SAA-C03 practice questions 641–650

1. Question 641 · 1017 in bank

   A company is relocating its data center and wants to securely transfer 50 TB of data to AWS within 2 weeks. The existing data center has a Site-to-Site VPN connection to AWS that is 90% utilized. Which AWS service should a solutions architect use to meet these requirements?

   • AAWS DataSync with a VPC endpoint
   • BAWS Direct Connect
   • CAWS Snowball Edge Storage Optimized
   • DAWS Storage Gateway

   Show answer

   Answer: C

   Explanation

   90% utilization of the bandwidth = they discouraged the use of internet bandwidth for uploading, go seek for offline data seeding to AWS method

   Source: Adapted from community discussion — Cyberkayu

   Next question

2. Question 642 · 1017 in bank

   A company has an application that generates a large number of files, each approximately 5 MB in size. The files are stored in Amazon S3. Company policy requires the files to be stored for 4 years before they can be deleted. Immediate accessibility is always required as the files contain critical business data that is not easy to reproduce. The files are frequently accessed in the first 30 days of the object creation but are rarely accessed after the first 30 days. Which storage solution is MOST cost-effective?

   • ACreate an S3 bucket lifecycle policy to move files from S3 Standard to S3 Glacier 30 days from object creation. Delete the files 4 years after object creation.
   • BCreate an S3 bucket lifecycle policy to move files from S3 Standard to S3 One Zone-Infrequent Access (S3 One Zone-IA) 30 days from object creation. Delete the files 4 years after object creation.
   • CCreate an S3 bucket lifecycle policy to move files from S3 Standard to S3 Standard-Infrequent Access (S3 Standard-IA) 30 days from object creation. Delete the files 4 years after object creation.
   • DCreate an S3 bucket lifecycle policy to move files from S3 Standard to S3 Standard-Infrequent Access (S3 Standard-IA) 30 days from object creation. Move the files to S3 Glacier 4 years after object creation.

   Show answer

   Answer: C

   Explanation

   i think C should be the answer here, > Immediate accessibility is always required as the files contain critical business data that is not easy to reproduce If they do not explicitly mention that they are using Glacier Instant Retrieval, we should assume that Glacier -> takes more time to retrieve and may not meet the requirements

   Source: Adapted from community discussion — Six_Fingered_Jose

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

3. Question 643 · 1017 in bank

   A company hosts an application on Amazon EC2 On-Demand Instances in an Auto Scaling group. Application peak hours occur at the same time each day. Application users report slow application performance at the start of peak hours. The application performs normally 2-3 hours after peak hours begin. The company wants to ensure that the application works properly at the start of peak hours. Which solution will meet these requirements?

   • AConfigure an Application Load Balancer to distribute traffic properly to the instances.
   • BConfigure a dynamic scaling policy for the Auto Scaling group to launch new instances based on memory utilization.
   • CConfigure a dynamic scaling policy for the Auto Scaling group to launch new instances based on CPU utilization.
   • DConfigure a scheduled scaling policy for the Auto Scaling group to launch new instances before peak hours.

   Show answer

   Answer: D

   Explanation

   occur at the same time each day = predictable So, scheduled scaling policy, Answer is D. Dynamic scaling policy work for unpredictable

   Source: Adapted from community discussion — ZZZ_Sleep

   Next question

4. Question 644 · 1017 in bank

   A company runs applications on AWS that connect to the company's Amazon RDS database. The applications scale on weekends and at peak times of the year. The company wants to scale the database more effectively for its applications that connect to the database. Which solution will meet these requirements with the LEAST operational overhead?

   • AUse Amazon DynamoDB with connection pooling with a target group configuration for the database. Change the applications to use the DynamoDB endpoint.
   • BUse Amazon RDS Proxy with a target group for the database. Change the applications to use the RDS Proxy endpoint.
   • CUse a custom proxy that runs on Amazon EC2 as an intermediary to the database. Change the applications to use the custom proxy endpoint.
   • DUse an AWS Lambda function to provide connection pooling with a target group configuration for the database. Change the applications to use the Lambda function.

