Amazon SAA-C03 Online Practice Questions and Exam Preparation

Amazon SAA-C03 Online Questions & Answers

• Question 1271:

  A meteorological startup company has a custom web application to sell weather data to its users online.

  The company uses Amazon DynamoDB to store its data and wants to build a new service that sends an alert to the managers of four internal teams every time a new weather event is recorded. The company does not want this new service to affect the performance of the current application.

  What should a solutions architect do to meet these requirements with the LEAST amount of operational overhead?

  A. Use DynamoDB transactions to write new event data to the table. Configure the transactions to notify internal teams.
  B. Have the current application publish a message to four Amazon Simple Notification Service (Amazon SNS) topics. Have each team subscribe to one topic.
  C. Enable Amazon DynamoDB Streams on the table. Use triggers to write to a single Amazon Simple Notification Service (Amazon SNS) topic to which the teams can subscribe.
  D. Add a custom attribute to each record to flag new items. Write a cron job that scans the table every minute for items that are new and notifies an Amazon Simple Queue Service (Amazon SQS) queue to which the teams can subscribe.
  C. Enable Amazon DynamoDB Streams on the table. Use triggers to write to a single Amazon Simple Notification Service (Amazon SNS) topic to which the teams can subscribe.

  ---

  Explanation

• Question 1272:

  A company is developing an application to support customer demands. The company wants to deploy the application on multiple Amazon EC2 Nitro-based instances within the same Availability Zone. The company also wants to give the application the ability to write to multiple block storage volumes in multiple EC2 Nitro-based instances simultaneously to achieve higher application availability.

  Which solution will meet these requirements?

  A. Use General Purpose SSD (gp3) EBS volumes with Amazon Elastic Block Store (Amazon EBS) Multi-Attach
  B. Use Throughput Optimized HDD (st1) EBS volumes with Amazon Elastic Block Store (Amazon EBS) Multi-Attach
  C. Use Provisioned IOPS SSD (io2) EBS volumes with Amazon Elastic Block Store (Amazon EBS) Multi-Attach
  D. Use General Purpose SSD (gp2) EBS volumes with Amazon Elastic Block Store (Amazon EBS) Multi-Attach
  C. Use Provisioned IOPS SSD (io2) EBS volumes with Amazon Elastic Block Store (Amazon EBS) Multi-Attach

• Question 1273:

  A company has an application that runs on an Amazon Elastic Kubernetes Service (Amazon EKS) cluster on Amazon EC2 instances. The application has a UI that uses Amazon DynamoDB and data services that use Amazon S3 as part of the application deployment.

  The company must ensure that the EKS Pods for the UI can access only Amazon DynamoDB and that the EKS Pods for the data services can access only Amazon S3. The company uses AWS Identity and Access Management (IAM).

  Which solution meals these requirements?

  A. Create separate IAM policies for Amazon S3 and DynamoDB access with the required permissions. Attach both IAM policies to the EC2 instance profile. Use role-based access control (RBAC) to control access to Amazon S3 or DynamoDB for the respective EKS Pods.
  B. Create separate IAM policies for Amazon S3 and DynamoDB access with the required permissions. Attach the Amazon S3 IAM policy directly to the EKS Pods for the data services and the DynamoDB policy to the EKS Pods for the UI.
  C. Create separate Kubernetes service accounts for the UI and data services to assume an IAM role. Attach the AmazonS3FullAccess policy to the data services account and the AmazonDynamoDBFullAccess policy to the UI service account.
  D. Create separate Kubernetes service accounts for the UI and data services to assume an IAM role. Use IAM Role for Service Accounts (IRSA) to provide access to the EKS Pods for the UI to Amazon S3 and the EKS Pods for the data services to DynamoDB.
  C. Create separate Kubernetes service accounts for the UI and data services to assume an IAM role. Attach the AmazonS3FullAccess policy to the data services account and the AmazonDynamoDBFullAccess policy to the UI service account.

• Question 1274:

  A company provides a trading platform to customers. The platform uses an Amazon API Gateway REST API, AWS Lambda functions, and an Amazon DynamoDB table. Each trade that the platform processes invokes a Lambda function that stores the trade data in Amazon DynamoDB. The company wants to ingest trade data into a data lake in Amazon S3 for near real-time analysis.

  Which solution will meet these requirements with the LEAST operational overhead?

  A. Use Amazon DynamoDB Streams to capture the trade data changes. Configure DynamoDB Streams to invoke a Lambda function that writes the data to Amazon S3.
  B. Use Amazon DynamoDB Streams to capture the trade data changes. Configure DynamoDB Streams to invoke a Lambda function that writes the data to Amazon Data Firehose. Write the data from Data Firehose to Amazon S3.
  C. Enable Amazon Kinesis Data Streams on the DynamoDB table to capture the trade data changes. Configure Kinesis Data Streams to invoke a Lambda function that writes the data to Amazon S3.
  D. Enable Amazon Kinesis Data Streams on the DynamoDB table to capture the trade data changes. Configure a data stream to be the input for Amazon Data Firehose. Write the data from Data Firehose to Amazon S3.
  A. Use Amazon DynamoDB Streams to capture the trade data changes. Configure DynamoDB Streams to invoke a Lambda function that writes the data to Amazon S3.

  ---

  Explanation

  DynamoDB Streams: Captures real-time changes in DynamoDB tables and allows integration with Lambda for processing the changes.

  Minimal Operational Overhead: Using a Lambda function directly to write data to S3 ensures simplicity and reduces the complexity of the pipeline.

