Amazon AWS Certified Solutions Architect - Associate SAA-C03 Practice Test 47

Question 460

An on-premises office has legacy SMB/NFS applications but must store durable file content in S3 with a local hot-data cache. Which hybrid service is a fit?

Mount S3 Glacier Deep Archive as a live POSIX disk without restore.
Give every desktop EC2 instance-store volumes to share files across sites.
Mount S3 objects using a Linux-only S3 mount helper at every Windows workstation and assume the tool provides the office’s existing SMB file shares and a managed on-premises hot-data cache.
AWS Storage Gateway S3 File Gateway with supported file shares and appropriately sized local cache.

Explanation

Correct Answer

File Gateway presents SMB/NFS to clients and backs file content with S3, using local caching and asynchronous upload.

Incorrect Answers

Archive is not directly writable SMB/NFS file storage.

Instance store is host-local and ephemeral.

An S3 object mount helper is not a drop-in on-premises SMB/NFS file gateway with integrated local caching and share administration. S3 File Gateway supplies compatible configured shares and cache.

Question 461

An organization must move millions of files from an on-premises NAS into AWS storage over a network and verify data integrity. Which managed migration service fits?

Use S3 Transfer Acceleration for files still held exclusively on an on-premises NFS server and assume edge upload endpoints automatically enumerate the NAS, preserve metadata and verify a full directory transfer.
Use CloudFront viewer caching as the bulk ingestion engine from on-premises NFS.
AWS DataSync with suitable source/destination locations, transfer tasks and verification settings.
Use a scheduled unverified rsync over a single host and assume the operation provides the same managed task history and service-level file integrity verification as AWS DataSync.

Explanation

Correct Answer

DataSync handles parallel transfers, metadata/permissions where supported, and copy verification.

Incorrect Answers

Transfer Acceleration optimizes supported S3 object upload paths, not discovery, incremental transfer and integrity validation of the local NAS file tree; DataSync can coordinate that migration.

A CDN does not traverse a NAS dataset as a migration task.

A self-managed copy can transfer files but requires its own verification, retries, monitoring, metadata and permission handling. DataSync provides managed transfer and validation controls for supported locations.

Question 462

An S3 application generates thousands of GET/PUT requests per second across many new keys. Performance goals require avoiding old assumptions about random prefix naming. What should the architect plan?

Assume all bucket throughput is capped at one request per second unless prefixes contain a timestamp.
Follow documented per-prefix request rate scaling, use sufficiently distributed workload/prefixes when needed and monitor 503 Slow Down during ramp-up.
Add random UUID entropy to every object-key prefix solely because S3 requires random prefixes to scale past one thousand requests per second.
Guarantee performance by sending every request through a single serialized thread.

Explanation

Correct Answer

Modern S3 supports high per-prefix request rates and scales dynamically; do not blindly impose obsolete random-prefix rules.

Incorrect Answers

S3 offers much higher per-prefix scale with dynamic behavior.

Modern S3 automatically scales high request rates per prefix and does not demand artificial key-name randomization. Design for actual workload scaling, parallelism and temporary Slow Down responses.

Serializing the workload defeats concurrency and is not a service scaling technique.

Question 463

A gp3 EBS volume is expanded from 100 to 250 GiB, and EC2 sees larger block device capacity, but the mounted ext4 file system remains 100 GiB. What action remains?

Increase the EBS volume size again without extending the attached partition or ext4 filesystem, assuming another API modification automatically grows the mounted filesystem.
Restart the same command without altering the file system; EC2 automatically edits ext4 eventually.
Run only fsck to validate the existing ext4 file system and assume it expands the 100-GiB filesystem into the newly visible 250-GiB block device.
Extend the partition if applicable and grow the ext4 file system using a supported procedure after EBS modification completes.

Explanation

Correct Answer

Modifying volume capacity does not always automatically resize guest partitions and file systems.

Incorrect Answers

Increasing raw device capacity does not resize an existing partition or ext4 filesystem. Extend the appropriate layer after the EBS modification is in a supported state.

Guest filesystem growth is a separate administrative operation.

