SAA-C03 practice questions 831–840

1. Question 831 · 1017 in bank

   A company's dynamic website is hosted using on-premises servers in the United States. The company is launching its product in Europe, and it wants to optimize site loading times for new European users. The site's backend must remain in the United States. The product is being launched in a few days, and an immediate solution is needed. What should the solutions architect recommend?

   • ALaunch an Amazon EC2 instance in us-east-1 and migrate the site to it.
   • BMove the website to Amazon S3. Use Cross-Region Replication between Regions.
   • CUse Amazon CloudFront with a custom origin pointing to the on-premises servers.
   • DUse an Amazon Route 53 geoproximity routing policy pointing to on-premises servers.

   Show answer

   Answer: C

   Explanation

   ***CORRECT*** C. Use Amazon CloudFront with a custom origin pointing to the on-premises servers. Amazon CloudFront is a content delivery network (CDN) that speeds up the delivery of static and dynamic web content, such as HTML, CSS, JavaScript, images, and videos. By using CloudFront, the company can distribute the content of their website from edge locations that are closer to the users in Europe, reducing the loading times for these users. To use CloudFront, the company can set up a custom origin pointing to their on-premises servers in the United States. CloudFront will then cache the content of the website at edge locations around the world and serve the content to users from the location that is closest to them. This will allow the company to optimize the loading times for their European users without having to move the backend of the website to a different region.

   Source: Adapted from community discussion — Buruguduystunstugudunstuy

   Next question

2. Question 832 · 1017 in bank

   A company has 5 TB of datasets. The datasets consist of 1 million user profiles and 10 million connections. The user profiles have connections as many-to-many relationships. The company needs a performance efficient way to find mutual connections up to five levels. Which solution will meet these requirements?

   • AUse an Amazon S3 bucket to store the datasets. Use Amazon Athena to perform SQL JOIN queries to find connections.
   • BUse Amazon Neptune to store the datasets with edges and vertices. Query the data to find connections.
   • CUse an Amazon S3 bucket to store the datasets. Use Amazon QuickSight to visualize connections.
   • DUse Amazon RDS to store the datasets with multiple tables. Perform SQL JOIN queries to find connections.

   Show answer

   Answer: B

   Explanation

   Neptune automatically scales storage and compute resources based on workload demands, ensuring optimal performance even as the dataset grows over time.

   Source: Adapted from community discussion — alawada

   References

   • AWS documentation

   Next question

3. Question 833 · 1017 in bank

   A company needs a secure connection between its on-premises environment and AWS. This connection does not need high bandwidth and will handle a small amount of traffic. The connection should be set up quickly. What is the MOST cost-effective method to establish this type of connection?

   • AImplement a client VPN.
   • BImplement AWS Direct Connect.
   • CImplement a bastion host on Amazon EC2.
   • DImplement an AWS Site-to-Site VPN connection.

   Show answer

   Answer: D

   Explanation

   You can enable access to your remote (on-prem) network from your VPC by creating an AWS Site-to-Site VPN (Site-to-Site VPN) connection and configuring routing to pass traffic through the connection.

   Source: Adapted from community discussion — sandordini

   References

   • AWS documentation

   Next question

4. Question 834 · 1017 in bank

   A company has an on-premises SFTP file transfer solution. The company is migrating to the AWS Cloud to scale the file transfer solution and to optimize costs by using Amazon S3. The company's employees will use their credentials for the on-premises Microsoft Active Directory (AD) to access the new solution. The company wants to keep the current authentication and file access mechanisms. Which solution will meet these requirements with the LEAST operational overhead?

   • AConfigure an S3 File Gateway. Create SMB file shares on the file gateway that use the existing Active Directory to authenticate.
   • BConfigure an Auto Scaling group with Amazon EC2 instances to run an SFTP solution. Configure the group to scale up at 60% CPU utilization.
   • CCreate an AWS Transfer Family server with SFTP endpoints. Choose the AWS Directory Service option as the identity provider. Use AD Connector to connect the on-premises Active Directory.
   • DCreate an AWS Transfer Family SFTP endpoint. Configure the endpoint to use the AWS Directory Service option as the identity provider to connect to the existing Active Directory.

