ExamGecko
Home Home / Amazon / SAA-C03

Amazon SAA-C03 Practice Test - Questions Answers, Page 33

Question list
Search
Search

List of questions

Search

Related questions











A solutions architect is designing the architecture for a software demonstration environment The environment will run on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB) The system will experience significant increases in traffic during working hours but Is not required to operate on weekends. Which combination of actions should the solutions architect take to ensure that the system can scale to meet demand? (Select TWO)

A.
Use AWS Auto Scaling to adjust the ALB capacity based on request rate
A.
Use AWS Auto Scaling to adjust the ALB capacity based on request rate
Answers
B.
Use AWS Auto Scaling to scale the capacity of the VPC internet gateway
B.
Use AWS Auto Scaling to scale the capacity of the VPC internet gateway
Answers
C.
Launch the EC2 instances in multiple AWS Regions to distribute the load across Regions
C.
Launch the EC2 instances in multiple AWS Regions to distribute the load across Regions
Answers
D.
Use a target tracking scaling policy to scale the Auto Scaling group based on instance CPU utilization
D.
Use a target tracking scaling policy to scale the Auto Scaling group based on instance CPU utilization
Answers
E.
Use scheduled scaling to change the Auto Scaling group minimum, maximum, and desired capacity to zero for weekends Revert to the default values at the start of the week
E.
Use scheduled scaling to change the Auto Scaling group minimum, maximum, and desired capacity to zero for weekends Revert to the default values at the start of the week
Answers
Suggested answer: D, E

A company has deployed a server less application that invokes an AWS Lambda function when new documents are uploaded to an Amazon S3 bucket The application uses the Lambda function to process the documents After a recent marketing campaign the company noticed that the application did not process many of The documents What should a solutions architect do to improve the architecture of this application?

A.
Set the Lambda function's runtime timeout value to 15 minutes
A.
Set the Lambda function's runtime timeout value to 15 minutes
Answers
B.
Configure an S3 bucket replication policy Stage the documents m the S3 bucket for later processing
B.
Configure an S3 bucket replication policy Stage the documents m the S3 bucket for later processing
Answers
C.
Deploy an additional Lambda function Load balance the processing of the documents across the two Lambda functions
C.
Deploy an additional Lambda function Load balance the processing of the documents across the two Lambda functions
Answers
D.
Create an Amazon Simple Queue Service (Amazon SOS) queue Send the requests to the queue Configure the queue as an event source for Lambda.
D.
Create an Amazon Simple Queue Service (Amazon SOS) queue Send the requests to the queue Configure the queue as an event source for Lambda.
Answers
Suggested answer: D

Explanation:

To improve the architecture of this application, the best solution would be to use Amazon Simple Queue Service (Amazon SQS) to buffer the requests and decouple the S3 bucket from the Lambda function. This will ensure that the documents are not lost and can be processed at a later time if the Lambda function is not available. This will ensure that the documents are not lost and can be processed at a later time if the Lambda function is not available. By using Amazon SQS, the architecture is decoupled and the Lambda function can process the documents in a scalable and fault-tolerant manner


A developer has an application that uses an AWS Lambda function to upload files to Amazon S3 and needs the required permissions to perform the task The developer already has an IAM user with valid IAM credentials required for Amazon S3 What should a solutions architect do to grant the permissions?

A.
Add required IAM permissions in the resource policy of the Lambda function
A.
Add required IAM permissions in the resource policy of the Lambda function
Answers
B.
Create a signed request using the existing IAM credentials n the Lambda function
B.
Create a signed request using the existing IAM credentials n the Lambda function
Answers
C.
Create a new IAM user and use the existing IAM credentials in the Lambda function.
C.
Create a new IAM user and use the existing IAM credentials in the Lambda function.
Answers
D.
Create an IAM execution role with the required permissions and attach the IAM rote to the Lambda function
D.
Create an IAM execution role with the required permissions and attach the IAM rote to the Lambda function
Answers
Suggested answer: D

Explanation:

To grant the necessary permissions to an AWS Lambda function to upload files to Amazon S3, a solutions architect should create an IAM execution role with the required permissions and attach the IAM role to


A company has a large dataset for its online advertising business stored in an Amazon RDS for MySQL DB instance in a single Availability Zone. The company wants business reporting queries to run without impacting the write operations to the production DB instance.

Which solution meets these requirements?

