A company needs a backup strategy for its three-tier stateless web application. The web application runs on Amazon EC2 instances in an Auto Scaling group with a dynamic scaling policy that is configured to respond to scaling events. The database tier runs on Amazon RDS for PostgreSQL. The web application does not require temporary local storage on the EC2 instances. The company’s recovery point objective (RPO) is 2 hours.The backup strategy must maximize scalability and optimize resource utilization for this environment.Which solution will meet these requirements?
Answer(s): C
A short, scalable recovery plan: use AMIs for fast rebuild of stateless web/app tiers, plus RDS automated backups with point-in-time recovery for the database to meet 2-hour RPO.A) EBS snapshots every 2 hours is heavy and unnecessary for stateless web tier; recreating from AMIs is faster. Also misses stateless redeploy efficiency.B) EBS snapshot policy plus RDS automated backups satisfies RPO but does not optimize for stateless web tier scalability and rapid recovery via immutable AMIs.C) Correct: latest AMIs enable rapid, scalable redeploy of stateless tiers; RDS automated backups with PITR meet 2-hour RPO.D) Combines EBS snapshots with PITR but does not leverage AMI-based horizontal scaling for stateless tiers, reducing agility.
A company wants to deploy a new public web application on AWS. The application includes a web server tier that uses Amazon EC2 instances. The application also includes a database tier that uses an Amazon RDS for MySQL DB instance.The application must be secure and accessible for global customers that have dynamic IP addresses.How should a solutions architect configure the security groups to meet these requirements?
Answer(s): A
The correct answer is A.A) Web server SG allows 443 from 0.0.0.0/0 and DB SG allows 3306 from Web server SG. This enables public access to the web tier while restricting DB access to only the web tier, meeting security and global accessibility requirements.B) Using customer IPs for web ingress is impractical for dynamic addresses; updates would be frequent and not scalable.C) Allowing DB 3306 from customer IPs exposes the database directly to the internet, creating security risk.D) DB 3306 from 0.0.0.0/0 is insecure; should restrict DB access to the web tier only.
A payment processing company records all voice communication with its customers and stores the audio files in an Amazon S3 bucket. The company needs to capture the text from the audio files. The company must remove from the text any personally identifiable information (PII) that belongs to customers.What should a solutions architect do to meet these requirements?
Amazon Transcribe with PII redaction directly meets both transcription and automated PII removal, producing redacted text suitable for storage and analysis when triggered by S3 uploads.A) Incorrect: Kinesis Video Streams is for real-time video; not the best for batch audio transcription, and lacks built-in PII redaction.B) Incorrect: Textract is for extracting text from documents/images, not audio transcription; would require additional steps to convert audio to text.D) Incorrect: Amazon Connect flows are for contact centers, not standalone S3-triggered transcription; adds unnecessary complexity and EventBridge orchestration.
A company is running a multi-tier ecommerce web application in the AWS Cloud. The application runs on Amazon EC2 instances with an Amazon RDS for MySQL Multi-AZ DB instance. Amazon RDS is configured with the latest generation DB instance with 2,000 GB of storage in a General Purpose SSD (gp3) Amazon Elastic Block Store (Amazon EBS) volume. The database performance affects the application during periods of high demand.A database administrator analyzes the logs in Amazon CloudWatch Logs and discovers that the application performance always degrades when the number of read and write IOPS is higher than 20,000.What should a solutions architect do to improve the application performance?
Answer(s): D
The bottleneck is write IOPS per volume; splitting the workload across two gp3 volumes reduces contention and leverages gp3 IOPS scaling per volume. D is correct.A) Magnetic volumes have lower IOPS and are inappropriate for performance-sensitive workloads. B) gp3 supports up to 16,000–32,000 IOPS depending on size, but the observed threshold indicates spreading load reduces saturation; simply increasing IOPS on a single volume may hit limits or cost inefficiencies. C) io2 offers higher IOPS, but upgrading to a single io2 volume is not as cost-effective as distributing across two gp3 volumes for MySQL workload; also gp3 already allows scalable IOPS.
An IAM user made several configuration changes to AWS resources in their company's account during a production deployment last week. A solutions architect learned that a couple of security group rules are not configured as desired. The solutions architect wants to confirm which IAM user was responsible for making changes.Which service should the solutions architect use to find the desired information?
The correct answer is C) AWS CloudTrail. CloudTrail records API calls and related events for AWS accounts, enabling you to identify which IAM user made changes and when, by reviewing event history and resource-level data.A) Amazon GuardDuty detects anomalous and potentially unauthorized activity, not a change-by-user audit trail.B) Amazon Inspector assesses security vulnerabilities, not user actions or change logs.D) AWS Config tracks resource configuration history, but CloudTrail provides the actionable identity of the user who performed the API call; Config complements it but alone doesn’t identify the actor.
Post your Comments and Discuss Amazon SAA-C03 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SAA-C03 content, but please register or login to continue.