SAA-C03 Exam Questions 2024 Updated: Get Ready for Exams, AWS Certified Solutions Architect – Associate

Question #1

A company's web application is running on Amazon EC2 instances behind an Application Load Balancer. The company recently changed its policy, which now requires the application to be accessed from one specific country only. Which configuration will meet this requirement?

A. Configure the security group for the EC2 instances

B. Configure the security group on the Application Load Balancer

C. Configure AWS WAF on the Application Load Balancer in a VPC

D. Configure the network ACL for the subnet that contains the EC2 instances

View answer

Correct Answer: B

Question #2

A company has registered its domain name with Amazon Route 53. The company uses Amazon API Gateway in the ca-central-1 Region as a public interface for its backend microservice APIs. Third-party services consume the APIs securely. The company wants to design its API Gateway URL with the company's domain name and corresponding certificate so that the third-party services can use HTTPS. Which solution will meet these requirements?

A. Create stage variables in API Gateway with Name="Endpoint-URL" and Value="Company Domain Name" to overwrite the default UR

B. Import the public certificate associated with the company's domain name into AWS Certificate Manager (ACM)

C. Create Route 53 DNS records with the company's domain nam

D. Point the alias record to the Regional API Gateway stage endpoin

E. Import the public certificate associated with the company's domain name into AWS Certificate Manager (ACM) in the us-east-1 Region

F. Create a Regional API Gateway endpoin G

View answer

Correct Answer: C

Question #3

A company wants to move a multi-tiered application from on premises to the AWS Cloud to improve the application's performance. The application consists of application tiers that communicate with each other by way of RESTful services. Transactions are dropped when one tier becomes overloaded. A solutions architect must design a solution that resolves these issues and modernizes the application. Which solution meets these requirements and is the MOST operationally efficient?

A. Use Amazon API Gateway and direct transactions to the AWS Lambda functions as the application laye

B. Use Amazon Simple Queue Service (Amazon SQS) as the communication layer between application services

C. Use Amazon CloudWatch metrics to analyze the application performance history to determine the server's peak utilization during the performance failure

D. Increase the size of the application server's Amazon EC2 instances to meet the peak requirements

E. Use Amazon Simple Notification Service (Amazon SNS) to handle the messaging between application servers running on Amazon EC2 in an Auto Scaling grou

F. Use Amazon CloudWatch to monitor the SNS queue length and scale up and down as required

View answer

Correct Answer: B

Question #4

A company is deploying a new public web application to AWS. The application will run behind an Application Load Balancer (ALB). The application needs to be encrypted at the edge with an SSL/TLS certificate that is issued by an external certificate authority (CA). The certificate must be rotated each year before the certificate expires. What should a solutions architect do to meet these requirements?

A. Use AWS Certificate Manager (ACM) to issue an SSL/TLS certificat

B. Apply the certificate to the AL

C. Use the managed renewal feature to automatically rotate the certificate

D. Use AWS Certificate Manager (ACM) to issue an SSL/TLS certificat

E. Import the key material from the certificat

F. Apply the certificate to the AL G

View answer

Correct Answer: A

Question #5

A company runs a high performance computing (HPC) workload on AWS. The workload required low-latency network performance and high network throughput with tightly coupled node-to-node communication. The Amazon EC2 instances are properly sized for compute and storage capacity, and are launched using default options. What should a solutions architect propose to improve the performance of the workload?

A. Choose a cluster placement group while launching Amazon EC2 instances

B. Choose dedicated instance tenancy while launching Amazon EC2 instances

C. Choose an Elastic Inference accelerator while launching Amazon EC2 instances

D. Choose the required capacity reservation while launching Amazon EC2 instances

View answer

Correct Answer: A

Question #6

A large media company hosts a web application on AWS. The company wants to start caching confidential media files so that users around the world will have reliable access to the files. The content is stored in Amazon S3 buckets. The company must deliver the content quickly, regardless of where the requests originate geographically. Which solution will meet these requirements?

A. Use AWS DataSync to connect the S3 buckets to the web application

B. Deploy AWS Global Accelerator to connect the S3 buckets to the web application

C. Deploy Amazon CloudFront to connect the S3 buckets to CloudFront edge servers

D. Use Amazon Simple Queue Service (Amazon SQS) to connect the S3 buckets to the web application

View answer

Correct Answer: B

Question #7

A company is implementing new data retention policies for all databases that run on Amazon RDS DB instances. The company must retain daily backups for a minimum period of 2 years. The backups must be consistent and restorable. Which solution should a solutions architect recommend to meet these requirements?

A. Create a backup vault in AWS Backup to retain RDS backup

B. Create a new backup plan with a daily schedule and an expiration period of 2 years after creatio

C. Assign the RDS DB instances to the backup plan

D. Configure a backup window for the RDS DB instances for daily snapshot

E. Assign a snapshot retention policy of 2 years to each RDS DB instanc

F. Use Amazon Data Lifecycle Manager (Amazon DLM) to schedule snapshot deletions

View answer

Correct Answer: A

Question #8

Organizers for a global event want to put daily reports online as static HTML pages. The pages are expected to generate millions of views from users around the world. The files are stored In an Amazon S3 bucket. A solutions architect has been asked to design an efficient and effective solution. Which action should the solutions architect take to accomplish this?

A. Generate presigned URLs for the files

B. Use cross-Region replication to all Regions

C. Use the geoproximtty feature of Amazon Route 53

D. Use Amazon CloudFront with the S3 bucket as its origin

View answer

Correct Answer: B

Question #9

A company runs an Oracle database on premises. As part of the company’s migration to AWS, the company wants to upgrade the database to the most recent available version. The company also wants to set up disaster recovery (DR) for the database. The company needs to minimize the operational overhead for normal operations and DR setup. The company also needs to maintain access to the database's underlying operating system. Which solution will meet these requirements?

