View Full Amazon AWS Certified Solutions Architect – Associate SAA-C03 Exam Dumps and Practice Test Dumps

 

Question 161

Which AWS service provides a managed service for storing and retrieving large amounts of objects with high durability and scalability?

1. Amazon EBS
2. Amazon EFS
3. Amazon S3
4. Amazon FSx

Correct Answer: 3

Explanation

Amazon S3 is a highly scalable object storage service designed to store and retrieve large amounts of data. It provides high durability and supports many use cases, including backups, media files, application assets, logs, and data lakes. S3 also provides storage classes, lifecycle policies, versioning, encryption, replication, and access controls. EBS is block storage, EFS is shared file storage, and FSx provides managed specialized file systems. Amazon S3 is therefore the appropriate service when highly durable and scalable object storage is required.

Question 162

A company needs to allow an EC2 instance in a private subnet to download software updates from the internet. Which solution should be implemented?

1. NAT Gateway
2. Internet Gateway directly to the private subnet
3. VPC Peering
4. Gateway VPC Endpoint for all internet traffic

Correct Answer: 1

Explanation

A NAT Gateway allows instances in private subnets to initiate outbound connections to the internet without making those instances directly reachable from the internet. The NAT Gateway is placed in a public subnet, while the private subnet’s route table directs internet-bound traffic to the NAT Gateway. An Internet Gateway alone does not provide the intended private-subnet architecture, and VPC Peering connects VPCs rather than the public internet. A NAT Gateway is therefore appropriate when private resources need controlled outbound internet connectivity.

Question 163

Which AWS service provides a managed relational database with automatic backups, patching, and maintenance?

1. Amazon DynamoDB
2. Amazon RDS
3. Amazon S3
4. Amazon ElastiCache

Correct Answer: 2

Explanation

Amazon Relational Database Service (RDS) is a managed service for relational database engines. AWS handles many infrastructure administration tasks, including provisioning, backups, patching, and maintenance, depending on the selected configuration and engine. RDS supports several popular relational database engines and can provide features such as Multi-AZ deployments and read replicas. DynamoDB is a NoSQL database, S3 is object storage, and ElastiCache provides in-memory caching. RDS is therefore appropriate when an application needs a managed SQL database without maintaining database servers manually.

Question 164

A company needs to connect hundreds of VPCs using a scalable hub-and-spoke network architecture. Which AWS service should be used?

1. VPC Peering
2. Internet Gateway
3. AWS Transit Gateway
4. NAT Gateway

Correct Answer: 3

Explanation

AWS Transit Gateway provides a centralized hub through which multiple VPCs and supported network connections can communicate. It is designed to simplify large-scale network architectures by avoiding the need to create individual peering connections between every VPC. Route tables associated with Transit Gateway attachments can control how traffic flows between connected networks. VPC Peering can become difficult to manage as the number of VPCs grows, while Internet and NAT Gateways address internet connectivity. Transit Gateway is therefore the appropriate solution for a scalable hub-and-spoke architecture.

Question 165

Which AWS service can automatically scale a serverless application based on incoming requests without requiring the customer to manage servers?

1. AWS Lambda
2. Amazon EBS
3. Amazon RDS
4. Amazon Route 53

Correct Answer: 1

Explanation

AWS Lambda automatically runs application code in response to events and can scale execution as the number of incoming requests changes. Customers do not need to provision or manage servers, operating systems, or traditional application infrastructure. Lambda can integrate with services such as API Gateway, S3, EventBridge, and DynamoDB to create event-driven serverless architectures. EBS provides block storage, RDS provides managed relational databases, and Route 53 provides DNS. Lambda is therefore the appropriate service for serverless compute that can automatically scale with incoming requests.

Question 166

Which S3 feature allows an organization to maintain multiple versions of the same object?

1. S3 Lifecycle
2. S3 Versioning
3. S3 Replication
4. S3 Transfer Acceleration

Correct Answer: 2

Explanation

S3 Versioning allows multiple versions of an object to be stored in the same bucket. This provides protection against accidental deletion and overwriting because previous versions can remain available for recovery. Versioning is also useful when combined with replication and lifecycle policies to manage object history and retention. Lifecycle controls storage transitions and expiration, replication copies objects to another destination, and Transfer Acceleration improves transfer performance. S3 Versioning is therefore the appropriate feature when an organization needs to preserve multiple versions of stored objects.

Question 167

Which AWS service provides a managed Kubernetes control plane?

1. Amazon ECS
2. AWS Fargate
3. Amazon EKS
4. Amazon EC2

Correct Answer: 3

Explanation

Amazon Elastic Kubernetes Service (EKS) is a managed Kubernetes service that provides a managed Kubernetes control plane. It allows organizations to deploy and operate Kubernetes-based applications while AWS manages key control-plane infrastructure. EKS can use different compute options, including managed nodes and AWS Fargate, depending on workload requirements. ECS is AWS’s own container orchestration service, Fargate provides serverless compute for containers, and EC2 provides virtual servers. EKS is therefore the correct choice when managed Kubernetes capabilities are required.

