Amazon Amazon Certifications SAA-C03 Questions & Answers

• Question 561:

  A company is hosting a three-tier ecommerce application in the AWS Cloud. The company hosts the website on Amazon S3 and integrates the website with an API that handles sales requests. The company hosts the API on three Amazon EC2 instances behind an Application Load Balancer (ALB). The API consists of static and dynamic front-end content along with backend workers that process sales requests asynchronously.

  The company is expecting a significant and sudden increase in the number of sales requests during events for the launch of new products

  What should a solutions architect recommend to ensure that all the requests are processed successfully?

  A. Add an Amazon CloudFront distribution for the dynamic content. Increase the number of EC2 instances to handle the increase in traffic.

  B. Add an Amazon CloudFront distribution for the static content. Place the EC2 instances in an Auto Scaling group to launch new instances based on network traffic.

  C. Add an Amazon CloudFront distribution for the dynamic content. Add an Amazon ElastiCache instance in front of the ALB to reduce traffic for the API to handle.

  D. Add an Amazon CloudFront distribution for the static content. Add an Amazon Simple Queue Service (Amazon SOS) queue to receive requests from the website for later processing by the EC2 instances.

  Correct Answer: D

  An SQS queue acts as a buffer between the frontend (website) and backend (API). Web requests can dump messages into the queue at a high throughput, then the queue handles delivering those messages to the API at a controlled rate that it can sustain. This prevents the API from being overwhelmed.

• Question 562:

  What should a solutions architect do to ensure that all objects uploaded to an Amazon S3 bucket are encrypted?

  A. Update the bucket policy to deny if the PutObject does not have an s3 x-amz-acl header set

  B. Update the bucket policy to deny if the PutObject does not have an s3:x-amz-aci header set to private.

  C. Update the bucket policy to deny if the PutObject does not have an aws SecureTransport header set to true

  D. Update the bucket policy to deny if the PutObject does not have an x-amz-server-side-encryption header set.

  Correct Answer: D

  To encrypt an object at the time of upload, you need to add a header called x-amz-server-side-encryption to the request to tell S3 to encrypt the object using SSE-C, SSE-S3, or SSE-KMS. The following code example shows a Put request

  using SSE-S3.

  https://aws.amazon.com/blogs/security/how-to-prevent-uploads-of-unencrypted-objects-to-amazon-s3/

• Question 563:

  A company has an on-premises MySQL database used by the global tales team with infrequent access patterns. The sales team requires the database to have minimal downtime. A database administrate wants to migrate this database to AWS without selecting a particular instance type in anticipation of more users In the future.

  Which service should a solutions architect recommend?

  A. Amazon Aurora MySQL

  B. Amazon Aurora Serverless tor MySQL

  C. Amazon Redshift Spectrum

  D. Amazon RDS for MySQL

  Correct Answer: B

  Amazon Aurora Serverless for MySQL is a fully managed, auto-scaling relational database service that scales up or down automatically based on the application demand. This service provides all the capabilities of Amazon Aurora, such as high availability, durability, and security, without requiring the customer to provision any database instances.

  With Amazon Aurora Serverless for MySQL, the sales team can enjoy minimal downtime since the database is designed to automatically scale to accommodate the increased traffic. Additionally, the service allows the customer to pay only for the capacity used, making it cost-effective for infrequent access patterns.

  Amazon RDS for MySQL could also be an option, but it requires the customer to select an instance type, and the database administrator would need to monitor and adjust the instance size manually to accommodate the increasing traffic.

• Question 564:

  A company has a web application hosted over 10 Amazon EC2 instances with traffic directed by Amazon Route 53. The company occasionally experiences a timeout error when attempting to browse the application. The networking team finds that some DNS queries return IP addresses of unhealthy instances, resulting in the timeout error. What should a solutions architect implement to overcome these timeout errors?

