Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. Amazon
  5. SAA-C03

Amazon SAA-C03 Exam Questions
AWS Certified Solutions Architect - Associate SAA-C03 (Page 39 )

Updated On: 31-Mar-2026
Page 39 of 205
PDF with 824 Questions

A company has a Windows-based application that must be migrated to AWS. The application requires the use of a shared Windows file system attached to multiple Amazon EC2 Windows instances that are deployed across multiple Availability Zone:
What should a solutions architect do to meet this requirement?

  1. Configure AWS Storage Gateway in volume gateway mode. Mount the volume to each Windows instance.
  2. Configure Amazon FSx for Windows File Server. Mount the Amazon FSx file system to each Windows instance.
  3. Configure a file system by using Amazon Elastic File System (Amazon EFS). Mount the EFS file system to each Windows instance.
  4. Configure an Amazon Elastic Block Store (Amazon EBS) volume with the required size. Attach each EC2 instance to the volume. Mount the file system within the volume to each Windows instance.

Answer(s): B

Explanation:

Amazon FSx for Windows File Server provides a managed, shared Windows file system accessible concurrently from multiple EC2 Windows instances across AZs, meeting the requirement.
A) AWS Storage Gateway in volume gateway mode is for on-premises integration or hybrid storage, not a native shared file system across EC2s across AZs.
C) EFS is not optimal for Windows-native SMB workloads and has higher latency/compatibility concerns on Windows compared to FSx for Windows.
D) EBS volumes cannot be shared among multiple EC2 instances; they are block storage attached to a single instance (or via clustering, not directly shared across AZs in this scenario).
B) correct: FSx for Windows File Server is designed for this use case.



A company is developing an ecommerce application that will consist of a load-balanced front end, a container-based application, and a relational database. A solutions architect needs to create a highly available solution that operates with as little manual intervention as possible.
Which solutions meet these requirements? (Choose two.)

  1. Create an Amazon RDS DB instance in Multi-AZ mode.
  2. Create an Amazon RDS DB instance and one or more replicas in another Availability Zone.
  3. Create an Amazon EC2 instance-based Docker cluster to handle the dynamic application load.
  4. Create an Amazon Elastic Container Service (Amazon ECS) cluster with a Fargate launch type to handle the dynamic application load.
  5. Create an Amazon Elastic Container Service (Amazon ECS) cluster with an Amazon EC2 launch type to handle the dynamic application load.

Answer(s): A,D

Explanation:

A) RDS Multi-AZ provides synchronous failover and automatic backups for a relational database, delivering high availability with minimal manual intervention.
D) ECS with Fargate offers serverless compute for containers, automatic scaling, and managed orchestration, enabling a highly available, low-management container deployment.
B) While replicas in another AZ can improve read scalability, it does not guarantee automated failover of the primary and still requires management for writes.
C) EC2-based Docker cluster requires infrastructure management and does not provide the same level of managed high availability as Fargate with ECS.
E) EC2 launch type requires provisioning and managing EC2 instances, increasing management overhead and not as automated as Fargate.



A company uses Amazon S3 as its data lake. The company has a new partner that must use SFTP to upload data files. A solutions architect needs to implement a highly available SFTP solution that minimizes operational overhead.
Which solution will meet these requirements?

  1. Use AWS Transfer Family to configure an SFTP-enabled server with a publicly accessible endpoint. Choose the S3 data lake as the destination.
  2. Use Amazon S3 File Gateway as an SFTP server. Expose the S3 File Gateway endpoint URL to the new partner. Share the S3 File Gateway endpoint with the new partner.
  3. Launch an Amazon EC2 instance in a private subnet in a VPInstruct the new partner to upload files to the EC2 instance by using a VPN. Run a cron job script, on the EC2 instance to upload files to the S3 data lake.
  4. Launch Amazon EC2 instances in a private subnet in a VPC. Place a Network Load Balancer (NLB) in front of the EC2 instances. Create an SFTP listener port for the NLB. Share the NLB hostname with the new partner. Run a cron job script on the EC2 instances to upload files to the S3 data lake.

