Free SAA-C03 Exam Braindumps (page: 85)

Page 85 of 247

A company has deployed a web application on AWS. The company hosts the backend database on Amazon RDS for MySQL with a primary DB instance and five read replicas to support scaling needs. The read replicas must lag no more than 1 second behind the primary DB instance. The database routinely runs scheduled stored procedures.

As traffic on the website increases, the replicas experience additional lag during periods of peak load. A solutions architect must reduce the replication lag as much as possible. The solutions architect must minimize changes to the application code and must minimize ongoing operational overhead.

Which solution will meet these requirements?

  1. Migrate the database to Amazon Aurora MySQL. Replace the read replicas with Aurora Replicas, and configure Aurora Auto Scaling. Replace the stored procedures with Aurora MySQL native functions.
  2. Deploy an Amazon ElastiCache for Redis cluster in front of the database. Modify the application to check the cache before the application queries the database. Replace the stored procedures with AWS Lambda functions.
  3. Migrate the database to a MySQL database that runs on Amazon EC2 instances. Choose large, compute optimized EC2 instances for all replica nodes. Maintain the stored procedures on the EC2 instances.
  4. Migrate the database to Amazon DynamoDB. Provision a large number of read capacity units (RCUs) to support the required throughput, and configure on-demand capacity scaling. Replace the stored procedures with DynamoDB streams.

Answer(s): A



A solutions architect must create a disaster recovery (DR) plan for a high-volume software as a service (SaaS) platform. All data for the platform is stored in an Amazon Aurora MySQL DB cluster.

The DR plan must replicate data to a secondary AWS Region.
Which solution will meet these requirements MOST cost-effectively?

  1. Use MySQL binary log replication to an Aurora cluster in the secondary Region. Provision one DB instance for the Aurora cluster in the secondary Region.
  2. Set up an Aurora global database for the DB cluster. When setup is complete, remove the DB instance from the secondary Region.
  3. Use AWS Database Migration Service (AWS DMS) to continuously replicate data to an Aurora cluster in the secondary Region. Remove the DB instance from the secondary Region.
  4. Set up an Aurora global database for the DB cluster. Specify a minimum of one DB instance in the secondary Region.

Answer(s): D



A company has a custom application with embedded credentials that retrieves information from an Amazon RDS MySQL DB instance. Management says the application must be made more secure with the least amount of programming effort.

What should a solutions architect do to meet these requirements?

  1. Use AWS Key Management Service (AWS KMS) to create keys. Configure the application to load the database credentials from AWS KMS. Enable automatic key rotation.
  2. Create credentials on the RDS for MySQL database for the application user and store the credentials in AWS Secrets Manager. Configure the application to load the database credentials from Secrets Manager. Create an AWS Lambda function that rotates the credentials in Secret Manager.
  3. Create credentials on the RDS for MySQL database for the application user and store the credentials in AWS Secrets Manager. Configure the application to load the database credentials from Secrets Manager. Set up a credentials rotation schedule for the application user in the RDS for MySQL database using Secrets Manager.
  4. Create credentials on the RDS for MySQL database for the application user and store the credentials in AWS Systems Manager Parameter Store. Configure the application to load the database credentials from Parameter Store. Set up a credentials rotation schedule for the application user in the RDS for MySQL database using Parameter Store.

Answer(s): C

Explanation:

Create credentials on the RDS for MySQL database for the application user and store the credentials in AWS Secrets Manager. Configure the application to load the database credentials from Secrets Manager. Set up a credentials rotation schedule for the application user in the RDS for MySQL database using Secrets Manager.


Reference:

https://aws.amazon.com/blogs/security/rotate-amazon-rds-database-credentials-automatically-with-aws-secrets-manager/https://www.examtopics.com/discussions/amazon/view/46483-exam-aws-certified-solutions-architect-associate-saa-c02/



A media company hosts its website on AWS. The website application’s architecture includes a fleet of Amazon EC2 instances behind an Application Load Balancer (ALB) and a database that is hosted on Amazon Aurora. The company’s cybersecurity team reports that the application is vulnerable to SQL injection.

How should the company resolve this issue?

  1. Use AWS WAF in front of the ALB. Associate the appropriate web ACLs with AWS WAF.
  2. Create an ALB listener rule to reply to SQL injections with a fixed response.
  3. Subscribe to AWS Shield Advanced to block all SQL injection attempts automatically.
  4. Set up Amazon Inspector to block all SQL injection attempts automatically.

