AWS Certified Solutions Architect Associate SAA C03 Exam New Latest Version Updated 2024-2025 with All Questions and Answers
A healthcare startup needs to enforce compliance and regulatory guidelines for objects stored in Amazon S3. One of the key requirements is to provide adequate protection against accidental deletion of objects.As a solutions architect, what are your recommendations to address these guidelines?(Select two) --------- Correct Answer --------- Enable MFA delete on the bucket.Enable versioning on the bucket.
A ... instance or a .. Gateway can be used in a public subnet in your VPC to enable instances in the private subnet to initiate outbound IPv4 traffic to the Internet. --------- Correct Answer ---------- NAT, NAT
Amazon .... makes it easy and cost-effective to launch and run the world's most popular high-performance file system. It is used for workloads such as machine learning, high- performance computing (HPC), video processing, and financial modeling. --------- Correct Answer ---------- FSx for Lustre
A startup has created a cost-effective backup solution in another AWS Region. The application is running in warm standby mode and has Application Load Balancer (ALB) to support it from the front. The current failover process is manual and requires updating the DNS alias record to point to the secondary ALB in another Region in case of failure of the primary ALB.As a Solutions Architect, what will you recommend to automate the failover process?
Enable an ALB health check
Enable an Amazon Route 53 health check
Enable an EC2 instance health check
Configure Trusted Advisor to check on unhealthy instances --------- Correct Answer ------ --- Enable an Amazon Route 53 health check
An IT company is working on multiple client projects and some of these projects span across multiple teams that use different AWS accounts. For one such project, two of the teams have a requirement to set up Amazon Simple Email Service (Amazon SES) event notification in one AWS account that needs to send data to an Amazon Kinesis data stream in another AWS account.As a Solutions Architect, which of the following would you recommend as the MOST optimal solution to address this requirement?
- / 4
From the SES account, configure SES to push data to the Lambda function. Lambda permissions need to be set up for both the accounts (to read from one and write to another). Set up Lambda to send data to Kinesis Data Streams, present in the second AWS account (Here, SES, SNS, and Lambda are present in SES account and Kinesis data streams is present in the second account)
From the SES account, configure SES to push data to an Amazo --------- Correct Answer --------- From the SES account, configure SES to push data to an Amazon SNS topic. Subscribe a Lambda function to this SNS topic. Lambda permissions need to be set up for both the accounts (to read from one and write to another). Set up Lambda to send data to Kinesis Data Streams, present in the second AWS account (Here, SES, SNS, and Lambda are present in SES account and Kinesis data streams is present in the second account)
An IT company has built a custom data warehousing solution for a retail organization by using Amazon Redshift. As part of the cost optimizations, the company wants to move any historical data (any data older than a year) into S3, as the daily analytical reports consume data for just the last one year. However the analysts want to retain the ability to cross-reference this historical data along with the daily reports.The company wants to develop a solution with the LEAST amount of effort and MINIMUM cost. As a solutions architect, which option would you recommend to facilitate this use-case? --------- Correct Answer ---------- Use Redshift Spectrum to create Redshift cluster tables pointing to the underlying historical data in S3. The analytics team can then query this historical data to cross-reference with the daily reports from Redshift
Using Amazon Redshift ..., you can efficiently query and retrieve structured and semistructured data from files in Amazon S3 without having to load the data into Amazon Redshift tables. --------- Correct Answer ---------- Spectrum
An IT company wants to review its security best-practices after an incident was reported where a new developer on the team was assigned full access to DynamoDB. The developer accidentally deleted a couple of tables from the production environment while building out a new feature.Which is the MOST effective way to address this issue so that such incidents do not recur? --------- Correct Answer --------- Use permissions boundary to control the maximum permissions employees can grant to the IAM principals.
A retail company has developed a REST API which is deployed in an Auto Scaling group behind an Application Load Balancer. The API stores the user data in DynamoDB and any static content, such as images, are served via S3. On analyzing the usage trends, it is found that 90% of the read requests are for commonly accessed data across all users.As a Solutions Architect, which of the following would you suggest as the MOST efficient solution to improve the application performance? --------- Correct Answer --------
- Enable DynamoDB Accelerator (DAX) for DynamoDB and CloudFront for S3. 2 / 4
The engineering team at an e-commerce company is working on cost optimizations for EC2 instances. The team wants to manage the workload using a mix of on-demand and spot instances across multiple instance types. They would like to create an Auto Scaling group with a mix of these instances.Which of the following options would allow the engineering team to provision the instances for this use-case? --------- Correct Answer --------- You can only use a launch template to provision capacity across multiple instance types using both On-Demand Instances and Spot Instances to achieve the desired scale, performance, and cost.
