SAA-C03 practice questions 671–680

1. Question 671 · 1017 in bank

   A company is creating an application. The company stores data from tests of the application in multiple on-premises locations. The company needs to connect the on-premises locations to VPCs in an AWS Region in the AWS Cloud. The number of accounts and VPCs will increase during the next year. The network architecture must simplify the administration of new connections and must provide the ability to scale. Which solution will meet these requirements with the LEAST administrative overhead?

   • ACreate a peering connection between the VPCs. Create a VPN connection between the VPCs and the on-premises locations.
   • BLaunch an Amazon EC2 instance. On the instance, include VPN software that uses a VPN connection to connect all VPCs and on-premises locations.
   • CCreate a transit gateway. Create VPC attachments for the VPC connections. Create VPN attachments for the on-premises connections.
   • DCreate an AWS Direct Connect connection between the on-premises locations and a central VPC. Connect the central VPC to other VPCs by using peering connections.

   Show answer

   Answer: C

   Explanation

   "AWS Transit Gateway provides a hub and spoke design for connecting VPCs and on-premises networks as a fully managed service without requiring you to provision third-party virtual appliances. No VPN overlay is required, and AWS manages high availability and scalability." https://docs.aws.amazon.com/whitepapers/latest/building-scalable-secure-multi-vpc-network-infrastructure/transit-gateway.html#:~:text=AWS%20Transit%20Gateway%20provides%20a,manages%20high%20availability%20and%20scalability.

   Source: Adapted from community discussion — MatAlves

   References

   • AWS documentation

   Next question

2. Question 672 · 1017 in bank

   Select 2

   A company that uses AWS needs a solution to predict the resources needed for manufacturing processes each month. The solution must use historical values that are currently stored in an Amazon S3 bucket. The company has no machine learning (ML) experience and wants to use a managed service for the training and predictions. Which combination of steps will meet these requirements? (Choose two.)

   • ADeploy an Amazon SageMaker model. Create a SageMaker endpoint for inference.
   • BUse Amazon SageMaker to train a model by using the historical data in the S3 bucket.
   • CConfigure an AWS Lambda function with a function URL that uses Amazon SageMaker endpoints to create predictions based on the inputs.
   • DConfigure an AWS Lambda function with a function URL that uses an Amazon Forecast predictor to create a prediction based on the inputs.
   • ETrain an Amazon Forsecast predictor by using the historical data in the S3 bucket.

   Show answer

   Answer: AB

   Explanation

   "Amazon Forecast is no longer available to new customers. Existing customers of Amazon Forecast can continue to use the service as normal" "After careful consideration, we have made the decision to close new customer access to Amazon Forecast, effective July 29, 2024." This question will either be removed or reformulated to exclude Forecast as the service is no longer available to new customers.

   Source: Adapted from community discussion — MatAlves

   References

   • AWS documentation

   Next question

3. Question 673 · 1017 in bank

   A company manages AWS accounts in AWS Organizations. AWS IAM Identity Center (AWS Single Sign-On) and AWS Control Tower are configured for the accounts. The company wants to manage multiple user permissions across all the accounts. The permissions will be used by multiple IAM users and must be split between the developer and administrator teams. Each team requires different permissions. The company wants a solution that includes new users that are hired on both teams. Which solution will meet these requirements with the LEAST operational overhead?

   • ACreate individual users in IAM Identity Center for each account. Create separate developer and administrator groups in IAM Identity Center. Assign the users to the appropriate groups. Create a custom IAM policy for each group to set fine-grained permissions.
   • BCreate individual users in IAM Identity Center for each account. Create separate developer and administrator groups in IAM Identity Center. Assign the users to the appropriate groups. Attach AWS managed IAM policies to each user as needed for fine-grained permissions.
   • CCreate individual users in IAM Identity Center. Create new developer and administrator groups in IAM Identity Center. Create new permission sets that include the appropriate IAM policies for each group. Assign the new groups to the appropriate accounts. Assign the new permission sets to the new groups. When new users are hired, add them to the appropriate group.
   • DCreate individual users in IAM Identity Center. Create new permission sets that include the appropriate IAM policies for each user. Assign the users to the appropriate accounts. Grant additional IAM permissions to the users from within specific accounts. When new users are hired, add them to IAM Identity Center and assign them to the accounts.

   Show answer

   Answer: C

   References

   • AWS documentation

   Next question

4. Question 674 · 1017 in bank

   A company wants to standardize its Amazon Elastic Block Store (Amazon EBS) volume encryption strategy. The company also wants to minimize the cost and configuration effort required to operate the volume encryption check. Which solution will meet these requirements?

