Amazon Amazon Certifications SAA-C03 Questions & Answers

• Question 471:

  A company is developing a mobile gaming app in a single AWS Region. The app runs on multiple Amazon EC2 instances in an Auto Scaling group. The company stores the app data in Amazon DynamoDB. The app communicates by using TCP traffic and UDP traffic between the users and the servers. The application will be used globally. The company wants to ensure the lowest possible latency for all users.

  Which solution will meet these requirements?

  A. Use AWS Global Accelerator to create an accelerator. Create an Application Load Balancer (ALB) behind an accelerator endpoint that uses Global Accelerator integration and listening on the TCP and UDP ports. Update the Auto Scaling group to register instances on the ALB.

  B. Use AWS Global Accelerator to create an accelerator. Create a Network Load Balancer (NLB) behind an accelerator endpoint that uses Global Accelerator integration and listening on the TCP and UDP ports. Update the Auto Scaling group to register instances on the NLB

  C. Create an Amazon CloudFront content delivery network (CDN) endpoint. Create a Network Load Balancer (NLB) behind the endpoint and listening on the TCP and UDP ports. Update the Auto Scaling group to register instances on the NLB. Update CloudFront to use the NLB as the origin.

  D. Create an Amazon Cloudfront content delivery network (CDN) endpoint. Create an Application Load Balancer (ALB) behind the endpoint and listening on the TCP and UDP ports. Update the Auto Scaling group to register instances on the ALB. Update CloudFront to use the ALB as the origin

  Correct Answer: B

  AWS Global Accelerator is a networking service that improves the performance and availability of applications for global users. It uses the AWS global network to route user traffic to the optimal endpoint based on performance and health. It also provides static IP addresses that act as a fixed entry point to the applications and support both TCP and UDP protocols1. By using AWS Global Accelerator, the solution can ensure the lowest possible latency for all users. A. Use AWS Global Accelerator to create an accelerator. Create an Application Load Balancer (ALB) behind an accelerator endpoint that uses Global Accelerator integration and listening on the TCP and UDP ports. Update the Auto Scaling group to register instances on the ALB. This solution will not work, as ALB does not support UDP protocol2. C. Create an Amazon CloudFront content delivery network (CDN) endpoint. Create a Network Load Balancer (NLB) behind the endpoint and listening on the TCP and UDP ports. Update the Auto Scaling group to register instances on the NLB. Update CloudFront to use the NLB as the origin. This solution will not work, as CloudFront does not support UDP protocol3. D. Create an Amazon Cloudfront content delivery network (CDN) endpoint. Create an Application Load Balancer (ALB) behind the endpoint and listening on the TCP and UDP ports. Update the Auto Scaling group to register instances on the ALB. Update CloudFront to use the ALB as the origin. This solution will not work, as CloudFront and ALB do not support UDP protocol23. Reference URL: https://aws.amazon.com/global-accelerator/

• Question 472:

  A company uses multiple vendors to distribute digital assets that are stored in Amazon S3 buckets The company wants to ensure that its vendor AWS accounts have the minimum access that is needed to download objects in these S3 buckets

  Which solution will meet these requirements with the LEAST operational overhead?

  A. Design a bucket policy that has anonymous read permissions and permissions to list ail buckets.

  B. Design a bucket policy that gives read-only access to users. Specify 1AM entities as principals

  C. Create a cross-account 1AM role that has a read-only access policy specified for the 1AM role.

  D. Create a user policy and vendor user groups that give read-only access to vendor users

  Correct Answer: C

  A cross-account IAM role is a way to grant users from one AWS account access to resources in another AWS account. The cross-account IAM role can have a read-only access policy attached to it, which allows the users to download objects from the S3 buckets without modifying or deleting them. The cross-account IAM role also reduces the operational overhead of managing multiple IAM users and policies in each account. The cross-account IAM role meets all the requirements of the question, while the other options do not. References: https://docs.aws.amazon.com/AmazonS3/latest/userguide/example-walkthroughs- managing-access- example2.html https://aws.amazon.com/blogs/storage/setting-up-cross-account-amazon-s3- access-with-s3-access- points/ https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for- user_externalid.html

• Question 473:

  A company has a mobile chat application with a data store based in Amazon uynamoUb. users would like new messages to be read with as little latency as possible A solutions architect needs to design an optimal solution that requires minimal application changes.

  Which method should the solutions architect select?

  A. Configure Amazon DynamoDB Accelerator (DAX) for the new messages table. Update the code to use the DAXendpoint.

  B. Add DynamoDB read repticas to handle the increased read load. Update the application to point to the read endpoint for the read replicas.

  C. Double the number of read capacity units for the new messages table in DynamoDB. Continue to use the existing DynamoDB endpoint.

  D. Add an Amazon ElastiCache for Redis cache to the application stack. Update the application to point to the Redis cache endpoint instead of DynamoDB.

