SAA-C03 practice questions 841–850

1. Question 841 · 1017 in bank

   A company runs an AWS Lambda function in private subnets in a VPC. The subnets have a default route to the internet through an Amazon EC2 NAT instance. The Lambda function processes input data and saves its output as an object to Amazon S3. Intermittently, the Lambda function times out while trying to upload the object because of saturated traffic on the NAT instance's network. The company wants to access Amazon S3 without traversing the internet. Which solution will meet these requirements?

   • AReplace the EC2 NAT instance with an AWS managed NAT gateway.
   • BIncrease the size of the EC2 NAT instance in the VPC to a network optimized instance type.
   • CProvision a gateway endpoint for Amazon S3 in the VPUpdate the route tables of the subnets accordingly.
   • DProvision a transit gateway. Place transit gateway attachments in the private subnets where the Lambda function is running.

   Show answer

   Answer: C

   Explanation

   By provisioning a gateway endpoint for Amazon S3 in the VPC, you enable the Lambda function running in the private subnets to access S3 directly without needing to go through the NAT instance or traverse the internet. This solution helps alleviate the network congestion issue and reduces latency since the traffic between Lambda and S3 stays within the AWS network. Additionally, updating the route tables of the subnets to route S3 traffic through the gateway endpoint ensures that the Lambda function can seamlessly communicate with S3 without encountering timeouts caused by network saturation on the NAT instance.

   Source: Adapted from community discussion — AlvinC2024

   References

   • AWS documentation
   • AWS documentation

   Next question

2. Question 842 · 1017 in bank

   A company wants to reduce the cost of its existing three-tier web architecture. The web, application, and database servers are running on Amazon EC2 instances for the development, test, and production environments. The EC2 instances average 30% CPU utilization during peak hours and 10% CPU utilization during non-peak hours. The production EC2 instances run 24 hours a day. The development and test EC2 instances run for at least 8 hours each day. The company plans to implement automation to stop the development and test EC2 instances when they are not in use. Which EC2 instance purchasing solution will meet the company's requirements MOST cost-effectively?

   • AUse Spot Instances for the production EC2 instances. Use Reserved Instances for the development and test EC2 instances.
   • BUse Reserved Instances for the production EC2 instances. Use On-Demand Instances for the development and test EC2 instances.
   • CUse Spot blocks for the production EC2 instances. Use Reserved Instances for the development and test EC2 instances.
   • DUse On-Demand Instances for the production EC2 instances. Use Spot blocks for the development and test EC2 instances.

   Show answer

   Answer: B

   Explanation

   Spot blocks are not longer available, and you can't use spot instances on Prod machines 24x7, so option B should be valid.

   Source: Adapted from community discussion — ArielSchivo

   References

   • AWS documentation
   • AWS documentation

   Next question

3. Question 843 · 1017 in bank

   A news company that has reporters all over the world is hosting its broadcast system on AWS. The reporters send live broadcasts to the broadcast system. The reporters use software on their phones to send live streams through the Real Time Messaging Protocol (RTMP). A solutions architect must design a solution that gives the reporters the ability to send the highest quality streams. The solution must provide accelerated TCP connections back to the broadcast system. What should the solutions architect use to meet these requirements?

   • AAmazon CloudFront
   • BAWS Global Accelerator
   • CAWS Client VPN
   • DAmazon EC2 instances and AWS Elastic IP addresses

   Show answer

   Answer: B

   References

   • AWS documentation

   Next question

4. Question 844 · 1017 in bank

   A company uses Amazon EC2 instances and Amazon Elastic Block Store (Amazon EBS) to run its self-managed database. The company has 350 TB of data spread across all EBS volumes. The company takes daily EBS snapshots and keeps the snapshots for 1 month. The daily change rate is 5% of the EBS volumes. Because of new regulations, the company needs to keep the monthly snapshots for 7 years. The company needs to change its backup strategy to comply with the new regulations and to ensure that data is available with minimal administrative effort. Which solution will meet these requirements MOST cost-effectively?

