Amazon Amazon Certifications SAA-C03 Questions & Answers

• Question 851:

  An online retail company needs to run near-real-time analytics on website traffic to analyze top-selling products across different locations. The product purchase data and the user location details are sent to a third-party application that runs

  on premises The application processes the data and moves the data into the company's analytics engine.

  The company needs to implement a cloud-based solution to make the data available for near-real-time analytics.

  Which solution will meet these requirements with the LEAST operational overhead?

  A. Use Amazon Kinesis Data Streams to ingest the data Use AWS Lambda to transform the data Configure Lambda to write the data to Amazon Amazon OpenSearch Service (Amazon Elasticsearch Service)

  B. Configure Amazon Kinesis Data Streams to write the data to an Amazon S3 bucket Schedule an AWS Glue crawler job to enrich the data and update the AWS Glue Data Catalog Use Amazon Athena for analytics

  C. Configure Amazon Kinesis Data Streams to write the data to an Amazon S3 bucket Add an Apache Spark job on Amazon EMR to enrich the data in the S3 bucket and write the data to Amazon OpenSearch Service (Amazon Elasticsearch Service)

  D. Use Amazon Kinesis Data Firehose to ingest the data Enable Kinesis Data Firehose data transformation with AWS Lambda Configure Kinesis Data Firehose to write the data to Amazon OpenSearch Service (Amazon Elasticsearch Service).

  Correct Answer: A

• Question 852:

  A company stores millions of objects in Amazon S3. The data is in JSON format and Apache Parquet format. The data is partitioned and new objects are added daily. A solutions architect needs to create a solution so that employees can use SQL to perform one-time queries against all the data. The solution must avoid code changes and must minimize operational overhead.

  Which solution will meet these requirements?

  A. Use S3 Select to perform queries against all the S3 objects

  B. Create an AWS Glue table and an AWS Glue crawler Schedule the crawler to run daily Perform queries with Amazon Athena

  C. Create an Amazon EMR cluster Set up C. EMR File System (EMRFS) to access the S3 bucket Perform queries with Apache Spark

  D. Create an Amazon Redshift cluster Schedule an AWS Lambda function to perform the COPY command on the Redshift cluster to load the S3 data Perform queries on the Redshift cluster.

  Correct Answer: B

• Question 853:

  A company runs a latency-sensitive gaming service in the AWS Cloud. The gaming service runs on a fleet of Amazon EC2 instances behind an Application Load Balancer (ALB). An Amazon DynamoDB table stores the gaming data. All he

  infrastructure is in a single AWS Region. The main user base is in that same Region.

  A solutions architect needs to update the architect to support a global expansion of the gaming service must operate with the least possible latency.

  Which solution will meet these requirements?

  A. Create an Amazon CloudFront distribution in front of the ALB.

  B. Deploy an Amazon API Gateway regional API endpoint. Integrate the API endpoint with the ALB.

  C. Create an accelerator in AWS Global Accelerator. Add a listener. Configure the endpoint to point to the ALB.

  D. Deploy the ALB and the fleet of EC2 instances to another Region. Use Amazon Route 53 geolocation routing.

  Correct Answer: C

• Question 854:

  A company uses Amazon S3 as its data lake. The company has a new partner that must use SFTP to upload data files A solutions architect needs to implement a highly available SFTP solution that minimizes operational overhead. Which solution will meet these requirements?

  A. Use AWS Transfer Family to configure an SFTP-enabled server with a publicly accessible endpoint Choose the S3 data lake as the destination

  B. Use Amazon S3 File Gateway as an SFTP server Expose the S3 File Gateway endpoint URL to the new partner Share the S3 File Gateway endpoint with the new partner

  C. Launch an Amazon EC2 instance in a private subnet in a VPC Instruct the new partner to upload files to the EC2 instance by using a VPN Run a cron job script on the EC2 instance to upload files to the S3 data lake

  D. Launch Amazon EC2 instances in a private subnet in a VPC Place a Network Load Balancer (NLB) in front of the EC2 instances Create an SFTP listener port for the NLB Share the NLB hostname with the new partner. Run a cron job script on the EC2 instances to upload files to the S3 data lake

  Correct Answer: A

  AWS Transfer Family is a fully managed AWS service that you can use to transfer files into and out of Amazon Simple Storage Service (Amazon S3) storage or Amazon Elastic File System (Amazon EFS) file systems over the following

  protocols:

  Secure Shell (SSH) File Transfer Protocol (SFTP): version 3

  File Transfer Protocol Secure (FTPS)

  File Transfer Protocol (FTP)

  Applicability Statement 2 (AS2)

• Question 855:

  A gaming company wants to launch a new internet-facing application in multiple AWS Regions. The application will use the TCP and UDP protocols for communication. The company needs to provide high availability and minimum latency for global users.

  Which combination of actions should a solutions architect take to meet these requirements? (Select TWO.)

  A. Create internal Network Load Balancers in front of the application in each Region

  B. Create external Application Load Balancers in front of the application in each Region

  C. Create an AWS Global Accelerator accelerator to route traffic to the load balancers in each Region

  D. Configure Amazon Route 53 to use a geolocation routing policy to distribute the traffic

  E. Configure Amazon CloudFront to handle the traffic and route requests to the application in each Region

  Correct Answer: AC

• Question 856:

  A company's ecommerce website has unpredictable traffic and uses AWS Lambda functions to directly access a private Amazon RDS for PostgreSQL DB instance. The company wants to maintain predictable database performance and ensure that the Lambda invocations do not overload the database with too many connections.

