Pass Your SAA-C03 Certification Questions & Practice Tests, AWS Certified Solutions Architect – Associate

Question #1

A company has an application that runs on Amazon EC2 instances and uses an Amazon Aurora database. The EC2 instances connect to the database by using user names and passwords that are stored locally in a file. The company wants to minimize the operational overhead of credential management. What should a solutions architect do to accomplish this goal?

A. Use AWS Secrets Manage

B. Turn on automatic rotation

C. Use AWS Systems Manager Parameter Stor

D. Turn on automatic rotatio

E. ? Create an Amazon S3 bucket lo store objects that are encrypted with an AWS Key

F. Management Service (AWS KMS) encryption ke G

View answer

Correct Answer: C

Question #2

A company wants to migrate an Oracle database to AWS. The database consists of a single table that contains millions of geographic information systems (GIS) images that are high resolution and are identified by a geographic code. When a natural disaster occurs tens of thousands of images get updated every few minutes. Each geographic code has a single image or row that is associated with it. The company wants a solution that is highly available and scalable during such events Which solution meets these requ

A. Store the images and geographic codes in a database table Use Oracle running on an Amazon RDS Multi-AZ DB instance

B. Store the images in Amazon S3 buckets Use Amazon DynamoDB with the geographic code as the key and the image S3 URL as the value

C. Store the images and geographic codes in an Amazon DynamoDB table Configure DynamoDB Accelerator (DAX) during times of high load

D. Store the images in Amazon S3 buckets Store geographic codes and image S3 URLs in a database table Use Oracle running on an Amazon RDS Multi-AZ DB instance

View answer

Correct Answer: DE

Question #3

A company is implementing a shared storage solution for a media application that is hosted m the AWS Cloud The company needs the ability to use SMB clients to access data The solution must he fully managed. Which AWS solution meets these requirements?

A. Create an AWS Storage Gateway volume gatewa

B. Create a file share that uses the required client protocol Connect the application server to the tile share

C. Create an AWS Storage Gateway tape gateway Configure (apes to use Amazon S3 Connect the application server lo the tape gateway

D. Create an Amazon EC2 Windows instance Install and configure a Windows file share role on the instanc

E. Connect the application server to the file share

F. Create an Amazon FSx for Windows File Server tile system Attach the fie system to the origin server

View answer

Correct Answer: D

Question #4

A company has thousands of edge devices that collectively generate 1 TB of status alerts each day. Each alert is approximately 2 KB in size. A solutions architect needs to implement a solution to ingest and store the alerts for future analysis. The company wants a highly available solution. However, the company needs to minimize costs and does not want to manage additional infrastructure. Additionally, the company wants to keep 14 days of data available for immediate analysis and archive any data older than

A. Create an Amazon Kinesis Data Firehose delivery stream to ingest the alerts Configure the Kinesis Data Firehose stream to deliver the alerts to an Amazon S3 bucket Set up an S3 Lifecycle configuration to transition data to Amazon S3 Glacier after 14 days

B. Launch Amazon EC2 instances across two Availability Zones and place them behind an Elastic Load Balancer to ingest the alerts Create a script on the EC2 instances that will store tne alerts m an Amazon S3 bucket Set up an S3 Lifecycle configuration to transition data to Amazon S3 Glacier after 14 days

C. Create an Amazon Kinesis Data Firehose delivery stream to ingest the alerts Configure the Kinesis Data Firehose stream to deliver the alerts to an Amazon Elasticsearch Service (Amazon ES) duster Set up the Amazon ES cluster to take manual snapshots every day and delete data from the duster that is older than 14 days

D. Create an Amazon Simple Queue Service (Amazon SQS i standard queue to ingest the alerts and set the message retention period to 14 days Configure consumers to poll the SQS queue check the age of the message and analyze the message data as needed If the message is 14 days old the consumer should copy the message to an Amazon S3 bucket and delete the message from the SQS queue

View answer

Correct Answer: D

Question #5

A company has a web application that runs on Amazon EC2 instances. The company wants end users to authenticate themselves before they use the web application. The web application accesses AWS resources, such as Amazon S3 buckets, on behalf of users who are logged on. Which combination of actions must a solutions architect take to meet these requirements? (Select TWO).

