SAA-C03 practice questions 691–700

1. Question 691 · 1017 in bank

   A company has NFS servers in an on-premises data center that need to periodically back up small amounts of data to Amazon S3. Which solution meets these requirements and is MOST cost-effective?

   • ASet up AWS Glue to copy the data from the on-premises servers to Amazon S3.
   • BSet up an AWS DataSync agent on the on-premises servers, and sync the data to Amazon S3.
   • CSet up an SFTP sync using AWS Transfer for SFTP to sync data from on premises to Amazon S3.
   • DSet up an AWS Direct Connect connection between the on-premises data center and a VPC, and copy the data to Amazon S3.

   Show answer

   Answer: B

   Explanation

   A -> Used for ETL not copying B -> Works C -> Works, but overkill for the described scenario of periodic small backups, high cost D -> Works but it may not be necessary for transferring small amounts of data periodically. High setup cost

   Source: Adapted from community discussion — BillaRanga

   Next question

2. Question 692 · 1017 in bank

   An online video game company must maintain ultra-low latency for its game servers. The game servers run on Amazon EC2 instances. The company needs a solution that can handle millions of UDP internet traffic requests each second. Which solution will meet these requirements MOST cost-effectively?

   • AConfigure an Application Load Balancer with the required protocol and ports for the internet traffic. Specify the EC2 instances as the targets.
   • BConfigure a Gateway Load Balancer for the internet traffic. Specify the EC2 instances as the targets.
   • CConfigure a Network Load Balancer with the required protocol and ports for the internet traffic. Specify the EC2 instances as the targets.
   • DLaunch an identical set of game servers on EC2 instances in separate AWS Regions. Route internet traffic to both sets of EC2 instances.

   Show answer

   Answer: C

   Explanation

   UDP -> NLB. ALB is for HTTP/HTTPS. Gateway Load Balancer is for 3rd party virtual appliances like Firewalls etc not the traffic distribution. https://aws.amazon.com/compare/the-difference-between-the-difference-between-application-network-and-gateway-load-balancing/#:~:text=An%20NLB%20operates%20on%20layer,level%20along%20with%20gateway%20functionality.

   Source: Adapted from community discussion — Marunio

   References

   • AWS documentation
   • AWS documentation

   Next question

3. Question 693 · 1017 in bank

   Select 2

   A company runs a three-tier application in a VPC. The database tier uses an Amazon RDS for MySQL DB instance. The company plans to migrate the RDS for MySQL DB instance to an Amazon Aurora PostgreSQL DB cluster. The company needs a solution that replicates the data changes that happen during the migration to the new database. Which combination of steps will meet these requirements? (Choose two.)

   • AUse AWS Database Migration Service (AWS DMS) Schema Conversion to transform the database objects.
   • BUse AWS Database Migration Service (AWS DMS) Schema Conversion to create an Aurora PostgreSQL read replica on the RDS for MySQL DB instance.
   • CConfigure an Aurora MySQL read replica for the RDS for MySQL DB instance.
   • DDefine an AWS Database Migration Service (AWS DMS) task with change data capture (CDC) to migrate the data.
   • EPromote the Aurora PostgreSQL read replica to a standalone Aurora PostgreSQL DB cluster when the replica lag is zero.

   Show answer

   Answer: AD

   Explanation

   A: Correct. because need convert from MySQL to PostgreSQL B: Wrong. Schema Conversion does not create an Aurora read replica C: Wrong. Company wants to migrate to Aurora PostgreSQL, not Aurora MySQL D: Correct. CDC task helps to capture ongoing change from source data store E: Wrong. Although using Aurora Read Replica is an option for DB migration within the same Region, this question is asking for "combination of steps", which this option does not have another compatible option to pair with Therefore, answer is "AD"

   Source: Adapted from community discussion — h0ng97_spare_002

   Next question

4. Question 694 · 1017 in bank

   A company hosts a database that runs on an Amazon RDS instance that is deployed to multiple Availability Zones. The company periodically runs a script against the database to report new entries that are added to the database. The script that runs against the database negatively affects the performance of a critical application. The company needs to improve application performance with minimal costs. Which solution will meet these requirements with the LEAST operational overhead?

