SAA-C03 (Page 13)

A company is migrating an application from an on-premises location to Amazon Elastic Kubernetes Service (Amazon EKS).The company must use a custom subnet for pods that are in the company’s VPC to comply with requirements.The company also needs to ensure that the pods can communicate securely within the pods’ VPC.Which solution will meet these requirements?Read More →

An ecommerce company wants to collect user clickstream data from the company’s website for real-time analysis.The website experiences fluctuating traffic patterns throughout the day.The company needs a scalable solution that can adapt to varying levels of traffic.Which solution will meet these requirements?Read More →

A company has deployed a multi-account strategy on AWS by using AWS Control Tower.The company has provided individual AWS accounts to each of its developers.The company wants to implement controls to limit AWS resource costs that the developers incur.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company creates dedicated AWS accounts in AWS Organizations for its business units.Recently, an important notification was sent to the root user email address of a business unit account instead of the assigned account owner.The company wants to ensure that all future notifications can be sent to different employees based on the notification categories of billing, operations, or security.Which solution will meet these requirements MOST securely?Read More →

A company wants to enhance its ecommerce order-processing application that is deployed on AWS.The application must process each order exactly once without affecting the customer experience during unpredictable traffic surges.Which solution will meet these requirements?Read More →

A company runs several Amazon RDS for Oracle On-Demand DB instances that have high utilization.The RDS DB instances run in member accounts that are in an organization in AWS Organizations.The company’s finance team has access to the organization’s management account and member accounts.The finance team wants to find ways to optimize costs by using AWS Trusted Advisor.Which combination of steps will meet these requirements? (Choose two.)Read More →

A company is building an application on AWS.The application uses multiple AWS Lambda functions to retrieve sensitive data from a single Amazon S3 bucket for processing.The company must ensure that only authorized Lambda functions can access the data.The solution must comply with the principle of least privilege.Which solution will meet these requirements?Read More →

A company serves its website by using an Auto Scaling group of Amazon EC2 instances in a single AWS Region.The website does not require a database.The company is expanding, and the company’s engineering team deploys the website to a second Region.The company wants to distribute traffic across both Regions to accommodate growth and for disaster recovery purposes.The solution should not serve traffic from a Region in which the website is unhealthy.Which policy or resource should the company use to meet these requirements?Read More →

A company is designing an event-driven order processing system.Each order requires multiple validation steps after the order is created.An idempotent AWS Lambda function performs each validation step.Each validation step is independent from the other validation steps.Individual validation steps need only a subset of the order event information.The company wants to ensure that each validation step Lambda function has access to only the information from the order event that the function requires.The components of the order processing system should be loosely coupled to accommodate future business changes.Which solution will meet these requirements?Read More →

A company is designing the architecture for a new mobile app that uses the AWS Cloud.The company uses organizational units (OUs) in AWS Organizations to manage its accounts.The company wants to tag Amazon EC2 instances with data sensitivity by using values of sensitive and nonsensitive.IAM identities must not be able to delete a tag or create instances without a tag.Which combination of steps will meet these requirements? (Choose two.)Read More →