Amazon SAA-C03 Online Practice Questions and Exam Preparation

Amazon SAA-C03 Online Questions & Answers

• Question 1401:

  A company has an AWS Glue extract, transform, and load (ETL) job that runs every day at the same time.

  The job processes XML data that is in an Amazon S3 bucket. New data is added to the S3 bucket every day. A solutions architect notices that AWS Glue is processing all the data during each run.

  What should the solutions architect do to prevent AWS Glue from reprocessing old data?

  A. Edit the job to use job bookmarks.
  B. Edit the job to delete data after the data is processed.
  C. Edit the job by setting the NumberOfWorkers field to 1.
  D. Use a FindMatches machine learning (ML) transform.
  A. Edit the job to use job bookmarks.

• Question 1402:

  A company wants to create a payment processing application. The application must run when a payment record arrives in an existing Amazon S3 bucket. The application must process each payment record exactly once. The company wants to use an AWS Lambda function to process the payments.

  Which solution will meet these requirements?

  A. Configure the existing S3 bucket to send object creation events to Amazon EventBridge. Configure EventBridge to route events to an Amazon Simple Queue Service (Amazon SQS) FIFO queue. Configure the Lambda function to run when a new event arrives in the SQS queue.
  B. Configure the existing S3 bucket to send object creation events to an Amazon Simple Notification Service (Amazon SNS) topic. Configure the Lambda function to run when a new event arrives in the SNS topic.
  C. Configure the existing S3 bucket to send object creation events to an Amazon Simple Queue Service (Amazon SQS) queue. Configure the Lambda function to run when a new event arrives in the SQS queue.
  D. Configure the existing S3 bucket to send object creation events directly to the Lambda function. Configure the Lambda function to handle object creation events and to process the payments.
  B. Configure the existing S3 bucket to send object creation events to an Amazon Simple Notification Service (Amazon SNS) topic. Configure the Lambda function to run when a new event arrives in the SNS topic.

• Question 1403:

  A company has a social media application that is experiencing rapid user growth. The current architecture uses t-family Amazon EC2 instances. The current architecture struggles to handle the increasing number of user posts and images.

  The application experiences performance slowdowns during peak usage times.

  A solutions architect needs to design an updated architecture that will resolve the performance issues and scale as usage increases.

  Which solution will meet these requirements with the LEAST operational overhead?

  A. Use the largest Amazon EC2 instance in the same family to host the application. Install a relational database on the instance to store all account information and to store posts and images.
  B. Use Amazon Simple Queue Service (Amazon SQS) to buffer incoming posts. Use a larger EC2 instance in the same family to host the application. Store account information in Amazon DynamoDB. Store posts and images in the local EC2 instance file system.
  C. Use an Amazon API Gateway REST API and AWS Lambda functions to process requests. Store account information in Amazon DynamoDB. Use Amazon S3 to store posts and images.
  D. Deploy multiple EC2 instances in the same family. Use an Application Load Balancer to distribute traffic. Use a shared file system to store account information and to store posts and images.
  C. Use an Amazon API Gateway REST API and AWS Lambda functions to process requests. Store account information in Amazon DynamoDB. Use Amazon S3 to store posts and images.

  ---

  Explanation

  This question focuses on scalability, operational overhead, and performance during unpredictable workloads. API Gateway + AWS Lambda enables serverless compute, which scales automatically based on the number of requests. It requires no provisioning, maintenance, or patching of servers -- eliminating operational overhead.

  Amazon DynamoDB is a fully managed NoSQL database optimized for high-throughput workloads with single-digit millisecond latency.

  Amazon S3 is designed for high availability and durability, and is ideal for storing unstructured content such as user-uploaded images.

  By leveraging these fully managed and scalable services, the architecture meets the requirement of supporting rapid user growth while minimizing operational complexity. This solution aligns with the Performance Efficiency and Operational Excellence pillars in the AWS Well-Architected Framework.

  References:

  Serverless Web Application Architecture Using DynamoDB with Lambda Best Practices for API Gateway

• Question 1404:

  A company hosts its application on several Amazon EC2 instances inside a VPC. The company creates a dedicated Amazon S3 bucket for each customer to store their relevant information in Amazon S3.

  

  

  The company wants to ensure that the application running on EC2 instances can securely access only the S3 buckets that belong to the company's AWS account.

  Which solution will meet these requirements with the LEAST operational overhead?

