Amazon Amazon Certifications SAA-C03 Questions & Answers

• Question 761:

  A company is running a critical business application on Amazon EC2 instances behind an Application Load Balancer The EC2 instances run in an Auto Scaling group and access an Amazon RDS DB instance

  The design did not pass an operational review because the EC2 instances and the DB instance are all located in a single Availability Zone A solutions architect must update the design to use a second Availability Zone

  Which solution will make the application highly available?

  A. Provision a subnet in each Availability Zone Configure the Auto Scaling group to distribute the EC2 instances across both Availability Zones Configure the DB instance with connections to each network

  B. Provision two subnets that extend across both Availability Zones Configure the Auto Scaling group to distribute the EC2 instances across both Availability Zones Configure the DB instance with connections to each network

  C. Provision a subnet in each Availability Zone Configure the Auto Scaling group to distribute the EC2 instances across both Availability Zones Configure the DB instance for Multi-AZ deployment

  D. Provision a subnet that extends across both Availability Zones Configure the Auto Scaling group to distribute the EC2 instances across both Availability Zones Configure the DB instance for Multi-AZ deployment

  Correct Answer: C

  A subnet must reside within a single Availability Zone. https://aws.amazon.com/vpc/faqs/#:~:text=Can%20a%20subnet%20span%20Availability,within%20a%20single%20Availability%20Zone.

• Question 762:

  A company stores its data objects in Amazon S3 Standard storage. A solutions architect has found that 75% of the data is rarely accessed after 30 days. The company needs all the data to remain immediately accessible with the same high availability and resiliency, but the company wants to minimize storage costs.

  Which storage solution will meet these requirements?

  A. Move the data objects to S3 Glacier Deep Archive after 30 days.

  B. Move the data objects to S3 Standard-Infrequent Access (S3 Standard-IA) after 30 days.

  C. Move the data objects to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 30 days.

  D. Move the data objects to S3 One Zone-Infrequent Access (S3 One Zone-IA) immediately.

  Correct Answer: B

• Question 763:

  A company plans to use Amazon ElastiCache for its multi-tier web application A solutions architect creates a Cache VPC for the ElastiCache cluster and an App VPC for the application's Amazon EC2 instances Both VPCs are in the us-east-1 Region The solutions architect must implement a solution to provide tne application's EC2 instances with access to the ElastiCache cluster Which solution will meet these requirements MOST cost-effectively?

  A. Create a peering connection between the VPCs Add a route table entry for the peering connection in both VPCs Configure an inbound rule for the ElastiCache cluster's security group to allow inbound connection from the application's security group

  B. Create a Transit VPC Update the VPC route tables in the Cache VPC and the App VPC to route traffic through the Transit VPC Configure an inbound rule for the ElastiCache cluster's security group to allow inbound connection from the application's security group

  C. Create a peering connection between the VPCs Add a route table entry for the peering connection in both VPCs Configure an inbound rule for the peering connection's security group to allow inbound connection from the application's secunty group

  D. Create a Transit VPC Update the VPC route tables in the Cache VPC and the App VPC to route traffic through the Transit VPC Configure an inbound rule for the Transit VPCs security group to allow inbound connection from the application's security group

  Correct Answer: A

  Creating a peering connection between the two VPCs and configuring an inbound rule for the ElastiCache cluster's security group to allow inbound connection from the application's security group is the most cost-effective solution. Peering connections are free and you only incur the cost of configuring the security group rules. The Transit VPC solution requires additional VPCs and associated resources, which would incur additional costs.

  Before Testing | AWS Certification Information and Policies | AWS https://aws.amazon.com/certification/policies/before-testing/

• Question 764:

  A company runs an application on a group of Amazon Linux EC2 instances. For compliance reasons, the company must retain all application log files for 7 years. The log files will be analyzed by a reporting tool that must be able to access all the files concurrently.

  Which storage solution meets these requirements MOST cost-effectively?

  A. Amazon Elastic Block Store (Amazon EBS)

  B. Amazon Elastic File System (Amazon EFS)

  C. Amazon EC2 instance store

  D. Amazon S3

  Correct Answer: D

• Question 765:

  A solutions architect needs to design a system to store client case files. The files are core company assets and are important. The number of files will grow over time.

  The files must be simultaneously accessible from multiple application servers that run on Amazon EC2 instances. The solution must have built-in redundancy.

  Which solution meets these requirements?

