A company runs a critical data analysis job each week before the first day of the work week. The job requires at least 1 hour to complete the analysis. The job is stateful and cannot tolerate interruptions. The company needs a solution to run the job on AWS.
Which solution will meet these requirements?
A. Create a container for the job. Schedule the job to run as an AWS Fargate task on an Amazon Elastic Container Service (Amazon ECS) cluster by using Amazon EventBridge Scheduler.
B. Configure the job to run in an AWS Lambda function. Create a scheduled rule in Amazon EventBridge to invoke the Lambda function.
C. Configure an Auto Scaling group of Amazon EC2 Spot Instances that run Amazon Linux. Configure a crontab entry on the instances to run the analysis.
D. Configure an AWS DataSync task to run the job. Configure a cron expression to run the task on a schedule.
Show Answer
Correct Answer: A
Explanation: AWS Fargate tasks can run for well over an hour and are suitable for scheduled, non-interruptible containerized workloads when triggered by EventBridge Scheduler. Lambda is limited to 15 minutes. EC2 Spot Instances can be interrupted, violating the no-interruption requirement. AWS DataSync is a data transfer service, not a general compute job runner.
Question 122
A company is implementing a shared storage solution for a media application that the company hosts on AWS. The company needs the ability to use SMB clients to access stored data.
Which solution will meet these requirements with the LEAST administrative overhead?
A. Create an AWS Storage Gateway Volume Gateway. Create a file share that uses the required client protocol. Connect the application server to the file share.
B. Create an AWS Storage Gateway Tape Gateway. Configure tapes to use Amazon S3. Connect the application server to the Tape Gateway.
C. Create an Amazon EC2 Windows instance. Install and configure a Windows file share role on the instance. Connect the application server to the file share.
D. Create an Amazon FSx for Windows File Server file system. Connect the application server to the file system.
Show Answer
Correct Answer: D
Explanation: Amazon FSx for Windows File Server provides a fully managed native Windows file system with SMB support, minimizing administrative overhead. Storage Gateway Volume Gateway is block storage rather than SMB file sharing, Tape Gateway is for backup workflows, and a self-managed EC2 Windows file server requires ongoing administration.
Question 123
A company hosts a website on Amazon EC2 instances behind an Application Load Balancer (ALB). The website serves static content. Website traffic is increasing. The company wants to minimize the website hosting costs.
Which solution will meet these requirements?
A. Move the website to an Amazon S3 bucket. Configure an Amazon CloudFront distribution for the S3 bucket.
B. Move the website to an Amazon S3 bucket. Configure an Amazon ElastiCache cluster for the S3 bucket.
C. Move the website to AWS Amplify. Configure an ALB to resolve to the Amplify website.
D. Move the website to AWS Amplify. Configure EC2 instances to cache the website.
Show Answer
Correct Answer: A
Explanation: For a static website, the most cost-effective and scalable architecture is Amazon S3 for static hosting with Amazon CloudFront as the CDN. This removes the need for EC2 instances and an ALB, reducing compute and load balancing costs while improving scalability and caching. ElastiCache is not the standard solution for serving static website assets from S3 and would add unnecessary cost and complexity. Amplify can host static sites, but the options pairing it with an ALB or EC2 caching are not appropriate.
Question 124
A company has an application that customers use to upload images to an Amazon S3 bucket. Each night, the company launches an Amazon EC2 Spot Fleet that processes all the images that the company received that day. The processing for each image takes 2 minutes and requires 512 MB of memory.
A solutions architect needs to change the application to process the images when the images are uploaded.
Which change will meet these requirements MOST cost-effectively?
A. Use S3 Event Notifications to write a message with image details to an Amazon Simple Queue Service (Amazon SQS) queue. Configure an AWS Lambda function to read the messages from the queue and to process the images.
B. Use S3 Event Notifications to write a message with image details to an Amazon Simple Queue Service (Amazon SQS) queue. Configure an EC2 Reserved Instance to read the messages from the queue and to process the images.
C. Use S3 Event Notifications to publish a message with image details to an Amazon Simple Notification Service (Amazon SNS) topic. Configure a container instance in Amazon Elastic Container Service (Amazon ECS) to subscribe to the topic and to process the images.
