AWS Certified Solutions Architect - Associate Dumps in PDF and Online

QUESTION: 25

A company is designing an application. The application uses an AWS Lambda function to receive information through Amazon API Gateway and to store the information in an Amazon Aurora PostgreSQL database.
During the proof-of-concept stage, the company has to increase the Lambda quotas significantly to handle the high volumes of data that the company needs to load into the database. A solutions architect must recommend a new design to improve scalability and minimize the configuration effort.
Which solution will meet these requirements?

Refactor the Lambda function code to Apache Tomcat code that runs on Amazon EC2 instances. Connect the database by using native Java Database Connectivity (JDBC) drivers.
Change the platform from Aurora to Amazon DynamoDProvision a DynamoDB Accelerator (DAX) cluster. Use the DAX client SDK to point the existing DynamoDB API calls at the DAX cluster.
Set up two Lambda functions. Configure one function to receive the information. Configure the other function to load the information into the database. Integrate the Lambda functions by using Amazon Simple Notification Service (Amazon SNS).
Set up two Lambda functions. Configure one function to receive the information. Configure the other function to load the information into the database. Integrate the Lambda functions by using an Amazon Simple Queue Service (Amazon SQS) queue.

Answer(s): D

Explanation:

A) Using EC2 with Tomcat increases management overhead and does not leverage Lambda scaling; JDBC on EC2 breaks the serverless pattern and adds provisioning complexity. B) DynamoDB/DAX changes database type; adds unnecessary complexity and does not address Lambda quota limitations or seamless scaling into Aurora PostgreSQL. C) SNS coupling is a pub/sub pattern but without guaranteed ordering or durable backpressure between ingestion and load, risking data loss or throttling. D) SQS decouples ingestion from processing, provides backpressure, and allows Lambda to poll batches, reducing concurrent execution pressure and scaling smoothly into Aurora PostgreSQL.

Reveal Solution Next Question

QUESTION: 26

A company needs to review its AWS Cloud deployment to ensure that its Amazon S3 buckets do not have unauthorized configuration changes.
What should a solutions architect do to accomplish this goal?

Turn on AWS Config with the appropriate rules.
Turn on AWS Trusted Advisor with the appropriate checks.
Turn on Amazon Inspector with the appropriate assessment template.
Turn on Amazon S3 server access logging. Configure Amazon EventBridge (Amazon Cloud Watch Events).

Answer(s): A

Explanation:

A) AWS Config with the appropriate rules ensures continuous evaluation of S3 bucket configurations and can flag unauthorized changes via managed or custom rules.
B) Trusted Advisor checks are best-effort and not continuous policy-compliance monitoring for specific resource configurations, though they cover best practices at a high level.
C) Amazon Inspector focuses on security vulnerabilities and exposures of EC2 instances, not S3 configuration drift.
D) Server access logging and EventBridge provide access trails and event routing, not continuous configuration-compliance monitoring for drift.

Reveal Solution Next Question

QUESTION: 27

A company is launching a new application and will display application metrics on an Amazon CloudWatch dashboard. The company's product manager needs to access this dashboard periodically. The product manager does not have an AWS account. A solutions architect must provide access to the product manager by following the principle of least privilege.
Which solution will meet these requirements?

Share the dashboard from the CloudWatch console. Enter the product manager's email address, and complete the sharing steps. Provide a shareable link for the dashboard to the product manager.
Create an IAM user specifically for the product manager. Attach the CloudWatchReadOnlyAccess AWS managed policy to the user. Share the new login credentials with the product manager. Share the browser URL of the correct dashboard with the product manager.
Create an IAM user for the company's employees. Attach the ViewOnlyAccess AWS managed policy to the IAM user. Share the new login credentials with the product manager. Ask the product manager to navigate to the CloudWatch console and locate the dashboard by name in the Dashboards section.
Deploy a bastion server in a public subnet. When the product manager requires access to the dashboard, start the server and share the RDP credentials. On the bastion server, ensure that the browser is configured to open the dashboard URL with cached AWS credentials that have appropriate permissions to view the dashboard.

