SAA-C03 practice questions 631–640

1. Question 631 · 1017 in bank

   A hospital recently deployed a RESTful API with Amazon API Gateway and AWS Lambda. The hospital uses API Gateway and Lambda to upload reports that are in PDF format and JPEG format. The hospital needs to modify the Lambda code to identify protected health information (PHI) in the reports. Which solution will meet these requirements with the LEAST operational overhead?

   • AUse existing Python libraries to extract the text from the reports and to identify the PHI from the extracted text.
   • BUse Amazon Textract to extract the text from the reports. Use Amazon SageMaker to identify the PHI from the extracted text.
   • CUse Amazon Textract to extract the text from the reports. Use Amazon Comprehend Medical to identify the PHI from the extracted text.
   • DUse Amazon Rekognition to extract the text from the reports. Use Amazon Comprehend Medical to identify the PHI from the extracted text.

   Show answer

   Answer: C

   Explanation

   The correct solution is C: Use Amazon Textract to extract the text from the reports. Use Amazon Comprehend Medical to identify the PHI from the extracted text. Option C: Using Amazon Textract to extract the text from the reports, and Amazon Comprehend Medical to identify the PHI from the extracted text, would be the most efficient solution as it would involve the least operational overhead. Textract is specifically designed for extracting text from documents, and Comprehend Medical is a fully managed service that can accurately identify PHI in medical text. This solution would require minimal maintenance and would not incur any additional costs beyond the usage fees for Textract and Comprehend Medical.

   Source: Adapted from community discussion — Buruguduystunstugudunstuy

   References

   • AWS documentation
   • AWS documentation

   Next question

2. Question 632 · 1017 in bank

   A company wants to migrate its on-premises Microsoft SQL Server Enterprise edition database to AWS. The company's online application uses the database to process transactions. The data analysis team uses the same production database to run reports for analytical processing. The company wants to reduce operational overhead by moving to managed services wherever possible. Which solution will meet these requirements with the LEAST operational overhead?

   • AMigrate to Amazon RDS for Microsoft SOL Server. Use read replicas for reporting purposes
   • BMigrate to Microsoft SQL Server on Amazon EC2. Use Always On read replicas for reporting purposes
   • CMigrate to Amazon DynamoDB. Use DynamoDB on-demand replicas for reporting purposes
   • DMigrate to Amazon Aurora MySQL. Use Aurora read replicas for reporting purposes

   Show answer

   Answer: A

   Explanation

   B - Not the LEAST operational Overhead. C - It is No-Sql - Not compatible with SQL server which is SQL D - MS Sql Server to MySQL may miss out some SQL Server functionalities. A - Read replicas for RDS is easy to create and also it is Asynchronous which should not be a problem for the analytics teams as they can bear 2-3 minutes delay

   Source: Adapted from community discussion — BillaRanga

   References

   • AWS documentation
   • AWS documentation

   Next question

3. Question 633 · 1017 in bank

   A company stores a large volume of image files in an Amazon S3 bucket. The images need to be readily available for the first 180 days. The images are infrequently accessed for the next 180 days. After 360 days, the images need to be archived but must be available instantly upon request. After 5 years, only auditors can access the images. The auditors must be able to retrieve the images within 12 hours. The images cannot be lost during this process. A developer will use S3 Standard storage for the first 180 days. The developer needs to configure an S3 Lifecycle rule. Which solution will meet these requirements MOST cost-effectively?

   • ATransition the objects to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 180 days. S3 Glacier Instant Retrieval after 360 days, and S3 Glacier Deep Archive after 5 years.
   • BTransition the objects to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 180 days. S3 Glacier Flexible Retrieval after 360 days, and S3 Glacier Deep Archive after 5 years.
   • CTransition the objects to S3 Standard-Infrequent Access (S3 Standard-IA) after 180 days, S3 Glacier Instant Retrieval after 360 days, and S3 Glacier Deep Archive after 5 years.
   • DTransition the objects to S3 Standard-Infrequent Access (S3 Standard-IA) after 180 days, S3 Glacier Flexible Retrieval after 360 days, and S3 Glacier Deep Archive after 5 years.

   Show answer

   Answer: C

   Explanation

   Images cannot be lost = high availability. Transition the objects to S3 Standard-Infrequent Access (S3 Standard-IA) after 180 days, S3 Glacier Instant Retrieval after 360 days, and S3 Glacier Deep Archive after 5 years.

   Source: Adapted from community discussion — TariqKipkemei

   References

   • AWS documentation
   • AWS documentation

   Next question

4. Question 634 · 1017 in bank

   A company has a large data workload that runs for 6 hours each day. The company cannot lose any data while the process is running. A solutions architect is designing an Amazon EMR cluster configuration to support this critical data workload. Which solution will meet these requirements MOST cost-effectively?