Answer(s): A

Explanation:

AWS Transfer Family provides a managed, highly available SFTP service with an S3 backend, eliminating the need to manage servers and infrastructure, meeting high availability and low operational overhead. A) uses this fully managed service with a public endpoint and S3 as the destination, delivering HA and minimal ops. B) S3 File Gateway is for on-premises file access with a cached gateway and does not support SFTP natively; not suitable for partner SFTP needs. C) and D) require managing EC2, networking, and cron-based uploads, increasing maintenance and potential failure points. Thus A is the correct, most resilient option.



A company needs to store contract documents. A contract lasts for 5 years. During the 5-year period, the company must ensure that the documents cannot be overwritten or deleted. The company needs to encrypt the documents at rest and rotate the encryption keys automatically every year.
Which combination of steps should a solutions architect take to meet these requirements with the LEAST operational overhead? (Choose two.)

  1. Store the documents in Amazon S3. Use S3 Object Lock in governance mode.
  2. Store the documents in Amazon S3. Use S3 Object Lock in compliance mode.
  3. Use server-side encryption with Amazon S3 managed encryption keys (SSE-S3). Configure key rotation.
  4. Use server-side encryption with AWS Key Management Service (AWS KMS) customer managed keys. Configure key rotation.
  5. Use server-side encryption with AWS Key Management Service (AWS KMS) customer provided (imported) keys. Configure key rotation.

Answer(s): B,D

Explanation:

S3 Object Lock in compliance mode with S3 storage ensures immutability for the 5-year retention period, and S3 managed keys with KMS customer managed keys with automatic rotation provides at-rest encryption with automated key rotation for long-term data. A is governance mode allows override and does not guarantee immutability for the full period. C uses SSE-S3 with no key rotation control by customer; no immutability guarantee. E uses imported keys which require manual rotation and key management outside AWS; higher overhead and not the best fit for automatic rotation. D provides strong encryption with automated rotation; B ensures non-erasable retention.



A company has a web application that is based on Java and PHP. The company plans to move the application from on premises to AWS. The company needs the ability to test new site features frequently. The company also needs a highly available and managed solution that requires minimum operational overhead.
Which solution will meet these requirements?

  1. Create an Amazon S3 bucket. Enable static web hosting on the S3 bucket. Upload the static content to the S3 bucket. Use AWS Lambda to process all dynamic content.
  2. Deploy the web application to an AWS Elastic Beanstalk environment. Use URL swapping to switch between multiple Elastic Beanstalk environments for feature testing.
  3. Deploy the web application to Amazon EC2 instances that are configured with Java and PHP. Use Auto Scaling groups and an Application Load Balancer to manage the website’s availability.
  4. Containerize the web application. Deploy the web application to Amazon EC2 instances. Use the AWS Load Balancer Controller to dynamically route traffic between containers that contain the new site features for testing.

Answer(s): B

Explanation:

The correct answer is B because Elastic Beanstalk provides a fully managed platform for Java/PHP apps with automated provisioning, monitoring, and scaling, enabling frequent feature testing via multiple environments and URL swapping, with minimal operational overhead.
A is incorrect because S3 static hosting with Lambda for dynamic content is not a managed Java/PHP web app solution and lacks full server runtime management and easy feature-branch testing.
C is incorrect due to higher operational overhead from managing EC2, as well as manual scaling and patching, not as suitable for rapid feature testing.
D is incorrect because routing between containers on EC2 adds complexity; Elastic Beanstalk abstracts this, offering simpler CI/CD-like environment swapping.



Viewing page 39 of 205
Viewing questions 191 - 195 out of 824 questions



Post your Comments and Discuss Amazon SAA-C03 exam dumps with other Community members:

SAA-C03 Exam Discussions & Posts

AI Tutor 👋 I’m here to help!