  A. Amazon Elastic File System (Amazon EFS)

  B. Amazon Elastic Block Store (Amazon EBS)

  C. Amazon S3 Glacier Deep Archive

  D. AWS Backup

  Correct Answer: A

  Amazon EFS provides a simple, scalable, fully managed file system that can be simultaneously accessed from multiple EC2 instances and provides built-in redundancy. It is optimized for multiple EC2 instances to access the same files, and it is designed to be highly available, durable, and secure. It can scale up to petabytes of data and can handle thousands of concurrent connections, and is a cost-effective solution for storing and accessing large amounts of data.

• Question 766:

  A company recently migrated its entire IT environment to the AWS Cloud. The company discovers that users are provisioning oversized Amazon EC2 instances and modifying security group rules without using the appropriate change control process A solutions architect must devise a strategy to track and audit these inventory and configuration changes.

  Which actions should the solutions architect take to meet these requirements? (Select TWO )

  A. Enable AWS CloudTrail and use it for auditing

  B. Use data lifecycie policies for the Amazon EC2 instances

  C. Enable AWS Trusted Advisor and reference the security dashboard

  D. Enable AWS Config and create rules for auditing and compliance purposes

  E. Restore previous resource configurations with an AWS CloudFormation template

  Correct Answer: AD

  CloudTrail provides event history of your AWS account activity, including actions taken through the AWS Management Console, AWS Command Line Interface (CLI), and AWS SDKs and APIs. By enabling CloudTrail, the company can track user activity and changes to AWS resources, and monitor compliance with internal policies and external regulations.

  AWS Config provides a detailed inventory of the AWS resources in your account, and continuously records changes to the configurations of those resources. By creating rules in AWS Config, the company can automate the evaluation of resource configurations against desired state, and receive alerts when configurations drift from compliance.

• Question 767:

  A solutions architect is designing the architecture for a software demonstration environment The environment will run on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB) The system will experience significant increases in traffic during working hours but Is not required to operate on weekends.

  Which combination of actions should the solutions architect take to ensure that the system can scale to meet demand? (Select TWO)

  A. Use AWS Auto Scaling to adjust the ALB capacity based on request rate

  B. Use AWS Auto Scaling to scale the capacity of the VPC internet gateway

  C. Launch the EC2 instances in multiple AWS Regions to distribute the load across Regions

  D. Use a target tracking scaling policy to scale the Auto Scaling group based on instance CPU utilization

  E. Use scheduled scaling to change the Auto Scaling group minimum, maximum, and desired capacity to zero for weekends Revert to the default values at the start of the week

  Correct Answer: DE

• Question 768:

  An IAM user made several configuration changes to AWS resources m their company's account during a production deployment last week. A solutions architect learned that a couple of security group rules are not configured as desired. The solutions architect wants to confirm which IAM user was responsible for making changes.

  Which service should the solutions architect use to find the desired information?

  A. Amazon GuardDuty

  B. Amazon Inspector

  C. AWS CloudTrail

  D. AWS Config

  Correct Answer: C

  The best option is to use AWS CloudTrail to find the desired information. AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of AWS account activities. CloudTrail can be used to log all changes made to resources in an AWS account, including changes made by IAM users, EC2 instances, AWS management console, and other AWS services. By using CloudTrail, the solutions architect can identify the IAM user who made the configuration changes to the security group rules.

• Question 769:

  A company wants to configure its Amazon CloudFront distribution to use SSL/TLS certificates. The company does not want to use the default domain name for the distribution. Instead, the company wants to use a different domain name for the distribution.

  Which solution will deploy the certificate with icurring any additional costs?

  A. Request an Amazon issued private certificate from AWS Certificate Manager (ACM) in the us-east-1 Region

  B. Request an Amazon issued private certificate from AWS Certificate Manager (ACM) in the us-west-1 Region.

  C. Request an Amazon issued public certificate from AWS Certificate Manager (ACU) in the us-east-1 Region

  D. Request an Amazon issued public certificate from AWS Certificate Manager (ACU) in the us-west-1 Regon.

  Correct Answer: C

• Question 770:

  An ecommerce company is running a multi-tier application on AWS. The front-end and backend tiers run on Amazon EC2, and the database runs on Amazon RDS for MYSQL. The backend tier communities with the RDS instance. There are frequent calls to return identical database from the database that are causing performance slowdowns.

  Which action should be taken to improve the performance of the backend?

  A. Implement Amazon SNS to store the database calls.

  B. Implement Amazon ElasticCache to cache the large database.

  C. Implement an RDS for MySQL read replica to cache database calls.

  D. Implement Amazon Kinesis Data Firehose to stream the calls to the database.

  Correct Answer: B

  the best solution is to implement Amazon ElastiCache to cache the large datasets, which will store the frequently accessed data in memory, allowing for faster retrieval times. This can help to alleviate the frequent calls to the database, reduce latency, and improve the overall performance of the backend tier.