A company runs several websites on AWS for its different brands. Each website generates tens of gigabytes of web traffic logs each day. A solutions architect needs to design a scalable solution to give the company's developers the ability to analyze traffic patterns across all the company's websites. This analysis by the developers will occur on demand once a week over the course of several months. The solution must support queries with standard SQL.
Which solution will meet these requirements MOST cost-effectively?
A. Store the logs in Amazon S3. Use Amazon Athena tor analysis.
B. Store the logs in Amazon RDS. Use a database client for analysis.
C. Store the logs in Amazon OpenSearch Service. Use OpenSearch Service for analysis.
D. Store the logs in an Amazon EMR cluster Use a supported open-source framework for SQL-based analysis.
Show Answer
Correct Answer: A
Explanation: Amazon S3 combined with Amazon Athena is the most cost-effective solution. Storing logs in S3 provides durable, highly scalable, low-cost storage, and Athena is serverless, allowing developers to run standard SQL queries directly against data in S3 while paying only per query. Since analysis occurs only once a week, Athena avoids the ongoing infrastructure costs of OpenSearch, RDS, or EMR clusters.
Question 376
A company wants to monitor its AWS costs for financial review. The cloud operations team is designing an architecture in the AWS Organizations management account to query AWS Cost and Usage Reports for all member accounts. The team must run this query once a month and provide a detailed analysis of the bill.
Which solution is the MOST scalable and cost-effective way to meet these requirements?
A. Enable Cost and Usage Reports in the management account. Deliver reports to Amazon Kinesis. Use Amazon EMR for analysis.
B. Enable Cost and Usage Reports in the management account. Deliver the reports to Amazon S3 Use Amazon Athena for analysis.
C. Enable Cost and Usage Reports for member accounts. Deliver the reports to Amazon S3 Use Amazon Redshift for analysis.
D. Enable Cost and Usage Reports for member accounts. Deliver the reports to Amazon Kinesis. Use Amazon QuickSight tor analysis.
Show Answer
Correct Answer: B
Explanation: AWS Cost and Usage Reports (CUR) are designed to be generated in the AWS Organizations management account and delivered to Amazon S3. Amazon Athena can query CUR data directly in S3 on demand without provisioning infrastructure, making it highly scalable and very cost-effective for a workload that runs only once per month. EMR and Redshift are unnecessary for this use case, and enabling separate CURs in each member account adds operational overhead and duplicates reporting.
Question 377
A company has an application workflow that uses an AWS Lambda function to download and decrypt files from Amazon S3. These files are encrypted using AWS Key Management Service (AWS KMS) keys. A solutions architect needs to design a solution that will ensure the required permissions are set correctly.
Which combination of actions accomplish this? (Choose two.)
A. Attach the kms:decrypt permission to the Lambda function’s resource policy
B. Grant the decrypt permission for the Lambda IAM role in the KMS key's policy
C. Grant the decrypt permission for the Lambda resource policy in the KMS key's policy.
D. Create a new IAM policy with the kms:decrypt permission and attach the policy to the Lambda function.
E. Create a new IAM role with the kms:decrypt permission and attach the execution role to the Lambda function.
Show Answer
Correct Answer: B, E
Explanation: The Lambda function needs an execution IAM role that is allowed to call kms:Decrypt, and the KMS key policy must also allow that IAM role to use the key. Lambda resource policies control who can invoke or manage the function, not what the function can access. IAM policies are attached to IAM principals (such as roles), not directly to Lambda functions.
Question 378
A company is building a new furniture inventory application. The company has deployed the application on a fleet ofAmazon EC2 instances across multiple Availability Zones. The EC2 instances run behind an Application Load Balancer (ALB) in their VPC.
A solutions architect has observed that incoming traffic seems to favor one EC2 instance, resulting in latency for some requests.
What should the solutions architect do to resolve this issue?
