A company has registered its domain name with Amazon Route 53. The company uses Amazon API Gateway in the ca-central-1 Region as a public interface for its backend microservice APIs. Third-party services consume the APIs securely. The company wants to design its API Gateway URL with the company's domain name and corresponding certificate so that the third-party services can use HTTPS.Which solution will meet these requirements?
Answer(s): C
A) Incorrect. Stage variables cannot overwrite the base API URL to use a custom domain; ACM certificate must be attached at API Gateway custom domain, not via stage variables.B) Incorrect. DNS alias to a Regional API Gateway endpoint is valid, but ACM certificate must be issued and associated via a Custom Domain Name in the same region; cross-region requirement and certificate handling are not satisfied as stated.C) Correct. Use a Regional API Gateway endpoint with a Custom Domain Name and ACM certificate in the same region, attach the certificate to the custom domain, and Route 53 routes traffic to that endpoint, enabling HTTPS with the company domain.D) Incorrect. ACM certificate must be attached to a Custom Domain Name, not directly to APIs; also A records alone to a domain require proper custom domain mapping in API Gateway.
A company is running a popular social media website. The website gives users the ability to upload images to share with other users. The company wants to make sure that the images do not contain inappropriate content. The company needs a solution that minimizes development effort.What should a solutions architect do to meet these requirements?
Answer(s): B
Amazon Rekognition provides built-in image moderation with pre-trained content classifiers suitable for user-uploaded images and minimizes development effort; low-confidence predictions can be routed to human review. A) Comprehend is for text, not image content. C) SageMaker requires building/training a model, increasing effort. D) Fargate with a custom model adds unnecessary complexity compared to managed Rekognition. A and C also misalign with image content detection scope or require more customization. B correctly uses a managed service for image moderation with optional human review for uncertain cases.
A company wants to run its critical applications in containers to meet requirements for scalability and availability. The company prefers to focus on maintenance of the critical applications. The company does not want to be responsible for provisioning and managing the underlying infrastructure that runs the containerized workload.What should a solutions architect do to meet these requirements?
F) The correct answer is C. Using Amazon ECS on AWS Fargate runs containers without managing underlying servers, aligning with the requirement to avoid provisioning and managing infrastructure.A) ECS on EC2 requires managing EC2 instances and Docker runtime, increasing maintenance.B) ECS on EC2 again delegates to EC2 hosts you must manage, not meeting the no-infrastructure-management goal.D) ECS-optimized AMI on EC2 still requires patching and managing the EC2 instances and OS.
A company hosts more than 300 global websites and applications. The company requires a platform to analyze more than 30 TB of clickstream data each day.What should a solutions architect do to transmit and process the clickstream data?
Answer(s): D
Collecting with Kinesis Data Streams and delivering via Kinesis Data Firehose to an S3 data lake provides scalable, real-time ingest for large-scale clickstream data and seamless loading into Redshift for analytics.A) Data Pipeline is deprecated for new workloads; EMR processing after archiving adds latency and complexity.B) Auto Scaling EC2 approach lacks managed streaming and built-in real-time ingestion; Redshift requires ETL steps not streamlined here.C) CloudFront caching is for content delivery, not durable data capture; Serverless Lambda processing is not suited for 30 TB/day streaming without complex orchestration.D) Correct: end-to-end managed streaming with Kinesis, durable S3 lake, and Redshift analytics.
A company has a website hosted on AWS. The website is behind an Application Load Balancer (ALB) that is configured to handle HTTP and HTTPS separately. The company wants to forward all requests to the website so that the requests will use HTTPS.What should a solutions architect do to meet this requirement?
A) Create a listener rule on the ALB to redirect HTTP traffic to HTTPS.C) Correct because ALB listener rules can perform redirects from HTTP to HTTPS, ensuring all traffic uses TLS without changing clients. This keeps end-to-end encryption and uses the appropriate 301/302 redirect to the HTTPS endpoint.B) Replacing HTTP in the URL is not a built-in ALB capability; ALB cannot modify schemes by string replacement in requests.A) Updating network ACLs to only allow HTTPS disrupts legitimate initial connections and does not guarantee proper TLS termination or redirects at the ALB.D) Replacing with a Network Load Balancer does not provide an application-layer redirect capability to enforce HTTPS and SNI is not relevant to this requirement.
Post your Comments and Discuss Amazon SAA-C03 exam prep with other Community members: