All About Free SAA-C03 Latest Exam

NEW QUESTION 1
A company is developing a new machine learning (ML) model solution on AWS. The models are developed as independent microservices that fetch approximately 1GB of model data from Amazon S3 at startup and load the data into memory Users access the models through an asynchronous API Users can send a request or a batch of requests and specify where the results should be sent
The company provides models to hundreds of users. The usage patterns for the models are irregular. Some models could be unused for days or weeks Other models could receive batches of thousands of requests at a time
Which design should a solutions architect recommend to meet these requirements?

• A. Direct the requests from the API to a Network Load Balancer (NLB) Deploy the models as AWS Lambda functions that are invoked by the NLB.
• B. Direct the requests from the API to an Application Load Balancer (ALB). Deploy the models as Amazon Elastic Container Service (Amazon ECS) services that read from an Amazon Simple Queue Service (Amazon SQS) queue Use AWS App Mesh to scale the instances of the ECS cluster based on the SQS queue size
• C. Direct the requests from the API into an Amazon Simple Queue Service (Amazon SQS) queue Deploy the models as AWS Lambda functions that are invoked by SQS events Use AWS Auto Scaling to increase the number of vCPUs for the Lambda functions based on the SQS queue size
• D. Direct the requests from the API into an Amazon Simple Queue Service (Amazon SQS) queue Deploy the models as Amazon Elastic Container Service (Amazon ECS) services that read from the queue Enable AWS Auto Scaling on Amazon ECS for both the cluster and copies of the service based on thequeue size

Answer: C

NEW QUESTION 2
A solution architect is creating a new Amazon CloudFront distribution for an application Some of Ine information submitted by users is sensitive. The application uses HTTPS but needs another layer" of security The sensitive information should be protected throughout the entire application stack end access to the information should be restricted to certain applications
Which action should the solutions architect take?

• A. Configure a CloudFront signed URL
• B. Configure a CloudFront signed cookie.
• C. Configure a CloudFront field-level encryption profile
• D. Configure CloudFront and set the Origin Protocol Policy setting to HTTPS Only for the Viewer Protocol Policy

Answer: C

NEW QUESTION 3
A company is running an application in a private subnet in a VPC win an attached internet gateway The company needs to provide the application access to the internet while restricting public access to the application The company does not want to manage additional infrastructure and wants a solution that is highly available and scalable
Which solution meets these requirements?

• A. Create a NAT gateway in the private subne
• B. Create a route table entry from the private subnet to the internet gateway
• C. Create a NAT gateway m a public subnet Create a route table entry from the private subnet to the NAT gateway
• D. Launch a NAT instance m the private subnet Create a route table entry from the private subnet lo the internet gateway
• E. Launch a NAT Instance in a public subnet Create a route table entry from the private subnet to the NAT instance.

Answer: A

NEW QUESTION 4
A business's backup data totals 700 terabytes (TB) and is kept in network attached storage (NAS) at its data center. This backup data must be available in the event of occasional regulatory inquiries and preserved for a period of seven years. The organization has chosen to relocate its backup data from its on-premises data center to Amazon Web Services (AWS). Within one month, the migration must be completed. The company's public internet connection provides 500 Mbps of dedicated capacity for data transport.
What should a solutions architect do to ensure that data is migrated and stored at the LOWEST possible cost?

• A. Order AWS Snowball devices to transfer the dat
• B. Use a lifecycle policy to transition the files to Amazon S3 Glacier Deep Archive.
• C. Deploy a VPN connection between the data center and Amazon VP
• D. Use the AWS CLI to copy the data from on premises to Amazon S3 Glacier.
• E. Provision a 500 Mbps AWS Direct Connect connection and transfer the data to Amazon S3. Use a lifecycle policy to transition the files to Amazon S3 Glacier Deep Archive.
• F. Use AWS DataSync to transfer the data and deploy a DataSync agent on premise
• G. Use the DataSync task to copy files from the on-premises NAS storage to Amazon S3 Glacier.

Answer: A

NEW QUESTION 5
A company has a business system that generates hundreds of reports each day. The business system saves the reports to a network share in CSV format The company needs to store this data in the AWS Cloud in near-real time for analysis. Which solution will meet these requirements with the LEAST administrative overhead?

