Amazon
SAA-C03 Exam
Questions

AWS Certified Solutions Architect - Associate SAA-C03

Amazon (SAA-C03) Exam Questions And Answers page 25

What is the recommended solution for a company's 90-day backup retention policy for Amazon Aurora?

Single Choice

A company is planning to deploy an Amazon RDS DB instance running Amazon Aurora. The company has a backup retention policy requirement of 90 days. Which solution should a solutions architect recommend?

Set the backup retention period to 90 days when creating the RDS DB instance.

Configure RDS to copy automated snapshots to a user-managed Amazon S3 bucket with a lifecycle policy set to delete after 90 days.

Create an AWS Backup plan to perform a daily snapshot of the RDS database with the retention set to 90 days. Create an AWS Backup job to schedule the execution of the backup plan daily.

Use a daily scheduled event with Amazon CloudWatch Events to execute a custom AWS Lambda function that makes a copy of the RDS automated snapshot. Purge snapshots older than 90 days.

Design Resilient Architectures Define Performant Architectures

How should a solutions architect design an S3 solution for migrating a business-critical dataset to multiple AWS Regions?

Single Choice

A company is planning to migrate a business-critical dataset to Amazon S3. The current solution design uses a single S3 bucket in the us-east-1 Region with versioning enabled to store the dataset. The company's disaster recovery policy states that all data multiple AWS Regions.

How should a solutions architect design the S3 solution?

Create an additional S3 bucket in another Region and configure cross-Region replication.

Create an additional S3 bucket in another Region and configure cross-origin resource sharing (CORS).

Create an additional S3 bucket with versioning in another Region and configure cross-Region replication.

Create an additional S3 bucket with versioning in another Region and configure cross-origin resource (CORS).

Define Performant Architectures Design Cost-Optimized Architectures

What is the most cost-effective Amazon EC2 pricing option for migrating a commercial off-the-shelf application to AWS?

Single Choice

A company is planning to migrate a commercial off-the-shelf application from its on-premises data center to AWS. The software has a software licensing model using sockets and cores with predictable capacity and uptime requirements. The company wants to use its existing licenses, which were purchased earlier this year.

Which Amazon EC2 pricing option is the MOST cost-effective?

Dedicated Reserved Hosts

Dedicated On-Demand Hosts

Dedicated Reserved Instances

Dedicated On-Demand Instances

Design Cost-Optimized Architectures

Which AWS storage solution is recommended for a legacy application that requires NFS communication?

Single Choice

A company is planning to migrate a legacy application to AWS. The application currently uses NFS to communicate to an on-premises storage solution to store application data. The application cannot be modified to use any other communication protocols other than NFS for this purpose.

Which storage solution should a solutions architect recommend for use after the migration?

AWS DataSync

Amazon Elastic Block Store (Amazon EBS)

Amazon Elastic File System (Amazon EFS)

Amazon EMR File System (Amazon EMRFS)

Design Resilient Architectures Define Performant Architectures

How can a solutions architect ensure high-performance migration of a TCP-based application to AWS?

Single Choice

A company is planning to migrate a TCP-based application into the company s VPC. The application is publicly accessible on a nonstandard TCP port through a hardware appliance in the company s data center. This public endpoint can process up to 3 million requests per second with low latency. The company requires the same level of performance for the new public endpoint in AWS.

What should a solutions architect recommend to meet this requirement?

Deploy a Network Load Balancer (NLB). Configure the NLB to be publicly accessible over the TCP port that the application requires.

Deploy an Application Load Balancer (ALB). Configure the ALB to be publicly accessible over the TCP port that the application requires.

Deploy an Amazon CloudFront distribution that listens on the TCP port that the application requires. Use an Application Load Balancer as the origin.

Deploy an Amazon API Gateway API that is configured with the TCP port that the application requires. Configure AWS Lambda functions with provisioned concurrency to process the requests.

Define Performant Architectures

Which services should be hosted on the public subnet for migrating virtual server-based workloads to AWS?

Multiple Choice

A company is planning to migrate its virtual server-based workloads to AWS. The company has internet-facing load balancers backed by application servers. The application servers rely on patches from an internet-hosted repository.

Which services should a solutions architect recommend be hosted on the public subnet? (Choose two.)

NAT gateway

Amazon RDS DB instances

Application Load Balancers

Amazon EC2 application servers

Amazon Elastic File System (Amazon EFS) volumes

Design Resilient Architectures Define Performant Architectures

What is the most efficient solution for secure authentication between Amazon EC2 instances and Aurora DB?

Single Choice

A company is planning to run a group of Amazon EC2 instances that connect to an Amazon Aurora database. The company has built an AWS Cloud Formation template to deploy the EC2 instances and the Aurora DB cluster. The company wants to allow the instances to authenticate to the database in a secure way. The company does not want to maintain static database credentials.

Which solution meets these requirements with the LEAST operational effort?

Create a database user with a user name and password. Add parameters for the database user name and password to the CloudFormation template. Pass the parameters to the EC2 instances when the instances are launched.

Create a database user with a user name and password. Store the user name and password in AWS Systems Manager Parameter Store Configure the EC2 instances to retrieve the database credentials from Parameter Store.

Configure the DB cluster to use IAM database authentication. Create a database user to use with IAM authentication. Associate a role with the EC2 instances to allow applications on the instances to access the database.

