Amazon
SAA-C03 Exam
Questions

AWS Certified Solutions Architect - Associate SAA-C03

Amazon (SAA-C03) Exam Questions And Answers page 67

How to redesign an architecture using Amazon EC2 Auto Scaling groups to handle burst traffic and reduce timeouts?

Single Choice

A website runs a web application that receives a burst of traffic each day at noon. The users upload new pictures and content daily, but have been complaining of timeouts. The architecture uses Amazon EC2 Auto Scaling groups, and the custom application consistently takes 1 minute to initiate upon boot up before responding to user requests.

How should a solutions architect redesign the architecture to better respond to changing traffic?

Configure a Network Load Balancer with a slow start configuration.

Configure AWS ElastiCache for Redis to offload direct requests to the servers.

Configure an Auto Scaling step scaling policy with an instance warmup condition.

Configure Amazon CloudFront to use an Application Load Balancer as the origin.

Design Resilient Architectures Define Performant Architectures

How can a solutions architect fix the error of insufficient IP address space in an AWS VPC subnet with IPv6 enabled?

Single Choice

Management has decided to deploy all AWS VPCs with IPv6 enabled. After some time, a solutions architect tries to launch a new instance and receives an error stating that there is not enough IP address space available in the subnet.

What should the solutions architect do to fix this?

Check to make sure that only IPv6 was used during the VPC creation.

Create a new IPv4 subnet with a larger range, and then launch the instance.

Create a new IPv6-only subnet with a large range, and then launch the instance.

Disable the IPv4 subnet and migrate all instances to IPv6 only. Once that is complete, launch the instance.

Define Performant Architectures Design Cost-Optimized Architectures

How can a solutions architect efficiently publish static HTML pages stored in an Amazon S3 bucket for a global event with millions of expected views?

Single Choice

Organizers for a global event want to put daily reports online as static HTML pages. The pages are expected to generate millions of views from users around the world. The files are stored in an Amazon S3 bucket. A solutions architect has been asked to design an efficient and effective solution.

Which action should the solutions architect take to accomplish this?

Generate presigned URLs for the files.

Use cross-Region replication to all Regions.

Use the geoproximity feature of Amazon Route 53.

Use Amazon CloudFront with the S3 bucket as its origin.

Define Performant Architectures

Correct Answer:

Use Amazon CloudFront with the S3 bucket as its origin.

Explanation:

Using Amazon S3 Origins, MediaPackage Channels, and Custom Origins for Web Distributions
Using Amazon S3 Buckets for Your Origin
When you use Amazon S3 as an origin for your distribution, you place any objects that you want CloudFront to deliver in an Amazon S3 bucket. You can use any method that is supported by Amazon S3 to get your objects into Amazon S3, for example, the Amazon S3 console or API, or a third-party tool. You can create a hierarchy in your bucket to store the objects, just as you would with any other Amazon S3 bucket.
Using an existing Amazon S3 bucket as your CloudFront origin server doesn't change the bucket in any way; you can still use it as you normally would to store and access Amazon S3 objects at the standard Amazon S3 price. You incur regular Amazon S3 charges for storing the objects in the bucket.
Using Amazon S3 Buckets Configured as Website Endpoints for Your Origin
You can set up an Amazon S3 bucket that is configured as a website endpoint as custom origin with CloudFront.
When you configure your CloudFront distribution, for the origin, enter the Amazon S3 static website hosting endpoint for your bucket. This value appears in the Amazon S3 console, on the Properties tab, in the Static website hosting pane. For example: http://bucket-name.s3-website-region.amazonaws.com
For more information about specifying Amazon S3 static website endpoints, see Website endpoints in the Amazon Simple Storage Service Developer Guide.
When you specify the bucket name in this format as your origin, you can use Amazon S3 redirects and Amazon S3 custom error documents. For more information about Amazon S3 features, see the Amazon S3 documentation.
Using an Amazon S3 bucket as your CloudFront origin server doesn t change it in any way. You can still use it as you normally would and you incur regular Amazon S3 charges.

