Amazon SAA-C03 Online Practice Questions and Exam Preparation

Amazon SAA-C03 Online Questions & Answers

• Question 831:

  A company is migrating an on-premises application to AWS. The company wants to use Amazon Redshift as a solution.

  Which use cases are suitable for Amazon Redshift in this scenario? (Choose three.)

  A. Supporting data APIs to access data with traditional, containerized, and event-driven applications
  B. Supporting client-side and server-side encryption
  C. Building analytics workloads during specified hours and when the application is not active
  D. Caching data to reduce the pressure on the backend database
  E. Scaling globally to support petabytes of data and tens of millions of requests per minute
  F. Creating a secondary replica of the cluster by using the AWS Management Console
  B. Supporting client-side and server-side encryption
  C. Building analytics workloads during specified hours and when the application is not active
  E. Scaling globally to support petabytes of data and tens of millions of requests per minute

• Question 832:

  A company hosts an application on AWS that stores files that users need to access. The application uses two Amazon EC2 instances. One instance is in Availability Zone A, and the second instance is in Availability Zone B. Both instances use Amazon Elastic Block Store (Amazon EBS) volumes. Users must be able to access the files at any time without delay. Users report that the two instances occasionally contain different versions of the same file. Users occasionally receive HTTP 404 errors when they try to download files. The company must address the customer issues. The company cannot make changes to the application code.

  Which solution will meet these requirements in the MOST operationally efficient way?

  A. Run the robocopy command on one of the EC2 instances on a schedule to copy files from the Availability Zone A instance to the Availability Zone B instance.
  B. Configure the application to store the files on both EBS volumes each time a user writes or updates a file.
  C. Mount an Amazon Elastic File System (Amazon EFS) file system to the EC2 instances. Copy the files from the EBS volumes to the EFS file system. Configure the application to store files in the EFS file system.
  D. Create an EC2 instance profile that allows the instance in Availability Zone A to access the S3 bucket. Re-associate the instance profile to the instance in Availability Zone B when needed.
  C. Mount an Amazon Elastic File System (Amazon EFS) file system to the EC2 instances. Copy the files from the EBS volumes to the EFS file system. Configure the application to store files in the EFS file system.

  ---

  Explanation

  Amazon EFS provides a fully managed, highly available, and shared file system that can be mounted by instances across multiple Availability Zones. This ensures consistency of files between EC2 instances and avoids replication issues. EBS volumes, in contrast, are AZ-scoped and not designed for multi-instance sharing. Options A and B rely on custom replication or manual file handling, which increases operational overhead and risks inconsistencies. Option D does not solve the shared access and consistency requirement. By migrating storage to EFS, both EC2 instances will read and write to the same storage system, ensuring that users always access the latest files without 404 errors.

  References:

  Amazon EFS User Guide -- Accessing data across multiple Availability Zones?AWS Well-Architected Framework -- Reliability Pillar: Data durability and consistency

• Question 833:

  A company is using an AWS Lambda function in a VPC. The Lambda function needs to access dependencies that exceed the size of the Lambda layer quota. The data that the Lambda function retrieves must be encrypted in transit.

  Which solution will meet these requirements with the LEAST operational overhead?

  A. Store the dependencies in an Amazon Elastic File System (Amazon EFS) file system. Mount the file system to the Lambda function. Retrieve the dependencies from the file system.
  B. Store the dependencies on an Amazon EC2 instance that has an instance store volume and web server software. Use HTTPS API calls to retrieve the dependencies each time the Lambda function runs.
  C. Store the dependencies on an Amazon EC2 instance that hosts an NFS file server. Read the files from the EC2 instance each time the Lambda function runs.
  D. Store the dependencies in two separate Lambda layers. Redesign the application to have two Lambda functions that use different Lambda layers.
  A. Store the dependencies in an Amazon Elastic File System (Amazon EFS) file system. Mount the file system to the Lambda function. Retrieve the dependencies from the file system.

  ---

  Explanation

  Lambda supports mounting an Amazon EFS file system inside your function to store larger dependencies beyond the 250 MB layer quota.