  A. Create a Route 53 simple routing policy record for each EC2 instance. Associate a health check with each record.

  B. Create a Route 53 failover routing policy record for each EC2 instance. Associate a health check with each record.

  C. Create an Amazon CloudFront distribution with EC2 instances as its origin. Associate a health check with the EC2 instances.

  D. Create an Application Load Balancer (ALB) with a health check in front of the EC2 instances. Route to the ALB from Route 53.

  Correct Answer: D

  An Application Load Balancer (ALB) allows you to distribute incoming traffic across multiple backend instances, and can automatically route traffic to healthy instances while removing traffic from unhealthy instances. By using an ALB in front of the EC2 instances and routing traffic to it from Route 53, the load balancer can perform health checks on the instances and only route traffic to healthy instances, which should help to reduce or eliminate timeout errors caused by unhealthy instances.

• Question 565:

  A company needs to retain its AWS CloudTrail logs for 3 years. The company is enforcing CloudTrail across a set of AWS accounts by using AWS Organizations from the parent account. The CloudTrail target S3 bucket is configured with S3

  Versioning enabled. An S3 Lifecycle policy is in place to delete current objects after 3 years.

  After the fourth year of use of the S3 bucket, the S3 bucket metrics show that the number of objects has continued to rise. However, the number of new CloudTrail logs that are delivered to the S3 bucket has remained consistent.

  Which solution will delete objects that are older than 3 years in the MOST cost-effective manner?

  A. Configure the organization's centralized CloudTrail trail to expire objects after 3 years.

  B. Configure the S3 Lifecycle policy to delete previous versions as well as current versions.

  C. Create an AWS Lambda function to enumerate and delete objects from Amazon S3 that are older than 3 years.

  D. Configure the parent account as the owner of all objects that are delivered to the S3 bucket.

  Correct Answer: B

  This is the most cost-effective option because:

  1.

  Versioning has caused the number of objects to increase over time, even as current objects are deleted after 3 years. By deleting previous versions as well, this will clean up old object versions and reduce storage costs.

  2.

  An S3 Lifecycle policy incurs no additional charges and requires no additional resources to configure and run. It is a native S3 tool for managing object lifecycles cost-effectively. https://docs.aws.amazon.com/awscloudtrail/latest/userguide/best-practices-security.html#:~:text=The%20CloudTrail%20trail,time%20has%20passed.

• Question 566:

  A company is running a batch application on Amazon EC2 instances. The application consists of a backend with multiple Amazon RDS databases. The application is causing a high number of leads on the databases. A solutions architect

  must reduce the number of database reads while ensuring high availability.

  What should the solutions architect do to meet this requirement?

  A. Add Amazon RDS read replicas

  B. Use Amazon ElastCache for Redis

  C. Use Amazon Route 53 DNS caching

  D. Use Amazon ElastiCache for Memcached

  Correct Answer: A

• Question 567:

  A company is running a multi-tier recommence web application in the AWS Cloud. The application runs on Amazon EC2 instances with an Amazon RDS for MySQL Multi-AZ OB instance. Amazon ROS is configured with the latest generation DB instance with 2.000 GB of storage In a General Purpose SSD (gp3) Amazon Elastic Block Store (Amazon EBSl volume. The database performance affects the application during periods high demand.

  A database administrator analyzes the logs in Amazon CloudWatch Logs and discovers that the application performance always degrades when the number of read and write IOPS is higher than 20.000.

  What should a solutions architect do to improve the application performance?

  A. Replace the volume with a magnetic volume.

  B. Increase the number of IOPS on the gp3 volume.

  C. Replace the volume with a Provisioned IOPS SSD (Io2) volume.

  D. Replace the 2.000 GB gp3 volume with two 1.000 GB gp3 volumes

  Correct Answer: B

  DB storage size for gp3 above 400 G support up to 64,000 IOPS, please check the below link: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Storage.html

• Question 568:

  A meteorological startup company has a custom web application to sell weather data to its users online. The company uses Amazon DynamoDB to store is data and wants to bu4d a new service that sends an alert to the managers of four Internal teams every time a new weather event is recorded. The company does not want true new service to affect the performance of the current application

  What should a solutions architect do to meet these requirement with the LEAST amount of operational overhead?