Answer(s): A

Explanation:

Protect against SQL injection and cross-site scripting
To protect your applications against SQL injection and cross-site scripting (XSS) attacks, use the built-in SQL injection and cross-site scripting engines. Remember that attacks can be performed on different parts of the HTTP request, such as the HTTP header, query string, or URI. Configure the AWS WAF rules to inspect different parts of the HTTP request against the built-in mitigation engines.


Reference:

https://aws.amazon.com/premiumsupport/knowledge-center/waf-block-common-attacks/#:~:text=To%20protect%20your%20applications%20against,%2C%20query%20string%2C%20or%20URI.



Page 85 of 247



Post your Comments and Discuss Amazon SAA-C03 exam with other Community members:

Hassan commented on December 19, 2024
Quite challenging and interesting
Anonymous
upvote

Jonas commented on December 16, 2024
Interesting
Anonymous
upvote

BabeGirl commented on December 15, 2024
great stuff
Anonymous
upvote

kanhaiya kumar commented on December 08, 2024
awsome stuff
Anonymous
upvote

Hassan commented on December 04, 2024
Really its very good
Anonymous
upvote

nahdus commented on November 29, 2024
all comments are original?
Anonymous
upvote

mihir commented on November 28, 2024
Valid dumps
INDIA
upvote

Bright Edet commented on November 26, 2024
Valid dumps
Anonymous
upvote

MG commented on November 24, 2024
I love it .Thanks
Anonymous
upvote

MG commented on November 24, 2024
It saved me for my exam preparationg .
Anonymous
upvote

John Okediji commented on November 20, 2024
I like it. It's helping me prepare well for my exam.
Anonymous
upvote

Muhammad Ali commented on November 18, 2024
It is really helping
Anonymous
upvote

numan commented on November 02, 2024
really helping
GERMANY
upvote

Juan commented on October 18, 2024
From until what page number is enough to pass the certification?
Anonymous
upvote

edward commented on October 12, 2024
Passed with flying colors. Amazing material... came word by word.
Anonymous
upvote

P B commented on October 08, 2024
Are these updated
Anonymous
upvote

DJ commented on October 03, 2024
This dump is still valid?
MALAYSIA
upvote

George commented on October 02, 2024
Focus on mastering designing scalable, resilient architectures and cost-optimization strategies using core AWS services for this SAA-C03 exam.
UNITED STATES
upvote

Solomon commented on October 01, 2024
I passed the SAAC03 on Saturday. These guys are doing a great job on this platform and they deserve the credit. Their questions are valid and thoroughly reviewed. I recommend subscribing to Freebrain dumps
Anonymous
upvote

Solomon commented on September 22, 2024
I have SAA-C03 exam this coming saturday. Are the dumps here still valid?
Anonymous
upvote

lekshmi commented on September 18, 2024
Thank you for providing these very helpful dumps.
AUSTRALIA
upvote

Mavric commented on September 12, 2024
They seem to removed the automatic 50% discount. You can enter this discount code manually to get the 50% off. But you have to buy 2 or more exam dumps. The coupon code is: 50%OFF
UNITED STATES
upvote

Marcellus commented on September 11, 2024
Your answers are accurate compared to other sites
UNITED STATES
upvote

Marc commented on September 11, 2024
Very useful after completing the course and preparing to sit for the exam
UNITED STATES
upvote

Kaustubh Kumar commented on September 06, 2024
Hello Team, thanks for the terraform exam, I have cleared that exam thank you so much for this but 9-10 question have changed so please updated that thing in your pdf file.
Anonymous
upvote

Pramod commented on September 06, 2024
Merci beaucoup mon ami
Anonymous
upvote

Sajid commented on August 31, 2024
Ses helpfull
Anonymous
upvote

Max commented on August 26, 2024
Merci beaucoup mon ami
Anonymous
upvote

Max commented on August 26, 2024
Good job my bro
Anonymous
upvote

lucci commented on August 23, 2024
Hi guys, this site is the best website for SAA-C03 exam because this website provides the best and authentic questions and I tried the dumps which is best and I passed.
Anonymous
upvote

Topitexam.com commented on August 03, 2024
I recommend
Anonymous
upvote

Harley commented on August 01, 2024
Thanks to these SAA-C03 dumps, I’m now an AWS Certified Solutions Architect—my cloud skills are so solid, even cumulonimbus clouds are jealous. ahahha
Singapore
upvote

Jawid commented on July 30, 2024
Valid exam dumps in India. Just passed this exam.
Anonymous
upvote

Melisa commented on July 30, 2024
I just want to let you know the dumps are very useful for practice and preparation, but it seems for few question the answer which is provided seems incorrect. I found the PDF full version to be more accurate. I passed the exam regardless. So well worth it.
United States
upvote