Amazon
SAA-C03 Exam
Questions

AWS Certified Solutions Architect - Associate SAA-C03

Amazon (SAA-C03) Exam Questions And Answers page 43

What combination should a solutions architect recommend for a cost-effective, scalable, and fast website solution?

Single Choice

A company s website provides users with downloadable historical performance reports. The website needs a solution that will scale to meet the company s website demands globally. The solution should be cost-effective, limit the provisioning of infrastructure resources, and provide the fastest possible response time.

Which combination should a solutions architect recommend to meet these requirements?

Amazon CloudFront and Amazon S3

AWS Lambda and Amazon DynamoDB

Application Load Balancer with Amazon EC2 Auto Scaling

Amazon Route 53 with internal Application Load Balancers

Define Performant Architectures Design Cost-Optimized Architectures

How can website performance for global users be improved on Amazon EC2 instances behind an ALB?

Single Choice

A company s website runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The website has a mix of dynamic and static content. Users around the globe are reporting that the website is slow.

Which set of actions will improve website performance for users worldwide?

Create an Amazon CloudFront distribution and configure the ALB as an origin. Then update the Amazon Route 53 record to point to the CloudFront distribution.

Create a latency-based Amazon Route 53 record for the ALB. Then launch new EC2 instances with larger instance sizes and register the instances with the ALB.

Launch new EC2 instances hosting the same web application in different Regions closer to the users. Then register instances with the same ALB using cross-Region VPC peering.

Host the website in an Amazon S3 bucket in the Regions closest to the users and delete the ALB and EC2 instances. Then update an Amazon Route 53 record to point to the S3 buckets.

Define Performant Architectures

Correct Answer:

Create an Amazon CloudFront distribution and configure the ALB as an origin. Then update the Amazon Route 53 record to point to the CloudFront distribution.

Explanation:

What Is Amazon CloudFront?
Amazon CloudFront is a web service that speeds up distribution of your static and dynamic web content, such as .html, .css, .js, and image files, to your users. CloudFront delivers your content through a worldwide network of data centers called edge locations. When a user requests content that you're serving with CloudFront, the user is routed to the edge location that provides the lowest latency (time delay), so that content is delivered with the best possible performance.
Routing traffic to an Amazon CloudFront web distribution by using your domain name.
If you want to speed up delivery of your web content, you can use Amazon CloudFront, the AWS content delivery network (CDN). CloudFront can deliver your entire website including dynamic, static, streaming, and interactive content by using a global network of edge locations. Requests for your content are automatically routed to the edge location that gives your users the lowest latency.
To use CloudFront to distribute your content, you create a web distribution and specify settings such as the Amazon S3 bucket or HTTP server that you want CloudFront to get your content from, whether you want only selected users to have access to your content, and whether you want to require users to use HTTPS.
When you create a web distribution, CloudFront assigns a domain name to the distribution, such asd111111abcdef8.cloudfront.net. You can use this domain name in the URLs for your content, for example:
http://d111111abcdef8.cloudfront.net/logo.jpg
Alternatively, you might prefer to use your own domain name in URLs, for example:
http://example.com/logo.jpg
If you want to use your own domain name, use Amazon Route 53 to create an alias record that points to your CloudFront distribution. An alias record is a Route 53 extension to DNS. It's similar to a CNAME record, but you can create an alias record both for the root domain, such as example.com, and for subdomains, such aswww.example.com. (You can create CNAME records only for subdomains.) When Route 53 receives a DNS query that matches the name and type of an alias record, Route 53 responds with the domain name that is associated with your distribution.
https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-to-cloudfront-distribution.html
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Introduction.html

References:

What is the recommended solution for creating an allow list for multiple ALBs on a firewall device?

Single Choice

A company that develops web applications has launched hundreds of Application Load Balancers (ALBs) in multiple Regions. The company wants to create an allow list for the IPs of all the load balancers on its firewall device. A solutions architect is looking for a one-time, highly available solution to address this request, which will also help reduce the number of IPs that need to be allowed by the firewall.

What should the solutions architect recommend to meet these requirements?

