Home
Amazon
SAA-C03: AWS Certified Solutions Architect - Associate Dumps

Free Amazon SAA-C03 Exam Dumps

Here you can find all the free questions related with Amazon AWS Certified Solutions Architect - Associate (SAA-C03) exam. You can also find on this page links to recently updated premium files with which you can practice for actual Amazon AWS Certified Solutions Architect - Associate Exam. These premium versions are provided as SAA-C03 exam practice tests, both as desktop software and browser based application, you can use whatever suits your style. Feel free to try the AWS Certified Solutions Architect - Associate Exam premium files for free, Good luck with your Amazon AWS Certified Solutions Architect - Associate Exam.

Question No: 1

MultipleChoice

The following IAM policy is attached to an IAM group. This is the only policy applied to the group.

A Group members are permitted any Amazon EC2 action within the us-east-1 Region. Statements after the Allow permission are not applied.

Options

BGroup members are denied any Amazon EC2 permissions in the us-east-1 Region unless they are logged in with multi-factor authentication (MFA).

CGroup members are allowed the ec2:Stoplnstances and ec2:Terminatelnstances permissions for all Regions when logged in with multi-factor authentication (MFA). Group members are
permitted any other Amazon EC2 action.

DGroup members are allowed the ec2:Stoplnstances and ec2:Terminatelnstances permissions for the us-east-1 Region only when logged in with multi-factor authentication (MFA). Group members are permitted any other Amazon EC2 action within the us-east-1 Region.

Answer
DExplanation

This answer is correct because it reflects the effect of the IAM policy on the group members. The policy has two statements: one with an Allow effect and one with a Deny effect. The Allow statement grants permission to perform any EC2 action on any resource within the us-east-1 Region. The Deny statement overrides the Allow statement and denies permission to perform the ec2:StopInstances and ec2:TerminateInstances actions on any resource within the us-east-1 Region, unless the group member is logged in with MF

A) Therefore, the group members can perform any EC2 action except stopping or terminating instances in the us-east-1 Region, unless they use MFA.

Question No: 2

MultipleChoice

An application runs on an Amazon EC2 instance that has an Elastic IP address in VPC

Options

AThe application requires access to a database in VPC B. Both VPCs are in the same AWS account.
Which solution will provide the required access MOST securely?

ACreate a DB instance security group that allows all traffic from the public IP address of the application server in VPC A.

BConfigure a VPC peering connection between VPC A and VPC B.

CMake the DB instance publicly accessible. Assign a public IP address to the DB instance.

DLaunch an EC2 instance with an Elastic IP address into VPC B. Proxy all requests through the new EC2 instance.

Answer
BExplanation

A VPC peering connection is a networking connection between two VPCs that enables users to route traffic between them using private IP addresses. Instances in either VPC can communicate with each other as if they are within the same network.A VPC peering connection can be created between VPCs in the same or different AWS accounts and Regions1. By configuring a VPC peering connection between VPC A and VPC B, the solution can provide the required access most securely.

A) Create a DB instance security group that allows all traffic from the public IP address of the application server in VPC A.This solution will not provide the required access most securely, as it involves exposing the DB instance to the public internet and relying on a single IP address for access control2.

C) Make the DB instance publicly accessible. Assign a public IP address to the DB instance.This solution will not provide the required access most securely, as it involves exposing the DB instance to the public internet and allowing any source to connect to it2.

D) Launch an EC2 instance with an Elastic IP address into VPC B. Proxy all requests through the new EC2 instance.This solution will not provide the required access most securely, as it involves creating an additional resource and configuring a proxy server that may introduce latency and complexity3.

Reference URL: https://docs.aws.amazon.com/vpc/latest/peering/what-is-vpc-peering.html

Question No: 3

MultipleChoice

The following IAM policy is attached to an IAM group. This is the only policy applied to the group.

Options

AGroup members are permitted any Amazon EC2 action within the us-east-1 Region. Statements after the Allow permission are not applied.

BGroup members are denied any Amazon EC2 permissions in the us-east-1 Region unless they are logged in with multi-factor authentication (MFA).

Answer
DExplanation

A) Therefore, the group members can perform any EC2 action except stopping or terminating instances in the us-east-1 Region, unless they use MFA.

Question No: 4

MultipleChoice

An application runs on an Amazon EC2 instance that has an Elastic IP address in VPC A. The application requires access to a database in VPC B. Both VPCs are in the same AWS account.

Which solution will provide the required access MOST securely?

Options

ACreate a DB instance security group that allows all traffic from the public IP address of the application server in VPC A.

BConfigure a VPC peering connection between VPC A and VPC B.

CMake the DB instance publicly accessible. Assign a public IP address to the DB instance.

DLaunch an EC2 instance with an Elastic IP address into VPC B. Proxy all requests through the new EC2 instance.

Answer
BExplanation

Reference URL: https://docs.aws.amazon.com/vpc/latest/peering/what-is-vpc-peering.html

Question No: 5

MultipleChoice

An application running on an Amazon EC2 instance in VPC-A needs to access files in another EC2 instance in VPC-B. Both VPCs are in separate AWS accounts. The network administrator needs to design a solution to configure secure access to EC2 instance in VPC-B from VPC-A. The connectivity should not have a single point of failure or bandwidth concerns.

Which solution will meet these requirements?

Options

ASet up a VPC peering connection between VPC-A and VPC-B.