An e-commerce company is planning to migrate their two-tier application from on- premises infrastructure to AWS Cloud. As the engineering team at the company is new to the AWS Cloud, they are planning to use the Amazon VPC console wizard to set up the networking configuration for the two-tier application having public web servers and private database servers.Can you spot the configuration that is NOT supported by the Amazon VPC console wizard? --------- Correct Answer --------- VPC with a public subnet only and AWS Site-to- Site VPN access.
A retail company wants to rollout and test a blue-green deployment for its global application in the next 48 hours. Most of the customers use mobile phones which are prone to DNS caching. The company has only two days left for the annual Thanksgiving sale to commence.As a Solutions Architect, which of the following options would you recommend to test the deployment on as many users as possible in the given time frame? --------- Correct Answer --------- Use AWS Global Accelerator to distribute a portion of traffic to a particular deployment.
A retail company uses Amazon EC2 instances, API Gateway, Amazon RDS, Elastic Load Balancer and CloudFront services. To improve the security of these services, the Risk Advisory group has suggested a feasibility check for using the Amazon GuardDuty service.Which of the following would you identify as data sources supported by GuardDuty? ----- ---- Correct Answer --------- VPC Flow Logs, DNS logs, CloudTrail events.
A Big Data analytics company wants to set up an AWS cloud architecture that throttles requests in case of sudden traffic spikes. The company is looking for AWS services that can be used for buffering or throttling to handle such traffic variations.Which of the following services can be used to support this requirement? --------- Correct Answer --------- Amazon API Gateway, Amazon SQS, and Amazon Kinesis.
A media company wants to get out of the business of owning and maintaining its own IT infrastructure. As part of this digital transformation, the media company wants to archive about 5PB of data in its on-premises data center to durable long term storage.As a solutions architect, what is your recommendation to migrate this data in the MOST cost-optimal way? --------- Correct Answer --------- Transfer the on-premises data into 3 / 4
multiple Snowball Edge Storage Optimized devices. Copy the Snowball Edge data into Amazon S3 and create a lifecycle policy to transition the data into AWS Glacier.
A weather forecast agency collects key weather metrics across multiple cities in the US and sends this data in the form of key-value pairs to AWS Cloud at a one-minute frequency.As a solutions architect, which of the following AWS services would you use to build a solution for processing and then reliably storing this data with high availability? (Select two) --------- Correct Answer --------- DynamoDB.Lambda.
An IT company has built a custom data warehousing solution for a retail organization by using Amazon Redshift. As part of the cost optimizations, the company wants to move any historical data (any data older than a year) into S3, as the daily analytical reports consume data for just the last one year. However the analysts want to retain the ability to cross-reference this historical data along with the daily reports.The company wants to develop a solution with the LEAST amount of effort and MINIMUM cost. As a solutions architect, which option would you recommend to facilitate this use-case? --------- Correct Answer --------- Use Redshift Spectrum to create Redshift cluster tables pointing to the underlying historical data in S3. The analytics team can then query this historical data to cross-reference with the daily reports from Redshift.
An Internet-of-Things (IoT) company would like to have a streaming system that performs real-time analytics on the ingested IoT data. Once the analytics is done, the company would like to send notifications back to the mobile applications of the IoT device owners.As a solutions architect, which of the following AWS technologies would you recommend to send these notifications to the mobile applications? --------- Correct Answer --------- Amazon Kinesis with Amazon Simple Notification Service (SNS).
A leading online gaming company is migrating its flagship application to AWS Cloud for delivering its online games to users across the world. The company would like to use a Network Load Balancer (NLB) to handle millions of requests per second. The engineering team has provisioned multiple instances in a public subnet and specified these instance IDs as the targets for the NLB.As a solutions architect, can you help the engineering team understand the correct routing mechanism for these target instances? --------- Correct Answer --------- Traffic is routed to instances using the primary private IP address specified in the Primary network interface for the instance.
A Big Data analytics company writes data and log files in Amazon S3 buckets. The company now wants to stream the existing data files as well as any ongoing file updates from Amazon S3 to Amazon Kinesis Data Streams.As a Solutions Architect, which of the following would you suggest as the fastest possible way of building a solution for this requirement? --------- Correct Answer ---------
- / 4