Free SAA-C03 Exam Braindumps
AWS Certified Solutions Architect - Associate SAA-C03 Questions 511–515 (page: 104)

Updated On: 16-Mar-2026

A company is developing software that uses a PostgreSQL database schema. The company needs to configure multiple development environments and databases for the company's developers. On average, each development environment is used for half of the 8-hour workday.
Which solution will meet these requirements MOST cost-effectively?

  1. Configure each development environment with its own Amazon Aurora PostgreSQL database
  2. Configure each development environment with its own Amazon RDS for PostgreSQL Single-AZ DB instances
  3. Configure each development environment with its own Amazon Aurora On-Demand PostgreSQL-Compatible database
  4. Configure each development environment with its own Amazon S3 bucket by using Amazon S3 Object Select

Answer(s): C

Explanation:

The correct answer is C. Aurora On-Demand PostgreSQL-Compatible database provides a serverless-like on-demand provisioning model with cost-based scaling and per-second billing, fitting multiple development environments used only part of the day, minimizing idle cost.
A) Aurora PostgreSQL database is not on-demand serverless; higher ongoing costs for regularly idle environments.
B) RDS Single-AZ DB instances incur ongoing compute/storage costs even when environments are unused.
D) S3 with Object Select does not provide a relational database; it cannot serve as a PostgreSQL-compatible database for development environments.



A company uses AWS Organizations with resources tagged by account. The company also uses AWS Backup to back up its AWS infrastructure resources. The company needs to back up all AWS resources.
Which solution will meet these requirements with the LEAST operational overhead?

  1. Use AWS Config to identify all untagged resources. Tag the identified resources programmatically. Use tags in the backup plan.
  2. Use AWS Config to identify all resources that are not running. Add those resources to the backup vault.
  3. Require all AWS account owners to review their resources to identify the resources that need to be backed up.
  4. Use Amazon Inspector to identify all noncompliant resources.

Answer(s): A

Explanation:

AWS Config can continuously discover and track resources and their tags across accounts via Organizations, enabling automated tagging of all resources and applying those tags in AWS Backup plans, meeting “back up all resources” with minimal manual effort.
A) correct: leverages Config to find untagged resources, tags them, and uses those tags in backup plans, enabling coverage across accounts with low overhead.
B) incorrect: identifies non-running resources, which are not the same as all resources to back up; backups target existing resources regardless of state.
C) incorrect: relies on manual review by each account owner, incurring high operational overhead and risk of gaps.
D) incorrect: Inspector identifies security/compliance issues, not all resources to back up.



A social media company wants to allow its users to upload images in an application that is hosted in the AWS Cloud. The company needs a solution that automatically resizes the images so that the images can be displayed on multiple device types. The application experiences unpredictable traffic patterns throughout the day. The company is seeking a highly available solution that maximizes scalability.
What should a solutions architect do to meet these requirements?

  1. Create a static website hosted in Amazon S3 that invokes AWS Lambda functions to resize the images and store the images in an Amazon S3 bucket.
  2. Create a static website hosted in Amazon CloudFront that invokes AWS Step Functions to resize the images and store the images in an Amazon RDS database.
  3. Create a dynamic website hosted on a web server that runs on an Amazon EC2 instance. Configure a process that runs on the EC2 instance to resize the images and store the images in an Amazon S3 bucket.
  4. Create a dynamic website hosted on an automatically scaling Amazon Elastic Container Service (Amazon ECS) cluster that creates a resize job in Amazon Simple Queue Service (Amazon SQS). Set up an image-resizing program that runs on an Amazon EC2 instance to process the resize jobs.

Answer(s): A

Explanation:

A) The combination of a static website in S3 with Lambda functions for on-the-fly image resizing and S3 storage provides serverless scalability, high availability, and automatic scaling to handle unpredictable traffic. Lambda functions can be triggered by S3 uploads or API gateway events, and S3 provides durable storage suitable for resized images.
B) CloudFront with Step Functions and RDS is overcomplicated; Step Functions are for orchestration, not needed for simple resizing, and RDS is not ideal for image storage or scalable processing.
C) A single EC2-based dynamic site lacks automatic scaling and resilience to traffic spikes, increasing operational risk and cost.
D) ECS with SQS introduces unnecessary orchestration and EC2 dependency, reducing simplicity and scalability.



A company is running a microservices application on Amazon EC2 instances. The company wants to migrate the application to an Amazon Elastic Kubernetes Service (Amazon EKS) cluster for scalability. The company must configure the Amazon EKS control plane with endpoint private access set to true and endpoint public access set to false to maintain security compliance. The company must also put the data plane in private subnets. However, the company has received error notifications because the node cannot join the cluster.
Which solution will allow the node to join the cluster?

  1. Grant the required permission in AWS Identity and Access Management (IAM) to the AmazonEKSNodeRole IAM role.
  2. Create interface VPC endpoints to allow nodes to access the control plane.
  3. Recreate nodes in the public subnet. Restrict security groups for EC2 nodes.
  4. Allow outbound traffic in the security group of the nodes.

Answer(s): B

Explanation:

The correct answer is B. Creating interface VPC endpoints allows private subnets to reach the EKS control plane without public Internet access, enabling nodes to join the cluster while endpointPrivateAccess=true and endpointPublicAccess=false.
A is incorrect because NodeRole permissions are insufficient alone to enable control-plane connectivity; networking reachability via VPC endpoints is required when private access is enforced.
C is incorrect because using public subnets contradicts the private data plane requirement and does not address the control plane connectivity via private endpoints.
D is incorrect because outbound rules alone do not ensure connectivity to the private control plane; VPC endpoints provide the necessary private network path.



A company is migrating an on-premises application to AWS. The company wants to use Amazon Redshift as a solution.
Which use cases are suitable for Amazon Redshift in this scenario? (Choose three.)

  1. Supporting data APIs to access data with traditional, containerized, and event-driven applications
  2. Supporting client-side and server-side encryption
  3. Building analytics workloads during specified hours and when the application is not active
  4. Caching data to reduce the pressure on the backend database
  5. Scaling globally to support petabytes of data and tens of millions of requests per minute
  6. Creating a secondary replica of the cluster by using the AWS Management Console

Answer(s): B,C,E

Explanation:

Redshift is suitable for analytics workloads, large-scale data warehousing, and global scaling, making B, C, and E correct.
A) Incorrect: Redshift is for analytics workloads, not primarily for data APIs serving operational apps. Data APIs can be used with Redshift but not the core suitability.
B) Correct: Redshift supports encryption at-rest and in-transit to protect data stored in and transmitted to the data warehouse.
C) Correct: Redshift is optimized for scheduled analytics and batch processing during off-peak windows.
D) Incorrect: Redshift is not a caching layer; use services like DynamoDB DAX or ElastiCache for caching.
F) Incorrect: Creating a secondary replica is not the typical or primary method for scale in Redshift; cross-region or concurrency scaling is managed differently.



Viewing page 104 of 205
Viewing questions 516 - 520 out of 1019 questions


Post your Comments and Discuss Amazon SAA-C03 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!