   • AWrite API calls to describe the EBS volumes and to confirm the EBS volumes are encrypted. Use Amazon EventBridge to schedule an AWS Lambda function to run the API calls.
   • BWrite API calls to describe the EBS volumes and to confirm the EBS volumes are encrypted. Run the API calls on an AWS Fargate task.
   • CCreate an AWS Identity and Access Management (IAM) policy that requires the use of tags on EBS volumes. Use AWS Cost Explorer to display resources that are not properly tagged. Encrypt the untagged resources manually.
   • DCreate an AWS Config rule for Amazon EBS to evaluate if a volume is encrypted and to flag the volume if it is not encrypted.

   Show answer

   Answer: D

   Explanation

   D : you could use a managed rule to quickly start assessing whether your Amazon Elastic Block Store (Amazon EBS) volumes are encrypted or whether specific tags are applied to your resources. https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_use-managed-rules.html

   Source: Adapted from community discussion — betttty

   References

   • AWS documentation

   Next question

5. Question 675 · 1017 in bank

   A company is running a business-critical web application on Amazon EC2 instances behind an Application Load Balancer. The EC2 instances are in an Auto Scaling group. The application uses an Amazon Aurora PostgreSQL database that is deployed in a single Availability Zone. The company wants the application to be highly available with minimum downtime and minimum loss of data. Which solution will meet these requirements with the LEAST operational effort?

   • APlace the EC2 instances in different AWS Regions. Use Amazon Route 53 health checks to redirect traffic. Use Aurora PostgreSQL Cross-Region Replication.
   • BConfigure the Auto Scaling group to use multiple Availability Zones. Configure the database as Multi-AZ. Configure an Amazon RDS Proxy instance for the database.
   • CConfigure the Auto Scaling group to use one Availability Zone. Generate hourly snapshots of the database. Recover the database from the snapshots in the event of a failure.
   • DConfigure the Auto Scaling group to use multiple AWS Regions. Write the data from the application to Amazon S3. Use S3 Event Notifications to launch an AWS Lambda function to write the data to the database.

   Show answer

   Answer: B

   Explanation

   By configuring the Auto Scaling group to use multiple Availability Zones, the application will be able to continue running even if one Availability Zone goes down. Configuring the database as Multi-AZ will also ensure that the database remains available in the event of a failure in one Availability Zone. Using an Amazon RDS Proxy instance for the database will allow the application to automatically route traffic to healthy database instances, further increasing the availability of the application. This solution will meet the requirements for high availability with minimal operational effort.

   Source: Adapted from community discussion — SilentMilli

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

6. Question 676 · 1017 in bank

   Select 2

   A company regularly uploads GB-sized files to Amazon S3. After the company uploads the files, the company uses a fleet of Amazon EC2 Spot Instances to transcode the file format. The company needs to scale throughput when the company uploads data from the on-premises data center to Amazon S3 and when the company downloads data from Amazon S3 to the EC2 instances. Which solutions will meet these requirements? (Choose two.)

   • AUse the S3 bucket access point instead of accessing the S3 bucket directly.
   • BUpload the files into multiple S3 buckets.
   • CUse S3 multipart uploads.
   • DFetch multiple byte-ranges of an object in parallel.
   • EAdd a random prefix to each object when uploading the files.

   Show answer

   Answer: CD

   Explanation

   C: Upload: Multipart clear, D: Download: You can fetch a byte-range from an object, transferring only the specified portion. You can use concurrent connections to Amazon S3 to fetch different byte ranges from within the same object. This helps you achieve higher aggregate throughput versus a single whole-object request. A: S3 Access Points can be easily scaled, but are typically used to simplify data access for any AWS service or customer application that stores data in S3. E: Prefixes: You can increase your read or write performance by using parallelization. For example, if you create 10 prefixes in an Amazon S3 bucket to parallelize reads, you could scale your read performance to 55,000 read requests per second. But wording in this answer is strange...

   Source: Adapted from community discussion — sandordini

   Next question

7. Question 677 · 1017 in bank

   Select 2

   A solutions architect is designing a shared storage solution for a web application that is deployed across multiple Availability Zones. The web application runs on Amazon EC2 instances that are in an Auto Scaling group. The company plans to make frequent changes to the content. The solution must have strong consistency in returning the new content as soon as the changes occur. Which solutions meet these requirements? (Choose two.)

   • AUse AWS Storage Gateway Volume Gateway Internet Small Computer Systems Interface (iSCSI) block storage that is mounted to the individual EC2 instances.
   • BCreate an Amazon Elastic File System (Amazon EFS) file system. Mount the EFS file system on the individual EC2 instances.
   • CCreate a shared Amazon Elastic Block Store (Amazon EBS) volume. Mount the EBS volume on the individual EC2 instances.
   • DUse AWS DataSync to perform continuous synchronization of data between EC2 hosts in the Auto Scaling group.
   • ECreate an Amazon S3 bucket to store the web content. Set the metadata for the Cache-Control header to no-cache. Use Amazon CloudFront to deliver the content.

