SAA-C03 | Up To The Minute SAA-C03 Exam Engine For AWS Certified Solutions Architect - Associate (SAA-C03) Certification

NEW QUESTION 1
A company is building a solution that will report Amazon EC2 Auto Scaling events across all the applications In an AWS account. The company needs to use a serverless solution to store the EC2 Auto Scaling status data in Amazon S3 The company then will use the data m Amazon S3 to provide near-real time updates in a dashboard The solution must not affect the speed of EC2 instance launches.
How should the company move the data to Amazon S3 to meet these requirements?

• A. Use an Amazon CioudWatch metric stream to send the EC2 Auto Scaling status data to Amazon Kinesis Data Firehose Store the data in Amazon S3
• B. Launch an Amazon EMR duster to collect the EC2 Auto Scaling status data and send the data to Amazon Kinesis Data Firehose Store the data in Amazon S3
• C. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda (unction on a schedule Configure the Lambda function to send the EC2 Auto Scaling status data directly to Amazon S3
• D. Use a bootstrap script during the launch of an EC2 instance to install Amazon Kinesis Agent Configure Kinesis Agent to collect the EC2 Auto Scaling status data and send the data to Amazon Kinesis Data Firehose Store the data in Amazon S3

Answer: B

NEW QUESTION 2
A company has five organizational units (OUS) as part of its organization in AWS Organization. Each OU correlate to the five business that the company owns. The company research and development R&D business is separating from the company and will need its own organization. A solutions architect creates a separate new management account for this purpose.

• A. Have the R&D AWS account be part of both organizations during the transition.
• B. Invite the R&D AWS account to be part of the new organization after the R&D AWS account has left the prior organization.
• C. Create a new R&D AWS account in the new organizatio
• D. Migrate resources from the period R&D AWS account to thee new R&D AWS account
• E. Have the R&D AWS account into the now organisatio
• F. Make the now management account a member of the prior organisation

Answer: B

NEW QUESTION 3
A company wants to build a data lake on AWS from data that is stored in an onpremises Oracle relational database. The data lake must receive ongoing updates from the on-premises database.
Which solution will meet these requirements with the LEAST operational overhead?

• A. Use AWS DataSync to transfer the data to Amazon S3. Use AWS Glue to transform the data and integrate the data into a data lake.
• B. Use AWS Snowball to transfer the data to Amazon S3. Use AWS Batch to transform the data and integrate the data into a data lake.
• C. Use AWS Database Migration Service (AWS DMS) to transfer the data to Amazon S3 Use AWS Glue to transform the data and integrate the data into a data lake.
• D. Use an Amazon EC2 instance to transfer the data to Amazon S3. Configure the EC2 instance to transform the data and integrate the data into a data lake.

Answer: C

NEW QUESTION 4
A company has an application that loads documents into an Amazon 53 bucket and converts the documents into another format. The application stores the converted documents m another S3 bucket and saves the document name and URLs in an Amazon DynamoOB table The DynamoOB entries are used during subsequent days to access the documents The company uses a DynamoOB Accelerator (DAX) cluster in front of the table
Recently, traffic to the application has increased. Document processing tasks are timing out during the scheduled DAX maintenance window. A solutions architect must ensure that the documents continue to load during the maintenance window
What should the solutions architect do to accomplish this goal?

• A. Modify the application to write to the DAX cluster Configure the DAX cluster to write to the DynamoDB table when the maintenance window is complete
• B. Enable Amazon DynamoDB Streams for the DynamoDB tabl
• C. Modify the application to write to the stream Configure the stream to load the data when the maintenance window is complete.
• D. Convert the application to an AWS Lambda function Configure the Lambda function runtime to be longer than the maintenance window Create an Amazon CloudWatch alarm to monitor Lambda timeouts
• E. Modify the application to write the document name and URLs to an Amazon Simple Queue Service (Amazon SOS) queue Create an AWS Lambda function to read the SOS queue and write to DynamoDB.