A. Migrate the Oracle database to an Amazon EC2 instanc

B. Set up database replication to a different AWS Region

C. Migrate the Oracle database to Amazon RDS for Oracl

D. Activate Cross-Region automated backups to replicate the snapshots to another AWS Region

E. Migrate the Oracle database to Amazon RDS Custom for Oracl

F. Create a read replica for the database in another AWS Region

View answer

Correct Answer: AC

Question #10

An application allows users at a company's headquarters to access product data. The product data is stored in an Amazon RDS MySQL DB instance. The operations team has isolated an application performance slowdown and wants to separate read traffic from write traffic. A solutions architect needs to optimize the application's performance quickly. What should the solutions architect recommend?

A. Change the existing database to a Multi-AZ deploymen

B. Serve the read requests from the primary Availability Zone

C. Change the existing database to a Multi-AZ deploymen

D. Serve the read requests from the secondary Availability Zone

E. Create read replicas for the databas

F. Configure the read replicas with half of the compute and storage resources as the source database

View answer

Correct Answer: B

Question #11

A company needs the ability to analyze the log files of its proprietary application. The logs are stored in JSON format in an Amazon S3 bucket Queries will be simple and will run on-demand A solutions architect needs to perform the analysis with minimal changes to the existing architecture What should the solutions architect do to meet these requirements with the LEAST amount of operational overhead?

A. Use Amazon Redshift to load all the content into one place and run the SQL queries as needed

B. Use Amazon CloudWatch Logs to store the logs Run SQL queries as needed from the Amazon CloudWatch console

C. Use Amazon Athena directly with Amazon S3 to run the queries as needed

D. Use AWS Glue to catalog the logs Use a transient Apache Spark cluster on Amazon EMR to run the SQL queries as needed

View answer

Correct Answer: C

Question #12

A company has applications that run on Amazon EC2 instances in a VPC. One of the applications needs to call the Amazon S3 API to store and read objects. According to the company's security regulations, no traffic from the applications is allowed to travel across the internet. Which solution will meet these requirements?

A. Configure an S3 interface endpoint

B. Configure an S3 gateway endpoint

C. Create an S3 bucket in a private subnet

D. Create an S3 bucket in the same Region as the EC2 instance

View answer

Correct Answer: B

Question #13

A company uses AWS Organizations to create dedicated AWS accounts for each business unit to manage each business unit's account independently upon request. The root email recipient missed a notification that was sent to the root user email address of one account. The company wants to ensure that all future notifications are not missed. Future notifications must be limited to account administrators. Which solution will meet these requirements?

A. Configure the company's email server to forward notification email messages that are sent to the AWS account root user email address to all users in the organization

B. Configure all AWS account root user email addresses as distribution lists that go to a few administrators who can respond to alert

C. Configure AWS account alternate contacts in the AWS Organizations console or programmatically

D. Configure all AWS account root user email messages to be sent to one administrator who is responsible for monitoring alerts and forwarding those alerts to the appropriate groups

E. Configure all existing AWS accounts and all newly created accounts to use the same root user email addres

F. Configure AWS account alternate contacts in the AWS Organizations console orprogrammatically

View answer

Correct Answer: C

Question #14

A company recently migrated to AWS and wants to implement a solution to protect the traffic that flows in and out of the production VPC. The company had an inspection server in its on-premises data center. The inspection server performed specific operations such as traffic flow inspection and traffic filtering. The company wants to have the same functionalities in the AWS Cloud. Which solution will meet these requirements?

A. Use Amazon GuardDuty for traffic inspection and traffic filtering in the production VPC

B. Use Traffic Mirroring to mirror traffic from the production VPC for traffic inspection and filtering

C. Use AWS Network Firewall to create the required rules for traffic inspection and traffic filtering for the production VPC

D. Use AWS Firewall Manager to create the required rules for traffic inspection and traffic filtering for the production VPC

View answer

Correct Answer: D

Question #15

A solutions architect must design a solution that uses Amazon CloudFront with an Amazon S3 origin to store a static website. The company's security policy requires that all website traffic be inspected by AWS WAR How should the solutions architect comply with these requirements?

A. Configure an S3 bucket policy lo accept requests coming from the AWS WAF Amazon Resource Name (ARN) only

B. Configure Amazon CloudFront to forward all incoming requests to AWS WAF before requesting content from the S3 origin

C. Configure a security group that allows Amazon CloudFront IP addresses to access Amazon S3 only

D. Configure Amazon CloudFront and Amazon S3 to use an origin access identity (OAI) to restrict access to the S3 bucke

E. Enable AWS WAF on the distribution

View answer

Correct Answer: D

Question #16

A company has deployed a server less application that invokes an AWS Lambda function when new documents are uploaded to an Amazon S3 bucket The application uses the Lambda function to process the documents After a recent marketing campaign the company noticed that the application did not process many of The documents What should a solutions architect do to improve the architecture of this application?

A. Set the Lambda function's runtime timeout value to 15 minutes

B. Configure an S3 bucket replication policy Stage the documents m the S3 bucket for later processing

C. Deploy an additional Lambda function Load balance the processing of the documents across the two Lambda functions

D. Create an Amazon Simple Queue Service (Amazon SOS) queue Send the requests to the queue Configure the queue as an event source for Lambda

View answer

Correct Answer: C

Question #17

A company wants to build a scalable key management Infrastructure to support developers who need to encrypt data in their applications. What should a solutions architect do to reduce the operational burden?

