SAA-C03 Free Practice Test

- (Exam Topic 1)
A solutions architect is designing a VPC with public and private subnets. The VPC and subnets use IPv4 CIDR blocks. There is one public subnet and one private subnet in each of three Availability Zones (AZs) for high availability. An internet gateway is used to provide internet access for the public subnets. The private subnets require access to the internet to allow Amazon EC2 instances to download software updates.
What should the solutions architect do to enable Internet access for the private subnets?

1. A. Create three NAT gateways, one for each public subnet in each A
2. B. Create a private route table for each AZ that forwards non-VPC traffic to the NAT gateway in its AZ.
3. C. Create three NAT instances, one for each private subnet in each A
4. D. Create a private route table for each AZ that forwards non-VPC traffic to the NAT instance in its AZ.
5. E. Create a second internet gateway on one of the private subnet
6. F. Update the route table for the private subnets that forward non-VPC traffic to the private internet gateway.
7. G. Create an egress-only internet gateway on one of the public subnet
8. H. Update the route table for the private subnets that forward non-VPC traffic to the egress- only internet gateway.

Correct Answer: A
https://aws.amazon.com/about-aws/whats-new/2018/03/introducing-amazon-vpc-nat-gateway-in-the-aws-govclo https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-comparison.html

- (Exam Topic 2)
A business's backup data totals 700 terabytes (TB) and is kept in network attached storage (NAS) at its data center. This backup data must be available in the event of occasional regulatory inquiries and preserved for a period of seven years. The organization has chosen to relocate its backup data from its on-premises data center to Amazon Web Services (AWS). Within one month, the migration must be completed. The company's public internet connection provides 500 Mbps of dedicated capacity for data transport.
What should a solutions architect do to ensure that data is migrated and stored at the LOWEST possible cost?

1. A. Order AWS Snowball devices to transfer the dat
2. B. Use a lifecycle policy to transition the files to Amazon S3 Glacier Deep Archive.
3. C. Deploy a VPN connection between the data center and Amazon VP
4. D. Use the AWS CLI to copy the data from on premises to Amazon S3 Glacier.
5. E. Provision a 500 Mbps AWS Direct Connect connection and transfer the data to Amazon S3. Use a lifecycle policy to transition the files to Amazon S3 Glacier Deep Archive.
6. F. Use AWS DataSync to transfer the data and deploy a DataSync agent on premise
7. G. Use the DataSync task to copy files from the on-premises NAS storage to Amazon S3 Glacier.

Correct Answer: A
https://www.omnicalculator.com/other/data-transfer

- (Exam Topic 3)
A solutions architect is implementing a document review application using an Amazon S3 bucket for storage. The solution must prevent accidental deletion of the documents and ensure that all versions of the documents are available. Users must be able to download, modify, and upload documents.
Which combination of actions should be taken to meet these requirements? (Choose two.)

1. A. Enable a read-only bucket ACL.
2. B. Enable versioning on the bucket.
3. C. Attach an IAM policy to the bucket.
4. D. Enable MFA Delete on the bucket.
5. E. Encrypt the bucket using AWS KMS.

Correct Answer: BD

- (Exam Topic 1)
A company has several web servers that need to frequently access a common Amazon RDS MySQL Multi-AZ DB instance The company wants a secure method for the web servers to connect to the database while meeting a security requirement to rotate user credentials frequently.
Which solution meets these requirements?

1. A. Store the database user credentials in AWS Secrets Manager Grant the necessary IAM permissions to allow the web servers to access AWS Secrets Manager
2. B. Store the database user credentials in AWS Systems Manager OpsCenter Grant the necessary IAM permissions to allow the web servers to access OpsCenter
3. C. Store the database user credentials in a secure Amazon S3 bucket Grant the necessary IAM permissions to allow the web servers to retrieve credentials and access the database.
4. D. Store the database user credentials in files encrypted with AWS Key Management Service (AWS KMS) on the web server file syste
5. E. The web server should be able to decrypt the files and access the database

Correct Answer: A
AWS Secrets Manager helps you protect secrets needed to access your applications, services, and IT resources. The service enables you to easily rotate, manage, and retrieve database credentials, API keys, and other secrets throughout their lifecycle.
https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.html
Secrets Manager enables you to replace hardcoded credentials in your code, including passwords, with an API call to Secrets Manager to retrieve the secret programmatically. This helps ensure the secret can't be compromised by someone examining your code, because the secret no longer exists in the code. Also, you can configure Secrets Manager to automatically rotate the secret for you according to a specified schedule. This enables you to replace long-term secrets with short-term ones, significantly reducing the risk of compromise.

- (Exam Topic 3)
A company has a web application that is based on Java and PHP The company plans to move the application from on premises to AWS The company needs the ability to test new site features frequently. The company also needs a highly available and managed solution that requires minimum operational overhead
Which solution will meet these requirements?

1. A. Create an Amazon S3 bucket Enable static web hosting on the S3 bucket Upload the static content to the S3 bucket Use AWS Lambda to process all dynamic content
2. B. Deploy the web application to an AWS Elastic Beanstalk environment Use URL swapping to switch between multiple Elastic Beanstalk environments for feature testing
3. C. Deploy the web application lo Amazon EC2 instances that are configured with Java and PHP Use Auto Scaling groups and an Application Load Balancer to manage the website's availability
4. D. Containerize the web application Deploy the web application to Amazon EC2 instances Use the AWS Load Balancer Controller to dynamically route traffic between containers thai contain the new site features for testing

Correct Answer: B