SAA-C03 practice questions 921–930

1. Question 921 · 1017 in bank

   A company runs an application that stores and shares photos. Users upload the photos to an Amazon S3 bucket. Every day, users upload approximately 150 photos. The company wants to design a solution that creates a thumbnail of each new photo and stores the thumbnail in a second S3 bucket. Which solution will meet these requirements MOST cost-effectively?

   • AConfigure an Amazon EventBridge scheduled rule to invoke a script every minute on a long-running Amazon EMR cluster. Configure the script to generate thumbnails for the photos that do not have thumbnails. Configure the script to upload the thumbnails to the second S3 bucket.
   • BConfigure an Amazon EventBridge scheduled rule to invoke a script every minute on a memory-optimized Amazon EC2 instance that is always on. Configure the script to generate thumbnails for the photos that do not have thumbnails. Configure the script to upload the thumbnails to the second S3 bucket.
   • CConfigure an S3 event notification to invoke an AWS Lambda function each time a user uploads a new photo to the application. Configure the Lambda function to generate a thumbnail and to upload the thumbnail to the second S3 bucket.
   • DConfigure S3 Storage Lens to invoke an AWS Lambda function each time a user uploads a new photo to the application. Configure the Lambda function to generate a thumbnail and to upload the thumbnail to a second S3 bucket.

   Show answer

   Answer: C

   Explanation

   C. Configure an S3 event notification to invoke an AWS Lambda function each time a user uploads a new photo to the application. Configure the Lambda function to generate a thumbnail and to upload the thumbnail to the second S3 bucket.

   Source: Adapted from community discussion — [Removed]

   Next question

2. Question 922 · 1017 in bank

   A company has stored millions of objects across multiple prefixes in an Amazon S3 bucket by using the Amazon S3 Glacier Deep Archive storage class. The company needs to delete all data older than 3 years except for a subset of data that must be retained. The company has identified the data that must be retained and wants to implement a serverless solution. Which solution will meet these requirements?

   • AUse S3 Inventory to list all objects. Use the AWS CLI to create a script that runs on an Amazon EC2 instance that deletes objects from the inventory list.
   • BUse AWS Batch to delete objects older than 3 years except for the data that must be retained.
   • CProvision an AWS Glue crawler to query objects older than 3 years. Save the manifest file of old objects. Create a script to delete objects in the manifest.
   • DEnable S3 Inventory. Create an AWS Lambda function to filter and delete objects. Invoke the Lambda function with S3 Batch Operations to delete objects by using the inventory reports.

   Show answer

   Answer: D

   Explanation

   Enable S3 Inventory. Create an AWS Lambda function to filter and delete objects. Invoke the Lambda function with S3 Batch Operations to delete objects by using the inventory reports.

   Source: Adapted from community discussion — muhammadahmer36

   References

   • AWS documentation

   Next question

3. Question 923 · 1017 in bank

   A company is building an application on AWS. The application uses multiple AWS Lambda functions to retrieve sensitive data from a single Amazon S3 bucket for processing. The company must ensure that only authorized Lambda functions can access the data. The solution must comply with the principle of least privilege. Which solution will meet these requirements?

   • AGrant full S3 bucket access to all Lambda functions through a shared IAM role.
   • BConfigure the Lambda functions to run within a VPC. Configure a bucket policy to grant access based on the Lambda functions' VPC endpoint IP addresses.
   • CCreate individual IAM roles for each Lambda function. Grant the IAM roles access to the S3 bucket. Assign each IAM role as the Lambda execution role for its corresponding Lambda function.
   • DConfigure a bucket policy granting access to the Lambda functions based on their function ARNs.

   Show answer

   Answer: C

   Explanation

   i think D is also right S3 Bucket Policy: Use an S3 bucket policy that grants access to the specific Lambda functions based on their function ARNs. This ensures that only the authorized Lambda functions can retrieve data from the S3 bucket.

   Source: Adapted from community discussion — 56ce46c

   Next question

4. Question 924 · 1017 in bank

   A company has developed a non-production application that is composed of multiple microservices for each of the company's business units. A single development team maintains all the microservices. The current architecture uses a static web frontend and a Java-based backend that contains the application logic. The architecture also uses a MySQL database that the company hosts on an Amazon EC2 instance. The company needs to ensure that the application is secure and available globally. Which solution will meet these requirements with the LEAST operational overhead?

   • AUse Amazon CloudFront and AWS Amplify to host the static web frontend. Refactor the microservices to use AWS Lambda functions that the microservices access by using Amazon API Gateway. Migrate the MySQL database to an Amazon EC2 Reserved Instance.
   • BUse Amazon CloudFront and Amazon S3 to host the static web frontend. Refactor the microservices to use AWS Lambda functions that the microservices access by using Amazon API Gateway. Migrate the MySQL database to Amazon RDS for MySQL.
   • CUse Amazon CloudFront and Amazon S3 to host the static web frontend. Refactor the microservices to use AWS Lambda functions that are in a target group behind a Network Load Balancer. Migrate the MySQL database to Amazon RDS for MySQL.
   • DUse Amazon S3 to host the static web frontend. Refactor the microservices to use AWS Lambda functions that are in a target group behind an Application Load Balancer. Migrate the MySQL database to an Amazon EC2 Reserved Instance.

