SAA_C03_202411

Q2 A company is developing a two-tier web application on AWS.The company's developers ave deployed the application on an Amazon EC2 instance that connects directly to a packend Amazon RDS database.The company must not hardcode database credentials in he application.The company must also implement a solution to automatically rotate the latabase credentials on a reaular basis.Which solution will meet these requirements with the LEAST operational overhead? 一家公司正在 AWS 上开发一个两层Web 应用程序.该公司的开发人员已将该应用程序部署在直接连接到后端Amazon RDS 数据库的Amazon EC2实例上，该公司不得在应用程序中硬编码数据库凭证.该公司还必须实施定期自动轮换数据库凭据的解决方案.哪种解决方案能够以最少的运营开销满足这些要求?

Q38 A company needs to store data in Amazon S3 and must prevent the data from being changed.The company wants new objects that are uploaded to Amazon S3 to remain unchangeable for a nonspecific amount of time until the company decides to modify the objects.Only specific users in the company's AWS account can have the ability to delete the objects.What should a solutions architect do to meet these requirements? 公司需要将数据存储在 Amazon S3 中并且必须防止数据被更改.公司希望上传到Amazon S3 的新对象在不特定的时间内保持不变，直到公司决定修改对象.仅公司 AWS 账户中的特定用户可以拥有删除对象的能力.解决方案架构师应该怎么做才能满足这些要求?

nstances? 一家公司在 us-west-2 区域的网络负载均衡器 (NLB)后面的三个 Amazon EC2 实例上实施了自我管理的 DNS 解决方案，该公司的大多数用户位于美国和欧洲，该公司希望提高解决方案的性能和可用性.公司在 eu-west-1 区域启动和配置三个EC2实例，并将EC2实例添加为新NLB的目标.公司可以使用哪种解决方案将流量路由到所有EC2实例?

)56 A company runs its ecommerce application on AWS.Every new order is published as a message in a RabbitMQ queue that runs on an Amazon EC2 instance in a single Availability Zone.These messages are processed by a different application that runs on a separate EC2nstance.This application stores the details in a PostgreSQL database on another EC2 instance.All the EC2 instances are in the same Availability Zone.The company needs to design its architecture to provide the highest availability with the least operational overhead.What should a solutions architect do to meet these requirements? 一家公司在AWS 上运行其电子商务应用程序.每个新订单都作为消息发布在RabbitMQ队列中，该队列在单个可用区的Amazon EC2 实例上运行.这些消息由运行在单独EC2上的不同应用程序处理实例.此应用程序将详细信息存储在另一个 EC2 实例上的 PostgreSQL 数据库中.所有 EC2 实例都在同一个可用区中.公司需要重新设计其架构以提供最高的可用性和最少的运营开销，解决方案架构师应亥做什么怎样才能满足这些要求?

Q71 A company sells ringtones created from clips of popular songs.The files containing the ringtones are stored in Amazon S3 Standard and are at least 128 KB in size.The company has millions of files, but downloads are infrequent for ringtones older than 90 days.The company needs to save money on storage while keeping the most accessed files readily available for its users.Which action should the company take to meet these requirements MOST cost-effectively? 一家公司销售由流行歌曲剪辑创建的铃声.包含铃声的文件存储在Amazon S3 Standard 中，大小至少为 128 KB.该公司拥有数百万个文件，但对于超过 90 天的铃声很少下载.公司需要节省存储费用，同时让用户可以随时访问最常访问的文件.公司应采取哪些措施以最具成本效益的方式满足这些要求?

Q72 A company needs to save the results from a medical trial to an Amazon S3repository.The repository must allow a few scientists to add new files and must restrict all other users to read-only access.No users can have the ability to modify or delete any files in the repository.The company must keep every file in the repository for a minimum of 1 year after its creation date.Which solution will meet these requirements? 公司需要将医学试验的结果保存到Amazon S3 存储库.该存储库必须允许少数科学家添加新文件，并且必须限制所有其他用户只读访问.任何用户都不能修改或删除存储库中的任何文件.公司必须将存储库中的每个文件在其创建日期后至少保留1年.哪种解决方案将满足这些要求?

