Free SAA-C03 Exam Braindumps
AWS Certified Solutions Architect - Associate SAA-C03 Questions 201–205 (page: 42)

Updated On: 16-Mar-2026

A company is developing a marketing communications service that targets mobile app users. The company needs to send confirmation messages with Short Message Service (SMS) to its users. The users must be able to reply to the SMS messages. The company must store the responses for a year for analysis.
What should a solutions architect do to meet these requirements?

  1. Create an Amazon Connect contact flow to send the SMS messages. Use AWS Lambda to process the responses.
  2. Build an Amazon Pinpoint journey. Configure Amazon Pinpoint to send events to an Amazon Kinesis data stream for analysis and archiving.
  3. Use Amazon Simple Queue Service (Amazon SQS) to distribute the SMS messages. Use AWS Lambda to process the responses.
  4. Create an Amazon Simple Notification Service (Amazon SNS) FIFO topic. Subscribe an Amazon Kinesis data stream to the SNS topic for analysis and archiving.

Answer(s): B

Explanation:

SMS two-way messaging with archival for analysis best supported by Amazon Pinpoint, which can send SMS to mobile users, receive replies, and provide analytics/telemetry that can be exported for long-term storage. Option B uses a Pinpoint journey and can configure events for analysis and archiving via a Kinesis data stream. A) Connect is for contact center interactions, not ideal for marketing SMS with long-term reply storage. C) SQS/Lambda would require building two-way SMS handling manually and lacks native customer engagement analytics. D) SNS FIFO with Kinesis provides messaging but not built-in two-way SMS capabilities or targeted marketing journeys.



A company is planning to move its data to an Amazon S3 bucket. The data must be encrypted when it is stored in the S3 bucket. Additionally, the encryption key must be automatically rotated every year.
Which solution will meet these requirements with the LEAST operational overhead?

  1. Move the data to the S3 bucket. Use server-side encryption with Amazon S3 managed encryption keys (SSE-S3). Use the built-in key rotation behavior of SSE-S3 encryption keys.
  2. Create an AWS Key Management Service (AWS KMS) customer managed key. Enable automatic key rotation. Set the S3 bucket’s default encryption behavior to use the customer managed KMS key. Move the data to the S3 bucket.
  3. Create an AWS Key Management Service (AWS KMS) customer managed key. Set the S3 bucket’s default encryption behavior to use the customer managed KMS key. Move the data to the S3 bucket. Manually rotate the KMS key every year.
  4. Encrypt the data with customer key material before moving the data to the S3 bucket. Create an AWS Key Management Service (AWS KMS) key without key material. Import the customer key material into the KMS key. Enable automatic key rotation.

Answer(s): B

Explanation:

Using SSE-KMS with a CMK and enabling automatic rotation provides at-rest encryption with server-side handling and annual automatic rotation, minimizing operational overhead.
A) SSE-S3 uses S3-managed keys without automatic rotation control; no annual rotation specified, and provides less control over lifecycle.
C) Requires manual yearly rotation—introduces operational overhead and risk of misrotation; does not leverage automatic KMS rotation.
D) Encrypting client-side before upload adds complexity; importing key material and managing rotation within KMS is not as seamless as using a CMK with S3 default encryption and automatic KMS rotation.
B) Correct: CMK with automatic rotation and S3 default encryption meets encryption at rest with minimal admin effort.



The customers of a finance company request appointments with financial advisors by sending text messages. A web application that runs on Amazon EC2 instances accepts the appointment requests. The text messages are published to an Amazon Simple Queue Service (Amazon SQS) queue through the web application. Another application that runs on EC2 instances then sends meeting invitations and meeting confirmation email messages to the customers. After successful scheduling, this application stores the meeting information in an Amazon DynamoDB database.
As the company expands, customers report that their meeting invitations are taking longer to arrive.
What should a solutions architect recommend to resolve this issue?

  1. Add a DynamoDB Accelerator (DAX) cluster in front of the DynamoDB database.
  2. Add an Amazon API Gateway API in front of the web application that accepts the appointment requests.
  3. Add an Amazon CloudFront distribution. Set the origin as the web application that accepts the appointment requests.
  4. Add an Auto Scaling group for the application that sends meeting invitations. Configure the Auto Scaling group to scale based on the depth of the SQS queue.