  What should a solutions architect do to meet these requirements?

  A. Point the client driver at an RDS custom endpoint Deploy the Lambda functions inside a VPC

  B. Point the client driver at an RDS proxy endpoint Deploy the Lambda functions inside a VPC

  C. Point the client driver at an RDS custom endpoint Deploy the Lambda functions outside a VPC

  D. Point the client driver at an RDS proxy endpoint Deploy the Lambda functions outside a VPC

  Correct Answer: B

• Question 857:

  A company's reporting system delivers hundreds of csv files to an Amazon S3 bucket each day The company must convert these files to Apache Parquet format and must store the files in a transformed data bucket. Which solution will meet these requirements with the LEAST development effort?

  A. Create an Amazon EMR cluster with Apache Spark installed Write a Spark application to transform the data Use EMR File System (EMRFS) to write files to the transformed data bucket

  B. Create an AWS Glue crawler to discover the data Create an AWS Glue extract transform: and load (ETL) job to transform the data Specify the transformed data bucket in the output step

  C. Use AWS Batch to create a job definition with Bash syntax to transform the data and output the data to the transformed data bucket Use the job definition to submit a job Specify an array job as the job type

  D. Create an AWS Lambda function to transform the data and output the data to the transformed data bucket. Configure an event notification for the S3 bucket. Specify the Lambda function as the destination for the event notification.

  Correct Answer: B

  S3 provides a single control to automatically encrypt all new objects in a bucket with SSE-S3 or SSE-KMS. Unfortunately, these controls only affect new objects. If your bucket already contains millions of unencrypted objects, then turning on

  automatic encryption does not make your bucket secure as the unencrypted objects remain.

  For S3 buckets with a large number of objects (millions to billions), use Amazon S3 Inventory to get a list of the unencrypted objects, and Amazon S3 Batch Operations to encrypt the large number of old, unencrypted files.

  https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/three-aws-glue-etl-job-types-for-converting-data-to-apache-parquet.html

• Question 858:

  A company stores data in an Amazon Aurora PostgreSQL DB cluster. The company must store all the data for 5 years and must delete all the data after 5 years. The company also must indefinitely keep audit logs of actions that are performed within the database. Currently, the company has automated backups configured for Aurora.

  Which combination of steps should a solutions architect take to meet these requirements? (Select TWO.)

  A. Take a manual snapshot of the DB cluster.

  B. Create a lifecycle policy for the automated backups.

  C. Configure automated backup retention for 5 years.

  D. Configure an Amazon CloudWatch Logs export for the DB cluster.

  E. Use AWS Backup to take the backups and to keep the backups for 5 years.

  Correct Answer: DE

  AWS Backup provides a centralized console, automated backup scheduling, backup retention management, and backup monitoring and alerting. AWS Backup offers advanced features such as lifecycle policies to transition backups to a low-cost storage tier. It also includes backup storage and encryption independent from its source data, audit and compliance reporting capabilities with AWS Backup Audit Manager, and delete protection with AWS Backup Vault Lock.

• Question 859:

  A company hosts an application on AWS. The application uses AWS Lambda functions and stores data in Amazon DynamoDB tables. The Lambda functions are connected to a VPC that does not have internet access.

  The traffic to access DynamoDB must not travel across the internet. The application must have write access to only specific DynamoDB tables.

  Which combination of steps should a solutions architect take to meet these requirements? (Select TWO.)

  A. Attach a VPC endpoint policy for DynamoDB to allow write access to only the specific DynamoDB tables.

  B. Attach a security group to the interface VPC endpoint to allow write access to only the specific DynamoDB tables.

  C. Create a resource-based 1AM policy to grant write access to only the specific DynamoDB tables. Attach the policy to the DynamoDB tables.

  D. Create a gateway VPC endpoint for DynamoDB that is associated with the Lambda VPC. Ensure that the Lambda execution role can access the gateway VPC endpoint.

  E. Create an interface VPC endpoint for DynamoDB that is associated with the Lambda VPC. Ensure that the Lambda execution role can access the interface VPC endpoint.

  Correct Answer: AE

• Question 860:

  A company hosts a serverless application on AWS. The application uses Amazon API Gateway. AWS Lambda, and an Amazon RDS for PostgreSQL database. The company notices an increase in application errors that result from database connection timeouts during times of peak traffic or unpredictable traffic. The company needs a solution that reduces the application failures with the least amount of change to the code.

  What should a solutions architect do to meet these requirements?

  A. Reduce the Lambda concurrency rate.

  B. Enable RDS Proxy on the RDS DB instance.

  C. Resize the ROS DB instance class to accept more connections.

  D. Migrate the database to Amazon DynamoDB with on-demand scaling

  Correct Answer: B

  Many applications, including those built on modern serverless architectures, can have a large number of open connections to the database server and may open and close database connections at a high rate, exhausting database memory and compute resources. Amazon RDS Proxy allows applications to pool and share connections established with the database, improving database efficiency and application scalability. With RDS Proxy, failover times for Aurora and RDS databases are reduced by up to 66%.

  https://aws.amazon.com/rds/proxy/