Amazon (SAA-C03) Exam Questions And Answers page 49
A data science team requires storage for nightly log processing. The size and number of logs is unknown and will persist for 24 hours only.
What is the MOST cost-effective solution?
What is the MOST cost-effective solution?
Amazon S3 Standard
Amazon S3 Intelligent-Tiering
Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA)
Design Cost-Optimized Architectures
A development team is collaborating with another company to create an integrated product. The other company needs to access an Amazon Simple Queue Service (Amazon SQS) queue that is contained in the development team's account. The other company wants to poll the queue without giving up its own account permissions to do so.
How should a solutions architect provide access to the SQS queue?
How should a solutions architect provide access to the SQS queue?
Create an instance profile that provides the other company access to the SQS queue.
Create an IAM policy that provides the other company access to the SQS queue.
Create an SQS access policy that provides the other company access to the SQS queue.
Create an Amazon Simple Notification Service (Amazon SNS) access policy that provides the other company access to the SQS queue.
Define Performant Architectures
Specify Secure Applications and Architectures
A development team is creating an event-based application that uses AWS Lambda functions. Events will be generated when files are added to an Amazon S3 bucket. The development team currently has Amazon Simple Notification Service (Amazon SNS) configured as the event target form Amazon S3.
What should a solutions architect do to process the events form Amazon S3 in a scalable way?
What should a solutions architect do to process the events form Amazon S3 in a scalable way?
Create an SNS subscription that processes the event in Amazon Elastic Container Service (Amazon ECS) before the event runs in Lambda.
Create an SNS subscription that processes the event in Amazon Elastic Kubernetes Service (Amazon EKS) before the event runs in Lambda.
Create an SNS subscription that sends the event to Amazon Simple Queue Service (Amazon SQS). Configure the SQS queue to trigger a Lambda function.
Create an SNS subscription that sends the event to AWS Server Migration Service (AWS SMS). Configure the Lambda function to poll from the SMS event.
Design Resilient Architectures
Define Performant Architectures
A development team is deploying a new product on AWS and is using AWS Lambda as part of the deployment. The team allocates 512 MB of memory for one of the Lambda functions. With this memory allocation, the function is completed in 2 minutes. The function runs millions of times monthly, and the development team is concerned about cost. The team conducts tests to see how different Lambda memory allocations affect the cost of the function.
Which steps will reduce the Lambda costs for the product? (Choose two.)
Which steps will reduce the Lambda costs for the product? (Choose two.)
Increase the memory allocation for this Lambda function to 1,024 MB if this change causes the execution time of each function to be less than 1 minute.
Increase the memory allocation for this Lambda function to 1,024 MB if this change causes the execution time of each function to be less than 90 seconds.
Reduce the memory allocation for this Lambda function to 256 MB if this change causes the execution time of each function to be less than 4 minutes.
Increase the memory allocation for this Lambda function to 2,048 MB if this change causes the execution time of each function to be less than 1 minute.
Reduce the memory allocation for this Lambda function to 256 MB if this change causes the execution time of each function to be less than 5 minutes.
Define Performant Architectures
Design Cost-Optimized Architectures
A development team needs to host a website that will be accessed by other teams. The website contents consist of HTML, CSS, client-side JavaScript, and images.
Which method is the MOST cost-effective for hosting the website?
Which method is the MOST cost-effective for hosting the website?
Containerize the website and host it in AWS Fargate.
Create an Amazon S3 bucket and host the website there.
Deploy a web server on an Amazon EC2 instance to host the website.
Configure an Application Load Balancer with an AWS Lambda target that uses the Express.js framework.
Design Cost-Optimized Architectures
A development team needs to host a website that will be accessed by other teams. The website contents consist of HTML, CSS, client-side JavaScript, and images.
Which method is the MOST cost-effective for hosting the website?
Which method is the MOST cost-effective for hosting the website?
Containerize the website and host it in AWS Fargate.
