Amazon Amazon Certifications SAA-C03 Questions & Answers

• Question 701:

  A company uses AWS Organizations to run workloads within multiple AWS accounts. A tagging policy adds department tags to AWS resources when the company creates tags.

  An accounting team needs to determine spending on Amazon EC2 consumption. The accounting team must determine which departments are responsible for the costs regardless ofAWS account. The accounting team has access to AWS Cost Explorer for all AWS accounts within the organization and needs to access all reports from Cost Explorer.

  Which solution meets these requirements in the MOST operationally efficient way?

  A. From the Organizations management account billing console, activate a user-defined cost allocation tag named department. Create one cost report in Cost Explorer grouping by tag name, and filter by EC2.

  B. From the Organizations management account billing console, activate an AWS-defined cost allocation tag named department. Create one cost report in Cost Explorer grouping by tag name, and filter by EC2.

  C. From the Organizations member account billing console, activate a user-defined cost allocation tag named department. Create one cost report in Cost Explorer grouping by the tag name, and filter by EC2.

  D. From the Organizations member account billing console, activate an AWS-defined cost allocation tag named department. Create one cost report in Cost Explorer grouping by tag name, and filter by EC2.

  Correct Answer: A

  By activating a user-defined cost allocation tag named "department" and creating a cost report in Cost Explorer that groups by the tag name and filters by EC2, the accounting team will be able to track and attribute costs to specific departments across all AWS accounts within the organization. This approach allows for consistent cost allocation and reporting regardless of the AWS account structure.

• Question 702:

  A company uses AWS Organizations. The company wants to operate some of its AWS accounts with different budgets. The company wants to receive alerts and automatically prevent provisioning of additional resources on AWS accounts when the allocated budget threshold is met during a specific period.

  Which combination of solutions will meet these requirements? (Choose three.)

  A. Use AWS Budgets to create a budget. Set the budget amount under the Cost and Usage Reports section of the required AWS accounts.

  B. Use AWS Budgets to create a budget. Set the budget amount under the Billing dashboards of the required AWS accounts.

  C. Create an IAM user for AWS Budgets to run budget actions with the required permissions.

  D. Create an IAM role for AWS Budgets to run budget actions with the required permissions.

  E. Add an alert to notify the company when each account meets its budget threshold. Add a budget action that selects the IAM identity created with the appropriate config rule to prevent provisioning of additional resources.

  F. Add an alert to notify the company when each account meets its budget threshold. Add a budget action that selects the IAM identity created with the appropriate service control policy (SCP) to prevent provisioning of additional resources.

  Correct Answer: BDF

  https://docs.aws.amazon.com/ja_jp/awsaccountbilling/latest/aboutv2/view-billing-dashboard.html

• Question 703:

  A company runs applications on Amazon EC2 instances in one AWS Region. The company wants to back up the EC2 instances to a second Region. The company also wants to provision EC2 resources in the second Region and manage the EC2 instances centrally from one AWS account.

  Which solution will meet these requirements MOST cost-effectively?

  A. Create a disaster recovery (DR) plan that has a similar number of EC2 instances in the second Region. Configure data replication.

  B. Create point-in-time Amazon Elastic Block Store (Amazon EBS) snapshots of the EC2 instances. Copy the snapshots to the second Region periodically.

  C. Create a backup plan by using AWS Backup. Configure cross-Region backup to the second Region for the EC2 instances.

  D. Deploy a similar number of EC2 instances in the second Region. Use AWS DataSync to transfer the data from the source Region to the second Region.

  Correct Answer: C

  Using AWS Backup, you can create backup plans that automate the backup process for your EC2 instances. By configuring cross-Region backup, you can ensure that backups are replicated to the second Region, providing a disaster recovery capability. This solution is cost-effective as it leverages AWS Backup's built-in features and eliminates the need for manual snapshot management or deploying and managing additional EC2 instances in the second Region.

• Question 704:

  A company has a three-tier web application that is in a single server. The company wants to migrate the application to the AWS Cloud. The company also wants the application to align with the AWS Well-Architected Framework and to be consistent with AWS recommended best practices for security, scalability, and resiliency.

  Which combination of solutions will meet these requirements? (Choose three.)

  A. Create a VPC across two Availability Zones with the application's existing architecture. Host the application with existing architecture on an Amazon EC2 instance in a private subnet in each Availability Zone with EC2 Auto Scaling groups. Secure the EC2 instance with security groups and network access control lists (network ACLs).

  B. Set up security groups and network access control lists (network ACLs) to control access to the database layer. Set up a single Amazon RDS database in a private subnet.

  C. Create a VPC across two Availability Zones. Refactor the application to host the web tier, application tier, and database tier. Host each tier on its own private subnet with Auto Scaling groups for the web tier and application tier.

  D. Use a single Amazon RDS database. Allow database access only from the application tier security group.

  E. Use Elastic Load Balancers in front of the web tier. Control access by using security groups containing references to each layer's security groups.

  F. Use an Amazon RDS database Multi-AZ cluster deployment in private subnets. Allow database access only from application tier security groups.

  Correct Answer: CEF

  C.This solution follows the recommended architecture pattern of separating the web, application, and database tiers into different subnets. It provides better security, scalability, and fault tolerance. E.By using Elastic Load Balancers (ELBs), you can distribute traffic to multiple instances of the web tier, increasing scalability and availability. Controlling access through security groups allows for fine-grained control and ensures only authorized traffic reaches each layer. F.Deploying an Amazon RDS database in a Multi-AZ configuration provides high availability and automatic failover. Placing the database in private subnets enhances security. Allowing database access only from the application tier security groups limits exposure and follows the principle of least privilege.

