SAA-C03 (Page 88)

A company has applications hosted on Amazon EC2 instances with IPv6 addresses.The applications must initiate communications with other external applications using the internet.However the company’s security policy states that any external service cannot initiate a connection to the EC2 instances.What should a solutions architect recommend to resolve this issue?Read More →

A company is expecting rapid growth in the near future.A solutions architect needs to configure existing users and grant permissions to new users on AWS.The solutions architect has decided to create IAM groups.The solutions architect will add the new users to IAM groups based on department.Which additional action is the MOST secure way to grant permissions to the new users?Read More →

A law firm needs to share information with the public.The information includes hundreds of files that must be publicly readable.Modifications or deletions of the files by anyone before a designated future date are prohibited.Which solution will meet these requirements in the MOST secure way?Read More →

A company is building an Amazon Elastic Kubernetes Service (Amazon EKS) cluster for its workloads.All secrets that are stored in Amazon EKS must be encrypted in the Kubernetes etcd key-value store.Which solution will meet these requirements?Read More →

A company is making a prototype of the infrastructure for its new website by manually provisioning the necessary infrastructure.This infrastructure includes an Auto Scaling group, an Application Load Balancer and an Amazon RDS database.After the configuration has been thoroughly validated, the company wants the capability to immediately deploy the infrastructure for development and production use in two Availability Zones in an automated fashion.What should a solutions architect recommend to meet these requirements?Read More →

A company wants to move from many standalone AWS accounts to a consolidated, multi-account architecture.The company plans to create many new AWS accounts for different business units.The company needs to authenticate access to these AWS accounts by using a centralized corporate directory service.Which combination of actions should a solutions architect recommend to meet these requirements? (Choose two.)Read More →

A company is migrating from a monolithic architecture for a web application that is hosted on Amazon EC2 to a serverless microservices architecture.The company wants to use AWS services that support an event-driven, loosely coupled architecture.The company wants to use the publish/subscribe (pub/sub) pattern.Which solution will meet these requirements MOST cost-effectively?Read More →

A company designed a stateless two-tier application that uses Amazon EC2 in a single Availability Zone and an Amazon RDS Multi-AZ DB instance.New company management wants to ensure the application is highly available.What should a solutions architect do to meet this requirement?Read More →

A company wants to build a logging solution for its multiple AWS accounts.The company currently stores the logs from all accounts in a centralized account.The company has created an Amazon S3 bucket in the centralized account to store the VPC flow logs and AWS CloudTrail logs.All logs must be highly available for 30 days for frequent analysis, retained for an additional 60 days for backup purposes, and deleted 90 days after creation.Which solution will meet these requirements MOST cost-effectively?Read More →

A company uses an Amazon EC2 instance to run a script to poll for and process messages in an Amazon Simple Queue Service (Amazon SQS) queue.The company wants to reduce operational costs while maintaining its ability to process a growing number of messages that are added to the queue.What should a solutions architect recommend to meet these requirements?Read More →