Create an Amazon S3 bucket and host the website there.
Deploy a web server on an Amazon EC2 instance to host the website.
Configure an Application Load Balancer with an AWS Lambda target that uses the Express is framework.
Design Cost-Optimized Architectures
A development team stores its Amazon RDS MySQL DB instance user name and password credentials in a configuration file. The configuration file is stored as plaintext on the root device volume of the team s Amazon EC2 instance. When the team s application needs to reach the database, it reads the file and loads the credentials into the code. The team has modified the permissions of the configuration file so that only the application can read its content. A solution architect must design a more secure solution.
What should the solutions architect do to meet this requirement?
What should the solutions architect do to meet this requirement?
Store the configuration file in Amazon S3. Grant the application access to read the configuration file.
Create an IAM role with permission to access the database. Attach this IAM role to the EC2 instance.
Enable SSL connections on the database instance. Alter the database user to require SSL when logging in.
Move the configuration file to an EC2 instance store, and create an Amazon Machine Image (AMI) of the instance. Launch new instances from this AMI.
Specify Secure Applications and Architectures
A disaster response team is using drones to collect images of recent storm damage. The response team s laptops lack the storage and compute capacity to transfer the images and process the data. While the team has Amazon EC2 instances for processing and Amazon S3 buckets for storage, network connectivity is intermittent and unreliable. The images need to be processed to evaluate the damage.
What should a solutions architect recommend?
What should a solutions architect recommend?
Use AWS Snowball Edge devices to process and store the images.
Upload the images to Amazon Simple Queue Service (Amazon SQS) during intermittent connectivity to EC2 instances.
Configure Amazon Kinesis Data Firehose to create multiple delivery streams aimed separately at the S3 buckets for storage and the EC2 instances for processing the images.
Use AWS Storage Gateway pre-installed on a hardware appliance to cache the images locally for Amazon S3 to process the images when connectivity becomes available.
Define Performant Architectures
Specify Secure Applications and Architectures
A disaster response team is using drones to collect images of recent storm damage. The response team s laptops lack the storage and compute capacity to transfer the images and process the data. While the team has Amazon EC2 instances for processing and Amazon S3 buckets for storage, network connectivity is intermittent and unreliable. The images need to be processed to evaluate the damage.
What should a solutions architect recommend?
What should a solutions architect recommend?
Use AWS Snowball Edge devices to process and store the images.
Upload the images to Amazon Simple Queue Service (Amazon SQS) during intermittent connectivity to EC2 instances.
Configure Amazon Kinesis Data Firehose to create multiple delivery streams aimed separately at the S3 buckets for storage and the EC2 instances for processing the images.
Use AWS Storage Gateway pre-installed on a hardware appliance to cache the images locally for Amazon S3 to process the images when connectivity becomes available.
Define Performant Architectures
Specify Secure Applications and Architectures
A financial company hosts a web application on AWS. The application uses an Amazon API Gateway Regional API endpoint to give users the ability to retrieve current stock prices. The company's security team has noticed an increase in the number of API requests. The security team is concerned that HTTP flood attacks might take the application offline.
A solutions architect must design a solution to protect the application from this type of attack.
Which solution meets these requirements with the LEAST operational overhead?
A solutions architect must design a solution to protect the application from this type of attack.
Which solution meets these requirements with the LEAST operational overhead?
Create an Amazon CloudFront distribution in front of the API Gateway Regional API endpoint with a maximum TTL of 24 hours.
Create a Regional AWS WAF web ACL with a rate-based rule. Associate the web ACL with the API Gateway stage.
Use Amazon CloudWatch metrics to monitor the Count metric and alert the security team when the predefined rate is reached.
Create an Amazon CloudFront distribution with Lambda@Edge in front of the API Gateway Regional API endpoint. Create an AWS Lambda function to block requests from IP addresses that exceed the predefined rate.
Define Performant Architectures
Specify Secure Applications and Architectures
Comments