SAA-C03 practice questions 701–710

1. Question 701 · 1017 in bank

   A company is designing a web application on AWS. The application will use a VPN connection between the company’s existing data centers and the company's VPCs. The company uses Amazon Route 53 as its DNS service. The application must use private DNS records to communicate with the on-premises services from a VPC. Which solution will meet these requirements in the MOST secure manner?

   • ACreate a Route 53 Resolver outbound endpoint. Create a resolver rule. Associate the resolver rule with the VPC.
   • BCreate a Route 53 Resolver inbound endpoint. Create a resolver rule. Associate the resolver rule with the VPC.
   • CCreate a Route 53 private hosted zone. Associate the private hosted zone with the VPC.
   • DCreate a Route 53 public hosted zone. Create a record for each service to allow service communication

   Show answer

   Answer: A

   Explanation

   If you have workloads that leverage both VPCs and on-premises resources, you also need to resolve DNS records hosted on-premises. Similarly, these on-premises resources may need to resolve names hosted on AWS. Through Resolver endpoints and conditional forwarding rules, you can resolve DNS queries between your on-premises resources and VPCs to create a hybrid cloud setup over VPN or Direct Connect (DX). Specifically: Inbound Resolver endpoints allow DNS queries to your VPC from your on-premises network or another VPC. Outbound Resolver endpoints allow DNS queries from your VPC to your on-premises network or another VPC. Reference: https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resolver.html

   Source: Adapted from community discussion — haci

   References

   • AWS documentation
   • AWS documentation

   Next question

2. Question 702 · 1017 in bank

   A company is running a photo hosting service in the us-east-1 Region. The service enables users across multiple countries to upload and view photos. Some photos are heavily viewed for months, and others are viewed for less than a week. The application allows uploads of up to 20 MB for each photo. The service uses the photo metadata to determine which photos to display to each user. Which solution provides the appropriate user access MOST cost-effectively?

   • AStore the photos in Amazon DynamoDB. Turn on DynamoDB Accelerator (DAX) to cache frequently viewed items.
   • BStore the photos in the Amazon S3 Intelligent-Tiering storage class. Store the photo metadata and its S3 location in DynamoDB.
   • CStore the photos in the Amazon S3 Standard storage class. Set up an S3 Lifecycle policy to move photos older than 30 days to the S3 Standard-Infrequent Access (S3 Standard-IA) storage class. Use the object tags to keep track of metadata.
   • DStore the photos in the Amazon S3 Glacier storage class. Set up an S3 Lifecycle policy to move photos older than 30 days to the S3 Glacier Deep Archive storage class. Store the photo metadata and its S3 location in Amazon OpenSearch Service.

   Show answer

   Answer: B

   Explanation

   The Intelligent-Tiering storage class automatically moves objects between two access tiers (frequent access and infrequent access) based on their access patterns, which aligns well with the varying view frequencies of the photos. Storing metadata in DynamoDB allows for efficient querying and retrieval of photo metadata.

   Source: Adapted from community discussion — Typewriter101

   Next question

3. Question 703 · 1017 in bank

   A company runs a highly available web application on Amazon EC2 instances behind an Application Load Balancer. The company uses Amazon CloudWatch metrics. As the traffic to the web application increases, some EC2 instances become overloaded with many outstanding requests. The CloudWatch metrics show that the number of requests processed and the time to receive the responses from some EC2 instances are both higher compared to other EC2 instances. The company does not want new requests to be forwarded to the EC2 instances that are already overloaded. Which solution will meet these requirements?

   • AUse the round robin routing algorithm based on the RequestCountPerTarget and ActiveConnectionCount CloudWatch metrics.
   • BUse the least outstanding requests algorithm based on the RequestCountPerTarget and ActiveConnectionCount CloudWatch metrics.
   • CUse the round robin routing algorithm based on the RequestCount and TargetResponseTime CloudWatch metrics.
   • DUse the least outstanding requests algorithm based on the RequestCount and TargetResponseTime CloudWatch metrics.

   Show answer

   Answer: B

   Explanation

   Option B is correct because can use "RequestCountPerTarget" to identify the amount of requests for each EC2 instance. Then use "least outstanding requests algorithm" to route to targets with the lowest number of in progress requests. Option D is wrong because "RequestCount" cannot identify the amount of requests for each EC2 instance. "RequestCount" is for the whole ALB.

