Download AWS SAA-C03 Dumps for Best Preparation
Exam : SAA-C03
Title : AWS Certified Solutions
Architect - Associate
https://www.passcert.com/SAA-C03.html
1/9
, Download AWS SAA-C03 Dumps for Best Preparation
1.A company's software development team needs an Amazon RDS Multi-AZ cluster. The RDS cluster will
serve as a backend for a desktop client that is deployed on premises. The desktop client requires direct
connectivity to the RDS cluster.
The company must give the development team the ability to connect to the cluster by using the client
when the team is in the office.
Which solution provides the required connectivity MOST securely?
A. Create a VPC and two public subnets. Create the RDS cluster in the public subnets. Use AWS
Site-to-Site VPN with a customer gateway in the company's office.
B. Create a VPC and two private subnets. Create the RDS cluster in the private subnets. Use AWS
Site-to-Site VPN with a customer gateway in the company's office.
C. Create a VPC and two private subnets. Create the RDS cluster in the private subnets. Use RDS
security groups to allow the company's office IP ranges to access the cluster.
D. Create a VPC and two public subnets. Create the RDS cluster in the public subnets. Create a cluster
user for each developer. Use RDS security groups to allow the users to access the cluster.
Answer: B
Explanation:
Requirement Analysis: Need secure, direct connectivity from an on-premises client to an RDS cluster,
accessible only when in the office.
VPC with Private Subnets: Ensures the RDS cluster is not publicly accessible, enhancing security.
Site-to-Site VPN: Provides secure, encrypted connection between on-premises office and AWS VPC.
Implementation:
Create a VPC with two private subnets.
Launch the RDS cluster in the private subnets.
Set up a Site-to-Site VPN connection with a customer gateway in the office.
Conclusion: This setup ensures secure and direct connectivity with minimal exposure, meeting the
requirement for secure access from the office.
Reference
AWS Site-to-Site VPN: AWS Site-to-Site VPN Documentation
Amazon RDS: Amazon RDS Documentation
2.A social media company wants to store its database of user profiles, relationships, and interactions in
the AWS Cloud. The company needs an application to monitor any changes in the database. The
application needs to analyze the relationships between the data entities and to provide recommendations
to users.
Which solution will meet these requirements with the LEAST operational overhead?
A. Use Amazon Neptune to store the information. Use Amazon Kinesis Data Streams to process changes
in the database.
B. Use Amazon Neptune to store the information. Use Neptune Streams to process changes in the
database.
C. Use Amazon Quantum Ledger Database (Amazon QLDB) to store the information. Use Amazon
Kinesis Data Streams to process changes in the database.
D. Use Amazon Quantum Ledger Database (Amazon QLDB) to store the information. Use Neptune
Streams to process changes in the database.
Answer: B
2/9
Exam : SAA-C03
Title : AWS Certified Solutions
Architect - Associate
https://www.passcert.com/SAA-C03.html
1/9
, Download AWS SAA-C03 Dumps for Best Preparation
1.A company's software development team needs an Amazon RDS Multi-AZ cluster. The RDS cluster will
serve as a backend for a desktop client that is deployed on premises. The desktop client requires direct
connectivity to the RDS cluster.
The company must give the development team the ability to connect to the cluster by using the client
when the team is in the office.
Which solution provides the required connectivity MOST securely?
A. Create a VPC and two public subnets. Create the RDS cluster in the public subnets. Use AWS
Site-to-Site VPN with a customer gateway in the company's office.
B. Create a VPC and two private subnets. Create the RDS cluster in the private subnets. Use AWS
Site-to-Site VPN with a customer gateway in the company's office.
C. Create a VPC and two private subnets. Create the RDS cluster in the private subnets. Use RDS
security groups to allow the company's office IP ranges to access the cluster.
D. Create a VPC and two public subnets. Create the RDS cluster in the public subnets. Create a cluster
user for each developer. Use RDS security groups to allow the users to access the cluster.
Answer: B
Explanation:
Requirement Analysis: Need secure, direct connectivity from an on-premises client to an RDS cluster,
accessible only when in the office.
VPC with Private Subnets: Ensures the RDS cluster is not publicly accessible, enhancing security.
Site-to-Site VPN: Provides secure, encrypted connection between on-premises office and AWS VPC.
Implementation:
Create a VPC with two private subnets.
Launch the RDS cluster in the private subnets.
Set up a Site-to-Site VPN connection with a customer gateway in the office.
Conclusion: This setup ensures secure and direct connectivity with minimal exposure, meeting the
requirement for secure access from the office.
Reference
AWS Site-to-Site VPN: AWS Site-to-Site VPN Documentation
Amazon RDS: Amazon RDS Documentation
2.A social media company wants to store its database of user profiles, relationships, and interactions in
the AWS Cloud. The company needs an application to monitor any changes in the database. The
application needs to analyze the relationships between the data entities and to provide recommendations
to users.
Which solution will meet these requirements with the LEAST operational overhead?
A. Use Amazon Neptune to store the information. Use Amazon Kinesis Data Streams to process changes
in the database.
B. Use Amazon Neptune to store the information. Use Neptune Streams to process changes in the
database.
C. Use Amazon Quantum Ledger Database (Amazon QLDB) to store the information. Use Amazon
Kinesis Data Streams to process changes in the database.
D. Use Amazon Quantum Ledger Database (Amazon QLDB) to store the information. Use Neptune
Streams to process changes in the database.
Answer: B
2/9