   • AAdd functionality to the script to identify the instance that has the fewest active connections. Configure the script to read from that instance to report the total new entries.
   • BCreate a read replica of the database. Configure the script to query only the read replica to report the total new entries.
   • CInstruct the development team to manually export the new entries for the day in the database at the end of each day.
   • DUse Amazon ElastiCache to cache the common queries that the script runs against the database.

   Show answer

   Answer: B

   Next question

5. Question 695 · 1017 in bank

   A company is using an Application Load Balancer (ALB) to present its application to the internet. The company finds abnormal traffic access patterns across the application. A solutions architect needs to improve visibility into the infrastructure to help the company understand these abnormalities better. What is the MOST operationally efficient solution that meets these requirements?

   • ACreate a table in Amazon Athena for AWS CloudTrail logs. Create a query for the relevant information.
   • BEnable ALB access logging to Amazon S3. Create a table in Amazon Athena, and query the logs.
   • CEnable ALB access logging to Amazon S3. Open each file in a text editor, and search each line for the relevant information.
   • DUse Amazon EMR on a dedicated Amazon EC2 instance to directly query the ALB to acquire traffic access log information.

   Show answer

   Answer: B

   Explanation

   A - Cloudtrail is for API Calls and changes on AWS account. B - Going for athena in S3. - Correct C - Manual work D - Distractor

   Source: Adapted from community discussion — Marunio

   References

   • AWS documentation

   Next question

6. Question 696 · 1017 in bank

   A company wants to use NAT gateways in its AWS environment. The company's Amazon EC2 instances in private subnets must be able to connect to the public internet through the NAT gateways. Which solution will meet these requirements?

   • ACreate public NAT gateways in the same private subnets as the EC2 instances.
   • BCreate private NAT gateways in the same private subnets as the EC2 instances.
   • CCreate public NAT gateways in public subnets in the same VPCs as the EC2 instances.
   • DCreate private NAT gateways in public subnets in the same VPCs as the EC2 instances.

   Show answer

   Answer: C

   Explanation

   I think the correct is C, because D would require more than just private NAT gateway. Private – Instances in private subnets can connect to other VPCs or your on-premises network through a private NAT gateway. You can route traffic from the NAT gateway through a transit gateway or a virtual private gateway. You cannot associate an elastic IP address with a private NAT gateway. You can attach an internet gateway to a VPC with a private NAT gateway, but if you route traffic from the private NAT gateway to the internet gateway, the internet gateway drops the traffic. https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html

   Source: Adapted from community discussion — mestule

   References

   • AWS documentation

   Next question

7. Question 697 · 1017 in bank

   Select 2

   A company has an organization in AWS Organizations. The company runs Amazon EC2 instances across four AWS accounts in the root organizational unit (OU). There are three nonproduction accounts and one production account. The company wants to prohibit users from launching EC2 instances of a certain size in the nonproduction accounts. The company has created a service control policy (SCP) to deny access to launch instances that use the prohibited types. Which solutions to deploy the SCP will meet these requirements? (Choose two.)

   • AAttach the SCP to the root OU for the organization.
   • BAttach the SCP to the three nonproduction Organizations member accounts.
   • CAttach the SCP to the Organizations management account.
   • DCreate an OU for the production account. Attach the SCP to the OU. Move the production member account into the new OU.
   • ECreate an OU for the required accounts. Attach the SCP to the OU. Move the nonproduction member accounts into the new OU.

   Show answer

   Answer: BE

   Explanation

   The link you provided says: "If you apply an authorization policy (for example, a service control policy (SCP)), to the root, it applies to all organizational units (OUs) and member accounts in the organization." "A" would also affect the one production account, which we clearly don't want. You can "attach an SCP to a root, OU, or account" https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps.html

   Source: Adapted from community discussion — MatAlves

   References

   • AWS documentation
   • AWS documentation

   Next question

8. Question 698 · 1017 in bank

   A company runs a shopping application that uses Amazon DynamoDB to store customer information. In case of data corruption, a solutions architect needs to design a solution that meets a recovery point objective (RPO) of 15 minutes and a recovery time objective (RTO) of 1 hour. What should the solutions architect recommend to meet these requirements?

