Free Amazon SAA-C03 Exam Questions

Question 1

A marketing team wants to build a campaign for an upcoming multi-sport event. The team has news reports from the past five years in PDF format. The team needs a solution to extract insights about the content and the sentiment of the news reports. The solution must use Amazon Textract to process the news reports.

Which solution will meet these requirements with the LEAST operational overhead?

A : Provide the extracted insights to Amazon Athena for analysis. Store the extracted insights and analysis in an Amazon S3 bucket.

B : Store the extracted insights in an Amazon DynamoDB table. Use Amazon SageMaker to build a sentiment model.

C : Provide the extracted insights to Amazon Comprehend for analysis. Save the analysis to an Amazon S3 bucket.

D : Store the extracted insights in an Amazon S3 bucket. Use Amazon QuickSight to visualize and analyze the data.

Answer: C

Question 2

A company is designing a new application that uploads files to an Amazon S3 bucket. The uploadedfiles are processed to extract metadata.Processing must take less than 5 seconds. The volume and frequency of the uploads vary from a fewfiles each hour to hundreds of concurrent uploads.Which solution will meet these requirements MOST cost-effectively?

A : Configure AWS CloudTrail trails to log Amazon S3 API calls. Use AWS AppSync to process the files.

B : Configure a new object created S3 event notification within the bucket to invoke an AWS Lambda function to process the files.

C : Configure Amazon Kinesis Data Streams to deliver the files to the S3 bucket. Invoke an AWS Lambda function to process the files.

D : Deploy an Amazon EC2 instance. Create a script that lists all files in the S3 bucket and processes new files. Use a cron job that runs every minute to run the script.

Answer: B

Question 3

A company is developing a new application on AWS. The application consists of an Amazon Elastic Container Service (Amazon ECS) cluster, an Amazon S3 bucket that contains assets for the application, and an Amazon RDS for MySQL database that contains the dataset for the application. The dataset contains sensitive information. The company wants to ensure that only the ECS cluster can access the data in the RDS for MySQL database and the data in the S3 bucket.

Which solution will meet these requirements?

A : Create a new AWS Key Management Service (AWS KMS) customer managed key to encrypt both the S3 bucket and the RDS for MySQL database. Ensure that the KMS key policy includes encrypt and decrypt permissions for the ECS task execution role.

B : Create an AWS Key Management Service (AWS KMS) AWS managed key to encrypt both the S3 bucket and the RDS for MySQL database. Ensure that the S3 bucket policy specifies the ECS task execution role as a user.

C : Create an S3 bucket policy that restricts bucket access to the ECS task execution role. Create a VPC endpoint for Amazon RDS for MySQL. Update the RDS for MySQL security group to allow access from only the subnets that the ECS cluster will generate tasks in.

D : Create a VPC endpoint for Amazon RDS for MySQL. Update the RDS for MySQL security group to allow access from only the subnets that the ECS cluster will generate tasks in. Create a VPC endpoint for Amazon S3. Update the S3 bucket policy to allow access from only the S3 VPC endpoint.

Answer: A

Question 4

A solutions architect is designing a three-tier web application. The architecture consists of an internet-facing Application Load Balancer (ALB) and a web tier that is hosted on Amazon EC2 instances in private subnets. The application tier with the business logic runs on EC2 instances in private subnets. The database tier consists of Microsoft SQL Server that runs on EC2 instances in private subnets. Security is a high priority for the company.

Which combination of security group configurations should the solutions architect use? (Choose three.)

A : Configure the security group for the web tier to allow inbound HTTPS traffic from the security group for the ALB.

B : Configure the security group for the web tier to allow outbound HTTPS traffic to 0.0.0.0/0.

C : Configure the security group for the database tier to allow inbound Microsoft SQL Server traffic from the security group for the application tier.

D : Configure the security group for the database tier to allow outbound HTTPS traffic and Microsoft SQL Server traffic to the security group for the web tier.

E : Configure the security group for the application tier to allow inbound HTTPS traffic from the security group for the web tier.

F : Configure the security group for the application tier to allow outbound HTTPS traffic and Microsoft SQL Server traffic to the security group for the web tier.

Answer: A,C,E

Question 5

A company is migrating an application from on-premises servers to Amazon EC2 instances. As part of the migration design requirements, a solutions architect must implement infrastructure metric alarms. The company does not need to take action if CPU utilization increases to more than 50% for a short burst of time. However, if the CPU utilization increases to more than 50% and read IOPS on the disk are high at the same time, the company needs to act as soon as possible. The solutions architect also must reduce false alarms. What should the solutions architect do to meet these requirements?

A : eate Amazon CloudWatch composite alarms where possible

B : eate Amazon CloudWatch dashboards to visualize the metrics and react to issues quickly.

C : eate Amazon CloudWatch Synthetics canaries to monitor the application and raise an alarm

D : eate single Amazon CloudWatch metric alarms with multiple metric thresholds where possible

Answer: A