  A. Create a gateway endpoint for Amazon S3 that is attached to the VPC. Update the IAM instance profile policy to provide access to only the specific buckets that the application needs.
  B. Create a NAT gateway in a public subnet with a security group that allows access to only Amazon S3. Update the route tables to use the NAT Gateway.
  C. Create a gateway endpoint for Amazon S3 that is attached to the VPUpdate the IAM instance profile policy with a Deny action and the following condition key:
  D. Create a NAT Gateway in a public subnet. Update route tables to use the NAT Gateway. Assign bucket policies for all buckets with a Deny action and the following condition key:
  C. Create a gateway endpoint for Amazon S3 that is attached to the VPUpdate the IAM instance profile policy with a Deny action and the following condition key:

• Question 1405:

  A company runs a critical Amazon RDS for MySQL DB instance in a single Availability Zone. The company must improve the availability of the DB instance.

  Which solution will meet this requirement?

  A. Configure the DB instance to use a multi-Region DB instance deployment.
  B. Create an Amazon Simple Queue Service (Amazon SQS) queue in the AWS Region where the company hosts the DB instance to manage writes to the DB instance.
  C. Configure the DB instance to use a Multi-AZ DB instance deployment.
  D. Create an Amazon Simple Queue Service (Amazon SQS) queue in a different AWS Region than the Region where the company hosts the DB instance to manage writes to the DB instance.
  C. Configure the DB instance to use a Multi-AZ DB instance deployment.

  ---

  Explanation

  To improve availability and fault tolerance of an Amazon RDS instance, the recommended approach is to configure a Multi-AZ deployment.

  Multi-AZ deployments for RDS automatically replicate data to a standby instance in a different Availability Zone (AZ).

  If a failure occurs in the primary AZ (due to hardware, network, or power), RDS will automatically failover to the standby instance with minimal downtime, without administrative intervention.

  This is an AWS-managed feature and does not require application modification.

  It does not provide scalability or load balancing; it's designed for high availability and resiliency. Options A, Option B, and Option D are incorrect:

  Option A refers to cross-Region, which is used for disaster recovery, not high availability.

  Option B and Option D with SQS do not address high availability directly for the RDS instance; queues help decouple systems but do not make a database more resilient.

  References:

  Amazon RDS Multi-AZ Deployments

• Question 1406:

  A solutions architect has created two IAM policies: Policy1 and Policy2. Both policies are attached to an

  IAM group.

  

  

  A cloud engineer is added as an IAM user to the IAM group.

  Which action will the cloud engineer be able to perform?

  A. Deleting IAM users
  B. Deleting directories
  C. Deleting Amazon EC2 instances
  D. Deleting logs from Amazon CloudWatch Logs
  C. Deleting Amazon EC2 instances

• Question 1407:

  A company uses Amazon Route 53 as its DNS provider. The company hosts a website both on premises and in the AWS Cloud. The company's on-premises data center is near the us-west-1 Region. The company hosts the website on AWS in the eu-central-1 Region.

  The company wants to optimize load times for the website as much as possible.

  Which solution will meet these requirements?

  A. Create a DNS record with a failover routing policy that routes all primary traffic to eu-central-1. Configure the routing policy to use the on-premises data center as the secondary location.
  B. Create a DNS record with an IP-based routing policy. Configure specific IP ranges to return the value for the eu-central-1 website. Configure all other IP ranges to return the value for the on-premises website.
  C. Create a DNS record with a latency-based routing policy. Configure one latency record for the eu-central-1 website and one latency record for the on-premises data center. Associate the record for the on-premises data center with the us-west-1 Region.
  D. Create a DNS record with a weighted routing policy. Split the traffic evenly between eu-central-1 and the on-premises data center.
  C. Create a DNS record with a latency-based routing policy. Configure one latency record for the eu-central-1 website and one latency record for the on-premises data center. Associate the record for the on-premises data center with the us-west-1 Region.

  ---

  Explanation

  Amazon Route 53 latency-based routing is specifically designed to route users to the endpoint that provides the lowest latency, based on actual latency measurements between AWS Regions and users' networks. This directly supports the goal of optimizing load times (performance).

  For non-AWS endpoints (like an on-premises data center), Route 53 lets you create a latency routing record and associate it with the AWS Region that is closest to that endpoint. In this case, the on-premises data center is near us-west-1, so you associate that latency record with the us-west-1 Region.