Create a AWS Lambda function to keep track of the IPs for all the ALBs in different Regions. Keep refreshing this list.

Set up a Network Load Balancer (NLB) with Elastic IPs. Register the private IPs of all the ALBs as targets to this NLB.

Launch AWS Global Accelerator and create endpoints for all the Regions. Register all the ALBs in different Regions to the corresponding endpoints.

Set up an Amazon EC2 instance, assign an Elastic IP to this EC2 instance, and configure the instance as a proxy to forward traffic to all the ALBs.

Define Performant Architectures Design Cost-Optimized Architectures

How can a solutions architect ensure all AWS EC2 instances, RDS DB instances, and Redshift clusters have tags?

Single Choice

A company that hosts its web application on AWS wants to ensure all Amazon EC2 instances, Amazon RDS DB instances, and Amazon Redshift clusters are configured with tags. The company wants to minimize the effort of configuring and operating this check.

What should a solutions architect do to accomplish this?

Use AWS Config rules to define and detect resources that are not properly tagged.

Use Cost Explorer to display resources that are not properly tagged. Tag those resources manually.

Write API calls to check all resources for proper tag allocation. Periodically run the code on an EC2 instance.

Write API calls to check all resources for proper tag allocation. Schedule an AWS Lambda function through Amazon CloudWatch to periodically run the code.

Design Resilient Architectures Define Performant Architectures

How to route requests to AWS or on-premises application using ALB and VPN connection?

Single Choice

A company that operates a web application on premises is preparing to launch a newer version of the application on AWS. The company needs to route requests to either the AWS-hosted or the on-premises-hosted application based on the URL query string. The on-premises application is not available from the internet, and a VPN connection is established between Amazon VPC and the company s data center. The company wants to use an Application Load Balancer (ALB) for this launch.

Which solution meets these requirements?

Use two ALBs: one for on-premises and one for the AWS resource. Add hosts to each target group of each ALB. Route with Amazon Route 53 based on the URL query string.

Use two ALBs: one for on-premises and one for the AWS resource. Add hosts to the target group of each ALB. Create a software router on an EC2 instance based on the URL query string.

Use one ALB with two target groups: one for the AWS resource and one for on premises. Add hosts to each target group of the ALB. Configure listener rules based on the URL query string.

Use one ALB with two AWS Auto Scaling groups: one for the AWS resource and one for on premises. Add hosts to each Auto Scaling group. Route with Amazon Route 53 based on the URL query string.

Define Performant Architectures Design Cost-Optimized Architectures

How can a company ensure that traffic from on-premises stays within its private IP space when communicating with an Amazon ECS cluster?

Single Choice

A company that recently started using AWS establishes a Site-to-Site VPN between its on-premises datacenter and AWS. The company's security mandate states that traffic originating from on premises should stay within the company s private IP space when communicating with an Amazon Elastic Container Service (Amazon ECS) cluster that is hosting a sample web application.

Which solution meets this requirement?

Configure a gateway endpoint for Amazon ECS. Modify the route table to include an entry pointing to the ECS cluster.

Create a Network Load Balancer and AWS PrivateLink endpoint for Amazon ECS in the same VPC that is hosting the ECS cluster.

Create a Network Load Balancer in one VPC and an AWS PrivateLink endpoint for Amazon ECS in another VPC. Connect the two VPCs by using VPC peering.

Configure an Amazon Route 53 record with Amazon ECS as the target. Apply a server certificate to Route 53 from AWS Certificate Manager (ACM) for SSL offloading.

Specify Secure Applications and Architectures

How can a company copy 1 PB of data from an Amazon S3 bucket in us-east-1 to another S3 bucket in us-west-2?

Single Choice

A company used an AWS Direct Connect connection to copy 1 PB of data from a colocation facility to an Amazon S3 bucket in the us-east-1 Region. The company now wants to copy the data to another S3 bucket in the us-west-2 Region.

Which solution will meet this requirement?

Use an AWS Snowball Edge Storage Optimized device to copy the data from the colocation facility to us-west-2.

