SAA-C03 Practice Online

Question 1

A start-up company that offers an intuitive financial data analytics service has consulted you about their AWS architecture. They have a fleet of Amazon EC2 worker instances that process financial data and then outputs reports which are used by their clients. You must store the generated report files in a durable storage. The number of files to be stored can grow over time as the start-up company is expanding rapidly overseas and hence, they also need a way to distribute the reports faster to clients located across the globe.

Which of the following is a cost-efficient and scalable storage option that you should use for this scenario?

A : Amazon Redshift as the data storage and CloudFront as the CDN.

B : Amazon Glacier as the data storage and ElastiCache as the CDN.

C : multiple EC2 instance stores for data storage and ElastiCache as the CDN.

D : Amazon S3 as the data storage and CloudFront as the CDN.

Answer: D

Question 2

A company has a license-based, expensive, legacy commercial database solution deployed at its on-premises data center. The company wants to migrate this database to a more efficient, open-source, and cost-effective option on AWS Cloud. The CTO at the company wants a solution that can handle complex database configurations such as secondary indexes, foreign keys, and stored procedures.

As a solutions architect, which of the following AWS services should be combined to handle this use-case? (Select two)

A : AWS Snowball Edge

B : AWS Glue

C : AWS Database Migration Service (AWS DMS)

D : Basic Schema Copy

E : AWS Schema Conversion Tool (AWS SCT)

Answer: C,E

Question 3

A company is designing a new application that uploads files to an Amazon S3 bucket. The uploadedfiles are processed to extract metadata.Processing must take less than 5 seconds. The volume and frequency of the uploads vary from a fewfiles each hour to hundreds of concurrent uploads.Which solution will meet these requirements MOST cost-effectively?

A : Configure AWS CloudTrail trails to log Amazon S3 API calls. Use AWS AppSync to process the files.

B : Configure a new object created S3 event notification within the bucket to invoke an AWS Lambda function to process the files.

C : Configure Amazon Kinesis Data Streams to deliver the files to the S3 bucket. Invoke an AWS Lambda function to process the files.

D : Deploy an Amazon EC2 instance. Create a script that lists all files in the S3 bucket and processes new files. Use a cron job that runs every minute to run the script.

Answer: B

Question 4

A retail company uses AWS Cloud to manage its technology infrastructure. The company has deployed its consumer-focused web application on Amazon EC2-based web servers and uses Amazon RDS PostgreSQL database as the data store. The PostgreSQL database is set up in a private subnet that allows inbound traffic from selected Amazon EC2 instances. The database also uses AWS Key Management Service (AWS KMS) for encrypting data at rest.

Which of the following steps would you recommend to facilitate secure access to the database?

A : Create a new network access control list (network ACL) that blocks SSH from the entire Amazon EC2 subnet into the database

B : Configure Amazon RDS to use SSL for data in transit

C : Use IAM authentication to access the database instead of the database user's access credentials

D : Create a new security group that blocks SSH from the selected Amazon EC2 instances into the database

Answer: B

Question 5

A global marketing company has applications that run in the ap-southeast-2 Region and the eu-west-1 Region.

Applications that run in a VPC in eu-west-1 need to communicate securely with databases that run in a VPC in

ap-southeast-2.

Which network design will meet these requirements?

A : eate a VPC peering connection between the eu-west-1 VPC and the ap-southeast-2 VPC. Create an inbound rule in the eu-west-1 application security group that allows traffic from the database server IP addresses in the ap-southeast-2 security group.

B : nfigure a VPC peering connection between the ap-southeast-2 VPC and the eu-west-1 VPC. Update the subnet route tables. Create an inbound rule in the ap-southeast-2 database security group that references the security group ID of the application servers in eu-west-1.

C : nfigure a VPC peering connection between the ap-southeast-2 VPC and the eu-west-1 VPC. Update the subnet route tables Create an inbound rule in the ap-southeast-2 database security group that allows traffic from the eu-west-1 application server IP addresses.

D : eate a transit gateway with a peering attachment between the eu-west-1 VPC and the ap-southeast-2 VPC. After the transit gateways are properly peered and routing is configured, create an inbound rule in the database security group that references the security group ID of the application servers in eu-west-1.

Answer: C

Name:	AWS Certified Solutions Architect - Associate
Exam Code:	SAA-C03
Certification:	AWS Certified Solutions Architect
Vendor:	Amazon
Total Questions:	1616
Last Updated:	Mar 11, 2025

Download Demo SAA-C03 Dumps

Create Account

Password Recovery

SAA-C03 Practice Online

Download Demo SAA-C03 Dumps

Member Login

Create Account

Password Recovery

SAA-C03 Practice Online