AWS Certified Solutions Architect - Associate SAA-C03 Practice Test 54
Question 530
A team has configured Aurora Global Database replication and documented 'DR complete' without ever executing a regional promotion or restoring application traffic. What is the essential assurance gap?
- Increase the primary Region's EBS capacity and assume that simulates a full regional database promotion.
- Treat the existence of a cross-Region database cluster as mathematical proof that all application dependencies fail over successfully.
- Run controlled disaster-recovery exercises that measure data freshness, promotion, client reconnection and dependent service restoration.
- Delete DR monitoring alarms so a test cannot produce false failures on the recovery dashboard.
Explanation
Correct Answer
C:A configured replica is only one component. Actual tests reveal whether the application can meet business recovery times and data-loss tolerance.
Incorrect Answers
A:Changing unrelated storage size does not exercise cross-Region failover and client continuity.
B:Database replication cannot prove readiness of credentials, network routes, DNS or external application services.
D:Suppressing alerts removes evidence instead of validating that recovery paths work.
Question 531
A multiplayer application serves customers in Europe and Asia and needs low-latency access to a key-value dataset in both AWS Regions with managed multi-Region replication. Which DynamoDB feature fits?
- Use a single ordinary regional DynamoDB table and assume its data is synchronously available in every AWS Region.
- Use DynamoDB global tables with replicas in the required Regions and design application endpoints accordingly.
- Enable a DynamoDB local secondary index, which automatically creates full regional copies of the table.
- Use S3 Multi-Region Access Points as a DynamoDB global table replacement for item-level writes.
Explanation
Correct Answer
B:Global tables provide managed multi-Region replication and local-region access for supported DynamoDB tables, improving geographic latency and resilience.
Incorrect Answers
A:A normal regional table does not automatically become a managed multi-Region replica collection.
C:An LSI provides an alternate query path within a table, not multi-Region data replication.
D:S3 routing applies to object buckets and does not replicate DynamoDB item transactions across Regions.
Question 532
A two-Region DynamoDB global table was created in the default multi-Region eventual consistency (MREC) mode, and its replicas contain production data. Both regional applications must continue accepting low-latency writes. Occasionally, each Region updates the same customer item at nearly the same time. The business expects both updates to be preserved. What architectural change is necessary?
- Use TransactWriteItems independently in each Region and assume that transaction isolation automatically extends as a single ACID transaction across all global-table replicas.
- Change the existing populated two-Region MREC table to MRSC with a single read-consistency flag, without changing table deployment, regional configuration, or write-conflict behavior.
- Apply a condition expression against each regional replica and assume both local conditions are evaluated against one globally serialized latest item version.
- Account for MREC last-writer-wins item conflict resolution and implement a version-aware application merge or write-ownership strategy if both concurrent updates must survive.
Explanation
Correct Answer
D:Default MREC replication resolves simultaneous updates to the same item by last-writer-wins based on internal timestamps. When business rules demand preserving both changes, the application needs conflict-aware design, ownership or reconciliation; MRSC is a separate architectural choice.
Incorrect Answers
A:In MREC, a DynamoDB transaction is atomic only within the Region where it runs. Separate regional transactions can race and do not become a single cross-Region serial transaction simply because the table has replicas.
B:MRSC is a separate consistency mode with specific three-Region deployment and table-creation requirements. An already populated two-Region MREC table cannot be converted in place by flipping a read flag; it also has different latency and conflict semantics.
C:MREC conditional expressions check the local replica version. Since replication is asynchronous, two Regions may evaluate independent conditions before seeing each other’s writes; this is not global serialization.
Question 533
A web application uses DynamoDB global tables in two Regions. When Region A fails, the database copy in Region B remains healthy, but all application servers and DNS routes still point to A. What DR component is missing?
- Deploy or activate application serving capacity in Region B and route clients to the surviving Region's endpoints.
- Increase the Region A ALB's target count while its entire Region remains inaccessible.