Answer: C

NEW QUESTION 5
A company observes an increase in Amazon EC2 costs in its most recent bill
The billing team notices unwanted vertical scaling of instance types for a couple of EC2 instances
A solutions architect needs to create a graph comparing the last 2 months of EC2 costs and perform an in-depth analysis to identify the root cause of the vertical scaling
How should the solutions architect generate the information with the LEAST operational overhead?

• A. Use AWS Budgets to create a budget report and compare EC2 costs based on instance types
• B. Use Cost Explorer's granular filtering feature to perform an in-depth analysis of EC2 costs based on instance types
• C. Use graphs from the AWS Billing and Cost Management dashboard to compare EC2 costs based on instance types for the last 2 months
• D. Use AWS Cost and Usage Reports to create a report and send it to an Amazon S3 bucket Use Amazon QuickSight with Amazon S3 as a source to generate an interactive graph based on instance types.

Answer: B

Explanation:
Explanation
AWS Cost Explorer is a tool that enables you to view and analyze your costs and usage. You can explore your usage and costs using the main graph, the Cost Explorer cost and usage reports, or the Cost Explorer RI reports. You can view data for up to the last 12 months, forecast how much you're likely to spend for the next 12 months, and get recommendations for what Reserved Instances to purchase. You can use Cost Explorer to identify areas that need further inquiry and see trends that you can use to understand your costs. https://docs.aws.amazon.com/costmanagement/ latest/userguide/ce-what-is.html

NEW QUESTION 6
A company has migrated a two-tier application from its on-premises data center to the AWS Cloud The data tier is a Multi-AZ deployment of Amazon RDS for Oracle with 12 TB of General Purpose SSD Amazon Elastic Block Store (Amazon EBS) storage The application is designed to process and store documents in the database as binary large objects (blobs) with an average document size of 6 MB
The database size has grown over time reducing the performance and increasing the cost of storage. The company must improve the database performance and needs a solution that is highly available and resilient
Which solution will meet these requirements MOST cost-effectively?

• A. Reduce the RDS DB instance size Increase the storage capacity to 24 TiB Change the storage type to Magnetic
• B. Increase the RDS DB instance siz
• C. Increase the storage capacity to 24 TiB Change the storage type to Provisioned IOPS
• D. Create an Amazon S3 bucke
• E. Update the application to store documents in the S3 bucket Store theobject metadata m the existing database
• F. Create an Amazon DynamoDB tabl
• G. Update the application to use DynamoD
• H. Use AWS Database Migration Service (AWS DMS) to migrate data from the Oracle database to DynamoDB

Answer: C

NEW QUESTION 7
A company wants to reduce the cost of its existing three-tier web architect. The web, application, and database servers are running on Amazon EC2 instance EC2 instance for the development, test and production environments. The EC2 instances average 30% CPU utilization during peak hours and 10% CPU utilization during non-peak hours.
The production EC2 instance purchasing solution will meet the company’s requirements MOST cost-effectively?

• A. Use Spot Instances for the production EC2 instance
• B. Use Reserved Instances for the development and test EC2 instances
• C. Use Reserved Instances for the production EC2 instance
• D. Use On-Demand Instances for the development and test EC2 instances
• E. Use blocks for the production FC2 ins ranges Use Reserved instances for the development and lest EC2 instances
• F. Use On-Demand Instances for the production EC2 instance
• G. Use Spot blocks for the development and test EC2 instances

Answer: B

NEW QUESTION 8
A company wants to analyze and troubleshoot Access Denied errors and unauthorized errors that ate related to IAM permissions. The company has AWS ClouTrail turned on.
Which solution will meet these requirements with the LEAST effort?

• A. Use AWS Glue and mile custom scripts lo query CloudTrail logs for the errors.
• B. Use AWS Batch and write custom scripts to query CloudTrail logs for the errors.
• C. Search CloudTrail logs will Amazon Athena queries to identify the errors
• D. Search CloudTrail logs with Amazon QuicKSight Create a dashboard to identify the errors

Answer: C

NEW QUESTION 9
A company has a web application that is based ornavaan^PH^Tnecompan^lanstomove the application from on premises to AWS The company needs the ability to test new site features frequently The company also needs a highly available and managed solution that requires minimum operational overhead.
Which solution will meet these requirements?

