AWS SAA-CO3 exam UPDATED ACTUAL
Questions and CORRECT Answers
A development team has deployed a microservice to the Amazon Elastic Container Service
(Amazon ECS). The application layer is in a Docker container that provides both static and
dynamic content through an Application Load Balancer. With increasing load, the Amazon ECS
cluster is experiencing higher network usage. The development team has looked into the network
usage and found that 90% of it is due to distributing static content of the application.
As a Solutions Architect, what do you recommend to improve the application's network usage
and decrease costs? - CORRECT ANSWER - Distribute the static content through Amazon
S3
A social photo-sharing web application is hosted on Amazon Elastic Compute Cloud (Amazon
EC2) instances behind an Elastic Load Balancer. The app gives the users the ability to upload
their photos and also shows a leaderboard on the homepage of the app. The uploaded photos are
stored in Amazon Simple Storage Service (Amazon S3) and the leaderboard data is maintained in
Amazon DynamoDB. The Amazon EC2 instances need to access both Amazon S3 and Amazon
DynamoDB for these features.
As a solutions architect, which of the following solutions would you recommend as the MOST
secure option? - CORRECT ANSWER - Attach the appropriate IAM role to the Amazon
EC2 instance profile so that the instance can access Amazon S3 and Amazon DynamoDB
An Elastic Load Balancer has marked all the Amazon EC2 instances in the target group as
unhealthy. Surprisingly, when a developer enters the IP address of the Amazon EC2 instances in
the web browser, he can access the website.
What could be the reason the instances are being marked as unhealthy? (Select two) - CORRECT
ANSWER - 1. The security group of the Amazon EC2 instance does not allow for traffic
from the security group of the Application Load Balancer
2. The route for the health check is misconfigured
A media company wants to get out of the business of owning and maintaining its own IT
infrastructure. As part of this digital transformation, the media company wants to archive about 5
petabytes of data in its on-premises data center to durable long term storage.
As a solutions architect, what is your recommendation to migrate this data in the MOST cost-
optimal way? - CORRECT ANSWER - Transfer the on-premises data into multiple AWS
,Snowball Edge Storage Optimized devices. Copy the AWS Snowball Edge data into Amazon S3
and create a lifecycle policy to transition the data into Amazon S3 Glacier
A developer needs to implement an AWS Lambda function in AWS account A that accesses an
Amazon Simple Storage Service (Amazon S3) bucket in AWS account B.
As a Solutions Architect, which of the following will you recommend to meet this requirement? -
CORRECT ANSWER - Create an IAM role for the AWS Lambda function that grants
access to the Amazon S3 bucket. Set the IAM role as the AWS Lambda function's execution role.
Make sure that the bucket policy also grants access to the AWS Lambda function's execution role
A company has hired you as an AWS Certified Solutions Architect - Associate to help with
redesigning a real-time data processor. The company wants to build custom applications that
process and analyze the streaming data for its specialized needs.
Which solution will you recommend to address this use-case? - CORRECT ANSWER -
Use Amazon Kinesis Data Streams to process the data streams as well as decouple the producers
and consumers for the real-time data processor
A cybersecurity company uses a fleet of Amazon EC2 instances to run a proprietary application.
The infrastructure maintenance group at the company wants to be notified via an email whenever
the CPU utilization for any of the Amazon EC2 instances breaches a certain threshold.
Which of the following services would you use for building a solution with the LEAST amount
of development effort? (Select two) - CORRECT ANSWER - 1. Amazon Simple
Notification Service (Amazon SNS)
2. Amazon CloudWatch
A retail company has developed a REST API which is deployed in an Auto Scaling group behind
an Application Load Balancer. The REST API stores the user data in Amazon DynamoDB and
any static content, such as images, are served via Amazon Simple Storage Service (Amazon S3).
On analyzing the usage trends, it is found that 90% of the read requests are for commonly
accessed data across all users.
