A social media company is building a feature for its website. The feature will give users the ability to upload photos. The company expects significant increases in demand during large events and must ensure that the website can handle the upload traffic from users.Which solution meets these requirements with the MOST scalability?
Answer(s): C
The correct answer is C. Presigned URLs allow clients to upload directly to S3 without going through the application server, enabling client-side uploads with scalable, burstable throughput and offloading work from the app layer.A) Requires uploads to go through application servers, creating a bottleneck during spikes and reducing scalability. B) Storage Gateway is not designed for browser-based direct uploads and adds latency; not as scalable for web-scale bursts. D) EFS is a scalable file system for EC2, not optimized for public web browser uploads and S3-backed object storage; less suitable for global, scalable web app uploads.
A company has a web application for travel ticketing. The application is based on a database that runs in a single data center in North America. The company wants to expand the application to serve a global user base. The company needs to deploy the application to multiple AWS Regions. Average latency must be less than 1 second on updates to the reservation database.The company wants to have separate deployments of its web platform across multiple Regions. However, the company must maintain a single primary reservation database that is globally consistent.Which solution should a solutions architect recommend to meet these requirements?
Answer(s): A
Global low-latency updates with strong cross-region consistency and a single writable source point point to DynamoDB global tables. A) DynamoDB global tables provide multi-region, fully replicated, low-latency writes with a single primary data model and automatic conflict resolution, meeting <1s latency for updates and global consistency. B) Aurora MySQL in multiple regions introduces asynchronous cross-region replication delays and read replicas do not provide globally consistent single primary; writes are region-scoped. C) RDS MySQL in multiple regions fails to provide global consistency with a single writable primary; cross-region replication lag harms latency. D) Aurora Serverless in multiple regions still requires complex cross-region synchronization; latency and consistency are not as straightforward as DynamoDB global tables.
A company has migrated multiple Microsoft Windows Server workloads to Amazon EC2 instances that run in the us-west-1 Region. The company manually backs up the workloads to create an image as needed.In the event of a natural disaster in the us-west-1 Region, the company wants to recover workloads quickly in the us-west-2 Region. The company wants no more than 24 hours of data loss on the EC2 instances. The company also wants to automate any backups of the EC2 instances.Which solutions will meet these requirements with the LEAST administrative effort? (Choose two.)
Answer(s): B,D
B) Correct because AWS Backup can automatically back up EC2-backed AMIs on a schedule and copy them to a specified destination region (us-west-2) for DR with minimal admin effort, meeting RPO ≤ 24 hours and automated cross-region replication.D) Correct because AWS Backup creates a centralized backup plan for EC2 instances with tag-based selection and supports defining a cross-region copy destination (us-west-2) in the backup plan, achieving automated DR without extra scripting.A) Incorrect: only schedules and copies on demand; no cross-region copy configuration, not ensuring DR to us-west-2.C) Incorrect: relies on a Lambda copy job rather than native AWS Backup cross-region copy; more operational overhead and potential timing gaps.E) Incorrect: relies on on-demand copy; misses automatic cross-region replication within the backup plan, increasing risk of data loss and admin effort.
A company operates a two-tier application for image processing. The application uses two Availability Zones, each with one public subnet and one private subnet. An Application Load Balancer (ALB) for the web tier uses the public subnets. Amazon EC2 instances for the application tier use the private subnets.Users report that the application is running more slowly than expected. A security audit of the web server log files shows that the application is receiving millions of illegitimate requests from a small number of IP addresses. A solutions architect needs to resolve the immediate performance problem while the company investigates a more permanent solution.What should the solutions architect recommend to meet this requirement?
Answer(s): B
Modifying the web tier’s network ACL (NACL) to add inbound deny rules blocks traffic at the subnet level before it reaches the ALB, reducing load quickly without affecting outbound responses or other traffic. NACLs are stateless and evaluated per subnet, making them effective for whitelisting/blacklisting large bursts from specific IPs, providing an immediate throttling mechanism during an attack.A) Security groups are stateful and apply to instances; blocking at the web tier SG wouldn’t stop lingering connections at the ALB or upstream traffic efficiently.C) Blocking at the application tier SG targets internal resources, not the public traffic causing load.D) Blocking at the application tier NACL is too late; frontend traffic already hits the ALB and web tier.
A global marketing company has applications that run in the ap-southeast-2 Region and the eu-west-1 Region. Applications that run in a VPC in eu-west-1 need to communicate securely with databases that run in a VPC in ap-southeast-2.Which network design will meet these requirements?
A) Incorrect: VPC peering requires security groups referencing IPs for inbound rules in the peers; best practice is to reference security group IDs, and the option misstates traffic direction and rule setup.B) Incorrect: Inbound rule should reference the application security group in eu-west-1, not the ap-southeast-2 database security group; routing is cross-region, but the rule direction is wrong.C) Correct: Establishes a VPC peering between the two regions and updates route tables so traffic between VPCs remains on the AWS backbone; inbound rule on the ap-southeast-2 database security group references the eu-west-1 application security group, enabling secure cross-region communication with proper security group-based access control.D) Incorrect: Transit Gateway is not required for just two VPCs; adds unnecessary complexity and cost; peering with correct route propagation suffices.
Post your Comments and Discuss Amazon SAA-C03 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SAA-C03 content, but please register or login to continue.