References:

How to meet the requirement of logging access and detecting modifications to log files in an Amazon S3 bucket?

Single Choice

The financial application at a company stores monthly reports in an Amazon S3 bucket. The vice president of finance has mandated that all access to these reports be logged and that any modifications to the log files be detected.

Which actions can a solutions architect take to meet these requirements?

Use S3 server access logging on the bucket that houses the reports with the read and write data events and log file validation options enabled.

Use S3 server access logging on the bucket that houses the reports with the read and write management events and log file validation options enabled.

Use AWS CloudTrail to create a new trail. Configure the trail to log read and write data events on the S3 bucket that houses the reports. Log these events to a new bucket, and enable log file validation.

Use AWS CloudTrail to create a new trail. Configure the trail to log read and write management events on the S3 bucket that houses the reports. Log these events to a new bucket, and enable log file validation.

Define Performant Architectures Specify Secure Applications and Architectures

What are the effective IAM permissions for group members with the attached IAM policy?

Single Choice

The following IAM policy is attached to an IAM group. This is the only policy applied to the group.

What are the effective IAM permissions of this policy for group members?

Group members are permitted any Amazon EC2 action within the us-east-1 Region. Statements after the Allow permission are not applied.

Group members are denied any Amazon EC2 permissions in the us-east-1 Region unless they are logged in with multi-factor authentication (MFA).

Group members are allowed the ec2:StopInstances and ec2:TerminateInstances permissions for all Regions when logged in with multi-factor authentication (MFA). Group members are permitted any other Amazon EC2 action.

Group members are allowed the ec2:StopInstances and ec2:TerminateInstances permissions for the us-east-1 Region only when logged in with multi-factor authentication (MFA). Group members are permitted any other Amazon EC2 action within the us-east-1 Region.

Specify Secure Applications and Architectures Design Cost-Optimized Architectures

What are the effective IAM permissions for group members with the attached IAM policy?

Single Choice

The following IAM policy is attached to an IAM group. This is the only policy applied to the group.

What are the effective IAM permissions of this policy for group members?

Group members are permitted any Amazon EC2 action within the us-east-1 Region. Statements after the Allow permission are not applied.

Group members are denied any Amazon EC2 permissions in the us-east-1 Region unless they are logged in with multi-factor authentication (MFA).

Specify Secure Applications and Architectures

How can a solutions architect ensure all objects uploaded to an Amazon S3 bucket are encrypted?

Single Choice

What should a solutions architect do to ensure that all objects uploaded to an Amazon S3 bucket are encrypted?

Update the bucket policy to deny if the PutObject does not have an s3:x-amz-acl header set.

Update the bucket policy to deny if the PutObject does not have an s3:x-amz-acl header set to private.

Update the bucket policy to deny if the PutObject does not have an aws:SecureTransport header set to true.

Update the bucket policy to deny if the PutObject does not have an x-amz-server-side-encryption header set.

Specify Secure Applications and Architectures

Previous Questions

Amazon (SAA-C03) Exam Questions And Answers page 67

How to redesign an architecture using Amazon EC2 Auto Scaling groups to handle burst traffic and reduce timeouts?

Comments

How can a solutions architect fix the error of insufficient IP address space in an AWS VPC subnet with IPv6 enabled?

Comments

How can a solutions architect efficiently publish static HTML pages stored in an Amazon S3 bucket for a global event with millions of expected views?

Correct Answer:

Explanation:

References:

Comments

How to meet the requirement of logging access and detecting modifications to log files in an Amazon S3 bucket?

Correct Answer:

References:

Comments

What are the effective IAM permissions for group members with the attached IAM policy?

Comments

What are the effective IAM permissions for group members with the attached IAM policy?

Comments

How can a solutions architect ensure all objects uploaded to an Amazon S3 bucket are encrypted?

Comments

{{ exam.shortName }}

{{ exam.longName }}