SAA-C03 practice questions 711–720

1. Question 711 · 1017 in bank

   A company wants to rearchitect a large-scale web application to a serverless microservices architecture. The application uses Amazon EC2 instances and is written in Python. The company selected one component of the web application to test as a microservice. The component supports hundreds of requests each second. The company wants to create and test the microservice on an AWS solution that supports Python. The solution must also scale automatically and require minimal infrastructure and minimal operational support. Which solution will meet these requirements?

   • AUse a Spot Fleet with auto scaling of EC2 instances that run the most recent Amazon Linux operating system.
   • BUse an AWS Elastic Beanstalk web server environment that has high availability configured.
   • CUse Amazon Elastic Kubernetes Service (Amazon EKS). Launch Auto Scaling groups of self-managed EC2 instances.
   • DUse an AWS Lambda function that runs custom developed code.

   Show answer

   Answer: D

   Explanation

   A: auto-scaling of EC2 instances - Lot of overhead + Infra B: The company selected one component of the web application to test as a microservice. The component supports hundreds of requests each second. > lastic Beanstalk is a bad choice if you need worker processes. The whole point of a worker process is to perform a task in the background without slowing down your main web app. But Elastic Beanstalk doesn't support this option in a scalable way. Also, they want to test just 1 selected microservice and I think it's a bit of overkill to do it using Elastic Beanstalk. Happy to be challenged though! C: self-managed EC2 instances > infra + operational overhead D: Lambda supports Python, microservice should be quicker than 15 mins, worst case scenario the test will fail.. (that's the purpose tests are conducted for anyway..) I'd go for D

   Source: Adapted from community discussion — sandordini

   References

   • AWS documentation

   Next question

2. Question 712 · 1017 in bank

   A company has an AWS Direct Connect connection from its on-premises location to an AWS account. The AWS account has 30 different VPCs in the same AWS Region. The VPCs use private virtual interfaces (VIFs). Each VPC has a CIDR block that does not overlap with other networks under the company's control. The company wants to centrally manage the networking architecture while still allowing each VPC to communicate with all other VPCs and on-premises networks. Which solution will meet these requirements with the LEAST amount of operational overhead?

   • ACreate a transit gateway, and associate the Direct Connect connection with a new transit VIF. Turn on the transit gateway's route propagation feature.
   • BCreate a Direct Connect gateway. Recreate the private VIFs to use the new gateway. Associate each VPC by creating new virtual private gateways.
   • CCreate a transit VPConnect the Direct Connect connection to the transit VPCreate a peering connection between all other VPCs in the Region. Update the route tables.
   • DCreate AWS Site-to-Site VPN connections from on premises to each VPC. Ensure that both VPN tunnels are UP for each connection. Turn on the route propagation feature.

   Show answer

   Answer: A

   Explanation

   "You can use AWS Direct Connect gateway to connect your Direct Connect connection over a transit virtual interface to the VPCs or VPNs that are attached to your transit gateway. You associate a Direct Connect gateway with the transit gateway. Then, create a transit virtual interface for your AWS Direct Connect connection to the Direct Connect gateway." https://docs.aws.amazon.com/directconnect/latest/UserGuide/direct-connect-transit-gateways.html

   Source: Adapted from community discussion — MatAlves

   References

   • AWS documentation
   • AWS documentation

   Next question

3. Question 713 · 1017 in bank

   A company has applications that run on Amazon EC2 instances. The EC2 instances connect to Amazon RDS databases by using an IAM role that has associated policies. The company wants to use AWS Systems Manager to patch the EC2 instances without disrupting the running applications. Which solution will meet these requirements?

   • ACreate a new IAM role. Attach the AmazonSSMManagedInstanceCore policy to the new IAM role. Attach the new IAM role to the EC2 instances and the existing IAM role.
   • BCreate an IAM user. Attach the AmazonSSMManagedInstanceCore policy to the IAM user. Configure Systems Manager to use the IAM user to manage the EC2 instances.
   • CEnable Default Host Configuration Management in Systems Manager to manage the EC2 instances.
   • DRemove the existing policies from the existing IAM role. Add the AmazonSSMManagedInstanceCore policy to the existing IAM role.

   Show answer

   Answer: C

   Explanation

   option C....Default Host Management Configuration creates and applies a default IAM role to ensure that Systems Manager has permissions to manage all instances in the Region and perform automated patch scans using Patch Manager.