A. Disable session affinity (sticky sessions) on the ALB
B. Replace the ALB with a Network Load Balancer
C. Increase the number of EC2 instances in each Availability Zone
D. Adjust the frequency of the health checks on the ALB's target group
Show Answer
Correct Answer: A
Explanation: The most likely cause of one EC2 instance consistently receiving more traffic behind an Application Load Balancer is enabled sticky sessions (session affinity). Sticky sessions intentionally route repeat requests from the same client to the same target, which can create uneven load distribution and increased latency on one instance. Replacing the ALB, adding more instances, or changing health check frequency does not directly address this symptom.
Question 379
A company collects and shares research data with the company's employees all over the world. The company wants to collect and store the data in an Amazon S3 bucket and process the data in the AWS Cloud. The company will share the data with the company's employees. The company needs a secure solution in the AWS Cloud that minimizes operational overhead.
Which solution will meet these requirements?
A. Use an AWS Lambda function to create an S3 presigned URL. Instruct employees to use the URL.
B. Create an IAM user for each employee. Create an IAM policy for each employee to allow S3 access. Instruct employees to use the AWS Management Console.
C. Create an S3 File Gateway. Create a share for uploading and a share for downloading. Allow employees to mount shares on their local computers to use S3 File Gateway.
D. Configure AWS Transfer Family SFTP endpoints. Select the custom identity provider options. Use AWS Secrets Manager to manage the user credentials Instruct employees to use Transfer Family.
Show Answer
Correct Answer: D
Explanation: AWS Transfer Family provides a managed, secure way for users to transfer files directly to Amazon S3 with minimal infrastructure management. Presigned URLs are temporary and unsuitable for ongoing sharing, creating IAM users for every employee increases administrative overhead, and S3 File Gateway is intended primarily for hybrid/on-premises file access rather than global user access to S3. Although the wording about Secrets Manager and 'using Transfer Family' is imperfect, D is the best fit among the available options.
Sources:
https://www.docsity.com/en/docs/aws-solution-architect-associate-saa-c03-exam-questions-and-fully-correct-answers-latest/13991643
Question 380
A solutions architect is designing a new service behind Amazon API Gateway. The request patterns for the service will be unpredictable and can change suddenly from 0 requests to over 500 per second. The total size of the data that needs to be persisted in a backend database is currently less than 1 GB with unpredictable future growth. Data can be queried using simple key-value requests.
Which combination ofAWS services would meet these requirements? (Choose two.)
A. AWS Fargate
B. AWS Lambda
C. Amazon DynamoDB
D. Amazon EC2 Auto Scaling
E. MySQL-compatible Amazon Aurora
Show Answer
Correct Answer: B, C
Explanation: AWS Lambda is the best fit for highly unpredictable traffic that can instantly scale from zero to hundreds of requests per second behind Amazon API Gateway without managing servers. Amazon DynamoDB is a fully managed key-value NoSQL database that scales automatically and is ideal for simple key-value access patterns with small initial data size and unpredictable future growth.
Question 381
A development team is creating an event-based application that uses AWS Lambda functions. Events will be generated when files are added to an Amazon S3 bucket. The development team currently has Amazon Simple Notification Service (Amazon SNS) configured as the event target from Amazon S3.
What should a solutions architect do to process the events from Amazon S3 in a scalable way?
A. Create an SNS subscription that processes the event in Amazon Elastic Container Service (Amazon ECS) before the event runs in Lambda.
B. Create an SNS subscription that processes the event in Amazon Elastic Kubernetes Service (Amazon EKS) before the event runs in Lambda
C. Create an SNS subscription that sends the event to Amazon Simple Queue Service (Amazon SQS). Configure the SOS queue to trigger a Lambda function.
D. Create an SNS subscription that sends the event to AWS Server Migration Service (AWS SMS). Configure the Lambda function to poll from the SMS event.
Show Answer
Correct Answer: C
Explanation: Using Amazon SNS to fan out notifications to an Amazon SQS queue decouples event ingestion from processing and provides buffering, retries, and scalable consumption. Configure the SQS queue as an event source for AWS Lambda so Lambda automatically polls the queue and scales processing with the queue depth. The ECS and EKS options add unnecessary compute layers, and AWS Server Migration Service is unrelated to event processing.