A. Configure AWS App Mesh to log on users

B. Enable and configure AWS Single Sign-On in AWS Identity and Access Management (IAM)

C. Define a default (AM role for authenticated users

D. Use AWS Identity and Access Management (IAM) for user authentication

E. Use Amazon Cognito for user authentication

View answer

Correct Answer: D

Question #6

A solutions architect is designing the cloud architecture for a new application being deployed on AWS. The process should run in parallel while adding and removing application nodes as needed based on the number of fobs to be processed. The processor application is stateless. The solutions architect must ensure that the application is loosely copied and the job items are durably stored Which design should the solutions architect use?

A. Create an Amazon SNS topic to send the jobs that need to be processed Create an Amazon Machine Image (AMI) that consists of the processor application Create a launch configuration that uses the AMI Create an Auto Scaling group using the launch configuration Set the scaling policy for the Auto Scaling group to add and remove nodes based on CPU usage

B. Create an Amazon SQS queue to hold the jobs that need to be processed Create an Amazon Machine image (AMI) that consists of the processor application Create a launch configuration that uses the AM' Create an Auto Scaling group using the launch configuration Set the scaling policy for the Auto Scaling group to add and remove nodes based on network usage

C. Create an Amazon SQS queue to hold the jobs that needs to be processed Create an Amazon Machine image (AMI) that consists of the processor application Create a launch template that uses the AMI Create an Auto Scaling group using the launch template Set the scaling policy for the Auto Scaling group to add and remove nodes based on the number of items in the SQS queue

D. Create an Amazon SNS topic to send the jobs that need to be processed Create an Amazon Machine Image (AMI) that consists of the processor application Create a launch template that uses the AMI Create an Auto Scaling group using the launch template Set the scaling policy for the Auto Scaling group to add and remove nodes based on the number of messages published to the SNS topic

View answer

Correct Answer: B

Question #7

A company is storing sensitive user information in an Amazon S3 bucket The company wants to provide secure access to this bucket from the application tier running on Ama2on EC2 instances inside a VPC Which combination of steps should a solutions architect take to accomplish this? (Select TWO.)

A. Configure a VPC gateway endpoint (or Amazon S3 within the VPC

B. Create a bucket policy to make the objects to the S3 bucket public

C. Create a bucket policy that limits access to only the application tier running in the VPC

D. Create an 1AM user with an S3 access policy and copy the IAM credentials to the EC2 instance

E. Create a NAT instance and have the EC2 instances use the NAT instance to access the S3 bucket

View answer

Correct Answer: C

Question #8

A company wants to create a mobile app that allows users to stream slow-motion video clips on their mobile devices Currently, the app captures video clips and uploads the video clips in raw format into an Amazon S3 bucket The app retrieves these video clips directly from the S3 bucket. However the videos are large in their raw format. Users are experiencing issues with buffering and playback on mobile devices. The company wants to implement solutions to maximize the performance and scalability of the app wh

A. Deploy Amazon CloudFront for content delivery and caching

B. Use AWS DataSync to replicate the video files across AWS Regions in other S3 buckets

C. Use Amazon Elastic Transcoder to convert the video files to more appropriate formats

D. Deploy an Auto Scaling group of Amazon EC2 instances in Local Zones for content delivery and caching

E. Deploy an Auto Scaling group of Amazon EC2 instances to convert the video files to more appropriate formats

View answer

Correct Answer: C

Question #9

A company's application integrates with multiple software-as-a-service (SaaS) sources for data collection. The company runs Amazon EC2 instances to receive the data and to upload the data to an Amazon S3 bucket for analysis. The same EC2 instance that receives and uploads the data also sends a notification to the user when an upload is complete. The company has noticed slow application performance and wants to improve the performance as much as possible. Which solution will meet these requirements with the

A. Create an Auto Scaling group so that EC2 instances can scale ou

B. Configure an S3 event notification to send events to an Amazon Simple Notification Service (Amazon SNS) topic when the upload to the S3 bucket is complete

