Amazon AWS Certified Solutions Architect - Associate SAA-C03
Prev

There are 677 results

Next
#641 (Accuracy: 100% / 3 votes)
A company runs its applications on Amazon EC2 instances. The company performs periodic financial assessments of its AWS costs. The company recently identified unusual spending.

The company needs a solution to prevent unusual spending. The solution must monitor costs and notify responsible stakeholders in the event of unusual spending.

Which solution will meet these requirements?
  • A. Use an AWS Budgets template to create a zero spend budget.
  • B. Create an AWS Cost Anomaly Detection monitor in the AWS Billing and Cost Management console.
  • C. Create AWS Pricing Calculator estimates for the current running workload pricing details.
  • D. Use Amazon CloudWatch to monitor costs and to identify unusual spending.
#642 (Accuracy: 100% / 4 votes)
A company runs its databases on Amazon RDS for PostgreSQL. The company wants a secure solution to manage the master user password by rotating the password every 30 days.

Which solution will meet these requirements with the LEAST operational overhead?
  • A. Use Amazon EventBridge to schedule a custom AWS Lambda function to rotate the password every 30 days.
  • B. Use the modify-db-instance command in the AWS CLI to change the password.
  • C. Integrate AWS Secrets Manager with Amazon RDS for PostgreSQL to automate password rotation.
  • D. Integrate AWS Systems Manager Parameter Store with Amazon RDS for PostgreSQL to automate password rotation.
#643 (Accuracy: 100% / 5 votes)
A company created a new organization in AWS Organizations. The organization has multiple accounts for the company's development teams. The development team members use AWS IAM Identity Center (AWS Single Sign-On) to access the accounts. For each of the company's applications, the development teams must use a predefined application name to tag resources that are created.

A solutions architect needs to design a solution that gives the development team the ability to create resources only if the application name tag has an approved value.

Which solution will meet these requirements?
  • A. Create an IAM group that has a conditional Allow policy that requires the application name tag to be specified for resources to be created.
  • B. Create a cross-account role that has a Deny policy for any resource that has the application name tag.
  • C. Create a resource group in AWS Resource Groups to validate that the tags are applied to all resources in all accounts.
  • D. Create a tag policy in Organizations that has a list of allowed application names.
#644 (Accuracy: 100% / 3 votes)
A company runs applications on AWS that connect to the company's Amazon RDS database. The applications scale on weekends and at peak times of the year. The company wants to scale the database more effectively for its applications that connect to the database.

Which solution will meet these requirements with the LEAST operational overhead?
  • A. Use Amazon DynamoDB with connection pooling with a target group configuration for the database. Change the applications to use the DynamoDB endpoint.
  • B. Use Amazon RDS Proxy with a target group for the database. Change the applications to use the RDS Proxy endpoint.
  • C. Use a custom proxy that runs on Amazon EC2 as an intermediary to the database. Change the applications to use the custom proxy endpoint.
  • D. Use an AWS Lambda function to provide connection pooling with a target group configuration for the database. Change the applications to use the Lambda function.
#645 (Accuracy: 100% / 4 votes)
A company hosts an application on Amazon EC2 On-Demand Instances in an Auto Scaling group. Application peak hours occur at the same time each day. Application users report slow application performance at the start of peak hours. The application performs normally 2-3 hours after peak hours begin. The company wants to ensure that the application works properly at the start of peak hours.

Which solution will meet these requirements?
  • A. Configure an Application Load Balancer to distribute traffic properly to the instances.
  • B. Configure a dynamic scaling policy for the Auto Scaling group to launch new instances based on memory utilization.
  • C. Configure a dynamic scaling policy for the Auto Scaling group to launch new instances based on CPU utilization.
  • D. Configure a scheduled scaling policy for the Auto Scaling group to launch new instances before peak hours.
#646 (Accuracy: 100% / 4 votes)
An international company has a subdomain for each country that the company operates in. The subdomains are formatted as example.com, country1.example.com, and country2.example.com. The company's workloads are behind an Application Load Balancer. The company wants to encrypt the website data that is in transit.

Which combination of steps will meet these requirements? (Choose two.)
  • A. Use the AWS Certificate Manager (ACM) console to request a public certificate for the apex top domain example com and a wildcard certificate for *.example.com.
  • B. Use the AWS Certificate Manager (ACM) console to request a private certificate for the apex top domain example.com and a wildcard certificate for *.example.com.
  • C. Use the AWS Certificate Manager (ACM) console to request a public and private certificate for the apex top domain example.com.
  • D. Validate domain ownership by email address. Switch to DNS validation by adding the required DNS records to the DNS provider.
  • E. Validate domain ownership for the domain by adding the required DNS records to the DNS provider.
#647 (Accuracy: 100% / 4 votes)
A company manages an application that stores data on an Amazon RDS for PostgreSQL Multi-AZ DB instance. Increases in traffic are causing performance problems. The company determines that database queries are the primary reason for the slow performance.

What should a solutions architect do to improve the application's performance?
  • A. Serve read traffic from the Multi-AZ standby replica.
  • B. Configure the DB instance to use Transfer Acceleration.
  • C. Create a read replica from the source DB instance. Serve read traffic from the read replica.
  • D. Use Amazon Kinesis Data Firehose between the application and Amazon RDS to increase the concurrency of database requests.
#648 (Accuracy: 100% / 5 votes)
A global company runs its applications in multiple AWS accounts in AWS Organizations. The company's applications use multipart uploads to upload data to multiple Amazon S3 buckets across AWS Regions. The company wants to report on incomplete multipart uploads for cost compliance purposes.

Which solution will meet these requirements with the LEAST operational overhead?
  • A. Configure AWS Config with a rule to report the incomplete multipart upload object count.
  • B. Create a service control policy (SCP) to report the incomplete multipart upload object count.
  • C. Configure S3 Storage Lens to report the incomplete multipart upload object count.
  • D. Create an S3 Multi-Region Access Point to report the incomplete multipart upload object count.
#649 (Accuracy: 100% / 5 votes)
A company is planning to deploy a business-critical application in the AWS Cloud. The application requires durable storage with consistent, low-latency performance.

Which type of storage should a solutions architect recommend to meet these requirements?
  • A. Instance store volume
  • B. Amazon ElastiCache for Memcached cluster
  • C. Provisioned IOPS SSD Amazon Elastic Block Store (Amazon EBS) volume
  • D. Throughput Optimized HDD Amazon Elastic Block Store (Amazon EBS) volume
#650 (Accuracy: 100% / 5 votes)
A company wants to migrate an on-premises data center to AWS. The data center hosts a storage server that stores data in an NFS-based file system. The storage server holds 200 GB of data. The company needs to migrate the data without interruption to existing services. Multiple resources in AWS must be able to access the data by using the NFS protocol.

Which combination of steps will meet these requirements MOST cost-effectively? (Choose two.)
  • A. Create an Amazon FSx for Lustre file system.
  • B. Create an Amazon Elastic File System (Amazon EFS) file system.
  • C. Create an Amazon S3 bucket to receive the data.
  • D. Manually use an operating system copy command to push the data into the AWS destination.
  • E. Install an AWS DataSync agent in the on-premises data center. Use a DataSync task between the on-premises location and AWS.