SAA-C03 (Page 24)

A 4-year-old media company is using the AWS Organizations all features feature set to organize its AWS accounts.According to the company’s finance team, the billing information on the member accounts must not be accessible to anyone, including the root user of the member accounts.Which solution will meet these requirements?Read More →

A company is building an ecommerce application and needs to store sensitive customer information.The company needs to give customers the ability to complete purchase transactions on the website.The company also needs to ensure that sensitive customer data is protected, even from database administrators.Which solution meets these requirements?Read More →

A company needs a solution to enforce data encryption at rest on Amazon EC2 instances.The solution must automatically identify noncompliant resources and enforce compliance policies on findings.Which solution will meet these requirements with the LEAST administrative overhead?Read More →

A company has a large workload that runs every Friday evening.The workload runs on Amazon EC2 instances that are in two Availability Zones in the us-east-1 Region.Normally, the company must run no more than two instances at all times.However, the company wants to scale up to six instances each Friday to handle a regularly repeating increased workload.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A solutions architect is designing a RESTAPI in Amazon API Gateway for a cash payback service.The application requires 1 GB of memory and 2 GB of storage for its computation resources.The application will require that the data is in a relational format.Which additional combination ofAWS services will meet these requirements with the LEAST administrative effort? (Choose two.)Read More →

A company is using AWS Key Management Service (AWS KMS) keys to encrypt AWS Lambda environment variables.A solutions architect needs to ensure that the required permissions are in place to decrypt and use the environment variables.Which steps must the solutions architect take to implement the correct permissions? (Choose two.)Read More →

A startup company is hosting a website for its customers on an Amazon EC2 instance.The website consists of a stateless Python application and a MySQL database.The website serves only a small amount of traffic.The company is concerned about the reliability of the instance and needs to migrate to a highly available architecture.The company cannot modify the application code.Which combination of actions should a solutions architect take to achieve high availability for the website? (Choose two.)Read More →

A company’s website is used to sell products to the public.The site runs on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB).There is also an Amazon CloudFront distribution, and AWS WAF is being used to protect against SQL injection attacks.The ALB is the origin for the CloudFront distribution.A recent review of security logs revealed an external malicious IP that needs to be blocked from accessing the website.What should a solutions architect do to protect the application?Read More →

A data analytics company wants to migrate its batch processing system to AWS.The company receives thousands of small data files periodically during the day through FTP.An on-premises batch job processes the data files overnight.However, the batch job takes hours to finish running.The company wants the AWS solution to process incoming data files as soon as possible with minimal changes to the FTP clients that send the files.The solution must delete the incoming data files after the files have been processed successfully.Processing for each file needs to take 3-8 minutes.Which solution will meet these requirements in the MOST operationally efficient way?Read More →

A company runs an application in a private subnet behind an Application Load Balancer (ALB) in a VPC.The VPC has a NAT gateway and an internet gateway.The application calls the Amazon S3 API to store objects.According to the company’s security policy, traffic from the application must not travel across the internet.Which solution will meet these requirements MOST cost-effectively?Read More →