Q115 A solutions architect is designing a shared storage solution for a web application that is deployed across multiple Availability Zones.The web application runs on Amazon EC2instances that are in an Auto Scaling group.The company plans to make frequent changes to the content.The solution must have strong consistency in returning the new content as soon as the changes occur.Which solutions meet these requirements? (Select TWO.) 一位解决方案架构师正在为跨多个可用区部署的Web 应用程序设计共享存储解决方案.Web 应用程序在 Auto Scaling 组中的 Amazon EC2 实例上运行.公司计划对内容进行频繁更改. 解决方案必须具有强一致性，一旦发生变化就返回新内容.哪些解决方案满足这些要求?（选择两个.）

Q144 A company has a three-tier web application that is deployed on AWS.The web servers are deployed in a public subnet in a VPC.The application servers and database servers are deployed in private subnets in the same VPC.The company has deployed a third-party irtual firewall appliance from AWS Marketplace in an inspection VPC.The appliance is configured with an IP interface that can accept IP packets.A solutions architect needs to ntegrate the web application with the appliance to inspect all traffic to the application before the traffic teaches the web server.Which solution will moot these requirements with the LEAST operational overhead? 一家公司有一个部署在 AWS 上的三层 Web 应用程序.Web服务器部署在 VPC 的公共子网中.应用程序服务器和数据库服务器部署在同一 VPC 的私有子网中.公司已部署检查 VPC 中来自 AWS Marketplace 的第三方虚拟防火墙设备.该设备配置有一个可以接受IP数据包的IP接口.解决方案架构师需要将Web 应用程序与设备集成，以检查应用程序之前的所有流量流量教导Web 服务器.哪种解决方案能够以最少的运营开销满足这些要求?

Q145 A company wants to improve its ability to clone large amounts of production data into a test environment in the same AWS Region.The data is stored in Amazon EC2 instances on Amazon Elastic Block Store (Amazon EBS) volumes.Modifications to the cloned data must not affect the production environment.The software that accesses this data requires consistently high 1/O performance.A solutions architect needs to minimize the time that is required to clone the production data into the test environment.Which solution will meet these requirements? 一家公司希望提高其将大量生产数据克隆到同一 AWS 区域中的测试环境的能力.数据存储在 Amazon Elastic Block Store(Amazon EBS)卷上的Amazon EC2 实例中.对克隆数据的修改不得影响生产环境.访问此数据的软件需要始终如一的高 I/O 性能.解决方案架构师需要最大限度地减少将生产数据克隆到测试环境所需的时间.哪种解决方案可以满足这些要求?

Q152 A company is developing an ecommerce application that will consist of a load- balanced front end, a container-based application, and a relational database.A solutions architect needs to create a highly available solution that operates with as little manual

intervention as possible. Which solutions meet these requirements? (Choose two.) 一家公司正在开发一个电子商务应用程序，该应用程序将由一个负载平衡的前端.一个基于容器的应用程序和一个关系数据库组成.解决方案架构师需要创建一个高度可用的解决方案，该解决方案的运行需要尽可能少的人工干预.哪些解决方案满足这些要求?（选择两个.）

Q155 An application allows users at a company's headquarters to access product data.The product data is stored in an Amazon RDS MySQL DB instance.The operations team has isolated an application performance slowdown and wants to separate read traffic from write traffic.A solutions architect needs to optimize the application's performance quickly.What should the solutions architect recommend? 应用程序允许公司总部的用户访问产品数据.产品数据存储在 Amazon RDS MySQL 数据库实例中.运营团队已隔离应用程序性能下降，并希望将读取流量与写入流量分开, 解决方案架构师需要快速优化应用程序的性能.解决方案架构师应该推荐什么?

Q203 A company is hosting a static website on Amazon S3 and is using Amazon Route 53or DNS.The website is experiencing increased demand from around the world. The company nust decrease latency for users who access the website.Which solution meets these equirements MOST cost-effectively?一家公司在Amazon S3上托管一个静态网站，并使用Amazon Route 53 进行 DNS.该网站正在经历来自世界各地的需求增加.该公司必须减少访问该网站的用户的延迟.哪种解决方案最能满足这些要求划算吗?

