Quiz IT certification exam

Question 1

The customers of a finance company request appointments with financial advisors by sending text messages. A web application that runs on Amazon EC2 instances accepts the appointment requests. The text messages are published to an Amazon Simple Queue Service (Amazon SQS) queue through the web application. Another application that runs on EC2 instances then sends meeting invitations and meeting confirmation email messages to the customers. After successful scheduling, this application stores the meeting information in an Amazon DynamoDB database. As the company expands, customers report that their meeting invitations are taking longer to arrive.

What should a solutions architect recommend to resolve this issue?

Become a Premium Member for full access

Unlock Premium Member

Accepted Answer

Add an Auto Scaling group for the application that sends meeting invitations. Configure the Auto Scaling group to scale based on the depth of the SQS queue.

Answer

Add a DynamoDB Accelerator (DAX) cluster in front of the DynamoDB database.

Answer

Add an Amazon API Gateway API in front of the web application that accepts the appointment requests.

Answer

Add an Amazon CloudFront distribution. Set the origin as the web application that accepts the appointment requests.

Question 2

An online retail company has more than 50 million active customers and receives more than 25,000 orders each day. The company collects purchase data for customers and stores this data in Amazon S3. Additional customer data is stored in Amazon RDS.The company wants to make all the data available to various teams so that the teams can perform analytics. The solution must provide the ability to manage fine-grained permissions for the data and must minimize operational overhead. Which solution will meet these requirements?

Accepted Answer

Create a data lake by using AWS Lake Formation. Create an AWS Glue JDBC connection to Amazon RDS. Register the S3 bucket in Lake Formation. Use Lake Formation access controls to limit access.

Answer

Migrate the purchase data to write directly to Amazon RDS. Use RDS access controls to limit access.

Answer

Schedule an AWS Lambda function to periodically copy data from Amazon RDS to Amazon S3.Create an AWS Glue crawler. Use Amazon Athena to query the data. Use S3 policies to limit access.

Answer

Create an Amazon Redshift cluster. Schedule an AWS Lambda function to periodically copy data from Amazon S3 and Amazon RDS to Amazon Redshift. Use Amazon Redshift access controls to limit access.

Question 3

A company has a three-tier environment on AWS that ingests sensor data from its users' devices The traffic flows through a Network Load Balancer (NIB) then to Amazon EC2 instances for the web tier and finally to EC2 instances for the application tier that makes database calls What should a solutions architect do to improve the security of data in transit to the web tier?

Accepted Answer

Configure a TLS listener and add the server certificate on the NLB

Answer

Configure AWS Shield Advanced and enable AWS WAF on the NLB

Answer

Change the load balancer to an Application Load Balancer and attach AWS WAF to it

Answer

Encrypt the Amazon Elastic Block Store (Amazon EBS) volume on the EC2 instances using AWS Key Management Service (AWS KMS)

Question 4

An ecommerce company stores terabytes of customer data in the AWS Cloud. The data contains personally identifiable information (Pll). The company wants to use the data in three applications. Only one of the applications needs to process the Pll. The Pll must be removed before the other two applications process the data. Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Store the data in an Amazon S3 bucket. Process and transform the data by using S3 Object Lambda before returning the data to the requesting application.

Answer

Store the data in an Amazon DynamoDB table. Create a proxy application layer to intercept and process the data that each application requests.

Answer

Process the data and store the transformed data in three separate Amazon S3 buckets so that each application has its own custom dataset. Point each application to its respective S3 bucket.

Answer

Process the data and store the transformed data in three separate Amazon DynamoDB tables so that each application has its own custom dataset. Point each application to its respective DynamoDB table.

Question 5

A company uses Amazon API Gateway to run a private gateway with two REST APIs in the same VPC.The BuyStock RESTful web service calls the CheckFunds RESTful web service to ensure that enough funds are available before a stock can be purchased. The company has noticed in the VPC flow logs that the BuyStock RESTful web service calls the CheckFunds RESTful web service over the internet instead of through the VPC. A solutions architect must implement a solution so that the APIs communicate through the VPC.Which solution will meet these requirements with the FEWEST changes to the code?(Select Correct Option/s and give detailed explanation from AWS Certified Solutions Architect Associate (SAA-C03) Study Manual or documents)

Accepted Answer

Use an interface endpoint.