   • AConfigure DynamoDB global tables. For RPO recovery, point the application to a different AWS Region.
   • BConfigure DynamoDB point-in-time recovery. For RPO recovery, restore to the desired point in time.
   • CExport the DynamoDB data to Amazon S3 Glacier on a daily basis. For RPO recovery, import the data from S3 Glacier to DynamoDB.
   • DSchedule Amazon Elastic Block Store (Amazon EBS) snapshots for the DynamoDB table every 15 minutes. For RPO recovery, restore the DynamoDB table by using the EBS snapshot.

   Show answer

   Answer: B

   Explanation

   A - DynamoDB global tables provides multi-Region, and multi-active database, but it not valid "in case of data corruption". In this case, you need a backup. This solutions isn't valid. **B** - Point in Time Recovery is designed as a continuous backup juts to recover it fast. It covers perfectly the RPO, and probably the RTO. https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/PointInTimeRecovery.html C - A daily export will not cover the RPO of 15min. D - DynamoDB is serverless... so what are these EBS snapshots taken from???

   Source: Adapted from community discussion — 123jhl0

   References

   • AWS documentation
   • AWS documentation

   Next question

9. Question 699 · 1017 in bank

   A company’s website hosted on Amazon EC2 instances processes classified data stored in Amazon S3. Due to security concerns, the company requires a private and secure connection between its EC2 resources and Amazon S3. Which solution meets these requirements?

   • ASet up S3 bucket policies to allow access from a VPC endpoint.
   • BSet up an IAM policy to grant read-write access to the S3 bucket.
   • CSet up a NAT gateway to access resources outside the private subnet.
   • DSet up an access key ID and a secret access key to access the S3 bucket.

   Show answer

   Answer: A

   Explanation

   I think this question asks about the connection not about authorization, and for a secure S3 connection (e.g. without internet exposure, etc. ) should be a VPC endpoint.

   Source: Adapted from community discussion — sandordini

   Next question

10. Question 700 · 1017 in bank

    An ecommerce company runs its application on AWS. The application uses an Amazon Aurora PostgreSQL cluster in Multi-AZ mode for the underlying database. During a recent promotional campaign, the application experienced heavy read load and write load. Users experienced timeout issues when they attempted to access the application. A solutions architect needs to make the application architecture more scalable and highly available. Which solution will meet these requirements with the LEAST downtime?

    • ACreate an Amazon EventBridge rule that has the Aurora cluster as a source. Create an AWS Lambda function to log the state change events of the Aurora cluster. Add the Lambda function as a target for the EventBridge rule. Add additional reader nodes to fail over to.
    • BModify the Aurora cluster and activate the zero-downtime restart (ZDR) feature. Use Database Activity Streams on the cluster to track the cluster status.
    • CAdd additional reader instances to the Aurora cluster. Create an Amazon RDS Proxy target group for the Aurora cluster.
    • DCreate an Amazon ElastiCache for Redis cache. Replicate data from the Aurora cluster to Redis by using AWS Database Migration Service (AWS DMS) with a write-around approach.

    Show answer

    Answer: C

    Explanation

    A - "Lambda function to log state changes" - doesn't help with read/write load. B - ZDR applies to restarts that Aurora performs automatically to resolve error conditions: doesn't help with read/write load. D - Write-around approach: data is always written to the database and the data that is read goes to the cache. Doesn't help with read/write load. C - CORRECT. Even though it doesn't address "write operations", Aurora Replicas to offload read workloads from the primary DB instance. Amazon RDS Proxy allows applications to pool and share connections established with the database, improving database efficiency and application scalability.

    Source: Adapted from community discussion — MatAlves

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SAA-C03 practice, question 691. 1017 questions available.