A media company is using video conversion tools that run on Amazon EC2 instances. The video conversion tools run on a combination of Windows EC2 instances and Linux EC2 instances. Each video file is tens of gigabytes in size. The video conversion tools must process the video files in the shortest possible amount of time. The company needs a single, centralized file storage solution that can be mounted on all the EC2 instances that host the video conversion tools.
Which solution will meet these requirements?
A. Deploy Amazon FSx for Windows File Server with hard disk drive (HDD) storage. B. Deploy Amazon FSx for Windows File Server with solid state drive (SSD) storage. C. Deploy Amazon Elastic File System (Amazon EFS) with Max I/O performance mode. D. Deploy Amazon Elastic File System (Amazon EFS) with General Purpose performance mode.
C. Deploy Amazon Elastic File System (Amazon EFS) with Max I/O performance mode.
Explanation
Amazon EFSwithMax I/O performance modeis designed for workloads that require high levels of parallelism, such as video processing across multiple EC2 instances. EFS provides shared file storage that can be mounted on both Windows and Linux EC2 instances, and the Max I/O mode ensures the best performance for handling large files and concurrent access across multiple instances.
Option A and B (FSx for Windows File Server): FSx for Windows File Server is optimized for Windows workloads and would not be ideal for Linux instances or high-throughput, parallel workloads.
Option D (EFS General Purpose mode): General Purpose mode offers lower latency but doesn ' t support the high throughput needed for large, concurrent workloads.
References:
Amazon EFS Performance Modes
Question 1122:
A company wants to migrate its on-premises Microsoft SQL Server Enterprise edition database to AWS.
The company's online application uses the database to process transactions. The data analysis team uses the same production database to run reports for analytical processing. The company wants to reduce operational overhead by moving to managed services wherever possible.
Which solution will meet these requirements with the LEAST operational overhead?
A. Migrate to Amazon RDS for Microsoft SOL Server. Use read replicas for reporting purposes B. Migrate to Microsoft SQL Server on Amazon EC2. Use Always On read replicas for reporting purposes C. Migrate to Amazon DynamoDB. Use DynamoDB on-demand replicas for reporting purposes D. Migrate to Amazon Aurora MySQL. Use Aurora read replicas for reporting purposes
A. Migrate to Amazon RDS for Microsoft SOL Server. Use read replicas for reporting purposes
Question 1123:
A data analytics company wants to migrate its batch processing system to AWS. The company receives thousands of small data files periodically during the day through FTP. An on-premises batch job processes the data files overnight.
However, the batch job takes hours to finish running.
The company wants the AWS solution to process incoming data files as soon as possible with minimal changes to the FTP clients that send the files. The solution must delete the incoming data files after the files have been processed successfully.
Processing for each file needs to take 3-8 minutes.
Which solution will meet these requirements in the MOST operationally efficient way?
A. Use an Amazon EC2 instance that runs an FTP server to store incoming files as objects in Amazon S3 Glacier Flexible Retrieval. Configure a job queue in AWS Batch. Use Amazon EventBridge rules to invoke the job to process the objects nightly from S3 Glacier Flexible Retrieval. Delete the objects after the job has processed the objects. B. Use an Amazon EC2 instance that runs an FTP server to store incoming files on an Amazon Elastic Block Store (Amazon EBS) volume. Configure a job queue in AWS Batch. Use Amazon EventBridge rules to invoke the job to process the files nightly from the EBS volume. Delete the files after the job has processed the files. C. Use AWS Transfer Family to create an FTP server to store incoming files on an Amazon Elastic Block Store (Amazon EBS) volume. Configure a job queue in AWS Batch. Use an Amazon S3 event notification when each file arrives to invoke the job in AWS Batch. Delete the files after the job has processed the files. D. Use AWS Transfer Family to create an FTP server to store incoming files in Amazon S3 Standard. Create an AWS Lambda function to process the files and to delete the files after they are processed. Use an S3 event notification to invoke the Lambda function when the files arrive.