Answer

Add an X-APl-Key header in the HTTP header for authorization.

Answer

Use a gateway endpoint.

Answer

Question 6

A solutions architect needs to optimize storage costs. The solutions architect must identify any Amazon S3 buckets that are no longer being accessed or are rarely accessed. Which solution will accomplish this goal with the LEAST operational overhead?

Accepted Answer

Analyze bucket access patterns by using the S3 Storage Lens dashboard for advanced activity metrics.

Answer

Analyze bucket access patterns by using the S3 dashboard in the AWS Management Console.

Answer

Turn on the Amazon CloudWatch BucketSizeBytes metric for buckets. Analyze bucket access patterns by using the metrics data with Amazon Athena.

Answer

Turn on AWS CloudTrail for S3 object monitoring. Analyze bucket access patterns by using CloudTrail logs that are integrated with Amazon CloudWatch Logs.

Question 7

A company has multiple AWS accounts that use consolidated billing. The company runs several active high performance Amazon RDS for Oracle On-Demand DB instances for 90 days. The company's finance team has access to AWS Trusted Advisor in the consolidated billing account and all other AWS accounts.The finance team needs to use the appropriate AWS account to access the Trusted Advisor check recommendations for RDS. The finance team must review the appropriate Trusted Advisor check to reduce RDS costs. Which combination of steps should the finance team take to meet these requirements? (Select TWO.)

Accepted Answer

Use the Trusted Advisor recommendations from the consolidated billing account to see all RDS instance checks at the same time.

Accepted Answer

Review the Trusted Advisor check for Amazon RDS Reserved Instance Optimization.

Answer

Use the Trusted Advisor recommendations from the account where the RDS instances are running.

Answer

Review the Trusted Advisor check for Amazon RDS Idle DB Instances.

Answer

Review the Trusted Advisor check for Amazon Redshift Reserved Node Optimization.

Question 8

A company is designing the network for an online multi-player game. The game uses the UDP networking protocol and will be deployed in eight AWS Regions. The network architecture needs to minimize latency and packet loss to give end users a high-quality gaming experience.Which solution will meet these requirements?

Accepted Answer

Set up AWS Global Accelerator with UDP listeners and endpoint groups in each Region.

Answer

Set up a transit gateway in each Region. Create inter-Region peering attachments between each transit gateway.

Answer

Set up Amazon CloudFront with UDP turned on. Configure an origin in each Region.

Answer

Set up a VPC peering mesh between each Region. Turn on UDP for each VPC.

Question 9

A company hosts a serverless application on AWS. The application uses Amazon API Gateway, AWS Lambda, and an Amazon RDS for PostgreSQL database. The company notices an increase in application errors that result from database connection timeouts during times Of peak traffic or unpredictable traffic. The company needs a solution that reduces the application failures with the least amount of change to the code. What should a solutions architect do to meet these requirements?

Accepted Answer

Enable RDS Proxy on the RDS DB instance.

Answer

Reduce the Lambda concurrency rate.

Answer

Resize the RDS DB instance class to accept more connections.

Answer

Migrate the database to Amazon DynamoDB with on-demand scaling.

Question 10

A hospital needs to store patient records in an Amazon S3 bucket. The hospital's compliance team must ensure that all protected health information (PHI) is encrypted in transit and at rest. The compliance team must administer the encryption key for data at rest.Which solution will meet these requirements?

Accepted Answer

Use the aws:SecureTransport condition on S3 bucket policies to allow only encrypted connections over HTTPS (TLS). Configure default encryption for each S3 bucket to use server-side encryption with AWS KMS keys (SSE-KMS). Assign the compliance team to manage the KMS keys.

