【免费】AWS-SAA-C03(20230928)助理架构师英文-认证考试题库.pdf：最新更新，引领你走向成功！

需积分: 0 108 浏览量 2023-09-28 08:26:32 上传评论收藏 56KB PDF 举报

资源推荐

资源详情

资源评论

此资料为小程序最全刷题免费50道试用题库，更多题库请在微信小程序中搜索“最全刷题”或访问https://www.examtopics.cn

Question1 : A company is preparing to launch a public-facing web application in the AWS Cloud.

The architecture consists of Amazon EC2 instances within a VPC behind an Elastic Load Balancer

(ELB). A third-party service is used for the DNS. The company's solutions architect must

recommend a solution to detect and protect against large-scale DDoS attacks.

Which solution meets these requirements?

A: Enable Amazon GuardDuty on the account.

B: Enable Amazon Inspector on the EC2 instances.

C: Enable AWS Shield and assign Amazon Route 53 to it.

D: Enable AWS Shield Advanced and assign the ELB to it.

Explanation : Explanation :AWS Shield Advanced provides cost-effective protection for larger and

more complex attacks. It can protect your AWS applications deployed on Amazon EC2, Elastic

Load Balancing (ELB), Amazon CloudFront, AWS Global Accelerator and more against DDoS

attacks.

Answer: D

Question2 : A company has thousands of edge devices that collectively generate 1 TB of status

alerts each day. Each alert is approximately 2 KB in size. A solutions architect needs to implement

a solution to ingest and store the alerts for future analysis.

The company wants a highly available solution. However, the company needs to minimize costs

and does not want to manage additional infrastructure. Additionally, the company wants to keep

14 days of data available for immediate analysis and archive any data older than 14 days.

What is the MOST operationally efficient solution that meets these requirements?

A: Create an Amazon Kinesis Data Firehose delivery stream to ingest the alerts. Configure the

Kinesis Data Firehose stream to deliver the alerts to an Amazon S3 bucket. Set up an S3 Lifecycle

configuration to transition data to Amazon S3 Glacier after 14 days.

B: Launch Amazon EC2 instances across two Availability Zones and place them behind an Elastic

Load Balancer to ingest the alerts. Create a script on the EC2 instances that will store the alerts in

an Amazon S3 bucket. Set up an S3 Lifecycle configuration to transition data to Amazon S3

Glacier after 14 days.

此资料为小程序最全刷题免费50道试用题库，更多题库请在微信小程序中搜索“最全刷题”或访问https://www.examtopics.cn

C: Create an Amazon Kinesis Data Firehose delivery stream to ingest the alerts. Configure the

Kinesis Data Firehose stream to deliver the alerts to an Amazon OpenSearch Service (Amazon

Elasticsearch Service) cluster. Set up the Amazon OpenSearch Service (Amazon Elasticsearch

Service) cluster to take manual snapshots every day and delete data from the cluster that is older

than 14 days.

D: Create an Amazon Simple Queue Service (Amazon SQS) standard queue to ingest the alerts,

and set the message retention period to 14 days. Configure consumers to poll the SQS queue,

check the age of the message, and analyze the message data as needed. If the message is 14

days old, the consumer should copy the message to an Amazon S3 bucket and delete the

message from the SQS queue.

Explanation : Explanation :Amazon Kinesis Data Firehose is built to automatically scale to match

the throughput of your data and requires no ongoing administration. It can capture, transform, and

load data streams into AWS data stores. Amazon S3 provides simple storage service, you can

transition to S3 Glacier for cost-effective long-term storage after 14 days as per the requirement.

Answer: A

Question3 : A company runs a highly available image-processing application on Amazon EC2

instances in a single VPC. The EC2 instances run inside several subnets across multiple

Availability Zones. The EC2 instances do not communicate with each other. However, the EC2

instances download images from Amazon S3 and upload images to Amazon S3 through a single

NAT gateway. The company is concerned about data transfer charges.

What is the MOST cost-effective way for the company to avoid Regional data transfer charges?

A: Launch the NAT gateway in each Availability Zone.

B: Replace the NAT gateway with a NAT instance.

C: Deploy a gateway VPC endpoint for Amazon S3.

D: Provision an EC2 Dedicated Host to run the EC2 instances.