  Amazon DynamoDB Streams Documentation

• Question 1275:

  A company is developing an ecommerce application that will consist of a load-balanced front end, a container-based application, and a relational database. A solutions architect needs to create a highly available solution that operates with as little manual intervention as possible.

  Which solutions meet these requirements? (Choose two.)

  A. Create an Amazon RDS DB instance in Multi-AZ mode.
  B. Create an Amazon RDS DB instance and one or more replicas in another Availability Zone.
  C. Create an Amazon EC2 instance-based Docker cluster to handle the dynamic application load.
  D. Create an Amazon Elastic Container Service (Amazon ECS) cluster with a Fargate launch type to handle the dynamic application load.
  E. Create an Amazon Elastic Container Service (Amazon ECS) cluster with an Amazon EC2 launch type to handle the dynamic application load.
  A. Create an Amazon RDS DB instance in Multi-AZ mode.
  D. Create an Amazon Elastic Container Service (Amazon ECS) cluster with a Fargate launch type to handle the dynamic application load.

• Question 1276:

  A company wants to use artificial intelligence (AI) to determine the quality of its customer service calls. The company currently manages calls in four different languages, including English. The company will offer new languages in the future.

  The company does not have the resources to regularly maintain machine learning (ML) models.

  The company needs to create written sentiment analysis reports from the customer service call recordings.

  The customer service call recording text must be translated into English.

  Which combination of steps will meet these requirements? (Choose three.)

  A. Use Amazon Comprehend to translate the audio recordings into English.
  B. Use Amazon Lex to create the written sentiment analysis reports.
  C. Use Amazon Polly to convert the audio recordings into text.
  D. Use Amazon Transcribe to convert the audio recordings in any language into text.
  E. Use Amazon Translate to translate text in any language to English.
  F. Use Amazon Comprehend to create the sentiment analysis reports.
  D. Use Amazon Transcribe to convert the audio recordings in any language into text.
  E. Use Amazon Translate to translate text in any language to English.
  F. Use Amazon Comprehend to create the sentiment analysis reports.

• Question 1277:

  A company wants DevOps teams to create IAM roles, but no role may have administrative permissions.

  Which solution will meet these requirements?

  A. Use SCPs to deny AdministratorAccess policy usage.
  B. Use SCPs to require a permissions boundary when creating IAM roles.
  C. Allow all permissions and auto-delete noncompliant roles.
  D. Attach restrictive permissions boundaries directly to IAM users.
  B. Use SCPs to require a permissions boundary when creating IAM roles.

  ---

  Explanation

  Using Service Control Policies (SCPs) to enforce permissions boundaries ensures that all created roles are constrained, regardless of attached policies. This is the most secure, scalable, and AWS-recommended preventive control.

• Question 1278:

  A company collects 10 GB of telemetry data every day from multiple devices. The company stores the data in an Amazon S3 bucket that is in a source data account.

  The company has hired several consulting agencies to analyze the company's data. Each agency has a unique AWS account. Each agency requires read access to the company's data.

  The company needs a secure solution to share the data from the source data account to the consulting agencies.

  Which solution will meet these requirements with the LEAST operational effort?

  A. Set up an Amazon CloudFront distribution. Use the S3 bucket as the origin.
  B. Make the S3 bucket public for a limited time. Inform only the agencies that the bucket is publicly accessible.
  C. Configure cross-account access for the S3 bucket to the accounts that the agencies own.
  D. Set up an IAM user for each agency in the source data account. Grant each agency IAM user access to the company's S3 bucket.
  C. Configure cross-account access for the S3 bucket to the accounts that the agencies own.

  ---

  Explanation

  The most secure and least operationally intensive method is to configure cross-account access using resource-based policies on the S3 bucket. This allows trusted external AWS accounts (consulting agencies) to securely access the S3 data without the need to manage user credentials or build additional infrastructure.

  Options A and B pose security risks. Option D increases operational complexity and violates least privilege by managing external users inside your AWS account.

• Question 1279:

  A company runs a web application on Amazon EC2 instances in multiple Availability Zones. The EC2 instances are in private subnets. A solutions architect implements an internet-facing Application Load Balancer (ALB) and specifies the EC2 instances as the target group. However, the internet traffic is not reaching the EC2 instances.

  How should the solutions architect reconfigure the architecture to resolve this issue?

  A. Replace the ALB with a Network Load Balancer. Configure a NAT gateway in a public subnet to allow internet traffic.
  B. Move the EC2 instances to public subnets. Add a rule to the EC2 instances' security groups to allow outbound traffic to 0.0.0.0/0.
  C. Update the route tables for the EC2 instances' subnets to send 0.0.0.0/0 traffic through the internet gateway route. Add a rule to the EC2 instances' security groups to allow outbound traffic to 0.0.0.0/0.
  D. Create public subnets in each Availability Zone. Associate the public subnets with the ALB. Update the route tables for the public subnets with a route to the private subnets.
  D. Create public subnets in each Availability Zone. Associate the public subnets with the ALB. Update the route tables for the public subnets with a route to the private subnets.

• Question 1280:

  A company runs a microservice-based serverless web application. The application must be able to retrieve data from multiple Amazon DynamoDB tables A solutions architect needs to give the application the ability to retrieve the data with no impact on the baseline performance of the application.

  Which solution will meet these requirements in the MOST operationally efficient way?

  A. AWS AppSync pipeline resolvers
  B. Amazon CloudFront with Lambda@Edge functions
  C. Edge-optimized Amazon API Gateway with AWS Lambda functions
  D. Amazon Athena Federated Query with a DynamoDB connector
  A. AWS AppSync pipeline resolvers