An ecommerce company is running a multi-tier application on AWS. The front-end and backend tiers both run on Amazon EC2, and the database runs on Amazon RDS for MySQL. The backend tier communicates with the RDS instance. There are frequent calls to return identical datasets from the database that are causing performance slowdowns.Which action should be taken to improve the performance of the backend?
Answer(s): B
Implementing Amazon ElastiCache to cache the large datasets reduces repeated database reads and serves frequent identical requests from an in-memory cache, improving backend response times.A) SNS is a messaging service, not a cache or database acceleration mechanism, so it does not reduce repeated DB query latency.B) ElastiCache provides in-memory caching (e.g., Redis or Memcached) to speed up repeated read queries, matching the scenario.C) An RDS read replica helps with read-heavy workloads but does not cache data in memory; it offloads to another DB instance rather than improving in-memory access latency for identical queries.D) Kinesis Data Firehose streams data and is used for delivery to analytics destinations; it is unrelated to caching or reducing DB query latency.
A new employee has joined a company as a deployment engineer. The deployment engineer will be using AWS CloudFormation templates to create multiple AWS resources. A solutions architect wants the deployment engineer to perform job activities while following the principle of least privilege.Which combination of actions should the solutions architect take to accomplish this goal? (Choose two.)
Answer(s): D,E
A concise explanation: D and E implement least-privilege by granting only CloudFormation permissions to deploy stacks, while E uses a dedicated role to explicitly define required permissions and enable role-based access during stack operations.A) Incorrect: using root credentials violates least privilege and is not recommended for day-to-day tasks.B) Incorrect: PowerUsers still have broad permissions beyond CloudFormation actions, not least privilege.C) Incorrect: AdministratorAccess grants full account permissions, far exceeding needs.D) Correct: scoped IAM policy allowing only CloudFormation actions enforces least privilege for stack operations.E) Correct: an IAM role with explicit, limited permissions enables controlled deployment by assuming the role.
A company is deploying a two-tier web application in a VPC. The web tier is using an Amazon EC2 Auto Scaling group with public subnets that span multiple Availability Zones. The database tier consists of an Amazon RDS for MySQL DB instance in separate private subnets. The web tier requires access to the database to retrieve product information.The web application is not working as intended. The web application reports that it cannot connect to the database. The database is confirmed to be up and running. All configurations for the network ACLs, security groups, and route tables are still in their default states.What should a solutions architect recommend to fix the application?
Answer(s): D
Web tier EC2 instances and RDS are in the same VPC with default SGs; allowing the web tier’s SG ingress to the RDS SG enables the MySQL port (3306) traffic flow needed. A) NACLs are stateless and not the default bottleneck here; adding a private subnet NACL rule is unnecessary since SGs control allowed traffic. B) Route tables already allow intra-VPC routing; no new route is required for existing connectivity. C) VPC peering is unnecessary and adds complexity since both tiers can communicate within the same VPC. D) Correct: explicitly authorizes DB access from the web tier’s SG, aligning with AWS security groups best practice.A) wrong: NACLs not the core issueB) wrong: route exists by default for VPCC) wrong: unneeded cross-VPC peeringD) correct: SG-based access control for RDS
A company has a large dataset for its online advertising business stored in an Amazon RDS for MySQL DB instance in a single Availability Zone. The company wants business reporting queries to run without impacting the write operations to the production DB instance.Which solution meets these requirements?
Answer(s): A
R) A) is correct because RDS read replicas allow offloading read-heavy reporting queries from the primary write instance, preserving write performance and isolation. B) ELB cannot distribute traffic to a single RDS instance; RDS is not behind an ELB for read/write separation. C) Scaling up the instance improves both reads and writes but does not specifically offload reporting without impacting production. D) Multi-AZ enhances availability, not read scaling; it does not provide separate read throughput for reporting.
A company hosts a three-tier ecommerce application on a fleet of Amazon EC2 instances. The instances run in an Auto Scaling group behind an Application Load Balancer (ALB). All ecommerce data is stored in an Amazon RDS for MariaDB Multi-AZ DB instance.The company wants to optimize customer session management during transactions. The application must store session data durably.Which solutions will meet these requirements? (Choose two.)
Answer(s): A,D
Session affinity with ALB (sticky sessions) ensures a user’s requests in a transaction hit the same backend instance, preserving in-flight session state when the app stores session data on instance memory or a shared store. Using ElastiCache for Redis provides a durable, in-memory datastore accessible by all instances, suitable for session persistence across autoscaling, failures, and restarts. DynamoDB (B) is durable but not necessary if the app uses Redis; it could work but isn’t as common for session state with per-request routing. Cognito (C) manages authentication, not general session data. Systems Manager (E) is for management, not user session data. A and D meet durability and scalability needs.
Post your Comments and Discuss Amazon SAA-C03 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SAA-C03 content, but please register or login to continue.