   Source: Adapted from community discussion — h0ng97_spare_002

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

4. Question 704 · 1017 in bank

   A company uses Amazon EC2, AWS Fargate, and AWS Lambda to run multiple workloads in the company's AWS account. The company wants to fully make use of its Compute Savings Plans. The company wants to receive notification when coverage of the Compute Savings Plans drops. Which solution will meet these requirements with the MOST operational efficiency?

   • ACreate a daily budget for the Savings Plans by using AWS Budgets. Configure the budget with a coverage threshold to send notifications to the appropriate email message recipients.
   • BCreate a Lambda function that runs a coverage report against the Savings Plans. Use Amazon Simple Email Service (Amazon SES) to email the report to the appropriate email message recipients.
   • CCreate an AWS Budgets report for the Savings Plans budget. Set the frequency to daily.
   • DCreate a Savings Plans alert subscription. Enable all notification options. Enter an email address to receive notifications.

   Show answer

   Answer: A

   Explanation

   A - describes exactly what is said in this link: "You can use AWS Budgets to enable simple-to-complex cost and usage tracking. Some examples include: (...) Setting a daily utilization or coverage budget to track your RI or Savings Plans. You can choose to be notified through email and Amazon SNS topics when your utilization drops below 80 percent for a given day." https://docs.aws.amazon.com/cost-management/latest/userguide/budgets-managing-costs.html

   Source: Adapted from community discussion — MatAlves

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

5. Question 705 · 1017 in bank

   A company runs a real-time data ingestion solution on AWS. The solution consists of the most recent version of Amazon Managed Streaming for Apache Kafka (Amazon MSK). The solution is deployed in a VPC in private subnets across three Availability Zones. A solutions architect needs to redesign the data ingestion solution to be publicly available over the internet. The data in transit must also be encrypted. Which solution will meet these requirements with the MOST operational efficiency?

   • AConfigure public subnets in the existing VPC. Deploy an MSK cluster in the public subnets. Update the MSK cluster security settings to enable mutual TLS authentication.
   • BCreate a new VPC that has public subnets. Deploy an MSK cluster in the public subnets. Update the MSK cluster security settings to enable mutual TLS authentication.
   • CDeploy an Application Load Balancer (ALB) that uses private subnets. Configure an ALB security group inbound rule to allow inbound traffic from the VPC CIDR block for HTTPS protocol.
   • DDeploy a Network Load Balancer (NLB) that uses private subnets. Configure an NLB listener for HTTPS communication over the internet.

   Show answer

   Answer: A

   Explanation

   Since we are talking about real-time data (UDP packets) ALB is not a viable solution. You don't need to listen HTTPS, so D is eliminated. If you create a new VPC, you must create link between the old one and this is not mentioned in B. So It is A for me.

   Source: Adapted from community discussion — haci

   References

   • AWS documentation

   Next question

6. Question 706 · 1017 in bank

   A company wants to migrate an on-premises legacy application to AWS. The application ingests customer order files from an on-premises enterprise resource planning (ERP) system. The application then uploads the files to an SFTP server. The application uses a scheduled job that checks for order files every hour. The company already has an AWS account that has connectivity to the on-premises network. The new application on AWS must support integration with the existing ERP system. The new application must be secure and resilient and must use the SFTP protocol to process orders from the ERP system immediately. Which solution will meet these requirements?

   • ACreate an AWS Transfer Family SFTP internet-facing server in two Availability Zones. Use Amazon S3 storage. Create an AWS Lambda function to process order files. Use S3 Event Notifications to send s3:ObjectCreated:* events to the Lambda function.
   • BCreate an AWS Transfer Family SFTP internet-facing server in one Availability Zone. Use Amazon Elastic File System (Amazon EFS) storage. Create an AWS Lambda function to process order files. Use a Transfer Family managed workflow to invoke the Lambda function.
   • CCreate an AWS Transfer Family SFTP internal server in two Availability Zones. Use Amazon Elastic File System (Amazon EFS) storage. Create an AWS Step Functions state machine to process order files. Use Amazon EventBridge Scheduler to invoke the state machine to periodically check Amazon EFS for order files.
   • DCreate an AWS Transfer Family SFTP internal server in two Availability Zones. Use Amazon S3 storage. Create an AWS Lambda function to process order files. Use a Transfer Family managed workflow to invoke the Lambda function.

   Show answer

   Answer: D

   Explanation

   D looks more secure over existing on-prem to AWS connection -Transfer Family SFTP internal server in two Availability Zones. -Use Amazon S3 storage. -Use a Transfer Family managed workflow to invoke the Lambda function"

   Source: Adapted from community discussion — anikolov

   References

   • AWS documentation
   • AWS documentation

   Next question

7. Question 707 · 1017 in bank

   A company’s applications use Apache Hadoop and Apache Spark to process data on premises. The existing infrastructure is not scalable and is complex to manage. A solutions architect must design a scalable solution that reduces operational complexity. The solution must keep the data processing on premises. Which solution will meet these requirements?