Answer(s): A

Explanation:

A) The correct approach is to share the CloudWatch dashboard directly with the external user using the built-in sharing feature, which allows access without provisioning an AWS account and adheres to least privilege by sharing only the specific dashboard link with view permissions.
B) Creates an IAM user and distributes credentials; external user would have long-term access keys and full dashboard access beyond need, violating least privilege and requiring credential management.
C) Requires an IAM user and credential sharing; product manager without account gains access if given credentials, and navigation may expose more than intended; not ideal for external users.
D) Involves operational overhead and potential security risks by exposing a bastion with cached credentials; not least-privilege or scalable for external access.

Reveal Solution Next Question

QUESTION: 28

A company is migrating applications to AWS. The applications are deployed in different accounts. The company manages the accounts centrally by using AWS Organizations. The company's security team needs a single sign-on (SSO) solution across all the company's accounts. The company must continue managing the users and groups in its on-premises self-managed Microsoft Active Directory.
Which solution will meet these requirements?

Enable AWS Single Sign-On (AWS SSO) from the AWS SSO console. Create a one-way forest trust or a one-way domain trust to connect the company's self-managed Microsoft Active Directory with AWS SSO by using AWS Directory Service for Microsoft Active Directory.
Enable AWS Single Sign-On (AWS SSO) from the AWS SSO console. Create a two-way forest trust to connect the company's self-managed Microsoft Active Directory with AWS SSO by using AWS Directory Service for Microsoft Active Directory.
Use AWS Directory Service. Create a two-way trust relationship with the company's self-managed Microsoft Active Directory.
Deploy an identity provider (IdP) on premises. Enable AWS Single Sign-On (AWS SSO) from the AWS SSO console.

Answer(s): B

Explanation:

AWS SSO with a two-way forest trust to AWS Managed Microsoft AD satisfies centralized on-prem AD management and SSO across multiple accounts via Organizations.
A) One-way forest trust is insufficient for bidirectional attribute/group synchronization and for seamless SSO across AWS accounts.
B) Correct: two-way forest trust with AWS Managed Microsoft AD enables full AD trust, group/OU mapping, and centralized user management while SSO across accounts.
C) AWS Directory Service with a two-way trust is not the recommended SSO path across multiple AWS accounts; AWS SSO provides the centralized SSO and account access control integration.
D) On-prem IdP with AWS SSO generally implies SSO via external IdP; using AWS Directory Service/Managed AD is the standard approach for centralized AD-managed users.

Reveal Solution Next Question

QUESTION: 29

A company provides a Voice over Internet Protocol (VoIP) service that uses UDP connections. The service consists of Amazon EC2 instances that run in an Auto Scaling group. The company has deployments across multiple AWS Regions.
The company needs to route users to the Region with the lowest latency. The company also needs automated failover between Regions.
Which solution will meet these requirements?

Deploy a Network Load Balancer (NLB) and an associated target group. Associate the target group with the Auto Scaling group. Use the NLB as an AWS Global Accelerator endpoint in each Region.
Deploy an Application Load Balancer (ALB) and an associated target group. Associate the target group with the Auto Scaling group. Use the ALB as an AWS Global Accelerator endpoint in each Region.
Deploy a Network Load Balancer (NLB) and an associated target group. Associate the target group with the Auto Scaling group. Create an Amazon Route 53 latency record that points to aliases for each NLB. Create an Amazon CloudFront distribution that uses the latency record as an origin.
Deploy an Application Load Balancer (ALB) and an associated target group. Associate the target group with the Auto Scaling group. Create an Amazon Route 53 weighted record that points to aliases for each ALB. Deploy an Amazon CloudFront distribution that uses the weighted record as an origin.

Answer(s): A

Explanation:

The correct option is A because Global Accelerator provides static IP addresses and routes users to the Region with the lowest latency, with automated regional failover for multi-region deployments. NLB in each Region handles UDP traffic efficiently, aligning with VoIP requirements.
B is incorrect because ALB supports HTTP/HTTPS, not UDP, making it unsuitable for VoIP UDP traffic, and AWS Global Accelerator works with endpoints but ALB + UDP isn’t ideal for this use case.
C is incorrect because latency-based Route 53 records with per-Region NLBs plus CloudFront add complexity; Global Accelerator offers faster failover and static anycast IPs without CloudFront in this scenario.
D is incorrect because ALB cannot handle UDP, and CloudFront is not needed when Global Accelerator provides optimized global routing and failover for UDP traffic.