   Show answer

   Answer: C

   Explanation

   Answer C We need Transfer Family SFTP enabled server (with SFTP endpoint). Additiionally AWS Directory Service with AD connector to reach on-premises AD for authentication and authorization. https://docs.aws.amazon.com/transfer/latest/userguide/getting-started.html https://docs.aws.amazon.com/transfer/latest/userguide/create-server-sftp.html https://docs.aws.amazon.com/directoryservice/latest/admin-guide/what_is.html https://docs.aws.amazon.com/directoryservice/latest/admin-guide/directory_ad_connector.html

   Source: Adapted from community discussion — Scheldon

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

5. Question 835 · 1017 in bank

   A company is designing an event-driven order processing system. Each order requires multiple validation steps after the order is created. An idempotent AWS Lambda function performs each validation step. Each validation step is independent from the other validation steps. Individual validation steps need only a subset of the order event information. The company wants to ensure that each validation step Lambda function has access to only the information from the order event that the function requires. The components of the order processing system should be loosely coupled to accommodate future business changes. Which solution will meet these requirements?

   • ACreate an Amazon Simple Queue Service (Amazon SQS) queue for each validation step. Create a new Lambda function to transform the order data to the format that each validation step requires and to publish the messages to the appropriate SQS queues. Subscribe each validation step Lambda function to its corresponding SQS queue.
   • BCreate an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe the validation step Lambda functions to the SNS topic. Use message body filtering to send only the required data to each subscribed Lambda function.
   • CCreate an Amazon EventBridge event bus. Create an event rule for each validation step. Configure the input transformer to send only the required data to each target validation step Lambda function.
   • DCreate an Amazon Simple Queue Service (Amazon SQS) queue. Create a new Lambda function to subscribe to the SQS queue and to transform the order data to the format that each validation step requires. Use the new Lambda function to perform synchronous invocations of the validation step Lambda functions in parallel on separate threads.

   Show answer

   Answer: C

   Explanation

   not B because SNS cannot make messages manipulation, the option "message body filtering" will make discard or forward the FULL message if there is a matching field: https://docs.aws.amazon.com/sns/latest/dg/sns-message-filtering.html C - eventbus instead can manipulate event: https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-event-bus.html D - Works, but too much operation IMO

   Source: Adapted from community discussion — TwinSpark

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

6. Question 836 · 1017 in bank

   A company is migrating a three-tier application to AWS. The application requires a MySQL database. In the past, the application users reported poor application performance when creating new entries. These performance issues were caused by users generating different real-time reports from the application during working hours. Which solution will improve the performance of the application when it is moved to AWS?

   • AImport the data into an Amazon DynamoDB table with provisioned capacity. Refactor the application to use DynamoDB for reports.
   • BCreate the database on a compute optimized Amazon EC2 instance. Ensure compute resources exceed the on-premises database.
   • CCreate an Amazon Aurora MySQL Multi-AZ DB cluster with multiple read replicas. Configure the application to use the reader endpoint for reports.
   • DCreate an Amazon Aurora MySQL Multi-AZ DB cluster. Configure the application to use the backup instance of the cluster as an endpoint for the reports.

   Show answer

   Answer: C

   Explanation

   Answer C Any replica of Amazon Aurora Db will be read-only replica (even backup one). Option C is better then D because we will use multiple replicas which when used will signicially allow to increase performance for creating reports. In the same time no write operation should be affected. https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Replication.html

   Source: Adapted from community discussion — Scheldon

   References

   • AWS documentation

   Next question

7. Question 837 · 1017 in bank

   A company is expanding a secure on-premises network to the AWS Cloud by using an AWS Direct Connect connection. The on-premises network has no direct internet access. An application that runs on the on-premises network needs to use an Amazon S3 bucket. Which solution will meet these requirements MOST cost-effectively?

   • ACreate a public virtual interface (VIF). Route the AWS traffic over the public VIF.
   • BCreate a VPC and a NAT gateway. Route the AWS traffic from the on-premises network to the NAT gateway.
   • CCreate a VPC and an Amazon S3 interface endpoint. Route the AWS traffic from the on-premises network to the S3 interface endpoint.
   • DCreate a VPC peering connection between the on-premises network and Direct Connect. Route the AWS traffic over the peering connection.