A. Use multifactor authentication (MFA) to protect the encryption keys

B. Use AWS Key Management Service (AWS KMS) to protect the encryption keys

C. Use AWS Certificate Manager (ACM) to create, store, and assign the encryption keys

D. Use an IAM policy to limit the scope of users who have access permissions to protect the encryption keys

View answer

Correct Answer: B

Question #18

A company hosts a marketing website in an on-premises data center. The website consists of static documents and runs on a single server. An administrator updates the website content infrequently and uses an SFTP client to upload new documents. The company decides to host its website on AWS and to use Amazon CloudFront. The company's solutions architect creates a CloudFront distribution. The solutions architect must design the most cost-effective and resilient architecture for website hosting to serve as the

A. Create a virtual server by using Amazon Lightsai

B. Configure the web server in the Lightsail instance

C. Create an AWS Auto Scaling group for Amazon EC2 instance

D. Use an Application Load Balancer

E. Create a private Amazon S3 bucke

F. Use an S3 bucket policy to allow access from a CloudFront origin access identity (OAI)

View answer

Correct Answer: A

Question #19

A company has an Amazon S3 bucket that contains critical data. The company must protect the data from accidental deletion. Which combination of steps should a solutions architect take to meet these requirements? (Choose two.)

A. Enable versioning on the S3 bucket

B. Enable MFA Delete on the S3 bucket

C. Create a bucket policy on the S3 bucket

D. Enable default encryption on the S3 bucket

E. Create a lifecycle policy for the objects in the S3 bucket

View answer

Correct Answer: C

Question #20

A solutions architect is using Amazon S3 to design the storage architecture of a new digital media application. The media files must be resilient to the loss of an Availability Zone Some files are accessed frequently while other files are rarely accessed in an unpredictable pattern. The solutions architect must minimize the costs of storing and retrieving the media files. Which storage option meets these requirements?

A. S3 Standard

B. S3 Intelligent-Tiering

C. S3 Standard-Infrequent Access {S3 Standard-IA)

D. S3 One Zone-Infrequent Access (S3 One Zone-IA)

View answer

Correct Answer: C

Question #21

A company wants to manage Amazon Machine Images (AMIs). The company currently copies AMIs to the same AWS Region where the AMIs were created. The company needs to design an application that captures AWS API calls and sends alerts whenever the Amazon EC2 Createlmage API operation is called within the company's account. Which solution will meet these requirements with the LEAST operational overhead?

A. Create an AWS Lambda function to query AWS CloudTrail logs and to send an alert when a Createlmage API call is detected

B. Configure AWS CloudTrail with an Amazon Simple Notification Service {Amazon SNS) notification that occurs when updated logs are sent to Amazon S3

C. Create an Amazon EventBridge (Amazon CloudWatch Events) rule for the Createlmage API call

D. Configure an Amazon Simple Queue Service (Amazon SQS) FIFO queue as a target for AWS CloudTrail log

E. Create an AWS Lambda function to send an alert to an Amazon Simple Notification Service (Amazon SNS) topic when a Createlmage API call is detected

View answer

Correct Answer: A

Question #22

A company has a website hosted on AWS. The website is behind an Application Load Balancer (ALB) that is configured to handle HTTP and HTTPS separately. The company wants to forward all requests to the website so that the requests will use HTTPS. What should a solutions architect do to meet this requirement?

A. Update the ALB's network ACL to accept only HTTPS traffic

B. Create a rule that replaces the HTTP in the URL with HTTPS

C. Create a listener rule on the ALB to redirect HTTP traffic to HTTPS

D. Replace the ALB with a Network Load Balancer configured to use Server Name Indication (SNI)

View answer

Correct Answer: A

Question #23

A company has thousands of edge devices that collectively generate 1 TB of status alerts each day. Each alert is approximately 2 KB in size. A solutions architect needs to implement a solution to ingest and store the alerts for future analysis. The company wants a highly available solution. However, the company needs to minimize costs and does not want to manage additional infrastructure. Ad ditionally, the company wants to keep 14 days of data available for immediate analysis and archive any data older tha

A. Create an Amazon Kinesis Data Firehose delivery stream to ingest the alerts Configure the Kinesis Data Firehose stream to deliver the alerts to an Amazon S3 bucket Set up an S3 Lifecycle configuration to transition data to Amazon S3 Glacier after 14 days

B. Launch Amazon EC2 instances across two Availability Zones and place them behind an Elastic Load Balancer to ingest the alerts Create a script on the EC2 instances that will store tne alerts m an Amazon S3 bucket Set up an S3 Lifecycle configuration to transition data to Amazon S3 Glacier after 14 days

C. Create an Amazon Kinesis Data Firehose delivery stream to ingest the alerts Configure the Kinesis Data Firehose stream to deliver the alerts to an Amazon Elasticsearch Service (Amazon ES) duster Set up the Amazon ES cluster to take manual snapshots every day and delete data from the duster that is older than 14 days

D. Create an Amazon Simple Queue Service (Amazon SQS i standard queue to ingest the alerts and set the message retention period to 14 days Configure consumers to poll the SQS queue check the age of the message and analyze the message data as needed If the message is 14 days old the consumer should copy the message to an Amazon S3 bucket and delete the message from the SQS queue

View answer

Correct Answer: C

Question #24

A company is planning to build a high performance computing (HPC) workload as a service solution that Is hosted on AWS A group of 16 AmazonEC2Ltnux Instances requires the lowest possible latency for node-to-node communication. The instances also need a shared block device volume for high-performing storage. Which solution will meet these requirements?

A. Use a duster placement grou

B. Attach a single Provisioned IOPS SSD Amazon Elastic Block Store (Amazon E BS) volume to all the instances by using Amazon EBS Multi-Attach

C. Use a cluster placement grou

D. Create shared 'lie systems across the instances by using Amazon Elastic File System (Amazon EFS)

E. Use a partition placement grou

F. Create shared tile systems across the instances by using Amazon Elastic File System (Amazon EFS)

View answer

Correct Answer: D

Question #25

A company is running a business-critical web application on Amazon EC2 instances behind an Application Load Balancer. The EC2 instances are in an Auto Scaling group. The application uses an Amazon Aurora PostgreSQL database that is deployed in a single Availability Zone. The company wants the application to be highly available with minimum downtime and minimum loss of data. Which solution will meet these requirements with the LEAST operational effort?