Answer(s): D

Explanation:

The correct answer is D. Scaling the worker fleet that processes SQS messages based on queue depth reduces backlog and speeds up sending invitations and emails, addressing latency as demand grows.
A) DAX accelerates DynamoDB read performance, not the bottleneck in the email/invitation workflow. B) API Gateway in front of the web app does not address downstream processing delays. C) CloudFront improves static content delivery; it does not reduce latency in backend queue processing and email dispatch.



An online retail company has more than 50 million active customers and receives more than 25,000 orders each day. The company collects purchase data for customers and stores this data in Amazon S3. Additional customer data is stored in Amazon RDS.
The company wants to make all the data available to various teams so that the teams can perform analytics. The solution must provide the ability to manage fine-grained permissions for the data and must minimize operational overhead.
Which solution will meet these requirements?

  1. Migrate the purchase data to write directly to Amazon RDS. Use RDS access controls to limit access.
  2. Schedule an AWS Lambda function to periodically copy data from Amazon RDS to Amazon S3. Create an AWS Glue crawler. Use Amazon Athena to query the data. Use S3 policies to limit access.
  3. Create a data lake by using AWS Lake Formation. Create an AWS Glue JDBC connection to Amazon RDS. Register the S3 bucket in Lake Formation. Use Lake Formation access controls to limit access.
  4. Create an Amazon Redshift cluster. Schedule an AWS Lambda function to periodically copy data from Amazon S3 and Amazon RDS to Amazon Redshift. Use Amazon Redshift access controls to limit access.

Answer(s): C

Explanation:

Creating a data lake with Lake Formation provides centralized, fine-grained access control across S3 and RDS data via Lake Formation permissions, and registers the data sources (S3 and RDS) for unified governance with minimal operational overhead. It simplifies data discovery, audits, and policy management for multiple teams.
A) Incorrect: Direct RDS write with RDS access controls does not cover S3 data, lacks centralized data lake governance, and has higher operational overhead for analytics across data stores.
B) Incorrect: Lambda copy and Glue crawler with Athena still requires separate policy management for S3 and RDS; Lake Formation provides unified fine-grained controls.
D) Incorrect: Redshift approach is unnecessary for a data lake scenario and adds complexity and cost; it’s not the governed, scalable lake solution.



A company hosts a marketing website in an on-premises data center. The website consists of static documents and runs on a single server. An administrator updates the website content infrequently and uses an SFTP client to upload new documents.
The company decides to host its website on AWS and to use Amazon CloudFront. The company’s solutions architect creates a CloudFront distribution. The solutions architect must design the most cost-effective and resilient architecture for website hosting to serve as the CloudFront origin.
Which solution will meet these requirements?

  1. Create a virtual server by using Amazon Lightsail. Configure the web server in the Lightsail instance. Upload website content by using an SFTP client.
  2. Create an AWS Auto Scaling group for Amazon EC2 instances. Use an Application Load Balancer. Upload website content by using an SFTP client.
  3. Create a private Amazon S3 bucket. Use an S3 bucket policy to allow access from a CloudFront origin access identity (OAI). Upload website content by using the AWS CLI.
  4. Create a public Amazon S3 bucket. Configure AWS Transfer for SFTP. Configure the S3 bucket for website hosting. Upload website content by using the SFTP client.

Answer(s): C

Explanation:

CloudFront origin should be a cost-effective, durable, and scalable source; S3 with OAI provides a secure, serverless origin that is cheap and highly available. C uses a private S3 bucket with an origin access identity to restrict CloudFront access, and content is uploaded via AWS CLI, which is appropriate for infrequent updates. A (Lightsail) adds management overhead and is less cost-efficient for a static site behind CloudFront. B (EC2 Auto Scaling + ALB) is overkill for static content and increases maintenance and cost. D (public S3 with AWS Transfer for SFTP) makes the bucket public, undermining CloudFront security and is more complex than needed.



Viewing page 42 of 205
Viewing questions 206 - 210 out of 1019 questions


Post your Comments and Discuss Amazon SAA-C03 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!