SAA-C03 practice questions 761–770

1. Question 761 · 1017 in bank

   A pharmaceutical company is developing a new drug. The volume of data that the company generates has grown exponentially over the past few months. The company's researchers regularly require a subset of the entire dataset to be immediately available with minimal lag. However, the entire dataset does not need to be accessed on a daily basis. All the data currently resides in on-premises storage arrays, and the company wants to reduce ongoing capital expenses. Which storage solution should a solutions architect recommend to meet these requirements?

   • ARun AWS DataSync as a scheduled cron job to migrate the data to an Amazon S3 bucket on an ongoing basis.
   • BDeploy an AWS Storage Gateway file gateway with an Amazon S3 bucket as the target storage. Migrate the data to the Storage Gateway appliance.
   • CDeploy an AWS Storage Gateway volume gateway with cached volumes with an Amazon S3 bucket as the target storage. Migrate the data to the Storage Gateway appliance.
   • DConfigure an AWS Site-to-Site VPN connection from the on-premises environment to AWS. Migrate data to an Amazon Elastic File System (Amazon EFS) file system.

   Show answer

   Answer: C

   Explanation

   B. Deploying an AWS Storage Gateway file gateway with an Amazon S3 bucket as the target storage would require the entire dataset to be stored in Amazon S3, which might not be cost-effective considering that only a subset of the data needs to be accessed regularly. Additionally, accessing data directly from S3 might introduce latency. so correct option is C bcz AWS Storage Gateway volume gateway with cached volumes allows the company to keep frequently accessed data locally on-premises while storing the entire dataset in Amazon S3. This solution provides immediate access to the subset of data with minimal lag, as frequently accessed data is cached locally. It also reduces ongoing capital expenses as it leverages Amazon S3 storage, which is cost-effective.

   Source: Adapted from community discussion — hajra313

   References

   • AWS documentation
   • AWS documentation

   Next question

2. Question 762 · 1017 in bank

   A company has a business-critical application that runs on Amazon EC2 instances. The application stores data in an Amazon DynamoDB table. The company must be able to revert the table to any point within the last 24 hours. Which solution meets these requirements with the LEAST operational overhead?

   • AConfigure point-in-time recovery for the table.
   • BUse AWS Backup for the table.
   • CUse an AWS Lambda function to make an on-demand backup of the table every hour.
   • DTurn on streams on the table to capture a log of all changes to the table in the last 24 hours. Store a copy of the stream in an Amazon S3 bucket.

   Show answer

   Answer: A

   Explanation

   AnswerA Point-in-time recovery helps protect your DynamoDB tables from accidental write or delete operations. With point-in-time recovery, you don't have to worry about creating, maintaining, or scheduling on-demand backups. For example, suppose that a test script writes accidentally to a production DynamoDB table. With point-in-time recovery, you can restore that table to any point in time during the last 35 days. After you enable point-in-time recovery, you can restore to any point in time from five minutes before the current time until 35 days ago. DynamoDB maintains incremental backups of your table. https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/PointInTimeRecovery.html

   Source: Adapted from community discussion — Scheldon

   References

   • AWS documentation

   Next question

3. Question 763 · 1017 in bank

   A company hosts an application used to upload files to an Amazon S3 bucket. Once uploaded, the files are processed to extract metadata, which takes less than 5 seconds. The volume and frequency of the uploads varies from a few files each hour to hundreds of concurrent uploads. The company has asked a solutions architect to design a cost-effective architecture that will meet these requirements. What should the solutions architect recommend?

   • AConfigure AWS CloudTrail trails to log S3 API calls. Use AWS AppSync to process the files.
   • BConfigure an object-created event notification within the S3 bucket to invoke an AWS Lambda function to process the files.
   • CConfigure Amazon Kinesis Data Streams to process and send data to Amazon S3. Invoke an AWS Lambda function to process the files.
   • DConfigure an Amazon Simple Notification Service (Amazon SNS) topic to process the files uploaded to Amazon S3. Invoke an AWS Lambda function to process the files.

   Show answer

   Answer: B

   Explanation

   option b bcz option c is WS AppSync is not the most appropriate solution for file processing. option d While Amazon Simple Notification Service (SNS) can be used to trigger actions based on S3 events, it's not directly involved in processing files .option c :Kinesis is typically used for real-time data streaming and analytics, which may not be needed for simple file processing tasks such as extracting metadata.

   Source: Adapted from community discussion — hajra313

   References

   • AWS documentation

   Next question

4. Question 764 · 1017 in bank

   A company needs to configure a real-time data ingestion architecture for its application. The company needs an API, a process that transforms data as the data is streamed, and a storage solution for the data. Which solution will meet these requirements with the LEAST operational overhead?