Filesystem checking validates structure but does not replace a partition resize or filesystem grow operation. Use supported resize tools for the actual block and partition layout.

Question 464

A new AWS customer wants to analyze all rows across hundreds of CSV objects in S3 with ANSI-style SQL joins. A developer proposes S3 Select on each individual object. What should the architect recommend?

Use S3 Select as a newly available cross-object SQL join engine.
Update only the Glue Data Catalog schema for the S3 files and expect catalog metadata to execute full SQL joins between hundreds of CSV objects without a query engine.
Use Athena or another suitable query engine over registered S3 datasets; S3 Select is object-scoped and unavailable to new customers.
Generate a presigned GetObject URL for each CSV file and assume that the download URLs automatically execute relational joins before returning S3 data.

Explanation

Correct Answer

Athena supports SQL over S3 collections; S3 Select operates on one eligible object at a time and is not offered to new customers.

Incorrect Answers

Select has one-object scope and new-customer availability restrictions.

The Data Catalog stores schemas, partitions and table definitions but does not itself execute relational joins. Athena or another query engine performs the cross-object query.

Presigned URLs authorize individual object requests; they do not implement cross-file SQL or an optimizer. Use a supported query engine to join structured datasets.

Question 465

A critical incident response service must read a 10 GB S3 object immediately at any hour. Finance proposes Glacier Deep Archive solely because it costs less at rest. What tradeoff should reject that choice?

Archive tiers always provide the same immediate GetObject access as S3 Standard.
A CloudFront cache of a previously seen object guarantees every future uncached archive request is immediate.
Deep Archive requires a restore workflow and is unsuitable for unplanned immediate access; choose an online class meeting the retrieval SLO.
Place the archive object behind a CloudFront distribution and set a zero cache TTL, assuming this makes every uncached Glacier Deep Archive restore complete in milliseconds.

Explanation

Correct Answer

Lowest storage price is not sufficient when restore latency fails the business requirement.

Incorrect Answers

Glacier archival classes require a restore before normal access.

A cache miss still faces origin restore limitations.

A CDN cannot bypass the required S3 archive restoration when the object is not already available in a safe cache. Restore timing must satisfy the underlying object storage class.

Question 466

Two microservices share an Amazon EFS file system but need different POSIX UID/GID identities and separate enforced root paths. Which service feature supports that boundary?

Give all services root POSIX credentials without path restrictions.
Allow both workloads through the same EFS mount target security group while leaving their POSIX UID/GID and root directory unchanged, assuming a TCP/2049 rule restricts subdirectory access.
Create distinct EFS access points with appropriate POSIX identities/root directories and IAM/NFS policy.
Create two EFS mount targets in different Availability Zones but mount the same filesystem root under identical default POSIX credentials for both services.

Explanation

Correct Answer

An access point can enforce identity/path for each application, subject to file system access controls.

Incorrect Answers

That removes isolation instead of enforcing it.

A security group controls network access to the EFS mount target, not per-application POSIX identity or enforced directory root. Access points and file system permissions provide that boundary.

Mount targets provide AZ network paths, not distinct enforced UID/GID identity or root paths. Each microservice needs its own access point or equivalent application-level controls.

Question 467

An EC2 data processor stores its only live working database blocks on a single EBS volume. The team claims daily EBS snapshots make it simultaneously writable by arbitrary EC2 instances. What is correct?

Any EBS snapshot automatically becomes an NFS share across AZs.
Restore one EBS snapshot into a separate volume on each instance and assume future writes on all restored volumes remain synchronously visible to every peer.
EBS Multi-Attach makes every filesystem safe for arbitrary concurrent writes without a cluster-aware OS.
Snapshots are point-in-time recovery artifacts, not a multi-writer shared block service; design supported shared storage separately.

Explanation

Correct Answer

EBS snapshots cannot be mounted for concurrent transactional writes as though they were a live cluster filesystem.

Incorrect Answers

Snapshot data must be restored into supported volumes and exported separately if required.

Snapshot restoration creates separate point-in-time block volumes; later independent writes diverge. Snapshots are not a multi-writer coherency protocol or shared file service.

