A company uses an Amazon EC2 instance to run a script to poll for and process messages in an Amazon Simple Queue Service (Amazon SQS) queue. The company wants to reduce operational costs while maintaining its ability to process a growing number of messages that are added to the queue.What should a solutions architect recommend to meet these requirements?
Answer(s): C
A) The correct answer is C.C) Migrating the poll/processing script to AWS Lambda with appropriate runtime enables event-driven, on-demand processing and automatic scaling with SQS. Lambda scales out with concurrent invocations as message volume grows, reducing idle costs compared to a constantly running EC2 instance.A) Increasing EC2 size increases costs and does not address automatic scaling or cost efficiency for growing message volumes.B) EventBridge alone cannot orchestrate or optimize continuous message processing cost-effectively; it is not a direct substitute for polling/processing workloads.D) Run Command executes on-demand administrative tasks, not a persistent, scalable message-processing solution.
A company uses a legacy application to produce data in CSV format. The legacy application stores the output data in Amazon S3. The company is deploying a new commercial off-the-shelf (COTS) application that can perform complex SQL queries to analyze data that is stored in Amazon Redshift and Amazon S3 only. However, the COTS application cannot process the .csv files that the legacy application produces.The company cannot update the legacy application to produce data in another format. The company needs to implement a solution so that the COTS application can use the data that the legacy application produces.Which solution will meet these requirements with the LEAST operational overhead?
Answer(s): A
The correct answer is A because an AWS Glue ETL job provides serverless, scheduled data processing to transform CSVs and load into Redshift, enabling the COTS SQL queries with minimal maintenance and operational overhead.B is incorrect due to added EC2 management, scripting, and ongoing maintenance for scheduling and reliability, increasing overhead compared with serverless Glue.C is incorrect because DynamoDB is not a suitable target for SQL-based analytics required by the COTS tool, and Lambda-based ETL introduces state and concurrency challenges for large CSVs.D is incorrect as EMR clusters on a weekly schedule add significant operational overhead and slower iteration compared with a managed Glue ETL workflow.
A company recently migrated its entire IT environment to the AWS Cloud. The company discovers that users are provisioning oversized Amazon EC2 instances and modifying security group rules without using the appropriate change control process. A solutions architect must devise a strategy to track and audit these inventory and configuration changes.Which actions should the solutions architect take to meet these requirements? (Choose two.)
Answer(s): A,D
A) Enable AWS CloudTrail and use it for auditing. CloudTrail records API activity, enabling tracking of who provisioned oversized EC2 instances and who modified security groups, satisfying audit requirements.D) Enable AWS Config and create rules for auditing and compliance purposes. AWS Config continuously monitors resource configurations and changes, and Config Rules enforce governance and compliance over inventory and configuration drift.B) Data lifecycle policies apply to data aging but not auditing or inventory tracking. C) Trusted Advisor provides best-practice checks, not detailed per-resource change auditing. E) CloudFormation templates can capture configurations but do not provide ongoing change auditing or real-time drift tracking.
A company has hundreds of Amazon EC2 Linux-based instances in the AWS Cloud. Systems administrators have used shared SSH keys to manage the instances. After a recent audit, the company’s security team is mandating the removal of all shared keys. A solutions architect must design a solution that provides secure access to the EC2 instances.Which solution will meet this requirement with the LEAST amount of administrative overhead?
AWS Systems Manager Session Manager eliminates the need for SSH keys by providing secure, auditable, browser or CLI-based access to instances without opening inbound ports. This reduces administrative overhead since you don’t manage keys, bastions, or long-lived credentials.A) Correct: Session Manager provides secure, centralized access with IAM controls and logging.B) Incorrect: AWS STS one-time SSH keys would still require key management and distribution; adds overhead.C) Incorrect: Bastions reintroduce shared access and key management complexity; increases surface area.D) Incorrect: Cognito/Lambda for SSH key generation adds custom infrastructure and monitoring burden; not least overhead.
A company is using a fleet of Amazon EC2 instances to ingest data from on-premises data sources. The data is in JSON format and ingestion rates can be as high as 1 MB/s. When an EC2 instance is rebooted, the data in-flight is lost. The company’s data science team wants to query ingested data in near-real time.Which solution provides near-real-time data querying that is scalable with minimal data loss?
K) A) is correct because Kinesis Data Streams provides durable, real-time data ingestion with minimal loss on rebots, and Kinesis Data Analytics can query streaming data with near-real-time results, meeting scalability and latency needs for JSON data at up to 1 MB/s.B) Firehose is near-real-time but typically stores to Redshift with batch-like loads; Redshift is not optimized for low-latency streaming queries, leading to higher latency and potential data loss during retries.C) EC2 instance store is ephemeral and not durable; S3/Athena are batch-oriented, not suitable for near-real-time queries or minimal data loss on instance reboot.D) ElastiCache is in-memory cache, not a durable streaming ingestion or querying layer; Redis pub/sub does not provide scalable, durable streaming analytics or near-real-time query capability for continuous ingestion.
Post your Comments and Discuss Amazon SAA-C03 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SAA-C03 content, but please register or login to continue.