As a Solutions Architect, which of the following would you suggest as the MOST efficient
solution to improve the application performance? - CORRECT ANSWER - Enable
Amazon DynamoDB Accelerator (DAX) for Amazon DynamoDB and Amazon CloudFront for
Amazon S3
, A leading online gaming company is migrating its flagship application to AWS Cloud for
delivering its online games to users across the world. The company would like to use a Network
Load Balancer to handle millions of requests per second. The engineering team has provisioned
multiple instances in a public subnet and specified these instance IDs as the targets for the NLB.
As a solutions architect, can you help the engineering team understand the correct routing
mechanism for these target instances? - CORRECT ANSWER - Traffic is routed to
instances using the primary private IP address specified in the primary network interface for the
instance
A media agency stores its re-creatable assets on Amazon Simple Storage Service (Amazon S3)
buckets. The assets are accessed by a large number of users for the first few days and the
frequency of access falls down drastically after a week. Although the assets would be accessed
occasionally after the first week, but they must continue to be immediately accessible when
required. The cost of maintaining all the assets on Amazon S3 storage is turning out to be very
expensive and the agency is looking at reducing costs as much as possible.
As an AWS Certified Solutions Architect - Associate, can you suggest a way to lower the storage
costs while fulfilling the business requirements? - CORRECT ANSWER - Configure a
lifecycle policy to transition the objects to Amazon S3 One Zone-Infrequent Access (S3 One
Zone-IA) after 30 days
An IT company has an Access Control Management (ACM) application that uses Amazon RDS
for MySQL but is running into performance issues despite using Read Replicas. The company
has hired you as a solutions architect to address these performance-related challenges without
moving away from the underlying relational database schema. The company has branch offices
across the world, and it needs the solution to work on a global scale.
Which of the following will you recommend as the MOST cost-effective and high-performance
solution? - CORRECT ANSWER - Use Amazon Aurora Global Database to enable fast
local reads with low latency in each region
An Internet of Things (IoT) company would like to have a streaming system that performs real-
time analytics on the ingested IoT data. Once the analytics is done, the company would like to
send notifications back to the mobile applications of the IoT device owners.
As a solutions architect, which of the following AWS technologies would you recommend to
send these notifications to the mobile applications? - CORRECT ANSWER - Amazon
Kinesis with Amazon Simple Notification Service (Amazon SNS)
Questions and CORRECT Answers
A development team has deployed a microservice to the Amazon Elastic Container Service
(Amazon ECS). The application layer is in a Docker container that provides both static and
dynamic content through an Application Load Balancer. With increasing load, the Amazon ECS
cluster is experiencing higher network usage. The development team has looked into the network
usage and found that 90% of it is due to distributing static content of the application.
As a Solutions Architect, what do you recommend to improve the application's network usage
and decrease costs? - CORRECT ANSWER - Distribute the static content through Amazon
S3
A social photo-sharing web application is hosted on Amazon Elastic Compute Cloud (Amazon
EC2) instances behind an Elastic Load Balancer. The app gives the users the ability to upload
their photos and also shows a leaderboard on the homepage of the app. The uploaded photos are
stored in Amazon Simple Storage Service (Amazon S3) and the leaderboard data is maintained in
Amazon DynamoDB. The Amazon EC2 instances need to access both Amazon S3 and Amazon
DynamoDB for these features.
As a solutions architect, which of the following solutions would you recommend as the MOST
secure option? - CORRECT ANSWER - Attach the appropriate IAM role to the Amazon
EC2 instance profile so that the instance can access Amazon S3 and Amazon DynamoDB
An Elastic Load Balancer has marked all the Amazon EC2 instances in the target group as
unhealthy. Surprisingly, when a developer enters the IP address of the Amazon EC2 instances in
the web browser, he can access the website.
What could be the reason the instances are being marked as unhealthy? (Select two) - CORRECT
ANSWER - 1. The security group of the Amazon EC2 instance does not allow for traffic
from the security group of the Application Load Balancer
2. The route for the health check is misconfigured
A media company wants to get out of the business of owning and maintaining its own IT
infrastructure. As part of this digital transformation, the media company wants to archive about 5
petabytes of data in its on-premises data center to durable long term storage.