   Source: Adapted from community discussion — jaswantn

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

4. Question 714 · 1017 in bank

   A company runs container applications by using Amazon Elastic Kubernetes Service (Amazon EKS) and the Kubernetes Horizontal Pod Autoscaler. The workload is not consistent throughout the day. A solutions architect notices that the number of nodes does not automatically scale out when the existing nodes have reached maximum capacity in the cluster, which causes performance issues. Which solution will resolve this issue with the LEAST administrative overhead?

   • AScale out the nodes by tracking the memory usage.
   • BUse the Kubernetes Cluster Autoscaler to manage the number of nodes in the cluster.
   • CUse an AWS Lambda function to resize the EKS cluster automatically.
   • DUse an Amazon EC2 Auto Scaling group to distribute the workload.

   Show answer

   Answer: B

   Explanation

   B is the correct answer. The Kubernetes Cluster Autoscaler automatically adjusts the number of nodes in your cluster when pods fail or are rescheduled onto other nodes. The Cluster Autoscaler uses Auto Scaling groups

   Source: Adapted from community discussion — Naveena_Devanga

   References

   • AWS documentation

   Next question

5. Question 715 · 1017 in bank

   A company maintains about 300 TB in Amazon S3 Standard storage month after month. The S3 objects are each typically around 50 GB in size and are frequently replaced with multipart uploads by their global application. The number and size of S3 objects remain constant, but the company's S3 storage costs are increasing each month. How should a solutions architect reduce costs in this situation?

   • ASwitch from multipart uploads to Amazon S3 Transfer Acceleration.
   • BEnable an S3 Lifecycle policy that deletes incomplete multipart uploads.
   • CConfigure S3 inventory to prevent objects from being archived too quickly.
   • DConfigure Amazon CloudFront to reduce the number of objects stored in Amazon S3.

   Show answer

   Answer: B

   Explanation

   Optimize multipart uploads to reduce costs associated with storing incomplete multipart upload parts. Ensure that multipart uploads are completed and the parts are assembled into complete objects in a timely manner to avoid unnecessary storage costs.

   Source: Adapted from community discussion — alawada

   References

   • AWS documentation

   Next question

6. Question 716 · 1017 in bank

   A company has deployed a multiplayer game for mobile devices. The game requires live location tracking of players based on latitude and longitude. The data store for the game must support rapid updates and retrieval of locations. The game uses an Amazon RDS for PostgreSQL DB instance with read replicas to store the location data. During peak usage periods, the database is unable to maintain the performance that is needed for reading and writing updates. The game's user base is increasing rapidly. What should a solutions architect do to improve the performance of the data tier?

   • ATake a snapshot of the existing DB instance. Restore the snapshot with Multi-AZ enabled.
   • BMigrate from Amazon RDS to Amazon OpenSearch Service with OpenSearch Dashboards.
   • CDeploy Amazon DynamoDB Accelerator (DAX) in front of the existing DB instance. Modify the game to use DAX.
   • DDeploy an Amazon ElastiCache for Redis cluster in front of the existing DB instance. Modify the game to use Redis.

   Show answer

   Answer: D

   Explanation

   AnswerD ElastiCache is a fully managed, in-memory caching service that provides microsecond read and write latencies that support flexible, real-time use cases. https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/creating-elasticache-cluster-with-RDS-settings.html

   Source: Adapted from community discussion — Scheldon

   References

   • AWS documentation
   • AWS documentation

   Next question

7. Question 717 · 1017 in bank

   A company stores critical data in Amazon DynamoDB tables in the company's AWS account. An IT administrator accidentally deleted a DynamoDB table. The deletion caused a significant loss of data and disrupted the company's operations. The company wants to prevent this type of disruption in the future. Which solution will meet this requirement with the LEAST operational overhead?

   • AConfigure a trail in AWS CloudTrail. Create an Amazon EventBridge rule for delete actions. Create an AWS Lambda function to automatically restore deleted DynamoDB tables.
   • BCreate a backup and restore plan for the DynamoDB tables. Recover the DynamoDB tables manually.
   • CConfigure deletion protection on the DynamoDB tables.
   • DEnable point-in-time recovery on the DynamoDB tables.

   Show answer

   Answer: C

   Explanation

   https://aws.amazon.com/about-aws/whats-new/2023/03/amazon-dynamodb-table-deletion-protection/ Deletion protection is now available for Amazon DynamoDB tables in all AWS Regions. DynamoDB now makes it possible for you to protect your tables from accidental deletion when performing regular table management operations. When creating new tables or managing existing tables, authorized administrators can set the deletion protection property for each table, which will govern whether a table can be deleted.