C. Create an Amazon AppFlow flow to transfer data between each SaaS source and the S3 bucket

D. Create an Amazon EventBridge (Amazon CloudWatch Events) rule for each SaaS source to send output dat

E. Configure the S3 bucket as the rule's targe

F. Create a second EventBridge (CloudWatch Events) rule to send events when the upload to the S3 bucket is complet G

View answer

Correct Answer: C

Question #10

A company uses NFS to store large video files in on-premises network attached storage. Each video file ranges in size from 1MB to 500 GB. The total storage is 70 TB and is no longer growing. The company decides to migrate the video files to Amazon S3. The company must migrate the video files as soon as possible while using the least possible network bandwidth. Which solution will meet these requirements?

A. Create an S3 bucket Create an 1AM role that has permissions to write to the S3 bucke

B. Use the AWS CLI to copy all files locally to the S3 bucket

C. Create an AWS Snowball Edge jo

D. Receive a Snowball Edge device on premise

E. Use the Snowball Edge client to transfer data to the devic

F. Return the device so that AWS can import the data intoAmazon S3

View answer

Correct Answer: A

Question #11

A company is building an ecommerce application and needs to store sensitive customer information. The company needs to give customers the ability to complete purchase transactions on the website. The company also needs to ensure that sensitive customer data is protected, even from database administrators. Which solution meets these requirements?

A. Store sensitive data in an Amazon Elastic Block Store (Amazon EBS) volum

B. Use EBS encryption to encrypt the dat

C. Use an IAM instance role to restrict access

D. Store sensitive data in Amazon RDS for MySQ

E. Use AWS Key Management Service (AWS KMS) client-side encryption to encrypt the data

F. Store sensitive data in Amazon S3

View answer

Correct Answer: D

Question #12

A financial company hosts a web application on AWS. The application uses an Amazon API Gateway Regional API endpoint to give users the ability to retrieve current stock prices. The company's security team has noticed an increase in the number of API requests. The security team is concerned that HTTP flood attacks might take the application offline. A solutions architect must design a solution to protect the application from this type of attack. Which solution meats these requirements with the LEAST operatio

A. Create an Amazon CloudFront distribution in front of the API Gateway Regional API endpoint with a maximum TTL of 24 hours

B. Create a Regional AWS WAF web ACL with a rate-based rul

C. Associate the web ACL with the API Gateway stage

D. Use Amazon CloudWatch metrics to monitor the Count metric and alert the security team when the predefined rate is reached

E. Create an Amazon CloudFront distribution with Lambda@Edge in front of the API Gateway Regional API endpoint Create an AWS Lambda function to block requests from IP addresses that exceed the predefined rate

View answer

Correct Answer: B

Question #13

A company observes an increase in Amazon EC2 costs in its most recent bill The billing team notices unwanted vertical scaling of instance types for a couple of EC2 instances A solutions architect needs to create a graph comparing the last 2 months of EC2 costs and perform an in-depth analysis to identify the root cause of the vertical scaling How should the solutions architect generate the information with the LEAST operational overhead?

A. Use AWS Budgets to create a budget report and compare EC2 costs based on instance types

B. Use Cost Explorer's granular filtering feature to perform an in-depth analysis of EC2 costs based on instance types

C. Use graphs from the AWS Billing and Cost Management dashboard to compare EC2 costs based on instance types for the last 2 months

D. Use AWS Cost and Usage Reports to create a report and send it to an Amazon S3 bucket Use Amazon QuickSight with Amazon S3 as a source to generate an interactive graph based on instance types

View answer

Correct Answer: A

Question #14

An online retail company needs to run near-real-time analytics on website traffic to analyze top-selling products across different locations. The product purchase data and the user location details are sent to a third-party application that runs on premises The application processes the data and moves the data into the company's analytics engine The company needs to implement a cloud-based solution to make the data available for near-real-time analytics. Which solution will meet these requirements with the

