AWS Certified Solutions Architect - Associate (SAA-C03) - 2

You have configured a VPC with both a public and a private subnet. You need to deploy a web server and a database. You want the web server to be accessed from the Internet by customers. Which is the proper configuration for this architecture?

• Database outside the VPC for decoupling from web server, and web server in public subnet for internet access.

• Both web server and database in public subnets to facilitate internet access.

• Web server outside of VPC for internet access, database in private subnet.

• Web server in public subnet, database in private subnet.

You have been evaluating the NACLs in your company. Currently, you are looking at the default network ACL. Which statement is true regarding subnets and NACLs?

• The default NACL will always be associated with each subnet.

• Only public subnets can use the default NACL.

• Each subnet in your VPC must be associated with a network ACL. If you don't explicitly associate a subnet with a network ACL, the subnet is automatically associated with the default network ACL.

• You have to delete the default NACL before creating a custom NACL to associate with a subnet.

You work for an oil and gas company as a lead in data analytics. The company is using IoT devices to better understand their assets in the field (for example, pumps, generators, valve assemblies, and so on). Your task is to monitor the IoT devices in real-time to provide valuable insight that can help you maintain the reliability, availability, and performance of your IoT devices. What tool can you use to process streaming data in real time with standard SQL without having to learn new programming languages or processing frameworks?

• AWS RedShift

• Kinesis Data Analytics

• AWS Kinesis Streams

• AWS Lambda

You are managing S3 buckets in your organization. One of the buckets in your organization has gotten some bizarre uploads and you would like to be aware of these types of uploads as soon as possible. Because of that, you configure event notifications for this bucket. Which of the following is NOT a supported destination for event notifications?

• SQS

• SES

• SNS

• Lambda function

Jamal recently joined a small company as a Site Reliability Engineer on the cloud development team. The team leverages numerous AWS Lambda functions with several backend AWS resources, as well as other backend microservices. A recent update to some of the different functions' code has begun to cause massive delays within the application workloads. The development initially turned on more detailed logging within their code base; however, this did not provide the application insights required to troubleshoot the issue. What can Jamal do to more easily gain a better understanding of the response times of the affected AWS Lambda functions, as well as all the connected downstream resources within the entire application flow?

• Run a containerized version of the application and output log files with responses.

• Enable AWS X-Ray within each function to gain detailed information about responses.

• Update the code to log their response times for each function.

• 
  

  This is not needed. Simply increase the resource settings for each function.

You have been assigned the review of the security in your company AWS cloud environment. Your final deliverable will be a report detailing potential security issues. One of the first things that you need to describe is the responsibilities of the company under the shared responsibility model. Which measure is the customer’s responsibility?

• EC2 instance OS patching

• Physical security of data centers

• Managing underlying network infrastructure

• Virtualization infrastructure

You have been evaluating the NACLs in your company. Most of the NACLs are configured the same:

100 All Traffic Allow

200 All Traffic Deny

* All Traffic Deny

How can the last rule * All Traffic Deny be edited?

• The Deny can be changed to Allow.

• 
  You can't modify or remove this rule.

• It’s a placeholder and can be deleted.

• Any number can replace the *.

A company has a great deal of data in S3 buckets for which they want to create a database. Creating the RDS database, normalizing the data, and migrating to the RDS database will take time and is the long-term plan. But there's an immediate need to query this data to retrieve information necessary for an audit. Which AWS service will enable querying data in S3 using standard SQL commands?

• DynamoDB

• There is no such service, but there are third-party tools.

• Amazon SQL Connector

• Amazon Athena

You are working for a large financial institution and have been tasked with creating a relational database solution to deal with a read-heavy workload. The database needs to be highly available within the Oregon region and quickly recover if an Availability Zone goes offline. Which of the following would you select to meet these requirements?

(Choose2)

• Create a read replica and point your read workloads to the new endpoint RDS provides.

• Use an Amazon Aurora global database to ensure a region failure won't break the application.

• Split your database into multiple RDS instances across different regions. In the event of a failure, point your application to the new region.

• Using RDS, create a read replica. If an AZ fails, RDS will automatically cut over to the read replica.

• Enable Multi-AZ support for the RDS database.

You work for an online education company that offers a 7-day unlimited access free trial for all new users. You discover that someone has been taking advantage of this and has created a script to register a new user every time the 7-day trial ends. They also use this script to download large amounts of video files, which they then put up on popular pirate websites. You need to find a way to automate the detection of fraud like this using machine learning and artificial intelligence. Which AWS service would best suit this?

• Amazon Fraud Detector

• Amazon Inspector

• Amazon Detective

• Amazon Rekognition