SAA-C03 (Page 71)

A company’s website is used to sell products to the public.The site runs on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB).There is also an Amazon CloudFront distribution, and AWS WAF is being used to protect against SQL injection attacks.The ALB is the origin for the CloudFront distribution.A recent review of security logs revealed an external malicious IP that needs to be blocked from accessing the website.What should a solutions architect do to protect the application?Read More →

A startup company is hosting a website for its customers on an Amazon EC2 instance.The website consists of a stateless Python application and a MySQL database.The website serves only a small amount of traffic.The company is concerned about the reliability of the instance and needs to migrate to a highly available architecture.The company cannot modify the application code.Which combination of actions should a solutions architect take to achieve high availability for the website? (Choose two.)Read More →

A company is using AWS Key Management Service (AWS KMS) keys to encrypt AWS Lambda environment variables.A solutions architect needs to ensure that the required permissions are in place to decrypt and use the environment variables.Which steps must the solutions architect take to implement the correct permissions? (Choose two.)Read More →

A solutions architect is designing a RESTAPI in Amazon API Gateway for a cash payback service.The application requires 1 GB of memory and 2 GB of storage for its computation resources.The application will require that the data is in a relational format.Which additional combination ofAWS services will meet these requirements with the LEAST administrative effort? (Choose two.)Read More →

A company has a large workload that runs every Friday evening.The workload runs on Amazon EC2 instances that are in two Availability Zones in the us-east-1 Region.Normally, the company must run no more than two instances at all times.However, the company wants to scale up to six instances each Friday to handle a regularly repeating increased workload.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company needs a solution to enforce data encryption at rest on Amazon EC2 instances.The solution must automatically identify noncompliant resources and enforce compliance policies on findings.Which solution will meet these requirements with the LEAST administrative overhead?Read More →

A company is building an ecommerce application and needs to store sensitive customer information.The company needs to give customers the ability to complete purchase transactions on the website.The company also needs to ensure that sensitive customer data is protected, even from database administrators.Which solution meets these requirements?Read More →

A 4-year-old media company is using the AWS Organizations all features feature set to organize its AWS accounts.According to the company’s finance team, the billing information on the member accounts must not be accessible to anyone, including the root user of the member accounts.Which solution will meet these requirements?Read More →

A company runs a public three-tier web application in a VPC.The application runs on Amazon EC2 instances across multiple Availability Zones.The EC2 instances that run in private subnets need to communicate with a license server over the internet.The company needs a managed solution that minimizes operational maintenance.Which solution meets these requirements?Read More →

A company is implementing a shared storage solution for a media application that is hosted in the AWS Cloud.The company needs the ability to use SMB clients to access data.The solution must be fully managed.Which AWS solution meets these requirements?Read More →