SAA-C03 무료 덤프문제 온라인 액세스

A company uses AWS Organizations to manage multiple AWS accounts. The company needs a secure, event- driven architecture in which specific Amazon SNS topics in Account A can publish messages to specific Amazon SQS queues in Account B.
Which solution meets these requirements while maintaining least privilege?

• A.Modify the SQS queue policies in Account B to allow only specific SNS topic ARNs from Account A to publish messages. Ensure the SNS topics have publish permissions for the specific queue ARN.
• B.Create a shared IAM role across both accounts with permission to publish to all SQS queues. Enable cross-account access.
• C.Add SNS topic ARNs to SQS queue policies in Account B. Configure SNS topics to publish to any queue. Encrypt the queue with an AWS KMS key.
• D.Create a new IAM role in Account A that can publish to any SQS queue. Share the role ARN with Account B.

A media company runs an application on multiple Amazon EC2 instances that requires high storage input
/output operations per second (IOPS).
To achieve the necessary performance, a solutions architect wants to stripe multiple Amazon EBS volumes together and attach the volumes to EC2 instances. The solutions architect wants to receive a notification when IOPS are over-provisioned.
Which solution will meet these requirements?

• A.Configure auto scaling for the EBS volumes to automatically increase or decrease IOPS based on the EC2 instance CPU utilization metric.
• B.Create a custom AWS Config rule to monitor the provisioned IOPS for the EBS volumes that are attached to the EC2 instances and to send notifications.
• C.Adjust the IOPS of each EBS volume daily based on Amazon CloudWatch metrics for IOPS utilization.
• D.Deploy the application on an EC2 instance type that supports the highest possible IOPS.

A team of analysts uses AWS Account A. The analysts need read-only access to an Amazon S3 bucket in AWS Account B.
The solution must meet the following requirements:
* Avoid public access.
* Follow the principle of least privilege.
* Reduce administrative complexity.
Which solution will meet these requirements?

• A.Add a bucket policy that grants s3:GetObject permission to the Account A root principal. Allow the analysts to use their existing IAM user accounts.
• B.Create an IAM user in Account B with access keys. Share the access keys with the analysts for bucket access.
• C.Use Amazon S3 object ACLs to grant READ permission to each analyst's canonical user ID from Account A.
• D.In Account B, create an IAM role that trusts Account A. Attach a least-privilege Amazon S3 policy to the role. Require the analysts to assume the role to read objects from the bucket.

A company wants to create a long-term storage solution that will allow users to upload terabytes of images and videos. The company will use the images and videos to train machine learning (ML) models. The storage solution must be scalable and cost-optimized.
Which solution will meet these requirements?

• A.Provision an Amazon S3 bucket for users to upload images and videos. Copy the data from the S3 bucket to an Amazon Elastic File System (Amazon EFS) file system to make the data available for ML model training.
• B.Configure an Amazon SageMaker AI notebook instance with 16 GB of storage. Create a custom application to allow users to upload images and videos directly to the notebook instance.
• C.Provision an Amazon S3 bucket for users to upload images and videos. Configure the S3 bucket to make the data available to Amazon SageMaker AI training. Store the data in the S3 Intelligent-Tiering storage class.
• D.Provision an Amazon S3 bucket for users to upload images and videos. Copy the data from the S3 bucket to an Amazon FSx for Lustre file system to make the data available for ML model training.

A company needs to give a globally distributed development team secure access to the company ' s AWS resources in a way that complies with security policies.
The company currently uses an on-premises Active Directory for internal authentication. The company uses AWS Organizations to manage multiple AWS accounts that support multiple projects.
The company needs a solution to integrate with the existing infrastructure to provide centralized identity management and access control.
Which solution will meet these requirements with the LEAST operational overhead?

• A.Set up AWS Directory Service to create an AWS managed Microsoft Active Directory on AWS.
  Establish a trust relationship with the on-premises Active Directory. Use IAM roles that are assigned to Active Directory groups to access AWS resources within the company ' s AWS accounts.
• B.Create an IAM user for each developer. Manually manage permissions for each IAM user based on each user ' s involvement with each project. Enforce multi-factor authentication MFA as an additional layer of security.
• C.Use AD Connector in AWS Directory Service to connect to the on-premises Active Directory. Integrate AD Connector with AWS IAM Identity Center. Configure permission sets to give each AD group access to specific AWS accounts and resources.
• D.Create separate IAM roles in each AWS account, and manually assign the roles to each developer.
  Synchronize the assignments with the on-premises directory by using custom scripts.