SAA-C03 Free Practice Test

- (Exam Topic 1)
A company recently migrated to AWS and wants to implement a solution to protect the traffic that flows in and out of the production VPC. The company had an inspection server in its on-premises data center. The inspection server performed specific operations such as traffic flow inspection and traffic filtering. The company wants to have the same functionalities in the AWS Cloud.
Which solution will meet these requirements?

1. A. Use Amazon GuardDuty for traffic inspection and traffic filtering in the production VPC
2. B. Use Traffic Mirroring to mirror traffic from the production VPC for traffic inspection and filtering.
3. C. Use AWS Network Firewall to create the required rules for traffic inspection and traffic filtering for the production VPC.
4. D. Use AWS Firewall Manager to create the required rules for traffic inspection and traffic filtering for the production VPC.

Correct Answer: C
AWS Network Firewall supports both inspection and filtering as required

- (Exam Topic 3)
A company has an On-premises volume backup solution that has reached its end of life. The company wants to use AWS as part of a new backup solution and wants to maintain local access to all the data while it is backed up on AWS. The company wants to ensure that the data backed up on AWS is automatically and securely transferred.
Which solution meets these requirements?

1. A. Use AWS Snowball to migrate data out of the on-premises solution to Amazon S3. Configure on-premises systems to mount the Snowball S3 endpoint to provide local access to the data.
2. B. Use AWS Snowball Edge to migrate data out of the on-premises solution to Amazon S3.Use the Snowball Edge file interface to provide on-premises systems with local access to the data.
3. C. Use AWS Storage Gateway and configure a cached volume gatewa
4. D. Run the Storage Gateway software application on premises and configure a percentage of data to cache locall
5. E. Mount the gateway storage volumes to provide local access to the data.
6. F. Use AWS Storage Gateway and configure a stored volume gatewa
7. G. Run the Storage software application on premises and map the gateway storage volumes to on-premises storag
8. H. Mount the gateway storage volumes to provide local access to the data.

Correct Answer: C

- (Exam Topic 3)
A company uses a 100 GB Amazon RDS for Microsoft SQL Server Single-AZ DB instance in the us-east-1 Region to store customer transactions. The company needs high availability and automate recovery for the DB instance.
The companu must also run reports on the RDS database several times a year. The report process causes transactions to take longer than usual to post to the customer‘ accounts.
Which combination of steps will meet these requirements? (Select TWO.)

1. A. Modify the DB instance from a Single-AZ DB instance to a Multi-AZ deployment.
2. B. Take a snapshot of the current DB instanc
3. C. Restore the snapshot to a new RDS deployment in another Availability Zone.
4. D. Create a read replica of the DB instance in a different Availability Zon
5. E. Point All requests for reports to the read replica.
6. F. Migrate the database to RDS Custom.
7. G. Use RDS Proxy to limit reporting requests to the maintenance window.

Correct Answer: BD

- (Exam Topic 2)
A company needs to retain application logs files for a critical application for 10 years. The application team regularly accesses logs from the past month for troubleshooting, but logs older than 1 month are rarely accessed. The application generates more than 10 TB of logs per month.
Which storage option meets these requirements MOST cost-effectively?

1. A. Store the Iogs in Amazon S3 Use AWS Backup lo move logs more than 1 month old to S3 Glacier Deep Archive
2. B. Store the logs in Amazon S3 Use S3 Lifecycle policies to move logs more than 1 month old to S3 Glacier Deep Archive
3. C. Store the logs in Amazon CloudWatch Logs Use AWS Backup to move logs more then 1 month old toS3 Glacier Deep Archive
4. D. Store the logs in Amazon CloudWatch Logs Use Amazon S3 Lifecycle policies to move logs more than 1 month old to S3 Glacier Deep Archive

Correct Answer: B
You need S3 to be able to archive the logs after one month. Cannot do that with CloudWatch Logs.

- (Exam Topic 1)
A company is implementing a new business application. The application runs on two Amazon EC2 instances and uses an Amazon S3 bucket for document storage. A solutions architect needs to ensure that the EC2 instances can access the S3 bucket.
What should the solutions architect do to meet this requirement?

1. A. Create an IAM role that grants access to the S3 bucke
2. B. Attach the role to the EC2 instances.
3. C. Create an IAM policy that grants access to the S3 bucke
4. D. Attach the policy to the EC2 instances.
5. E. Create an IAM group that grants access to the S3 bucke
6. F. Attach the group to the EC2 instances.
7. G. Create an IAM user that grants access to the S3 bucke
8. H. Attach the user account to the EC2 instances.

Correct Answer: A
https://aws.amazon.com/premiumsupport/knowledge-center/ec2-instance-access-s3-bucket/