   • ADeploy an Amazon EC2 instance to host an API that sends data to an Amazon Kinesis data stream. Create an Amazon Kinesis Data Firehose delivery stream that uses the Kinesis data stream as a data source. Use AWS Lambda functions to transform the data. Use the Kinesis Data Firehose delivery stream to send the data to Amazon S3.
   • BDeploy an Amazon EC2 instance to host an API that sends data to AWS Glue. Stop source/destination checking on the EC2 instance. Use AWS Glue to transform the data and to send the data to Amazon S3.
   • CConfigure an Amazon API Gateway API to send data to an Amazon Kinesis data stream. Create an Amazon Kinesis Data Firehose delivery stream that uses the Kinesis data stream as a data source. Use AWS Lambda functions to transform the data. Use the Kinesis Data Firehose delivery stream to send the data to Amazon S3.
   • DConfigure an Amazon API Gateway API to send data to AWS Glue. Use AWS Lambda functions to transform the data. Use AWS Glue to send the data to Amazon S3.

   Show answer

   Answer: C

   Explanation

   (A) - You don't need to deploy an EC2 instance to host an API - Operational overhead (B) - Same as A (**C**) - Is the answer (D) - AWS Glue gets data from S3, not from API GW. AWS Glue could do ETL by itself, so don't need lambda. Non sense. https://aws.amazon.com/glue/

   Source: Adapted from community discussion — 123jhl0

   References

   • AWS documentation
   • AWS documentation

   Next question

5. Question 765 · 1017 in bank

   A company’s application is deployed on Amazon EC2 instances and uses AWS Lambda functions for an event-driven architecture. The company uses nonproduction development environments in a different AWS account to test new features before the company deploys the features to production. The production instances show constant usage because of customers in different time zones. The company uses nonproduction instances only during business hours on weekdays. The company does not use the nonproduction instances on the weekends. The company wants to optimize the costs to run its application on AWS. Which solution will meet these requirements MOST cost-effectively?

   • AUse On-Demand Instances for the production instances. Use Dedicated Hosts for the nonproduction instances on weekends only.
   • BUse Reserved Instances for the production instances and the nonproduction instances. Shut down the nonproduction instances when not in use.
   • CUse Compute Savings Plans for the production instances. Use On-Demand Instances for the nonproduction instances. Shut down the nonproduction instances when not in use.
   • DUse Dedicated Hosts for the production instances. Use EC2 Instance Savings Plans for the nonproduction instances.

   Show answer

   Answer: C

   Explanation

   "An Amazon EC2 Dedicated Host is a physical server fully dedicated for your use, so you can help address corporate compliance requirements." https://aws.amazon.com/ec2/dedicated-hosts/ That already eliminates "A" and "D". No need to pay extra since there is no requirement for eligible software licences. B is INCORRECT = no need to use reserved instances for non-prod, since they will only be active during business hours during weekdays.

   Source: Adapted from community discussion — MatAlves

   References

   • AWS documentation

   Next question

6. Question 766 · 1017 in bank

   A company stores data in an on-premises Oracle relational database. The company needs to make the data available in Amazon Aurora PostgreSQL for analysis. The company uses an AWS Site-to-Site VPN connection to connect its on-premises network to AWS. The company must capture the changes that occur to the source database during the migration to Aurora PostgreSQL. Which solution will meet these requirements?

   • AUse the AWS Schema Conversion Tool (AWS SCT) to convert the Oracle schema to Aurora PostgreSQL schema. Use the AWS Database Migration Service (AWS DMS) full-load migration task to migrate the data.
   • BUse AWS DataSync to migrate the data to an Amazon S3 bucket. Import the S3 data to Aurora PostgreSQL by using the Aurora PostgreSQL aws_s3 extension.
   • CUse the AWS Schema Conversion Tool (AWS SCT) to convert the Oracle schema to Aurora PostgreSQL schema. Use AWS Database Migration Service (AWS DMS) to migrate the existing data and replicate the ongoing changes.
   • DUse an AWS Snowball device to migrate the data to an Amazon S3 bucket. Import the S3 data to Aurora PostgreSQL by using the Aurora PostgreSQL aws_s3 extension.

   Show answer

   Answer: C

   Next question

7. Question 767 · 1017 in bank

   Select 2

   A company built an application with Docker containers and needs to run the application in the AWS Cloud. The company wants to use a managed service to host the application. The solution must scale in and out appropriately according to demand on the individual container services. The solution also must not result in additional operational overhead or infrastructure to manage. Which solutions will meet these requirements? (Choose two.)

