SAA-C03 (Page 52)

A company stores data in Amazon S3.According to regulations, the data must not contain personally identifiable information (PII).The company recently discovered that S3 buckets have some objects that contain PII.The company needs to automatically detect PII in S3 buckets and to notify the company’s security team.Which solution will meet these requirements?Read More →

A company has an online gaming application that has TCP and UDP multiplayer gaming capabilities.The company uses Amazon Route 53 to point the application traffic to multiple Network Load Balancers (NLBs) in different AWS Regions.The company needs to improve application performance and decrease latency for the online game in preparation for user growth.Which solution will meet these requirements?Read More →

A company is migrating its workloads to AWS.The company has transactional and sensitive data in its databases.The company wants to use AWS Cloud solutions to increase security and reduce operational overhead for the databases.Which solution will meet these requirements?Read More →

A company has a regional subscription-based streaming service that runs in a single AWS Region.The architecture consists of web servers and application servers on Amazon EC2 instances.The EC2 instances are in Auto Scaling groups behind Elastic Load Balancers.The architecture includes an Amazon Aurora global database cluster that extends across multiple Availability Zones.The company wants to expand globally and to ensure that its application has minimal downtime.Which solution will provide the MOST fault tolerance?Read More →

A company wants to add its existing AWS usage cost to its operation cost dashboard.A solutions architect needs to recommend a solution that will give the company access to its usage cost programmatically.The company must be able to access cost data for the current year and forecast costs for the next 12 months.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company provides an API interface to customers so the customers can retrieve their financial information.Еhe company expects a larger number of requests during peak usage times of the year.The company requires the API to respond consistently with low latency to ensure customer satisfaction.The company needs to provide a compute host for the API.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company hosts a website analytics application on a single Amazon EC2 On-Demand Instance.The analytics application is highly resilient and is designed to run in stateless mode.The company notices that the application is showing signs of performance degradation during busy times and is presenting 5xx errors.The company needs to make the application scale seamlessly.Which solution will meet these requirements MOST cost-effectively?Read More →

A company has an application that runs on an Amazon Elastic Kubernetes Service (Amazon EKS) cluster on Amazon EC2 instances.The application has a UI that uses Amazon DynamoDB and data services that use Amazon S3 as part of the application deployment.The company must ensure that the EKS Pods for the UI can access only Amazon DynamoDB and that the EKS Pods for the data services can access only Amazon S3.The company uses AWS Identity and Access Management (IAM).Which solution meals these requirements?Read More →

A company runs an environment where data is stored in an Amazon S3 bucket.The objects are accessed frequently throughout the day.The company has strict da ta encryption requirements for data that is stored in the S3 bucket.The company currently uses AWS Key Management Service (AWS KMS) for encryption.The company wants to optimize costs associated with encrypting S3 objects without making additional calls to AWS KMS.Which solution will meet these requirements?Read More →

A solutions architect is creating a new VPC design.There are two public subnets for the load balancer, two private subnets for web servers, and two private subnets for MySQL.The web servers use only HTTPS.The solutions architect has already created a security group for the load balancer allowing port 443 from 0.0.0.0/0.Company policy requires that each resource has the least access required to still be able to perform its tasks.Which additional configuration strategy should the solutions architect use to meet these requirements?Read More →