A company has implemented a self-managed DNS service on AWS. The solution consists of the following:• Amazon EC2 instances in different AWS Regions• Endpoints of a standard accelerator in AWS Global AcceleratorThe company wants to protect the solution against DDoS attacks.What should a solutions architect do to meet this requirement?
Answer(s): A
AWS Shield Advanced should be subscribed and the accelerator added as a protected resource because Global Accelerator is a global, managed service fronting regional endpoints; Shield Advanced provides DDoS protection for Global Accelerator resources and associated endpoints. A) is correct. B) is incorrect because EC2 instances themselves are not the primary Shield Advanced protected resource when using Global Accelerator; Shield protection is applied at the accelerator level. C) and D) are incorrect because AWS WAF rate-based rules protect web traffic at the application layer but do not provide the DDoS protection level and integration required for Global Accelerator; Shield Advanced is the recommended DDoS protection for Global Accelerator resources.
An ecommerce company needs to run a scheduled daily job to aggregate and filter sales records for analytics. The company stores the sales records in an Amazon S3 bucket. Each object can be up to 10 GB in size. Based on the number of sales events, the job can take up to an hour to complete. The CPU and memory usage of the job are constant and are known in advance.A solutions architect needs to minimize the amount of operational effort that is needed for the job to run.Which solution meets these requirements?
Answer(s): C
The correct answer is C. A Fargate-based ECS task launched by EventBridge provides a serverless, on-demand compute resource that can handle up to 10 GB objects and a one-hour job with predictable CPU/memory usage, while minimizing operational overhead since AWS manages the infrastructure.A is incorrect because Lambda has a 15 GB total deployment package size and 10 MB/s payload limits; processing large S3 objects daily for up to an hour would be impractical and require complex workarounds.B is incorrect because API Gateway adds unnecessary HTTP API overhead for a scheduled batch job and increases latency and cost.D is incorrect because EC2 with Auto Scaling adds more operational management than needed; Fargate reduces administration while meeting resource needs.
A company needs to transfer 600 TB of data from its on-premises network-attached storage (NAS) system to the AWS Cloud. The data transfer must be complete within 2 weeks. The data is sensitive and must be encrypted in transit. The company’s internet connection can support an upload speed of 100 Mbps.Which solution meets these requirements MOST cost-effectively?
The Snowball Edge option (C) is most cost-effective for transferring 600 TB within 2 weeks with encryption in transit and no reliance on limited Internet bandwidth.A) Incorrect: S3 multipart over HTTPS still relies on the 100 Mbps Internet link; at 100 Mbps, 600 TB would take too long, and this doesn’t optimize cost for large bulk transfer.B) Incorrect: VPN over the Internet adds encryption but is bandwidth-limited and slow for 600 TB; not the most cost-effective bulk transfer method.D) Incorrect: Direct Connect plus VPN adds cost and complexity without improving transfer time sufficiently for 600 TB within 2 weeks compared to Snowball Edge.
A financial company hosts a web application on AWS. The application uses an Amazon API Gateway Regional API endpoint to give users the ability to retrieve current stock prices. The company’s security team has noticed an increase in the number of API requests. The security team is concerned that HTTP flood attacks might take the application offline.A solutions architect must design a solution to protect the application from this type of attack.Which solution meets these requirements with the LEAST operational overhead?
Answer(s): B
CloudFront with a regional WAF rate-based rule provides scalable, managed protection directly in front of API Gateway, enforcing request limits with minimal operational effort.A) CloudFront with 24-hour TTL adds caching but does not inherently block abusive rate, leading to potential flood traffic slipping through.C) CloudWatch metrics alone only alerts; it doesn’t proactively block or throttle requests.D) Lambda@Edge with custom blocking adds operational overhead (function maintenance, deployment) and is more complex than a managed WAF solution.B) Regional AWS WAF rate-based rule directly throttles excess requests at the API Gateway stage with low maintenance.
A meteorological startup company has a custom web application to sell weather data to its users online. The company uses Amazon DynamoDB to store its data and wants to build a new service that sends an alert to the managers of four internal teams every time a new weather event is recorded. The company does not want this new service to affect the performance of the current application.What should a solutions architect do to meet these requirements with the LEAST amount of operational overhead?
A) DynamoDB transactions do not provide built-in notification to teams; they ensure atomicity, not alerting, so this adds unnecessary complexity and overhead.B) Publishing to four SNS topics from the app creates coupling and still risks added load on the application path, increasing latency and maintenance.C) Enabling DynamoDB Streams and using a trigger to publish a single SNS topic provides real-time, event-driven notifications with minimal extra work and no impact on the primary application, satisfying least operational overhead.D) Regular scans with a cron job introduces polling overhead, potential lag, and extra infrastructure, increasing operational burden and data freshness risk.
Post your Comments and Discuss Amazon SAA-C03 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SAA-C03 content, but please register or login to continue.