Question 1

A company wants to create an API to authorize users by using JSON Web Tokens (JWTs). The companyneeds to support dynamic access to multiple AWS services by using path-based routing.Which solution will meet these requirements?

Options :

A : Deploy an Application Load Balancer behind an Amazon API Gateway REST API. Configure IAM authorization.

B : Deploy an Application Load Balancer behind an Amazon API Gateway HTTP API. Use Amazon Cognito for authorization.

C : Deploy a Network Load Balancer behind an Amazon API Gateway REST API. Use an AWS Lambda function as a custom authorizer.

D : Deploy a Network Load Balancer behind an Amazon API Gateway HTTP API. Use Amazon Cognito for authorization.

Answer: C

Question 2

A company needs to provide a team of contractors with temporary access to the company's AWS resourcesfor a short-term project. The contractors need different levels of access to AWS services. The company needsto revoke permissions for all the contractors when the project is finished.Which solution will meet these requirements with the LEAST operational overhead?

Options :

A : Use AWS IAM to create a user account for each contractor. Attach policies that define access levels for the contractors to the user accounts. Manually deactivate the accounts when the project is finished.

B : Use AWS Security Token Service (AWS STS) to generate temporary credentials for the contractors. Provide the contractors access based on predefined roles. Set the access to automatically expire when the project is finished.

C : Configure AWS Config rules to monitor the contractors' access patterns. Use AWS Config rules to automatically revoke permissions that are not in use or that are too permissive.

D : Use AWS CloudTrail and custom Amazon EventBridge triggers to audit the contractors' actions. Adjust the permissions for each contractor based on activity logs.

Answer: B

Question 3

A company is designing an application to maintain a record of customer orders. The application will generate events. The company wants to use an Amazon EventBridge event bus to send the application's events to an Amazon DynamoDB table. Which solution will meet these requirements?

Options :

A : Use the EventBridge default event bus. Configure DynamoDB Streams for the DynamoDB table that hosts the customer order data.

B : Create an EventBridge custom event bus. Create an AWS Lambda function as a target. Configure the Lambda function to forward the customer order data to the DynamoDB table.

C : Create an EventBridge partner event bus. Create an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe an AWS Lambda function to the SNS topic. Configure the Lambda function to read the customer order data and to forward the data to the DynamoDB table.

D : Create an EventBridge partner event bus. Create an AWS Lambda function as a target. Configure the Lambda function to forward the customer order data to the DynamoDB table.

Answer: C

Question 4

A company runs a MySQL database on a single Amazon EC2 instance.The company needs to improve availability of the database to prepare for power outages.Which solution will meet this requirement?

Options :

A : Add an Application Load Balancer (ALB) in front of the EC2 instance.

B : Configure EC2 automatic instance recovery to move the instance to another Availability Zone.

C : Migrate the MySQL database to Amazon RDS and enable Multi-AZ deployment.

D : Enable termination protection for the EC2 instance.

Answer: C

Question 5

A company stores sensitive customer data in an Amazon DynamoDB table. The company frequently updatesthe data. The company wants to use the data to personalize offers for customers.The company's analytics team has its own AWS account. The analytics team runs an application on AmazonEC2 instances that needs to process data from the DynamoDB tables. The company needs to follow securitybest practices to create a process to regularly share data from DynamoDB to the analytics team.Which solution will meet these requirements?

Options :

A : Export the required data from the DynamoDB table to an Amazon S3 bucket as multiple JSON files. Provide the analytics team with the necessary IAM permissions to access the S3 bucket.

B : Allow public access to the DynamoDB table. Create an IAM user that has permission to access DynamoDB. Share the IAM user with the analytics team.

C : Allow public access to the DynamoDB table. Create an IAM user that has read-only permission for DynamoDB. Share the IAM user with the analytics team.

D : Create a cross-account IAM role. Create an IAM policy that allows the AWS account ID of the analytics team to access the DynamoDB table. Attach the IAM policy to the IAM role. Establish a trust relationship between accounts.

Answer: D

Confidently Practice Online with Free SAA-C03 Exam Cram

Buying Options: