Free SAA-C03 Exam Braindumps
AWS Certified Solutions Architect - Associate SAA-C03 Questions 331–335 (page: 68)

Updated On: 16-Mar-2026

A company must migrate 20 TB of data from a data center to the AWS Cloud within 30 days. The company’s network bandwidth is limited to 15 Mbps and cannot exceed 70% utilization.
What should a solutions architect do to meet these requirements?

  1. Use AWS Snowball.
  2. Use AWS DataSync.
  3. Use a secure VPN connection.
  4. Use Amazon S3 Transfer Acceleration.

Answer(s): A

Explanation:

A) AWS Snowball is correct because it provides physical data transfer of large volumes (20 TB) into AWS when network bandwidth is limited, reducing time by shipping a Snowball device rather than transferring over constrained 15 Mbps links. DataSync (B) would still be bound by network bandwidth and may take too long. VPN (C) adds overhead and relies on the same limited link, not suitable for large-scale migration within 30 days. S3 Transfer Acceleration (D) optimizes upload speed from clients over the public internet but still limited by the local wide-area network; it does not address the bulk transfer efficiency as effectively as a physical device for 20 TB.



A company needs to provide its employees with secure access to confidential and sensitive files. The company wants to ensure that the files can be accessed only by authorized users. The files must be downloaded securely to the employees’ devices.
The files are stored in an on-premises Windows file server. However, due to an increase in remote usage, the file server is running out of capacity.
.
Which solution will meet these requirements?

  1. Migrate the file server to an Amazon EC2 instance in a public subnet. Configure the security group to limit inbound traffic to the employees’ IP addresses.
  2. Migrate the files to an Amazon FSx for Windows File Server file system. Integrate the Amazon FSx file system with the on-premises Active Directory. Configure AWS Client VPN.
  3. Migrate the files to Amazon S3, and create a private VPC endpoint. Create a signed URL to allow download.
  4. Migrate the files to Amazon S3, and create a public VPC endpoint. Allow employees to sign on with AWS IAM Identity Center (AWS Single Sign-On).

Answer(s): B

Explanation:

Migration to Amazon FSx for Windows File Server with AD integration and AWS Client VPN provides secure, authenticated access to Windows-style shares and scalable storage, meeting confidential data access and secure download requirements.
A) Exposes an EC2-based file server in a public subnet; increases risk and still requires on-prem AD integration and VPN/ACLs. Not as scalable or integrated as FSx with AD.
C) S3 with private endpoint and signed URLs lacks native Windows file sharing semantics and persistent SMB access; signed URLs are temporary and not suitable for ongoing authenticated file access.
D) Public VPC endpoint and IAM Identity Center don’t provide Windows file shares or SMB access; public exposure and IAM SSO do not align with on-prem AD integration needs.
B) correctly combines FSx for Windows File Server, AD integration, and AWS Client VPN for secure remote access.



A company’s application runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances run in an Amazon EC2 Auto Scaling group across multiple Availability Zones. On the first day of every month at midnight, the application becomes much slower when the month-end financial calculation batch runs. This causes the CPU utilization of the EC2 instances to immediately peak to 100%, which disrupts the application.
What should a solutions architect recommend to ensure the application is able to handle the workload and avoid downtime?

  1. Configure an Amazon CloudFront distribution in front of the ALB.
  2. Configure an EC2 Auto Scaling simple scaling policy based on CPU utilization.
  3. Configure an EC2 Auto Scaling scheduled scaling policy based on the monthly schedule.
  4. Configure Amazon ElastiCache to remove some of the workload from the EC2 instances.

Answer(s): C

Explanation:

The monthly spike can be anticipated; using a scheduled scaling policy aligns capacity with the recurring workload, preventing 100% CPU and ensuring availability across AZs.
A) CloudFront in front of ALB adds caching for static content but does not address a periodic CPU-intensive batch load on EC2 instances.
B) Simple scaling based only on current CPU may react too slowly to a predictable monthly spike and can still cause downtime.
D) ElastiCache helps offload database or cache-heavy work, not the compute-intensive batch processing on EC2 instances.



A company wants to give a customer the ability to use on-premises Microsoft Active Directory to download files that are stored in Amazon S3. The customer’s application uses an SFTP client to download the files.
Which solution will meet these requirements with the LEAST operational overhead and no changes to the customer’s application?

  1. Set up AWS Transfer Family with SFTP for Amazon S3. Configure integrated Active Directory authentication.
  2. Set up AWS Database Migration Service (AWS DMS) to synchronize the on-premises client with Amazon S3. Configure integrated Active Directory authentication.
  3. Set up AWS DataSync to synchronize between the on-premises location and the S3 location by using AWS IAM Identity Center (AWS Single Sign-On).
  4. Set up a Windows Amazon EC2 instance with SFTP to connect the on-premises client with Amazon S3. Integrate AWS Identity and Access Management (IAM).

Answer(s): A

Explanation:

AWS Transfer Family with SFTP for Amazon S3 provides native SFTP access to S3 with no changes to the client, and supports Active Directory integration for on-prem credentials, meeting the “no app changes” and least overhead requirements.
A) Correct: SFTP directly to S3 via AWS Transfer Family; integrates with on-prem AD for authentication, minimal manageability.
B) DMS is for database migrations and not designed for file download via SFTP; plus it adds unnecessary data replication complexity.
C) DataSync targets on-prem to S3 sync but does not provide SFTP access or AD-integrated SFTP authentication.
D) EC2-based SFTP requires managing a Windows instance, SFTP server software, and IAM mappings, increasing overhead and maintenance.



A company is experiencing sudden increases in demand. The company needs to provision large Amazon EC2 instances from an Amazon Machine Image (AMI). The instances will run in an Auto Scaling group. The company needs a solution that provides minimum initialization latency to meet the demand.
Which solution meets these requirements?

  1. Use the aws ec2 register-image command to create an AMI from a snapshot. Use AWS Step Functions to replace the AMI in the Auto Scaling group.
  2. Enable Amazon Elastic Block Store (Amazon EBS) fast snapshot restore on a snapshot. Provision an AMI by using the snapshot. Replace the AMI in the Auto Scaling group with the new AMI.
  3. Enable AMI creation and define lifecycle rules in Amazon Data Lifecycle Manager (Amazon DLM). Create an AWS Lambda function that modifies the AMI in the Auto Scaling group.
  4. Use Amazon EventBridge to invoke AWS Backup lifecycle policies that provision AMIs. Configure Auto Scaling group capacity limits as an event source in EventBridge.

Answer(s): B

Explanation:

Amazon EBS fast snapshot restore provides low-latency access to recently created AMIs from snapshots, enabling rapid instance provisioning in an Auto Scaling group with minimal initialization time.
A) Using ec2 register-image from a snapshot and Step Functions adds manual orchestration and time to replace ASG AMIs, increasing latency. Not optimal for sudden load.
C) DLM lifecycle with Lambda still requires AMI updates and orchestration; introduces delay and management overhead.
D) EventBridge with Backup policies does not directly optimize AMI provisioning latency or automatic ASG replacement for rapid scale.



Viewing page 68 of 205
Viewing questions 336 - 340 out of 1019 questions


Post your Comments and Discuss Amazon SAA-C03 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!