Answer

Create a public SSL/TLS certificate in AWS Certificate Manager (ACM). Associate the certificate with Amazon S3. Configure default encryption for each S3 bucket to use server-side encryption with AWS KMS keys (SSE-KMS). Assign the compliance team to manage the KMS keys.

Answer

Use the aws:SecureTransport condition on S3 bucket policies to allow only encrypted connections over HTTPS (TLS). Configure default encryption for each S3 bucket to use server-side encryption with S3 managed encryption keys (SSE-S3). Assign the compliance team to manage the SSE-S3 keys.

Answer

Use the aws:SecureTransport condition on S3 bucket policies to allow only encrypted connections over HTTPS (TLS). Use Amazon Macie to protect the sensitive data that is stored in Amazon S3. Assign the compliance team to manage Macie.

Question 11

A social media company runs its application on Amazon EC2 instances behind an Application Load Balancer (ALB). The ALB is the origin for an Amazon CloudFront distribution. The application has more than a billion images stored in an Amazon S3 bucket and processes thousands of images each second. The company wants to resize the images dynamically and serve appropriate formats to clients.Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Use a Lambda@Edge function with an external image management library. Associate the Lambda@Edge function with the CloudFront behaviors that serve the images.

Answer

Install an external image management library on an EC2 instance. Use the image management library to process the images.

Answer

Create a CloudFront origin request policy. Use the policy to automatically resize images and to serve the appropriate format based on the User-Agent HTTP header in the request.

Answer

Create a CloudFront response headers policy. Use the policy to automatically resize images and to serve the appropriate format based on the User-Agent HTTP header in the request.

Question 12

A company has a production workload that is spread across different AWS accounts in various AWS Regions. The company uses AWS Cost Explorer to continuously monitor costs and usage. The company wants to receive notifications when the cost and usage spending of the workload is unusual.Which combination of steps will meet these requirements? (Select TWO.)

Accepted Answer

In ys AWS accounts where the production workload is running, create a linked account monitor by using AWS Cost Anomaly Detection in the AWS Cost Management console

Accepted Answer

Create a subscription with the required threshold and notify the company by using weekly summaries.

Answer

In the AWS accounts where the production workload is running, create a linked account budget by using Cost Explorer in the AWS Cost Management console

Answer

In the AWS accounts where the production workload is running, create a Cost and Usage Report by using Cost Anomaly Detection in the AWS Cost Management console.

Answer

Create a report and send email messages to notify the company on a weekly basis.

Question 13

A company stores raw collected data in an Amazon S3 bucket. The data is used for several types of analytics on behalf of the company's customers. The type of analytics requested to determines the access pattern on the S3 objects.The company cannot predict or control the access pattern. The company wants to reduce its S3 costs.which solution will meet these requirements?

Accepted Answer

Use S3 Lifecycle rules for transition objects from S3 Standard to S3 Intelligent-Tiering.

Answer

Use S3 replication to transition infrequently accessed objects to S3 Standard-Infrequent Access (S3 Standard-1A)

Answer

Use S3 Lifecycle rules to transition objects from S3 Standard to Standard-Infrequent Access (S3 Standard-1A).

Answer

Use S3 Inventory to identify and transition objects that have not been accessed from S3 Standard to S3 Intelligent-Tiering.

Question 14

A company has applications hosted on Amazon EC2 instances with IPv6 addresses. The applications must initiate communications with other external applications using the internet.However, the company's security policy states that any external service cannot initiate a connection to the EC2 instances.What should a solutions architect recommend to resolve this issue?

Accepted Answer

Create an egress-only internet gateway and make it the destination of the subnet's route table.

Answer

Create a NAT gateway and make it the destination of the subnet's route table.

Answer

Create an internet gateway and make it the destination of the subnet's route table

Answer

Create a virtual private gateway and make it the destination of the subnet's route table.

Question 15

A company is making a prototype of the infrastructure for its new website by manually provisioning the necessary infrastructure. This infrastructure includes an Auto Scaling group, an Application Load Balancer, and an Amazon RDS database. After the configuration has been thoroughly validated, the company wants the capability to immediately deploy the infrastructure for development and production use in two Availability Zones in an automated fashion.What should a solutions architect recommend to meet these requirements?

