SAA-C03 (Page 78)

A solutions architect needs to connect a company’s corporate network to its VPC to allow on-premises access to its AWS resources.The solution must provide encryption of all traffic between the corporate network and the VPC at the network layer and the session layer.The solution also must provide security controls to prevent unrestricted access between AWS and the on-premises systems.Which solution meets these requirements?Read More →

A consumer survey company has gathered data for several years from a specific geographic region.The company stores this data in an Amazon S3 bucket in an AWS Region.The company has started to share this data with a marketing firm in a new geographic region.The company has granted the firm’s AWS account access to the S3 bucket.The company wants to minimize the data transfer costs when the marketing firm requests data from the S3 bucket.Which solution will meet these requirements?Read More →

A company is building a solution that will report Amazon EC2 Auto Scaling events across all the applications in an AWS account.The company needs to use a serverless solution to store the EC2 Auto Scaling status data in Amazon S3.The company then will use the data in Amazon S3 to provide near-real-time updates in a dashboard.The solution must not affect the speed of EC2 instance launches.How should the company move the data to Amazon S3 to meet these requirements?Read More →

A social media company has workloads that collect and process data.The workloads store the data in on-premises NFS storage.The data store cannot scale fast enough to meet the company’s expanding business needs.The company wants to migrate the current data store to AWS.Which solution will meet these requirements MOST cost-effectively?Read More →

A company has an on-premises business application that generates hundreds of files each day.These files are stored on an SMB file share and require a low-latency connection to the application servers.A new company policy states all application-generated files must be copied to AWS.There is already a VPN connection to AWS.The application development team does not have time to make the necessary code modifications to move the application to AWS.Which service should a solutions architect recommend to allow the application to copy files to AWS?Read More →

A company runs its critical storage application in the AWS Cloud.The application uses Amazon S3 in two AWS Regions.The company wants the application to send remote user data to the nearest S3 bucket with no public network congestion.The company also wants the application to fail over with the least amount of management of Amazon S3.Which solution will meet these requirements?Read More →

A company runs its legacy web application on AWS.The web application server runs on an Amazon EC2 instance in the public subnet of a VPC.The web application server collects images from customers and stores the image files in a locally attached Amazon Elastic Block Store (Amazon EBS) volume.The image files are uploaded every night to an Amazon S3 bucket for backup.A solutions architect discovers that the image files are being uploaded to Amazon S3 through the public endpoint.The solutions architect needs to ensure that traffic to Amazon S3 does not use the public endpoint.Which solution will meet these requirements?Read More →

A company hosts a multi-tier web application that uses an Amazon Aurora MySQL DB cluster for storage.The application tier is hosted on Amazon EC2 instances.The company’s IT security guidelines mandate that the database credentials be encrypted and rotated every 14 days.What should a solutions architect do to meet this requirement with the LEAST operational effort?Read More →

A solutions architect is creating an application that will handle batch processing of large amounts of data.The input data will be held in Amazon S3 and the output data will be stored in a different S3 bucket.For processing, the application will transfer the data over the network between multiple Amazon EC2 instances.What should the solutions architect do to reduce the overall data transfer costs?Read More →

A company has deployed its newest product on AWS.The product runs in an Auto Scaling group behind a Network Load Balancer.The company stores the product’s objects in an Amazon S3 bucket.The company recently experienced malicious attacks against its systems.The company needs a solution that continuously monitors for malicious activity in the AWS account, workloads, and access patterns to the S3 bucket.The solution must also report suspicious activity and display the information on a dashboard.Which solution will meet these requirements?Read More →