D. Use AWS Transfer Family to create an FTP server to store incoming files in Amazon S3 Standard. Create an AWS Lambda function to process the files and to delete the files after they are processed. Use an S3 event notification to invoke the Lambda function when the files arrive.
Question 1124:
A company is migrating its applications and databases to the AWS Cloud. The company will use Amazon Elastic Container Service (Amazon ECS), AWS Direct Connect, and Amazon RDS.
Which activities will be managed by the company's operational team? (Choose three.)
A. Management of the Amazon RDS infrastructure layer, operating system, and platforms B. Creation of an Amazon RDS DB instance and configuring the scheduled maintenance window C. Configuration of additional software components on Amazon ECS for monitoring, patch management, log management, and host intrusion detection D. Installation of patches for all minor and major database versions for Amazon RDS E. Ensure the physical security of the Amazon RDS infrastructure in the data center F. Encryption of the data that moves in transit through Direct Connect
B. Creation of an Amazon RDS DB instance and configuring the scheduled maintenance window C. Configuration of additional software components on Amazon ECS for monitoring, patch management, log management, and host intrusion detection F. Encryption of the data that moves in transit through Direct Connect
Question 1125:
A company runs an application as a task in an Amazon Elastic Container Service (Amazon ECS) cluster.
The application must have read and write access to a specific group of Amazon S3 buckets. The S3 buckets are in the same AWS Region and AWS account as the ECS cluster. The company needs to grant the application access to the S3 buckets according to the principle of least privilege.
Which combination of solutions will meet these requirements? (Choose Two.)
A. Add a tag to each bucket. Create an IAM policy that includes a StringEquals condition that matches the tags and values of the buckets. B. Create an IAM policy that lists the full Amazon Resource Name (ARN) for each S3 bucket. C. Attach the IAM policy to the instance role of the ECS task. D. Create an IAM policy that includes a wildcard Amazon Resource Name (ARN) that matches all combinations of the S3 bucket names. E. Attach the IAM policy to the task role of the ECS task.
B. Create an IAM policy that lists the full Amazon Resource Name (ARN) for each S3 bucket. E. Attach the IAM policy to the task role of the ECS task.
Explanation
To grant the ECS application the least privilege, you create an IAM policy that explicitly lists the ARNs of the specific S3 buckets the task should access. You then attach this policy to the task role (not the instance role), ensuring only that task has the necessary permissions. This approach avoids granting permissions to other EC2 instances or services and restricts access strictly to the required buckets.
AWS Documentation Extract:
" Attach an IAM policy granting access to specific resources to the ECS task role, not to the instance role, to ensure that only the container has access according to the principle of least privilege. "
" Use explicit ARNs to control access only to specified S3 buckets. " (Source: Amazon ECS documentation, IAM Roles for Tasks)
Option A: Tag-based access control for S3 buckets is possible but less direct and commonly used for identity-based access.
Option C: Attaching the policy to the instance role could grant unintended permissions to all containers or services running on the instance.
Option D: Wildcard ARNs grant broader access than necessary.
References:
AWS Certified Solutions Architect?Official Study Guide, IAM Best Practices.
Question 1126:
A company has launched an Amazon RDS for MySQL DB instance. Most of the connections to the database come from serverless applications. Application traffic to the database changes significantly at random intervals. At times of high demand, users report that their applications experience database connection rejection errors.
Which solution will resolve this issue with the LEAST operational overhead?
A. Create a proxy in RDS Proxy. Configure the users' applications to use the DB instance through RDS Proxy. B. Deploy Amazon ElastiCache for Memcached between the users' applications and the DB instance. C. Migrate the DB instance to a different instance class that has higher I/O capacity. Configure the users' applications to use the new DB instance. D. Configure Multi-AZ for the DB instance. Configure the users' applications to switch between the DB instances.
A. Create a proxy in RDS Proxy. Configure the users' applications to use the DB instance through RDS Proxy.
Question 1127:
A company is migrating a production environment application to the AWS Cloud. The company uses Amazon RDS for Oracle for the database layer. The company needs to configure the database to meet the needs of high I/Ontensive workloads that require low latency and consistent throughput. The database workloads are read intensive and write intensive.