   Source: Adapted from community discussion — BillaRanga

   References

   • AWS documentation

   Next question

8. Question 718 · 1017 in bank

   A company has an on-premises data center that is running out of storage capacity. The company wants to migrate its storage infrastructure to AWS while minimizing bandwidth costs. The solution must allow for immediate retrieval of data at no additional cost. How can these requirements be met?

   • ADeploy Amazon S3 Glacier Vault and enable expedited retrieval. Enable provisioned retrieval capacity for the workload.
   • BDeploy AWS Storage Gateway using cached volumes. Use Storage Gateway to store data in Amazon S3 while retaining copies of frequently accessed data subsets locally.
   • CDeploy AWS Storage Gateway using stored volumes to store data locally. Use Storage Gateway to asynchronously back up point-in-time snapshots of the data to Amazon S3.
   • DDeploy AWS Direct Connect to connect with the on-premises data center. Configure AWS Storage Gateway to store data locally. Use Storage Gateway to asynchronously back up point-in-time snapshots of the data to Amazon S3.

   Show answer

   Answer: B

   Explanation

   B. Deploy AWS Storage Gateway using cached volumes. Use Storage Gateway to store data in Amazon S3 while retaining copies of frequently accessed data subsets locally. AWS Storage Gateway’s cached volumes let you use Amazon S3 as your primary data storage while retaining frequently accessed data locally in your storage gateway. Cached volumes minimize the need to scale your on-premises storage infrastructure, while still providing your applications with low-latency access to their frequently accessed data. All data transferred between your gateway and AWS storage is encrypted for security. You can also save on data transfer costs as AWS Storage Gateway compresses all data transferred between the gateway and AWS, allowing you to store more data in AWS while reducing your data transfer costs.

   Source: Adapted from community discussion — JCVDB23

   Next question

9. Question 719 · 1017 in bank

   A company runs a three-tier web application in a VPC across multiple Availability Zones. Amazon EC2 instances run in an Auto Scaling group for the application tier. The company needs to make an automated scaling plan that will analyze each resource's daily and weekly historical workload trends. The configuration must scale resources appropriately according to both the forecast and live changes in utilization. Which scaling strategy should a solutions architect recommend to meet these requirements?

   • AImplement dynamic scaling with step scaling based on average CPU utilization from the EC2 instances.
   • BEnable predictive scaling to forecast and scale. Configure dynamic scaling with target tracking
   • CCreate an automated scheduled scaling action based on the traffic patterns of the web application.
   • DSet up a simple scaling policy. Increase the cooldown period based on the EC2 instance startup time.

   Show answer

   Answer: B

   Explanation

   By configuring dynamic scaling with target tracking, the company can automatically adjust resources based on the forecasted demand while also responding to live changes in utilization

   Source: Adapted from community discussion — BillaRanga

   References

   • AWS documentation

   Next question

10. Question 720 · 1017 in bank

    Select 2

    A company recently launched Linux-based application instances on Amazon EC2 in a private subnet and launched a Linux-based bastion host on an Amazon EC2 instance in a public subnet of a VPC. A solutions architect needs to connect from the on-premises network, through the company's internet connection, to the bastion host, and to the application servers. The solutions architect must make sure that the security groups of all the EC2 instances will allow that access. Which combination of steps should the solutions architect take to meet these requirements? (Choose two.)

    • AReplace the current security group of the bastion host with one that only allows inbound access from the application instances.
    • BReplace the current security group of the bastion host with one that only allows inbound access from the internal IP range for the company.
    • CReplace the current security group of the bastion host with one that only allows inbound access from the external IP range for the company.
    • DReplace the current security group of the application instances with one that allows inbound SSH access from only the private IP address of the bastion host.
    • EReplace the current security group of the application instances with one that allows inbound SSH access from only the public IP address of the bastion host.

    Show answer

    Answer: CD

    Explanation

    C because from on-prem network to bastion through internet (using on-prem resource's public IP), D because bastion and ec2 is in same VPC, meaning bastion can communicate to EC2 via it's private IP address

    Source: Adapted from community discussion — Six_Fingered_Jose

    References

    • AWS documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SAA-C03 practice, question 711. 1017 questions available.