Amazon
SAA-C03 Exam
Questions

AWS Certified Solutions Architect - Associate SAA-C03

Amazon (SAA-C03) Exam Questions And Answers page 31

What is the most efficient solution to add more IP address capacity to a VPC with minimal operational overhead?

Single Choice

A company is using a VPC that is provisioned with a 10.10.1.0/24 CIDR block. Because of continued growth, IP address space in this block might be depleted soon. A solutions architect must add more IP address capacity to the VPC.

Which solution will meet these requirements with the LEAST operational overhead?

Create a new VPC. Associate a larger CIDR block.

Add a secondary CIDR block of 10.10.2.0/24 to the VPC.

Resize the existing VPC CIDR block from 10.10.1.0/24 to 10.10.1.0/16.

Establish VPC peering with a new VPC that has a CIDR block of 10.10.1.0/16.

Design Cost-Optimized Architectures

How can the Sales account access the Logistics account's Amazon Redshift cluster in a cost-effective way?

Single Choice

A company is using AWS Organizations with two AWS accounts: Logistics and Sales. The Logistics account operates an Amazon Redshift cluster. The Sales account includes Amazon EC2 instances. The Sales account needs to access the Logistics account s Amazon Redshift cluster.

What should a solutions architect recommend to meet this requirement MOST cost-effectively?

Set up VPC sharing with the Logistics account as the owner and the Sales account as the participant to transfer the data.

Create an AWS Lambda function in the Logistics account to transfer data to the Amazon EC2 instances in the Sales account.

Create a snapshot of the Amazon Redshift cluster, and share the snapshot with the Sales account. In the Sales account, restore the cluster by using the snapshot ID that is shared by the Logistics account.

Run COPY commands to load data from Amazon Redshift into Amazon S3 buckets in the Logistics account. Grant permissions to the Sales account to access the S3 buckets of the Logistics account.

Design Cost-Optimized Architectures

How can the Sales account access the Logistics account's Amazon Redshift cluster in a cost-effective manner?

Single Choice

Set up VPC sharing with the Logistics account as the owner and the Sales account as the participant to transfer the data.

Create an AWS Lambda function in the Logistics account to transfer data to the Amazon EC2 instances in the Sales account.

Run COPY commands to load data from Amazon Redshift into Amazon S3 buckets in the Logistics account. Grant permissions to the Sales account to access the S3 buckets of the Logistics account.

Design Cost-Optimized Architectures

How can VPN throughput be improved for secure connectivity to AWS Cloud resources?

Single Choice

A company is using Site-to-Site VPN connections for secure connectivity to its AWS Cloud resources from on premises. Due to an increase in traffic across the VPN connections to the Amazon EC2 instances, users are experiencing slower VPN connectivity.

Which solution will improve the VPN throughput?

Implement multiple customer gateways for the same network to scale the throughput.

Use a transit gateway with equal cost multipath routing and add additional VPN tunnels.

Configure a virtual private gateway with equal cost multipath routing and multiple channels.

Increase the number of tunnels in the VPN configuration to scale the throughput beyond the default limit.

Define Performant Architectures

How to implement least privilege access for an external vendor requiring write access to an Amazon SQS queue?

Single Choice

A company is working with an external vendor that requires write access to the company s Amazon Simple Queue Service (Amazon SQS) queue. The vendor has its own AWS account.

What should a solutions architect do to implement least privilege access?

Update the permission policy on the SQS queue to give write access to the vendor s AWS account.

Create an IAM user with write access to the SQS queue and share the credentials for the IAM user.

Update AWS Resource Access Manager to provide write access to the SQS queue from the vendor s AWS account.

Create a cross-account role with access to all SQS queues and use the vendor s AWS account in the trust document for the role.

Specify Secure Applications and Architectures

How can the performance issue of a company's Amazon RDS for MySQL database be addressed?

Single Choice

A company maintains a searchable repository of items on its website. The data is stored in an Amazon RDS for MySQL database table that contains over 10 million rows. The database has 2 TB of General Purpose SSD (gp2) storage. There are millions of updates against this data every day through the company s website. The company has noticed some operations are taking 10 seconds or longer and has determined that the database storage performance is the bottleneck.

Which solution addresses the performance issue?

Change the storage type to Provisioned IOPS SSD (io1).

Change the instance to a memory-optimized instance class.

Change the instance to a burstable performance DB instance class.

Enable Multi-AZ RDS read replicas with MySQL native asynchronous replication.

Define Performant Architectures

Which solution simplifies adding or removing compute capacity for MySQL databases with improved performance, scaling, and durability?

Single Choice

A company manages its own Amazon EC2 instances that run MySQL databases. The company is manually managing replication and scaling as demand increases or decreases. The company needs a new solution that simplifies the process of adding or removing compute capacity to or from its database tier as needed. The solution also must offer improved performance, scaling, and durability with minimal effort from operations.

Which solution meets these requirements?

Migrate the databases to Amazon Aurora Serverless for Aurora MySQL.

Migrate the databases to Amazon Aurora Serverless for Aurora PostgreSQL.

Combine the databases into one larger MySQL database. Run the larger database on larger EC2 instances.