  A. Use DynamoDB transactions to write new event data to the table Configure the transactions to notify internal teams.

  B. Have the current application publish a message to four Amazon Simple Notification Service (Amazon SNS) topics. Have each team subscribe to one topic.

  C. Enable Amazon DynamoDB Streams on the table. Use triggers to write to a mingle Amazon Simple Notification Service (Amazon SNS) topic to which the teams can subscribe.

  D. Add a custom attribute to each record to flag new items. Write a cron job that scans the table every minute for items that are new and notifies an Amazon Simple Queue Service (Amazon SOS) queue to which the teams can subscribe.

  Correct Answer: C

  The best solution to meet these requirements with the least amount of operational overhead is to enable Amazon DynamoDB Streams on the table and use triggers to write to a single Amazon Simple Notification Service (Amazon SNS) topic to which the teams can subscribe. This solution requires minimal configuration and infrastructure setup, and Amazon DynamoDB Streams provide a low-latency way to capture changes to the DynamoDB table. The triggers automatically capture the changes and publish them to the SNS topic, which notifies the internal teams.

• Question 569:

  A company recently announced the deployment of its retail website to a global audience. The website runs on multiple Amazon EC2 instances behind an Elastic Load Balancer. The instances run in an Auto Scaling group across multiple Availability Zones.

  The company wants to provide its customers with different versions of content based on the devices that the customers use to access the website.

  Which combination of actions should a solutions architect take to meet these requirements? (Choose two.)

  A. Configure Amazon CloudFront to cache multiple versions of the content.

  B. Configure a host header in a Network Load Balancer to forward traffic to different instances.

  C. Configure a Lambda@Edge function to send specific objects to users based on the User-Agent header.

  D. Configure AWS Global Accelerator. Forward requests to a Network Load Balancer (NLB). Configure the NLB to set up host-based routing to different EC2 instances.

  E. Configure AWS Global Accelerator. Forward requests to a Network Load Balancer (NLB). Configure the NLB to set up path-based routing to different EC2 instances.

  Correct Answer: AC

  For C: IMPROVED USER EXPERIENCE Lambda@Edge can help improve your users' experience with your websites and web applications across the world, by letting you personalize content for them without sacrificing performance. Real-time Image Transformation You can customize your users' experience by transforming images on the fly based on the user characteristics. For example, you can resize images based on the viewer's device type--mobile, desktop, or tablet. You can also cache the transformed images at CloudFront Edge locations to further improve performance when delivering images. https://aws.amazon.com/lambda/edge/

• Question 570:

  A company runs a containerized application on a Kubernetes cluster in an on-premises data center. The company is using a MongoDB database for data storage.

  The company wants to migrate some of these environments to AWS, but no code changes or deployment method changes are possible at this time. The company needs a solution that minimizes operational overhead.

  Which solution meets these requirements?

  A. Use Amazon Elastic Container Service (Amazon ECS) with Amazon EC2 worker nodes for compute and MongoDB on EC2 for data storage.

  B. Use Amazon Elastic Container Service (Amazon ECS) with AWS Fargate for compute and Amazon DynamoDB for data storage.

  C. Use Amazon Elastic Kubernetes Service (Amazon EKS) with Amazon EC2 worker nodes for compute and Amazon DynamoDB for data storage.

  D. Use Amazon Elastic Kubernetes Service (Amazon EKS) with AWS Fargate for compute and Amazon DocumentDB (with MongoDB compatibility) for data storage.

  Correct Answer: D

  Amazon DocumentDB (with MongoDB compatibility) is a fast, reliable, and fully managed database service. Amazon DocumentDB makes it easy to set up, operate, and scale MongoDB-compatible databases in the cloud. With Amazon DocumentDB, you can run the same application code and use the same drivers and tools that you use with MongoDB. https://docs.aws.amazon.com/documentdb/latest/developerguide/what-is.html