A. Use Amazon Kinesis Data Streams to ingest the data Use AWS Lambda to transform the data Configure Lambda to write the data to Amazon Amazon OpenSearch Service (Amazon Elasticsearch Service)

B. Configure Amazon Kinesis Data Streams to write the data to an Amazon S3 bucket Schedule an AWS Glue crawler job to enrich the data and update the AWS Glue Data Catalog Use Amazon Athena for analytics

C. Configure Amazon Kinesis Data Streams to write the data to an Amazon S3 bucket Add an Apache Spark job on Amazon EMR to enrich the data in the S3 bucket and write the data to Amazon OpenSearch Service (Amazon Elasticsearch Service)

D. Use Amazon Kinesis Data Firehose to ingest the data Enable Kinesis Data Firehose data transformation with AWS Lambda Configure Kinesis Data Firehose to write the data to Amazon OpenSearch Service (Amazon Elasticsearch Service)

View answer

Correct Answer: C

Question #15

A company needs to store its accounting records in Amazon S3. The records must be immediately accessible for 1 year and then must be archived for an additional 9 years. No one at the company, including administrative users and root users, can be able to delete the records during the entire 10- year period. The records must be stored with maximum resiliency. Which solution will meet these requirements?

A. Store the records in S3 Glacier for the entire 10-year perio

B. Use an access control policy to deny deletion of the records for a period of 10 years

C. Store the records by using S3 Intelligent-Tierin

D. Use an IAM policy to deny deletion of the records

E. Use an S3 Lifecycle policy to transition the records from S3 Standard to S3 Glacier Deep Archive after 1 yea

F. Use S3 Object Lock in compliance mode for a period of 10 years

View answer

Correct Answer: C

Question #16

A company has five organizational units (OUS) as part of its organization in AWS Organization. Each OU correlate to the five business that the company owns. The company research and development R&D business is separating from the company and will need its own organization. A solutions architect creates a separate new management account for this purpose.

A. Have the R&D AWS account be part of both organizations during the transition

B. Invite the R&D AWS account to be part of the new organization after the R&D AWS account has left the prior organization

C. Create a new R&D AWS account in the new organizatio

D. Migrate resources from the period R&D AWS account to thee new R&D AWS account

E. Have the R&D AWS account into the now organisatio

F. Make the now management account a member of the prior organisation

View answer

Correct Answer: AE

Question #17

A company is preparing to launch a public-facing web application in the AWS Cloud. The architecture consists of Amazon EC2 instances within a VPC behind an Elastic Load Balancer (ELB). A third-party service is used for the DNS. The company's solutions architect must recommend a solution to detect and protect against large-scale DDoS attacks. Which solution meets these requirements?

A. Enable Amazon GuardDuty on the account

B. Enable Amazon Inspector on the EC2 instances

C. Enable AWS Shield and assign Amazon Route 53 to it

D. Enable AWS Shield Advanced and assign the ELB to it

View answer

Correct Answer: B

Question #18

A company is running a publicly accessible serverless application that uses Amazon API Gateway and AWS Lambda. The application’s traffic recently spiked due to fraudulent requests from botnets. Which steps should a solutions architect take to block requests from unauthorized users? (Select TWO.)

A. Create a usage plan with an API key that it shared with genuine users only

B. Integrate logic within the Lambda function to ignore the requests lion- fraudulent IP addresses

C. Implement an AWS WAF rule to target malicious requests and trigger actions to filler them out

D. Convert the existing public API to a private API Update the DNS records to redirect users to the new API endpoint

E. Create an IAM role tor each user attempting to access the API A user will assume the role when making the API call

View answer

Correct Answer: C

Question #19

The DNS provider that hosts a company's domain name records is experiencing outages that cause service disruption for a website running on AWS The company needs to migrate to a more resilient managed DNS service and wants the service to run on AWS. What should a solutions architect do to rapidly migrate the DNS hosting service?

