Free AWS-CERTIFIED-SOLUTIONS-ARCHITECT-ASSOCIATE-SAA-C03 Amazon AWS-CERTIFIED-SOLUTIONS-ARCHITECT-ASSOCIATE-SAA-C03 Practice Test Question - Page 20

Question 58 (Topic 1)

A company has an on-premises MySQL database that handles transactional data. The company is migrating the database to the AWS Cloud. The migrated database must maintain compatibility with the company's applications that use the database. The migrated database also must scale automatically during periods of increased demand. Which migration solution will meet these requirements?

Select an option, then click Submit answer.

○ Use native MySQL tools to migrate the database to Amazon RDS for MySQL. Configure elastic storage scaling.
○ Migrate the database to Amazon Redshift by using the mysqldump utility. Turn on Auto Scaling for the Amazon Redshift cluster.
○ Use AWS Database Migration Service (AWS DMS) to migrate the database to Amazon Aurora. Turn on Aurora Auto Scaling.
○ Use AWS Database Migration Service (AWS DMS) to migrate the database to Amazon DynamoDB. Configure an Auto Scaling policy.

Reference / correct answer:

Use AWS Database Migration Service (AWS DMS) to migrate the database to Amazon Aurora. Turn on Aurora Auto Scaling.

Most accepted answer: C. Use AWS Database Migration Service (AWS DMS) to migrate the database to Amazon Aurora. Turn on Aurora Auto Scaling.

Community votes: C=5

Selected Answer: C The key reasons are: DMS provides an easy migration path from MySQL to Aurora while minimizing downtime. Aurora is a MySQL-compatible relational database service that will maintain compatibility with the company's applications. Aurora Auto Scaling allows the database to automatically scale up and down based on demand to handle increased workloads. RDS MySQL (Option A) does not scale as well as the Aurora architecture. Redshift (Option B) is for analytics, not transactional data, and may not be compatible. DynamoDB (Option D) is a NoSQL datastore and lacks MySQL compatibility. upvoted 9 times

Selected Answer: C A is wrong as you cannot use native MySQL tools for migration. Happy to be corrected though! B Redshift is not compatible with MySQL D is DynamoDB C Aurora MySQL is compatible and supports auto scaling upvoted 3 times

Selected Answer: C on-premises MySQL database, transactional data, maintain compatibility, scale automatically = Amazon Aurora migrating the database to the AWS Cloud = AWS Database Migration Service upvoted 2 times

Selected Answer: C Aurora is a MySQL-compatible relational database service upvoted 2 times

Selected Answer: C Aurora is better in autoscaling then RDS upvoted 2 times

Question 59 (Topic 1)

A company has a large workload that runs every Friday evening. The workload runs on Amazon EC2 instances that are in two Availability Zones in the us-east-1 Region. Normally, the company must run no more than two instances at all times. However, the company wants to scale up to six instances each Friday to handle a regularly repeating increased workload. Which solution will meet these requirements with the LEAST operational overhead?

Select an option, then click Submit answer.

○ Create a reminder in Amazon EventBridge to scale the instances.
○ Create an Auto Scaling group that has a scheduled action.
○ Create an Auto Scaling group that uses manual scaling.
○ Create an Auto Scaling group that uses automatic scaling.

Reference / correct answer:

Create an Auto Scaling group that has a scheduled action.

Most accepted answer: B. Create an Auto Scaling group that has a scheduled action.

Community votes: B=6

B is correct. https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-scheduled-scaling.html upvoted 9 times

Selected Answer: B A - too much operation overhead, manually provisioning the instances after you receive the reminder from eventbridge B - right answer, as you can scale up the EC2 instances and keep them ready before large overload time C - too much operation overhead in manually scaling D - automatic scaling will scale up the instances after some duration after it has encountered the heavy workload traffic, not ideal upvoted 3 times

Selected Answer: B runs every Friday evening = an Auto Scaling group that has a scheduled action upvoted 3 times

Selected Answer: B The key reasons: Auto Scaling scheduled actions allow defining specific dates/times to scale out or in. This can be used to scale to 6 instances every Friday evening automatically. Scheduled scaling removes the need for manual intervention to scale up/down for the workload. EventBridge reminders and manual scaling require human involvement each week adding overhead. Automatic scaling responds to demand and may not align perfectly to scale out every Friday without additional tuning. Scheduled Auto Scaling actions provide the automation needed to scale for the weekly workload without ongoing operational overhead. upvoted 4 times

Selected Answer: B Predicted period.. So schedule the instance upvoted 4 times

Question 60 (Topic 1)

A company is creating a REST API. The company has strict requirements for the use of TLS. The company requires TLSv1.3 on the API endpoints. The company also requires a specific public third-party certificate authority (CA) to sign the TLS certificate. Which solution will meet these requirements?