• A. Use AWS DataSync to transfer the files to Amazon S3 Create a scheduled task that runs at the end of each day.
• B. Create an Amazon S3 File Gateway Update the business system to use a new network share from the S3 File Gateway.
• C. Use AWS DataSync to transfer the files to Amazon S3 Create an application that uses the DataSync API in the automation workflow.
• D. Deploy an AWS Transfer for SFTP endpoint Create a script that checks for new files on the network share and uploads the new files by using SFTP.

Answer: B

NEW QUESTION 6
A company needs to store its accounting records in Amazon S3. The records must be immediately accessible for 1 year and then must be archived for an additional 9 years. No one at the company, including administrative users and root users, can be able to delete the records during the entire 10- year period. The records must be stored with maximum resiliency.
Which solution will meet these requirements?

• A. Store the records in S3 Glacier for the entire 10-year perio
• B. Use an access control policy to deny deletion of the records for a period of 10 years.
• C. Store the records by using S3 Intelligent-Tierin
• D. Use an IAM policy to deny deletion of the records.After 10 years, change the IAM policy to allow deletion.
• E. Use an S3 Lifecycle policy to transition the records from S3 Standard to S3 Glacier Deep Archive after 1 yea
• F. Use S3 Object Lock in compliance mode for a period of 10 years.
• G. Use an S3 Lifecycle policy to transition the records from S3 Standard to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 1 yea
• H. Use S3 Object Lock in governance mode for a period of 10 years.

Answer: C

NEW QUESTION 7
A company's application is running on Amazon EC2 instances within an Auto Scaling group behind an Elastic Load Balancer Based on the application's history the company anticipates a spike m traffic during a holiday each year A solutions architect must design a strategy to ensure that the Auto Scaling group proactively increases capacity to minimize any performance impact on application users.
Which solution will meet these requirements?

• A. Create an Amazon CloudWatch alarm to scale up the EC2 instances when CPU utilization exceeds 90%.
• B. Create a recurring scheduled action to scale up the Auto Scaling group before the expected period of peak demand.
• C. increase the minimum and maximum number of EC2 instances in the Auto Scaling group during the peak demand period
• D. Configure an Amazon Simple Notification Service (Amazon SNS) notification to send alerts when there are autoscaling EC2_INSTANCE_LAUNCH events

Answer: B

NEW QUESTION 8
A company hosts a two-tier application on Amazon EC2 instances and Amazon RDS. The application's demand varies based on the time of day. The load is minimal after work hours and on weekends. The EC2 instances run in an EC2 Auto Scaling group that is configured with a minimum of two instances and a maximum of five instances. The application must be available at all times, but the company is concerned about overall cost.
Which solution meets the availability requirement MOST cost-effectively?

• A. Use all EC2 Spot Instance
• B. Stop the RDS database when it is not in use.
• C. Purchase EC2 Instance Savings Plans to cover five EC2 instance
• D. Purchase an RDS Reserved DB Instance
• E. Purchase two EC2 Reserved Instances Use up to three additional EC2 Spot Instances as neede
• F. Stop the RDS database when it is not in use.
• G. Purchase EC2 Instance Savings Plans to cover two EC2 instance
• H. Use up to three additional EC2 On-Demand Instances as neede
• I. Purchase an RDS Reserved DB Instance.

Answer: D

NEW QUESTION 9
A company that primarily runs its application servers on premises has decided to migrate to AWS. The company wants to minimize its need to scale its Internet Small Computer Systems Interface (iSCSI) storage on premises. The company wants only its recently accessed data to remain stored locally.
Which AWS solution should the company use to meet these requirements?

• A. Amazon S3 File Gateway
• B. AWS Storage Gateway Tape Gateway
• C. AWS Storage Gateway Volume Gateway stored volumes
• D. AWS Storage Gateway Volume Gateway cachea volumes

Answer: D

NEW QUESTION 10
A company has an application that loads documents into an Amazon 53 bucket and converts the documents into another format. The application stores the converted documents m another S3 bucket and saves the document name and URLs in an Amazon DynamoOB table The DynamoOB entries are used during subsequent days to access the documents The company uses a DynamoOB Accelerator (DAX) cluster in front of the table
Recently, traffic to the application has increased. Document processing tasks are timing out during the scheduled DAX maintenance window. A solutions architect must ensure that the documents continue to load during the maintenance window
What should the solutions architect do to accomplish this goal?