Explanation : Explanation :Deploying a gateway VPC endpoint for Amazon S3 will allow the EC2

instances to directly access S3 without going through a NAT gateway, thus avoiding data transfer

charges.

此资料为小程序最全刷题免费50道试用题库，更多题库请在微信小程序中搜索“最全刷题”或访问https://www.examtopics.cn

Answer: C

Question4 : A company has an on-premises application that generates a large amount of time-

sensitive data that is backed up to Amazon S3. The application has grown and there are user

complaints about internet bandwidth limitations. A solutions architect needs to design a long-term

solution that allows for both timely backups to Amazon S3 and with minimal impact on internet

connectivity for internal users.

Which solution meets these requirements?

A: Establish AWS VPN connections and proxy all traffic through a VPC gateway endpoint.

B: Establish a new AWS Direct Connect connection and direct backup traffic through this new

connection.

C: Order daily AWS Snowball devices. Load the data onto the Snowball devices and return the

devices to AWS each day.

D: Submit a support ticket through the AWS Management Console. Request the removal of S3

service limits from the account.

Explanation : Explanation :AWS Direct Connect is a network service that provides an alternative

to using the Internet to utilize AWS cloud services. By establishing a dedicated network connection

from the on-premises network to AWS, we can bypass internet service providers in the network

path which increases bandwidth throughput and provides a more consistent network experience

when accessing AWS cloud services. Therefore, it allows for timely backups to S3 without

impacting the internet connectivity for internal users.

Answer: B

Question5 : A company runs its two-tier ecommerce website on AWS. The web tier consists of a

load balancer that sends traffic to Amazon EC2 instances. The database tier uses an Amazon

RDS DB instance. The EC2 instances and the RDS DB instance should not be exposed to the

public internet. The EC2 instances require internet access to complete payment processing of

orders through a third-party web service. The application must be highly available.

Which combination of configuration options will meet these requirements? (Choose two.)

A: Use an Auto Scaling group to launch the EC2 instances in private subnets. Deploy an RDS

此资料为小程序最全刷题免费50道试用题库，更多题库请在微信小程序中搜索“最全刷题”或访问https://www.examtopics.cn

Multi-AZ DB instance in private subnets.

B: Configure a VPC with two private subnets and two NAT gateways across two Availability

Zones. Deploy an Application Load Balancer in the private subnets.

C: Use an Auto Scaling group to launch the EC2 instances in public subnets across two

Availability Zones. Deploy an RDS Multi-AZ DB instance in private subnets.

D: Configure a VPC with one public subnet, one private subnet, and two NAT gateways across

two Availability Zones. Deploy an Application Load Balancer in the public subnet.

E: Configure a VPC with two public subnets, two private subnets, and two NAT gateways across

two Availability Zones. Deploy an Application Load Balancer in the public subnets.

Explanation : Explanation :Option A is chosen because launching EC2 instances in private

subnets ensures that they are not exposed to the internet. Using an Auto Scaling group enhances

availability. An RDS Multi-AZ DB instance enhances high availability and fault tolerance. Option B

is chosen because configuring a VPC with private subnets and NAT gateways ensure that the

EC2 instances have internet access for payment processing without being exposed to the public

internet. Deploying an Application Load Balancer in the private subnets helps distribute incoming

traffic.

Answer: AB

Question6 : A company wants to improve its ability to clone large amounts of production data into

a test environment in the same AWS Region. The data is stored in Amazon EC2 instances on

Amazon Elastic Block Store (Amazon EBS) volumes. Modifications to the cloned data must not

affect the production environment. The software that accesses this data requires consistently high

I/O performance.

A solutions architect needs to minimize the time that is required to clone the production data into

the test environment.

Which solution will meet these requirements?

A: Take EBS snapshots of the production EBS volumes. Restore the snapshots onto EC2 instance

store volumes in the test environment.

B: Configure the production EBS volumes to use the EBS Multi-Attach feature. Take EBS

snapshots of the production EBS volumes. Attach the production EBS volumes to the EC2

instances in the test environment.

此资料为小程序最全刷题免费50道试用题库，更多题库请在微信小程序中搜索“最全刷题”或访问https://www.examtopics.cn

C: Take EBS snapshots of the production EBS volumes. Create and initialize new EBS volumes.