D. Use S3 Event Notifications to publish a message with image details to an Amazon Simple Notification Service (Amazon SNS) topic. Configure an AWS Elastic Beanstalk application to subscribe to the topic and to process the images.
Show Answer
Correct Answer: A
Explanation: Amazon S3 Event Notifications can send object creation events to Amazon SQS, providing durable buffering. AWS Lambda can poll SQS and process each image asynchronously. The workload (2 minutes, 512 MB) is well within Lambda limits, and this serverless design processes uploads near real time while minimizing operational overhead and cost. The EC2 Reserved Instance, ECS, and Elastic Beanstalk options require continuously running compute and are less cost-effective. SNS is also not the best fit for reliable work queue semantics.
Question 125
A company manages a data lake in an Amazon S3 bucket that numerous applications access. The S3 bucket contains a unique prefix for each application. The company wants to restrict each application to its specific prefix and to have granular control of the objects under each prefix.
Which solution will meet these requirements with the LEAST operational overhead?
A. Create dedicated S3 access points and access point policies for each application.
B. Create an S3 Batch Operations job to set the ACL permissions for each object in the S3 bucket.
C. Replicate the objects in the S3 bucket to new S3 buckets for each application. Create replication rules by prefix.
D. Replicate the objects in the S3 bucket to new S3 buckets for each application. Create dedicated S3 access points for each application.
Show Answer
Correct Answer: A
Explanation: Amazon S3 Access Points are designed to provide application-specific access to shared datasets. You can create one access point per application and attach an access point policy that restricts access to that application's prefix, providing granular control with minimal operational overhead. Using ACLs is not the recommended access control model and requires ongoing management for new objects. Replicating data into separate buckets adds unnecessary storage, replication, and management complexity.
Question 126
A company wants to migrate an application to AWS. The company wants to increase the application's current availability. The company wants to use AWS WAF in the application's architecture.
Which solution will meet these requirements?
A. Create an Auto Scaling group that contains multiple Amazon EC2 instances that host the application across two Availability Zones. Configure an Application Load Balancer (ALB) and set the Auto Scaling group as the target. Connect a WAF to the ALB.
B. Create a cluster placement group that contains multiple Amazon EC2 instances that hosts the application. Configure an Application Load Balancer and set the EC2 instances as the targets. Connect a WAF to the placement group.
C. Create two Amazon EC2 instances that host the application across two Availability Zones. Configure the EC2 instances as the targets of an Application Load Balancer (ALB). Connect a WAF to the ALB.
D. Create an Auto Scaling group that contains multiple Amazon EC2 instances that host the application across two Availability Zones. Configure an Application Load Balancer (ALB) and set the Auto Scaling group as the target. Connect a WAF to the Auto Scaling group.
Show Answer
Correct Answer: A
Explanation: AWS WAF can be associated with an Application Load Balancer, not directly with an Auto Scaling group or a placement group. For higher availability, the application should run in an Auto Scaling group spanning multiple Availability Zones behind an ALB. This provides both fault tolerance and scaling, while the WAF protects traffic at the ALB.
Question 127
A company is migrating its workloads to AWS. The company has sensitive and critical data in on-premises relational databases that run on SQL Server instances.
The company wants to use the AWS Cloud to increase security and reduce operational overhead for the databases.
Which solution will meet these requirements?
A. Migrate the databases to Amazon EC2 instances. Use an AWS Key Management Service (AWS KMS) AWS managed key for encryption.
B. Migrate the databases to a Multi-AZ Amazon RDS for SQL Server DB instance. Use an AWS Key Management Service (AWS KMS) AWS managed key for encryption.
C. Migrate the data to an Amazon S3 bucket. Use Amazon Macie to ensure data security.
D. Migrate the databases to an Amazon DynamoDB table. Use Amazon CloudWatch Logs to ensure data security.
Show Answer
Correct Answer: B
Explanation: Amazon RDS for SQL Server is a managed relational database service that significantly reduces operational overhead compared to self-managed SQL Server on EC2. Deploying it in a Multi-AZ configuration improves availability, and RDS supports encryption at rest using AWS KMS managed keys, meeting the security requirement. EC2 still requires database administration, S3 is not a relational database replacement, and DynamoDB is a NoSQL database incompatible with a SQL Server relational workload.