• A. Create an Amazon S3 bucket Enable static web hosting on the S3 bucket Upload the static content to the S3 bucket Use AWS Lambda to process all dynamic content
• B. Deploy the web application to an AWS Elastic Beanstalk environment Use URL swapping to switch between multiple Elastic Beanstalk environments for feature testing
• C. Deploy the web application to Amazon EC2 instances that are configured with Java and PHP Use Auto Scaling groups and an Application Load Balancer to manage the website's availability.
• D. Containerize the web application Deploy the web application to Amazon EC2 instances Use the AWS Load Balancer Controller to dynamically route traffic between containers that contain the new site features for testing

Answer: D

NEW QUESTION 10
A company that primarily runs its application servers on premises has deeded to migrate to AWS. The company wants to minimize its need to scale its Internet Small Computer Systems Interface (iSCSI) storage on premises. The company wants only its recently accessed data to remain stored locally
Which AWS solution should the company use to meet these requirements?

• A. Amazon S3 File Gateway
• B. AWS Storage Gateway Tape Gateway
• C. AWS Storage Gateway Volume Gateway stored volumes
• D. AWS Storage Gateway Volume Gateway cached volumes

Answer: D

NEW QUESTION 11
A hospital wants to create digital copies for its large collection of historical written records. The hospital will continue to add hundreds of new documents each day. The hospital's data team will scan the documents and will upload the documents to the AWS Cloud.
A solutions architect must implement a solution to analyze the documents: extract the medical information, and store the documents so that an application can run SQL queries on the data The solution must maximize scalability and operational efficiency
Which combination of steps should the solutions architect take to meet these requirements? (Select TWO.)

• A. Write the document information to an Amazon EC2 instance that runs a MySQL database
• B. Write the document information to an Amazon S3 bucket Use Amazon Athena to query the data
• C. Create an Auto Scaling group of Amazon EC2 instances to run a custom application that processes the scanned files and extracts the medical information.
• D. Create an AWS Lambda function that runs when new documents are uploaded Use Amazon Rekognition to convert the documents to raw text Use Amazon Transcribe Medical to detect and extract relevant medical Information from the text.
• E. Create an AWS Lambda function that runs when new documents are uploaded Use Amazon Textract to convert the documents to raw text Use Amazon Comprehend Medical to detect and extract relevant medical information from the text

Answer: AE

NEW QUESTION 12
A company has an application with a REST-based interface that allows data to be received in near-real time from a third-party vendor Once received the application processes and stores the data for further analysis. The application is running on Amazon EC2 instances.
The third-party vendor has received many 503 Service Unavailable Errors when sending data to the application When the data volume spikes, the compute capacity reaches its maximum limit and the application is unable to process all requests.
Which design should a solutions architect recommend to provide a more scalable solution?

• A. Use Amazon Kinesis Data Streams to ingest the data Process the data using AWS Lambda function.
• B. Use Amazon API Gateway on top of the existing applicatio
• C. Create a usage plan with a quota limit for the third-party vendor
• D. Use Amazon Simple Notification Service (Amazon SNS) to ingest the data Put the EC2 instances in an Auto Scaling group behind an Application Load Balancer
• E. Repackage the application as a container Deploy the application using Amazon Elastic Container Service (Amazon ECS) using the EC2 launch type with an Auto Scaling group

Answer: A

NEW QUESTION 13
A solutions architect must design a highly available infrastructure for a website. The website is powered by Windows web servers that run on Amazon EC2 instances. The solutions architect must implement a solution that can mitigate a large-scale DDoS attack that originates from thousands of IP addresses. Downtime is not acceptable for the website.
Which actions should the solutions architect take to protect the website from such an attack? (Select TWO.)