A. Create an Amazon Route 53 public hosted zone for the domain nam

B. Import the zone file containing the domain records hosted by the previous provider

C. Create an Amazon Route 53 private hosted zone for the domain name Import the zone file containing the domain records hosted by the previous provider

D. Create a Simple AD directory in AW

E. Enable zone transfer between the DNS provider and AWS Directory Service for Microsoft Active Directory for the domain records

F. Create an Amazon Route 53 Resolver inbound endpoint in the VPC Specify the IP addresses that the provider's DNS will forward DNS queries to Configure the provider's DNS to forward DNS queries for the domain to the IP addresses that are specified in the inbound endpoint

View answer

Correct Answer: C

Question #20

A company is deploying a web portal. The company wants to ensure that only the web portion of the application is publicly accessible. To accomplish this, the VPC was designed with two public subnets and two private subnets. The application will run on several Amazon EC2 instances in an Auto Scaling group. SSL termination must be offloaded from the EC2 instances. What should a solutions architect do to ensure these requirements are met? Configure a Network Load Balancer in the public subnets. Configure the A

A. group in the private subnets and associate it with an Application Load Balancer Configure a Network Load Balancer in the public subnet

B. Configure the Auto Scaling

C. group in the public subnets and associate it with an Application Load Balancer

D. Configure an Application Load Balancer in the public subnet

E. Configure the Auto Scaling group in the private subnets and associate it with the Application Load

F. Balancer, Configure an Application Load Balancer in the private subnet G

View answer

Correct Answer: C

Question #21

A company wants to run its critical applications in containers to meet requirements tor scalability and availability The company prefers to focus on maintenance of the critical applications The company does not want to be responsible for provisioning and managing the underlying infrastructure that runs the containerized workload What should a solutions architect do to meet those requirements?

A. Use Amazon EC2 Instances, and Install Docker on the Instances

B. Use Amazon Elastic Container Service (Amazon ECS) on Amazon EC2 worker nodes

C. Use Amazon Elastic Container Service (Amazon ECS) on AWS Fargate

D. Use Amazon EC2 instances from an Amazon Elastic Container Service (Amazon ECS)-op6mized Amazon Machine Image (AMI)

View answer

Correct Answer: C

Question #22

A payment processing company records all voice communication with its customers and stores the audio files in an Amazon S3 bucket. The company needs to capture the text from the audio files. The company must remove from the text any personally identifiable information (Pll) that belongs to customers. What should a solutions architect do to meet these requirements?

A. Process the audio files by using Amazon Kinesis Video Stream

B. Use an AWS Lambda function to scan for known Pll patterns

C. When an audio file is uploaded to the S3 bucket, invoke an AWS Lambda function to start an Amazon Textract task to analyze the call recordings

D. Configure an Amazon Transcribe transcription job with Pll redaction turned o

E. When an audio file is uploaded to the S3 bucket, invoke an AWS Lambda function to start the transcription jo

F. Store theoutput in a separate S3 bucket

View answer

Correct Answer: B

Question #23

Availability Zone The company wants the application to be highly available with minimum downtime and minimum loss of data Which solution will meet these requirements with the LEAST operational effort?

A. Place the EC2 instances in different AWS Regions Use Amazon Route 53 health checks to redirect traffic Use Aurora PostgreSQL Cross-Region Replication

B. Configure the Auto Scaling group to use multiple Availability Zones Configure the database as Multi-AZ Configure an Amazon RDS Proxy instance for the database

C. Configure the Auto Scaling group to use one Availability Zone Generate hourly snapshots of the database Recover the database from the snapshots in the event of a failure

D. Configure the Auto Scaling group to use multiple AWS Regions Write the data from the application to Amazon S3 Use S3 Event Notifications to launch an AWS Lambda function to write the data to the database

View answer

Correct Answer: B

Question #24

A company runs a containerized application on a Kubernetes cluster in an on-premises data center. The company is using a MongoDB database for data storage. The company wants to migrate some of these environments to AWS, but no code changes or deployment method changes are possible at this time. The company needs a solution that minimizes operational overhead. Which solution meets these requirements?

