SAA-C03 Free Practice Test

- (Exam Topic 3)
A company is using Amazon Route 53 latency-based routing to route requests to its UDP-based application for users around the world. The application is hosted on redundant servers in the company's on-premises data centers in the United States. Asia, and Europe. The company's compliance requirements state that the application must be hosted on premises The company wants to improve the performance and availability of the application
What should a solutions architect do to meet these requirements?

1. A. A Configure three Network Load Balancers (NLBs) in the three AWS Regions to address theon-premises endpoints Create an accelerator by using AWS Global Accelerator, and register the NLBs as its endpoint
2. B. Provide access to the application by using a CNAME that points to the accelerator DNS
3. C. Configure three Application Load Balancers (ALBs) in the three AWS Regions to address theon-premises endpoint
4. D. Create an accelerator by using AWS Global Accelerator and register the ALBs as its endpoints Provide access to the application by using a CNAME that points to the accelerator DNS
5. E. Configure three Network Load Balancers (NLBs) in the three AWS Regions to address the on-premises endpoints In Route 53. create a latency-based record that points to the three NLB
6. F. and use it as an origin for an Amazon CloudFront distribution Provide access to the application by using a CNAME that points to the CloudFront DNS
7. G. Configure three Application Load Balancers (ALBs) in the three AWS Regions to address theon-premises endpoints In Route 53 create a latency-based record that points to the three ALBs and use it as an origin for an Amazon CloudFront distribution- Provide access to the application by using a CNAME that points to the CloudFront DNS

Correct Answer: A

- (Exam Topic 3)
A company wants to experiment with individual AWS accounts for its engineer team. The company wants to be notified as soon as the Amazon EC2 instance usage for a given month exceeds a specific threshold for each account.
What should a solutions architect do to meet this requirement MOST cost-effectively?

1. A. Use Cost Explorer to create a daily report of costs by servic
2. B. Filter the report by EC2 instances.Configure Cost Explorer to send an Amazon Simple Email Service (Amazon SES) notification when a threshold is exceeded.
3. C. Use Cost Explorer to create a monthly report of costs by servic
4. D. Filter the report by EC2 instances.Configure Cost Explorer to send an Amazon Simple Email Service (Amazon SES) notification when a threshold is exceeded.
5. E. Use AWS Budgets to create a cost budget for each accoun
6. F. Set the period to monthl
7. G. Set the scope to EC2 instance
8. H. Set an alert threshold for the budge
9. I. Configure an Amazon Simple Notification Service (Amazon SNS) topic to receive a notification when a threshold is exceeded.
10. J. Use AWS Cost and Usage Reports to create a report with hourly granularit
11. K. Integrate the report data with Amazon Athen
12. L. Use Amazon EventBridge to schedule an Athena quer
13. M. Configure an Amazon Simple Notification Service (Amazon SNS) topic to receive a notification when a threshold is exceeded.

Correct Answer: C
AWS Budgets allows you to create budgets for your AWS accounts and set alerts when usage exceeds a certain threshold. By creating a budget for each account, specifying the period as monthly and the scope as EC2 instances, you can effectively track the EC2 usage for each account and be notified when a threshold is exceeded. This solution is the most cost-effective option as it does not require additional resources such as Amazon Athena or Amazon EventBridge.

- (Exam Topic 1)
A company uses Amazon S3 to store its confidential audit documents. The S3 bucket uses bucket policies to restrict access to audit team IAM user credentials according to the principle of least privilege. Company managers are worried about accidental deletion of documents in the S3 bucket and want a more secure solution.
What should a solutions architect do to secure the audit documents?

1. A. Enable the versioning and MFA Delete features on the S3 bucket.
2. B. Enable multi-factor authentication (MFA) on the IAM user credentials for each audit team IAM user account.
3. C. Add an S3 Lifecycle policy to the audit team's IAM user accounts to deny the s3:DeleteObject action during audit dates.
4. D. Use AWS Key Management Service (AWS KMS) to encrypt the S3 bucket and restrict audit team IAM user accounts from accessing the KMS key.

Correct Answer: A

- (Exam Topic 3)
An IAM user made several configuration changes to AWS resources m their company's account during a production deployment last week. A solutions architect learned that a couple of security group rules are not configured as desired. The solutions architect wants to confirm which IAM user was responsible for making changes.
Which service should the solutions architect use to find the desired information?

1. A. Amazon GuardDuty
2. B. Amazon Inspector
3. C. AWS CloudTrail
4. D. AWS Config

Correct Answer: C

- (Exam Topic 3)
A company is hosting a three-tier ecommerce application in the AWS Cloud. The company hosts the website on Amazon S3 and integrates the website with an API that handles sales requests. The company hosts the API on three Amazon EC2 instances behind an Application Load Balancer (ALB). The API consists of static and dynamic front-end content along with backend workers that process sales requests asynchronously.
The company is expecting a significant and sudden increase in the number of sales requests during events for the launch of new products
What should a solutions architect recommend to ensure that all the requests are processed successfully?

1. A. Add an Amazon CloudFront distribution for the dynamic conten
2. B. Increase the number of EC2 instances to handle the increase in traffic.
3. C. Add an Amazon CloudFront distribution for the static conten
4. D. Place the EC2 instances in an Auto Scaling group to launch new instances based on network traffic.
5. E. Add an Amazon CloudFront distribution for the dynamic conten
6. F. Add an Amazon ElastiCache instance in front of the ALB to reduce traffic for the API to handle.
7. G. Add an Amazon CloudFront distribution for the static conten
8. H. Add an Amazon Simple Queue Service (Amazon SOS) queue to receive requests from the website for later processing by the EC2 instances.

Correct Answer: D