• Question 705:

  A company is migrating its applications and databases to the AWS Cloud. The company will use Amazon Elastic Container Service (Amazon ECS), AWS Direct Connect, and Amazon RDS. Which activities will be managed by the company's operational team? (Choose three.)

  A. Management of the Amazon RDS infrastructure layer, operating system, and platforms

  B. Creation of an Amazon RDS DB instance and configuring the scheduled maintenance window

  C. Configuration of additional software components on Amazon ECS for monitoring, patch management, log management, and host intrusion detection

  D. Installation of patches for all minor and major database versions for Amazon RDS

  E. Ensure the physical security of the Amazon RDS infrastructure in the data center

  F. Encryption of the data that moves in transit through Direct Connect

  Correct Answer: BCF

  B: Mentioned RDS

  C: Mentioned ECS

  F: Mentioned Direct connect

• Question 706:

  A company runs a Java-based job on an Amazon EC2 instance. The job runs every hour and takes 10 seconds to run. The job runs on a scheduled interval and consumes 1 GB of memory. The CPU utilization of the instance is low except for short surges during which the job uses the maximum CPU available. The company wants to optimize the costs to run the job.

  Which solution will meet these requirements?

  A. Use AWS App2Container (A2C) to containerize the job. Run the job as an Amazon Elastic Container Service (Amazon ECS) task on AWS Fargate with 0.5 virtual CPU (vCPU) and 1 GB of memory.

  B. Copy the code into an AWS Lambda function that has 1 GB of memory. Create an Amazon EventBridge scheduled rule to run the code each hour.

  C. Use AWS App2Container (A2C) to containerize the job. Install the container in the existing Amazon Machine Image (AMI). Ensure that the schedule stops the container when the task finishes.

  D. Configure the existing schedule to stop the EC2 instance at the completion of the job and restart the EC2 instance when the next job starts.

  Correct Answer: B

  AWS Lambda automatically scales resources to handle the workload, so you don't have to worry about managing the underlying infrastructure. It provisions the necessary compute resources based on the configured memory size (1 GB in this case) and executes the job in a serverless environment.

  By using Amazon EventBridge, you can create a scheduled rule to trigger the Lambda function every hour, ensuring that the job runs on the desired interval.

• Question 707:

  A company has resources across multiple AWS Regions and accounts. A newly hired solutions architect discovers a previous employee did not provide details about the resources inventory. The solutions architect needs to build and map the relationship details of the various workloads across all accounts.

  Which solution will meet these requirements in the MOST operationally efficient way?

  A. Use AWS Systems Manager Inventory to generate a map view from the detailed view report.

  B. Use AWS Step Functions to collect workload details. Build architecture diagrams of the workloads manually.

  C. Use Workload Discovery on AWS to generate architecture diagrams of the workloads.

  D. Use AWS X-Ray to view the workload details. Build architecture diagrams with relationships.

  Correct Answer: C

  Workload Discovery on AWS is a service that helps visualize and understand the architecture of your workloads across multiple AWS accounts and Regions. It automatically discovers and maps the relationships between resources, providing an accurate representation of the architecture.

• Question 708:

  A company wants to implement a backup strategy for Amazon EC2 data and multiple Amazon S3 buckets. Because of regulatory requirements, the company must retain backup files for a specific time period. The company must not alter the files for the duration of the retention period.

  Which solution will meet these requirements?

  A. Use AWS Backup to create a backup vault that has a vault lock in governance mode. Create the required backup plan.

  B. Use Amazon Data Lifecycle Manager to create the required automated snapshot policy.

  C. Use Amazon S3 File Gateway to create the backup. Configure the appropriate S3 Lifecycle management.

  D. Use AWS Backup to create a backup vault that has a vault lock in compliance mode. Create the required backup plan.

  Correct Answer: D

  Must not alter the files for the duration of the retention period = Compliance Mode https://docs.aws.amazon.com/aws-backup/latest/devguide/vault-lock.html

• Question 709:

  A company runs its application on an Oracle database. The company plans to quickly migrate to AWS because of limited resources for the database, backup administration, and data center maintenance. The application uses third-party database features that require privileged access.

  Which solution will help the company migrate the database to AWS MOST cost-effectively?

  A. Migrate the database to Amazon RDS for Oracle. Replace third-party features with cloud services.

  B. Migrate the database to Amazon RDS Custom for Oracle. Customize the database settings to support third-party features.

  C. Migrate the database to an Amazon EC2 Amazon Machine Image (AMI) for Oracle. Customize the database settings to support third-party features.

  D. Migrate the database to Amazon RDS for PostgreSQL by rewriting the application code to remove dependency on Oracle APEX.

  Correct Answer: B

  https://aws.amazon.com/about-aws/whats-new/2021/10/amazon-rds-custom-oracle/

• Question 710:

  A company has two VPCs named Management and Production. The Management VPC uses VPNs through a customer gateway to connect to a single device in the data center. The Production VPC uses a virtual private gateway with two attached AWS Direct Connect connections. The Management and Production VPCs both use a single VPC peering connection to allow communication between the applications.

  What should a solutions architect do to mitigate any single point of failure in this architecture?

  A. Add a set of VPNs between the Management and Production VPCs.

  B. Add a second virtual private gateway and attach it to the Management VPC.

  C. Add a second set of VPNs to the Management VPC from a second customer gateway device.

  D. Add a second VPC peering connection between the Management VPC and the Production VPC.

  Correct Answer: C

  Redundant VPN connections: Instead of relying on a single device in the data center, the Management VPC should have redundant VPN connections established through multiple customer gateways. This will ensure high availability and fault tolerance in case one of the VPN connections or customer gateways fails.