A. Place the EC2 instances in different AWS Region

B. Use Amazon Route 53 health checks to redirect traffi

C. Use Aurora PostgreSQL Cross-Region Replication

D. Configure the Auto Scaling group to use multiple Availability Zone

E. Configure the database as Multi-A

F. Configure an Amazon RDS Proxy instance for the database

View answer

Correct Answer: AC

Question #26

A company is migrating an application from on-premises servers to Amazon EC2 instances. As part of the migration design requirements, a solutions architect must implement infrastructure metric alarms. The company does not need to take action if CPU utilization increases to more than 50% for a short burst of time. However, if the CPU utilization increases to more than 50% and read IOPS on the disk are high at the same time, the company needs to act as soon as possible. The solutions architect also must reduc

A. Create Amazon CloudWatch composite alarms where possible

B. Create Amazon CloudWatch dashboards to visualize the metrics and react to issues quickly

C. Create Amazon CloudWatch Synthetics canaries to monitor the application and raise an alarm

D. Create single Amazon CloudWatch metric alarms with multiple metric thresholds where possible

View answer

Correct Answer: B

Question #27

A company runs its ecommerce application on AWS. Every new order is published as a message in a RabbitMQ queue that runs on an Amazon EC2 instance in a single Availability Zone. These messages are processed by a different application that runs on a separate EC2 instance. This application stores the details in a PostgreSQL database on another EC2 instance. All the EC2 instances are in the same Availability Zone. The company needs to redesign its architecture to provide the highest availability with the least

A. Migrate the queue to a redundant pair (active/standby) of RabbitMQ instances on Amazon M

B. Create a Multi-AZ Auto Scaling group (or EC2 instances that host the applicatio

C. Create another Multi-AZAuto Scaling group for EC2 instances that host the PostgreSQL database

D. Migrate the queue to a redundant pair (active/standby) of RabbitMQ instances on Amazon M

E. Create a Multi-AZ Auto Scaling group for EC2 instances that host the applicatio

F. Migrate the database to run ona Multi-AZ deployment of Amazon RDS for PostgreSQL

View answer

Correct Answer: C

Question #28

An application that is hosted on Amazon EC2 instances needs to access an Amazon S3 bucket Traffic must not traverse the internet How should a solutions architect configure access to meet these requirements?

A. Create a private hosted zone by using Amazon Route 53

B. Set up a gateway VPC endpoint for Amazon S3 in the VPC

C. Configure the EC2 instances to use a NAT gateway to access the S3 bucket

D. Establish an AWS Site-to-Site VPN connection between the VPC and the S3 bucket

View answer

Correct Answer: CE

Question #29

A company needs to store its accounting records in Amazon S3. The records must be immediately accessible for 1 year and then must be archived for an additional 9 years. No one at the company, including administrative users and root users, can be able to delete the records during the entire 10-year period. The records must be stored with maximum resiliency. Which solution will meet these requirements?

A. Store the records in S3 Glacier for the entire 10-year perio

B. Use an access control policy to deny deletion of the records for a period of 10 years

C. Store the records by using S3 Intelligent-Tierin

D. Use an IAM policy to deny deletion of the records

E. Use an S3 Lifecycle policy to transition the records from S3 Standard to S3 Glacier Deep Archive after 1 yea

F. Use S3 Object Lock in compliance mode for a period of 10 years

View answer

Correct Answer: A

Question #30

A hospital wants to create digital copies for its large collection of historical written records. The hospital will continue to add hundreds of new documents each day. The hospital's data team will scan the documents and will upload the documents to the AWS Cloud. A solutions architect must implement a solution to analyze the documents, extract the medical information, and store the documents so that an application can run SQL queries on the data. The solution must maximize scalability and operational effic

A. Write the document information to an Amazon EC2 instance that runs a MySQL database

B. Write the document information to an Amazon S3 bucke

C. Use Amazon Athena to query the data

D. Create an Auto Scaling group of Amazon EC2 instances to run a custom application that processes the scanned files and extracts the medical information

E. Create an AWS Lambda function that runs when new documents are uploade

F. Use Amazon Rekognition to convert the documents to raw tex G

View answer

Correct Answer: C

Question #31

A company is developing a file-sharing application that will use an Amazon S3 bucket for storage. The company wants to serve all the files through an Amazon CloudFront distribution. The company does not want the files to be accessible through direct navigation to the S3 URL. What should a solutions architect do to meet these requirements?

A. Write individual policies for each S3 bucket to grant read permission for only CloudFront access

B. Create an IAM use

C. Grant the user read permission to objects in the S3 bucke

D. Assign the user to CloudFront

E. Write an S3 bucket policy that assigns the CloudFront distribution ID as the Principal and assigns the target S3 bucket as the Amazon Resource Name (ARN)

F. Create an origin access identity (OAI)

View answer

Correct Answer: AD

Question #32

A company needs to create an Amazon Elastic Kubernetes Service (Amazon EKS) cluster to host a digital media streaming application. The EKS cluster will use a managed node group that is backed by Amazon Elastic Block Store (Amazon EBS) volumes for storage. The company must encrypt all data at rest by using a customer managed key that is stored in AWS Key Management Service (AWS KMS) Which combination of actions will meet this requirement with the LEAST operational overhead? (Select TWO.)

