SAA-C03 (Page 14)

A company has an Amazon S3 bucket that contains sensitive data files.The company has an application that runs on virtual machines in an on-premises data center.The company currently uses AWS IAM Identity Center.The application requires temporary access to files in the S3 bucket.The company wants to grant the application secure access to the files in the S3 bucket.Which solution will meet these requirements?Read More →

A medical company wants to perform transformations on a large amount of clinical trial data that comes from several customers.The company must extract the data from a relational database that contains the customer data.Then the company will transform the data by using a series of complex rules.The company will load the data to Amazon S3 when the transformations are complete.All data must be encrypted where it is processed before the company stores the data in Amazon S3.All data must be encrypted by using customer-specific keys.Which solution will meet these requirements with the LEAST amount of operational effort?Read More →

A company uses GPS trackers to document the migration patterns of thousands of sea turtles.The trackers check every 5 minutes to see if a turtle has moved more than 100 yards (91.4 meters).If a turtle has moved, its tracker sends the new coordinates to a web application running on three Amazon EC2 instances that are in multiple Availability Zones in one AWS Region.Recently, the web application was overwhelmed while processing an unexpected volume of tracker data.Data was lost with no way to replay the events.A solutions architect must prevent this problem from happening again and needs a solution with the least operational overhead.What should the solutions architect do to meet these requirements?Read More →

A company used an Amazon RDS for MySQL DB instance during application testing.Before terminating the DB instance at the end of the test cycle, a solutions architect created two backups.The solutions architect created the first backup by using the mysqldump utility to create a database dump.The solutions architect created the second backup by enabling the final DB snapshot option on RDS termination.The company is now planning for a new test cycle and wants to create a new DB instance from the most recent backup.The company has chosen a MySQL-compatible edition ofAmazon Aurora to host the DB instance.Which solutions will create the new DB instance? (Choose two.)Read More →

A company is developing an application in the AWS Cloud.The application’s HTTP API contains critical information that is published in Amazon API Gateway.The critical information must be accessible from only a limited set of trusted IP addresses that belong to the company’s internal network.Which solution will meet these requirements?Read More →

A company needs to give a globally distributed development team secure access to the company’s AWS resources in a way that complies with security policies.The company currently uses an on-premises Active Directory for internal authentication.The company uses AWS Organizations to manage multiple AWS accounts that support multiple projects.The company needs a solution to integrate with the existing infrastructure to provide centralized identity management and access control.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company is using a centralized AWS account to store log data in various Amazon S3 buckets.A solutions architect needs to ensure that the data is encrypted at rest before the data is uploaded to the S3 buckets.The data also must be encrypted in transit.Which solution meets these requirements?Read More →

A company is developing software that uses a PostgreSQL database schema.The company needs to configure multiple development environments and databases for the company’s developers.On average, each development environment is used for half of the 8-hour workday.Which solution will meet these requirements MOST cost-effectively?Read More →

A company’s security team requests that network traffic be captured in VPC Flow Logs.The logs will be frequently accessed for 90 days and then accessed intermittently.What should a solutions architect do to meet these requirements when configuring the logs?Read More →

A company has an on-premises data center that is running out of storage capacity.The company wants to migrate its storage infrastructure to AWS while minimizing bandwidth costs.The solution must allow for immediate retrieval of data at no additional cost.How can these requirements be met?Read More →