• A. Modify the application to write to the DAX cluster Configure the DAX cluster to write to the DynamoDB table when the maintenance window is complete
• B. Enable Amazon DynamoDB Streams for the DynamoDB tabl
• C. Modify the application to write to the stream Configure the stream to load the data when the maintenance window is complete.
• D. Convert the application to an AWS Lambda function Configure the Lambda function runtime to be longer than the maintenance window Create an Amazon CloudWatch alarm to monitor Lambda timeouts
• E. Modify the application to write the document name and URLs to an Amazon Simple Queue Service (Amazon SOS) queue Create an AWS Lambda function to read the SOS queue and write to DynamoDB.

Answer: C

NEW QUESTION 11
A company is preparing to launch a public-facing web application in the AWS Cloud. The architecture consists of Amazon EC2 instances within a VPC behind an Elastic Load Balancer (ELB). A third-party service is used for the DNS. The company's solutions architect must recommend a solution to detect and protect against large-scale DDoS attacks.
Which solution meets these requirements?

• A. Enable Amazon GuardDuty on the account.
• B. Enable Amazon Inspector on the EC2 instances.
• C. Enable AWS Shield and assign Amazon Route 53 to it.
• D. Enable AWS Shield Advanced and assign the ELB to it.

Answer: D

NEW QUESTION 12
A company runs a global web application on Amazon EC2 instances behind an Application Load Balancer The application stores data in Amazon Aurora. The company needs to create a disaster recovery solution and can tolerate up to 30 minutes of downtime and potential data loss. The solution does not need to handle the load when the primary infrastructure is healthy
What should a solutions architect do to meet these requirements?

• A. Deploy the application with the required infrastructure elements in place Use Amazon Route 53 to configure active-passive failover Create an Aurora Replica in a second AWS Region
• B. Host a scaled-down deployment of the application in a second AWS Region Use Amazon Route 53 to configure active-active failover Create an Aurora Replica in the second Region
• C. Replicate the primary infrastructure in a second AWS Region Use Amazon Route 53 to configure active-active failover Create an Aurora database that is restored from the latest snapshot
• D. Back up data with AWS Backup Use the backup to create the required infrastructure in a second AWS Region Use Amazon Route 53 to configure active-passive failover Create an Aurora second primary instance in the second Region

Answer: C

NEW QUESTION 13
A company's web application consists o( an Amazon API Gateway API in front of an AWS Lambda function and an Amazon DynamoDB database. The Lambda function
handles the business logic, and the DynamoDB table hosts the data. The application uses Amazon Cognito user pools to identify the individual users of the application. A solutions architect needs to update the application so that only users who have a subscription can access premium content.

• A. Enable API caching and throttling on the API Gateway API
• B. Set up AWS WAF on the API Gateway API Create a rule to filter users who have a subscription
• C. Apply fine-grained 1AM permissions to the premium content in the DynamoDB table
• D. Implement API usage plans and API keys to limit the access of users who do not have a subscription.

Answer: C

NEW QUESTION 14
A gaming company wants to launch a new internet-facing application in multiple AWS Regions. The application will use the TCP and UDP protocols for communication. The company needs to provide high availability and minimum latency for global users.
Which combination of actions should a solutions architect take to meet these requirements? (Select TWO.)

• A. Create internal Network Load Balancers in front of the application in each Region
• B. Create external Application Load Balancers in front of the application in each Region
• C. Create an AWS Global Accelerator accelerator to route traffic to the load balancers in each Region
• D. Configure Amazon Route 53 to use a geolocation routing policy to distribute the traffic
• E. Configure Amazon CloudFront to handle the traffic and route requests to the application in each Region

Answer: AC

NEW QUESTION 15
A company is hosting a website from an Amazon S3 bucket that is configured for public hosting. The company’s security team mandates the usage of secure connections for access to the website. However; HTTP-based URLS and HTTPS-based URLS mist be functional.
What should a solution architect recommend to meet these requirements?

• A. Create an S3 bucket policy to explicitly deny non-HTTPS traffic.
• B. Enable S3 Transfer Acceleratio
• C. Select the HTTPS Only bucket property.
• D. Place thee website behind an Elastic Load Balancer that is configured to redirect HTTP traffic to HTTTPS.
• E. Serve the website through an Amazon CloudFront distribution that is configured to redirect HTTP traffic to HTTPS.

Answer: D

NEW QUESTION 16
......