   Show answer

   Answer: B

   Next question

5. Question 925 · 1017 in bank

   A video game company is deploying a new gaming application to its global users. The company requires a solution that will provide near real-time reviews and rankings of the players. A solutions architect must design a solution to provide fast access to the data. The solution must also ensure the data persists on disks in the event that the company restarts the application. Which solution will meet these requirements with the LEAST operational overhead?

   • AConfigure an Amazon CloudFront distribution with an Amazon S3 bucket as the origin. Store the player data in the S3 bucket.
   • BCreate Amazon EC2 instances in multiple AWS Regions. Store the player data on the EC2 instances. Configure Amazon Route 53 with geolocation records to direct users to the closest EC2 instance.
   • CDeploy an Amazon ElastiCache for Redis duster. Store the player data in the ElastiCache cluster.
   • DDeploy an Amazon ElastiCache for Memcached duster. Store the player data in the ElastiCache cluster.

   Show answer

   Answer: C

   Explanation

   Amazon ElastiCache for Redis provides in-memory caching which ensures low latency and high throughput, perfect for near real-time access to player reviews and rankings. Redis supports data persistence by snapshotting data to disk (RDB snapshots) and appending changes to a log (AOF), ensuring that the data is not lost even if the application restarts.

   Source: Adapted from community discussion — officedepotadmin

   References

   • AWS documentation

   Next question

6. Question 926 · 1017 in bank

   A company is designing an application on AWS that processes sensitive data. The application stores and processes financial data for multiple customers. To meet compliance requirements, the data for each customer must be encrypted separately at rest by using a secure, centralized key management solution. The company wants to use AWS Key Management Service (AWS KMS) to implement encryption. Which solution will meet these requirements with the LEAST operational overhead?

   • AGenerate a unique encryption key for each customer. Store the keys in an Amazon S3 bucket. Enable server-side encryption.
   • BDeploy a hardware security appliance in the AWS environment that securely stores customer-provided encryption keys. Integrate the security appliance with AWS KMS to encrypt the sensitive data in the application.
   • CCreate a single AWS KMS key to encrypt all sensitive data across the application.
   • DCreate separate AWS KMS keys for each customer's data that have granular access control and logging enabled.

   Show answer

   Answer: D

   Explanation

   While enabling server-side encryption in S3 can manage encryption, it does not offer the same level of control and auditing as AWS KMS. Managing individual keys manually in S3 would also increase operational overhead.

   Source: Adapted from community discussion — officedepotadmin

   Next question

7. Question 927 · 1017 in bank

   A company needs to design a resilient web application to process customer orders. The web application must automatically handle increases in web traffic and application usage without affecting the customer experience or losing customer orders. Which solution will meet these requirements?

   • AUse a NAT gateway to manage web traffic. Use Amazon EC2 Auto Scaling groups to receive, process, and store processed customer orders. Use an AWS Lambda function to capture and store unprocessed orders.
   • BUse a Network Load Balancer (NLB) to manage web traffic. Use an Application Load Balancer to receive customer orders from the NLUse Amazon Redshift with a Multi-AZ deployment to store unprocessed and processed customer orders.
   • CUse a Gateway Load Balancer (GWLB) to manage web traffic. Use Amazon Elastic Container Service (Amazon ECS) to receive and process customer orders. Use the GWLB to capture and store unprocessed orders. Use Amazon DynamoDB to store processed customer orders.
   • DUse an Application Load Balancer to manage web traffic. Use Amazon EC2 Auto Scaling groups to receive and process customer orders. Use Amazon Simple Queue Service (Amazon SQS) to store unprocessed orders. Use Amazon RDS with a Multi-AZ deployment to store processed customer orders.

   Show answer

   Answer: D

   Next question

8. Question 928 · 1017 in bank

   A company is using AWS DataSync to migrate millions of files from an on-premises system to AWS. The files are 10 KB in size on average. The company wants to use Amazon S3 for file storage. For the first year after the migration, the files will be accessed once or twice and must be immediately available. After 1 year, the files must be archived for at least 7 years. Which solution will meet these requirements MOST cost-effectively?