A. Use a Kubernetes plugin that uses the customer managed key to perform data encryption

B. After creation of the EKS cluster, locate the EBS volume

C. Enable encryption by using the customer managed key

D. Enable EBS encryption by default in the AWS Region where the EKS cluster will be create

E. Select the customer managed key as the default key

F. Create the EKS cluster Create an IAM role that has cuwlicy that grants permission to the customer managed ke G

View answer

Correct Answer: A

Question #33

A company uses a payment processing system that requires messages for a particular payment ID to be received in the same order that they were sent Otherwise, the payments might be processed incorrectly. Which actions should a solutions architect take to meet this requirement? (Select TWO.)

A. Write the messages to an Amazon DynamoDB table with the payment ID as the partition key

B. Write the messages to an Amazon Kinesis data stream with the payment ID as the partition key

C. Write the messages to an Amazon ElastiCache for Memcached cluster with the payment ID as the key

D. Write the messages to an Amazon Simple Queue Service (Amazon SQS) queue Set the message attribute to use the payment ID

E. Write the messages to an Amazon Simple Queue Service (Amazon SQS) FIFO queu

F. Set the message group to use the payment ID

View answer

Correct Answer: B

Question #34

A company wants to migrate its on-premises application to AWS. The application produces output files that vary in size from tens of gigabytes to hundreds of terabytes The application data must be stored in a standard file system structure The company wants a solution that scales automatically, is highly available, and requires minimum operational overhead. Which solution will meet these requirements?

A. Migrate the application to run as containers on Amazon Elastic Container Service (Amazon ECS) Use Amazon S3 for storage

B. Migrate the application to run as containers on Amazon Elastic Kubernetes Service (Amazon EKS) Use Amazon Elastic Block Store (Amazon EBS) for storage

C. Migrate the application to Amazon EC2 instances in a Multi-AZ Auto Scaling grou

D. Use Amazon Elastic File System (Amazon EFS) for storage

E. Migrate the application to Amazon EC2 instances in a Multi-AZ Auto Scaling grou

F. Use Amazon Elastic Block Store (Amazon EBS) for storage

View answer

Correct Answer: A

Question #35

A company needs to transfer 600 TB of data from its on-premises network-attached storage (NAS) system to the AWS Cloud. The data transfer must be complete within 2 weeks. The data is sensitive and must be encrypted in transit. The company's internet connection can support an upload speed of 100 Mbps. Which solution meets these requirements MOST cost-effectively?

A. Use Amazon S3 multi-part upload functionality to transfer the fees over HTTPS

B. Create a VPN connection between the on-premises NAS system and the nearest AWS Region Transfer the data over the VPN connection

C. Use the AWS Snow Family console to order several AWS Snowball Edge Storage Optimized devices Use the devices to transfer the data to Amazon S3

D. Set up a 10 Gbps AWS Direct Connect connection between the company location and (he nearest AWS Region Transfer the data over a VPN connection into the Region to store the data in Amazon S3

View answer

Correct Answer: D

Question #36

A company is storing sensitive user information in an Amazon S3 bucket The company wants to provide secure access to this bucket from the application tier running on Ama2on EC2 instances inside a VPC. Which combination of steps should a solutions architect take to accomplish this? (Select TWO.)

A. Configure a VPC gateway endpoint for Amazon S3 within the VPC

B. Create a bucket policy to make the objects to the S3 bucket public

C. Create a bucket policy that limits access to only the application tier running in the VPC

D. Create an IAM user with an S3 access policy and copy the IAM credentials to the EC2 instance

E. Create a NAT instance and have the EC2 instances use the NAT instance to access the S3 bucket

View answer

Correct Answer: D

Question #37

A company has an AWS Lambda function that needs read access to an Amazon S3 bucket that is located in the same AWS account. Which solution will meet these requirement in the MOST secure manner?

A. Apply an S3 bucket pokey that grants road access to the S3 bucket

B. Apply an IAM role to the Lambda function Apply an IAM policy to the role to grant read access to the S3 bucket

C. Embed an access key and a secret key In the Lambda function's coda to grant the required IAM permissions for read access to the S3 bucket

D. Apply an IAM role to the Lambda functio

E. Apply an IAM policy to the role to grant read access to all S3 buckets In the account

View answer

Correct Answer: C

Question #38

A gaming company is designing a highly available architecture. The application runs on a modified Linux kernel and supports only UDP-based traffic. The company needs the front-end tier to provide the best possible user experience. That tier must have low latency, route traffic to the nearest edge location, and provide static IP addresses for entry into the application endpoints. What should a solutions architect do to meet these requirements?

A. Configure Amazon Route 53 to forward requests to an Application Load Balance

B. Use AWS Lambda for the application in AWS Application Auto Scaling

C. Configure Amazon CloudFront to forward requests to a Network Load Balance

D. Use AWS Lambda for the application in an AWS Application Auto Scaling group

E. Configure AWS Global Accelerator to forward requests to a Network Load Balance

F. Use Amazon EC2 instances for the application in an EC2 Auto Scaling group

View answer

Correct Answer: D

Question #39

A company hosts its multi-tier applications on AWS. For compliance, governance, auditing, and security, the company must track configuration changes on its AWS resources and record a history of API calls made to these resources. What should a solutions architect do to meet these requirements?

A. Use AWS CloudTrail to track configuration changes and AWS Config to record API calls

B. Use AWS Config to track configuration changes and AWS CloudTrail to record API calls

C. Use AWS Config to track configuration changes and Amazon CloudWatch to record API calls

D. Use AWS CloudTrail to track configuration changes and Amazon CloudWatch to record API calls

View answer

Correct Answer: D

Question #40

A company stores its application logs in an Amazon CloudWatch Logs log group. A new policy requires the company to store all application logs in Amazon OpenSearch Service (Amazon Elasticsearch Service) in near-real time. Which solution will meet this requirement with the LEAST operational overhead?