  Correct Answer: A

  https://aws.amazon.com/premiumsupport/knowledge-center/dynamodb-high- latency/ Amazon DynamoDB Accelerator (DAX) is a fully managed in-memory cache for DynamoDB that improves the performance of DynamoDB tables by up to 10 times and provides microsecond level of response time at any scale. It is compatible with DynamoDB API operations and requires minimal code changes to use1. By configuring DAX for the new messages table, the solution can reduce the latency for reading new messages with minimal application changes.

  B. Add DynamoDB read repticas to handle the increased read load. Update the application to point to the read endpoint for the read replicas. This solution will not work, as DynamoDB does not support read replicas as a feature. Read replicas are available for Amazon RDS, not for DynamoDB2. C. Double the number of read capacity units for the new messages table in DynamoDB. Continue to use the existing DynamoDB endpoint. This solution will not meet the requirement of reading new messages with as little latency as possible, as increasing the read capacity units will only increase the throughput of DynamoDB, not the performance or latency3. D. Add an Amazon ElastiCache for Redis cache to the application stack. Update the application to point to the Redis cache endpoint instead of DynamoDB. This solution will not meet the requirement of minimal application changes, as adding ElastiCache for Redis will require significant code changes to implement caching logic, such as querying cache first, updating cache after writing to DynamoDB, and invalidating cache when needed. Reference URL: https://aws.amazon.com/dynamodb/dax/

• Question 474:

  A company seeks a storage solution for its application The solution must be highly available and scalable. The solution also must function as a file system, be mountable by multiple Linux instances in AWS and on premises through native protocols, and have no minimum size requirements. The company has set up a Site-to-Site VPN for access from its on-premises network to its VPC.

  Which storage solution meets these requirements?

  A. Amazon FSx Multi-AZ deployments

  B. Amazon Elastic Block Store (Amazon EBS) Multi-Attach volumes

  C. Amazon Elastic File System (Amazon EFS) with multiple mount targets

  D. Amazon Elastic File System (Amazon EFS) with a single mount target and multiple access points

  Correct Answer: C

  Amazon EFS is a fully managed file system that can be mounted by multiple Linux instances in AWS and on premises through native protocols such as NFS and SMB. Amazon EFS has no minimum size requirements and can scale up and

  down automatically as files are added and removed. Amazon EFS also supports high availability and durability by allowing multiple mount targets in different Availability Zones within a region. Amazon EFS meets all the requirements of the

• Question 475:

  A company has applications hosted on Amazon EC2 instances with IPv6 addresses. The applications must initiate communications with other external applications using the internet.

  However, the company's security policy states that any external service cannot initiate a connection to the EC2 instances.

  What should a solutions architect recommend to resolve this issue?

  A. Create a NAT gateway and make it the destination of the subnet's route table.

  B. Create an internet gateway and make it the destination of the subnet's route table

  C. Create a virtual private gateway and make it the destination of the subnet's route table.

  D. Create an egress-only internet gateway and make it the destination of the subnet's route table.

  Correct Answer: D

  An egress-only internet gateway is a VPC component that allows outbound communication over IPv6 from instances in your VPC to the internet, and prevents the internet from initiating an IPv6 connection with your instances. This meets the company's security policy and requirements. To use an egress-only internet gateway, you need to add a route in the subnet's route table that routes IPv6 internet traffic (::/0) to the egress-only internet gateway. Reference URLs: https://docs.aws.amazon.com/vpc/latest/userguide/egress-only-internet-gateway.html https://dev.to/ aws-builders/what-is-an-egress-only-internet-gateways-in-aws-7gp https://docs.aws.amazon.com/vpc/ latest/userguide/route-table-options.html

• Question 476:

  A company hosts an online shopping application that stores all orders in an Amazon RDS for PostgreSQL Singfe-AZ DB instance. Management wants to eliminate single points of C^ilure and has asked a solutions architect to recommend an approach to minimize database downtime without requiring any changes to the application code.

  Which solution meets these requirements?

  A. Convert the existing database instance to a Multi-AZ deployment by modifying the database instance and specifying the Multi-AZ option.

  B. Create a new RDS Multi-AZ deployment. Take a snapshot of the current RDS instance and restore the new Multi-AZ deployment with the snapshot.

  C. Create a read-only replica of the PostgreSQL database in another Availability Zone. Use Amazon Route 53 weighted record sets to distribute requests across the databases.

  D. Place the RDS for PostgreSQL database in an Amazon EC2 Auto Scaling group with a minimum group size of two. Use Amazon Route 53 weighted record sets to distribute requests across instances.

  Correct Answer: A

  https://aws.amazon.com/rds/features/multi-az/ To convert an existing Single-AZ DB Instance to a Multi-AZ deployment, use the "Modify" option corresponding to your DB Instance in the AWS Management Console.

• Question 477:

  A company is looking for a solution that can store video archives in AWS from old news footage. The company needs to minimize costs and will rarely need to restore these files. When the h|es are needed, they must be available in a maximum of five minutes.

  What is the MOST cost-effective solution?

