Question 1

A company has a web application that stores user transactions in an Amazon DynamoDB table. To complywith regulations, the company must retain a copy of user transaction data for 7 years.Which solution will meet these requirements with the LEAST operational overhead?

Options :

A : Use DynamoDB point-in-time recovery to back up the table continuously.

B : Use AWS Backup to create backup schedules and retention policies for the table.

C : Create an on-demand backup of the table by using DynamoDB. Store the backup in an Amazon S3 bucket. Set an S3 Lifecycle configuration for the S3 bucket.

D : Create an Amazon EventBridge rule to invoke an AWS Lambda function. Configure the Lambda function to back up the table and to store the backup in an Amazon S3 bucket. Set an S3 Lifecycle configuration for the S3 bucket.

Answer: B

Question 2

A company is designing an application to maintain a record of customer orders. The application will generate events. The company wants to use an Amazon EventBridge event bus to send the application's events to an Amazon DynamoDB table. Which solution will meet these requirements?

Options :

A : Use the EventBridge default event bus. Configure DynamoDB Streams for the DynamoDB table that hosts the customer order data.

B : Create an EventBridge custom event bus. Create an AWS Lambda function as a target. Configure the Lambda function to forward the customer order data to the DynamoDB table.

C : Create an EventBridge partner event bus. Create an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe an AWS Lambda function to the SNS topic. Configure the Lambda function to read the customer order data and to forward the data to the DynamoDB table.

D : Create an EventBridge partner event bus. Create an AWS Lambda function as a target. Configure the Lambda function to forward the customer order data to the DynamoDB table.

Answer: C

Question 3

A company plans to deploy an application that uses an Amazon CloudFront distribution. The company willset an Application Load Balancer (ALB) as the origin for the distribution. The company wants to ensure thatusers access the ALB only through the CloudFront distribution. The company plans to deploy the solution in anew VPC.Which solution will meet these requirements?

Options :

A : Configure the network ACLs in the subnet where the ALB is deployed to allow inbound traf-fic only from the public IP addresses of the CloudFront edge locations.

B : Create a VPC origin for the CloudFront distribution. Set the VPC origin Amazon Resource Name (ARN) to the ARN of the ALB.

C : Create a security group that allows only inbound traffic from the public IP addresses of the CloudFront edge locations. Associate the security group with the ALB.

D : Create a VPC origin for the CloudFront distribution. Configure an ALB rule. Set the source IP condition to allow traffic only from the public IP addresses of the CloudFront edge locations.

Answer: C

Question 4

A solutions architect is creating a new Amazon CloudFront distribution for an application. Some of theinformation submitted by users is sensitive. The application uses HTTPS but needs another layer of security.The sensitive information should be protected throughout the entire application stack, and access to theinformation should be restricted to certain applications.Which action should the solutions architect take?

Options :

A : Configure a CloudFront signed URL.

B : Configure a CloudFront signed cookie.

C : Configure a CloudFront field-level encryption profile.

D : Configure CloudFront and set the Origin Protocol Policy setting to HTTPS Only for the Viewer Protocol Policy.

Answer: C

Question 5

A solutions architect is designing the architecture for a company website that is composed of static content.The company's target customers are located in the United States and Europe.Which architecture should the solutions architect recommend to MINIMIZE cost?

Options :

A : Store the website files on Amazon S3 in the us-east-2 Region. Use an Amazon CloudFront distribution with the price class configured to limit the edge locations in use.

B : Store the website files on Amazon S3 in the us-east-2 Region. Use an Amazon CloudFront distribution with the price class configured to maximize the use of edge locations.

C : Store the website files on Amazon S3 in the us-east-2 Region and the eu-west-1 Region. Use an Amazon CloudFront geolocation routing policy to route requests to the closest Region to the user.

D : Store the website files on Amazon S3 in the us-east-2 Region and the eu-west-1 Region. Use an Amazon CloudFront distribution with an Amazon Route 53 latency routing policy to route requests to the closest Region to the user.

Answer: A

Confidently Practice Online with Free SAA-C03 Exam Cram

Buying Options: