SAA-C03 Free Practice Test

- (Exam Topic 2)
A company is running several business applications in three separate VPCs within me us-east-1 Region. The applications must be able to communicate between VPCs. The applications also must be able to consistently send hundreds to gigabytes of data each day to a latency-sensitive application that runs in a single on-premises data center.
A solutions architect needs to design a network connectivity solution that maximizes cost-effectiveness Which solution moots those requirements?

1. A. Configure three AWS Site-to-Site VPN connections from the data center to AWS Establish connectivity by configuring one VPN connection for each VPC
2. B. Launch a third-party virtual network appliance in each VPC Establish an iPsec VPN tunnel between the Data center and each virtual appliance
3. C. Set up three AWS Direct Connect connections from the data center to a Direct Connect gateway inus-east-1 Establish connectivity by configuring each VPC to use one of the Direct Connect connections
4. D. Set up one AWS Direct Connect connection from the data center to AW
5. E. Create a transit gateway, and attach each VPC to the transit gatewa
6. F. Establish connectivity between the Direct Connect connection and the transit gateway.

Correct Answer: D
https://docs.aws.amazon.com/whitepapers/latest/aws-vpc-connectivity-options/aws-direct-connect-aws-transit-g

- (Exam Topic 2)
A company has an event-driven application that invokes AWS Lambda functions up to 800 times each minute with varying runtimes. The Lambda functions access data that is stored in an Amazon Aurora MySQL OB cluster. The company is noticing connection timeouts as user activity increases The database shows no signs of being overloaded. CPU. memory, and disk access metrics are all low.
Which solution will resolve this issue with the LEAST operational overhead?

1. A. Adjust the size of the Aurora MySQL nodes to handle more connection
2. B. Configure retry logic in the Lambda functions for attempts to connect to the database
3. C. Set up Amazon ElastiCache tor Redls to cache commonly read items from the databas
4. D. Configure the Lambda functions to connect to ElastiCache for reads.
5. E. Add an Aurora Replica as a reader nod
6. F. Configure the Lambda functions to connect to the reader endpoint of the OB cluster rather than lo the writer endpoint.
7. G. Use Amazon ROS Proxy to create a prox
8. H. Set the DB cluster as the target database Configure the Lambda functions lo connect to the proxy rather than to the DB cluster.

Correct Answer: D

- (Exam Topic 3)
A company hosts a marketing website in an on-premises data center. The website consists of static documents and runs on a single server. An administrator updates the website content infrequently and uses an SFTP client to upload new documents.
The company decides to host its website on AWS and to use Amazon CloudFront. The company's solutions architect creates a CloudFront distribution. The solutions architect must design the most cost-effective and resilient architecture for website hosting to serve as the CloudFront origin.
Which solution will meet these requirements?

1. A. Create a virtual server by using Amazon Lightsai
2. B. Configure the web server in the Lightsail instance.Upload website content by using an SFTP client.
3. C. Create an AWS Auto Scaling group for Amazon EC2 instance
4. D. Use an Application Load Balancer.Upload website content by using an SFTP client.
5. E. Create a private Amazon S3 bucke
6. F. Use an S3 bucket policy to allow access from a CloudFront origin access identity (OAI). Upload website content by using theAWSCLI.
7. G. Create a public Amazon S3 bucke
8. H. Configure AWS Transfer for SFT
9. I. Configure the S3 bucket for website hostin
10. J. Upload website content by using the SFTP client.

Correct Answer: C
https://docs.aws.amazon.com/cli/latest/reference/transfer/describe-server.html

- (Exam Topic 3)
A company is deploying a new application on Amazon EC2 instances. The application writes data to Amazon Elastic Block Store (Amazon EBS) volumes. The company needs to ensure that all data that is written to the EBS volumes is encrypted at rest.
Which solution wil meet this requirement?

1. A. Create an IAM role that specifies EBS encryptio
2. B. Attach the role to the EC2 instances.
3. C. Create the EBS volumes as encrypted volumes Attach the EBS volumes to the EC2 instances.
4. D. Create an EC2 instance tag that has a key of Encrypt and a value of Tru
5. E. Tag all instances that require encryption at the ESS level.
6. F. Create an AWS Key Management Service (AWS KMS) key policy that enforces EBS encryption in the account Ensure that the key policy is active.

Correct Answer: B

- (Exam Topic 3)
An application runs on an Amazon EC2 instance that has an Elastic IP address in VPC A. The application requires access to a database in VPC B. Both VPCs are in the same AWS account.
Which solution will provide the required access MOST securely?

1. A. Create a DB instance security group that allows all traffic from the public IP address of the applicationserver in VPC A.
2. B. Configure a VPC peering connection between VPC A and VPC B.
3. C. Make the DB instance publicly accessibl
4. D. Assign a public IP address to the DB instance.
5. E. Launch an EC2 instance with an Elastic IP address into VPC
6. F. Proxy all requests through the new EC2 instance.

Correct Answer: B