A. Use Amazon Elastic Container Service (Amazon ECS) with Amazon EC2 worker nodes for compute and MongoDB on EC2 for data storage

B. Use Amazon Elastic Container Service (Amazon ECS) with AWS Fargate for compute and Amazon DynamoDB for data storage

C. Use Amazon Elastic Kubernetes Service (Amazon EKS) with Amazon EC2 worker nodes for compute and Amazon DynamoDB for data storage

D. Use Amazon Elastic Kubernetes Service (Amazon EKS) with AWS Fargate for compute and Amazon DocumentDB (with MongoDB compatibility) for data storage

View answer

Correct Answer: D

Question #25

A company has hired a solutions architect to design a reliable architecture for its application. The application consists of one Amazon RDS DB instance and two manually provisioned Amazon EC2 instances that run web servers. The EC2 instances are located in a single Availability Zone. What should the solutions architect do to maximize reliability of the application Infrastructure?

A. Delete one EC2 instance and enable termination protection on the other EC2 instanc

B. Update the DB instance to De multi-AZ, and enable deletion protection

C. Update the DB instance to be Multi-A

D. and enable deletion protectio

E. Place the EC2 instances behind an Application Load Balancer, and run them in an EC2 Auto Scaling group across multiple Availability Zones

F. Create an additional DB instance along with an Amazon API Gateway and an AWS Lambda function

View answer

Correct Answer: B

Question #26

A company has an on-premises application that generates a large amount of time-sensitive data that is backed up to Amazon S3. The application has grown and there are user complaints about internet bandwidth limitations. A solutions architect needs to design a long-term solution that allows for both timely backups to Amazon S3 and with minimal impact on internet connectivity for internal users. Which solution meets these requirements?

A. Establish AWS VPN connections and proxy all traffic through a VPC gateway endpoint

B. Establish a new AWS Direct Connect connection and direct backup traffic through this new connection

C. Order daily AWS Snowball devices Load the data onto the Snowball devices and return the devices to AWS each day

D. Submit a support ticket through the AWS Management Console Request the removal of S3 service limits from the account

View answer

Correct Answer: A

Question #27

A company is running an ASP.NET MVC application on a single Amazon EC2 instance. A recent increase in application traffic is causing slow response times for users during lunch hours. The company needs to resolve this concern with the least amount of configuration. What should a solutions architect recommend to meet these requirements?

A. Move the application to AWS Elastic Beanstal

B. Configure load-based auto scaling and time-based scaling to handle scaling during lunch hours

C. Move the application to Amazon Elastic Container Service (Amazon ECS) Create an AWS Lambda function to handle scaling during lunch hours

D. Move the application to Amazon Elastic Container Service (Amazon ECS)

E. Move the application to AWS Elastic Beanstal

F. Configure load-based auto scaling, and create an AWS Lambda function to handle scaling during lunch hours

View answer

Correct Answer: B

Question #28

A solution architect is using an AWS CloudFormation template to deploy a three-tier web application. The web application consist of a web tier and an application that stores and retrieves user data in Amazon DynamoDB tables. The web and application tiers are hosted on Amazon EC2 instances, and the database tier is not publicly accessible. The application EC2 instances need to access the Dynamo tables Without exposing API credentials in the template. What should the solution architect do to meet the requirem

A. Create an IAM role to read the DynamoDB table

B. Associate the role with the application instances by referencing an instance profile

C. Create an IAM role that has the required permissions to read and write from the DynamoDB table

D. Add the role to the EC2 instance profile, and associate the instances profile with the application instances

E. Use the parameter section in the AWS CloudFormation template to have the user input access and secret keys from an already-created IAM user that has the required permissions to read and write from the DynamoDB tables

F. Create an IAM user in the AWS CloudFormation template that has the required permissions to read and write from the DynamoDB table G

View answer

Correct Answer: C

Question #29

A company hosts an application on multiple Amazon EC2 instances The application processes messages from an Amazon SQS queue writes to an Amazon RDS table and deletes the message from the queue Occasional duplicate records are found in the RDS table. The SQS queue does not contain any duplicate messages. What should a solutions architect do to ensure messages are being processed once only?