Reveal Solution Next Question

QUESTION: 30

A development team runs monthly resource-intensive tests on its general purpose Amazon RDS for MySQL DB instance with Performance Insights enabled. The testing lasts for 48 hours once a month and is the only process that uses the database. The team wants to reduce the cost of running the tests without reducing the compute and memory attributes of the DB instance.
Which solution meets these requirements MOST cost-effectively?

Stop the DB instance when tests are completed. Restart the DB instance when required.
Use an Auto Scaling policy with the DB instance to automatically scale when tests are completed.
Create a snapshot when tests are completed. Terminate the DB instance and restore the snapshot when required.
Modify the DB instance to a low-capacity instance when tests are completed. Modify the DB instance again when required.

Answer(s): C

Explanation:

The correct answer is C. Creating a snapshot and terminating the DB instance reduces ongoing compute and storage costs during the 28 days when tests aren’t running, while preserving the exact state to restore on demand without changing instance type or paying for idle capacity.
A is incorrect because stopping a MySQL RDS instance incurs a brief downtime to restart and does not preserve data beyond the snapshot’s point-in-time; it also may still incur some storage costs. B is incorrect because RDS Auto Scaling for a single DB instance isn’t supported to scale compute during test windows. D is incorrect because changing instance class incurs time and potential maintenance impact; it’s less cost-effective than snapshot-terminate-restore.

Reveal Solution Next Question

QUESTION: 31

A company that hosts its web application on AWS wants to ensure all Amazon EC2 instances. Amazon RDS DB instances. and Amazon Redshift clusters are configured with tags. The company wants to minimize the effort of configuring and operating this check.
What should a solutions architect do to accomplish this?

Use AWS Config rules to define and detect resources that are not properly tagged.
Use Cost Explorer to display resources that are not properly tagged. Tag those resources manually.
Write API calls to check all resources for proper tag allocation. Periodically run the code on an EC2 instance.
Write API calls to check all resources for proper tag allocation. Schedule an AWS Lambda function through Amazon CloudWatch to periodically run the code.

Answer(s): A

Explanation:

A) AWS Config rules provide continuous governance and can evaluate tagging compliance across EC2, RDS, and Redshift with built-in or custom rules, minimizing operational effort.
B) Cost Explorer is for cost and usage but not for enforcing tag compliance; it does not automatically detect or remediate tagging gaps.
C) Writing API calls and running from EC2 is manual, ad-hoc, and requires ongoing maintenance; not scalable or low-effort.
D) Scheduling API checks via Lambda adds automation but still requires building/maintaining custom logic; Config rules offer centralized, managed tagging governance.

Reveal Solution Next Question

QUESTION: 32

A development team needs to host a website that will be accessed by other teams. The website contents consist of HTML, CSS, client-side JavaScript, and images.
Which method is the MOST cost-effective for hosting the website?

Containerize the website and host it in AWS Fargate.
Create an Amazon S3 bucket and host the website there.
Deploy a web server on an Amazon EC2 instance to host the website.
Configure an Application Load Balancer with an AWS Lambda target that uses the Express.js framework.

Answer(s): B

Explanation:

Hosting static website content is most cost-effective in S3 with static website hosting and optional CloudFront. A) Fargate adds container orchestration and compute costs for dynamic workloads, not needed for static assets. C) EC2 incurs server management and higher costs for a simple static site. D) ALB with Lambda/Express introduces unnecessary compute and latency for static files. B) S3 static website hosting provides low per-GB storage and GET request costs, automatic scalability, and minimal maintenance, fitting use case of HTML/CSS/JS/images accessed by teams.

Reveal Solution Next Question

Amazon AWS Certified Solutions Architect - Associate SAA-C03 AWS Certified Solutions Architect - Associate Dumps in PDF

Free Amazon AWS Certified Solutions Architect - Associate Real Questions (page: 4)

QUESTION: 25

Explanation:

QUESTION: 26

Explanation:

QUESTION: 27

Explanation:

QUESTION: 28

Explanation:

QUESTION: 29

Explanation:

QUESTION: 30

Explanation:

QUESTION: 31

Explanation:

QUESTION: 32

Explanation: