Free SAA-C03 Exam Braindumps
AWS Certified Solutions Architect - Associate SAA-C03 Questions 496–500 (page: 101)

Updated On: 16-Mar-2026

A company uses on-premises servers to host its applications. The company is running out of storage capacity. The applications use both block storage and NFS storage. The company needs a high-performing solution that supports local caching without re-architecting its existing applications.
Which combination of actions should a solutions architect take to meet these requirements? (Choose two.)

  1. Mount Amazon S3 as a file system to the on-premises servers.
  2. Deploy an AWS Storage Gateway file gateway to replace NFS storage.
  3. Deploy AWS Snowball Edge to provision NFS mounts to on-premises servers.
  4. Deploy an AWS Storage Gateway volume gateway to replace the block storage.
  5. Deploy Amazon Elastic File System (Amazon EFS) volumes and mount them to on-premises servers.

Answer(s): B,D

Explanation:

The correct combination uses AWS Storage Gateway to provide on-prem caching and integrate with existing storage types.
A) Incorrect: Mounting S3 as a file system to on-premises servers does not provide local caching with familiar NFS/SMB semantics and can introduce latency and consistency issues.
B) Correct: File gateway (NFS) provides on-premises caching for frequently accessed data while seamlessly tiering to S3, preserving NFS compatibility.
C) Incorrect: Snowball Edge is a data transfer device, not a persistent on-premises cache for ongoing high-performance access.
D) Correct: Volume gateway (iSCSI) presents on-premises block storage cached locally and tiered to S3, meeting high performance and cache requirements.
E) Incorrect: EFS is primarily a cloud-native NFS service; on-premises mounting without gateway does not offer managed caching or seamless integration.



A company has a service that reads and writes large amounts of data from an Amazon S3 bucket in the same AWS Region. The service is deployed on Amazon EC2 instances within the private subnet of a VPC. The service communicates with Amazon S3 over a NAT gateway in the public subnet. However, the company wants a solution that will reduce the data output costs.
Which solution will meet these requirements MOST cost-effectively?

  1. Provision a dedicated EC2 NAT instance in the public subnet. Configure the route table for the private subnet to use the elastic network interface of this instance as the destination for all S3 traffic.
  2. Provision a dedicated EC2 NAT instance in the private subnet. Configure the route table for the public subnet to use the elastic network interface of this instance as the destination for all S3 traffic.
  3. Provision a VPC gateway endpoint. Configure the route table for the private subnet to use the gateway endpoint as the route for all S3 traffic.
  4. Provision a second NAT gateway. Configure the route table for the private subnet to use this NAT gateway as the destination for all S3 traffic.

Answer(s): C

Explanation:

A VPC gateway endpoint for S3 enables private, region-wide access to S3 without traversing NAT devices or incurring data transfer charges from NAT gateways, reducing data output costs. It keeps traffic within the AWS network and applies to data transfer between the EC2 instances in the private subnet and S3.
A) Using a NAT instance in public subnet still routes through NAT and incurs data processing/NAT costs; not most cost-effective.
B) NAT in private subnet with public subnet route is misconfigured and unnecessary; also does not reduce egress costs.
D) Adding a second NAT gateway increases cost and does not reduce data transfer charges.



A company uses Amazon S3 to store high-resolution pictures in an S3 bucket. To minimize application changes, the company stores the pictures as the latest version of an S3 object. The company needs to retain only the two most recent versions of the pictures.
The company wants to reduce costs. The company has identified the S3 bucket as a large expense.
Which solution will reduce the S3 costs with the LEAST operational overhead?

  1. Use S3 Lifecycle to delete expired object versions and retain the two most recent versions.
  2. Use an AWS Lambda function to check for older versions and delete all but the two most recent versions.
  3. Use S3 Batch Operations to delete noncurrent object versions and retain only the two most recent versions.
  4. Deactivate versioning on the S3 bucket and retain the two most recent versions.

Answer(s): A

Explanation:

S) A) Reason: S3 Lifecycle can be configured to automatically expire noncurrent object versions, preserving only the two most recent, reducing storage costs with minimal management. B) Requires custom Lambda scheduling and per-object version handling, adding operational overhead and potential gaps. C) S3 Batch Operations would require listing all versions and issuing batch deletes, which is more complex and less cost-efficient for per-version lifecycle. D) Deactivating versioning would not preserve the two most recent versions and would remove versioning capability, not a cost-reduction mechanism.



A company needs to minimize the cost of its 1 Gbps AWS Direct Connect connection. The company's average connection utilization is less than 10%. A solutions architect must recommend a solution that will reduce the cost without compromising security.
Which solution will meet these requirements?

  1. Set up a new 1 Gbps Direct Connect connection. Share the connection with another AWS account.
  2. Set up a new 200 Mbps Direct Connect connection in the AWS Management Console.
  3. Contact an AWS Direct Connect Partner to order a 1 Gbps connection. Share the connection with another AWS account.
  4. Contact an AWS Direct Connect Partner to order a 200 Mbps hosted connection for an existing AWS account.

Answer(s): D

Explanation:

A) Setting up a new 1 Gbps Direct Connect and sharing with another account does not reduce the cost of a dedicated 1 Gbps link; shared connections via Direct Connect Partners or hosted options are the path to cost savings.
B) A 200 Mbps link reduces capacity and may not meet the required 1 Gbps connection, risking performance and security alignment for a 1 Gbps path.
C) A Direct Connect Partner offering a 1 Gbps shared connection may reduce cost, but the question specifies hosted arrangement for an existing account is preferred for cost optimization and security boundaries.
D) A 200 Mbps hosted connection for an existing account provides cost savings while maintaining Direct Connect security and access controls, aligning with utilization <10%.



A company has multiple Windows file servers on premises. The company wants to migrate and consolidate its files into an Amazon FSx for Windows File Server file system. File permissions must be preserved to ensure that access rights do not change.
Which solutions will meet these requirements? (Choose two.)

  1. Deploy AWS DataSync agents on premises. Schedule DataSync tasks to transfer the data to the FSx for Windows File Server file system.
  2. Copy the shares on each file server into Amazon S3 buckets by using the AWS CLI. Schedule AWS DataSync tasks to transfer the data to the FSx for Windows File Server file system.
  3. Remove the drives from each file server. Ship the drives to AWS for import into Amazon S3. Schedule AWS DataSync tasks to transfer the data to the FSx for Windows File Server file system.
  4. Order an AWS Snowcone device. Connect the device to the on-premises network. Launch AWS DataSync agents on the device. Schedule DataSync tasks to transfer the data to the FSx for Windows File Server file system.
  5. Order an AWS Snowball Edge Storage Optimized device. Connect the device to the on-premises network. Copy data to the device by using the AWS CLI. Ship the device back to AWS for import into Amazon S3. Schedule AWS DataSync tasks to transfer the data to the FSx for Windows File Server file system.

Answer(s): A,D

Explanation:

DataSync with on-premises agents preserves file permissions when migrating to FSx for Windows File Server, and using a local AWS DataSync appliance/device (on-prem) satisfies bandwidth and permissions preservation requirements.
A) Correct: On-prem DataSync agents transfer data directly to FSx for Windows File Server while preserving NTFS permissions and ACLs.
B) Incorrect: Copying to S3 first and then DataSync to FSx can complicate permissions preservation and adds unnecessary steps.
C) Incorrect: Importing drives to S3 is indirect and not suited for preserving Windows ACLs during migration to FSx.
D) Correct: Snowcone with DataSync on-prem offers edge transfer and preserves permissions when migrating to FSx.
E) Incorrect: Snowball Edge path targets S3, then DataSync—suboptimal for preserving Windows permissions and adds complexity.



Viewing page 101 of 205
Viewing questions 501 - 505 out of 1019 questions


Post your Comments and Discuss Amazon SAA-C03 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!