   • AKeep the daily snapshot in the EBS snapshot standard tier for 1 month. Copy the monthly snapshot to Amazon S3 Glacier Deep Archive with a 7-year retention period.
   • BContinue with the current EBS snapshot policy. Add a new policy to move the monthly snapshot to Amazon EBS Snapshots Archive with a 7-year retention period.
   • CKeep the daily snapshot in the EBS snapshot standard tier for 1 month. Keep the monthly snapshot in the standard tier for 7 years. Use incremental snapshots.
   • DKeep the daily snapshot in the EBS snapshot standard tier. Use EBS direct APIs to take snapshots of all the EBS volumes every month. Store the snapshots in an Amazon S3 bucket in the Infrequent Access tier for 7 years.

   Show answer

   Answer: A

   Explanation

   How much does EBS snapshots archive cost? Pricing and billing. Archived snapshots are billed at a rate of $0.0125 per GB-month. For example, if you archive a 100 GiB snapshot, you are billed $1.25 (100 GiB * $0.0125) per month. What is the cost of Glacier? Even though uploading data to Amazon S3 Glacier is free, there is a pricing method for upload requests, which is $0.03 per 1,000 requests. Transferring data out of S3 Glacier to the same region is free; however, there is a cost for transferring data to a different region. • $0.0036 per GB / Month

   Source: Adapted from community discussion — rondelldell

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

5. Question 845 · 1017 in bank

   A company runs an application on several Amazon EC2 instances that store persistent data on an Amazon Elastic File System (Amazon EFS) file system. The company needs to replicate the data to another AWS Region by using an AWS managed service solution. Which solution will meet these requirements MOST cost-effectively?

   • AUse the EFS-to-EFS backup solution to replicate the data to an EFS file system in another Region.
   • BRun a nightly script to copy data from the EFS file system to an Amazon S3 bucket. Enable S3 Cross-Region Replication on the S3 bucket.
   • CCreate a VPC in another Region. Establish a cross-Region VPC peer. Run a nightly rsync to copy data from the original Region to the new Region.
   • DUse AWS Backup to create a backup plan with a rule that takes a daily backup and replicates it to another Region. Assign the EFS file system resource to the backup plan.

   Show answer

   Answer: D

   Explanation

   NOTA: EFS-to-EFS backup: You must deploy this solution in the same AWS Region as your source Amazon EFS Folesystem Not B, C: Not a managed AWS Solution D: AWS backup will do the job, and is managed service.

   Source: Adapted from community discussion — sandordini

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

6. Question 846 · 1017 in bank

   An ecommerce company is migrating its on-premises workload to the AWS Cloud. The workload currently consists of a web application and a backend Microsoft SQL database for storage. The company expects a high volume of customers during a promotional event. The new infrastructure in the AWS Cloud must be highly available and scalable. Which solution will meet these requirements with the LEAST administrative overhead?

   • AMigrate the web application to two Amazon EC2 instances across two Availability Zones behind an Application Load Balancer. Migrate the database to Amazon RDS for Microsoft SQL Server with read replicas in both Availability Zones.
   • BMigrate the web application to an Amazon EC2 instance that runs in an Auto Scaling group across two Availability Zones behind an Application Load Balancer. Migrate the database to two EC2 instances across separate AWS Regions with database replication.
   • CMigrate the web application to Amazon EC2 instances that run in an Auto Scaling group across two Availability Zones behind an Application Load Balancer. Migrate the database to Amazon RDS with Multi-AZ deployment.
   • DMigrate the web application to three Amazon EC2 instances across three Availability Zones behind an Application Load Balancer. Migrate the database to three EC2 instances across three Availability Zones.

   Show answer

   Answer: C

   Explanation

   AnswerC I would de-couple as many elements as possible with appopriate redundancy (HA), hence Auto-Scale in 2 AZ for EC2, Database in Multi-AZ and ALB infront of EC2. It will allow to increase amount of servers in case of need and will prevent from service unavailability in case if something fail ;)

   Source: Adapted from community discussion — Scheldon

   Next question

7. Question 847 · 1017 in bank

   A company has an on-premises business application that generates hundreds of files each day. These files are stored on an SMB file share and require a low-latency connection to the application servers. A new company policy states all application-generated files must be copied to AWS. There is already a VPN connection to AWS. The application development team does not have time to make the necessary code modifications to move the application to AWS. Which service should a solutions architect recommend to allow the application to copy files to AWS?

