Free SAA-C03 Exam Braindumps
AWS Certified Solutions Architect - Associate SAA-C03 Questions 411–415 (page: 84)

Updated On: 16-Mar-2026

A company has a web application with sporadic usage patterns. There is heavy usage at the beginning of each month, moderate usage at the start of each week, and unpredictable usage during the week. The application consists of a web server and a MySQL database server running inside the data center. The company would like to move the application to the AWS Cloud, and needs to select a cost-effective database platform that will not require database modifications.
Which solution will meet these requirements?

  1. Amazon DynamoDB
  2. Amazon RDS for MySQL
  3. MySQL-compatible Amazon Aurora Serverless
  4. MySQL deployed on Amazon EC2 in an Auto Scaling group

Answer(s): C

Explanation:

The correct answer is C. MySQL-compatible Amazon Aurora Serverless supports on-demand, auto-scaling compute capacity for variable workloads without modifying the application, and uses MySQL compatibility, minimizing changes.
A) DynamoDB is a NoSQL database with a different data model and access patterns, requiring significant application changes and may not suit a MySQL-based schema.
B) RDS for MySQL provides provisioned capacity, not automatic scaling for unpredictable traffic, leading to potential under/over-provisioning.
D) MySQL on EC2 requires managing the database and scaling manually, increasing maintenance and cost for sporadic usage.



An image-hosting company stores its objects in Amazon S3 buckets. The company wants to avoid accidental exposure of the objects in the S3 buckets to the public. All S3 objects in the entire AWS account need to remain private.
Which solution will meet these requirements?

  1. Use Amazon GuardDuty to monitor S3 bucket policies. Create an automatic remediation action rule that uses an AWS Lambda function to remediate any change that makes the objects public.
  2. Use AWS Trusted Advisor to find publicly accessible S3 buckets. Configure email notifications in Trusted Advisor when a change is detected. Manually change the S3 bucket policy if it allows public access.
  3. Use AWS Resource Access Manager to find publicly accessible S3 buckets. Use Amazon Simple Notification Service (Amazon SNS) to invoke an AWS Lambda function when a change is detected. Deploy a Lambda function that programmatically remediates the change.
  4. Use the S3 Block Public Access feature on the account level. Use AWS Organizations to create a service control policy (SCP) that prevents IAM users from changing the setting. Apply the SCP to the account.

Answer(s): D

Explanation:

S) D is correct because enabling S3 Block Public Access at the account level combined with an SCP in AWS Organizations prevents any IAM user from altering public access settings, ensuring all objects remain private across the entire account.
A is incorrect because GuardDuty is a threat detection service, not preventive control, and remediation of policy changes is not centralized or guaranteed.
B is incorrect because Trusted Advisor checks are advisory and do not enforce prevention; manual remediation can fail to scale and may miss future changes.
C is incorrect because Resource Access Manager and SNS-based remediation do not provide centralized, preventive enforcement across all accounts and services.



An ecommerce company is experiencing an increase in user traffic. The company’s store is deployed on Amazon EC2 instances as a two-tier web application consisting of a web tier and a separate database tier. As traffic increases, the company notices that the architecture is causing significant delays in sending timely marketing and order confirmation email to users. The company wants to reduce the time it spends resolving complex email delivery issues and minimize operational overhead.
What should a solutions architect do to meet these requirements?

  1. Create a separate application tier using EC2 instances dedicated to email processing.
  2. Configure the web instance to send email through Amazon Simple Email Service (Amazon SES).
  3. Configure the web instance to send email through Amazon Simple Notification Service (Amazon SNS).
  4. Create a separate application tier using EC2 instances dedicated to email processing. Place the instances in an Auto Scaling group.

Answer(s): B

Explanation:

Efficient, scalable email delivery with minimal management: use SES to handle send-rate limits, deliverability, retries, and bounce/delivery feedback while offloading email infrastructure.
A) wrong: standalone EC2 email processing adds management overhead and does not leverage SES deliverability features.
B) correct: SES provides scalable, reputation-managed SMTP/API email sending with built-in retries and analytics, reducing ops.
C) wrong: SNS is for pub/sub messaging, not reliable email delivery to end users.
D) wrong: placing EC2 email processing in ASG reintroduces heavy maintenance and does not improve deliverability; SES remains the preferred service.



A company has a business system that generates hundreds of reports each day. The business system saves the reports to a network share in CSV format. The company needs to store this data in the AWS Cloud in near-real time for analysis.
Which solution will meet these requirements with the LEAST administrative overhead?

  1. Use AWS DataSync to transfer the files to Amazon S3. Create a scheduled task that runs at the end of each day.
  2. Create an Amazon S3 File Gateway. Update the business system to use a new network share from the S3 File Gateway.
  3. Use AWS DataSync to transfer the files to Amazon S3. Create an application that uses the DataSync API in the automation workflow.
  4. Deploy an AWS Transfer for SFTP endpoint. Create a script that checks for new files on the network share and uploads the new files by using SFTP.

Answer(s): B

Explanation:

Using an S3 File Gateway provides a seamless, low-overhead path to store network-share data in S3 with near-real-time access, while presenting a familiar file-share interface to on-premises systems and requiring minimal changes. It serves as a persistent, managed gateway that automatically handles data transfer to S3.
A) DataSync with end-of-day schedule adds delay and requires custom scheduling; not near-real-time.
C) DataSync with API integration adds development overhead and ongoing maintenance.
D) SFTP endpoint introduces extra transfer tooling and scripting, increasing maintenance.



A company is storing petabytes of data in Amazon S3 Standard. The data is stored in multiple S3 buckets and is accessed with varying frequency. The company does not know access patterns for all the data. The company needs to implement a solution for each S3 bucket to optimize the cost of S3 usage.
Which solution will meet these requirements with the MOST operational efficiency?

  1. Create an S3 Lifecycle configuration with a rule to transition the objects in the S3 bucket to S3 Intelligent-Tiering.
  2. Use the S3 storage class analysis tool to determine the correct tier for each object in the S3 bucket. Move each object to the identified storage tier.
  3. Create an S3 Lifecycle configuration with a rule to transition the objects in the S3 bucket to S3 Glacier Instant Retrieval.
  4. Create an S3 Lifecycle configuration with a rule to transition the objects in the S3 bucket to S3 One Zone-Infrequent Access (S3 One Zone-IA).

Answer(s): A

Explanation:

S) A) The S3 Intelligent-Tiering storage class automatically moves objects between frequent and infrequent access tiers without user intervention, optimizing cost for unknown and changing access patterns with minimal operational effort.
B) Storage class analysis helps identify tiers but requires manual or automated actions to move objects; it’s not a fully automated lifecycle solution.
C) Glacier Instant Retrieval is not suitable for frequent access patterns and adds latency and cost for retrievals; not ideal for unknown access. D) One Zone-IA stores data only in a single AZ, reducing durability compared with Standard or IA, and is inappropriate for petabyte-scale data with uncertain access.



Viewing page 84 of 205
Viewing questions 416 - 420 out of 1019 questions


Post your Comments and Discuss Amazon SAA-C03 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!