A. Use the CreateQueue API call to create a new queue

B. Use the Add Permission API call to add appropriate permissions

C. Use the ReceiveMessage API call to set an appropriate wail time

D. Use the ChangeMessageVisibility APi call to increase the visibility timeout

View answer

Correct Answer: A

Question #30

A company wants to reduce the cost of its existing three-tier web architect. The web, application, and database servers are running on Amazon EC2 instance EC2 instance for the development, test and production environments. The EC2 instances average 30% CPU utilization during peak hours and 10% CPU utilization during non-peak hours. The production EC2 instance purchasing solution will meet the company’s requirements MOST cost-effectively?

A. Use Spot Instances for the production EC2 instance

B. Use Reserved Instances for the development and test EC2 instances

C. Use Reserved Instances for the production EC2 instance

D. Use On-Demand Instances for the development and test EC2 instances

E. Use blocks for the production FC2 ins ranges Use Reserved instances for the development and lest EC2 instances

F. Use On-Demand Instances for the production EC2 instance G

View answer

Correct Answer: C

Question #31

A company is using a SQL database to store movie data that is publicly accessible. The database runs on an Amazon RDS Single-AZ DB instance A script runs queries at random intervals each day to record the number of new movies that have been added to the database. The script must report a final total during business hours The company's development team notices that the database performance is inadequate for development tasks when the script is running. A solutions architect must recommend a solution to resol

A. Modify the DB instance to be a Multi-AZ deployment

B. Create a read replica of the database Configure the script to query only the read replica

C. Instruct the development team to manually export the entries in the database at the end of each day

D. Use Amazon ElastiCache to cache the common queries that the script runs against the database

View answer

Correct Answer: B

Question #32

A company's order system sends requests from clients to Amazon EC2 instances The EC2 instances process the orders and then store the orders in a database on Amazon RDS. Users report that they must reprocess orders when the system fails. The company wants a resilient solution that can process orders automatically if a system outage occurs. What should a solutions architect do to meet these requirements?

A. Move the EC2 instances Into an Auto Scaling grou

B. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to target an Amazon Elastic Container Service (Amazon ECS) task

C. Move the EC2 instances into an Auto Seating group behind an Application Load Balancer (Al B) Update the order system to send message to the ALB endpoint

D. Move the EC2 instances into an Auto Scaling grou

E. Configure the order system to send messages to an Amazon Simple Queue Service (Amazon SGS) queu

F. Configure the EC2 instances to consume messages from the queue

View answer

Correct Answer: C

Question #33

A company runs a global web application on Amazon EC2 instances behind an Application Load Balancer The application stores data in Amazon Aurora. The company needs to create a disaster recovery solution and can tolerate up to 30 minutes of downtime and potential data loss. The solution does not need to handle the load when the primary infrastructure is healthy What should a solutions architect do to meet these requirements?

A. Deploy the application with the required infrastructure elements in place Use Amazon Route 53 to configure active-passive failover Create an Aurora Replica in a second AWS Region

B. Host a scaled-down deployment of the application in a second AWS Region Use Amazon Route 53 to configure active-active failover Create an Aurora Replica in the second Region

C. Replicate the primary infrastructure in a second AWS Region Use Amazon Route 53 to configure active-active failover Create an Aurora database that is restored from the latest snapshot

D. Back up data with AWS Backup Use the backup to create the required infrastructure in a second AWS Region Use Amazon Route 53 to configure active- passive failover Create an Aurora second primary instance in the second Region

View answer

Correct Answer: C

Question #34

A company has a document management application that contains PDF documents The company hosts the application on Amazon EC2 instances According to regulations, the instances must not have access to the internet The application must be able to read and write to a persistent storage system that provides native versioning capabilities A solutions architect needs to design secure storage that maximizes resiliency and facilitates data sharing across instances Which solution meets these requirements?

