A company stores its data objects in Amazon S3 Standard storage. A solutions architect has found that 75% of the data is rarely accessed after 30 days. The company needs all the data to remain immediately accessible with the same high availability and resiliency, but the company wants to minimize storage costs.Which storage solution will meet these requirements?
Answer(s): B
Moving to S3 Standard-IA after 30 days preserves immediate access, high availability, and durability while reducing storage costs for rarely accessed data.A) S3 Glacier Deep Archive is designed for long-term archival with retrieval delays; not immediate access. B) S3 Standard-IA retains high durability and access predictability with lower cost for infrequently accessed data, after a 30-day window. C) S3 One Zone-IA offers lower durability (single AZ) and is not ideal for data requiring the same high availability and resiliency. D) Moving immediately to One Zone-IA would reduce durability and availability risk from the start.
A gaming company is moving its public scoreboard from a data center to the AWS Cloud. The company uses Amazon EC2 Windows Server instances behind an Application Load Balancer to host its dynamic application. The company needs a highly available storage solution for the application. The application consists of static files and dynamic server-side code.Which combination of steps should a solutions architect take to meet these requirements? (Choose two.)
Answer(s): A,D
A) Correct: Static files on S3 with CloudFront provides durable, highly available object storage with edge caching to reduce latency for a global audience. D) Correct: FSx for Windows File Server offers shared file storage accessible from multiple EC2 Windows instances, suitable for server-side code that needs a shared filesystem.B) Incorrect: ElastiCache is an in-memory caching service for apps, not edge storage for static files.C) Incorrect: EFS is shared Linux-based NFS; not ideal for Windows Server apps as a primary shared filesystem in this context.E) Incorrect: Mounting a single EBS volume on multiple EC2 instances isn’t supported; EBS is instance-store specific and lacks built-in multi-attach for Windows in this scenario.
A social media company runs its application on Amazon EC2 instances behind an Application Load Balancer (ALB). The ALB is the origin for an Amazon CloudFront distribution. The application has more than a billion images stored in an Amazon S3 bucket and processes thousands of images each second. The company wants to resize the images dynamically and serve appropriate formats to clients.Which solution will meet these requirements with the LEAST operational overhead?
Answer(s): C
Lambda@Edge can run code at CloudFront edge locations to resize images and convert formats on-the-fly, minimizing latency and operational overhead. It leverages a function with an image processing library and executes during requests, scaling automatically with traffic.A) Requires managing and scaling EC2 instances and the library, increasing operational overhead.B) Origin request policy controls headers, not image processing; it cannot perform resizing.D) Response headers policy only affects headers, not image transformation or resizing.C) Uses serverless edge compute close to users, handles dynamic resizing and format adaptation with minimal upkeep.
A hospital needs to store patient records in an Amazon S3 bucket. The hospital’s compliance team must ensure that all protected health information (PHI) is encrypted in transit and at rest. The compliance team must administer the encryption key for data at rest.Which solution will meet these requirements?
A) Incorrect: SSL cert in ACM attached to S3 is not a direct mechanism for S3 encryption at rest; SSE-KMS with compliant key management is required for PHI at rest.B) Incorrect: SSE-S3 does not use customer-managed KMS keys; PHI compliance requires customer-managed keys (KMS) and access control by the compliance team.C) Correct: Enforces encrypted transport via aws:SecureTransport, uses SSE-KMS for at-rest encryption with customer-managed keys, and grants key management to the compliance team, meeting HIPAA-like requirements.D) Incorrect: Macie provides data discovery and classification, not encryption at rest or key management; fails PHI-at-rest and key-management requirements.
A company uses Amazon API Gateway to run a private gateway with two REST APIs in the same VPC. The BuyStock RESTful web service calls the CheckFunds RESTful web service to ensure that enough funds are available before a stock can be purchased. The company has noticed in the VPC flow logs that the BuyStock RESTful web service calls the CheckFunds RESTful web service over the internet instead of through the VPC. A solutions architect must implement a solution so that the APIs communicate through the VPC.Which solution will meet these requirements with the FEWEST changes to the code?
The correct answer is B. Use an interface endpoint. This creates an elastic network interface in the VPC to enable private connectivity to the API Gateway REST APIs, ensuring that calls between BuyStock and CheckFunds stay inside the VPC without internet traversal and with minimal code changes.A) Adding an X-API-Key does not affect network routing; it only provides API access control, not private VPC connectivity.C) A gateway endpoint supports S3 and DynamoDB, not API Gateway private endpoints for REST APIs.D) SQS introduces asynchronous messaging, adding complexity and latency rather than ensuring in-VPC API calls.
Post your Comments and Discuss Amazon SAA-C03 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SAA-C03 content, but please register or login to continue.