   • AAmazon Elastic File System (Amazon EFS)
   • BAmazon FSx for Windows File Server
   • CAWS Snowball
   • DAWS Storage Gateway

   Show answer

   Answer: D

   Explanation

   AWS Storage Gateway provides a set of hybrid cloud storage services that offer on-premises access to virtually unlimited cloud storage. The File Gateway configuration of AWS Storage Gateway supports the SMB protocol (and NFS), enabling on-premises applications to seamlessly store and retrieve files in Amazon S3 using existing file system protocols. It fits perfectly for applications that need to continue operating without modification, while also adhering to the new policy of copying files to AWS. Given these descriptions, Option D (AWS Storage Gateway) is the recommended service. It allows for a smooth integration by maintaining the existing SMB file-sharing capabilities and connects seamlessly to AWS through the VPN, enabling daily file transfers without significant changes to application code or infrastructure.

   Source: Adapted from community discussion — jcck202020

   References

   • AWS documentation

   Next question

8. Question 848 · 1017 in bank

   A company has 15 employees. The company stores employee start dates in an Amazon DynamoDB table. The company wants to send an email message to each employee on the day of the employee's work anniversary. Which solution will meet these requirements with the MOST operational efficiency?

   • ACreate a script that scans the DynamoDB table and uses Amazon Simple Notification Service (Amazon SNS) to send email messages to employees when necessary. Use a cron job to run this script every day on an Amazon EC2 instance.
   • BCreate a script that scans the DynamoDB table and uses Amazon Simple Queue Service (Amazon SQS) to send email messages to employees when necessary. Use a cron job to run this script every day on an Amazon EC2 instance.
   • CCreate an AWS Lambda function that scans the DynamoDB table and uses Amazon Simple Notification Service (Amazon SNS) to send email messages to employees when necessary. Schedule this Lambda function to run every day.
   • DCreate an AWS Lambda function that scans the DynamoDB table and uses Amazon Simple Queue Service (Amazon SQS) to send email messages to employees when necessary. Schedule this Lambda function to run every day.

   Show answer

   Answer: C

   Explanation

   SNS for sending mails Lambda to scan the database + send the message to the SNS topic. Using a script on a EC2 will add maintenance on both the EC2 and the script + cronjobs are not reliable and can be hard to monitor properly. SO answer C !

   Source: Adapted from community discussion — Mikado211

   Next question

9. Question 849 · 1017 in bank

   A company’s application is running on Amazon EC2 instances within an Auto Scaling group behind an Elastic Load Balancing (ELB) load balancer. Based on the application's history, the company anticipates a spike in traffic during a holiday each year. A solutions architect must design a strategy to ensure that the Auto Scaling group proactively increases capacity to minimize any performance impact on application users. Which solution will meet these requirements?

   • ACreate an Amazon CloudWatch alarm to scale up the EC2 instances when CPU utilization exceeds 90%.
   • BCreate a recurring scheduled action to scale up the Auto Scaling group before the expected period of peak demand.
   • CIncrease the minimum and maximum number of EC2 instances in the Auto Scaling group during the peak demand period.
   • DConfigure an Amazon Simple Notification Service (Amazon SNS) notification to send alerts when there are autoscaling:EC2_INSTANCE_LAUNCH events.

   Show answer

   Answer: B

   Next question

10. Question 850 · 1017 in bank

    A company uses Amazon RDS for PostgreSQL databases for its data tier. The company must implement password rotation for the databases. Which solution meets this requirement with the LEAST operational overhead?

    • AStore the password in AWS Secrets Manager. Enable automatic rotation on the secret.
    • BStore the password in AWS Systems Manager Parameter Store. Enable automatic rotation on the parameter.
    • CStore the password in AWS Systems Manager Parameter Store. Write an AWS Lambda function that rotates the password.
    • DStore the password in AWS Key Management Service (AWS KMS). Enable automatic rotation on the AWS KMS key.

    Show answer

    Answer: A

    Explanation

    Option A (Store the password in AWS Secrets Manager and enable automatic rotation on the secret) is the best solution. It meets the requirements with the least operational overhead by leveraging built-in features specifically designed for managing and rotating database credentials securely.

    Source: Adapted from community discussion — jcck202020

    References

    • AWS documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SAA-C03 practice, question 841. 1017 questions available.