Accepted Answer

Define the infrastructure as a template by using the prototype infrastructure as a guide. Deploy the infrastructure with AWS CloudFormation

Answer

Use AWS Systems Manager to replicate and provision the prototype infrastructure in two Availability Zones.

Answer

Use AWS Config to record the inventory of resources that are used in the prototype infrastructure. Use AWS Config to deploy the prototype infrastructure into two Availability Zones.

Answer

Use AWS Elastic Beanstalk and configure it to use an automated reference to the prototype infrastructure to automatically deploy new environments in two Availability Zones

Question 16

A company is developing a mobile gaming app in a single AWS Region. The app runs on multiple Amazon EC2 instances in an Auto Scaling group. The company stores the app data in Amazon DynamoDB. The app communicates by using TCP traffic and UDP traffic between the users and the servers. The application will be used globally. The company wants to ensure the lowest possible latency for all users.Which solution will meet these requirements?

Accepted Answer

Use AWS Global Accelerator to create an accelerator. Create a Network Load Balancer (NLB) behind an accelerator endpoint that uses Global Accelerator integration and listening on the TCP and UDP ports. Update the Auto Scaling group to register instances on the NLB

Answer

Use AWS Global Accelerator to create an accelerator. Create an Application Load Balancer (ALB) behind an accelerator endpoint that uses Global Accelerator integration and listening on the TCP and UDP ports. Update the Auto Scaling group to register instances on the ALB.

Answer

Create an Amazon CloudFront content delivery network (CDN) endpoint. Create a Network Load Balancer (NLB) behind the endpoint and listening on the TCP and UDP ports. Update the Auto Scaling group to register instances on the NLB. Update CloudFront to use the NLB as the origin.

Answer

Create an Amazon Cloudfront content delivery network (CDN) endpoint. Create an Application Load Balancer (ALB) behind the endpoint and listening on the TCP and UDP ports. Update the Auto Scaling group to register instances on the ALB. Update CloudFront to use the ALB as the origin

Question 17

A business application is hosted on Amazon EC2 and uses Amazon S3 for encrypted object storage. The chief information security officer has directed that no application traffic between the two services should traverse the public internet.Which capability should the solutions architect use to meet the compliance requirements?

Accepted Answer

VPC endpoint

Answer

AWS Key Management Service (AWS KMS)

Answer

Private subnet

Answer

Virtual private gateway

Question 18

A company wants to securely exchange data between its software as a service (SaaS) application Salesforce account and Amazon S3. The company must encrypt the data at rest by using AWS Key Management Service (AWS KMS) customer managed keys (CMKs). The company must also encrypt the data in transit. The company has enabled API access for the Salesforce account.Which solution will meet these requirements with the LEAST development effort?

Accepted Answer

Create Amazon AppFlow flows to transfer the data securely from Salesforce to Amazon S3.

Answer

Create AWS Lambda functions to transfer the data securely from Salesforce to Amazon S3.

Answer

Create an AWS Step Functions workflow Define the task to transfer the data securely from Salesforce to Amazon S3.

Answer

Create a custom connector for Salesforce to transfer the data securely from Salesforce to Amazon S3.

Question 19

A company has multiple AWS accounts for development work. Some staff consistently use oversized Amazon EC2 instances, which causes the company to exceed the yearly budget for the development accounts The company wants to centrally restrict the creation of AWS resources in these accountsWhich solution will meet these requirements with the LEAST development effort?

Accepted Answer

Use AWS Organizations to organize the accounts into organizational units (OUs). Define and attach a service control policy (SCP) to control the usage of EC2 instance types.

Answer

Develop AWS Systems Manager templates that use an approved EC2 creation process. Use the approved Systems Manager templates to provision EC2 instances.

Answer

Configure an Amazon EventBridge rule that invokes an AWS Lambda function when an EC2 instance is created. Stop disallowed EC2 instance types.

