Amazon Web Services passleader pdf Saa-c03 Study Guide by Soraya q40 vce pdf

Page: 13 / 65

Exam Name:	AWS Certified Solutions Architect - Associate (SAA-C03)
Exam Code:	SAA-C03 Dumps
Vendor:	Amazon Web Services	Certification:	AWS Certified Associate
Questions:	879 Q&A's	Shared By:	soraya

Question 52

A global ecommerce company runs its critical workloads on AWS. The workloads use an Amazon RDS for PostgreSQL DB instance that is configured for a Multi-AZ deployment.

Customers have reported application timeouts when the company undergoes database failovers. The company needs a resilient solution to reduce failover time

Which solution will meet these requirements?

Options:

Create an Amazon RDS Proxy. Assign the proxy to the DB instance.

Create a read replica for the DB instance Move the read traffic to the read replica.

Enable Performance Insights. Monitor the CPU load to identify the timeouts.

Take regular automatic snapshots Copy the automatic snapshots to multiple AWS Regions

Discussion

Question 53

A solutions architect is designing a web application that will run on Amazon EC2 instances behind an Application Load Balancer (ALB). The company strictly requires that the application be resilient against malicious internet activity and attacks, and protect against new common vulnerabilities and exposures.

What should the solutions architect recommend?

Options:

Leverage Amazon CloudFront with the ALB endpoint as the origin.

Deploy an appropriate managed rule for AWS WAF and associate it with the ALB.

Subscribe to AWS Shield Advanced and ensure common vulnerabilities and exposures are blocked.

Configure network ACLs and security groups to allow only ports 80 and 443 to access the EC2 instances.

Discussion

Question 54

An ecommerce company runs applications in AWS accounts that are part of an organization in AWS Organizations. The applications run on Amazon Aurora PostgreSQL databases across all the accounts. The company needs to prevent malicious activity and must identify abnormal failed and incomplete login attempts to the databases.

Options:

Attach service control policies (SCPs) to the root of the organization to identify the failed login attempts.

Enable the Amazon RDS Protection feature in Amazon GuardDuty for the member accounts of the organization.

Publish the Aurora general logs to a log group in Amazon CloudWatch Logs. Export the log data to a central Amazon S3 bucket.

Publish all the Aurora PostgreSQL database events in AWS CloudTrail to a central Amazon S3 bucket.

Discussion

Honey

I highly recommend it. They made a big difference for me and I'm sure they'll help you too. Just make sure to use them wisely and not solely rely on them. They should be used as a supplement to your regular studies.

Antoni Apr 8, 2026

Good point. Thanks for the advice. I'll definitely keep that in mind.

Wyatt

Passed my exam… Thank you so much for your excellent Exam Dumps.

Arjun Apr 10, 2026

That sounds really useful. I'll definitely check it out.

Anaya

I found so many of the same questions on the real exam that I had already seen in the Cramkey Dumps. Thank you so much for making exam so easy for me. I passed it successfully!!!

Nina Apr 11, 2026

It's true! I felt so much more confident going into the exam because I had already seen and understood the questions.

Nell

Are these dumps reliable?

Ernie Apr 6, 2026

Yes, very much so. Cramkey Dumps are created by experienced and certified professionals who have gone through the exams themselves. They understand the importance of providing accurate and relevant information to help you succeed.

Rosalie

I passed. I would like to tell all students that they should definitely give Cramkey Dumps a try.

Maja Apr 8, 2026

That sounds great. I'll definitely check them out. Thanks for the suggestion!

Question 55

A company provides devices to users. When a device is registered, its ID is added to DynamoDB. A daily job activates devices using two Lambda functions:

• The Retrieve function lists unregistered device IDs.

• The Retrieve function then calls the Activate function in a loop to register each device.

The number of activations is increasing, and the company wants to avoid Lambda timeouts without modifying existing functions.

Which solution will scale appropriately?

Options:

Use EventBridge Scheduler to periodically invoke the Retrieve function.

Invoke the Activate function from DynamoDB Streams when a device ID is added.

Use Step Functions to call the Retrieve function and use a Map state to run the Activate function for each ID.

Move the Retrieve function to EC2 for longer processing time.