AWS Certified Solutions Architect Associate(SAA C03)

The AWS Certified Solutions Architect Associate(SAA C03) were last updated on today.

Viewing page 7 out of 198 pages.
Viewing questions 31-35 out of 990 questions

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.and Azure
- Trademarks, certification & product names are used for reference only and belong to Amazon.and Azure

Topic 1 - Exam A

Question #31 Topic 1

A company is developing an application that provides order shipping statistics for retrieval by a REST API. The company wants to extract the shipping statistics, organize the data into an easy-to-read HTML format, and send the report to several email addresses at the same time every morning. Which combination of steps should a solutions architect take to meet these requirements? (Choose two.)

A Configure the application to send the data to Amazon Kinesis Data Firehose.
B Use Amazon Simple Email Service (Amazon SES) to format the data and to send the report by email.
C Create an Amazon EventBridge (Amazon CloudWatch Events) scheduled event that invokes an AWS Glue job to query the application's API for the data.
D Create an Amazon EventBridge (Amazon CloudWatch Events) scheduled event that invokes an AWS Lambda function to query the application's API for the data.
E Store the application data in Amazon S3. Create an Amazon Simple Notification Service (Amazon SNS) topic as an S3 event destination to send the report by email.

Suggested Answer: BD
NOTE: Answer is :
Explanation :

Question #32 Topic 1

A company runs multiple Windows workloads on AWS. The company's employees use Windows file shares that are hosted on two Amazon EC2 instances. The file shares synchronize data between themselves and maintain duplicate copies. The company wants a highly available and durable storage solution that preserves how users currently access the files. What should a solutions architect do to meet these requirements?

A Migrate all the data to Amazon S3. Set up IAM authentication for users to access files.
B Set up an Amazon S3 File Gateway. Mount the S3 File Gateway on the existing EC2 instances.
C Extend the file share environment to Amazon FSx for Windows File Server with a Multi-AZ configuration. Migrate all the data to FSx for Windows File Server.
D Extend the file share environment to Amazon Elastic File System (Amazon EFS) with a Multi-AZ configuration. Migrate all the data to Amazon EFS.

Suggested Answer: C
NOTE: Answer is :C
Explanation :Amazon FSx for Windows File Server is a fully managed service that provides cost-effective and fully native Microsoft Windows file systems. Extending the file share environment to Amazon FSx for Windows File Server with a multi-AZ configuration will provide high availability and durability and also maintain the same user access experience.

Question #33 Topic 1

A company wants to run its critical applications in containers to meet requirements for scalability and availability. The company prefers to focus on maintenance of the critical applications. The company does not want to be responsible for provisioning and managing the underlying infrastructure that runs the containerized workload. What should a solutions architect do to meet these requirements?

A Use Amazon EC2 instances, and install Docker on the instances.
B Use Amazon Elastic Container Service (Amazon ECS) on Amazon EC2 worker nodes.
C Use Amazon Elastic Container Service (Amazon ECS) on AWS Fargate.
D Use Amazon EC2 instances from an Amazon Elastic Container Service (Amazon ECS)-optimized Amazon Machine Image (AMI).

Suggested Answer: C
NOTE: Answer is :C
Explanation :Amazon Elastic Container Service (Amazon ECS) on AWS Fargate is a perfect choice since it allows the company to run containers without having to manage the underlying infrastructure, thus they will not be responsible for provisioning and managing that. It will also be able to meet the requirements of scalability and availability as Fargate automatically scales and adjusts to the needs of the containerized workload.

Question #34 Topic 1

A company needs guaranteed Amazon EC2 capacity in three specific Availability Zones in a specific AWS Region for an upcoming event that will last 1 week. What should the company do to guarantee the EC2 capacity?

A Purchase Reserved Instances that specify the Region needed.
B Create an On-Demand Capacity Reservation that specifies the Region needed.
C Purchase Reserved Instances that specify the Region and three Availability Zones needed.
D Create an On-Demand Capacity Reservation that specifies the Region and three Availability Zones needed.

Suggested Answer: D
NOTE: Answer is :D
Explanation :Creating an On-Demand Capacity Reservation that specifies the Region and three Availability Zones is the appropriate option because it guarantees the capacity in the specific AWS Region and Availability Zones the company needs. Purchasing Reserved Instances only reserves the capacity but doesn't guarantee it, also it does not provide the ability to specify the Availability Zones.

Question #35 Topic 1

A company is developing a two-tier web application on AWS. The company's developers have deployed the application on an Amazon EC2 instance that connects directly to a backend Amazon RDS database. The company must not hardcode database credentials in the application. The company must also implement a solution to automatically rotate the database credentials on a regular basis. Which solution will meet these requirements with the LEAST operational overhead?

A Store the database credentials in the instance metadata. Use Amazon EventBridge (Amazon CloudWatch Events) rules to run a scheduled AWS Lambda function that updates the RDS credentials and instance metadata at the same time.
B Store the database credentials in a configuration file in an encrypted Amazon S3 bucket. Use Amazon EventBridge (Amazon CloudWatch Events) rules to run a scheduled AWS Lambda function that updates the RDS credentials and the credentials in the configuration file at the same time. Use S3 Versioning to ensure the ability to fall back to previous values.
C Store the database credentials as a secret in AWS Secrets Manager. Turn on automatic rotation for the secret. Attach the required permission to the EC2 role to grant access to the secret.
D Store the database credentials as encrypted parameters in AWS Systems Manager Parameter Store. Turn on automatic rotation for the encrypted parameters. Attach the required permission to the EC2 role to grant access to the encrypted parameters.

Suggested Answer: C
NOTE: Answer is :C
Explanation :Storing the database credentials as a secret in AWS Secrets Manager, enabling automatic rotation for the secret, and attaching the necessary permissions to the EC2 role provides least operational overhead. AWS Secrets Manager protects access to applications, services, and IT resources. This eliminates the upfront and ongoing investment needed to operate your infrastructure securely.