A.
Deploy RDS read replicas to process the business reporting queries.
A.
Deploy RDS read replicas to process the business reporting queries.
Answers
B.
Scale out the DB instance horizontally by placing it behind an Elastic Load Balancer
B.
Scale out the DB instance horizontally by placing it behind an Elastic Load Balancer
Answers
C.
Scale up the DB instance to a larger instance type to handle write operations and queries
C.
Scale up the DB instance to a larger instance type to handle write operations and queries
Answers
D.
Deploy the OB distance in multiple Availability Zones to process the business reporting queries
D.
Deploy the OB distance in multiple Availability Zones to process the business reporting queries
Answers
Suggested answer: A

Explanation:


A meteorological startup company has a custom web application to sell weather data to its users online. The company uses Amazon DynamoDB to store is data and wants to bu4d a new service that sends an alert to the managers of four Internal teams every time a new weather event is recorded.

The company does not want true new service to affect the performance of the current application What should a solutions architect do to meet these requirement with the LEAST amount of operational overhead?

A.
Use DynamoDB transactions to write new event data to the table Configure the transactions to notify internal teams.
A.
Use DynamoDB transactions to write new event data to the table Configure the transactions to notify internal teams.
Answers
B.
Have the current application publish a message to four Amazon Simple Notification Service(Amazon SNS) topics. Have each team subscribe to one topic.
B.
Have the current application publish a message to four Amazon Simple Notification Service(Amazon SNS) topics. Have each team subscribe to one topic.
Answers
C.
Enable Amazon DynamoDB Streams on the table. Use triggers to write to a mingle Amazon Simple Notification Service (Amazon SNS) topic to which the teams can subscribe.
C.
Enable Amazon DynamoDB Streams on the table. Use triggers to write to a mingle Amazon Simple Notification Service (Amazon SNS) topic to which the teams can subscribe.
Answers
D.
Add a custom attribute to each record to flag new items. Write a cron job that scans the table every minute for items that are new and notifies an Amazon Simple Queue Service (Amazon SOS) queue to which the teams can subscribe.
D.
Add a custom attribute to each record to flag new items. Write a cron job that scans the table every minute for items that are new and notifies an Amazon Simple Queue Service (Amazon SOS) queue to which the teams can subscribe.
Answers
Suggested answer: C

A company is developing a real-time multiplayer game that uses UDP for communications between the client and servers In an Auto Scaling group Spikes in demand are anticipated during the day, so the game server platform must adapt accordingly Developers want to store gamer scores and other non-relational data in a database solution that will scale without intervention Which solution should a solutions architect recommend?

A.
Use Amazon Route 53 for traffic distribution and Amazon Aurora Serverless for data storage
A.
Use Amazon Route 53 for traffic distribution and Amazon Aurora Serverless for data storage
Answers
B.
Use a Network Load Balancer for traffic distribution and Amazon DynamoDB on-demand for data storage
B.
Use a Network Load Balancer for traffic distribution and Amazon DynamoDB on-demand for data storage
Answers
C.
Use a Network Load Balancer for traffic distribution and Amazon Aurora Global Database for data storage
C.
Use a Network Load Balancer for traffic distribution and Amazon Aurora Global Database for data storage
Answers
D.
Use an Application Load Balancer for traffic distribution and Amazon DynamoDB global tables for data storage
D.
Use an Application Load Balancer for traffic distribution and Amazon DynamoDB global tables for data storage
Answers
Suggested answer: B

A company needs to create an Amazon Elastic Kubernetes Service (Amazon EKS) cluster to host a digital media streaming application. The EKS cluster will use a managed node group that is backed by Amazon Elastic Block Store (Amazon EBS) volumes for storage. The company must encrypt all data at rest by using a customer managed key that is stored in AWS Key Management Service (AWS KMS) Which combination of actions will meet this requirement with the LEAST operational overhead?

(Select TWO.)

A.
Use a Kubernetes plugin that uses the customer managed key to perform data encryption.
A.
Use a Kubernetes plugin that uses the customer managed key to perform data encryption.
Answers
B.
After creation of the EKS cluster, locate the EBS volumes. Enable encryption by using the customer managed key.
B.
After creation of the EKS cluster, locate the EBS volumes. Enable encryption by using the customer managed key.
Answers
C.
Enable EBS encryption by default in the AWS Region where the EKS cluster will be created. Select the customer managed key as the default key.
C.
Enable EBS encryption by default in the AWS Region where the EKS cluster will be created. Select the customer managed key as the default key.
Answers
D.
Create the EKS cluster Create an IAM role that has cuwlicy that grants permission to the customer managed key. Associate the role with the EKS cluster.
D.
Create the EKS cluster Create an IAM role that has cuwlicy that grants permission to the customer managed key. Associate the role with the EKS cluster.
Answers
E.
Store the customer managed key as a Kubernetes secret in the EKS cluster. Use the customer managed key to encrypt the EBS volumes.
E.
Store the customer managed key as a Kubernetes secret in the EKS cluster. Use the customer managed key to encrypt the EBS volumes.
Answers
Suggested answer: A, D

Explanation:

EBS encryption by default is a feature that enables encryption for all new EBS volumes and snapshots created in a Region1. EBS encryption by default uses a service managed key or a customer managed key that is stored in AWS KMS1. EBS encryption by default is suitable for scenarios where data at rest must be encrypted by using a customer managed key, such as the digital media streaming application in the scenario1.