   Show answer

   Answer: B

   Explanation

   Amazon RDS Proxy is a fully managed, highly available database proxy for Amazon Relational Database Service (RDS) that makes applications more resilient to database failures. Many applications, including those built on modern serverless architectures, can have a large number of open connections to the database server and may open and close database connections at a high rate, exhausting database memory and compute resources. Amazon RDS Proxy allows applications to pool and share connections established with the database, improving database efficiency and application scalability. With RDS Proxy, failover times for Aurora and RDS databases are reduced by up to 66%

   Source: Adapted from community discussion — TariqKipkemei

   Next question

5. Question 645 · 1017 in bank

   A company uses AWS Cost Explorer to monitor its AWS costs. The company notices that Amazon Elastic Block Store (Amazon EBS) storage and snapshot costs increase every month. However, the company does not purchase additional EBS storage every month. The company wants to optimize monthly costs for its current storage usage. Which solution will meet these requirements with the LEAST operational overhead?

   • AUse logs in Amazon CloudWatch Logs to monitor the storage utilization of Amazon EBS. Use Amazon EBS Elastic Volumes to reduce the size of the EBS volumes.
   • BUse a custom script to monitor space usage. Use Amazon EBS Elastic Volumes to reduce the size of the EBS volumes.
   • CDelete all expired and unused snapshots to reduce snapshot costs.
   • DDelete all nonessential snapshots. Use Amazon Data Lifecycle Manager to create and manage the snapshots according to the company's snapshot policy requirements.

   Show answer

   Answer: D

   Explanation

   This option involves managing snapshots efficiently to optimize costs with minimal operational overhead. Delete all nonessential snapshots: This reduces costs by eliminating unnecessary snapshot storage. Use Amazon Data Lifecycle Manager (DLM): DLM can automate the creation and deletion of snapshots based on defined policies. This reduces operational overhead by automating snapshot management according to the company's snapshot policy requirements.

   Source: Adapted from community discussion — t0nx

   References

   • AWS documentation

   Next question

6. Question 646 · 1017 in bank

   A company is developing a new application on AWS. The application consists of an Amazon Elastic Container Service (Amazon ECS) cluster, an Amazon S3 bucket that contains assets for the application, and an Amazon RDS for MySQL database that contains the dataset for the application. The dataset contains sensitive information. The company wants to ensure that only the ECS cluster can access the data in the RDS for MySQL database and the data in the S3 bucket. Which solution will meet these requirements?

   • ACreate a new AWS Key Management Service (AWS KMS) customer managed key to encrypt both the S3 bucket and the RDS for MySQL database. Ensure that the KMS key policy includes encrypt and decrypt permissions for the ECS task execution role.
   • BCreate an AWS Key Management Service (AWS KMS) AWS managed key to encrypt both the S3 bucket and the RDS for MySQL database. Ensure that the S3 bucket policy specifies the ECS task execution role as a user.
   • CCreate an S3 bucket policy that restricts bucket access to the ECS task execution role. Create a VPC endpoint for Amazon RDS for MySQL. Update the RDS for MySQL security group to allow access from only the subnets that the ECS cluster will generate tasks in.
   • DCreate a VPC endpoint for Amazon RDS for MySQL. Update the RDS for MySQL security group to allow access from only the subnets that the ECS cluster will generate tasks in. Create a VPC endpoint for Amazon S3. Update the S3 bucket policy to allow access from only the S3 VPC endpoint.

   Show answer

   Answer: A

   Explanation

   We're asked to restrict access to both, RDS and S3, to "the ECS cluster" (not to a subnet or endpoint). Not B: Does not restrict RDS at all. Wording about S3 is unusual. Not C: Would work for S3, but would allow RDS access from whole subnet which may contain other resources besides the ECS cluster Not D: Would allow RDS access from whole subnet which may contain other resources besides the ECS cluster. Would allow S3 access from VPC endpoint which might be accessed by other resources besides the ECS cluster.

   Source: Adapted from community discussion — pentium75

   References

   • AWS documentation

   Next question

7. Question 647 · 1017 in bank

   A company has a web application that runs on premises. The application experiences latency issues during peak hours. The latency issues occur twice each month. At the start of a latency issue, the application's CPU utilization immediately increases to 10 times its normal amount. The company wants to migrate the application to AWS to improve latency. The company also wants to scale the application automatically when application demand increases. The company will use AWS Elastic Beanstalk for application deployment. Which solution will meet these requirements?

   • AConfigure an Elastic Beanstalk environment to use burstable performance instances in unlimited mode. Configure the environment to scale based on requests.
   • BConfigure an Elastic Beanstalk environment to use compute optimized instances. Configure the environment to scale based on requests.
   • CConfigure an Elastic Beanstalk environment to use compute optimized instances. Configure the environment to scale on a schedule.
   • DConfigure an Elastic Beanstalk environment to use burstable performance instances in unlimited mode. Configure the environment to scale on predictive metrics.