As a solutions architect, what is your recommendation to migrate this data in the MOST cost-
optimal way? - CORRECT ANSWER - Transfer the on-premises data into multiple AWS
,Snowball Edge Storage Optimized devices. Copy the AWS Snowball Edge data into Amazon S3
and create a lifecycle policy to transition the data into Amazon S3 Glacier
A developer needs to implement an AWS Lambda function in AWS account A that accesses an
Amazon Simple Storage Service (Amazon S3) bucket in AWS account B.
As a Solutions Architect, which of the following will you recommend to meet this requirement? -
CORRECT ANSWER - Create an IAM role for the AWS Lambda function that grants
access to the Amazon S3 bucket. Set the IAM role as the AWS Lambda function's execution role.
Make sure that the bucket policy also grants access to the AWS Lambda function's execution role
A company has hired you as an AWS Certified Solutions Architect - Associate to help with
redesigning a real-time data processor. The company wants to build custom applications that
process and analyze the streaming data for its specialized needs.
Which solution will you recommend to address this use-case? - CORRECT ANSWER -
Use Amazon Kinesis Data Streams to process the data streams as well as decouple the producers
and consumers for the real-time data processor
A cybersecurity company uses a fleet of Amazon EC2 instances to run a proprietary application.
The infrastructure maintenance group at the company wants to be notified via an email whenever
the CPU utilization for any of the Amazon EC2 instances breaches a certain threshold.
Which of the following services would you use for building a solution with the LEAST amount
of development effort? (Select two) - CORRECT ANSWER - 1. Amazon Simple
Notification Service (Amazon SNS)
2. Amazon CloudWatch
A retail company has developed a REST API which is deployed in an Auto Scaling group behind
an Application Load Balancer. The REST API stores the user data in Amazon DynamoDB and
any static content, such as images, are served via Amazon Simple Storage Service (Amazon S3).
On analyzing the usage trends, it is found that 90% of the read requests are for commonly
accessed data across all users.
As a Solutions Architect, which of the following would you suggest as the MOST efficient
solution to improve the application performance? - CORRECT ANSWER - Enable
Amazon DynamoDB Accelerator (DAX) for Amazon DynamoDB and Amazon CloudFront for
Amazon S3
, A leading online gaming company is migrating its flagship application to AWS Cloud for
delivering its online games to users across the world. The company would like to use a Network
Load Balancer to handle millions of requests per second. The engineering team has provisioned
multiple instances in a public subnet and specified these instance IDs as the targets for the NLB.
As a solutions architect, can you help the engineering team understand the correct routing
mechanism for these target instances? - CORRECT ANSWER - Traffic is routed to
instances using the primary private IP address specified in the primary network interface for the
instance
A media agency stores its re-creatable assets on Amazon Simple Storage Service (Amazon S3)
buckets. The assets are accessed by a large number of users for the first few days and the
frequency of access falls down drastically after a week. Although the assets would be accessed
occasionally after the first week, but they must continue to be immediately accessible when
required. The cost of maintaining all the assets on Amazon S3 storage is turning out to be very
expensive and the agency is looking at reducing costs as much as possible.
As an AWS Certified Solutions Architect - Associate, can you suggest a way to lower the storage
costs while fulfilling the business requirements? - CORRECT ANSWER - Configure a
lifecycle policy to transition the objects to Amazon S3 One Zone-Infrequent Access (S3 One
Zone-IA) after 30 days
An IT company has an Access Control Management (ACM) application that uses Amazon RDS
for MySQL but is running into performance issues despite using Read Replicas. The company
has hired you as a solutions architect to address these performance-related challenges without
moving away from the underlying relational database schema. The company has branch offices
across the world, and it needs the solution to work on a global scale.
Which of the following will you recommend as the MOST cost-effective and high-performance
solution? - CORRECT ANSWER - Use Amazon Aurora Global Database to enable fast
local reads with low latency in each region
An Internet of Things (IoT) company would like to have a streaming system that performs real-
time analytics on the ingested IoT data. Once the analytics is done, the company would like to
send notifications back to the mobile applications of the IoT device owners.
As a solutions architect, which of the following AWS technologies would you recommend to
send these notifications to the mobile applications? - CORRECT ANSWER - Amazon
Kinesis with Amazon Simple Notification Service (Amazon SNS)
