QUESTION: 473

A company hosts a website on Amazon EC2 instances behind an Application Load Balancer (ALB). The website serves static content. Website traffic is increasing, and the company is concerned about a potential increase in cost.

Create an Amazon CloudFront distribution to cache state files at edge locations
Create an Amazon ElastiCache cluster. Connect the ALB to the ElastiCache cluster to serve cached files
Create an AWS WAF web ACL and associate it with the ALB. Add a rule to the web ACL to cache static files
Create a second ALB in an alternative AWS Region. Route user traffic to the closest Region to minimize data transfer costs

Answer(s): A

Reveal Solution Next Question

QUESTION: 474

A company has multiple VPCs across AWS Regions to support and run workloads that are isolated from workloads in other Regions. Because of a recent application launch requirement, the company’s VPCs must communicate with all other VPCs across all Regions.

Which solution will meet these requirements with the LEAST amount of administrative effort?

Use VPC peering to manage VPC communication in a single Region. Use VPC peering across Regions to manage VPC communications.
Use AWS Direct Connect gateways across all Regions to connect VPCs across regions and manage VPC communications.
Use AWS Transit Gateway to manage VPC communication in a single Region and Transit Gateway peering across Regions to manage VPC communications.
Use AWS PrivateLink across all Regions to connect VPCs across Regions and manage VPC communications

Answer(s): C

Reveal Solution Next Question

QUESTION: 475

A company is designing a containerized application that will use Amazon Elastic Container Service (Amazon ECS). The application needs to access a shared file system that is highly durable and can recover data to another AWS Region with a recovery point objective (RPO) of 8 hours. The file system needs to provide a mount target m each Availability Zone within a Region.

A solutions architect wants to use AWS Backup to manage the replication to another Region.

Which solution will meet these requirements?

Amazon FSx for Windows File Server with a Multi-AZ deployment
Amazon FSx for NetApp ONTAP with a Multi-AZ deployment
Amazon Elastic File System (Amazon EFS) with the Standard storage class
Amazon FSx for OpenZFS

Answer(s): C

Reveal Solution Next Question

QUESTION: 476

A company is expecting rapid growth in the near future. A solutions architect needs to configure existing users and grant permissions to new users on AWS. The solutions architect has decided to create IAM groups. The solutions architect will add the new users to IAM groups based on department.

Which additional action is the MOST secure way to grant permissions to the new users?

Apply service control policies (SCPs) to manage access permissions
Create IAM roles that have least privilege permission. Attach the roles to the IAM groups
Create an IAM policy that grants least privilege permission. Attach the policy to the IAM groups
Create IAM roles. Associate the roles with a permissions boundary that defines the maximum permissions

Answer(s): C

Reveal Solution Next Question

Free SAA-C03 Exam Braindumps (page: 119)

QUESTION: 473

QUESTION: 474

QUESTION: 475

QUESTION: 476