  EFS automatically encrypts data in transit using TLS.

  "You can configure your Lambda function to mount an Amazon EFS file system, enabling your function to access large amounts of data or large dependencies."

  "Amazon EFS automatically encrypts all data at rest and in transit."

  -- Lambda with Amazon EFS

  This is the least operational overhead approach.

• Question 834:

  A company is designing an IPv6 application that is hosted on Amazon EC2 instances in a private subnet within a VPC. The application will store user-uploaded content in Amazon S3 buckets. The application will save each S3 object's URL link and metadata in Amazon DynamoDB.

  The company must not use public internet connections to transmit user-uploaded content or metadata.

  Which solution will meet these requirements?

  A. Implement a gateway VPC endpoint for Amazon S3 and an interface VPC endpoint for Amazon DynamoDB.
  B. Implement interface VPC endpoints for both Amazon S3 and Amazon DynamoDB.
  C. Implement gateway VPC endpoints for both Amazon S3 and Amazon DynamoDB.
  D. Implement a gateway VPC endpoint for Amazon DynamoDB and an interface VPC endpoint for Amazon S3.
  A. Implement a gateway VPC endpoint for Amazon S3 and an interface VPC endpoint for Amazon DynamoDB.

  ---

  Explanation

  Amazon S3 uses gateway VPC endpoints, which enable private, secure access to S3 without traversing the internet, compatible with IPv6. Amazon DynamoDB uses interface VPC endpoints (powered by AWS PrivateLink) for private connectivity within the VPC.

  Therefore, for secure private communication without public internet, the correct solution is to implement a gateway VPC endpoint for S3 and an interface VPC endpoint for DynamoDB.

  Option B is incorrect because S3 does not support interface endpoints;

  Option C is incorrect because DynamoDB does not support gateway endpoints. Option D reverses the correct endpoint types.

  References:

  VPC Endpoints for Amazon S3 (https://docs.aws.amazon.com/vpc/latest/userguide/vpc-endpoints-s3.html)

  VPC Endpoints for DynamoDB (https://docs.aws.amazon.com/vpc/latest/userguide/vpc-endpoints-dynamodb.html)

  AWS Well-Architected Framework -- Security Pillar (https://d1.awsstatic.com/whitepapers/architecture/AWS_Well-Architected_Framework.pdf)

• Question 835:

  A company wants to migrate its MySQL database from on premises to AWS. The company recently experienced a database outage that significantly impacted the business. To ensure this does not happen again, the company wants a reliable database solution on AWS that minimizes data loss and stores every transaction on at least two nodes.

  Which solution meets these requirements?

  A. Create an Amazon RDS DB instance with synchronous replication to three nodes in three Availability Zones.
  B. Create an Amazon RDS MySQL DB instance with Multi-AZ functionality enabled to synchronously replicate the data.
  C. Create an Amazon RDS MySQL DB instance and then create a read replica in a separate AWS Region that synchronously replicates the data.
  D. Create an Amazon EC2 instance with a MySQL engine installed that triggers an AWS Lambda function to synchronously replicate the data to an Amazon RDS MySQL DB instance.
  B. Create an Amazon RDS MySQL DB instance with Multi-AZ functionality enabled to synchronously replicate the data.

• Question 836:

  A company wants to migrate its web applications from on premises to AWS. The company is located close to the eu-central-1 Region. Because of regulations, the company cannot launch some of its applications in eu-central-1. The company wants to achieve single-digit millisecond latency.

  Which solution will meet these requirements?

  A. Deploy the applications in eu-central-1. Extend the company's VPC from eu-central-1 to an edge location in Amazon CloudFront.
  B. Deploy the applications in AWS Local Zones by extending the company's VPC from eu-central-1 to the chosen Local Zone.
  C. Deploy the applications in eu-central-1. Extend the company's VPC from eu-central-1 to the regional edge caches in Amazon CloudFront.
  D. Deploy the applications in AWS Wavelength Zones by extending the company's VPC from eu-central-1 to the chosen Wavelength Zone.
  B. Deploy the applications in AWS Local Zones by extending the company's VPC from eu-central-1 to the chosen Local Zone.