Q222 An online retail company has more than 50 million active customers and receives more than 25, 000 orders each day.The company collects purchase data for customers and stores this data in Amazon S3.Additional customer data is stored in Amazon RDS.The company wants to make all the data available to various teams so that the teams can perform analytics.The solution must provide the ability to manage fine-grained permissions for the data and must minimize operational overhead.Which solution will meet these requirements?

一家在线零售公司拥有超过5000万活跃客户，每天收到超过 25，000份订单.该公司为客户收集购买数据并将此数据存储在Amazon S3中.其他客户数据存储在Amazon RDS中.公司希望将所有数据提供给各个团队，以便团队可以执行分析.解决方案必须提供管理数据细粒度权限的能力，并且必须最大限度地减少运营开销.哪种解决方案可以满足这些要求?

Q239 A company is running a publicly accessible serverless application that uses Amazon API Gateway and AWS Lambda.The application's traffic recently spiked due to fraudulent requests from bot nets.Which steps should a solutions architect take to block requests from unauthorized users? (Select TWO.) 一家公司正在运行一个可公开访问的无服务器应用程序，该应用程序使用Amazon API Gateway和AWS Lambda.该应用程序的流量最近因来自僵尸网络的欺诈性请求而激增.解决方案架构师应采取哪些步骤来阻止来自未经授权的用户的请求? （选择两个.)

Q242 A company is designing a cloud communications platform that is driven by APIs.The application is hosted on Amazon EC2 instances behind a Network Load Balancer (NLB), The company uses Amazon API Gateway to provide external users with access to the application through APIs.The company wants to protect the platform against web exploits like SQL injection and also wants to detect and mitigate large, sophisticated DDoS attacks.Which combination of solutions provides the MOST protection? (Select TWO.) 一家公司正在设计一个由 API 驱动的云通信平台.该应用程序托管在网络负载均衡器(NLB)后面的 Amazon EC2 实例上.该公司使用 Amazon API 网关为外部用户提供通过 API 访问应用程序的权限，该公司希望保护平台免受SQL注入等Web攻击，还希望检测和缓解大型.复杂的 DDoS攻击.哪种解决方案组合可提供MOST保护?（选择两个.）

Q308 A company wants to run a hybrid workload for data processing.The data needs to be accessed by on-premises applications for local data processing using an NFS protocol, and must also be accessible from the AWS Cloud for further analytics and batch processing.Which solution will meet these requirements? 一家公司希望运行混合工作负载进行数据处理.本地应用程序需要访问数据以使用 NFS 协议进行本地数据处理，并且还必须可以从AWS 云访问以进行进一步的分析和批处理.哪种解决方案可以满足这些要求?

Q310 A company has a small Python application that processes JSON documents and utputs the results to an on-premises SOL database, The application runs thousands of imes each day. The company wants to move the application to the AWS Cloud. The company needs a highly available solution that maximizes scalability and minimizes

operational overhead.Which solution will meet these requirements?一家公司有一个小型Python应用程序，它处理JSON文档并将结果输出到本地SQL数据库.该应用程序每天运行数千次亥公司希望将应用程序迁移到AWS云.该公司需要一个高度可用的解决方案，以最大限度地提高可扩展性并最大限度地减少运营开销.哪种解决方案可以满足这些要求?

Q313 A company hosts its application on AWS. The company uses Amazon Cognito to manage users. When users log in to the application, the application fetches required data from Amazon DynamoDB by using a REST API that is hosted in Amazon API Gateway. The company wants an AWS managed solution that will control access to the REST API to reduce development efforts.Which solution will meet these requirements with the LEAST operational overhead?一家公司在AWS上托管其应用程序.该公司使用Amazon Cognito来管理用户，当用户登录到应用程序时，应用程序使用托管在AmazonAPIGateway中的RESTAPI从AmazonDynamoDB获取所需数据.该公司想要一个AWS管理的解决方案，它将控制对REST API的访问，以减少开发工作.哪种解决方案能够以最少的运营开销满足这些要求?