Use the S3 console to copy the data from the source S3 bucket to the target S3 bucket.

Use S3 Transfer Acceleration and the S3 copy-object command to copy the data from the source S3 bucket to the target S3 bucket.

Add an S3 Cross-Region Replication configuration to copy the data from the source S3 bucket to the target S3 bucket.

Define Performant Architectures

What is the recommended solution for maintaining synchronized copies of .csv files on-premises and in Amazon S3?

Single Choice

A company uses a legacy on-premises analytics application that operates on gigabytes of .csv files and represents months of data. The legacy application cannot handle the growing size of .csv files. New .csv files are added daily from various data sources to a central on-premises storage location. The company wants to continue to support the legacy application while users learn AWS analytics services. To achieve this, a solutions architect wants to maintain two synchronized copies of all the .csv files on-premises and in Amazon S3.

Which solution should the solutions architect recommend?

Deploy AWS DataSync on-premises. Configure DataSync to continuously replicate the .csv files between the company s on-premises storage and the company s S3 bucket.

Deploy an on-premises file gateway. Configure data sources to write the .csv files to the file gateway. Point the legacy analytics application to the file gateway. The file gateway should replicate the .csv files to Amazon S3.

Deploy an on-premises volume gateway. Configure data sources to write the .csv files to the volume gateway. Point the legacy analytics application to the volume gateway. The volume gateway should replicate data to Amazon S3.

Deploy AWS DataSync on-premises. Configure DataSync to continuously replicate the .csv files between on-premises and Amazon Elastic File System (Amazon EFS). Enable replication from Amazon Elastic File System (Amazon EFS) to the company s S3 bucket.

Design Resilient Architectures Design Cost-Optimized Architectures

What is the recommended solution for maintaining synchronized copies of .csv files between on-premises and Amazon S3?

Single Choice

Deploy AWS DataSync on-premises. Configure DataSync to continuously replicate the .csv files between the company s on-premises storage and the company s S3 bucket.

Design Resilient Architectures Define Performant Architectures

What is the solution with the least operational overhead for implementing password rotation in Amazon RDS for PostgreSQL databases?

Single Choice

A company uses Amazon RDS for PostgreSQL databases for its data tier. The company must implement password rotation for the databases.

Which solution meets this requirement with the LEAST operational overhead?

Store the password in AWS Secrets Manager. Enable automatic rotation on the secret.

Store the password in AWS Systems Manager Parameter Store. Enable automatic rotation on the parameter.

Store the password in AWS Systems Manager Parameter Store. Write an AWS Lambda function that rotates the password.

Store the password in AWS Key Management Service (AWS KMS). Enable automatic rotation on the customer master key (CMK).

Specify Secure Applications and Architectures

Previous Questions

Next Questions

Amazon (SAA-C03) Exam Questions And Answers page 43

What combination should a solutions architect recommend for a cost-effective, scalable, and fast website solution?

Comments

How can website performance for global users be improved on Amazon EC2 instances behind an ALB?

Correct Answer:

Explanation:

References:

Comments

What is the recommended solution for creating an allow list for multiple ALBs on a firewall device?

Comments

How can a solutions architect ensure all AWS EC2 instances, RDS DB instances, and Redshift clusters have tags?

Correct Answer:

Explanation:

References:

Comments

How to route requests to AWS or on-premises application using ALB and VPN connection?

Comments

How can a company ensure that traffic from on-premises stays within its private IP space when communicating with an Amazon ECS cluster?

Comments

How can a company copy 1 PB of data from an Amazon S3 bucket in us-east-1 to another S3 bucket in us-west-2?

Correct Answer:

References:

Comments

What is the recommended solution for maintaining synchronized copies of .csv files on-premises and in Amazon S3?

Comments

What is the recommended solution for maintaining synchronized copies of .csv files between on-premises and Amazon S3?

Comments

What is the solution with the least operational overhead for implementing password rotation in Amazon RDS for PostgreSQL databases?

Correct Answer:

Explanation:

References:

Comments

{{ exam.shortName }}

{{ exam.longName }}