Amazon SAA-C03 Practice Test - Questions Answers, Page 91
Question list
List of questions
Related questions
A company is developing a social media application that must scale to meet demand spikes and handle ordered processes.
Which AWS services meet these requirements?
ECS with Fargate, RDS, and SQS for decoupling.
ECS with Fargate, RDS, and SNS for decoupling.
DynamoDB, Lambda, DynamoDB Streams, and Step Functions.
Elastic Beanstalk, RDS, and SNS for decoupling.
A company wants to implement a data lake in the AWS Cloud. The company must ensure that only specific teams have access to sensitive data in the data lake. The company must have row-level access control for the data lake.
Which solution will meet these requirements?
Use Amazon RDS to store the data. Use IAM roles and permissions for data governance and access control.
Use Amazon Redshift to store the data. Use IAM roles and permissions for data governance and access control.
Use Amazon S3 to store the data. Use AWS Lake Formation for data governance and access control.
Use AWS Glue Catalog to store the data. Use AWS Glue DataBrew for data governance and access control.
A company hosts a multi-tier inventory reporting application on AWS. The company needs a cost-effective solution to generate inventory reports on demand. Admin users need to have the ability to generate new reports. Reports take approximately 5-10 minutes to finish. The application must send reports to the email address of the admin user who generates each report.
Which solution will meet these requirements?
Use Amazon Elastic Container Service (Amazon ECS) to host the report generation code. Use an Amazon API Gateway HTTP API to invoke the code. Use Amazon Simple Email Service (Amazon SES) to send the reports to admin users.
Use Amazon EventBridge to invoke a scheduled AWS Lambda function to generate the reports. Use Amazon Simple Notification Service (Amazon SNS) to send the reports to admin users.
Use Amazon Elastic Kubernetes Service (Amazon EKS) to host the report generation code. Use an Amazon API Gateway REST API to invoke the code. Use Amazon Simple Notification Service (Amazon SNS) to send the reports to admin users.
Create an AWS Lambda function to generate the reports. Use a function URL to invoke the function. Use Amazon Simple Email Service (Amazon SES) to send the reports to admin users.
A company that has multiple AWS accounts maintains an on-premises Microsoft Active Directory. The company needs a solution to implement Single Sign-On for its employees. The company wants to use AWS IAM Identity Center.
The solution must meet the following requirements:
Allow users to access AWS accounts and third-party applications by using existing Active Directory credentials.
Enforce multi-factor authentication (MFA) to access AWS accounts.
Centrally manage permissions to access AWS accounts and applications.
Which solution will meet these requirements?
Create an IAM identity provider for Active Directory in each AWS account. Ensure that Active Directory users and groups access AWS accounts directly through IAM roles. Use IAM Identity Center to enforce MFA in each account for all users.
Use AWS Directory Service to create a new AWS Managed Microsoft AD Active Directory. Configure IAM Identity Center in each account to use the new AWS Managed Microsoft AD Active Directory as the identity source. Use IAM Identity Center to enforce MFA for all users.
Use IAM Identity Center with the existing Active Directory as the identity source. Enforce MFA for all users. Use AWS Organizations and Active Directory groups to manage access permissions for AWS accounts and application access.
Use AWS Lambda functions to periodically synchronize Active Directory users and groups with IAM users and groups in each AWS account. Use IAM roles and policies to manage application access. Create a second Lambda function to enforce MFA.
A company runs an order management application on AWS. The application allows customers to place orders and pay with a credit card. The company uses an Amazon CloudFront distribution to deliver the application.
A security team has set up logging for all incoming requests. The security team needs a solution to generate an alert if any user modifies the logging configuration.
Which solution will meet these requirements? (Select TWO)
Configure an Amazon EventBridge rule that is invoked when a user creates or modifies a CloudFront distribution. Add the AWS Lambda function as a target of the EventBridge rule.
Create an Application Load Balancer (ALB). Enable AWS WAF rules for the ALB. Configure an AWS Config rule to detect security violations.
Create an AWS Lambda function to detect changes in CloudFront distribution logging. Configure the Lambda function to use Amazon Simple Notification Service (Amazon SNS) to send notifications to the security team.
Set up Amazon GuardDuty. Configure GuardDuty to monitor findings from the CloudFront distribution. Create an AWS Lambda function to address the findings.
Create a private API in Amazon API Gateway. Use AWS WAF rules to protect the private API from common security problems.
A company recently migrated a data warehouse to AWS. The company has an AWS Direct Connect connection to AWS. Company users query the data warehouse by using a visualization tool. The average size of the queries that the data warehouse returns is 50 MB. The average visualization that the visualization tool produces is 500 KB in size. The result sets that the data warehouse returns are not cached.
The company wants to optimize costs for data transfers between the data warehouse and the company.
Which solution will meet this requirement?
Host the visualization tool on premises. Connect to the data warehouse directly through the internet.
Host the visualization tool in the same AWS Region as the data warehouse. Access the visualization tool through the internet.
Host the visualization tool on premises. Connect to the data warehouse through the Direct Connect connection
Host the visualization tool in the same AWS Region as the data warehouse. Access the visualization tool through the Direct Connect connection.
How can trade data from DynamoDB be ingested into an S3 data lake for near real-time analysis?
Use DynamoDB Streams to invoke a Lambda function that writes to S3.
Use DynamoDB Streams to invoke a Lambda function that writes to Data Firehose, which writes to S3.
Enable Kinesis Data Streams on DynamoDB. Configure it to invoke a Lambda function that writes to S3.
Enable Kinesis Data Streams on DynamoDB. Use Data Firehose to write to S3.
How can DynamoDB data be made available for long-term analytics with minimal operational overhead?
Configure DynamoDB incremental exports to S3.
Configure DynamoDB Streams to write records to S3.
Configure EMR to copy DynamoDB data to S3.
Configure EMR to copy DynamoDB data to HDFS.
A company runs a Microsoft Windows SMB file share on-premises to support an application. The company wants to migrate the application to AWS. The company wants to share storage across multiple Amazon EC2 instances.
Which solutions will meet these requirements with the LEAST operational overhead? (Select TWO.)
Create an Amazon Elastic File System (Amazon EFS) file system with elastic throughput.
Create an Amazon FSx for NetApp ONTAP file system.
Use Amazon Elastic Block Store (Amazon EBS) to create a self-managed Windows file share on the instances
Create an Amazon FSx for Windows File Server file system
Create an Amazon FSx for OpenZFS file system.
A solutions architect needs to implement a solution that can handle up to 5,000 messages per second. The solution must publish messages as events to multiple consumers. The messages are up to 500 KB in size. The message consumers need to have the ability to use multiple programming languages to consume the messages with minimal latency. The solution must retain published messages for more than 3 months. The solution must enforce strict ordering of the messages.
Which solution will meet these requirements?
Publish messages to an Amazon Kinesis Data Streams data stream. Enable enhanced fan-out. Ensure that consumers ingest the data stream by using dedicated throughput.
Publish messages to an Amazon Simple Notification Service (Amazon SNS) topic. Ensure that consumers use an Amazon Simple Queue Service (Amazon SQS) FIFO queue to subscribe to the topic.
Publish messages to Amazon EventBridge. Allow each consumer to create rules to deliver messages to the consumer's own target.
Publish messages to an Amazon Simple Notification Service (Amazon SNS) topic. Ensure that consumers use Amazon Data Firehose to subscribe to the topic.
Question