Amazon
SAA-C03 Exam
Questions

AWS Certified Solutions Architect - Associate SAA-C03

Amazon (SAA-C03) Exam Questions And Answers page 42

What is the most cost-effective solution for storing call recordings based on access frequency?

Single Choice

A company stores call recordings on a monthly basis. Statistically, the recorded data may be referenced randomly within a year but accessed rarely after 1 year. Files that are newer than 1 year old must be queried and retrieved as quickly as possible. A delay in retrieving older files is acceptable. A solutions architect needs to store the recorded data at a minimal cost.

Which solution is MOST cost-effective?

Store individual files in Amazon S3 Glacier and store search metadata in object tags created in S3 Glacier Query S3 Glacier tags and retrieve the files from S3 Glacier.

Store individual files in Amazon S3. Use lifecycle policies to move the files to Amazon S3 Glacier after1 year. Query and retrieve the files from Amazon S3 or S3 Glacier.

Archive individual files and store search metadata for each archive in Amazon S3. Use lifecycle policies to move the files to Amazon S3 Glacier after 1 year. Query and retrieve the files by searching for metadata from Amazon S3.

Archive individual files in Amazon S3. Use lifecycle policies to move the files to Amazon S3 Glacier after 1 year. Store search metadata in Amazon DynamoDB. Query the files from DynamoDB and retrieve them from Amazon S3 or S3 Glacier.

Design Cost-Optimized Architectures

Which AWS storage solution provides cost-effective durability and high availability for varying access patterns?

Single Choice

A company stores user data in AWS. The data is used continuously with peak usage during business hours. Access patterns vary, with some data not being used for months at a time. A solutions architect must choose a cost-effective solution that maintains the highest level of durability while maintaining high availability.

Which storage solution meets these requirements?

Amazon S3 Standard

Amazon S3 Intelligent-Tiering

Amazon S3 Glacier Deep Archive

Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA)

Design Cost-Optimized Architectures

How to restrict access to a web application on Amazon EC2 instances to a specific country?

Single Choice

A company's web application is running on Amazon EC2 instances behind an Application Load Balancer. The company recently changed its policy, which now requires the application to be accessed from one specific country only.

Which configuration will meet this requirement?

Configure the network ACL for the subnet that contains the EC2 instances.

Configure the security group for the EC2 instances.

Configure the security group on the Application Load Balancer.

Configure AWS WAF on the Application Load Balancer in a VPC.

Define Performant Architectures Specify Secure Applications and Architectures

How can a solutions architect increase resiliency and provide ACID-compliant storage for a web application?

Single Choice

A company s web application is using multiple Linux Amazon EC2 instances and storing data on Amazon EBS volumes. The company is looking for a solution to increase the resiliency of the application in case of a failure and to provide storage that complies with atomicity, consistency, isolation, and durability (ACID).

What should a solutions architect do to meet these requirements?

Launch the application on EC2 instances in each Availability Zone. Attach EBS volumes to each EC2 instance.

Create an Application Load Balancer with Auto Scaling groups across multiple Availability Zones. Mount an instance store on each EC2 instance.

Create an Application Load Balancer with Auto Scaling groups across multiple Availability Zones. Store data on Amazon EFS and mount a target on each instance.

Create an Application Load Balancer with Auto Scaling groups across multiple Availability Zones. Store data using Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA).

Design Resilient Architectures Define Performant Architectures

Correct Answer:

Create an Application Load Balancer with Auto Scaling groups across multiple Availability Zones. Store data on Amazon EFS and mount a target on each instance.

Explanation:

How Amazon EFS Works with Amazon EC2
The following illustration shows an example VPC accessing an Amazon EFS file system. Here, EC2 instances in the VPC have file systems mounted.
In this illustration, the VPC has three Availability Zones, and each has one mount target created in it. We recommend that you access the file system from a mount target within the same Availability Zone. One of the Availability Zones has two subnets. However, a mount target is created in only one of the subnets.