A. Place the instances in a public subnet Use Amazon S3 for storage Access S3 objects by using URLs

B. Place the instances in a private subnet use Amazon S3 for storage Use a VPC endpoint to access S3 objects

C. Use the instances with a Provisioned IOPS SSD (io2) Amazon Elastic Block Store (Amazon EBS) volume

D. Use Amazon Elastic File System (Amazon EPS) Standard-Infrequent Access (Standard-IA) to store data and provide shared access to the instances

View answer

Correct Answer: C

Question #35

The management account has an Amazon S3 bucket that contains project reports. The company wants to limit access to this S3 bucket to only users of accounts within the organization in AWS Organizations. Which solution meets these requirements with the LEAST amount of operational overhead?

A. Add the aws:PrincipalOrgID global condition key with a reference to the organization ID to the S3bucket policy

B. Create an organizational unit (OU) for each departmen

C. Add the aws:PrincipalOrgPaths globalcondition key to the S3 bucket policy

D. Use AWS CloudTrail to monitor the CreateAccount, InviteAccountToOrganization,LeaveOrganization, and RemoveAccountFromOrganization event

E. Update the S3 bucket policyaccordingly

F. Tag each user that needs access to the S3 bucke G

View answer

Correct Answer: D

Question #36

A company has more than 5 TB of file data on Windows file servers that run on premises Users and applications interact with the data each day The company is moving its Windows workloads to AWS. As the company continues this process, the company requires access to AWS and on-premises file storage with minimum latency The company needs a solution that minimizes operational overhead and requires no significant changes to the existing file access patterns. The company uses an AWS Site-to-Site VPN connection for

A. Deploy and configure Amazon FSx for Windows File Server on AW

B. Move the on-premises file data to FSx for Windows File Serve

C. Reconfigure the workloads to use FSx for Windows File Server on AWS

D. Deploy and configure an Amazon S3 File Gateway on premises Move the on-premises file data to the S3 File Gateway Reconfigure the on-premises workloads and the cloud workloads to use the S3 File Gateway

E. Deploy and configure an Amazon S3 File Gateway on premises Move the on-premises file data to Amazon S3 Reconfigure the workloads to use either Amazon S3 directly or the S3 File Gateway, depending on each workload's location

F. Deploy and configure Amazon FSx for Windows File Server on AWS Deploy and configure an Amazon FSx File Gateway on premises Move the on-premises file data to the FSx File Gateway Configure the cloud workloads to use FSx for Windows File Server on AWS Configure the on-premises workloads to use the FSx File Gateway

View answer

Correct Answer: B

Question #37

A company uses a popular content management system (CMS) for its corporate website. However, the required patching and maintenance are burdensome. The company is redesigning its website and wants anew solution. The website will be updated four times a year and does not need to have any dynamic content available. The solution must provide high scalability and enhanced security. Which combination of changes will meet these requirements with the LEAST operational overhead? (Choose two.)

A. Deploy an AWS WAF web ACL in front of the website to provide HTTPS functionality

B. Create and deploy an AWS Lambda function to manage and serve the website content

C. Create the new website and an Amazon S3 bucket Deploy the website on the S3 bucket with static website hosting enabled

D. Create the new websit

E. Deploy the website by using an Auto Scaling group of Amazon EC2 instances behind an Application Load Balancer

View answer

Correct Answer: AD

Question #38

A company is migrating its on-premises PostgreSQL database to Amazon Aurora PostgreSQL. The on-premises database must remain online and accessible during the migration. The Aurora database must remain synchronized with the on-premises database. Which combination of actions must a solutions architect take to meet these requirements? (Select TWO.)

A. Create an ongoing replication task

B. Create a database backup of the on-premises database

C. Create an AWS Database Migration Service (AWS DMS) replication server

D. Convert the database schema by using the AWS Schema Conversion Tool (AWS SCT)

E. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to monitor the database synchronization

View answer

Correct Answer: DE

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now

Pass Your SAA-C03 Certification Questions & Practice Tests, AWS Certified Solutions Architect – Associate | SPOTO

View The Updated SAA-C03 Exam Questions

View The Updated AWS Exam Questions

View Answers after Submission

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE! Get Now

Pass Your SAA-C03 Certification Questions & Practice Tests, AWS Certified Solutions Architect – Associate | SPOTO

View The Updated SAA-C03 Exam Questions

View The Updated AWS Exam Questions

View Answers after Submission

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now