A. Configure a CloudWatch Logs subscription to stream the logs to Amazon OpenSearch Service (Amazon Elasticsearch Service)

B. Create an AWS Lambda functio

C. Use the log group to invoke the function to write the logs to Amazon OpenSearch Service (Amazon Elasticsearch Service)

D. Create an Amazon Kinesis Data Firehose delivery strea

E. Configure the log group as the delivery stream's sourc

F. Configure Amazon OpenSearch Service (Amazon Elasticsearch Service) as the delivery stream's destination

View answer

Correct Answer: A

Question #41

A company has a data ingestion workflow that includes the following components: ? An Amazon Simple Notation Service (Amazon SNS) topic that receives notifications about new data deliveries ? An AWS Lambda function that processes and stores the data The ingestion workflow occasionally fails because of network connectivity issues. When tenure occurs the corresponding data is not ingested unless the company manually reruns the job. What should a solutions architect do to ensure that all notifications are event

A. Configure the Lambda function (or deployment across multiple Availability Zones

B. Modify me Lambda functions configuration to increase the CPU and memory allocations tor the (unction

C. Configure the SNS topic's retry strategy to increase both the number of retries and the wait time between retries

D. Configure an Amazon Simple Queue Service (Amazon SQS) queue as the on failure destination Modify the Lambda function to process messages in the queue

View answer

Correct Answer: C

Question #42

A company needs to keep user transaction data in an Amazon DynamoDB table. The company must retain the data for 7 years. What is the MOST operationally efficient solution that meets these requirements?

A. Use DynamoDB point-in-time recovery to back up the table continuously

B. Use AWS Backup to create backup schedules and retention policies for the table

C. Create an on-demand backup of the table by using the DynamoDB consol

D. Store the backup in an Amazon S3 bucke

E. Set an S3 Lifecycle configuration for the S3 bucket

F. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda functio G

View answer

Correct Answer: B

Question #43

A company hosts a two-tier application on Amazon EC2 instances and Amazon RDS. The application's demand varies based on the time of day. The load is minimal after work hours and on weekends. The EC2 instances run in an EC2 Auto Scaling group that is configured with a minimum of two instances and a maximum of five instances. The application must be available at all times, but the company is concerned about overall cost. Which solution meets the availability requirement MOST cost-effectively?

A. Use all EC2 Spot Instance

B. Stop the RDS database when it is not in use

C. Purchase EC2 Instance Savings Plans to cover five EC2 instance

D. Purchase an RDS Reserved DB Instance

E. Purchase two EC2 Reserved Instances Use up to three additional EC2 Spot Instances as neede

F. Stop the RDS database when it is not in use

View answer

Correct Answer: D

Question #44

A gaming company is moving its public scoreboard from a data center to the AWS Cloud. The company uses Amazon EC2 Windows Server instances behind an Application Load Balancer to host its dynamic application. The company needs a highly available storage solution for the application. The application consists of static files and dynamic server-side code. Which combination of steps should a solutions architect take to meet these requirements? (Select TWO.) '

A. Store the static files on Amazon S3

A. CloudFront to cache objects at the edge

A. Store the static files on Amazon S3

B. Store the server-side code on Amazon Elastic File System (Amazon EFS)

C. Store the server-side code on Amazon FSx for Windows File Serve

D. Mount the FSx for Windows File Server volume on each EC2 instance to share the files

E. Store the server-side code on a General Purpose SSD (gp2) Amazon Elastic Block Store (Amazon EBS) volum

F. Mount the EBS volume on each EC2 instance to share the files

View answer

Correct Answer: D

Question #45

A company hosts a containerized web application on a fleet of on-premises servers that process incoming requests. The number of requests is growing quickly. The on-premises servers cannot handle the increased number of requests. The company wants to move the application to AWS with minimum code changes and minimum development effort. Which solution will meet these requirements with the LEAST operational overhead?

A. Use AWS Fargate on Amazon Elastic Container Service (Amazon ECS) to run the containerized web application with Service Auto Scalin

B. Use an Application Load Balancer to distribute the incoming requests

C. Use two Amazon EC2 instances to host the containerized web applicatio

D. Use an Application Load Balancer to distribute the incoming requests

E. Use AWS Lambda with a new code that uses one of the supported language

F. Create multiple Lambda functions to support the loa G

View answer

Correct Answer: B

Question #46

A company manages its own Amazon EC2 instances that run MySQL databases. The company is manually managing replication and scaling as demand increases or decreases. The company needs a new solution that simplifies the process of adding or removing compute capacity to or from its database tier as needed. The solution also must offer improved performance, scaling, and durability with minimal effort from operations. Which solution meets these requirements?

A. Migrate the databases to Amazon Aurora Serverless for Aurora MySQL

B. Migrate the databases to Amazon Aurora Serverless for Aurora PostgreSQL

C. Combine the databases into one larger MySQL databas

D. Run the larger database on larger EC2 instances

E. Create an EC2 Auto Scaling group for the database tie

F. Migrate the existing databases to the new environment

View answer

Correct Answer: A

Question #47

A company is planning to move its data to an Amazon S3 bucket. The data must be encrypted when it is stored in the S3 bucket. Additionally, the encryption key must be automatically rotated every year. Which solution will meet these requirements with the LEAST operational overhead?