To meet the requirements of the scenario, the solutions architect should enable EBS encryption by default in the AWS Region where the EKS cluster will be created. The solutions architect should select the customer managed key as the default key for encryption1. This way, all new EBS volumes and snapshots created in that Region will be encrypted by using the customer managed key. EKS encryption provider support is a feature that enables envelope encryption of Kubernetes secrets in EKS with a customer managed key that is stored in AWS KMS2. Envelope encryption means that data is encrypted by data encryption keys (DEKs) using AES-GCM; DEKs are encrypted by key encryption keys (KEKs) according to configuration in AWS KMS3. EKS encryption provider support is suitable for scenarios where secrets must be encrypted by using a customer managed key, such as the digital media streaming application in the scenario2. To meet the requirements of the scenario, the solutions architect should create the EKS cluster and create an IAM role that has a policy that grants permission to the customer managed key. The solutions architect should associate the role with the EKS cluster2. This way, the EKS cluster can use envelope encryption of Kubernetes secrets with the customer managed key.


A company has a web application with sporadic usage patterns There is heavy usage at the beginning of each month moderate usage at the start of each week and unpredictable usage during the week The application consists of a web server and a MySQL database server running inside the data center The company would like to move the application to the AWS Cloud and needs to select a costeffective database platform that will not require database modifications Which solution will meet these requirements?

A.
Amazon DynamoDB
A.
Amazon DynamoDB
Answers
B.
Amazon RDS for MySQL
B.
Amazon RDS for MySQL
Answers
C.
MySQL-compatible Amazon Aurora Serverless
C.
MySQL-compatible Amazon Aurora Serverless
Answers
D.
MySQL deployed on Amazon EC2 in an Auto Scaling group
D.
MySQL deployed on Amazon EC2 in an Auto Scaling group
Answers
Suggested answer: C

Explanation:

Amazon RDS for MySQL is a fully-managed relational database service that makes it easy to set up, operate, and scale MySQL deployments in the cloud. Amazon Aurora Serverless is an on-demand, auto- scaling configuration for Amazon Aurora (MySQL-compatible edition), where the database will automatically start up, shut down, and scale capacity up or down based on your application's needs. It is a simple, cost-effective option for infrequent, intermittent, or unpredictable workloads


A company uses a payment processing system that requires messages for a particular payment ID to be received in the same order that they were sent Otherwise, the payments might be processed incorrectly. Which actions should a solutions architect take to meet this requirement? (Select TWO.)

A.
Write the messages to an Amazon DynamoDB table with the payment ID as the partition key
A.
Write the messages to an Amazon DynamoDB table with the payment ID as the partition key
Answers
B.
Write the messages to an Amazon Kinesis data stream with the payment ID as the partition key.
B.
Write the messages to an Amazon Kinesis data stream with the payment ID as the partition key.
Answers
C.
Write the messages to an Amazon ElastiCache for Memcached cluster with the payment ID as the key
C.
Write the messages to an Amazon ElastiCache for Memcached cluster with the payment ID as the key
Answers
D.
Write the messages to an Amazon Simple Queue Service (Amazon SQS) queue Set the message attribute to use the payment ID
D.
Write the messages to an Amazon Simple Queue Service (Amazon SQS) queue Set the message attribute to use the payment ID
Answers
E.
Write the messages to an Amazon Simple Queue Service (Amazon SQS) FIFO queue. Set the message group to use the payment ID.
E.
Write the messages to an Amazon Simple Queue Service (Amazon SQS) FIFO queue. Set the message group to use the payment ID.
Answers
Suggested answer: B, E

Explanation:


An IAM user made several configuration changes to AWS resources m their company's account during a production deployment last week. A solutions architect learned that a couple of security group rules are not configured as desired. The solutions architect wants to confirm which IAM user was responsible for making changes.

Which service should the solutions architect use to find the desired information?

A.
Amazon GuardDuty
A.
Amazon GuardDuty
Answers
B.
Amazon Inspector
B.
Amazon Inspector
Answers
C.
AWS CloudTrail
C.
AWS CloudTrail
Answers
D.
AWS Config
D.
AWS Config
Answers
Suggested answer: C
Total 886 questions
Go to page: of 89