Free SAA-C03 Exam Braindumps (page: 97)

Page 97 of 247

A solutions architect is creating a new VPC design. There are two public subnets for the load balancer, two private subnets for web servers, and two private subnets for MySQL. The web servers use only HTTPS. The solutions architect has already created a security group for the load balancer allowing port 443 from 0.0.0.0/0. Company policy requires that each resource has the least access required to still be able to perform its tasks.
Which additional configuration strategy should the solutions architect use to meet these requirements?

  1. Create a security group for the web servers and allow port 443 from 0.0.0.0/0. Create a security group for the MySQL servers and allow port 3306 from the web servers security group.
  2. Create a network ACL for the web servers and allow port 443 from 0.0.0.0/0. Create a network ACL for the MySQL servers and allow port 3306 from the web servers security group.
  3. Create a security group for the web servers and allow port 443 from the load balancer. Create a security group for the MySQL servers and allow port 3306 from the web servers security group.
  4. Create a network ACL for the web servers and allow port 443 from the load balancer. Create a network ACL for the MySQL servers and allow port 3306 from the web servers security group.

Answer(s): C



An ecommerce company is running a multi-tier application on AWS. The front-end and backend tiers both run on Amazon EC2, and the database runs on Amazon RDS for MySQL. The backend tier communicates with the RDS instance. There are frequent calls to return identical datasets from the database that are causing performance slowdowns.
Which action should be taken to improve the performance of the backend?

  1. Implement Amazon SNS to store the database calls.
  2. Implement Amazon ElastiCache to cache the large datasets.
  3. Implement an RDS for MySQL read replica to cache database calls.
  4. Implement Amazon Kinesis Data Firehose to stream the calls to the database.

Answer(s): B



A new employee has joined a company as a deployment engineer. The deployment engineer will be using AWS CloudFormation templates to create multiple AWS resources. A solutions architect wants the deployment engineer to perform job activities while following the principle of least privilege.
Which combination of actions should the solutions architect take to accomplish this goal? (Choose two.)

  1. Have the deployment engineer use AWS account root user credentials for performing AWS CloudFormation stack operations.
  2. Create a new IAM user for the deployment engineer and add the IAM user to a group that has the PowerUsers IAM policy attached.
  3. Create a new IAM user for the deployment engineer and add the IAM user to a group that has the AdministratorAccess IAM policy attached.
  4. Create a new IAM user for the deployment engineer and add the IAM user to a group that has an IAM policy that allows AWS CloudFormation actions only.
  5. Create an IAM role for the deployment engineer to explicitly define the permissions specific to the AWS CloudFormation stack and launch stacks using that IAM role.

Answer(s): D,E



A company is deploying a two-tier web application in a VPC. The web tier is using an Amazon EC2 Auto Scaling group with public subnets that span multiple Availability Zones. The database tier consists of an Amazon RDS for MySQL DB instance in separate private subnets. The web tier requires access to the database to retrieve product information.
The web application is not working as intended. The web application reports that it cannot connect to the database. The database is confirmed to be up and running. All configurations for the network ACLs, security groups, and route tables are still in their default states.
What should a solutions architect recommend to fix the application?

  1. Add an explicit rule to the private subnet’s network ACL to allow traffic from the web tier’s EC2 instances.
  2. Add a route in the VPC route table to allow traffic between the web tier’s EC2 instances and the database tier.
  3. Deploy the web tier's EC2 instances and the database tier’s RDS instance into two separate VPCs, and configure VPC peering.
  4. Add an inbound rule to the security group of the database tier’s RDS instance to allow traffic from the web tiers security group.