   • AUse an archive tool to group the files into large objects. Use DataSync to migrate the objects. Store the objects in S3 Glacier Instant Retrieval for the first year. Use a lifecycle configuration to transition the files to S3 Glacier Deep Archive after 1 year with a retention period of 7 years.
   • BUse an archive tool to group the files into large objects. Use DataSync to copy the objects to S3 Standard-Infrequent Access (S3 Standard-IA). Use a lifecycle configuration to transition the files to S3 Glacier Instant Retrieval after 1 year with a retention period of 7 years.
   • CConfigure the destination storage class for the files as S3 Glacier Instant Retrieval. Use a lifecycle policy to transition the files to S3 Glacier Flexible Retrieval after 1 year with a retention period of 7 years.
   • DConfigure a DataSync task to transfer the files to S3 Standard-Infrequent Access (S3 Standard-IA). Use a lifecycle configuration to transition the files to S3 Deep Archive after 1 year with a retention period of 7 years.

   Show answer

   Answer: A

   Explanation

   - Each file is 10 KB in size. - S3 charges a minimum of 128 KB per object. -Total number of files: millions of files. - Files are accessed twice in the first year. - After 1 year, files are archived for 7 years - S3 Glacier: Minimum charge for 40 KB per object. S3 Standard-IA and S3 One Zone-IA storage have a minimum billable object size of 128 KB. Smaller objects may be stored but will be charged for 128 KB of storage at the appropriate storage class rate Option D does not group those files into big object, so 1 million files will be charged as 1 million objects(128KB). https://aws.amazon.com/s3/pricing/

   Source: Adapted from community discussion — FlyingHawk

   References

   • AWS documentation
   • AWS documentation

   Next question

9. Question 929 · 1017 in bank

   A company recently performed a lift and shift migration of its on-premises Oracle database workload to run on an Amazon EC2 memory optimized Linux instance. The EC2 Linux instance uses a 1 TB Provisioned IOPS SSD (io1) EBS volume with 64,000 IOPS. The database storage performance after the migration is slower than the performance of the on-premises database. Which solution will improve storage performance?

   • AAdd more Provisioned IOPS SSD (io1) EBS volumes. Use OS commands to create a Logical Volume Management (LVM) stripe.
   • BIncrease the Provisioned IOPS SSD (io1) EBS volume to more than 64,000 IOPS.
   • CIncrease the size of the Provisioned IOPS SSD (io1) EBS volume to 2 TB.
   • DChange the EC2 Linux instance to a storage optimized instance type. Do not change the Provisioned IOPS SSD (io1) EBS volume.

   Show answer

   Answer: A

   Explanation

   A - For example, given two io1 volumes, each provisioned with 64,000 IOPS, would provide a combined 128,000 IOPS. B - The maximum IOPS for an io1 volume is capped at 64,000 IOPS when attached to an EC2 instance. C - While increasing the size of the volume increases baseline throughput (3 IOPS per GB), it won’t exceed the 64,000 IOPS limit. D - Storage optimized instances (like i3 or i4i) use instance store volumes, which are ephemeral (non-persistent) and cannot be used as a replacement for durable EBS volumes in this use case. What is the deal with LVM striping? LVM striping allows multiple volumes to be treated as a single logical volume. Reads and writes are distributed across the striped volumes, effectively increasing the available IOPS and throughput beyond the single-volume limits.

   Source: Adapted from community discussion — LeonSauveterre

   References

   • AWS documentation
   • AWS documentation

   Next question

10. Question 930 · 1017 in bank

    Select 2

    A company is storing sensitive user information in an Amazon S3 bucket. The company wants to provide secure access to this bucket from the application tier running on Amazon EC2 instances inside a VPC. Which combination of steps should a solutions architect take to accomplish this? (Choose two.)

    • AConfigure a VPC gateway endpoint for Amazon S3 within the VPC.
    • BCreate a bucket policy to make the objects in the S3 bucket public.
    • CCreate a bucket policy that limits access to only the application tier running in the VPC.
    • DCreate an IAM user with an S3 access policy and copy the IAM credentials to the EC2 instance.
    • ECreate a NAT instance and have the EC2 instances use the NAT instance to access the S3 bucket.

    Show answer

    Answer: AC

    Explanation

    After reviewing thoroughly the AWS documentation and the other answers in the discussion, I am taking back my previous answer. The correct answer for me is Option A and Option C. To provide secure access to the S3 bucket from the application tier running on Amazon EC2 instances inside the VPC, the solutions architect should take the following combination of steps: Option A: Configure a VPC gateway endpoint for Amazon S3 within the VPC. Amazon S3 VPC Endpoints: https://docs.aws.amazon.com/vpc/latest/userguide/vpc-endpoints-s3.html Option C: Create a bucket policy that limits access to only the application tier running in the VPC. Amazon S3 Bucket Policies: https://docs.aws.amazon.com/AmazonS3/latest/dev/using-iam-policies.html AWS Identity and Access Management (IAM) Policies: https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html

    Source: Adapted from community discussion — Buruguduystunstugudunstuy

    References

    • AWS documentation
    • AWS documentation
    • AWS documentation
    • AWS documentation
    • AWS documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SAA-C03 practice, question 921. 1017 questions available.