• A. Use AWS Shield Advanced to stop the DDoS attack.
• B. Configure Amazon GuardDuty to automatically block the attackers.
• C. Configure the website to use Amazon CloudFront for both static and dynamic content.
• D. Use an AWS Lambda function to automatically add attacker IP addresses to VPC network ACLs.
• E. Use EC2 Spot Instances in an Auto Scaling group with a target tracking scaling policy that is set to 80% CPU utilization

Answer: AC

NEW QUESTION 14
A company collects data from thousands of remote devices by using a RESTful web services application that runs on an Amazon EC2 instance. The EC2 instance receives the raw data, transforms the raw data, and stores all the data in an Amazon S3 bucket. The number of remote devices will increase into the millions soon. The company needs a highly scalable solution that minimizes operational overhead.
Which combination of steps should a solutions architect take to meet these requirements9 (Select TWO.)

• A. Use AWS Glue to process the raw data in Amazon S3.
• B. Use Amazon Route 53 to route traffic to different EC2 instances.
• C. Add more EC2 instances to accommodate the increasing amount of incoming data.
• D. Send the raw data to Amazon Simple Queue Service (Amazon SOS). Use EC2 instances to process the data.
• E. Use Amazon API Gateway to send the raw data to an Amazon Kinesis data strea
• F. Configure Amazon Kinesis Data Firehose to use the data stream as a source to deliver the data to Amazon S3.

Answer: BE

NEW QUESTION 15
A company is developing a file-sharing application that will use an Amazon S3 bucket for storage. The company wants to serve all the files through an Amazon CloudFront distribution. The company does not want the files to be accessible through direct navigation to the S3 URL.
What should a solutions architect do to meet these requirements?

• A. Write individual policies for each S3 bucket to grant read permission for only CloudFront access.
• B. Create an IAM use
• C. Grant the user read permission to objects in the S3 bucke
• D. Assign the user to CloudFront.
• E. Write an S3 bucket policy that assigns the CloudFront distribution ID as the Principal and assigns the target S3 bucket as the Amazon Resource Name (ARN).
• F. Create an origin access identity (OAI). Assign the OAI to the CloudFront distributio
• G. Configure the S3 bucket permissions so that only the OAI has read permission.

Answer: D

Explanation:
Explanation
https://aws.amazon.com/premiumsupport/knowledge-center/cloudfront-access-to-amazon-s3/
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3

NEW QUESTION 16
A startup company is hosting a website for its customers on an Amazon EC2 instance. The website consists of a stateless python application and a MySQL database. The website serves only a small amount of traffic. The company is concerned about the reliability of the instance and needs to migrate to a highly available architecture. The company cannot modify the application code.
Which combination of actions should a solution architect take to achieve high availability for the website?
(Select TWO.)

• A. Provision an internet gateway in each Availability Zone in use.
• B. Migrate the database to on Amazon RDS for MySQL Multi-AZ DB instance
• C. Migrate the database to Amazon DynamoDB, and enable DynamoDB auto scaling.
• D. Use AWS DataSync to synchronize the database data across multiple EC2 instances
• E. Create an Application Load Balancer to distribute traffic to an Auto Scaling group or EC2 instances that are distributed across two Availability Zones.

Answer: BE

NEW QUESTION 17
A solutions architect is designing a new hybrid architecture to extend a company s on-premises infrastructure to AWS The company requires a highly available connection with consistent low latency to an AWS Region. The company needs to minimize costs and is willing to accept slower traffic if the primary connection fails.
What should the solutions architect do to meet these requirements?

• A. Provision an AWS Direct Connect connection to a Region Provision a VPN connection as a backup if the primary Direct Connect connection fails.
• B. Provision a VPN tunnel connection to a Region for private connectivit
• C. Provision a second VPN tunnel for private connectivity and as a backup if the primary VPN connection fails.
• D. Provision an AWS Direct Connect connection to a Region Provision a second Direct Connect connection to the same Region as a backup if the primary Direct Connect connection fails.
• E. Provision an AWS Direct Connect connection to a Region Use the Direct Connect failover attribute from the AWS CLI to automatically create a backup connection if the primary Direct Connect connection fails.

Answer: A

NEW QUESTION 18
......