   • AUse AWS Site-to-Site VPN to access the on-premises Hadoop Distributed File System (HDFS) data and application. Use an Amazon EMR cluster to process the data.
   • BUse AWS DataSync to connect to the on-premises Hadoop Distributed File System (HDFS) cluster. Create an Amazon EMR cluster to process the data.
   • CMigrate the Apache Hadoop application and the Apache Spark application to Amazon EMR clusters on AWS Outposts. Use the EMR clusters to process the data.
   • DUse an AWS Snowball device to migrate the data to an Amazon S3 bucket. Create an Amazon EMR cluster to process the data.

   Show answer

   Answer: C

   Next question

8. Question 708 · 1017 in bank

   A company is migrating a large amount of data from on-premises storage to AWS. Windows, Mac, and Linux based Amazon EC2 instances in the same AWS Region will access the data by using SMB and NFS storage protocols. The company will access a portion of the data routinely. The company will access the remaining data infrequently. The company needs to design a solution to host the data. Which solution will meet these requirements with the LEAST operational overhead?

   • ACreate an Amazon Elastic File System (Amazon EFS) volume that uses EFS Intelligent-Tiering. Use AWS DataSync to migrate the data to the EFS volume.
   • BCreate an Amazon FSx for ONTAP instance. Create an FSx for ONTAP file system with a root volume that uses the auto tiering policy. Migrate the data to the FSx for ONTAP volume.
   • CCreate an Amazon S3 bucket that uses S3 Intelligent-Tiering. Migrate the data to the S3 bucket by using an AWS Storage Gateway Amazon S3 File Gateway.
   • DCreate an Amazon FSx for OpenZFS file system. Migrate the data to the new volume.

   Show answer

   Answer: B

   Explanation

   Amazon FsX for NetAPP ONTAP feature: Multi-protocol access to data using the Network File System (NFS), Server Message Block (SMB), and Internet Small Computer Systems Interface (iSCSI) protocols

   Source: Adapted from community discussion — ogerber

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

9. Question 709 · 1017 in bank

   A company runs a photo processing application that needs to frequently upload and download pictures from Amazon S3 buckets that are located in the same AWS Region. A solutions architect has noticed an increased cost in data transfer fees and needs to implement a solution to reduce these costs. How can the solutions architect meet this requirement?

   • ADeploy Amazon API Gateway into a public subnet and adjust the route table to route S3 calls through it.
   • BDeploy a NAT gateway into a public subnet and attach an endpoint policy that allows access to the S3 buckets.
   • CDeploy the application into a public subnet and allow it to route through an internet gateway to access the S3 buckets.
   • DDeploy an S3 VPC gateway endpoint into the VPC and attach an endpoint policy that allows access to the S3 buckets.

   Show answer

   Answer: D

   Explanation

   ***CORRECT*** The correct answer is Option D. Deploy an S3 VPC gateway endpoint into the VPC and attach an endpoint policy that allows access to the S3 buckets. By deploying an S3 VPC gateway endpoint, the application can access the S3 buckets over a private network connection within the VPC, eliminating the need for data transfer over the internet. This can help reduce data transfer fees as well as improve the performance of the application. The endpoint policy can be used to specify which S3 buckets the application has access to.

   Source: Adapted from community discussion — Buruguduystunstugudunstuy

   Next question

10. Question 710 · 1017 in bank

    A manufacturing company runs its report generation application on AWS. The application generates each report in about 20 minutes. The application is built as a monolith that runs on a single Amazon EC2 instance. The application requires frequent updates to its tightly coupled modules. The application becomes complex to maintain as the company adds new features. Each time the company patches a software module, the application experiences downtime. Report generation must restart from the beginning after any interruptions. The company wants to redesign the application so that the application can be flexible, scalable, and gradually improved. The company wants to minimize application downtime. Which solution will meet these requirements?

    • ARun the application on AWS Lambda as a single function with maximum provisioned concurrency.
    • BRun the application on Amazon EC2 Spot Instances as microservices with a Spot Fleet default allocation strategy.
    • CRun the application on Amazon Elastic Container Service (Amazon ECS) as microservices with service auto scaling.
    • DRun the application on AWS Elastic Beanstalk as a single application environment with an all-at-once deployment strategy.

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SAA-C03 practice, question 701. 1017 questions available.