   Show answer

   Answer: C

   Explanation

   AnswerC Amazon S3 interface endpoint seems to be the best and only option as we are forced to use Private IP addressation. Interface endpoints for Amazon S3 Your network traffic remains on the AWS network. Use private IP addresses from your VPC to access Amazon S3 Require endpoint-specific Amazon S3 DNS names Allow access from on premises Allow access from a VPC in another AWS Region by using VPC peering or AWS Transit Gateway https://docs.aws.amazon.com/AmazonS3/latest/userguide/privatelink-interface-endpoints.html#types-of-vpc-endpoints-for-s3

   Source: Adapted from community discussion — Scheldon

   References

   • AWS documentation
   • AWS documentation
   • repost.aws documentation

   Next question

8. Question 838 · 1017 in bank

   A company serves its website by using an Auto Scaling group of Amazon EC2 instances in a single AWS Region. The website does not require a database. The company is expanding, and the company's engineering team deploys the website to a second Region. The company wants to distribute traffic across both Regions to accommodate growth and for disaster recovery purposes. The solution should not serve traffic from a Region in which the website is unhealthy. Which policy or resource should the company use to meet these requirements?

   • AAn Amazon Route 53 simple routing policy
   • BAn Amazon Route 53 multivalue answer routing policy
   • CAn Application Load Balancer in one Region with a target group that specifies the EC2 instance IDs from both Regions
   • DAn Application Load Balancer in one Region with a target group that specifies the IP addresses of the EC2 instances from both Regions

   Show answer

   Answer: B

   Explanation

   53 with multivalue is the best option for this case Multivalue answer routing lets you configure Amazon Route 53 to return multiple values, such as IP addresses for your web servers, in response to DNS queries. You can specify multiple values for almost any record, but multivalue answer routing also lets you check the health of each resource, so Route 53 returns only values for healthy resources. It's not a substitute for a load balancer, but the ability to return multiple health-checkable IP addresses is a way to use DNS to improve availability and load balancing.

   Source: Adapted from community discussion — waldirlsantos

   References

   • AWS documentation

   Next question

9. Question 839 · 1017 in bank

   A company runs its applications on Amazon EC2 instances that are backed by Amazon Elastic Block Store (Amazon EBS). The EC2 instances run the most recent Amazon Linux release. The applications are experiencing availability issues when the company's employees store and retrieve files that are 25 GB or larger. The company needs a solution that does not require the company to transfer files between EC2 instances. The files must be available across many EC2 instances and across multiple Availability Zones. Which solution will meet these requirements?

   • AMigrate all the files to an Amazon S3 bucket. Instruct the employees to access the files from the S3 bucket.
   • BTake a snapshot of the existing EBS volume. Mount the snapshot as an EBS volume across the EC2 instances. Instruct the employees to access the files from the EC2 instances.
   • CMount an Amazon Elastic File System (Amazon EFS) file system across all the EC2 instances. Instruct the employees to access the files from the EC2 instances.
   • DCreate an Amazon Machine Image (AMI) from the EC2 instances. Configure new EC2 instances from the AMI that use an instance store volume. Instruct the employees to access the files from the EC2 instances.

   Show answer

   Answer: C

   Explanation

   For Option A (S3 bucket): While S3 is great for storing large files, accessing files directly from S3 would require the employees to switch to a different interface, making it inconvenient and not aligned with the requirement to access files from the EC2 instances.

   Source: Adapted from community discussion — JA2018

   Next question

10. Question 840 · 1017 in bank

    A company is running a highly sensitive application on Amazon EC2 backed by an Amazon RDS database. Compliance regulations mandate that all personally identifiable information (PII) be encrypted at rest. Which solution should a solutions architect recommend to meet this requirement with the LEAST amount of changes to the infrastructure?

    • ADeploy AWS Certificate Manager to generate certificates. Use the certificates to encrypt the database volume.
    • BDeploy AWS CloudHSM, generate encryption keys, and use the keys to encrypt database volumes.
    • CConfigure SSL encryption using AWS Key Management Service (AWS KMS) keys to encrypt database volumes.
    • DConfigure Amazon Elastic Block Store (Amazon EBS) encryption and Amazon RDS encryption with AWS Key Management Service (AWS KMS) keys to encrypt instance and database volumes.

    Show answer

    Answer: D

    Explanation

    Amazon RDS relies on Amazon EBS volumes for storage. By configuring Amazon EBS encryption, the underlying storage volumes are encrypted.

    Source: Adapted from community discussion — boluwatito

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SAA-C03 practice, question 831. 1017 questions available.