Answer

Set up AWS Service Catalog products for the staff to create the allowed EC2 instance types Ensure that staff can deploy EC2 instances only by using the Service Catalog products.

Question 20

A company runs container applications by using Amazon Elastic Kubernetes Service (Amazon EKS). The company's workload is not consistent throughout the day The company wants Amazon EKS to scale in and out according to the workload.Which combination of steps will meet these requirements with the LEAST operational overhead? {Select TWO.)

Accepted Answer

Use the Kubernetes Metrics Server to activate horizontal pod autoscaling.

Accepted Answer

Use the Kubernetes Cluster Autoscaler to manage the number of nodes in the cluster.

Answer

Use an AWS Lambda function to resize the EKS cluster

Answer

Use Amazon API Gateway and connect it to Amazon EKS

Answer

Use AWS App Mesh to observe network activity.

Question 21

A company has a mobile chat application with a data store based in Amazon uynamoUb. users would like new messages to be read with as little latency as possible A solutions architect needs to design an optimal solution that requires minimal application changes.Which method should the solutions architect select?

Accepted Answer

Configure Amazon DynamoDB Accelerator (DAX) for the new messages table. Update the code to use the DAXendpoint.

Answer

Add DynamoDB read repticas to handle the increased read load. Update the application to point to the read endpoint for the read replicas.

Answer

Double the number of read capacity units for the new messages table in DynamoDB. Continue to use the existing DynamoDB endpoint.

Answer

Add an Amazon ElastiCache for Redis cache to the application stack. Update the application to point to the Redis cache endpoint instead of DynamoDB.

Question 22

A company needs to integrate with a third-party data feed. The data feed sends a webhook to notifyan external service when new data is ready for consumption A developer wrote an AWS Lambfefunction to retrieve data when the company receives a webhook callback The developer must makethe Lambda function available for the third party to call.Which solution will meet these requirements with the MOST operational efficiency?

Accepted Answer

Create a function URL for the Lambda function. Provide the Lambda function URL to the third party for the webhook.

Answer

Deploy an Application Load Balancer (ALB) in front of the Lambda function. Provide the ALB URL to the third party for the webhook

Answer

Create an Amazon Simple Notification Service (Amazon SNS) topic. Attach the topic to the Lambda function. Provide the public hostname of the SNS topic to the third party for the webhook.

Answer

Create an Amazon Simple Queue Service (Amazon SQS) queue. Attach the queue to the Lambda function. Provide the public hostname of the SQS queue to the third party for the webhook.

Question 23

A company wants to move from many standalone AWS accounts to a consolidated, multi-account architecture The company plans to create many new AWS accounts for different business units. The company needs to authenticate access to these AWS accounts by using a centralized corporate directory service.Which combination of actions should a solutions architect recommend to meet these requirements? (Select TWO.)

Accepted Answer

Create a new organization in AWS Organizations with all features turned on. Create the new AWS accounts in the organization.

Accepted Answer

Set up AWS IAM Identity Center (AWS Single Sign-On) in the organization. Configure IAM Identity Center, and integrate it with the company's corporate directory service.

Answer

Set up an Amazon Cognito identity pool. Configure AWS IAM Identity Center (AWS Single Sign-On) to accept Amazon Cognito authentication.

Answer

Configure a service control policy (SCP) to manage the AWS accounts. Add AWS IAM Identity Center (AWS Single Sign-On) to AWS Directory Service.

Answer

Create a new organization in AWS Organizations. Configure the organization's authentication mechanism to use AWS Directory Service directly.

Question 24

A group requires permissions to list an Amazon S3 bucket and delete objects from that bucket An administrator has created the following IAM policy to provide access to the bucket and applied that policy to the group. The group is not able to delete objects in the bucket. The company follows least-privilege access rules. Amazon SAA-C03 image Question 424 5335 09162024005823000000

Amazon SAA-C03 image Question 424 5335 09162024005823000000

A)

B)

C)

Accepted Answer

Option D

Answer

Option A

Answer

Option B

Answer

Option C

Question 25

A solutions architect is designing a REST API in Amazon API Gateway for a cash payback service The application requires 1 GB of memory and 2 GB of storage for its computation resources. The application will require that the data is in a relational format.Which additional combination of AWS services will meet these requirements with the LEAST administrative effort? {Select TWO.)