Question 382
A company uses Amazon FSx for NetApp ONTAP in its primary AWS Region for CIFS and NFS file shares. Applications that run on Amazon EC2 instances access the file shares. The company needs a storage disaster recovery (DR) solution in a secondary Region. The data that is replicated in the secondary Region needs to be accessed by using the same protocols as the primary Region.
Which solution will meet these requirements with the LEAST operational overhead?
A. Create an AWS Lambda function to copy the data to an Amazon S3 bucket. Replicate the S3 bucket to the secondary Region.
B. Create a backup of the FSx for ONTAP volumes by using AWS Backup. Copy the volumes to the secondary Region. Create a new FSx for ONTAP instance from the backup.
C. Create an FSx for ONTAP instance in the secondary Region. Use NetApp SnapMirror to replicate data from the primary Region to the secondary Region.
D. Create an Amazon Elastic File System (Amazon EFS) volume. Migrate the current data to the volume. Replicate the volume to the secondary Region.
Show Answer
Correct Answer: C
Explanation: Amazon FSx for NetApp ONTAP natively supports NetApp SnapMirror for cross-Region replication between FSx for ONTAP file systems. This provides an automated disaster recovery solution with low RPO/RTO while preserving SMB/CIFS and NFS access in the secondary Region. S3 replication does not preserve file share protocols, AWS Backup is backup/restore rather than continuous replication for DR, and Amazon EFS does not support SMB/CIFS.
Question 383
A company collects 10 GB of telemetry data daily from various machines. The company stores the data in an Amazon S3 bucket in a source data account.
The company has hired several consulting agencies to use this data for analysis. Each agency needs read access to the data for its analysts. The company must share the data from the source data account by choosing a solution that maximizes security and operational efficiency.
Which solution will meet these requirements?
A. Configure S3 global tables to replicate data for each agency.
B. Make the S3 bucket public for a limited time. Inform only the agencies.
C. Configure cross-account access for the S3 bucket to the accounts that the agencies own.
D. Set up an IAM user for each analyst in the source data account. Grant each user access to the S3 bucket.
Show Answer
Correct Answer: C
Explanation: Cross-account access to the S3 bucket is the AWS-recommended approach for sharing S3 data with other organizations' AWS accounts. It allows each agency to manage its own IAM users while the source account controls bucket access through bucket policies or IAM/resource policies. This is more secure and operationally efficient than creating IAM users for every external analyst. Option A is invalid because S3 has no global tables feature, B is insecure, and D creates unnecessary identity management overhead.
Question 384
A solutions architect is creating a data processing job that runs once daily and can take up to 2 hours to complete. If the job is interrupted, it has to restart from the beginning.
How should the solutions architect address this issue in the MOST cost-effective manner?
A. Create a script that runs locally on an Amazon EC2 Reserved Instance that is triggered by a cron job.
B. Create an AWS Lambda function triggered by an Amazon EventBridge scheduled event.
C. Use an Amazon Elastic Container Service (Amazon ECS) Fargate task triggered by an Amazon EventBridge scheduled event.
D. Use an Amazon Elastic Container Service (Amazon ECS) task running on Amazon EC2 triggered by an Amazon EventBridge scheduled event.
Show Answer
Correct Answer: C
Explanation: The job runs once per day, takes up to 2 hours, and must restart from the beginning if interrupted. AWS Lambda cannot run for 2 hours because its maximum execution time is 15 minutes. A Reserved Instance is not cost-effective for a workload that runs only 2 hours per day. Running ECS on EC2 requires maintaining EC2 capacity, making it less cost-effective than serverless Fargate for an infrequent scheduled task. An ECS Fargate task triggered by an EventBridge scheduled event runs only when needed and is billed only for the task's runtime.
$19
Get all 1004 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.