QUESTION: 89

A company uses Amazon S3 to store its confidential audit documents. The S3 bucket uses bucket policies to restrict access to audit team IAM user credentials according to the principle of least privilege. Company managers are worried about accidental deletion of documents in the S3 bucket and want a more secure solution.

What should a solutions architect do to secure the audit documents?

Enable the versioning and MFA Delete features on the S3 bucket.
Enable multi-factor authentication (MFA) on the IAM user credentials for each audit team IAM user account.
Add an S3 Lifecycle policy to the audit team's IAM user accounts to deny the s3:DeleteObject action during audit dates.
Use AWS Key Management Service (AWS KMS) to encrypt the S3 bucket and restrict audit team IAM user accounts from accessing the KMS key.

Answer(s): A

Reveal Solution Next Question

QUESTION: 90

A company is using a SQL database to store movie data that is publicly accessible. The database runs on an Amazon RDS Single-AZ DB instance. A script runs queries at random intervals each day to record the number of new movies that have been added to the database. The script must report a final total during business hours.

The company's development team notices that the database performance is inadequate for development tasks when the script is running. A solutions architect must recommend a solution to resolve this issue.

Which solution will meet this requirement with the LEAST operational overhead?

Modify the DB instance to be a Multi-AZ deployment.
Create a read replica of the database. Configure the script to query only the read replica.
Instruct the development team to manually export the entries in the database at the end of each day.
Use Amazon ElastiCache to cache the common queries that the script runs against the database.

Answer(s): B

Reveal Solution Next Question

QUESTION: 91

A company has applications that run on Amazon EC2 instances in a VPC. One of the applications needs to call the Amazon S3 API to store and read objects. According to the company's security regulations, no traffic from the applications is allowed to travel across the internet.

Which solution will meet these requirements?

Configure an S3 gateway endpoint.
Create an S3 bucket in a private subnet.
Create an S3 bucket in the same AWS Region as the EC2 instances.
Configure a NAT gateway in the same subnet as the EC2 instances.

Answer(s): A

Reveal Solution Next Question

QUESTION: 92

A company is storing sensitive user information in an Amazon S3 bucket. The company wants to provide secure access to this bucket from the application tier running on Amazon EC2 instances inside a VPC.

Which combination of steps should a solutions architect take to accomplish this? (Choose two.)

Configure a VPC gateway endpoint for Amazon S3 within the VPC.
Create a bucket policy to make the objects in the S3 bucket public.
Create a bucket policy that limits access to only the application tier running in the VP
Create an IAM user with an S3 access policy and copy the IAM credentials to the EC2 instance.
Create a NAT instance and have the EC2 instances use the NAT instance to access the S3 bucket.

Answer(s): A,C

Reveal Solution Next Question

Free SAA-C03 Exam Braindumps (page: 23)

QUESTION: 89

QUESTION: 90

QUESTION: 91

QUESTION: 92