Configure the DB cluster to use IAM database authentication with an IAM user. Create a database user that has a name that matches the IAM user. Associate the IAM user with the EC2 instances to allow applications on the instances to access the database.

Specify Secure Applications and Architectures

Which AWS service is recommended for migrating and running complex transformations on multiple terabytes of offline-collected ship data?

Single Choice

A company is planning to transfer multiple terabytes of data to AWS. The data is collected offline from ships. The company want to run complex transformation before transferring the data.

Which AWS service should a solutions architect recommend for this migration?

AWS Snowball

AWS Snowmobile

AWS Snowball Edge Storage Optimize

AWS Snowball Edge Compute Optimize

Define Performant Architectures

How can a solutions architect ensure encryption at rest for images stored in Amazon S3 without managing and rotating keys?

Single Choice

A company is planning to use Amazon S3 to store images uploaded by its users. The images must be encrypted at rest in Amazon S3. The company does not want to spend time managing and rotating the keys, but it does want to control who can access those keys.

What should a solutions architect use to accomplish this?

Server-Side Encryption with keys stored in an S3 bucket

Server-Side Encryption with Customer-Provided Keys (SSE-C)

Server-Side Encryption with Amazon S3-Managed Keys (SSE-S3)

Server-Side Encryption with AWS KMS-Managed Keys (SSE-KMS)

Specify Secure Applications and Architectures

Correct Answer:

Server-Side Encryption with AWS KMS-Managed Keys (SSE-KMS)

Explanation:

"Server-Side Encryption with Customer Master Keys (CMKs) Stored in AWS Key Management Service (SSE-KMS) is similar to SSE-S3, but with some additional benefits and charges for using this service. There are separate permissions for the use of a CMK that provides added protection against unauthorized access of your objects in Amazon S3. SSE-KMS also provides you with an audit trail that shows when your CMK was used and by whom."
Server-Side Encryption: Using SSE-KMS
You can protect data at rest in Amazon S3 by using three different modes of server-side encryption: SSE-S3, SSE-C, or SSE-KMS.
SSE-S3 requires that Amazon S3 manage the data and master encryption keys. For more information about SSE-S3, see Protecting Data Using Server-Side Encryption with Amazon S3-Managed Encryption Keys (SSE-S3).
SSE-C requires that you manage the encryption key. For more information about SSE-C, see Protecting Data Using Server-Side Encryption with Customer-Provided Encryption Keys (SSE-C).
SSE-KMS requires that AWS manage the data key but you manage the customer master key (CMK) in AWS KMS.
The remainder of this topic discusses how to protect data by using server-side encryption with AWS
KMS-managed keys (SSE-KMS).
You can request encryption and select a CMK by using the Amazon S3 console or API. In the console, check the appropriate box to perform encryption and select your CMK from the list. For the Amazon S3 API, specify encryption and choose your CMK by setting the appropriate headers in a GET or PUT request.
https://aws.amazon.com/kms/faqs/
https://docs.aws.amazon.com/AmazonS3/latest/dev/serv-side-encryption.html
https://docs.aws.amazon.com/kms/latest/developerguide/services-s3.html#sse

References:

https://aws.amazon.com/kms/faqs/https://docs.aws.amazon.com/AmazonS3/latest/dev/serv-side-encryption.htmlhttps://docs.aws.amazon.com/kms/latest/developerguide/services-s3.html#sse

How can a solutions architect optimize cost for an Amazon DynamoDB table with unpredictable traffic spikes?

Single Choice

A company is planning to use an Amazon DynamoDB table for data storage. The company is concerned about cost optimization. The table will not be used on most mornings in the evenings, the read and write traffic will often be unpredictable. When traffic spikes occur they will happen very quickly.

What should a solutions architect recommend?

Create a DynamoDB table in on-demand capacity mode.

Create a DynamoDB table with a global secondary Index.

Create a DynamoDB table with provisioned capacity and auto scaling.

Create a DynamoDB table in provisioned capacity mode, and configure it as a global table.

Design Cost-Optimized Architectures

Previous Questions

Next Questions

Amazon (SAA-C03) Exam Questions And Answers page 25

What is the recommended solution for a company's 90-day backup retention policy for Amazon Aurora?

Correct Answer:

References:

Comments

How should a solutions architect design an S3 solution for migrating a business-critical dataset to multiple AWS Regions?

Correct Answer:

References:

Comments

What is the most cost-effective Amazon EC2 pricing option for migrating a commercial off-the-shelf application to AWS?

Comments

Which AWS storage solution is recommended for a legacy application that requires NFS communication?

Comments

How can a solutions architect ensure high-performance migration of a TCP-based application to AWS?

Comments

Which services should be hosted on the public subnet for migrating virtual server-based workloads to AWS?

Comments

What is the most efficient solution for secure authentication between Amazon EC2 instances and Aurora DB?

Correct Answer:

Explanation:

References:

Comments

Which AWS service is recommended for migrating and running complex transformations on multiple terabytes of offline-collected ship data?

Comments

How can a solutions architect ensure encryption at rest for images stored in Amazon S3 without managing and rotating keys?

Correct Answer:

Explanation:

References:

Comments

How can a solutions architect optimize cost for an Amazon DynamoDB table with unpredictable traffic spikes?

Comments

{{ exam.shortName }}

{{ exam.longName }}