Select an option, then click Submit answer.

○ Use a local machine to create a certificate that is signed by the third-party CImport the certificate into AWS Certificate Manager (ACM). Create an HTTP API in Amazon API Gateway with a custom domain. Configure the custom domain to use the certificate.
○ Create a certificate in AWS Certificate Manager (ACM) that is signed by the third-party CA. Create an HTTP API in Amazon API Gateway with a custom domain. Configure the custom domain to use the certificate.
○ Use AWS Certificate Manager (ACM) to create a certificate that is signed by the third-party CA. Import the certificate into AWS Certificate Manager (ACM). Create an AWS Lambda function with a Lambda function URL. Configure the Lambda function URL to use the certificate.
○ Create a certificate in AWS Certificate Manager (ACM) that is signed by the third-party CA. Create an AWS Lambda function with a Lambda function URL. Configure the Lambda function URL to use the certificate.

Reference / correct answer:

Use a local machine to create a certificate that is signed by the third-party CImport the certificate into AWS Certificate Manager (ACM). Create an HTTP API in Amazon API Gateway with a custom domain. Configure the custom domain to use the certificate.

Most accepted answer: A. Use a local machine to create a certificate that is signed by the third-party CImport the certificate into AWS Certificate Manager (ACM). Create an HTTP API in Amazon API Gateway with a custom domain. Configure the custom domain to use the certificate.

Community votes: A=9, B=3

Selected Answer: A I don't understand why some many people vote B. In ACM, you can either request certificate from Amazon CA or import an existing certificate. There is no option in ACM that allow you to request a certificate that can be signed by third party CA. upvoted 22 times markoniz 2 years, 10 months ago I fully agree upvoted 6 times wsdasdasdqwdaw 2 years, 9 months ago Hmm AWS is saying: ACM certificates can be used to establish secure communications across the internet or within an internal network. You can request a publicly trusted certificate directly from ACM (an "ACM certificate") or import a publicly trusted certificate issued by a third party. Self-signed certificates are also supported. To provision your organization's internal PKI, you can issue ACM certificates signed by a private certificate authority (CA) created and managed by AWS Private CA. The CA may either reside in your account or be shared with you by a different account. https://docs.aws.amazon.com/acm/latest/userguide/gs.html upvoted 5 times pentium75 2 years, 7 months ago Exactly. You can "import [not create] a publicly trusted certificate issued by a third party". upvoted 5 times ... ... ...

I fully agree upvoted 6 times wsdasdasdqwdaw 2 years, 9 months ago Hmm AWS is saying: ACM certificates can be used to establish secure communications across the internet or within an internal network. You can request a publicly trusted certificate directly from ACM (an "ACM certificate") or import a publicly trusted certificate issued by a third party. Self-signed certificates are also supported. To provision your organization's internal PKI, you can issue ACM certificates signed by a private certificate authority (CA) created and managed by AWS Private CA. The CA may either reside in your account or be shared with you by a different account. https://docs.aws.amazon.com/acm/latest/userguide/gs.html upvoted 5 times pentium75 2 years, 7 months ago Exactly. You can "import [not create] a publicly trusted certificate issued by a third party". upvoted 5 times ... ...

Hmm AWS is saying: ACM certificates can be used to establish secure communications across the internet or within an internal network. You can request a publicly trusted certificate directly from ACM (an "ACM certificate") or import a publicly trusted certificate issued by a third party. Self-signed certificates are also supported. To provision your organization's internal PKI, you can issue ACM certificates signed by a private certificate authority (CA) created and managed by AWS Private CA. The CA may either reside in your account or be shared with you by a different account. https://docs.aws.amazon.com/acm/latest/userguide/gs.html upvoted 5 times pentium75 2 years, 7 months ago Exactly. You can "import [not create] a publicly trusted certificate issued by a third party". upvoted 5 times ...

Exactly. You can "import [not create] a publicly trusted certificate issued by a third party". upvoted 5 times

Selected Answer: B AWS Certificate Manager (ACM) is a service that lets you easily provision, manage, and deploy SSL/TLS certificates for use with AWS services and your internal resources. By creating a certificate in ACM that is signed by the third-party CA, the company can meet its requirement for a specific public third-party CA to sign the TLS certificate. upvoted 9 times pentium75 2 years, 7 months ago Sounds like ChatGPT answer, "creating a certificate in ACM that is signed by the third-party CA" is not possible. upvoted 5 times ...

Free AWS-CERTIFIED-SOLUTIONS-ARCHITECT-ASSOCIATE-SAA-C03 – Amazon AWS-CERTIFIED-SOLUTIONS-ARCHITECT-ASSOCIATE-SAA-C03 Practice Test Question