Amazon
SAA-C03 Exam
Questions

AWS Certified Solutions Architect - Associate SAA-C03

Amazon (SAA-C03) Exam Questions And Answers page 28

What could be causing the EC2 instances in a private subnet to not connect to the public internet?

Multiple Choice

A company is running an application on Amazon EC2 instances hosted in a private subnet of a VPC. The EC2 instances are configured in an Auto Scaling group behind an Elastic Load Balancer (ELB). The EC2 instances use a NAT gateway for outbound internet access. However, the EC2 instances are not able to connect to the public internet to download software updates.

What are the possible root causes of this issue? (Choose two.)

The ELB is not configured with a proper health check.

The route tables in the VPC are configured incorrectly.

The EC2 instances are not associated with an Elastic IP address.

The security group attached to the NAT gateway is configured incorrectly.

The outbound rules on the security group attached to the EC2 instances are configured incorrectly.

Define Performant Architectures Specify Secure Applications and Architectures

What scaling policy should be recommended for an Auto Scaling group to avoid over-provisioning and unnecessary costs?

Single Choice

A company is running an application on Amazon EC2 instances. Traffic to the workload increases substantially during business hours and decreases afterward. The CPU utilization of an EC2 instance is a strong indicator of end-user demand on the application. The company has configured an Auto Scaling group to have a minimum group size of 2 EC2 instances and a maximum group size of 10 EC2 instances.

The company is concerned that the current scaling policy that is associated with the Auto Scaling group might not be correct. The company must avoid over-provisioning EC2 instances and incurring unnecessary costs.

What should a solutions architect recommend to meet these requirements?

Configure Amazon EC2 Auto Scaling to use a scheduled scaling plan and launch an additional 8 EC2 instances during business hours.

Configure AWS Auto Scaling to use a scaling plan that enables predictive scaling. Configure predictive scaling with a scaling mode of forecast and scale, and to enforce the maximum capacity setting during scaling.

Configure a step scaling policy to add 4 EC2 instances at 50% CPU utilization and add another 4 EC2 instances at 90% CPU utilization. Configure scale-in policies to perform the reverse and remove EC2 instances based on the two values.

Configure AWS Auto Scaling to have a desired capacity of 5 EC2 instances, and disable any existing scaling policies. Monitor the CPU utilization metric for 1 week. Then create dynamic scaling policies that are based on the observed values.

Define Performant Architectures Design Cost-Optimized Architectures

What scaling policy should be recommended for an Auto Scaling group to avoid over-provisioning and unnecessary costs?

Single Choice

Configure Amazon EC2 Auto Scaling to use a scheduled scaling plan and launch an additional 8 EC2 instances during business hours.

Define Performant Architectures Design Cost-Optimized Architectures

How can a solutions architect reduce processing time by running three applications in parallel on AWS?

Single Choice

A company is running an application on AWS to process weather sensor data that is stored in an Amazon S3 bucket. Three batch jobs run hourly to process the data in the S3 bucket for different purposes. The company wants to reduce the overall processing time by running the three applications in parallel using an event-based approach.

What should a solutions architect do to meet these requirements?

Enable S3 Event Notifications for new objects to an Amazon Simple Queue Service (Amazon SQS) FIFO queue. Subscribe all applications to the queue for processing.

Enable S3 Event Notifications for new objects to an Amazon Simple Queue Service (Amazon SQS) standard queue. Create an additional SQS queue for all applications, and subscribe all applications to the initial queue for processing.

Enable S3 Event Notifications for new objects to separate Amazon Simple Queue Service (Amazon SQS) FIFO queues. Create an additional SQS queue for each application, and subscribe each queue to the initial topic for processing.

Enable S3 Event Notifications for new objects to an Amazon Simple Notification Service (Amazon SNS) topic. Create an Amazon Simple Queue Service (Amazon SQS) queue for each application, and subscribe each queue to the topic for processing.

Design Resilient Architectures Define Performant Architectures

How can a solutions architect optimize an ASP.NET MVC application on Amazon EC2 for increased traffic?

Single Choice

A company is running an ASP.NET MVC application on a single Amazon EC2 instance. A recent increase in application traffic is causing slow response times for users during lunch hours. The company needs to resolve this concern with the least amount of configuration.

What should a solutions architect recommend to meet these requirements?

Move the application to AWS Elastic Beanstalk. Configure load-based auto scaling and time-based scaling to handle scaling during lunch hours.