Attach the new EBS volumes to EC2 instances in the test environment before restoring the

volumes from the production EBS snapshots.

D: Take EBS snapshots of the production EBS volumes. Turn on the EBS fast snapshot restore

feature on the EBS snapshots. Restore the snapshots into new EBS volumes. Attach the new EBS

volumes to EC2 instances in the test environment.

Explanation : Explanation :Option D would allow for the quickest restoration of data from the EBS

snapshot to the test environment by leveraging the EBS Fast Snapshot Restore (FSR) feature.

This feature allows the snapshots to initialize instantaneously to their full performance capacity,

thus reducing the time required to clone the production data into the test environment. Also, by

creating new EBS volumes for the test environment, it ensures that the modifications to the cloned

data do not affect the production environment.

Answer: D

Question7 : A company is launching a new application and will display application metrics on an

Amazon CloudWatch dashboard. The company's product manager needs to access this

dashboard periodically. The product manager does not have an AWS account. A solutions

architect must provide access to the product manager by following the principle of least privilege.

Which solution will meet these requirements?

A: Share the dashboard from the CloudWatch console. Enter the product manager's email

address, and complete the sharing steps. Provide a shareable link for the dashboard to the

product manager.

B: Create an IAM user specifically for the product manager. Attach the

CloudWatchReadOnlyAccess AWS managed policy to the user. Share the new login credentials

with the product manager. Share the browser URL of the correct dashboard with the product

manager.

C: Create an IAM user for the company's employees. Attach the ViewOnlyAccess AWS managed

policy to the IAM user. Share the new login credentials with the product manager. Ask the product

manager to navigate to the CloudWatch console and locate the dashboard by name in the

Dashboards section.

D: Deploy a bastion server in a public subnet. When the product manager requires access to the

剩余36页未读，继续阅读

评论收藏

内容反馈

rongyili88

粉丝: 39
资源: 28

AWS-SAA-C03(20230928)助理架构师英文-认证考试题库.pdf：最新更新，引领你走向成功！

AWS-SAA助理架构师

AWS-SAA-C03C03培训视频.zip

AWS-SAA-C03(20230928)助理架构师中文-认证考试题库.pdf

AWS亚马逊SAA助理架构师最新题库中文版2019最新2/20

AWS SAA认证 AWS助理架构师认证 考试工具 考试模拟器

AWS-SAA助理架构师 中文_认证考试题库.pdf

AWS-SAA-CO1.462Q.AWS-SAA解决方案架构师 - 助理级.pdf

AWS-SAA-C03-20230707.pdf

AWS SAA Solution-Architect-Associate 助理架构师 中文题库考前冲刺 100题 修正.pdf

AWS Certified Solutions Architect Professional专业架构师认证考试题库.docx

SAA-CO1.462Q.AWS-SAA（英）.pdf

aws-java-sdk-core-1.11.939-API文档-中文版.zip

AWS-Certified-Solutions-Architect-Professional专业架构师(中文)考试题库.docx

AWS新上线-SAA-C03学习文档.pdf

AWS Certified Developer Associate (DVA-C02)- 认证考试题库-英文-系列一.pdf

AWS-SAA.425Q .pdf

AWS-SAA.1062Q（中文版).pdf

aws-java-sdk-s3-1.11.939-API文档-中文版.zip

Java第十五届蓝桥杯大赛软件JavaB组真题

SwitchHosts

安卓期末大作业（AndroidStudio开发），垃圾分类助手app，分为前台后台，代码有注释，均能正常运行

Notepad++安装包

2024北森能力测评题库.7z

微信小程序源码-合集1.rar

Java面试八股文2023最新版

Linux Centos7 升级最新版OpenSSH-9.6p1 有脚本（支持离线）

JDK1.8 windows 64位

ruoyi-vue-pro 芋道源码项目的表结构

ruoyi-vue-pro开发指南PDF下载

最新资源

AWS SAA认证 AWS助理架构师认证考试工具考试模拟器

AWS-SAA助理架构师中文_认证考试题库.pdf

AWS SAA Solution-Architect-Associate 助理架构师中文题库考前冲刺 100题修正.pdf