AWS Certified Solutions Architect - Associate (SAA-C03) - 3

What EBS Volume type gives you the highest performance in terms of IOPS?

• EBS Provisioned IOPS SSD (io2)

• 
  

  EBS Provisioned IOPS SSD (io2 Block Express)

• 
  

  EBS Provisioned IOPS SSD (io1)

• EBS General Purpose SSD (gp3)

You are a solutions architect for an online gambling company. You notice a series of web-layer DDoS attacks. This is coming from a large number of multiple IP addresses. In order to mitigate these web-layer DDoS attacks, you have been asked to implement a rule capable of blocking all IPs that have more than 2,000 requests in the last 5 minute interval. What should you do?

• Update your VPC's network access control list (NACL) and block access to the IP addresses as and when they come in

• Create a rate-based rule on your AWS WAF and associate the web access control list (ACL) to the Application Load Balancer

• Create a standard rule on your AWS WAF and associate the web access control list (ACL) to the Application Load Balancer

• Use AWS Trusted Advisor to filter the traffic

You work for a large chip manufacturer in Taiwan who has a large dedicated cluster running MongoDB. Unfortunately, they have a large period of downtime and would now like to migrate their MongoDB instance to the AWS cloud. They do not want to make any changes to their application architecture. What AWS service would you recommend to use for MongoDB?

• Amazon Neptune

• Amazon DocumentDB

• Aurora Serverless

• Amazon QLDB

You have a large number of files in S3 and you have been asked to build an index of these files. In order to do this, you need to read the the first 250 bytes of each object in S3. This data contains some metadata about the content of the file itself. Unfortunately, there are over 10,000,000 files in your S3 bucket, and this is about 100 TB of data. The data will then need to be stored in an Aurora Database. How can you build this index in the fastest way possible?

• Create a program to use a byte range fetch for the first 250 Bytes of data and then store this in the Aurora Database.

• Use AWS Athena to query the S3 bucket for the first 250 bytes of data. Take the result of the query and build an Aurora Database.

• Use the index bucket function in AWS Macie to query the S3 bucket and then load this data in to the Aurora Database.

• 
  

  Create a program to use Macie to select the first 250 Bytes of data and then store this in Aurora Database.

Your website is an online store, and it has sporadic and unpredictable transactional workloads throughout the day and night that are very hard to predict. The website is currently being hosted at your corporate data center and needs to be migrated to AWS. A new relational database is required that autoscales capacity to meet these peaks as well as being able to scale back when not being used. Which database technology would be best suited for your website?

• Amazon Redshift with Auto Scaling enabled

• Aurora Serverless DB cluster

• DynamoDB with Auto Scaling enabled

• Amazon RDS with Auto Scaling enabled and read replicas turned on

Janelle works as a cloud solutions architect for a large enterprise that has begun the process of migrating to AWS for all of their application needs. The CTO and CISO have already decided that AWS Organizations is a required service for the multi-account environment that will be put into place. Janelle has been brought in to help solve the primary concern of member AWS accounts not following the required compliance rules set forth by the company. They want to both send alerts on configuration changes and prevent specific actions from occurring. Which solution would be the most efficient in solving this projected problem?

• Create individual AWS Config rules in each AWS account. Set up AWS Lambda functions in each AWS account to remediate any suspected drift.

• Install third-party SIEM software on Amazon EC2 instances in each account. Attach to them a Read-Only IAM instance profile within the respective account. Have them generate alerts for each flagged activity.

• Create a set of Global AWS Config rules that can cover all Regions in the management account that apply to the member accounts. Set up an AWS Lambda function in the management AWS account to alert an administrator when drift is detected.

• Create new AWS accounts using AWS Control Tower. Leverage the preventative and detective guardrails that come with it to prevent governance drift as well as send alerts on suspicious activities.

A Fintech startup has a small application that receives intermittent and random traffic. At some points, it may not receive any traffic at all; at other times, it might receive tens of thousand of queries at once. You need to rearchitect the application for the AWS cloud using a relational database. What database technology would best suit your needs while keeping costs at a minimum?

• RDS for MySQL

• DynamoDB

• Aurora Serverless

• NeptuneDB

You have a web application that is hosted on a series of EC2 instances that have an Application Load Balancer in front of them. You have created a new CloudFront distribution. You then set up its origin to point to your ALB. You need to provide access to hundreds of private files served by your CloudFront distribution. What should you use?

• CloudFront Origin Access Identity

• CloudFront Signed URLS

• CloudFront HTTPS encryption

• 
  

  CloudFront signed cookies

A financial institution has begun using AWS services and plans to migrate as much of their IT infrastructure and applications to AWS as possible. The nature of the business dictates that strict compliance practices be in place. The AWS team has configured AWS CloudTrail to help meet compliance requirements and be ready for any upcoming audits. Which item is not a feature of AWS CloudTrail?

• Monitor Auto Scaling Groups and optimize resource utilization.

• Track changes to resources.

• Answer simple questions about user activity.

• Enables compliance.

You work at a mortgage brokerage firm in New York City. An intern has recently joined the company and you discover that they have been storing customer data in public S3 buckets. Because the company uses so many different S3 buckets, you need to identify a quick and efficient way to discover what personally identifiable information (PII) is being stored in S3. Which AWS service should you use?

• 
  

  AWS Trusted Advisor

• Amazon Athena

• Amazon Macie

• Amazon Inspector