A solutions architect is implementing a document review application using an Amazon S3 bucket for storage. The solution must prevent accidental deletion of the documents and ensure that all versions of the documents are available. Users must be able to download, modify, and upload documents.Which combination of actions should be taken to meet these requirements? (Choose two.)
Answer(s): B,D
Enabling versioning ensures all object versions are preserved and recoverable, meeting the “all versions available” requirement. Enabling MFA Delete adds protection against accidental deletion, fulfilling the “prevent accidental deletion” condition when combined with versioning. A) Read-only bucket ACL would prevent users from uploading or modifying, contradicting the requirement for download/modify/upload. C) An IAM policy to the bucket alone does not by itself prevent deletions or ensure versioning state; policy must be paired with versioning and access controls. E) Server-side encryption (KMS) protects data at rest but does not address deletion protection or versioning guarantees.
A company is building a solution that will report Amazon EC2 Auto Scaling events across all the applications in an AWS account. The company needs to use a serverless solution to store the EC2 Auto Scaling status data in Amazon S3. The company then will use the data in Amazon S3 to provide near-real-time updates in a dashboard. The solution must not affect the speed of EC2 instance launches.How should the company move the data to Amazon S3 to meet these requirements?
Answer(s): A
A) Correct. CloudWatch metric streams can reliably stream EC2 Auto Scaling status metrics in near real-time to Kinesis Data Firehose, which then writes to S3 without impacting instance launch speeds, providing serverless, scalable ingestion for dashboards.B) EMR adds unnecessary provisioning and latency; not serverless and could impact data freshness and cost for simple metric streaming.C) EventBridge with scheduled Lambda introduces latency and polling gaps; not ideal for near-real-time Auto Scaling events and adds Lambda execution overhead.D) Bootstrap with Kinesis Agent runs on each instance; violates serverless requirement and could impose overhead during instance launches and scaling.
A company has an application that places hundreds of .csv files into an Amazon S3 bucket every hour. The files are 1 GB in size. Each time a file is uploaded, the company needs to convert the file to Apache Parquet format and place the output file into an S3 bucket.Which solution will meet these requirements with the LEAST operational overhead?
Answer(s): D
The ETL job in AWS Glue handles large CSV-to-Parquet conversions with serverless, scalable orchestration and minimal operational overhead, triggered by S3 events.A) Lambda per event would be inefficient for 1 GB files; Lambda has short execution limits and higher overhead for large data processing. B) Spark job with per-event invocation adds extra orchestration and infrastructure management; not as low-overhead as Glue ETL. C) Athena/Glue crawler approach adds unnecessary steps, uses query results rather than direct file transformation, increasing latency and cost. D) Glue ETL job directly processes CSVs to Parquet in a managed, serverless ETL pipeline, and is invoked by S3 events for scalable, low-maintenance operation.
A company is implementing new data retention policies for all databases that run on Amazon RDS DB instances. The company must retain daily backups for a minimum period of 2 years. The backups must be consistent and restorable.Which solution should a solutions architect recommend to meet these requirements?
A) Creates a centralized, durable backup vault and automatic, compliant retention for RDS backups via AWS Backup, ensuring daily backups are retained for 2 years and remain restorable.B) RDS daily snapshots with a 2-year retention via DLM is not applicable to RDS backups; DLM primarily manages EBS snapshots, not managed RDS automated backups.C) Transaction log backups to CloudWatch Logs do not provide full-database point-in-time restore for RDS; this option does not guarantee complete, restorable daily backups for all RDS engines.D) DMS CDC to S3 with lifecycle policies retains changes, not full daily backups; restoration from CDC-derived data is not equivalent to RDS automated backups.
A company’s compliance team needs to move its file shares to AWS. The shares run on a Windows Server SMB file share. A self-managed on-premises Active Directory controls access to the files and folders.The company wants to use Amazon FSx for Windows File Server as part of the solution. The company must ensure that the on-premises Active Directory groups restrict access to the FSx for Windows File Server SMB compliance shares, folders, and files after the move to AWS. The company has created an FSx for Windows File Server file system.Which solution will meet these requirements?
The correct answer is D. Joining the FSx for Windows File Server file system to the on‑premises Active Directory enables AD-based permissions (groups, SACLs, NTFS permissions) to govern SMB access, preserving existing compliance controls.Why the others are incorrect:A) Active Directory Connector is for AWS Managed Microsoft AD integration with S3, not for directly applying on-prem AD ACLs to FSx; mapping AD groups to IAM groups does not affect SMB permissions.B) Tag-based access control does not enforce SMB/NTFS permissions or AD group membership for FSx shares.C) An IAM service‑linked role controls AWS service permissions, not SMB file share access or on‑prem AD group authorization.
Post your Comments and Discuss Amazon SAA-C03 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SAA-C03 content, but please register or login to continue.