   • AConfigure a long-running cluster that runs the primary node and core nodes on On-Demand Instances and the task nodes on Spot Instances.
   • BConfigure a transient cluster that runs the primary node and core nodes on On-Demand Instances and the task nodes on Spot Instances.
   • CConfigure a transient cluster that runs the primary node on an On-Demand Instance and the core nodes and task nodes on Spot Instances.
   • DConfigure a long-running cluster that runs the primary node on an On-Demand Instance, the core nodes on Spot Instances, and the task nodes on Spot Instances.

   Show answer

   Answer: B

   Explanation

   "Long-running cluster" = runs until you shut it down "Transient cluster" = runs until the workload is completed This runs only 6 hours each day -> transient -> B or C "Cannot lose any data while the process is running" -> Primary and core nodes cannot be Spot instances -> A or B https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-plan-longrunning-transient.html https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-plan-instances-guidelines.html

   Source: Adapted from community discussion — pentium75

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

5. Question 635 · 1017 in bank

   A company maintains an Amazon RDS database that maps users to cost centers. The company has accounts in an organization in AWS Organizations. The company needs a solution that will tag all resources that are created in a specific AWS account in the organization. The solution must tag each resource with the cost center ID of the user who created the resource. Which solution will meet these requirements?

   • AMove the specific AWS account to a new organizational unit (OU) in Organizations from the management account. Create a service control policy (SCP) that requires all existing resources to have the correct cost center tag before the resources are created. Apply the SCP to the new OU.
   • BCreate an AWS Lambda function to tag the resources after the Lambda function looks up the appropriate cost center from the RDS database. Configure an Amazon EventBridge rule that reacts to AWS CloudTrail events to invoke the Lambda function.
   • CCreate an AWS CloudFormation stack to deploy an AWS Lambda function. Configure the Lambda function to look up the appropriate cost center from the RDS database and to tag resources. Create an Amazon EventBridge scheduled rule to invoke the CloudFormation stack.
   • DCreate an AWS Lambda function to tag the resources with a default value. Configure an Amazon EventBridge rule that reacts to AWS CloudTrail events to invoke the Lambda function when a resource is missing the cost center tag.

   Show answer

   Answer: B

   Explanation

   This solution utilizes AWS Lambda and Amazon EventBridge to automate the tagging process based on information from the RDS database and CloudTrail events. AWS Lambda Function: Create a Lambda function that can look up the cost center information from the RDS database and tag resources accordingly. Amazon EventBridge Rule: Set up an EventBridge rule to react to AWS CloudTrail events. The rule triggers the Lambda function whenever a resource is created, allowing dynamic tagging based on the cost center associated with the user in the RDS database. This solution provides automation, ensuring that resources are tagged appropriately with the cost center ID of the user who created the resource. It also allows for flexibility in updating cost center information without modifying the infrastructure.

   Source: Adapted from community discussion — t0nx

   Next question

6. Question 636 · 1017 in bank

   A company recently migrated its web application to the AWS Cloud. The company uses an Amazon EC2 instance to run multiple processes to host the application. The processes include an Apache web server that serves static content. The Apache web server makes requests to a PHP application that uses a local Redis server for user sessions. The company wants to redesign the architecture to be highly available and to use AWS managed solutions. Which solution will meet these requirements?

   • AUse AWS Elastic Beanstalk to host the static content and the PHP application. Configure Elastic Beanstalk to deploy its EC2 instance into a public subnet. Assign a public IP address.
   • BUse AWS Lambda to host the static content and the PHP application. Use an Amazon API Gateway REST API to proxy requests to the Lambda function. Set the API Gateway CORS configuration to respond to the domain name. Configure Amazon ElastiCache for Redis to handle session information.
   • CKeep the backend code on the EC2 instance. Create an Amazon ElastiCache for Redis cluster that has Multi-AZ enabled. Configure the ElastiCache for Redis cluster in cluster mode. Copy the frontend resources to Amazon S3. Configure the backend code to reference the EC2 instance.
   • DConfigure an Amazon CloudFront distribution with an Amazon S3 endpoint to an S3 bucket that is configured to host the static content. Configure an Application Load Balancer that targets an Amazon Elastic Container Service (Amazon ECS) service that runs AWS Fargate tasks for the PHP application. Configure the PHP application to use an Amazon ElastiCache for Redis cluster that runs in multiple Availability Zones.

   Show answer

   Answer: D

   Explanation

   Key requirements: HA and Managed Services Key components: PHP, Static content, Redis Elasticache AB are instantly useless for static content scaling C could work but is less managed and "configure the backend code to reference EC2 instance" makes no sense D ECS+Linux+PHP is good managed combination when used with Fargate. S3 for static is well-architected. Multi-AZ ECache for Redis is HA also. Good managed solution for all purposes.

   Source: Adapted from community discussion — awsgeek75

   Next question

7. Question 637 · 1017 in bank

   Select 2

   A company runs a web application on Amazon EC2 instances in an Auto Scaling group that has a target group. The company designed the application to work with session affinity (sticky sessions) for a better user experience. The application must be available publicly over the internet as an endpoint. A WAF must be applied to the endpoint for additional security. Session affinity (sticky sessions) must be configured on the endpoint. Which combination of steps will meet these requirements? (Choose two.)

