SAA-C03 exam dumps: questions 101 to 200 of 552

Correct answer: A

• A. Correct.

  Amazon API Gateway is specifically designed for creating and managing RESTful APIs and WebSocket APIs. It supports features like throttling, caching, and seamless integration with AWS Lambda, which is ideal for a serverless architecture.

• B. Incorrect.

  AWS App Runner is a fully managed service for deploying containerized applications. It is not designed for API management or handling WebSocket communication.

• C. Incorrect.

  Amazon Elastic Load Balancer (ELB) is used for distributing incoming traffic across multiple targets, such as EC2 instances or containers. It does not provide API management capabilities or support for WebSocket communication.

• D. Incorrect.

  Amazon CloudFront is a content delivery network (CDN) service that helps speed up the delivery of static and dynamic content. While it can integrate with APIs for caching, it does not manage APIs or support WebSocket communication.

Correct answers: B, D, E

• A. Incorrect.

  Using HTTP proxy integration directly with the S3 bucket would bypass many of the security and authentication benefits provided by API Gateway. This approach is not ideal when you need to ensure that only authenticated users can access the images.

• B. Correct.

  Enabling AWS IAM authorization and using IAM policies to limit access to the S3 bucket ensures that only authorized users can access the bucket. This approach integrates well with other AWS services for security and access management.

• C. Incorrect.

  Using AWS Lambda is not necessary in this case since you can directly control access to the S3 bucket through API Gateway and IAM authorization without adding extra operational overhead.

• D. Correct.

  Amazon Cognito user pools can handle user authentication and pass tokens to API Gateway, which is a secure and scalable method to authenticate and authorize users.

• E. Correct.

  API Gateway usage plans allow you to throttle requests and monitor API usage, helping ensure scalability and manageability of your application.

Correct answers: A, C

• A. Correct.

  AWS Transfer Family is the ideal managed service for enabling SFTP, FTPS, and FTP access to Amazon S3 or Amazon EFS. It is a fully managed service and fits the use case perfectly.

• B. Incorrect.

  Amazon SQS is a managed messaging service used for decoupling distributed systems. It is not relevant to securely transferring files to Amazon S3.

• C. Correct.

  Secrets Manager is the appropriate service for securely managing and automatically rotating credentials, which meets the company's requirement for credential management.

• D. Incorrect.

  Amazon EC2 is not a managed service and would require additional maintenance and configuration for SFTP, which contradicts the company's requirement for a fully managed solution.

• E. Incorrect.

  AWS Lambda is a serverless compute service and is not directly relevant to the use case of securely transferring files via SFTP.

Correct answer: A

• A. Correct.

  AWS Transfer Family is the correct choice because it supports secure file transfers over protocols like SFTP, FTPS, and FTP. It can integrate with an external Identity Provider (IdP) for user authentication and is designed to transfer files directly into Amazon S3.

• B. Incorrect.

  Amazon SQS is used for decoupling applications and enabling message queuing but is not designed for transferring large files into Amazon S3.

• C. Incorrect.

  AWS Secrets Manager is used for securely storing and retrieving secrets like database credentials or API keys. It does not handle file transfers.

• D. Incorrect.

  Amazon Kinesis Data Streams is used for real-time streaming data processing, which is not applicable to this use case of large file transfers.

Correct answers: A, C

• A. Correct.

  Correct: AWS Transfer Family supports SFTP, and Amazon S3 serves as the backend storage for the transferred data, meeting the compliance and storage requirements.

• B. Incorrect.

  Incorrect: Amazon SQS is a managed message queue service that does not support SFTP or handle file transfers.

• C. Correct.

  Correct: AWS Transfer Family provides SFTP capabilities, while Secrets Manager securely manages credentials, ensuring compliance with security requirements.

• D. Incorrect.

  Incorrect: While Amazon S3 is suitable for storage, it does not provide SFTP capabilities. Secrets Manager cannot directly handle file transfers.

• E. Incorrect.

  Incorrect: AWS Systems Manager does not provide SFTP capabilities, and Amazon SQS is unrelated to managing SFTP file transfers.