Benefits of Auto Scaling
Better fault tolerance. Amazon EC2 Auto Scaling can detect when an instance is unhealthy, terminate it, and launch an instance to replace it. You can also configure Amazon EC2 Auto Scaling to use multiple Availability Zones. If one Availability Zone becomes unavailable, Amazon EC2 Auto Scaling can launch instances in another one to compensate.
Better availability. Amazon EC2 Auto Scaling helps ensure that your application always has the right amount of capacity to handle the current traffic demand.
Better cost management. Amazon EC2 Auto Scaling can dynamically increase and decrease capacity as needed. Because you pay for the EC2 instances you use, you save money by launching instances when they are needed and terminating them when they aren't.
https://docs.aws.amazon.com/efs/latest/ug/how-it-works.html#how-it-works-ec2
https://docs.aws.amazon.com/autoscaling/ec2/userguide/auto-scaling-benefits.html

References:

https://docs.aws.amazon.com/efs/latest/ug/how-it-works.html#how-it-works-ec2https://docs.aws.amazon.com/autoscaling/ec2/userguide/auto-scaling-benefits.html

How can a solutions architect increase resiliency and provide ACID-compliant storage for a web application?

Single Choice

A company s web application is using multiple Linux Amazon EC2 instances and storing data on Amazon Elastic Block Store (Amazon EBS) volumes. The company is looking for a solution to increase the resiliency of the application in case of a failure and to provide storage that complies with atomicity, consistency, isolation, and durability (ACID).

What should a solutions architect do to meet these requirements?

Launch the application on EC2 instances in each Availability Zone. Attach EBS volumes to each EC2 instance.

Create an Application Load Balancer with Auto Scaling groups across multiple Availability Zones. Mount an instance store on each EC2 instance.

Create an Application Load Balancer with Auto Scaling groups across multiple Availability Zones. Store data on Amazon Elastic File System (Amazon EFS) and mount a target on each instance.

Create an Application Load Balancer with Auto Scaling groups across multiple Availability Zones. Store data using Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA).

Design Resilient Architectures Define Performant Architectures

Correct Answer:

Create an Application Load Balancer with Auto Scaling groups across multiple Availability Zones. Store data on Amazon Elastic File System (Amazon EFS) and mount a target on each instance.

Explanation:

References:

https://docs.aws.amazon.com/efs/latest/ug/how-it-works.html#how-it-works-ec2https://docs.aws.amazon.com/autoscaling/ec2/userguide/auto-scaling-benefits.html

How can a solutions architect increase resiliency and provide ACID-compliant storage for a web application using Amazon EC2 and Amazon EBS?

Single Choice

Launch the application on EC2 instances in each Availability Zone. Attach EBS volumes to each EC2 instance.

Create an Application Load Balancer with Auto Scaling groups across multiple Availability Zones. Mount an instance store on each EC2 instance.

Create an Application Load Balancer with Auto Scaling groups across multiple Availability Zones. Store data on Amazon Elastic File System (Amazon EFS) and mount a target on each instance.

Create an Application Load Balancer with Auto Scaling groups across multiple Availability Zones. Store data using Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA).

Design Resilient Architectures Define Performant Architectures

Correct Answer:

Create an Application Load Balancer with Auto Scaling groups across multiple Availability Zones. Store data on Amazon Elastic File System (Amazon EFS) and mount a target on each instance.

Explanation:

References:

https://docs.aws.amazon.com/efs/latest/ug/how-it-works.html#how-it-works-ec2https://docs.aws.amazon.com/autoscaling/ec2/userguide/auto-scaling-benefits.html

How can a solutions architect minimize the impact of reporting activity on an Amazon RDS PostgreSQL DB instance?

Single Choice

A company s web application uses an Amazon RDS PostgreSQL DB instance to store its application data. During the financial closing period at the start of every month, Accountants run large queries that impact the database's performance due to high usage. The company wants to minimize the impact that the reporting activity has on the web application.

What should a solutions architect do to reduce the impact on the database with the LEAST amount of effort?

Create a read replica and direct reporting traffic to the replica.

Create a Multi-AZ database and direct reporting traffic to the standby.

Create a cross-Region read replica and direct reporting traffic to the replica.

Create an Amazon Redshift database and direct reporting traffic to the Amazon Redshift database.

Define Performant Architectures

What solution ensures a private and secure connection between EC2 instances and Amazon S3?

Single Choice

A company s website hosted on Amazon EC2 instances processes classified data stored in Amazon S3. Due to security concerns, the company requires a private and secure connection between its EC2 resources and Amazon S3.

Which solution meets these requirements?

Set up S3 bucket policies to allow access from a VPC endpoint.

Set up an IAM policy to grant read-write access to the S3 bucket.

Set up a NAT gateway to access resources outside the private subnet.

Set up an access key ID and a secret access key to access the S3 bucket.

Specify Secure Applications and Architectures

How can a solutions architect protect an application from an external malicious IP?