   Show answer

   Answer: A

   Explanation

   "Scale on predictive metrics" does not sound like something that Beanstalk can do. In EC2 you can create a "predictive scaling policy", but apparently this is not supported by Beanstalk. That would rule out D. We have no indication that the application is CPU-intensive in general. If CPU utilization "increases to 10 times its normal amount" then the "normal amount" cannot be higher than 10 %. This would rule out B and C.

   Source: Adapted from community discussion — pentium75

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

8. Question 648 · 1017 in bank

   A company has customers located across the world. The company wants to use automation to secure its systems and network infrastructure. The company's security team must be able to track and audit all incremental changes to the infrastructure. Which solution will meet these requirements?

   • AUse AWS Organizations to set up the infrastructure. Use AWS Config to track changes.
   • BUse AWS CloudFormation to set up the infrastructure. Use AWS Config to track changes.
   • CUse AWS Organizations to set up the infrastructure. Use AWS Service Catalog to track changes.
   • DUse AWS CloudFormation to set up the infrastructure. Use AWS Service Catalog to track changes.

   Show answer

   Answer: B

   Explanation

   use automation to secure its systems and network infrastructure = AWS CloudFormation track and audit all incremental changes to the infrastructure = AWS Config

   Source: Adapted from community discussion — TariqKipkemei

   Next question

9. Question 649 · 1017 in bank

   Select 2

   A startup company is hosting a website for its customers on an Amazon EC2 instance. The website consists of a stateless Python application and a MySQL database. The website serves only a small amount of traffic. The company is concerned about the reliability of the instance and needs to migrate to a highly available architecture. The company cannot modify the application code. Which combination of actions should a solutions architect take to achieve high availability for the website? (Choose two.)

   • AProvision an internet gateway in each Availability Zone in use.
   • BMigrate the database to an Amazon RDS for MySQL Multi-AZ DB instance.
   • CMigrate the database to Amazon DynamoDB, and enable DynamoDB auto scaling.
   • DUse AWS DataSync to synchronize the database data across multiple EC2 instances.
   • ECreate an Application Load Balancer to distribute traffic to an Auto Scaling group of EC2 instances that are distributed across two Availability Zones.

   Show answer

   Answer: BE

   Explanation

   To achieve high availability for the website, Migrate the database to an Amazon RDS for MySQL Multi-AZ DB instance and Create an Application Load Balancer to distribute traffic to an Auto Scaling group of EC2 instances that are distributed across two Availability Zones.

   Source: Adapted from community discussion — TariqKipkemei

   Next question

10. Question 650 · 1017 in bank

    A company is moving its data and applications to AWS during a multiyear migration project. The company wants to securely access data on Amazon S3 from the company's AWS Region and from the company's on-premises location. The data must not traverse the internet. The company has established an AWS Direct Connect connection between its Region and its on-premises location. Which solution will meet these requirements?

    • ACreate gateway endpoints for Amazon S3. Use the gateway endpoints to securely access the data from the Region and the on-premises location.
    • BCreate a gateway in AWS Transit Gateway to access Amazon S3 securely from the Region and the on-premises location.
    • CCreate interface endpoints for Amazon S3. Use the interface endpoints to securely access the data from the Region and the on-premises location.
    • DUse an AWS Key Management Service (AWS KMS) key to access the data securely from the Region and the on-premises location.

    Show answer

    Answer: C

    Explanation

    Ans is C: >>You can access Amazon S3 from your VPC using gateway VPC endpoints. After you create the gateway endpoint, you can add it as a target in your route table for traffic destined from your VPC to Amazon S3. There is no additional charge for using gateway endpoints. Amazon S3 supports both gateway endpoints and interface endpoints. With a gateway endpoint, you can access Amazon S3 from your VPC, without requiring an internet gateway or NAT device for your VPC, and with no additional cost. However, gateway endpoints do not allow access from on-premises networks, from peered VPCs in other AWS Regions, or through a transit gateway. For those scenarios, you must use an interface endpoint, which is available for an additional cost. For more information, see Types of VPC endpoints for Amazon S3 in the Amazon S3 User Guide. https://docs.aws.amazon.com/vpc/latest/privatelink/vpc-endpoints-s3.html

    Source: Adapted from community discussion — Ernestokoro

    References

    • AWS documentation
    • AWS documentation
    • AWS documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SAA-C03 practice, question 641. 1017 questions available.