Question 168

A company wants to distribute application traffic across healthy EC2 instances located in multiple Availability Zones. Which combination should be used?

1. Amazon S3 and CloudFront
2. Elastic Load Balancing and EC2 Auto Scaling
3. AWS CloudTrail and AWS Config
4. Amazon Route 53 and AWS KMS

Correct Answer: 2

Explanation

Elastic Load Balancing can distribute incoming requests across healthy EC2 instances in multiple Availability Zones, while EC2 Auto Scaling can maintain the required number of instances as demand or instance health changes. Together, these services support highly available and scalable application architectures. S3 and CloudFront are primarily used for storage and content delivery, CloudTrail and Config provide auditing and configuration management, and Route 53 and KMS serve DNS and encryption functions. ELB with Auto Scaling is therefore the appropriate combination for distributing traffic across scalable compute resources.

Question 169

Which AWS service can provide a highly available DNS-based failover mechanism between a primary and secondary application endpoint?

1. Amazon Route 53
2. Amazon CloudWatch
3. AWS Direct Connect
4. Amazon SQS

Correct Answer: 1

Explanation

Amazon Route 53 supports failover routing, which can direct users to a primary endpoint under normal conditions and route them to a secondary endpoint when the primary becomes unhealthy. Route 53 health checks can be used to determine endpoint availability. This approach is useful for disaster recovery and active-passive architectures. CloudWatch provides monitoring, Direct Connect provides dedicated network connectivity, and SQS provides message queuing. Route 53 is therefore the appropriate service when DNS-based failover between application endpoints is required.

Question 170

Which AWS service can provide centralized storage for application secrets such as database passwords and API keys?

1. Amazon S3
2. AWS Secrets Manager
3. Amazon CloudWatch
4. AWS CloudTrail

Correct Answer: 2

Explanation

AWS Secrets Manager securely stores sensitive information such as database credentials, API keys, and other application secrets. Applications can retrieve secrets programmatically at runtime rather than embedding them directly in source code or configuration files. Secrets Manager also supports automatic rotation for supported secrets, helping reduce the security risks associated with long-lived credentials. S3 is object storage, CloudWatch provides monitoring, and CloudTrail records API activity. Secrets Manager is therefore the appropriate service for centralized and secure application secret management.

Question 171

Which AWS service can provide a temporary queueing layer that allows a producer to continue operating even when a consumer is temporarily unavailable?

1. Amazon SQS
2. Amazon CloudFront
3. Amazon RDS
4. AWS KMS

Correct Answer: 1

Explanation

Amazon SQS allows application components to communicate asynchronously by placing messages in a managed queue. If a consumer is temporarily unavailable or processing messages slowly, messages can remain in the queue until they are retrieved and processed. This decouples producers from consumers and improves application resilience. SQS also supports visibility timeouts, message retention, and dead-letter queues. CloudFront provides content delivery, RDS provides relational databases, and KMS manages encryption keys. SQS is therefore the appropriate service for buffering messages between independent application components.

Question 172

Which AWS service can be used to securely provide a web application with temporary AWS credentials for authenticated users?

1. Amazon Cognito Identity Pools
2. AWS CloudTrail
3. Amazon Route 53
4. AWS Config

Correct Answer: 1

Explanation

Amazon Cognito Identity Pools can provide temporary AWS credentials to authenticated or appropriately configured users, allowing applications to grant controlled access to AWS resources. Temporary credentials can be associated with IAM roles and permissions, reducing the need to distribute long-term AWS access keys to application users. CloudTrail records API activity, Route 53 provides DNS services, and Config evaluates resource configurations. Cognito Identity Pools are therefore suitable when an application needs to provide users with temporary, controlled access to AWS resources.

Question 173

A company wants to reduce the cost of storing old objects in Amazon S3 by automatically moving them to an archival storage class after 90 days. Which feature should be configured?

1. S3 Versioning
2. S3 Lifecycle policy
3. S3 Object Lock
4. S3 Access Points

Correct Answer: 2

Explanation

An S3 Lifecycle policy can automatically transition objects to different storage classes after specified periods. For example, objects that are rarely accessed after 90 days can be moved to an archival storage class to reduce storage costs. Lifecycle rules can also expire objects when they are no longer required. Versioning preserves multiple object versions, Object Lock protects objects from modification or deletion, and Access Points simplify access management. An S3 Lifecycle policy is therefore the appropriate feature for automatically transitioning aging objects to lower-cost storage.

Question 174

Which AWS service provides protection against common web application attacks by inspecting HTTP and HTTPS requests?