Move the application to Amazon Elastic Container Service (Amazon ECS). Create an AWS Lambda function to handle scaling during lunch hours.

Move the application to Amazon Elastic Container Service (Amazon ECS). Configure scheduled scaling for AWS Application Auto Scaling during lunch hours.

Move the application to AWS Elastic Beanstalk. Configure load-based auto scaling, and create an AWS Lambda function to handle scaling during lunch hours.

Define Performant Architectures

How to minimize costs for an ecommerce application on Amazon EC2 with varying instance requirements?

Single Choice

A company is running an ecommerce application on Amazon EC2. The application consists of a stateless web tier that requires a minimum of 10 instances, and a peak of 250 instances to support the application s usage. The application requires 50 instances 80% of the time.

Which solution should be used to minimize costs?

Purchase Reserved Instances to cover 250 instances.

Purchase Reserved Instances to cover 80 instances. Use Spot Instances to cover the remaining instances.

Purchase On-Demand Instances to cover 40 instances. Use Spot Instances to cover the remaining instances.

Purchase Reserved Instances to cover 50 instances. Use On-Demand and Spot Instances to cover the remaining instances.

Design Cost-Optimized Architectures

Correct Answer:

Purchase Reserved Instances to cover 50 instances. Use On-Demand and Spot Instances to cover the remaining instances.

Explanation:

Reserved Instances
Having 50 EC2 RIs provide a discounted hourly rate and an optional capacity reservation for EC2 instances. AWS Billing automatically applies your RI s discounted rate when attributes of EC2 instance usage match attributes of an active RI.
If an Availability Zone is specified, EC2 reserves capacity matching the attributes of the RI. The capacity reservation of an RI is automatically utilized by running instances matching these attributes.
You can also choose to forego the capacity reservation and purchase an RI that is scoped to a region. RIs that are scoped to a region automatically apply the RI s discount to instance usage across AZs and instance sizes in a region, making it easier for you to take advantage of the RI s discounted rate.
On-Demand Instance
On-Demand instances let you pay for compute capacity by the hour or second (minimum of 60 seconds) with no long-term commitments. This frees you from the costs and complexities of planning, purchasing, and maintaining hardware and transforms what are commonly large fixed costs into much smaller variable costs.
The pricing below includes the cost to run private and public AMIs on the specified operating system ( Windows Usage prices apply to Windows Server 2003 R2, 2008, 2008 R2, 2012, 2012 R2, 2016, and 2019). Amazon also provides you with additional instances for Amazon EC2 running Microsoft Windows with SQL Server, Amazon EC2 running SUSE Linux Enterprise Server, Amazon EC2 running Red Hat Enterprise Linux and Amazon EC2 running IBM that are priced differently.
Spot Instances
A Spot Instance is an unused EC2 instance that is available for less than the On-Demand price. Because Spot Instances enable you to request unused EC2 instances at steep discounts, you can lower your Amazon EC2 costs significantly. The hourly price for a Spot Instance is called a Spot price. The Spot price of each instance type in each Availability Zone is set by Amazon EC2, and adjusted gradually based on the long-term supply of and demand for Spot Instances. Your Spot Instance runs whenever capacity is available and the maximum price per hour for your request exceeds the Spot price.
https://aws.amazon.com/ec2/pricing/reserved-instances/
https://aws.amazon.com/ec2/pricing/on-demand/
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-spot-instances.html

References:

https://aws.amazon.com/ec2/pricing/reserved-instances/https://aws.amazon.com/ec2/pricing/on-demand/https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-spot-instances.html

How to ensure encryption for an unencrypted Amazon RDS DB instance and its snapshots?

Single Choice

A company is running an online transaction processing (OLTP) workload on AWS. This workload uses an unencrypted Amazon RDS DB instance in a Multi-AZ deployment. Daily database snapshots are taken from this instance.

What should a solutions architect do to ensure the database and snapshots are always encrypted moving forward?

Encrypt a copy of the latest DB snapshot. Replace existing DB instance by restoring the encrypted snapshot.

Create a new encrypted Amazon Elastic Block Store (Amazon EBS) volume and copy the snapshots to it. Enable encryption on the DB instance.

Copy the snapshots and enable encryption using AWS Key Management Service (AWS KMS). Restore encrypted snapshot to an existing DB instance.

Copy the snapshots to an Amazon S3 bucket that is encrypted using server-side encryption with AWS Key Management Service (AWS KMS) managed keys (SSE-KMS).