- Assume DynamoDB global tables automatically relocate EC2 instances and public DNS entries whenever a Region fails.
- Add a Route 53 failover record whose primary and secondary values both resolve to the unavailable Region A load balancer.
Explanation
Correct Answer
A:Data replication does not automatically move application compute and user requests. A complete regional failover requires healthy service endpoints and routing.
Incorrect Answers
B:Extra desired targets in the failed Region cannot serve traffic until the region's resources recover.
C:The table service does not control every dependent application resource or external client endpoint.
D:A failover policy cannot restore service if both records point at the failed Region. The application tier and endpoints in the surviving Region must exist and become reachable, not merely have an extra DNS routing-policy label.
Question 534
A DynamoDB global table spans three Regions. Normal traffic is balanced, but a stress test that shifts all traffic to one Region triggers throttling there. What operational assumption was wrong?
- Assume any global-table replica has infinite write capacity because global replication is enabled.
- Each surviving Region needs sufficient capacity, quotas and monitoring for the failover load it may have to absorb.
- Disable regional CloudWatch alarms so failover throttling cannot be recorded.
- Reduce item consistency requirements in the client and expect the Region's quota limits to disappear.
Explanation
Correct Answer
B:Replication keeps data available, but regional write/read throughput and account quotas still need sizing for redistributed demand.
Incorrect Answers
A:Managed replication does not remove provisioned or service throughput constraints at a particular Region.
C:Hiding throttling events does not create throughput or protect customer requests during failover.
D:Client consistency choices do not abolish table capacity constraints for a concentrated global traffic burst.
Question 535
A healthcare archive holds critical PDF medical records for long periods. A developer stores the only copies on EC2 instance-store disks because they are fast, but the disks disappear when instances terminate. Which regional object storage tier is more durable across AZs?
- Move the files to one EC2 root EBS disk in the same single AZ, assuming it is regionally multi-AZ by itself.
- Keep the files only in a Lambda temporary directory and increase function memory for added durability.
- Store the critical objects in Amazon S3 Standard with the required access and retention controls.
- Keep the only copy in EC2 instance store and rely on an Auto Scaling replacement to preserve its bytes.
Explanation
Correct Answer
C:S3 Standard is designed to store objects redundantly across multiple AZs in a Region, decoupling medical records from transient compute.
Incorrect Answers
A:Ordinary EBS volumes are AZ scoped and not a substitute for regional multi-AZ object storage.
B:Ephemeral function storage is unsuitable as the sole long-term system of record for customer data.
D:Instance-store data is tied to the underlying compute host and does not survive all replacement or termination events.
Question 536
An S3 archive already replicates newly written object versions to a secondary Region with correctly configured bucket versioning and permissions. Disaster-recovery policy now adds a measurable requirement for replication to finish within the supported 15-minute threshold, plus alerts when an object misses it. The current asynchronous replication rule has no time-control setting. Which feature should be enabled?
- Enable CloudFront Origin Shield to centralize edge-cache misses, because CloudFront cache consolidation guarantees cross-Region S3 replica delivery time.
- Increase S3 multipart upload part size and treat successful source uploads as proof that destination replicas were delivered within the threshold.
- Turn on S3 server access logging only, because request logs automatically convert best-effort replication to a timed replication commitment.
- Enable S3 Replication Time Control (RTC) on the eligible replication rule and monitor its replication metrics and missed-threshold notifications.
Explanation
Correct Answer
D:S3 RTC provides a managed 15-minute replication-time objective for eligible replicated objects with replication metrics and threshold-miss events. It augments existing replication rather than replacing versioning, permissions or monitoring.
Incorrect Answers
A:CloudFront Origin Shield is an edge-to-origin caching feature; it neither controls S3 replication scheduling nor supplies a replication-time commitment.
B:Multipart upload tuning can affect source object uploads, but an acknowledged source upload is not evidence that a secondary-Region replica was completed within 15 minutes.