Question 128
A company runs workloads in the AWS Cloud. The company wants to centrally collect security data to assess security across the entire company and to improve workload protection.
Which solution will meet these requirements with the LEAST development effort?
A. Configure a data lake in AWS Lake Formation. Use AWS Glue crawlers to ingest the security data into the data lake.
B. Configure an AWS Lambda function to collect the security data in .csv format. Upload the data to an Amazon S3 bucket.
C. Configure a data lake in Amazon Security Lake to collect the security data. Upload the data to an Amazon S3 bucket.
D. Configure an AWS Database Migration Service (AWS DMS) replication instance to load the security data into an Amazon RDS cluster.
Show Answer
Correct Answer: C
Explanation: Amazon Security Lake is purpose-built to automatically centralize security data from AWS services and other supported sources into a security data lake, enabling organization-wide security analysis with minimal development effort. The other options require building and maintaining custom ingestion or use services that are not designed for centralized security data aggregation.
Question 129
A company is designing its production application's disaster recovery (DR) strategy. The application is backed by a MySQL database on an Amazon Aurora cluster in the us-east-1 Region. The company has chosen the us-west-1 Region as its DR Region.
The company's target recovery point objective (RPO) is 5 minutes and the target recovery time objective (RTO) is 20 minutes. The company wants to minimize configuration changes.
Which solution will meet these requirements with the MOST operational efficiency?
A. Create an Aurora read replica in us-west-1 similar in size to the production application's Aurora MySQL cluster writer instance.
B. Convert the Aurora cluster to an Aurora global database. Configure managed failover.
C. Create a new Aurora cluster in us-west-1 that has Cross-Region Replication.
D. Create a new Aurora cluster in us-west-1. Use AWS Database Migration Service (AWS DMS) to sync both clusters.
Show Answer
Correct Answer: B
Explanation: Aurora Global Database is purpose-built for cross-Region disaster recovery with low replication lag (typically under a second), managed cross-Region replication, and managed failover. It easily satisfies the required RPO of 5 minutes and RTO of 20 minutes while requiring the fewest configuration changes and least operational overhead compared with read replicas, standard cross-Region replication, or AWS DMS.
Question 130
A company is migrating a data center from its on-premises location to AWS. The company has several legacy applications that are hosted on individual virtual servers. Changes to the application designs cannot be made.
Each individual virtual server currently runs as its own EC2 instance. A solutions architect needs to ensure that the applications are reliable and fault tolerant after migration to AWS. The applications will run on Amazon EC2 instances.
Which solution will meet these requirements?
A. Create an Auto Scaling group that has a minimum of one and a maximum of one. Create an Amazon Machine Image (AMI) of each application instance. Use the AMI to create EC2 instances in the Auto Scaling group Configure an Application Load Balancer in front of the Auto Scaling group.
B. Use AWS Backup to create an hourly backup of the EC2 instance that hosts each application. Store the backup in Amazon S3 in a separate Availability Zone. Configure a disaster recovery process to restore the EC2 instance for each application from its most recent backup.
C. Create an Amazon Machine Image (AMI) of each application instance. Launch two new EC2 instances from the AMI. Place each EC2 instance in a separate Availability Zone. Configure a Network Load Balancer that has the EC2 instances as targets.
D. Use AWS Mitigation Hub Refactor Spaces to migrate each application off the EC2 instance. Break down functionality from each application into individual components. Host each application on Amazon Elastic Container Service (Amazon ECS) with an AWS Fargate launch type.
Show Answer
Correct Answer: A
Explanation: An Auto Scaling group with desired/min/max capacity of 1 preserves the existing single-instance application design while automatically replacing a failed instance from an AMI. This improves reliability without requiring application changes. Option C assumes the application can safely run active-active on two instances behind a load balancer, which is not guaranteed for legacy single-server applications and would effectively change the deployment model. Option B provides disaster recovery, not fault tolerance. Option D requires redesigning the applications, which the requirements explicitly prohibit.
Sources:
https://cciedump.spoto.net/exam-questions/saa-c03-exam-questions-2024-updated-get-ready-for-exams
$19
Get all 1004 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.