Accepted Answer

AWS Lambda

Accepted Answer

Amazon RDS

Answer

Amazon EC2

Answer

Amazon DynamoDB

Answer

Amazon Elastic Kubernetes Services (Amazon EKS)

Question 26

A company has resources across multiple AWS Regions and accounts. A newly hired solutions architect discovers a previous employee did not provide details about the resources invent^. The solutions architect needs to build and map the relationship details of the various workloads across all accounts.Which solution will meet these requirements in the MOST operationally efficient way?

Accepted Answer

Use Workload Discovery on AWS to generate architecture diagrams of the workloads.

Answer

Use AWS Systems Manager Inventory to generate a map view from the detailed view report.

Answer

Use AWS Step Functions to collect workload details Build architecture diagrams of the workloads manually.

Answer

Use AWS X-Ray to view the workload details Build architecture diagrams with relationships

Question 27

A company's applications run on Amazon EC2 instances in Auto Scaling groups. The company notices that its applications experience sudden traffic increases on random days of the week The company wants to maintain application performance during sudden traffic increases.Which solution will meet these requirements MOST cost-effectively?

Accepted Answer

Use dynamic scaling to change the size of the Auto Scaling group.

Answer

Use manual scaling to change the size of the Auto Scaling group.

Answer

Use predictive scaling to change the size of the Auto Scaling group.

Answer

Use schedule scaling to change the size of the Auto Scaling group

Question 28

A company has an on-premises server that uses an Oracle database to process and store customer information The company wants to use an AWS database service to achieve higher availability and to improve application performance. The company also wants to offload reporting from its primary database system.Which solution will meet these requirements in the MOST operationally efficient way?

Accepted Answer

Use Amazon RDS deployed in a Multi-AZ instance deployment to create an Amazon Aurora database. Direct the reporting functions to the reader instances.

Answer

Use AWS Database Migration Service (AWS DMS) to create an Amazon RDS DB instance in multiple AWS Regions Point the reporting functions toward a separate DB instance from the primary DB instance.

Answer

Use Amazon RDS in a Single-AZ deployment to create an Oracle database Create a read replica in the same zone as the primary DB instance. Direct the reporting functions to the read replica.

Answer

Use Amazon RDS deployed in a Multi-AZ cluster deployment to create an Oracle database Direct the reporting functions to use the reader instance in the cluster deployment

Question 29

A law firm needs to share information with the public The information includes hundreds of files that must be publicly readable Modifications or deletions of the files by anyone before a designated future date are prohibited.Which solution will meet these requirements in the MOST secure way?

Accepted Answer

Create a new Amazon S3 bucket with S3 Versioning enabled Use S3 Object Lock with a retention period in accordance with the designated date Configure the S3 bucket for static website hosting. Set an S3 bucket policy to allow read-only access to the objrcts.

Answer

Upload all files to an Amazon S3 bucket that is configured for static website hosting. Grant read-only IAM permissions to any AWS principals that access the S3 bucket until the designated date.

Answer

Create a new Amazon S3 bucket with S3 Versioning enabled Configure an event trigger to run an AWS Lambda function in case of object modification or deletion. Configure the Lambda function to replace the objects with the original versions from a private S3 bucket.

Answer

Upload all files to an Amazon S3 bucket that is configured for static website hosting. Select the folder that contains the files. Use S3 Object Lock with a retention period in accordance with the designated date. Grant read-only IAM permissions to any AWS principals that access the S3 bucket.

Question 30

A company is looking for a solution that can store video archives in AWS from old news footage. The company needs to minimize costs and will rarely need to restore these files. When the h|es are needed, they must be available in a maximum of five minutes.What is the MOST cost-effective solution?