A. Move the data to the S3 bucke

B. Use server-side encryption with Amazon S3 managed encryption keys (SSE-S3)

C. Create an AWS Key Management Service {AWS KMS) customer managed ke

D. Enable automatic key rotatio

E. Set the S3 bucket's default encryption behavior to use the customer managed KMS ke

F. Move the data to the S3 bucket

View answer

Correct Answer: C

Question #48

A company receives 10 TB of instrumentation data each day from several machines located at a single factory. The data consists of JSON files stored on a storage area network (SAN) in an on-premises data center located within the factory. The company wants to send this data to Amazon S3 where it can be accessed by several additional systems that provide critical near-real-lime analytics. A secure transfer is important because the data is considered sensitive. Which solution offers the MOST reliable data tran

A. AWS DataSync over public internet

B. AWS DataSync over AWS Direct Connect

C. AWS Database Migration Service (AWS DMS) over public internet

D. AWS Database Migration Service (AWS DMS) over AWS Direct Connect

View answer

Correct Answer: B

Question #49

A gaming company has a web application that displays scores. The application runs on Amazon EC2 instances behind an Application Load Balancer. The application stores data in an Amazon RDS for MySQL database. Users are starting to experience long delays and interruptions that are caused by database read performance. The company wants to improve the user experience while minimizing changes to the application's architecture. What should a solutions architect do to meet these requirements?

A. Use Amazon ElastiCache in front of the database

B. Use RDS Proxy between the application and the database

C. Migrate the application from EC2 instances to AWS Lambda

D. Migrate the database from Amazon RDS for MySQL to Amazon DynamoDB

View answer

Correct Answer: C

Question #50

A media company is evaluating the possibility ot moving rts systems to the AWS Cloud The company needs at least 10 TB of storage with the maximum possible I/O performance for video processing. 300 TB of very durable storage for storing media content, and 900 TB of storage to meet requirements for archival media that is not in use anymore Which set of services should a solutions architect recommend to meet these requirements?

A. Amazon EBS for maximum performance, Amazon S3 for durable data storage, and Amazon S3 Glacier for archival storage

B. Amazon EBS for maximum performance, Amazon EFS for durable data storage and Amazon S3 Glacier for archival storage

C. Amazon EC2 instance store for maximum performanc

D. Amazon EFS for durable data storage and Amazon S3 for archival storage

E. Amazon EC2 Instance store for maximum performanc

F. Amazon S3 for durable data storage, and Amazon S3 Glacier for archival storage

View answer

Correct Answer: B

Question #51

A company wants to direct its users to a backup static error page if the company's primary website is unavailable. The primary website's DNS records are hosted in Amazon Route 53. The domain is pointing to an Application Load Balancer (ALB). The company needs a solution that minimizes changes and infrastructure overhead. Which solution will meet these requirements?

A. Update the Route 53 records to use a latency routing polic

B. Add a static error page that is hosted in an Amazon S3 bucket to the records so that the traffic is sent to the most responsive endpoints

C. Set up a Route 53 active-passive failover configuratio

D. Direct traffic to a static error page that is hosted in an Amazon S3 bucket when Route 53 health checks determine that the ALB endpoint is unhealthy

E. Set up a Route 53 active-active configuration with the ALB and an Amazon EC2 instance that hosts a static error page as endpoint

F. Configure Route 53 to send requests to the instance only if the health checks fail for the ALB

View answer

Correct Answer: A

Question #52

A company hosts an application on AWS Lambda functions mat are invoked by an Amazon API Gateway API The Lambda functions save customer data to an Amazon Aurora MySQL database Whenever the company upgrades the database, the Lambda functions fail to establish database connections until the upgrade is complete The result is that customer data Is not recorded for some of the event A solutions architect needs to design a solution that stores customer data that is created during database upgrades Which solution w

A. Provision an Amazon RDS proxy to sit between the Lambda functions and the database Configure the Lambda functions to connect to the RDS proxy

B. Increase the run time of me Lambda functions to the maximum Create a retry mechanism in the code that stores the customer data in the database

C. Persist the customer data to Lambda local storag

D. Configure new Lambda functions to scan the local storage to save the customer data to the database

E. Store the customer data m an Amazon Simple Queue Service (Amazon SOS) FIFO queue Create a new Lambda function that polls the queue and stores the customer data in the database

View answer

Correct Answer: C

Question #53

A company has a production web application in which users upload documents through a web interlace or a mobile app. According to a new regulatory requirement, new documents cannot be modified or deleted after they are stored. What should a solutions architect do to meet this requirement?

A. Store the uploaded documents in an Amazon S3 bucket with S3 Versioning and S3 Object Lock enabled

B. Store the uploaded documents in an Amazon S3 bucke

C. Configure an S3 Lifecycle policy to archive the documents periodically

D. Store the uploaded documents in an Amazon S3 bucket with S3 Versioning enabled Configure an ACL to restrict all access to read-only

E. Store the uploaded documents on an Amazon Elastic File System (Amazon EFS) volum

F. Access the data by mounting the volume in read-only mode

View answer

Correct Answer: C

Question #54

An application runs on Amazon EC2 instances across multiple Availability Zones The instances run in an Amazon EC2 Auto Scaling group behind an Application Load Balancer The application performs best when the CPU utilization of the EC2 instances is at or near 40%. What should a solutions architect do to maintain the desired performance across all instances in the group?