• Question 837:

  A company needs to ingest and handle large amounts of streaming data that its application generates. The application runs on Amazon EC2 instances and sends data to Amazon Kinesis Data Streams, which is configured with default settings. Every other day, the application consumes the data and writes the data to an Amazon S3 bucket for business intelligence (BI) processing. The company observes that Amazon S3 is not receiving all the data that the application sends to Kinesis Data Streams.

  What should a solutions architect do to resolve this issue?

  A. Update the Kinesis Data Streams default settings by modifying the data retention period.
  B. Update the application to use the Kinesis Producer Library (KPL) to send the data to Kinesis Data Streams.
  C. Update the number of Kinesis shards to handle the throughput of the data that is sent to Kinesis Data Streams.
  D. Turn on S3 Versioning within the S3 bucket to preserve every version of every object that is ingested in the S3 bucket.
  A. Update the Kinesis Data Streams default settings by modifying the data retention period.

• Question 838:

  A company needs a solution to prevent photos with unwanted content from being uploaded to the company's web application. The solution must not involve training a machine learning (ML) model.

  Which solution will meet these requirements?

  A. Create and deploy a model by using Amazon SageMaker Autopilot. Create a real-time endpoint that the web application invokes when new photos are uploaded.
  B. Create an AWS Lambda function that uses Amazon Rekognition to detect unwanted content. Create a Lambda function URL that the web application invokes when new photos are uploaded.
  C. Create an Amazon CloudFront function that uses Amazon Comprehend to detect unwanted content. Associate the function with the web application.
  D. Create an AWS Lambda function that uses Amazon Rekognition Video to detect unwanted content. Create a Lambda function URL that the web application invokes when new photos are uploaded.
  B. Create an AWS Lambda function that uses Amazon Rekognition to detect unwanted content. Create a Lambda function URL that the web application invokes when new photos are uploaded.

• Question 839:

  A company has a dynamic web application hosted on two Amazon EC2 instances. The company has its own SSL certificate, which is on each instance to perform SSL termination. There has been an increase in traffic recently, and the operations team determined that SSL encryption and decryption is causing the compute capacity of the web servers to reach their maximum limit.

  What should a solutions architect do to increase the application's performance?

  A. Create a new SSL certificate using AWS Certificate Manager (ACM). Install the ACM certificate on each instance.
  B. Create an Amazon S3 bucket Migrate the SSL certificate to the S3 bucket. Configure the EC2 instances to reference the bucket for SSL termination.
  C. Create another EC2 instance as a proxy server. Migrate the SSL certificate to the new instance and configure it to direct connections to the existing EC2 instances.
  D. Import the SSL certificate into AWS Certificate Manager (ACM). Create an Application Load Balancer with an HTTPS listener that uses the SSL certificate from ACM.
  D. Import the SSL certificate into AWS Certificate Manager (ACM). Create an Application Load Balancer with an HTTPS listener that uses the SSL certificate from ACM.

• Question 840:

  A global company runs its workloads on AWS. The company's application uses Amazon S3 buckets across AWS Regions for sensitive data storage and analysis. The company stores millions of objects in multiple S3 buckets daily.

  The company wants to identify all S3 buckets that are not versioning-enabled.

  Which solution will meet these requirements?

  A. Set up an AWS CloudTrail event that has a rule to identify all S3 buckets that are not versioning-enabled across Regions.
  B. Use Amazon S3 Storage Lens to identify all S3 buckets that are not versioning-enabled across Regions.
  C. Enable IAM Access Analyzer for S3 to identify all S3 buckets that are not versioning-enabled across Regions.
  D. Create an S3 Multi-Region Access Point to identify all S3 buckets that are not versioning-enabled across Regions.
  B. Use Amazon S3 Storage Lens to identify all S3 buckets that are not versioning-enabled across Regions.