Accepted Answer

Store the video archives in Amazon S3 Glacier and use Expedited retrievals.

Answer

Store the video archives in Amazon S3 Glacier and use Standard retrievals.

Answer

Store the video archives in Amazon S3 Standard-Infrequent Access (S3 Standard-IA).

Answer

Store the video archives in Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA)

Question 31

A company is creating an application that runs on containers in a VPC. The application stores and accesses data in an Amazon S3 bucket During the development phase, the application will store and access 1 TB of data in Amazon S3 each day. The company wants to minimize costs and wants to prevent traffic from traversing the internet whenever possible.Which solution will meet these requirements?

Accepted Answer

Create a gateway VPC endpoint for Amazon S3. Associate this endpoint with all route tables in the VPC.

Answer

Enable S3 Intelligent-Tiering for the S3 bucket.

Answer

Enable S3 Transfer Acceleration for the S3 bucket.

Answer

Create an interface endpoint for Amazon S3 in the VPC. Associate this endpoint with all route tables in the VPC.

Question 32

A company stores data in PDF format in an Amazon S3 bucket The company must follow a legal requirement to retain all new and existing data in Amazon S3 for 7 years.Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Turn on S3 Object Lock with compliance retention mode for the S3 bucket. Set the retention period to expire after 7 years. Recopy all existing objects to bring the existing data into compliance

Answer

Turn on the S3 Versionmg feature for the S3 bucket Configure S3 Lifecycle to delete the data after 7 years. Configure multi-factor authentication (MFA) delete for all S3 objects.

Answer

Turn on S3 Object Lock with governance retention mode for the S3 bucket Set the retention period to expire after 7 years. Recopy all existing objects to bring the existing data into compliance

Answer

Turn on S3 Object Lock with compliance retention mode for the S3 bucket. Set the retention period to expire after 7 years. Use S3 Batch Operations to bring the existing data into compliance

Question 33

An image hosting company uploads its large assets to Amazon S3 Standard buckets The company uses multipart upload in parallel by using S3 APIs and overwrites if the same object is uploaded again. For the first 30 days after upload, the objects will be accessed frequently. The objects will be used less frequently after 30 days, but the access patterns for each object will be inconsistent The company must optimize its S3 storage costs while maintaining high availability and resiliency of stored assets.Which combination of actions should a solutions architect recommend to meet these requirements? (Select TWO.)

Accepted Answer

Move assets to S3 Intelligent-Tiering after 30 days.

Accepted Answer

Configure an S3 Lifecycle policy to clean up incomplete multipart uploads.

Answer

Configure an S3 Lifecycle policy to clean up expired object delete markers.

Answer

Move assets to S3 Standard-Infrequent Access (S3 Standard-IA) after 30 days

Answer

Move assets to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 30 days.

Question 34

A company designed a stateless two-tier application that uses Amazon EC2 in a single Availability Zone and an Amazon RDS Multi-AZ DB instance New company management wants to ensure the application is highly available.What should a solutions architect do to meet this requirement?

Accepted Answer

Configure the application to use Multi-AZ EC2 Auto Scaling and create an Application Load Balancer

Answer

Configure the application to take snapshots of the EC2 instances and send them to a different AWS Region.

Answer

Configure the application to use Amazon Route 53 latency-based routing to feed requests to the application.

Answer

Configure Amazon Route 53 rules to handle incoming requests and create a Multi-AZ Application Load Balancer

Question 35

A company hosts an online shopping application that stores all orders in an Amazon RDS for PostgreSQL Singfe-AZ DB instance. Management wants to eliminate single points of C^ilure and has asked a solutions architect to recommend an approach to minimize database downtime without requiring any changes to the application code.Which solution meets these requirements?

Accepted Answer

Convert the existing database instance to a Multi-AZ deployment by modifying the database instance and specifying the Multi-AZ option.

Answer

Create a new RDS Multi-AZ deployment. Take a snapshot of the current RDS instance and restore the new Multi-AZ deployment with the snapshot.

