Free SAA-C03 Exam Braindumps
AWS Certified Solutions Architect - Associate SAA-C03 Questions 266–270 (page: 55)

Updated On: 16-Mar-2026

A company has a popular gaming platform running on AWS. The application is sensitive to latency because latency can impact the user experience and introduce unfair advantages to some players. The application is deployed in every AWS Region. It runs on Amazon EC2 instances that are part of Auto Scaling groups configured behind Application Load Balancers (ALBs). A solutions architect needs to implement a mechanism to monitor the health of the application and redirect traffic to healthy endpoints.
Which solution meets these requirements?

  1. Configure an accelerator in AWS Global Accelerator. Add a listener for the port that the application listens on, and attach it to a Regional endpoint in each Region. Add the ALB as the endpoint.
  2. Create an Amazon CloudFront distribution and specify the ALB as the origin server. Configure the cache behavior to use origin cache headers. Use AWS Lambda functions to optimize the traffic.
  3. Create an Amazon CloudFront distribution and specify Amazon S3 as the origin server. Configure the cache behavior to use origin cache headers. Use AWS Lambda functions to optimize the traffic.
  4. Configure an Amazon DynamoDB database to serve as the data store for the application. Create a DynamoDB Accelerator (DAX) cluster to act as the in-memory cache for DynamoDB hosting the application data.

Answer(s): A

Explanation:

AWS Global Accelerator provides health checks and automatic rerouting to healthy endpoints across multiple Regions, reducing latency for globally deployed apps behind ALBs and EC2 ASGs. A) uses regional endpoints with ALB health checks to redirect traffic to healthy regions/endpoints. B) CloudFront with Lambda optimizations adds latency and is not primarily for real-time health-based failover across Regions. C) S3 origin is unsuitable for dynamic compute workloads and latency-sensitive gaming traffic. D) DAX accelerates DynamoDB, not EC2-ALB-based workloads or global traffic routing. Hence A is correct because it enables global health-based failover with low latency.



A company has one million users that use its mobile app. The company must analyze the data usage in near-real time. The company also must encrypt the data in near-real time and must store the data in a centralized location in Apache Parquet format for further processing.
Which solution will meet these requirements with the LEAST operational overhead?

  1. Create an Amazon Kinesis data stream to store the data in Amazon S3. Create an Amazon Kinesis Data Analytics application to analyze the data. Invoke an AWS Lambda function to send the data to the Kinesis Data Analytics application.
  2. Create an Amazon Kinesis data stream to store the data in Amazon S3. Create an Amazon EMR cluster to analyze the data. Invoke an AWS Lambda function to send the data to the EMR cluster.
  3. Create an Amazon Kinesis Data Firehose delivery stream to store the data in Amazon S3. Create an Amazon EMR cluster to analyze the data.
  4. Create an Amazon Kinesis Data Firehose delivery stream to store the data in Amazon S3. Create an Amazon Kinesis Data Analytics application to analyze the data.

Answer(s): D

Explanation:

Kinesis Data Firehose with S3 in Parquet and near-real-time analytics via Kinesis Data Analytics minimizes operational overhead by fully managed ingestion, encryption, and delivery to S3, plus built-in integration with analytics. It provides serverless data delivery, automatic partitioning, and near-real-time processing without managing clusters. A) adds unnecessary Lambda detour and uses Kinesis Data Analytics after a stream to push data, increasing complexity. B) uses EMR, a managed cluster requiring provisioning and maintenance. C) uses Firehose to S3 but to analyze data you’d need a separate cluster or tooling; EMR again adds overhead. D leverages fully managed services for end-to-end, low-management pipeline.



A gaming company has a web application that displays scores. The application runs on Amazon EC2 instances behind an Application Load Balancer. The application stores data in an Amazon RDS for MySQL database. Users are starting to experience long delays and interruptions that are caused by database read performance. The company wants to improve the user experience while minimizing changes to the application’s architecture.
What should a solutions architect do to meet these requirements?

  1. Use Amazon ElastiCache in front of the database.
  2. Use RDS Proxy between the application and the database.
  3. Migrate the application from EC2 instances to AWS Lambda.
  4. Migrate the database from Amazon RDS for MySQL to Amazon DynamoDB.

Answer(s): A

Explanation:

The correct choice A is to add Amazon ElastiCache in front of the database, which provides in-memory caching to reduce read latency and offload repetitive queries from RDS without changing the application architecture.
B is incorrect because RDS Proxy optimizes connections, not read latency; it does not cache query results to improve read performance.
C is incorrect because migrating to AWS Lambda would require substantial architecture changes and may not meet latency/throughput needs for a stateful gaming app.
D is incorrect because DynamoDB is a different data store with different access patterns; migrating would be a major redesign and not a caching solution.



An ecommerce company has noticed performance degradation of its Amazon RDS based web application. The performance degradation is attributed to an increase in the number of read-only SQL queries triggered by business analysts. A solutions architect needs to solve the problem with minimal changes to the existing web application.
What should the solutions architect recommend?

  1. Export the data to Amazon DynamoDB and have the business analysts run their queries.
  2. Load the data into Amazon ElastiCache and have the business analysts run their queries.
  3. Create a read replica of the primary database and have the business analysts run their queries.
  4. Copy the data into an Amazon Redshift cluster and have the business analysts run their queries.

Answer(s): C

Explanation:

A read replica of the primary RDS database allows offloading read-heavy analytics without modifying the application, addressing the increased read traffic with minimal changes. It preserves data consistency for reads and leverages RDS replication to scale read capacity.
A) Exporting to DynamoDB adds unnecessary complexity and data freshness concerns; analysts would operate on a separate datastore with eventual consistency, not ideal for existing SQL workflows.
B) ElastiCache serves as in-memory caching, not a full read-analytic workbench; it cannot replace SQL query workloads and may not meet analytic needs.
D) Redshift is a data warehouse with ETL overhead and larger, separate architecture; introduces more change and latency.



A company is using a centralized AWS account to store log data in various Amazon S3 buckets. A solutions architect needs to ensure that the data is encrypted at rest before the data is uploaded to the S3 buckets. The data also must be encrypted in transit.
Which solution meets these requirements?

  1. Use client-side encryption to encrypt the data that is being uploaded to the S3 buckets.
  2. Use server-side encryption to encrypt the data that is being uploaded to the S3 buckets.
  3. Create bucket policies that require the use of server-side encryption with S3 managed encryption keys (SSE-S3) for S3 uploads.
  4. Enable the security option to encrypt the S3 buckets through the use of a default AWS Key Management Service (AWS KMS) key.

Answer(s): A

Explanation:

A) Client-side encryption ensures data is encrypted before it leaves the client and remains encrypted in transit and at rest in S3, meeting both requirements.
B) Server-side encryption encrypts data at rest in S3, but encryption occurs after upload by S3, not on the client; it does not guarantee encryption in transit from the client to S3.
C) SSE-S3 requires server-side encryption in S3, but the data is not guaranteed to be encrypted in transit before transfer.
D) S3 default KMS encryption enables at-rest encryption on the bucket but does not ensure client-side encryption or in-transit encryption during upload.



Viewing page 55 of 205
Viewing questions 271 - 275 out of 1019 questions


Post your Comments and Discuss Amazon SAA-C03 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!