A. Use a simple scaling policy to dynamically scale the Auto Scaling group

B. Use a target tracking policy to dynamically scale the Auto Scaling group

C. Use an AWS Lambda function to update the desired Auto Scaling group capacity

D. Use scheduled scaling actions to scale up and scale down the Auto Scaling group

View answer

Correct Answer: A

Question #55

A company maintains a searchable repository of items on its website. The data is stored in an Amazon RDS for MySQL database table that contains more than 10 million rows The database has 2 TB of General Purpose SSD storage There are millions of updates against this data every day through the company's website The company has noticed that some insert operations are taking 10 seconds or longer The company has determined that the database storage performance is the problem Which solution addresses this perform

A. Change the storage type to Provisioned IOPS SSD

B. Change the DB instance to a memory optimized instance class

C. Change the DB instance to a burstable performance instance class

D. Enable Multi-AZ RDS read replicas with MySQL native asynchronous replication

View answer

Correct Answer: D

Question #56

A company uses 50 TB of data for reporting. The company wants to move this data from on premises to AWS A custom application in the company's data center runs a weekly data transformation job. The company plans to pause the application until the data transfer is complete and needs to begin the transfer process as soon as possible. The data center does not have any available network bandwidth for additional workloads A solutions architect must transfer the data and must configure the transformation job to co

A. Use AWS DataSync to move the data Create a custom transformation job by using AWS Glue

B. Order an AWS Snowcone device to move the data Deploy the transformation application to the device

C. Order an AWS Snowball Edge Storage Optimized devic

D. Copy the data to the devic

E. Create a custom transformation job by using AWS Glue

F. Order an AWS G

View answer

Correct Answer: AC

Question #57

A company runs a highly available image-processing application on Amazon EC2 instances in a single VPC The EC2 instances run inside several subnets across multiple Availability Zones. The EC2 instances do not communicate with each other However, the EC2 instances download images from Amazon S3 and upload images to Amazon S3 through a single NAT gateway The company is concerned about data transfer charges What is the MOST cost-effective way for the company to avoid Regional data transfer charges?

A. Launch the NAT gateway in each Availability Zone

B. Replace the NAT gateway with a NAT instance

C. Deploy a gateway VPC endpoint for Amazon S3

D. Provision an EC2 Dedicated Host to run the EC2 instances

View answer

Correct Answer: C

Question #58

A company has an application that generates a large number of files, each approximately 5 MB in size. The files are stored in Amazon S3. Company policy requires the files to be stored for 4 years before they can be deleted Immediate accessibility is always required as the files contain critical business data that is not easy to reproduce. The files are frequently accessed in the first 30 days of the object creation but are rarely accessed after the first 30 days Which storage solution is MOST cost-effective

A. Create an S3 bucket lifecycle policy to move Mm from S3 Standard to S3 Glacier 30 days from object creation Delete the Tiles 4 years after object creation

B. Create an S3 bucket lifecycle policy to move tiles from S3 Standard to S3 One Zone-infrequent Access (S3 One Zone-IA] 30 days from object creatio

C. Delete the fees 4 years after object creation

D. Create an S3 bucket lifecycle policy to move files from S3 Standard-infrequent Access (S3 Standard-lA) 30 from object creatio

E. Delete the ties 4 years after object creation

F. Create an S3 bucket Lifecycle policy to move files from S3 Standard to S3 Standard-Infrequent Access (S3 Standard-IA) 30 days from object creation Move the files to S3 Glacier 4 years after object carton

View answer

Correct Answer: AB

Question #59

A research laboratory needs to process approximately 8 TB of data The laboratory requires sub-millisecond latencies and a minimum throughput of 6 GBps for the storage subsystem Hundreds of Amazon EC2 instances that run Amazon Linux will distribute and process the data Which solution will meet the performance requirements?

A. Create an Amazon FSx for NetApp ONTAP file system Set each volume's tiering policy to ALL Import the raw data into the file system Mount the file system on the EC2 instances

B. Create an Amazon S3 bucket to stofe the raw data Create an Amazon FSx for Lustre file system that uses persistent SSD storage Select the option to import data from and export data to Amazon S3 Mount the file system on the EC2 instances

C. Create an Amazon S3 bucket to store the raw data Create an Amazon FSx for Lustre file system that uses persistent HDD storage Select the option to import data from and export data to Amazon S3 Mount the file system on the EC2 instances

D. Create an Amazon FSx for NetApp ONTAP file system Set each volume's tienng policy to NON

E. Import the raw data into the file system Mount the file system on the EC2 instances

View answer

Correct Answer: C

Question #60

A company has an ecommerce checkout workflow that writes an order to a database and calls a service to process the payment. Users are experiencing timeouts during the checkout process. When users resubmit the checkout form, multiple unique orders are created for the same desired transaction. How should a solutions architect refactor this workflow to prevent the creation of multiple orders?

A. Configure the web application to send an order message to Amazon Kinesis Data Firehos

B. Set the payment service to retrieve the message from Kinesis Data Firehose and process the order

C. Create a rule in AWS CloudTrail to invoke an AWS Lambda function based on the logged application path request Use Lambda to query the database, call the payment service, and pass in the order information

D. Store the order in the databas

E. Send a message that includes the order number to Amazon Simple Notification Service (Amazon SNS)

F. retrieve the message, and process the order

View answer

Correct Answer: A

Question #61

A company has deployed a Java Spring Boot application as a pod that runs on Amazon Elastic Kubernetes Service (Amazon EKS) in private subnets. The application needs to write data to an Amazon DynamoDB table. A solutions architect must ensure that the application can interact with the DynamoDB table without exposing traffic to the internet. Which combination of steps should the solutions architect take to accomplish this goal? (Choose two.)

A. Attach an IAM role that has sufficient privileges to the EKS pod

B. Attach an IAM user that has sufficient privileges to the EKS pod

C. Allow outbound connectivity to the DynamoDB table through the private subnets’ network ACLs

D. Create a VPC endpoint for DynamoDB

E. Embed the access keys in the Java Spring Boot code

View answer

Correct Answer: D

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now

SAA-C03 Exam Questions 2024 Updated: Get Ready for Exams, AWS Certified Solutions Architect – Associate | SPOTO

View The Updated SAA-C03 Exam Questions

View The Updated AWS Exam Questions

View Answers after Submission

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE! Get Now

SAA-C03 Exam Questions 2024 Updated: Get Ready for Exams, AWS Certified Solutions Architect – Associate | SPOTO

View The Updated SAA-C03 Exam Questions

View The Updated AWS Exam Questions

View Answers after Submission

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now