Answer(s): D



Page 97 of 247



Post your Comments and Discuss Amazon SAA-C03 exam with other Community members:

Hassan commented on December 19, 2024
Quite challenging and interesting
Anonymous
upvote

Jonas commented on December 16, 2024
Interesting
Anonymous
upvote

BabeGirl commented on December 15, 2024
great stuff
Anonymous
upvote

kanhaiya kumar commented on December 08, 2024
awsome stuff
Anonymous
upvote

Hassan commented on December 04, 2024
Really its very good
Anonymous
upvote

nahdus commented on November 29, 2024
all comments are original?
Anonymous
upvote

mihir commented on November 28, 2024
Valid dumps
INDIA
upvote

Bright Edet commented on November 26, 2024
Valid dumps
Anonymous
upvote

MG commented on November 24, 2024
I love it .Thanks
Anonymous
upvote

MG commented on November 24, 2024
It saved me for my exam preparationg .
Anonymous
upvote

John Okediji commented on November 20, 2024
I like it. It's helping me prepare well for my exam.
Anonymous
upvote

Muhammad Ali commented on November 18, 2024
It is really helping
Anonymous
upvote

numan commented on November 02, 2024
really helping
GERMANY
upvote

Juan commented on October 18, 2024
From until what page number is enough to pass the certification?
Anonymous
upvote

edward commented on October 12, 2024
Passed with flying colors. Amazing material... came word by word.
Anonymous
upvote

P B commented on October 08, 2024
Are these updated
Anonymous
upvote

DJ commented on October 03, 2024
This dump is still valid?
MALAYSIA
upvote

George commented on October 02, 2024
Focus on mastering designing scalable, resilient architectures and cost-optimization strategies using core AWS services for this SAA-C03 exam.
UNITED STATES
upvote

Solomon commented on October 01, 2024
I passed the SAAC03 on Saturday. These guys are doing a great job on this platform and they deserve the credit. Their questions are valid and thoroughly reviewed. I recommend subscribing to Freebrain dumps
Anonymous
upvote

Solomon commented on September 22, 2024
I have SAA-C03 exam this coming saturday. Are the dumps here still valid?
Anonymous
upvote

lekshmi commented on September 18, 2024
Thank you for providing these very helpful dumps.
AUSTRALIA
upvote

Mavric commented on September 12, 2024
They seem to removed the automatic 50% discount. You can enter this discount code manually to get the 50% off. But you have to buy 2 or more exam dumps. The coupon code is: 50%OFF
UNITED STATES
upvote

Marcellus commented on September 11, 2024
Your answers are accurate compared to other sites
UNITED STATES
upvote

Marc commented on September 11, 2024
Very useful after completing the course and preparing to sit for the exam
UNITED STATES
upvote

Kaustubh Kumar commented on September 06, 2024
Hello Team, thanks for the terraform exam, I have cleared that exam thank you so much for this but 9-10 question have changed so please updated that thing in your pdf file.
Anonymous
upvote

Pramod commented on September 06, 2024
Merci beaucoup mon ami
Anonymous
upvote

Sajid commented on August 31, 2024
Ses helpfull
Anonymous
upvote

Max commented on August 26, 2024
Merci beaucoup mon ami
Anonymous
upvote

Max commented on August 26, 2024
Good job my bro
Anonymous
upvote

lucci commented on August 23, 2024
Hi guys, this site is the best website for SAA-C03 exam because this website provides the best and authentic questions and I tried the dumps which is best and I passed.
Anonymous
upvote

Topitexam.com commented on August 03, 2024
I recommend
Anonymous
upvote

Harley commented on August 01, 2024
Thanks to these SAA-C03 dumps, I’m now an AWS Certified Solutions Architect—my cloud skills are so solid, even cumulonimbus clouds are jealous. ahahha
Singapore
upvote

Jawid commented on July 30, 2024
Valid exam dumps in India. Just passed this exam.
Anonymous
upvote

Melisa commented on July 30, 2024
I just want to let you know the dumps are very useful for practice and preparation, but it seems for few question the answer which is provided seems incorrect. I found the PDF full version to be more accurate. I passed the exam regardless. So well worth it.
United States
upvote