Specify Secure Applications and Architectures

What is the most cost-effective solution for providing user access to a photo hosting service?

Single Choice

A company is running a photo hosting service in the us-east-1 Region. The service enables users across multiple countries to upload and view photos. Some photos are heavily viewed for months, and others are viewed for less than a week. The application allows uploads of up to 20 MB for each photo. The service uses the photo metadata to determine which photos to display to each user.

Which solution provides the appropriate user access MOST cost-effectively?

Store the photos in Amazon DynamoDB. Turn on DynamoDB Accelerator (DAX) to cache frequently viewed items.

Store the photos in the Amazon S3 Intelligent-Tiering storage class. Store the photo metadata and its S3 location in DynamoDB.

Store the photos in the Amazon S3 Standard storage class. Set up an S3 Lifecycle policy to move photos older than 30 days to the S3 Standard-Infrequent Access (S3 Standard-IA) storage class. Use the object tags to keep track of metadata.

Store the photos in the Amazon S3 Glacier storage class. Set up an S3 Lifecycle policy to move photos older than 30 days to the S3 Glacier Deep Archive storage class. Store the photo metadata and its S3 location in Amazon Elasticsearch Service (Amazon ES).

Design Cost-Optimized Architectures

How to block requests from unauthorized users in a serverless application using Amazon API Gateway and AWS Lambda?

Multiple Choice

A company is running a publicly accessible serverless application that uses Amazon API Gateway and AWS Lambda. The application's traffic recently spiked due to fraudulent requests from botnets.

Which steps should a solutions architect take to block requests from unauthorized users? (Choose two.)

Create a usage plan with an API key that is shared with genuine users only.

Integrate logic within the Lambda function to ignore the requests from fraudulent IP addresses.

Implement an AWS WAF rule to target malicious requests and trigger actions to filter them out.

Convert the existing public API to a private API. Update the DNS records to redirect users to the new API endpoint.

Create an IAM role for each user attempting to access the API. A user will assume the role when making the API call.

Define Performant Architectures Specify Secure Applications and Architectures

What solution would provide the highest availability for decoupling services in a three-tier web application?

Single Choice

A company is running a three-tier web application to process credit card payments. The front-end user interface consists of static webpages. The application tier can have long-running processes. The database tier uses MySQL.

The application is currently running on a single, general purpose large Amazon EC2 instance. A solutions architect needs to decouple the services to make the web application highly available.

Which solution would provide the HIGHEST availability?

Move static assets to Amazon CloudFront. Leave the application in EC2 in an Auto Scaling group. Move the database to Amazon RDS to deploy Multi-AZ.

Move static assets and the application into a medium EC2 instance. Leave the database on the large instance. Place both instances in an Auto Scaling group.

Move static assets to Amazon S3. Move the application to AWS Lambda with the concurrency limit set. Move the database to Amazon DynamoDB with on-demand enabled.

Move static assets to Amazon S3. Move the application to Amazon Elastic Container Service (Amazon ECS) containers with Auto Scaling enabled. Move the database to Amazon RDS to deploy Multi-AZ.

Define Performant Architectures Design Cost-Optimized Architectures

Previous Questions

Next Questions

Amazon (SAA-C03) Exam Questions And Answers page 28

What could be causing the EC2 instances in a private subnet to not connect to the public internet?

Correct Answers:

Explanation:

References:

Comments

What scaling policy should be recommended for an Auto Scaling group to avoid over-provisioning and unnecessary costs?

Correct Answer:

References:

Comments

What scaling policy should be recommended for an Auto Scaling group to avoid over-provisioning and unnecessary costs?

Correct Answer:

Explanation:

References:

Comments

How can a solutions architect reduce processing time by running three applications in parallel on AWS?

Correct Answer:

References:

Comments

How can a solutions architect optimize an ASP.NET MVC application on Amazon EC2 for increased traffic?

Correct Answer:

References:

Comments

How to minimize costs for an ecommerce application on Amazon EC2 with varying instance requirements?

Correct Answer:

Explanation:

References:

Comments

How to ensure encryption for an unencrypted Amazon RDS DB instance and its snapshots?

Comments

What is the most cost-effective solution for providing user access to a photo hosting service?

Correct Answer:

Explanation:

References:

Comments

How to block requests from unauthorized users in a serverless application using Amazon API Gateway and AWS Lambda?

Correct Answers:

References:

Comments

What solution would provide the highest availability for decoupling services in a three-tier web application?

Comments

{{ exam.shortName }}

{{ exam.longName }}