Which solution will meet these requirements?
A. Use a Multi-AZ DB instance deployment for the RDS for Oracle database. B. Configure the RDS for Oracle database to use the Provisioned IOPS SSD storage type. C. Configure the RDS for Oracle database to use the General Purpose SSD storage type. D. Enable RDS read replicas for RDS for Oracle.
B. Configure the RDS for Oracle database to use the Provisioned IOPS SSD storage type.
Explanation
Provisioned IOPS SSD (io1 or io2) is designed for I/O-intensive workloads that require low latency and consistent throughput, which is critical for transactional and production databases. It provides predictable performance, unlike General Purpose SSD, which is burst-based.
A company has a multi-tier web application. The application's internal service components are deployed on Amazon EC2 instances. The internal service components need to access third-party software as a service (SaaS) APIs that are hosted on AWS.
The company needs to provide secure and private connectivity from the application's internal services to the third-party SaaS application. The company needs to ensure that there is minimal public internet exposure.
Which solution will meet these requirements?
A. Implement an AWS Site-to-Site VPN to establish a secure connection with the third-party SaaS provider. B. Deploy AWS Transit Gateway to manage and route traffic between the application's VPC and the third-party SaaS provider. C. Configure AWS PrivateLink to allow only outbound traffic from the VPC without enabling the third-party SaaS provider to establish. D. Use AWS PrivateLink to create a private connection between the application's VPC and the third-party SaaS provider.
D. Use AWS PrivateLink to create a private connection between the application's VPC and the third-party SaaS provider.
Question 1129:
A social media company wants to allow its users to upload images in an application that is hosted in the AWS Cloud. The company needs a solution that automatically resizes the images so that the images can be displayed on multiple device types. The application experiences unpredictable traffic patterns throughout the day. The company is seeking a highly available solution that maximizes scalability.
What should a solutions architect do to meet these requirements?
A. Create a static website hosted in Amazon S3 that invokes AWS Lambda functions to resize the images and store the images in an Amazon S3 bucket. B. Create a static website hosted in Amazon CloudFront that invokes AWS Step Functions to resize the images and store the images in an Amazon RDS database. C. Create a dynamic website hosted on a web server that runs on an Amazon EC2 instance. Configure a process that runs on the EC2 instance to resize the images and store the images in an Amazon S3 bucket. D. Create a dynamic website hosted on an automatically scaling Amazon Elastic Container Service (Amazon ECS) cluster that creates a resize job in Amazon Simple Queue Service (Amazon SQS). Set up an image-resizing program that runs on an Amazon EC2 instance to process the resize jobs.
A. Create a static website hosted in Amazon S3 that invokes AWS Lambda functions to resize the images and store the images in an Amazon S3 bucket.
Question 1130:
A social media company is building a feature for its website. The feature will give users the ability to upload photos. The company expects significant increases in demand during large events and must ensure that the website can handle the upload traffic from users.
Which solution meets these requirements with the MOST scalability?
A. Upload files from the user's browser to the application servers. Transfer the files to an Amazon S3 bucket. B. Provision an AWS Storage Gateway file gateway. Upload files directly from the user's browser to the file gateway. C. Generate Amazon S3 presigned URLs in the application. Upload files directly from the user's browser into an S3 bucket. D. Provision an Amazon Elastic File System (Amazon EFS) file system. Upload files directly from the user's browser to the file system.
C. Generate Amazon S3 presigned URLs in the application. Upload files directly from the user's browser into an S3 bucket.
Nowadays, the certification exams become more and more important and required by more and more
enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare
for the exam in a short time with less efforts? How to get a ideal result and how to find the
most reliable resources? Here on Vcedump.com, you will find all the answers.
Vcedump.com provide not only Amazon exam questions,
answers and explanations but also complete assistance on your exam preparation and certification
application. If you are confused on your SAA-C03 exam preparations
and Amazon certification application, do not hesitate to visit our
Vcedump.com to find your solutions here.