   • AUse Amazon Elastic Container Service (Amazon ECS) with AWS Fargate.
   • BUse Amazon Elastic Kubernetes Service (Amazon EKS) with AWS Fargate.
   • CProvision an Amazon API Gateway API. Connect the API to AWS Lambda to run the containers.
   • DUse Amazon Elastic Container Service (Amazon ECS) with Amazon EC2 worker nodes.
   • EUse Amazon Elastic Kubernetes Service (Amazon EKS) with Amazon EC2 worker nodes.

   Show answer

   Answer: AB

   Explanation

   The question is asking for two alternatives to run Docker containers in a serverless service with minimal effort. Option C will require a lot of effort to configure the Lambda and the API Gateway to run the Container correctly. Instead, just use EKS o ECS with Fargate to execute the container image

   Source: Adapted from community discussion — Rhydian25

   Next question

8. Question 768 · 1017 in bank

   An ecommerce company is running a seasonal online sale. The company hosts its website on Amazon EC2 instances spanning multiple Availability Zones. The company wants its website to manage sudden traffic increases during the sale. Which solution will meet these requirements MOST cost-effectively?

   • ACreate an Auto Scaling group that is large enough to handle peak traffic load. Stop half of the Amazon EC2 instances. Configure the Auto Scaling group to use the stopped instances to scale out when traffic increases.
   • BCreate an Auto Scaling group for the website. Set the minimum size of the Auto Scaling group so that it can handle high traffic volumes without the need to scale out.
   • CUse Amazon CloudFront and Amazon ElastiCache to cache dynamic content with an Auto Scaling group set as the origin. Configure the Auto Scaling group with the instances necessary to populate CloudFront and ElastiCache. Scale in after the cache is fully populated.
   • DConfigure an Auto Scaling group to scale out as traffic increases. Create a launch template to start new instances from a preconfigured Amazon Machine Image (AMI).

   Show answer

   Answer: D

   Explanation

   The most cost-effective solution is: D. Configure an Auto Scaling group to scale out as traffic increases. Create a launch template to start new instances from a preconfigured Amazon Machine Image (AMI).

   Source: Adapted from community discussion — [Removed]

   Next question

9. Question 769 · 1017 in bank

   A solutions architect must provide an automated solution for a company's compliance policy that states security groups cannot include a rule that allows SSH from 0.0.0.0/0. The company needs to be notified if there is any breach in the policy. A solution is needed as soon as possible. What should the solutions architect do to meet these requirements with the LEAST operational overhead?

   • AWrite an AWS Lambda script that monitors security groups for SSH being open to 0.0.0.0/0 addresses and creates a notification every time it finds one.
   • BEnable the restricted-ssh AWS Config managed rule and generate an Amazon Simple Notification Service (Amazon SNS) notification when a noncompliant rule is created.
   • CCreate an IAM role with permissions to globally open security groups and network ACLs. Create an Amazon Simple Notification Service (Amazon SNS) topic to generate a notification every time the role is assumed by a user.
   • DConfigure a service control policy (SCP) that prevents non-administrative users from creating or editing security groups. Create a notification in the ticketing system when a user requests a rule that needs administrator permissions.

   Show answer

   Answer: B

   References

   • AWS documentation

   Next question

10. Question 770 · 1017 in bank

    Use Amazon Elastic Kubernetes Service (Amazon EKS) with Amazon EC2 worker nodes. A company has deployed an application in an AWS account. The application consists of microservices that run on AWS Lambda and Amazon Elastic Kubernetes Service (Amazon EKS). A separate team supports each microservice. The company has multiple AWS accounts and wants to give each team its own account for its microservices. A solutions architect needs to design a solution that will provide service-to-service communication over HTTPS (port 443). The solution also must provide a service registry for service discovery. Which solution will meet these requirements with the LEAST administrative overhead?

    • ACreate an inspection VPC. Deploy an AWS Network Firewall firewall to the inspection VPC. Attach the inspection VPC to a new transit gateway. Route VPC-to-VPC traffic to the inspection VPC. Apply firewall rules to allow only HTTPS communication.
    • BCreate a VPC Lattice service network. Associate the microservices with the service network. Define HTTPS listeners for each service. Register microservice compute resources as targets. Identify VPCs that need to communicate with the services. Associate those VPCs with the service network.
    • CCreate a Network Load Balancer (NLB) with an HTTPS listener and target groups for each microservice. Create an AWS PrivateLink endpoint service for each microservice. Create an interface VPC endpoint in each VPC that needs to consume that microservice.
    • DCreate peering connections between VPCs that contain microservices. Create a prefix list for each service that requires a connection to a client. Create route tables to route traffic to the appropriate VPC. Create security groups to allow only HTTPS communication.

    Show answer

    Answer: B

    Explanation

    VPC Lattice is a completely new way to simplify API communication between services or microservices in one or more AWS accounts.

    Source: Adapted from community discussion — 1dd

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SAA-C03 practice, question 761. 1017 questions available.