BSet up VPC gateway endpoints for the EC2 instance running in VPC-B.

CAttach a virtual private gateway to VPC-B and set up routing from VPC-A.

DCreate a private virtual interface (VIF) for the EC2 instance running in VPC-B and add appropriate routes from VPC-A.

Answer
AExplanation

AWS uses the existing infrastructure of a VPC to create a VPC peering connection; it is neither a gateway nor a VPN connection, and does not rely on a separate piece of physical hardware. There is no single point of failure for communication or a bandwidth bottleneck. https://docs.aws.amazon.com/vpc/latest/peering/what-is-vpc-peering.html

Question No: 6

MultipleChoice

Options

AThe connectivity should not have a single point of failure or bandwidth concerns.
Which solution will meet these requirements?

ASet up a VPC peering connection between VPC-A and VPC-B.

BSet up VPC gateway endpoints for the EC2 instance running in VPC-B.

CAttach a virtual private gateway to VPC-B and set up routing from VPC-A.

DCreate a private virtual interface (VIF) for the EC2 instance running in VPC-B and add appropriate routes from VPC-A.

Answer
A, AExplanation

Question No: 7

MultipleChoice

A company runs a containerised application on a Kubernetes cluster m an on premises data center The company is using a MongoOB drtabii tor dan atanige The company wants to migrate some of these environments to AWS but no code changes or deployment method changes ate possible at this time The company needs a solution mat minimizes operational overhead

Which solution meets these requirements?

Options

AUse Amazon Elastic Container Service (Amazon ECS) with Amazon EC2 worker nodes for compute and MongoOB on EC2 for data storage

BUse Amazon Elastic Container Service (Amazon ECS) with AWS Fargate for compute and Amazon DynamoDB tor data storage

CUse Amazon Elastic Kubernetes Service (Amazon EKS) with Amazon EC2 worker nodes for compute and Amazon DynamoDB for data storage

DUse Amazon Elastic Kubernetes Service (Amazon EKS) with AWS fargate for compute and Amazon DocumentDB (with MongoOB compatfciMy) for data storage

Answer
DExplanation

Amazon DocumentDB (with MongoDB compatibility) is a fast, reliable, and fully managed database service. Amazon DocumentDB makes it easy to set up, operate, and scale MongoDB-compatible databases in the cloud. With Amazon DocumentDB, you can run the same application code and use the same drivers and tools that you use with MongoDB.

https://docs.aws.amazon.com/documentdb/latest/developerguide/what-is.html

Question No: 8

MultipleChoice

A gaming company is moving its public scoreboard from a data center to the AWS Cloud. The company uses Amazon EC2 Windows Server instances behind an

Application Load Balancer to host its dynamic application. The company needs a highly available storage solution for the application. The application consists of static files and dynamic server-side code.

Which combination of steps should a solutions architect take to meet these requirements? (Select TWO.) ' Store the static files on Amazon S3. Use Amazon

Options

ACloudFront to cache objects at the edge.

BStore the static files on Amazon S3. Use Amazon ElastiCache to cache objects at the edge.

CStore the server-side code on Amazon Elastic File System (Amazon EFS). Mount the EFS volume on each EC2 instance to share the files.

DStore the server-side code on Amazon FSx for Windows File Server. Mount the FSx for Windows File Server volume on each EC2 instance to share the files.

EStore the server-side code on a General Purpose SSD (gp2) Amazon Elastic Block Store (Amazon EBS) volume. Mount the EBS volume on each EC2 instance to share the files.

Answer
A, E

Question No: 9

MultipleChoice

A company is building a new dynamic ordering website. The company wants 10 minimize server maintenance and patching. The website must be highly available and must scale read and write capacity as qutddy as possible to meet changes in user demand.

Which solution will meet ftese requirements?

Options

AHost static content in Amazon S3 Host dynamic content by using Amazon API Gateway and AWS Lambda Use Amazon DynamoDB with on-demand capacity for the database Configure Amazon CtoudFront to deliver the website content

BHost static content in Amazon S3 Host dynamic content by using Amazon API Gateway and AWS Lambda Use Amazon Aurora with Aurora Auto Scaling for the database Configure Amazon CloudFront to deliver the website content

CHost al the website content on Amazon EC2 instances Create an Auto Scaling group to scale the EC2 Instances Use an Application Load Balancer to distribute traffic Use Amazon DynamoDB with provisioned write capacity for the database

DHost at the website content on Amazon EC2 instances Create an Auto Scaling group to scale the EC2 instances Use an Application Load Balancer to distribute traffic Use Amazon Aurora with Aurora Auto Scaling for the database

Answer
A

Question No: 10

MultipleChoice

A developer has an appfccabon that uses an AWS Lambda function to upload fies to Amazon S3 and needs the required permissions lo perform the task The developer already has an 1AM user with valid 1AM credentials required for Amazon S3

What should a solutions architect do to grant the permissions?

Options

AAdd required 1AM permissions in the resource policy of the Lambda function

BCreate a signed request using the existing 1AM credentials n the Lambda function

CCreate a new 1AM user and use the existing 1AM credentials in the Lambda function.

DCreate an 1AM execution role with the required permissions and attach the 1AM rote to the Lambda runcton

Answer
D

Limited Time Offer

25%

Off

Get Premium SAA-C03 Questions as Interactive Web-Based Practice Test or PDF