Create an EC2 Auto Scaling group for the database tier. Migrate the existing databases to the new environment.

Design Resilient Architectures Define Performant Architectures

How to implement a method to allow traffic to trusted buckets only in an Amazon S3 gateway endpoint?

Single Choice

A company mandates that an Amazon S3 gateway endpoint must allow traffic to trusted buckets only.

Which method should a solutions architect implement to meet this requirement?

Create a bucket policy for each of the company's trusted S3 buckets that allows traffic only from the company's trusted VPCs.

Create a bucket policy for each of the company's trusted S3 buckets that allows traffic only from the company's S3 gateway endpoint IDs.

Create an S3 endpoint policy for each of the company's S3 gateway endpoints that blocks access from any VPC other than the company's trusted VPCs.

Create an S3 endpoint policy for each of the company's S3 gateway endpoints that provides access to the Amazon Resource Name (ARN) of the trusted S3 buckets.

Define Performant Architectures Specify Secure Applications and Architectures

Which pricing model should a company choose to minimize costs when generating sales reports with 20 Amazon EC2 instances running for 7 days?

Single Choice

A company must generate sales reports at the beginning of every month. The reporting process launches 20 Amazon EC2 instances on the first of the month. The process runs for 7 days and cannot be interrupted. The company wants to minimize costs.

Which pricing model should the company choose?

Reserved Instances

Spot Block Instances

On-Demand Instances

Scheduled Reserved Instances

Design Cost-Optimized Architectures

Correct Answer:

Scheduled Reserved Instances

Explanation:

Explanation
Scheduled Reserved Instances
Scheduled Reserved Instances (Scheduled Instances) enable you to purchase capacity reservations that recur on a daily, weekly, or monthly basis, with a specified start time and duration, for a one-year term. You reserve the capacity in advance, so that you know it is available when you need it. You pay for the time that the instances are scheduled, even if you do not use them.
Scheduled Instances are a good choice for workloads that do not run continuously, but do run on a regular schedule. For example, you can use Scheduled Instances for an application that runs during business hours or for batch processing that runs at the end of the week.
If you require a capacity reservation on a continuous basis, Reserved Instances might meet your needs and decrease costs.
How Scheduled Instances Work
Amazon EC2 sets aside pools of EC2 instances in each Availability Zone for use as Scheduled Instances. Each pool supports a specific combination of instance type, operating system, and network.
To get started, you must search for an available schedule. You can search across multiple pools or a single pool. After you locate a suitable schedule, purchase it.
You must launch your Scheduled Instances during their scheduled time periods, using a launch configuration that matches the following attributes of the schedule that you purchased: instance type, Availability Zone, network, and platform. When you do so, Amazon EC2 launches EC2 instances on your behalf, based on the specified launch specification. Amazon EC2 must ensure that the EC2 instances have terminated by the end of the current scheduled time period so that the capacity is available for any other Scheduled Instances it is reserved for. Therefore, Amazon EC2 terminates the EC2 instances three minutes before the end of the current scheduled time period.
You can't stop or reboot Scheduled Instances, but you can terminate them manually as needed. If you terminate a Scheduled Instance before its current scheduled time period ends, you can launch it again after a few minutes. Otherwise, you must wait until the next scheduled time period.
The following diagram illustrates the lifecycle of a Scheduled Instance.

References:

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-scheduled-instances.html

Which pricing model should a company choose to minimize costs when generating sales reports with 20 Amazon EC2 instances running for 7 days?

Single Choice

Reserved Instances

Spot Block Instances

On-Demand Instances

Scheduled Reserved Instances

Design Cost-Optimized Architectures

Correct Answer:

Scheduled Reserved Instances

Explanation:

References:

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-scheduled-instances.html

Previous Questions

Next Questions

Amazon (SAA-C03) Exam Questions And Answers page 31

What is the most efficient solution to add more IP address capacity to a VPC with minimal operational overhead?

Comments

How can the Sales account access the Logistics account's Amazon Redshift cluster in a cost-effective way?

Correct Answer:

References:

Comments

How can the Sales account access the Logistics account's Amazon Redshift cluster in a cost-effective manner?

Correct Answer:

References:

Comments

How can VPN throughput be improved for secure connectivity to AWS Cloud resources?

Comments

How to implement least privilege access for an external vendor requiring write access to an Amazon SQS queue?

Comments

How can the performance issue of a company's Amazon RDS for MySQL database be addressed?

Comments

Which solution simplifies adding or removing compute capacity for MySQL databases with improved performance, scaling, and durability?

Correct Answer:

Explanation:

References:

Comments

How to implement a method to allow traffic to trusted buckets only in an Amazon S3 gateway endpoint?

Comments

Which pricing model should a company choose to minimize costs when generating sales reports with 20 Amazon EC2 instances running for 7 days?

Correct Answer:

Explanation:

References:

Comments

Which pricing model should a company choose to minimize costs when generating sales reports with 20 Amazon EC2 instances running for 7 days?

Correct Answer:

Explanation:

References:

Comments

{{ exam.shortName }}

{{ exam.longName }}