C:S3 access logs are observational request records, not an S3 replication latency control and not a guarantee of destination arrival.
Question 537
A company uses S3 Standard and is comfortable with AZ failures, but the disaster plan must preserve essential objects after an entire AWS Region becomes unavailable. Which additional design addresses that wider failure domain?
- Assume S3 Standard automatically stores every object's full accessible replica in every AWS Region.
- Increase the source bucket's number of prefixes, because prefix count determines geographic replica placement.
- Replicate selected objects to a separate approved Region using supported S3 Cross-Region Replication or equivalent controlled copies.
- Deploy a second ALB listener in the original Region to recover the S3 records during regional unavailability.
Explanation
Correct Answer
C:Regional S3 redundancy spans AZs within its Region; cross-Region copies are needed when the recovery scenario removes that Region.
Incorrect Answers
A:S3 Standard is regional storage and does not itself create a globally available cross-Region copy.
B:Object key naming changes request organization but does not relocate bytes to another Region.
D:A load balancer listener cannot access an object archive that has no surviving regional data copy.
Question 538
An S3 bucket has redundant multi-AZ object storage, but the web app cannot serve users when its single-AZ compute tier fails and its IAM role policy is accidentally removed. What does the example demonstrate?
- Object durability does not guarantee end-to-end application availability; compute, identity and network dependencies need resilience too.
- Changing the S3 object names makes missing IAM role privileges irrelevant to GetObject authorization.
- Increase the bucket versioning count because it automatically replaces failed application instances.
- A durable bucket guarantees an application's EC2 instances and IAM policies can never become unavailable.
Explanation
Correct Answer
A:S3 may retain every object correctly while the application cannot authenticate or reach them. Availability is a property of the full request path.
Incorrect Answers
B:Resource naming does not bypass explicit denies or a missing effective allow to retrieve protected objects.
C:Version history is unrelated to provisioning serving compute or repairing role permissions.
D:Object storage durability does not make all dependent compute and authorization configurations fault tolerant.
Question 539
A global mobile client needs one logical S3 access endpoint for objects stored in supported buckets in North America and Europe. AWS should route requests to appropriate configured regional buckets when possible. Which feature provides that access plane?
- Use a NAT gateway as the global S3 object router and expect it to select regional buckets by health.
- Use a single ordinary regional S3 access point and assume its endpoint is globally replicated with every object.
- Create an EBS Multi-Attach volume and connect every internet client directly to its block device.
- Create an S3 Multi-Region Access Point over the eligible buckets and design the underlying replication separately.
Explanation
Correct Answer
D:An S3 MRAP gives a global access endpoint that routes requests among configured regional buckets; it is not the mechanism that automatically creates all object copies.
Incorrect Answers
A:NAT gateways are regional VPC egress devices and do not implement S3 MRAP routing decisions.
B:A normal regional access point does not provide MRAP's global routing or automatic cross-Region copies.
C:EBS block attachments are not a global S3 HTTP object access endpoint for external clients.
Question 540
An S3 Multi-Region Access Point exists over two buckets, but nobody has tested regional failure behavior and object copies are incomplete. The team declares regional DR fully automatic. What controls remain necessary?
- Assume simply creating an MRAP synchronously copies every historical and future object across all buckets.
- Configure and test supported MRAP failover/routing controls and independent bucket replication and object-recovery procedures.
- Disable both regional bucket replication rules so the global endpoint has no data to serve during failure.
- Set all clients to cache forever and use that as proof that live regional data failover works.
Explanation
Correct Answer
B:A global access endpoint is only one component; endpoint health decisions and data copies require explicit configuration and tested regional recovery.
Incorrect Answers
A:MRAP routing does not by itself replace configured replication and copy mechanisms for desired content consistency.
C:Removing copies makes the surviving Region unable to answer requests for objects it never received.
D:Client cache behavior does not validate current origin data presence, policy or failover routing.