Answer

Create a read-only replica of the PostgreSQL database in another Availability Zone. Use Amazon Route 53 weighted record sets to distribute requests across the databases.

Answer

Place the RDS for PostgreSQL database in an Amazon EC2 Auto Scaling group with a minimum group size of two. Use Amazon Route 53 weighted record sets to distribute requests across instances.

Question 36

A company stores data in Amazon S3. According to regulations, the data must not contain personally identifiable information (Pll). The company recently discovered that S3 buckets have some objects that contain Pll. The company needs to automatically detect Pll in S3 buckets and to notify the company's security team.Which solution will meet these requirements?

Accepted Answer

Use Amazon Macie. Create an Amazon EventBridge rule to filter the SensitiveData event type from Macie findings and to send an Amazon Simple Notification Service (Amazon SNS) notification to the security team.

Answer

Use Amazon GuardDuty. Create an Amazon EventBridge rule to filter the CRITICAL event type from GuardDuty findings and to send an Amazon Simple Notification Service (Amazon SNS) notification to the security team.

Answer

Use Amazon Macie. Create an Amazon EventBridge rule to filter the SensitiveData:S30bject/Personal event type from Macie findings and to send an Amazon Simple Queue Service (Amazon SQS) notification to the security team.

Answer

Use Amazon GuardDuty. Create an Amazon EventBridge rule to filter the CRITICAL event type from GuardDuty findings and to send an Amazon Simple Queue Service (Amazon SQS) notification to the security team.

Question 37

A company provides an API interface to customers so the customers can retrieve their financial information. The company expects a larger number of requests during peak usage times of the year.The company requires the API to respond consistently with low latency to ensure customer satisfaction. The company needs to provide a compute host for the API.Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Use Amazon API Gateway and AWS Lambda functions with provisioned concurrency.

Answer

Use an Application Load Balancer and Amazon Elastic Container Service (Amazon ECS).

Answer

Use an Application Load Balancer and an Amazon Elastic Kubernetes Service (Amazon EKS) cluster.

Answer

Use Amazon API Gateway and AWS Lambda functions with reserved concurrency.

Question 38

A company seeks a storage solution for its application The solution must be highly available and scalable. The solution also must function as a file system, be mountable by multiple Linux instances in AWS and on premises through native protocols, and have no minimum size requirements. The company has set up a Site-to-Site VPN for access from its on-premises network to its VPC.Which storage solution meets these requirements?

Accepted Answer

Amazon Elastic File System (Amazon EFS) with multiple mount targets

Answer

Amazon FSx Multi-AZ deployments

Answer

Amazon Elastic Block Store (Amazon EBS) Multi-Attach volumes

Answer

Amazon Elastic File System (Amazon EFS) with a single mount target and multiple access points

Question 39

A company hosts a website on Amazon EC2 instances behind an Application Load Balancer (ALB) The website serves static content Website traffic is increasing and the company is concerned about a potential increase in cost.What should a solutions architect do to reduce the cost of the website?

Accepted Answer

Create an Amazon CloudFront distribution to cache static files at edge locations.

Answer

Create an Amazon ElastiCache cluster Connect the ALB to the ElastiCache cluster to serve cached files.

Answer

Create an AWS WAF web ACL and associate it with the ALB. Add a rule to the web ACL to cache static files.

Answer

Create a second ALB in an alternative AWS Region Route user traffic to the closest Region to minimize data transfer costs

Question 40

A company uses multiple vendors to distribute digital assets that are stored in Amazon S3 buckets The company wants to ensure that its vendor AWS accounts have the minimum access that is needed to download objects in these S3 bucketsWhich solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Create a cross-account IAM role that has a read-only access policy specified for the IAM role.

Answer

Design a bucket policy that has anonymous read permissions and permissions to list ail buckets.

Answer

Design a bucket policy that gives read-only access to users. Specify IAM entities as principals

Answer

Create a user policy and vendor user groups that give read-only access to vendor users

Amazon SAA-C03 Practice Test 11

Amazon SAA-C03 Practice Tests