A company runs a web application on Amazon EC2 instances in multiple Availability Zones. The EC2 instances are in private subnets. A solutions architect implements an internet-facing Application Load Balancer (ALB) and specifies the EC2 instances as the target group. However, the internet traffic is not reaching the EC2 instances.How should the solutions architect reconfigure the architecture to resolve this issue?
Answer(s): D
The ALB must be Internet-facing and able to reach targets in private subnets via subnets with proper routing and an attached Internet gateway. Creating public subnets in each AZ, associating them with the ALB, and ensuring the public subnets have routes to the Internet Gateway while private subnets remain for the EC2 instances allows the ALB to be reachable from the Internet and proxy traffic to private targets.A) Not necessary; NLB is not required, and NAT gateway doesn’t enable inbound internet reach to ALB targets. B) Moving instances to public subnets is unnecessary and exposes more surface area; SG outbound rule alone doesn’t fix reachability. C) Altering private subnet routes to Internet Gateway breaks private design and is incorrect; ALB must be in public subnets.
A company has deployed a database in Amazon RDS for MySQL. Due to increased transactions, the database support team is reporting slow reads against the DB instance and recommends adding a read replica.Which combination of actions should a solutions architect take before implementing this change? (Choose two.)
Answer(s): C,E
Reads increased data requires ensuring replication and backups are stable before creating a read replica. C) Allow long-running transactions to complete on the source DB instance: prevents long-running transactions from blocking replication threads and binlog flushing, ensuring consistent replication to the read replica. E) Enable automatic backups on the source instance by setting a non-zero backup retention period: required for creating read replicas, as RDS uses automated backups and transaction logs to seed and keep replicas in sync. A) is incorrect because binlog replication is managed by RDS automatically; B) pertains to Multi-AZ failover, not read replicas; D) is for DynamoDB global tables, not RDS.
A company runs analytics software on Amazon EC2 instances. The software accepts job requests from users to process data that has been uploaded to Amazon S3. Users report that some submitted data is not being processed Amazon CloudWatch reveals that the EC2 instances have a consistent CPU utilization at or near 100%. The company wants to improve system performance and scale the system based on user load.What should a solutions architect do to meet these requirements?
A solution that scales with load and reduces EC2 CPU contention is to decouple work via a queue and scale workers accordingly.A) Creating a copy behind an ALB does not address CPU bottlenecks or auto scaling based on demand; it simply increases instances without a scalable trigger.B) S3 VPC endpoints optimize S3 access but do not alleviate compute bottlenecks or provide autoscaling tied to workload.C) Upgrading instance type reduces CPU pressure temporarily but is not dynamic scaling and can be cost-inefficient; fails to auto-scale with demand.D) SQS with an Auto Scaling group scales workers based on queue depth, aligning compute resources with workload and improving throughput.
A company is implementing a shared storage solution for a media application that is hosted in the AWS Cloud. The company needs the ability to use SMB clients to access data. The solution must be fully managed.Which AWS solution meets these requirements?
AWS FSx for Windows File Server is a fully managed Windows-native SMB file system, which meets the requirement for SMB access with a fully managed service.A) Incorrect because Storage Gateway file shares are not as fully managed as FSx; setup involves gateway appliance and may require on-prem-like maintenance and management overhead.B) Incorrect because Tape Gateway provides archival storage, not active SMB file shares for general storage access.C) Incorrect because running a self-managed Windows file server on EC2 adds operational burden and is not a fully managed service.D) Correct because FSx for Windows File Server delivers managed SMB file shares with Windows-compatible permissions and performance for a media application.
A company’s security team requests that network traffic be captured in VPC Flow Logs. The logs will be frequently accessed for 90 days and then accessed intermittently.What should a solutions architect do to meet these requirements when configuring the logs?
Using S3 with a lifecycle policy aligns with access patterns: frequent access for 90 days, then infrequent thereafter. S3 Lifecycle can transition to S3 Standard-IA after 90 days, reducing cost while preserving immediate availability when needed. It also keeps logs durable and searchable via S3, suitable for VPC Flow Logs delivery (target is S3).A) CloudWatch logs are costlier for long-term storage; not optimized for 90-day hot/IA pattern. B) Kinesis is unnecessary for retention and adds cost for passive storage. C) CloudTrail is for API activity, not VPC Flow Logs delivery target, and S3 is preferred for large, durable storage.
Post your Comments and Discuss Amazon SAA-C03 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SAA-C03 content, but please register or login to continue.