Amazon Web Services certkiller saa-c03 Exam Questions Tutorials by Kobie q321 vce pdf

Page: 9 / 68

Exam Name:	AWS Certified Solutions Architect - Associate (SAA-C03)
Exam Code:	SAA-C03 Dumps
Vendor:	Amazon Web Services	Certification:	AWS Certified Associate
Questions:	911 Q&A's	Shared By:	kobie

Question 36

A company is planning to migrate customer records to an Amazon S3 bucket. The company needs to ensure that customer records are protected against unauthorized access and are encrypted in transit and at rest. The company must monitor all access to the S3 bucket.

Options:

Use AWS Key Management Service (AWS KMS) to encrypt customer records at rest. Create an S3 bucket policy that includes the aws:SecureTransport condition. Use an IAM policy to control access to the records. Use AWS CloudTrail to monitor access to the records.

Use AWS Nitro Enclaves to encrypt customer records at rest. Use AWS Key Management Service (AWS KMS) to encrypt the records in transit. Use an IAM policy to control access to the records. Use AWS CloudTrail and AWS Security Hub to monitor access to the records.

Use AWS Key Management Service (AWS KMS) to encrypt customer records at rest. Create an Amazon Cognito user pool to control access to the records. Use AWS CloudTrail to monitor access to the records. Use Amazon GuardDuty to detect threats.

Use server-side encryption with Amazon S3 managed keys (SSE-S3) with default settings to encrypt the records at rest. Access the records by using an Amazon CloudFront distribution that uses the S3 bucket as the origin. Use IAM roles to control access to the records. Use Amazon CloudWatch to monitor access to the records.

Discussion

Question 37

A company stores petabytes of historical medical information on premises. The company has a process to manage encryption of the data to comply with regulations. The company needs a cloud-based solution for data backup, recovery, and archiving. The company must retain control over the encryption key material. Which combination of solutions will meet these requirements? (Select TWO.)

Options:

Create an AWS Key Management Service (AWS KMS) key without key material. Import the company ' s key material into the KMS key.

Create an AWS Key Management Service (AWS KMS) encryption key that contains key material generated by AWS KMS.

Store the data in Amazon S3 Standard-Infrequent Access (S3 Standard-IA) storage. Use S3 Bucket Keys with AWS Key Management Service (AWS KMS) keys.

Store the data in an Amazon S3 Glacier storage class. Use server-side encryption with customer-provided keys (SSE-C).

Store the data in AWS Snowball devices. Use server-side encryption with AWS KMS keys (SSE-KMS).

Discussion

Zayaan

Successfully aced the exam… Thanks a lot for providing amazing Exam Dumps.

Harmony Jun 21, 2026

That's fantastic! I'm glad to hear that their dumps helped you. I also used them and found it accurate.

Aryan

Absolutely rocked! They are an excellent investment for anyone who wants to pass the exam on the first try. They save you time and effort by providing a comprehensive overview of the exam content, and they give you a competitive edge by giving you access to the latest information. So, I definitely recommend them to new students.

Jessie May 31, 2026

did you use PDF or Engine? Which one is most useful?

Osian

Dumps are fantastic! I recently passed my certification exam using these dumps and I must say, they are 100% valid.

Azaan Jun 24, 2026

They are incredibly accurate and valid. I felt confident going into my exam because the dumps covered all the important topics and the questions were very similar to what I saw on the actual exam. The team of experts behind Cramkey Dumps make sure the information is relevant and up-to-date.

Esmae

I highly recommend Cramkey Dumps to anyone preparing for the certification exam.

Mollie Jun 25, 2026

Absolutely. They really make it easier to study and retain all the important information. I'm so glad I found Cramkey Dumps.

Question 38

A company runs a web application that uses Amazon RDS for MySQL to store relational data. Data in the database does not change frequently.

A solutions architect notices that during peak usage times, the database has performance issues when it serves the data. The company wants to improve the performance of the database.

Which combination of steps will meet these requirements? (Select TWO.)

Options:

Integrate AWS WAF with the application.

Create a read replica for the database. Redirect read traffic to the read replica.

Create an Amazon ElastiCache (Memcached) cluster. Configure the application and the database to integrate with the cluster.

Use the Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA) storage class to store the data that changes infrequently.

Migrate the database to Amazon DynamoDB. Configure the application to use the DynamoDB database.

Discussion

Question 39

A city ' s weather forecast team is using Amazon DynamoDB in the data tier for an application. The application has several components. The analysis component of the application requires repeated reads against a large dataset. The application has started to temporarily consume all the read capacity in the DynamoDB table and is negatively affecting other applications that need to access the same data.

Which solution will resolve this issue with the LEAST development effort?

Options:

Use DynamoDB Accelerator (DAX).

Use Amazon CloudFront in front of DynamoDB.

Create a DynamoDB table with a local secondary index (LSI).

Use Amazon ElastiCache in front of DynamoDB.