   Show answer

   Answer: BE

   Explanation

   A - Volume Gateway is typically on-prem and optimized for hybrid setups, not for fully cloud-based solutions. B - EFS provides a fully managed, shared file storage system that works across multiple AZs. C - Even with Multi-Attach, sharing EBS volumes across AZs is pretty complex and error-prone. D - DataSync is designed for periodic synchronization and not real-time, frequent updates. E - The "no-cache" header ensures the content is always fetched fresh, and CloudFront delivers it efficiently with reduced latency. Although S3 is less efficient for frequent updates compared to a shared file system like EFS, but not a problem here.

   Source: Adapted from community discussion — LeonSauveterre

   Next question

8. Question 678 · 1017 in bank

   A company is deploying an application in three AWS Regions using an Application Load Balancer. Amazon Route 53 will be used to distribute traffic between these Regions. Which Route 53 configuration should a solutions architect use to provide the MOST high-performing experience?

   • ACreate an A record with a latency policy.
   • BCreate an A record with a geolocation policy.
   • CCreate a CNAME record with a failover policy.
   • DCreate a CNAME record with a geoproximity policy.

   Show answer

   Answer: A

   Explanation

   Answer A is correct. Route53 uses an internal record type called ALIAS, but from a DNS point of view it's still an A record. Just try it yourself, create an ALB and create a DNS record in Route53. While you can technically use a CNAME (for subdomains, see below), the wizard will guide you to use an A ALIAS record, which also makes the most sense. The problem with CNAME records is that it's not possible to create them at the root level of the domain. Let's say your domain is somedomain.com - you can't create a CNAME for the apex of the domain (mydomain.com), only for subdomains (subdomain.mydomain.com). https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resource-record-sets-choosing-alias-non-alias.html

   Source: Adapted from community discussion — dkw2342

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

9. Question 679 · 1017 in bank

   A company has a web application that includes an embedded NoSQL database. The application runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances run in an Amazon EC2 Auto Scaling group in a single Availability Zone. A recent increase in traffic requires the application to be highly available and for the database to be eventually consistent. Which solution will meet these requirements with the LEAST operational overhead?

   • AReplace the ALB with a Network Load Balancer. Maintain the embedded NoSQL database with its replication service on the EC2 instances.
   • BReplace the ALB with a Network Load Balancer. Migrate the embedded NoSQL database to Amazon DynamoDB by using AWS Database Migration Service (AWS DMS).
   • CModify the Auto Scaling group to use EC2 instances across three Availability Zones. Maintain the embedded NoSQL database with its replication service on the EC2 instances.
   • DModify the Auto Scaling group to use EC2 instances across three Availability Zones. Migrate the embedded NoSQL database to Amazon DynamoDB by using AWS Database Migration Service (AWS DMS).

   Show answer

   Answer: D

   Explanation

   Application Load Balancer (ALB) is better suited for HTTP/HTTPS traffic. A & B are out. Maintaining replication and failover for the embedded database across AZs is frustratingly complex and operationally intensive. Migration to DynamoDB requires initial effort but reduces long-term operational overhead. So D.

   Source: Adapted from community discussion — LeonSauveterre

   Next question

10. Question 680 · 1017 in bank

    A company is building a shopping application on AWS. The application offers a catalog that changes once each month and needs to scale with traffic volume. The company wants the lowest possible latency from the application. Data from each user's shopping cart needs to be highly available. User session data must be available even if the user is disconnected and reconnects. What should a solutions architect do to ensure that the shopping cart data is preserved at all times?

    • AConfigure an Application Load Balancer to enable the sticky sessions feature (session affinity) for access to the catalog in Amazon Aurora.
    • BConfigure Amazon ElastiCache for Redis to cache catalog data from Amazon DynamoDB and shopping cart data from the user's session.
    • CConfigure Amazon OpenSearch Service to cache catalog data from Amazon DynamoDB and shopping cart data from the user's session.
    • DConfigure an Amazon EC2 instance with Amazon Elastic Block Store (Amazon EBS) storage for the catalog and shopping cart. Configure automated snapshots.

    Show answer

    Answer: B

    Explanation

    • ElastiCache is a managed in-memory data store service that is well-suited for managing session data in a distributed architecture.

    Source: Adapted from community discussion — Tanidanindo

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SAA-C03 practice, question 671. 1017 questions available.