SAA-C03 (Page 34)

A company uses AWS Organizations with all features enabled and runs multiple Amazon EC2 workloads in the ap-southeast-2 Region.The company has a service control policy (SCP) that prevents any resources from being created in any other Region.A security policy requires the company to encrypt all data at rest.An audit discovers that employees have created Amazon Elastic Block Store (Amazon EBS) volumes for EC2 instances without encrypting the volumes.The company wants any new EC2 instances that any IAM user or root user launches in ap-southeast-2 to use encrypted EBS volumes.The company wants a solution that will have minimal effect on employees who create EBS volumes.Which combination of steps will meet these requirements? (Choose two.)Read More →

A company wants to restrict access to the content of one of its main web applications and to protect the content by using authorization techniques available on AWS.The company wants to implement a serverless architecture and an authentication solution for fewer than 100 users.The solution needs to integrate with the main web application and serve web content globally.The solution must also scale as the company’s user base grows while providing the lowest login latency possible.Which solution will meet these requirements MOST cost-effectively?Read More →

A company is using a fleet of Amazon EC2 instances to ingest data from on-premises data sources.The data is in JSON format and ingestion rates can be as high as 1 MB/s.When an EC2 instance is rebooted, the data in-flight is lost.The company’s data science team wants to query ingested data in near-real time.Which solution provides near-real-time data querying that is scalable with minimal data loss?Read More →

An ecommerce company is running a seasonal online sale.The company hosts its website on Amazon EC2 instances spanning multiple Availability Zones.The company wants its website to manage sudden traffic increases during the sale.Which solution will meet these requirements MOST cost-effectively?Read More →

A company needs a secure connection between its on-premises environment and AWS.This connection does not need high bandwidth and will handle a small amount of traffic.The connection should be set up quickly.What is the MOST cost-effective method to establish this type of connection?Read More →

A large international university has deployed all of its compute services in the AWS Cloud.These services include Amazon EC2, Amazon RDS, and Amazon DynamoDB.The university currently relies on many custom scripts to back up its infrastructure.However, the university wants to centralize management and automate data backups as much as possible by using AWS native options.Which solution will meet these requirements?Read More →

A company runs its application on Oracle Database Enterprise Edition.The company needs to migrate the application and the database to AWS.The company can use the Bring Your Own License (BYOL) model while migrating to AWS.The application uses third-party database features that require privileged access.A solutions architect must design a solution for the database migration.Which solution will meet these requirements MOST cost-effectively?Read More →

A company uses Amazon RDS for PostgreSQL databases for its data tier.The company must implement password rotation for the databases.Which solution meets this requirement with the LEAST operational overhead?Read More →

A solutions architect is creating an application.The application will run on Amazon EC2 instances in private subnets across multiple Availability Zones in a VPC.The EC2 instances will frequently access large files that contain confidential information.These files are stored in Amazon S3 buckets for processing.The solutions architect must optimize the network architecture to minimize data transfer costs.What should the solutions architect do to meet these requirements?Read More →

A company runs a web application that is deployed on Amazon EC2 instances in the private subnet of a VPC.An Application Load Balancer (ALB) that extends across the public subnets directs web traffic to the EC2 instances.The company wants to implement new security measures to restrict inbound traffic from the ALB to the EC2 instances while preventing access from any other source inside or outside the private subnet of the EC2 instances.Which solution will meet these requirements?Read More →