  Users for whom the eu-central-1 Region has lower latency will be routed to the AWS website in eu-central- 1. Users for whom the us-west-1ssociated endpoint has lower latency will be routed to the on-premises website.

  This matches AWS best practices for high-performance, low-latency architectures when you have multiple endpoints in different geographic locations, including a mix of AWS and on-premises resources.

  Why the other options are not correct:

  Option A (Failover routing):

  Failover routing is designed for high availability and disaster recovery (activeassive), not for optimizing latency.

  All traffic goes to the primary endpoint (eu-central-1) unless it is unhealthy. That does not choose the lowest-latency endpoint for each user, so it does not meet the "optimize load times as much as possible" requirement.

  Option B (IP-based routing):

  IP-based / geo-based policies are about directing users based on location information (IP/geo), not measured latency.

  You would have to manually decide which IP ranges get which endpoint, which does not guarantee that each user goes to the lowest-latency endpoint. It's less precise and less dynamic than latency-based routing.

  Option D (Weighted routing):

  Weighted routing splits traffic according to fixed weights (e.g., 50/50), regardless of user location or latency.

  This is useful for testing, blue/green deployment, or gradual traffic shifting, but not for performance optimization per user.

  Therefore, the only option that directly aligns with AWS guidance for performance optimization and latency-based traffic steering across Regions and on-premises endpoints is:

  Option C. Create a DNS record with a latency-based routing policy... associate the on-premises endpoint with us-west-1.

• Question 1408:

  An ecommerce company runs a PostgreSQL database on premises. The database stores data by using high IOPS Amazon Elastic Block Store (Amazon EBS) block storage. The daily peak I/O transactions per second do not exceed 15,000 IOPS. The company wants to migrate the database to Amazon RDS for PostgreSQL and provision disk IOPS performance independent of disk storage capacity.

  Which solution will meet these requirements MOST cost-effectively?

  A. Configure the General Purpose SSD (gp2) EBS volume storage type and provision 15,000 IOPS.
  B. Configure the Provisioned IOPS SSD (io1) EBS volume storage type and provision 15,000 IOPS.
  C. Configure the General Purpose SSD (gp3) EBS volume storage type and provision 15,000 IOPS.
  D. Configure the EBS magnetic volume type to achieve maximum IOPS.
  C. Configure the General Purpose SSD (gp3) EBS volume storage type and provision 15,000 IOPS.

• Question 1409:

  A development team has launched a new application that is hosted on Amazon EC2 instances inside a development VPC. A solutions architect needs to create a new VPC in the same account. The new VPC will be peered with the development VPC.

  The VPC CIDR block for the development VPC is 192.168.0.0/24. The solutions architect needs to create a CIDR block for the new VPC. The CIDR block must be valid for a VPC peering connection to the development VPC.

  What is the SMALLEST CIDR block that meets these requirements?

  A. 10.0.1.0/32
  B. 192.168.0.0/24
  C. 192.168.1.0/32
  D. 10.0.1.0/24
  D. 10.0.1.0/24

• Question 1410:

  A company is launching a new application and will display application metrics on an Amazon CloudWatch dashboard. The company's product manager needs to access this dashboard periodically. The product manager does not have an AWS account. A solutions architect must provide access to the product manager by following the principle of least privilege.

  Which solution will meet these requirements?

  A. Share the dashboard from the CloudWatch console. Enter the product manager's email address, and complete the sharing steps. Provide a shareable link for the dashboard to the product manager.
  B. Create an IAM user specifically for the product manager. Attach the CloudWatchReadOnlyAccess AWS managed policy to the user. Share the new login credentials with the product manager. Share the browser URL of the correct dashboard with the product manager.
  C. Create an IAM user for the company's employees. Attach the ViewOnlyAccess AWS managed policy to the IAM user. Share the new login credentials with the product manager. Ask the product manager to navigate to the CloudWatch console and locate the dashboard by name in the Dashboards section.
  D. Deploy a bastion server in a public subnet. When the product manager requires access to the dashboard, start the server and share the RDP credentials. On the bastion server, ensure that the browser is configured to open the dashboard URL with cached AWS credentials that have appropriate permissions to view the dashboard.
  A. Share the dashboard from the CloudWatch console. Enter the product manager's email address, and complete the sharing steps. Provide a shareable link for the dashboard to the product manager.