Even supported Multi-Attach requires application/filesystem coordination.

Question 468

A photo application stores durable original images in S3 and serves popular assets to worldwide browsers. Which design separates storage durability from low-latency delivery?

Store the sole original image in CloudFront edge caches with no S3 origin.
Keep originals in S3 and use CloudFront edge caching with appropriate origin access and cache behavior.
Place independent per-Region S3 replicas behind Route 53 but omit edge caching and assume replication alone supplies the same per-user edge cache hit latency as CloudFront.
Use only Route 53 geolocation DNS records and claim they cache image contents.

Explanation

Correct Answer

S3 stores authoritative objects while CloudFront reduces repeated long-distance origin requests.

Incorrect Answers

CDN caches expire and are not primary durable object storage.

Replication can improve geographic origin locality and resilience, but does not create a dense global viewer edge cache or automatically reduce repeat origin reads.

DNS does not store HTTP response bodies.

Question 469

An EC2 gp3-backed service reaches exactly its configured throughput limit while IOPS remain below their provisioned level. The administrator enlarges volume size and sees no improvement. Why?

Increasing logical volume size automatically doubles configured gp3 throughput.
Enable EBS gp3 volume encryption using a different KMS key while retaining the same saturated provisioned storage throughput setting.
Increase the EC2 networking bandwidth while leaving the gp3 volume’s configured MB/s ceiling unchanged, expecting a faster NIC to raise disk throughput.
gp3 throughput is provisioned separately from size; the throughput ceiling or instance EBS bandwidth must be increased.

Explanation

Correct Answer

The workload is throughput-bound, not capacity- or IOPS-bound.

Incorrect Answers

gp3 performance can be adjusted separately from space.

Encryption-key choice governs confidentiality and access control, not gp3 provisioned throughput. Increasing byte-throughput or the instance EBS bandwidth is necessary when that dimension is the bottleneck.

ENI networking and EBS storage throughput are distinct performance constraints. A saturated gp3 volume setting remains a storage bottleneck even if the instance network adapter is upgraded.

Question 470

A high-rate transaction database uses st1 EBS. Large sequential log scans run well, but random 8KiB reads have unacceptable latency. What is the storage mismatch?

Increase the st1 volume size only to refill its throughput burst credits and assume the HDD can now meet submillisecond random read latency.
Attach a second st1 volume and stripe them without checking whether repeated random 8-KiB synchronous I/O still exceeds HDD access-latency requirements.
Increase st1 throughput provisioning to its supported burst limit and assume that MB/s guarantees low-latency random transaction IOPS.
The workload needs random low-latency IOPS better served by an SSD tier such as io2 or correctly sized gp3.

Explanation

Correct Answer

st1 HDD favors sequential throughput and has different random I/O latency.

Incorrect Answers

st1 is optimized for sequential throughput. More capacity and burst credits cannot change the high random I/O latency characteristics into those of SSD io2 or gp3.

Striping can raise aggregate throughput for compatible loads but not remove inherent seek-related random I/O latency. Choose SSD storage and verify end-to-end latency.

HDD sequential MB/s and random 8-KiB transactional IOPS/latency are different workload dimensions; the st1 class is not designed for this access pattern.

Pass Your Amazon AWS Certified Solutions Architect - Associate SAA-C03 Exam Easy!

Question 460

Explanation

Correct Answer

Incorrect Answers

Question 461

Explanation

Correct Answer

Incorrect Answers

Question 462

Explanation

Correct Answer

Incorrect Answers

Question 463

Explanation

Correct Answer

Incorrect Answers

Question 464

Explanation

Correct Answer

Incorrect Answers

Question 465

Explanation

Correct Answer

Incorrect Answers

Question 466

Explanation

Correct Answer

Incorrect Answers

Question 467

Explanation

Correct Answer

Incorrect Answers

Question 468

Explanation

Correct Answer

Incorrect Answers

Question 469

Explanation

Correct Answer

Incorrect Answers

Question 470

Explanation

Correct Answer

Incorrect Answers

AWS Certified Solutions Architect - Associate SAA-C03 Practice Tests