  A. Store the video archives in Amazon S3 Glacier and use Expedited retrievals.

  B. Store the video archives in Amazon S3 Glacier and use Standard retrievals.

  C. Store the video archives in Amazon S3 Standard-Infrequent Access (S3 Standard-IA).

  D. Store the video archives in Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA)

  Correct Answer: A

  Amazon S3 Glacier is a storage class that provides secure, durable, and extremely low- cost storage for data archiving and long-term backup. It is designed for data that is rarely accessed and for which retrieval times of several hours are suitable1. By storing the video archives in Amazon S3 Glacier, the solution can minimize costs. Amazon S3 Glacier offers three options for data retrieval: Expedited, Standard, and Bulk. Expedited retrievals typically return data in 1? minutes and are suitable for Active Archive use cases. Standard retrievals typically complete within 3? hours and are suitable for less urgent needs. Bulk retrievals typically complete within 5?2 hours and are the lowest-cost retrieval option2. By using Expedited retrievals, the solution can meet the requirement of restoring the files in a maximum of five minutes. B. Store the video archives in Amazon S3 Glacier and use Standard retrievals. This solution will not meet the requirement of restoring the files in a maximum of five minutes, as Standard retrievals typically complete within 3? hours. C. Store the video archives in Amazon S3 Standard-Infrequent Access (S3 Standard-IA). This solution will not meet the requirement of minimizing costs, as S3 Standard-IA is a storage class that provides low-cost storage for data that is accessed less frequently but requires rapid access when needed. It has a higher storage cost than S3 Glacier. D. Store the video archives in Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA). This solution will not meet the requirement of minimizing costs, as S3 One Zone-IA is a storage class that provides low-cost storage for data that is accessed less frequently but requires rapid access when needed. It has a higher storage cost than S3 Glacier. Reference URL: https://aws.amazon.com/s3/glacier/

• Question 478:

  A company has a production workload that is spread across different AWS accounts in various AWS Regions. The company uses AWS Cost Explorer to continuously monitor costs and usage. The company wants to receive notifications when the cost and usage spending of the workload is unusual.

  Which combination of steps will meet these requirements? (Select TWO.)

  A. In the AWS accounts where the production workload is running, create a linked account budget by using Cost Explorer in the AWS Cost Management console

  B. In ys AWS accounts where the production workload is running, create a linked account monitor by using AWS Cost Anomaly Detection in the AWS Cost Management console

  C. In the AWS accounts where the production workload is running, create a Cost and Usage Report by using Cost Anomaly Detection in the AWS Cost Management console.

  D. Create a report and send email messages to notify the company on a weekly basis.

  E. Create a subscription with the required threshold and notify the company by using weekly summaries.

  Correct Answer: BE

  AWS Cost Anomaly Detection allows you to create monitors that track the cost and usage of your AWS resources and alert you when there is an unusual spending pattern. You can create monitors based on different dimensions, such as

  AWS services, accounts, tags, or cost categories. You can also create alert subscriptions that notify you by email or Amazon SNS when an anomaly is detected. You can specify the threshold and frequency of the alerts, and choose to

  receive weekly summaries of your anomalies.

  Reference URLs:

  1 https://aws.amazon.com/aws-cost-management/aws-cost-anomaly-detection/ 2 https:// docs.aws.amazon.com/cost-management/latest/userguide/getting-started-ad.html 3 https:// docs.aws.amazon.com/cost-management/latest/userguide/

  manage-ad.html

• Question 479:

  A company stores data in PDF format in an Amazon S3 bucket The company must follow a legal requirement to retain all new and existing data in Amazon S3 for 7 years.

  Which solution will meet these requirements with the LEAST operational overhead?

  A. Turn on the S3 Versionmg feature for the S3 bucket Configure S3 Lifecycle to delete the data after 7 years. Configure multi-factor authentication (MFA) delete for all S3 objects.

  B. Turn on S3 Object Lock with governance retention mode for the S3 bucket Set the retention period to expire after 7 years. Recopy all existing objects to bring the existing data into compliance

  C. Turn on S3 Object Lock with compliance retention mode for the S3 bucket. Set the retention period to expire after 7 years. Recopy all existing objects to bring the existing data into compliance

  D. Turn on S3 Object Lock with compliance retention mode for the S3 bucket. Set the retention period to expire after 7 years. Use S3 Batch Operations to bring the existing data into compliance

  Correct Answer: D

  You need AWS Batch to re-apply certain config to files that were already in S3, like encryption

• Question 480:

  A company designed a stateless two-tier application that uses Amazon EC2 in a single Availability Zone and an Amazon RDS Multi-AZ DB instance New company management wants to ensure the application is highly available.

  What should a solutions architect do to meet this requirement?

  A. Configure the application to use Multi-AZ EC2 Auto Scaling and create an Application Load Balancer

  B. Configure the application to take snapshots of the EC2 instances and send them to a different AWS Region.

  C. Configure the application to use Amazon Route 53 latency-based routing to feed requests to the application.

  D. Configure Amazon Route 53 rules to handle incoming requests and create a Multi-AZ Application Load Balancer

  Correct Answer: A

  By combining Multi-AZ EC2 Auto Scaling and an Application Load Balancer, you achieve high availability for the EC2 instances hosting your stateless two-tier application.

  https://docs.aws.amazon.com/autoscaling/ec2/userguide/as-add-availability-zone.html