QUESTION: 221

A company runs an application on a group of Amazon Linux EC2 instances. For compliance reasons, the company must retain all application log files for 7 years. The log files will be analyzed by a reporting tool that must be able to access all the files concurrently.

Which storage solution meets these requirements MOST cost-effectively?

Amazon Elastic Block Store (Amazon EBS)
Amazon Elastic File System (Amazon EFS)
Amazon EC2 instance store
Amazon S3

Answer(s): D

Reveal Solution Next Question

QUESTION: 222

A company has hired an external vendor to perform work in the company’s AWS account. The vendor uses an automated tool that is hosted in an AWS account that the vendor owns. The vendor does not have IAM access to the company’s AWS account.

How should a solutions architect grant this access to the vendor?

Create an IAM role in the company’s account to delegate access to the vendor’s IAM role. Attach the appropriate IAM policies to the role for the permissions that the vendor requires.
Create an IAM user in the company’s account with a password that meets the password complexity requirements. Attach the appropriate IAM policies to the user for the permissions that the vendor requires.
Create an IAM group in the company’s account. Add the tool’s IAM user from the vendor account to the group. Attach the appropriate IAM policies to the group for the permissions that the vendor requires.
Create a new identity provider by choosing “AWS account” as the provider type in the IAM console. Supply the vendor’s AWS account ID and user name. Attach the appropriate IAM policies to the new provider for the permissions that the vendor requires.

Answer(s): A

Reveal Solution Next Question

QUESTION: 223

A company has deployed a Java Spring Boot application as a pod that runs on Amazon Elastic Kubernetes Service (Amazon EKS) in private subnets. The application needs to write data to an Amazon DynamoDB table. A solutions architect must ensure that the application can interact with the DynamoDB table without exposing traffic to the internet.

Which combination of steps should the solutions architect take to accomplish this goal? (Choose two.)

Attach an IAM role that has sufficient privileges to the EKS pod.
Attach an IAM user that has sufficient privileges to the EKS pod.
Allow outbound connectivity to the DynamoDB table through the private subnets’ network ACLs.
Create a VPC endpoint for DynamoDB.
Embed the access keys in the Java Spring Boot code.

Answer(s): A,D

Reveal Solution Next Question

QUESTION: 224

A company recently migrated its web application to AWS by rehosting the application on Amazon EC2 instances in a single AWS Region. The company wants to redesign its application architecture to be highly available and fault tolerant. Traffic must reach all running EC2 instances randomly.

Which combination of steps should the company take to meet these requirements? (Choose two.)

Create an Amazon Route 53 failover routing policy.
Create an Amazon Route 53 weighted routing policy.
Create an Amazon Route 53 multivalue answer routing policy.
Launch three EC2 instances: two instances in one Availability Zone and one instance in another Availability Zone.
Launch four EC2 instances: two instances in one Availability Zone and two instances in another Availability Zone.

Answer(s): C,E

Reveal Solution Next Question

Free SAA-C03 Exam Braindumps (page: 56)

QUESTION: 221

QUESTION: 222

QUESTION: 223

QUESTION: 224