changes to the database in the staging environment without affecting the production environment. When you are ready, you can promote the staging environment to be the new production database environment, with downtime typically under one minute. https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/blue-green-deployments.html

   Source: Adapted from community discussion — TariqKipkemei

   References

   • AWS documentation
   • AWS documentation

   Next question

9. Question 609 · 1017 in bank

   A company runs its infrastructure on AWS and has a registered base of 700,000 users for its document management application. The company intends to create a product that converts large .pdf files to .jpg image files. The .pdf files average 5 MB in size. The company needs to store the original files and the converted files. A solutions architect must design a scalable solution to accommodate demand that will grow rapidly over time. Which solution meets these requirements MOST cost-effectively?

   • ASave the .pdf files to Amazon S3. Configure an S3 PUT event to invoke an AWS Lambda function to convert the files to .jpg format and store them back in Amazon S3.
   • BSave the .pdf files to Amazon DynamoDUse the DynamoDB Streams feature to invoke an AWS Lambda function to convert the files to .jpg format and store them back in DynamoDB.
   • CUpload the .pdf files to an AWS Elastic Beanstalk application that includes Amazon EC2 instances, Amazon Elastic Block Store (Amazon EBS) storage, and an Auto Scaling group. Use a program in the EC2 instances to convert the files to .jpg format. Save the .pdf files and the .jpg files in the EBS store.
   • DUpload the .pdf files to an AWS Elastic Beanstalk application that includes Amazon EC2 instances, Amazon Elastic File System (Amazon EFS) storage, and an Auto Scaling group. Use a program in the EC2 instances to convert the file to .jpg format. Save the .pdf files and the .jpg files in the EBS store.

   Show answer

   Answer: A

   Explanation

   Option A. Elastic BeanStalk is expensive, and DocumentDB has a 400KB max to upload files. So Lambda and S3 should be the one.

   Source: Adapted from community discussion — ArielSchivo

   References

   • AWS documentation
   • AWS documentation

   Next question

10. Question 610 · 1017 in bank

    A solutions architect is creating a data processing job that runs once daily and can take up to 2 hours to complete. If the job is interrupted, it has to restart from the beginning. How should the solutions architect address this issue in the MOST cost-effective manner?

    • ACreate a script that runs locally on an Amazon EC2 Reserved Instance that is triggered by a cron job.
    • BCreate an AWS Lambda function triggered by an Amazon EventBridge scheduled event.
    • CUse an Amazon Elastic Container Service (Amazon ECS) Fargate task triggered by an Amazon EventBridge scheduled event.
    • DUse an Amazon Elastic Container Service (Amazon ECS) task running on Amazon EC2 triggered by an Amazon EventBridge scheduled event.

    Show answer

    Answer: C

    Explanation

    A: Nonsense B: Lambda max running time is 15 mins D: EC2 is more expensive than Fargate for 2 hours duration as EC2 instance will be billed.

    Source: Adapted from community discussion — awsgeek75

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SAA-C03 practice, question 601. 1017 questions available.