   • ACreate a public Network Load Balancer. Specify the application target group.
   • BCreate a Gateway Load Balancer. Specify the application target group.
   • CCreate a public Application Load Balancer. Specify the application target group.
   • DCreate a second target group. Add Elastic IP addresses to the EC2 instances.
   • ECreate a web ACL in AWS WAF. Associate the web ACL with the endpoint

   Show answer

   Answer: CE

   Explanation

   NLB and GLB cannot handle sticky sessions. It's an application level concept (Cookies) so ALB works. Elastic IP will negate sticky sessions and this combination won't work. E give proper permissions to WAF

   Source: Adapted from community discussion — awsgeek75

   Next question

8. Question 638 · 1017 in bank

   A company runs a website that stores images of historical events. Website users need the ability to search and view images based on the year that the event in the image occurred. On average, users request each image only once or twice a year. The company wants a highly available solution to store and deliver the images to users. Which solution will meet these requirements MOST cost-effectively?

   • AStore images in Amazon Elastic Block Store (Amazon EBS). Use a web server that runs on Amazon EC2.
   • BStore images in Amazon Elastic File System (Amazon EFS). Use a web server that runs on Amazon EC2.
   • CStore images in Amazon S3 Standard. Use S3 Standard to directly deliver images by using a static website.
   • DStore images in Amazon S3 Standard-Infrequent Access (S3 Standard-IA). Use S3 Standard-IA to directly deliver images by using a static website.

   Show answer

   Answer: D

   Explanation

   High Availability = excluded A (EBS) cost-effective = excluded B (EFS) only once or twice a year = S3 Standard-IA, excluded C (S3 Standard, frequent access) Left D, answer

   Source: Adapted from community discussion — ZZZ_Sleep

   References

   • AWS documentation

   Next question

9. Question 639 · 1017 in bank

   A company has multiple AWS accounts in an organization in AWS Organizations that different business units use. The company has multiple offices around the world. The company needs to update security group rules to allow new office CIDR ranges or to remove old CIDR ranges across the organization. The company wants to centralize the management of security group rules to minimize the administrative overhead that updating CIDR ranges requires. Which solution will meet these requirements MOST cost-effectively?

   • ACreate VPC security groups in the organization's management account. Update the security groups when a CIDR range update is necessary.
   • BCreate a VPC customer managed prefix list that contains the list of CIDRs. Use AWS Resource Access Manager (AWS RAM) to share the prefix list across the organization. Use the prefix list in the security groups across the organization.
   • CCreate an AWS managed prefix list. Use an AWS Security Hub policy to enforce the security group update across the organization. Use an AWS Lambda function to update the prefix list automatically when the CIDR ranges change.
   • DCreate security groups in a central administrative AWS account. Create an AWS Firewall Manager common security group policy for the whole organization. Select the previously created security groups as primary groups in the policy.

   Show answer

   Answer: B

   Explanation

   A managed prefix list is a set of one or more CIDR blocks. You can use prefix lists to make it easier to configure and maintain your security groups and route tables. You can create a prefix list from the IP addresses that you frequently use, and reference them as a set in security group rules and routes instead of referencing them individually. If you scale your network and need to allow traffic from another CIDR block, you can update the relevant prefix list and all security groups that use the prefix list are updated. You can also use managed prefix lists with other AWS accounts using Resource Access Manager (RAM). https://docs.aws.amazon.com/vpc/latest/userguide/managed-prefix-lists.html#:~:text=A-,managed%20prefix,-list%20is%20a

   Source: Adapted from community discussion — TariqKipkemei

   References

   • AWS documentation

   Next question

10. Question 640 · 1017 in bank

    Select 2

    A company uses an on-premises network-attached storage (NAS) system to provide file shares to its high performance computing (HPC) workloads. The company wants to migrate its latency-sensitive HPC workloads and its storage to the AWS Cloud. The company must be able to provide NFS and SMB multi-protocol access from the file system. Which solution will meet these requirements with the LEAST latency? (Choose two.)

    • ADeploy compute optimized EC2 instances into a cluster placement group.
    • BDeploy compute optimized EC2 instances into a partition placement group.
    • CAttach the EC2 instances to an Amazon FSx for Lustre file system.
    • DAttach the EC2 instances to an Amazon FSx for OpenZFS file system.
    • EAttach the EC2 instances to an Amazon FSx for NetApp ONTAP file system.

    Show answer

    Answer: AE

    Explanation

    A Because HPC equivalent in AWS is EC2. Cluster placement for low-latency: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/placement-groups.html E: ONTAP gives NFS and SMB which is required AE is correct B does not solve low latency requirements C No support for NFS and SMB D OpenZFS is not required

    Source: Adapted from community discussion — awsgeek75

    References

    • AWS documentation
    • AWS documentation
    • AWS documentation
    • AWS documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SAA-C03 practice, question 631. 1017 questions available.