Single Choice

A company s website is used to sell products to the public. The site runs on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB). There is also an Amazon CloudFront distribution, and AWS WAF is being used to protect against SQL injection attacks. The ALB is the origin for the CloudFront distribution. A recent review of security logs revealed an external malicious IP that needs to be blocked from accessing the website.

What should a solutions architect do to protect the application?

Modify the network ACL on the CloudFront distribution to add a deny rule for the malicious IP address.

Modify the configuration of AWS WAF to add an IP match condition to block the malicious IP address.

Modify the network ACL for the EC2 instances in the target groups behind the ALB to deny the malicious IP address.

Modify the security groups for the EC2 instances in the target groups behind the ALB to deny the malicious IP address.

Specify Secure Applications and Architectures Design Cost-Optimized Architectures

Correct Answer:

Modify the configuration of AWS WAF to add an IP match condition to block the malicious IP address.

Explanation:

If you want to allow or block web requests based on the IP addresses that the requests originate from, create one or more IP match conditions. An IP match condition lists up to 10,000 IP addresses or IP address ranges that your requests originate from. Later in the process, when you create a web ACL, you specify whether to allow or block requests from those IP addresses.
AWS Web Application Firewall (WAF) Helps to protect your web applications from common application-layer exploits that can affect availability or consume excessive resources. As you can see in my post (New AWS WAF), WAF allows you to use access control lists (ACLs), rules, and conditions that define acceptable or unacceptable requests or IP addresses. You can selectively allow or deny access to specific parts of your web application and you can also guard against various SQL injection attacks. We launched WAF with support for Amazon CloudFront.
https://aws.amazon.com/blogs/aws/aws-web-application-firewall-waf-for-application-loadbalancers/
https://docs.aws.amazon.com/waf/latest/developerguide/classic-web-acl-ip-conditions.html
https://docs.aws.amazon.com/waf/latest/developerguide/classic-web-acl-ip-conditions.html
https://aws.amazon.com/blogs/aws/aws-web-application-firewall-waf-for-application-load-balancers/

References:

https://aws.amazon.com/blogs/aws/aws-web-application-firewall-waf-for-application-loadbalancers/https://docs.aws.amazon.com/waf/latest/developerguide/classic-web-acl-ip-conditions.htmlhttps://docs.aws.amazon.com/waf/latest/developerguide/classic-web-acl-ip-conditions.htmlhttps://aws.amazon.com/blogs/aws/aws-web-application-firewall-waf-for-application-load-balancers/

How can the performance of a website using an Amazon RDS MySQL Multi-AZ DB instance be improved?

Single Choice

A company s website is using an Amazon RDS MySQL Multi-AZ DB instance for its transactional data storage. There are other internal systems that query this DB instance to fetch data for internal batch processing. The RDS DB instance slows down significantly when the internal systems fetch data. This impacts the website s read and write performance, and the users experience slow response times.

Which solution will improve the website's performance?

Use an RDS PostgreSQL DB instance instead of a MySQL database.

Use Amazon ElastiCache to cache the query responses for the website.

Add an additional Availability Zone to the current RDS MySQL Multi-AZ DB instance.

Add a read replica to the RDS DB instance and configure the internal systems to query the read replica.

Define Performant Architectures

Previous Questions

Next Questions

Amazon (SAA-C03) Exam Questions And Answers page 42

What is the most cost-effective solution for storing call recordings based on access frequency?

Comments

Which AWS storage solution provides cost-effective durability and high availability for varying access patterns?

Comments

How to restrict access to a web application on Amazon EC2 instances to a specific country?

Correct Answer:

References:

Comments

How can a solutions architect increase resiliency and provide ACID-compliant storage for a web application?

Correct Answer:

Explanation:

References:

Comments

How can a solutions architect increase resiliency and provide ACID-compliant storage for a web application?

Correct Answer:

Explanation:

References:

Comments

How can a solutions architect increase resiliency and provide ACID-compliant storage for a web application using Amazon EC2 and Amazon EBS?

Correct Answer:

Explanation:

References:

Comments

How can a solutions architect minimize the impact of reporting activity on an Amazon RDS PostgreSQL DB instance?

Correct Answer:

Explanation:

References:

Comments

What solution ensures a private and secure connection between EC2 instances and Amazon S3?

Correct Answer:

References:

Comments

How can a solutions architect protect an application from an external malicious IP?

Correct Answer:

Explanation:

References:

Comments

How can the performance of a website using an Amazon RDS MySQL Multi-AZ DB instance be improved?

Correct Answer:

Explanation:

References:

Comments

{{ exam.shortName }}

{{ exam.longName }}