Amazon SAA-C03 AWS Certified Solutions Architect - Associate Exam Practice Test Questions

• Question 1

  A company has a Microsoft NET application that runs on an on-premises Windows Server Trie application stores data by using an Oracle Database Standard Edition server The company is planning a migration to AWS and wants to minimize development changes while moving the application The AWS application environment should be highly availableWhich combination of actions should the company take to meet these requirements? (Select TWO )

  • Refactor the application as serverless with AWS Lambda functions running NET Cote
  • Rehost the application in AWS Elastic Beanstalk with the NET platform in a Multi-AZ deployment
  • Replatform the application to run on Amazon EC2 with the Amazon Linux Amazon Machine Image (AMI)
  • Use AWS Database Migration Service (AWS DMS) to migrate from the Oracle database to Amazon DynamoDB in a Multi-AZ deployment
  • Use AWS Database Migration Service (AWS DMS) to migrate from the Oracle database to Oracle on Amazon RDS in a Multi-AZ deployment

  Show Answer Answer: B, E Next

• Question 2

  A law firm needs to share information with the public The information includes hundreds of files that must be publicly readable Modifications or deletions of the files by anyone before a designated future date are prohibited.Which solution will meet these requirements in the MOST secure way?

  • Upload all files to an Amazon S3 bucket that is configured for static website hosting. Grant read-only 1AM permissions to any AWS principals that access the S3 bucket until the designated date.
  • Create a new Amazon S3 bucket with S3 Versioning enabled Use S3 Object Lock with a retention period in accordance with the designated date Configure the S3 bucket for static website hosting. Set an S3 bucket policy to allow read-only access to the objrcts.
  • Create a new Amazon S3 bucket with S3 Versioning enabled Configure an event trigger to run an AWS Lambda function in case of object modification or deletion. Configure the Lambda function to replace the objects with the original versions from a private S3 bucket.
  • Upload all files to an Amazon S3 bucket that is configured for static website hosting. Select the folder that contains the files. Use S3 Object Lock with a retention period in accordance with the designated date. Grant read-only 1AM permissions to any AWS principals that access the S3 bucket.

  Show Answer Answer: B Next

• Question 3

  A company has applications hosted on Amazon EC2 instances with IPv6 addresses. The applications must initiate communications with other external applications using the internet.However, the company's security policy states that any external service cannot initiate a connection to the EC2 instances.What should a solutions architect recommend to resolve this issue?

  • Create a NAT gateway and make it the destination of the subnet's route table.
  • Create an internet gateway and make it the destination of the subnet's route table
  • Create a virtual private gateway and make it the destination of the subnet's route table.
  • Create an egress-only internet gateway and make it the destination of the subnet's route table.

  Show Answer Answer: D Next

• Question 4

  A company has an application that runs on Amazon EC2 instances and uses an Amazon Aurora database. The EC2 instances connect to the database by using user names and passwords that are stored locally in a file. The company wants to minimize the operational overhead of credential management.What should a solutions architect do to accomplish this goal?

  • Use AWS Secrets Manager. Turn on automatic rotation.
  • Use AWS Systems Manager Parameter Store. Turn on automatic rotation.
  • Create an Amazon S3 bucket lo store objects that are encrypted with an AWS Key C. Management Service (AWS KMS) encryption key. Migrate the credential file to the S3 bucket. Point the application to the S3 bucket.
  • Create an encrypted Amazon Elastic Block Store (Amazon EBS) volume (or each EC2 instance. Attach the new EBS volume to each EC2 instance. Migrate the credential file to the new EBS volume. Point the application to the new EBS volume.

  Show Answer Answer: A Next

• Question 5

  A company has an Amazon S3 bucket that contains critical data. The company must protect the data from accidental deletion.Which combination of steps should a solutions architect take to meet these requirements? (Choose two.)

  • Enable versioning on the S3 bucket.
  • Enable MFA Delete on the S3 bucket.
  • Create a bucket policy on the S3 bucket.
  • Enable default encryption on the S3 bucket.
  • Create a lifecycle policy for the objects in the S3 bucket.

  Show Answer Answer: A, B Next