1. AWS WAF
2. AWS Shield only
3. Amazon GuardDuty
4. Amazon Macie

Correct Answer: 1

Explanation

AWS WAF is a web application firewall that allows organizations to inspect and control HTTP and HTTPS requests before they reach protected applications. Rules can be configured to block or allow traffic based on IP addresses, request patterns, headers, geographic conditions, and known attack characteristics. This makes WAF useful for mitigating common application-layer threats such as SQL injection and cross-site scripting. Shield primarily provides DDoS protection, GuardDuty detects suspicious activity, and Macie discovers sensitive data. AWS WAF is therefore the correct choice.

Question 175

Which AWS service can automatically identify unusual API activity and potential account compromise?

1. Amazon GuardDuty
2. Amazon S3
3. AWS Backup
4. Amazon EFS

Correct Answer: 1

Explanation

Amazon GuardDuty continuously analyzes relevant AWS activity and signals to identify suspicious behavior and potential security threats. It can detect patterns associated with compromised credentials, unusual API activity, malicious network behavior, and other threats. GuardDuty generates security findings that can be investigated or integrated with automated response workflows. S3 provides object storage, AWS Backup manages backups, and EFS provides file storage. GuardDuty is therefore the appropriate service when an organization needs managed threat detection for suspicious AWS activity.

Question 176

A company requires a database replica in another AWS Region for disaster recovery. Which Amazon RDS capability can support this requirement for supported engines?

1. Cross-Region read replica
2. Multi-AZ standby only
3. EBS snapshot only
4. Security group replication

Correct Answer: 1

Explanation

Amazon RDS supports cross-Region read replicas for supported database engines. A cross-Region read replica maintains a copy of the database in another AWS Region and can be used to improve disaster recovery capabilities or provide a read endpoint closer to users in another geographic area. Multi-AZ deployments primarily provide high availability within a Region, while EBS snapshots are storage backups and security groups control network traffic. A cross-Region read replica is therefore an appropriate option when maintaining a database copy in another Region is required.

Question 177

Which AWS service can centrally collect metrics, logs, and alarms for AWS resources and applications?

1. AWS CloudTrail
2. Amazon CloudWatch
3. AWS Config
4. AWS Organizations

Correct Answer: 2

Explanation

Amazon CloudWatch provides monitoring capabilities for AWS resources and applications, including metrics, logs, dashboards, and alarms. Organizations can use CloudWatch to monitor resource performance, detect operational problems, and trigger automated actions based on defined conditions. CloudTrail records API activity, Config tracks resource configurations, and Organizations manages multiple AWS accounts. CloudWatch is therefore the appropriate service when centralized monitoring of application and infrastructure metrics, logs, and alarms is required.

Question 178

Which AWS service allows a company to securely transfer large amounts of data between an on-premises environment and AWS using a dedicated network connection?

1. AWS Direct Connect
2. Amazon CloudFront
3. Amazon SQS
4. AWS Lambda

Correct Answer: 1

Explanation

AWS Direct Connect provides a dedicated network connection between an on-premises environment and AWS. It can provide more predictable network performance than internet-based connectivity and is useful for hybrid architectures, large-scale data transfers, and applications requiring consistent connectivity. Organizations can use Direct Connect with appropriate AWS networking services to access VPC resources and other AWS environments. CloudFront provides content delivery, SQS provides messaging, and Lambda provides serverless compute. Direct Connect is therefore the appropriate choice for dedicated hybrid network connectivity.

Question 179

Which disaster recovery strategy involves maintaining a minimal version of the critical infrastructure and scaling it up when a disaster occurs?

1. Backup and restore
2. Pilot light
3. Multi-site active-active
4. Full warm standby

Correct Answer: 2

Explanation

A pilot light disaster recovery strategy maintains only the essential components needed to support recovery, such as a continuously replicated database or minimal core infrastructure. When a disaster occurs, additional resources are provisioned or scaled up to restore the complete application environment. This approach generally costs less than maintaining a fully operational standby environment but takes longer to recover. Backup and restore starts recovery from stored backups, while warm standby maintains a scaled-down operational environment. Pilot light is therefore the appropriate strategy for minimal continuously running recovery infrastructure.

Question 180

Which AWS Well-Architected Framework pillar focuses on improving processes and procedures for effectively running and continuously improving workloads?

1. Performance Efficiency
2. Operational Excellence
3. Security
4. Sustainability

Correct Answer: 2

Explanation

The Operational Excellence pillar focuses on running workloads effectively and continuously improving operational processes. It includes practices such as preparing for operations, observing workloads, responding to events, learning from operational experience, and improving procedures over time. Performance Efficiency focuses on efficient resource use, Security focuses on protecting workloads and data, and Sustainability focuses on reducing environmental impacts. Operational Excellence is therefore the appropriate pillar when the objective is to establish effective operational practices and continuously improve how AWS workloads are managed.