Amazon Web Services SAA-C03 Exam With Confidence Using Practice Dumps

The correct answer isDbecause the application peak hours occur at thesame time each day, and the performance issue happens specifically at thestart of peak hours. This indicates that the company knows in advance when additional capacity will be needed. Ascheduled scaling policyis the most appropriate solution because it allows the Auto Scaling group to increase capacitybeforedemand rises, ensuring that instances are already launched and available when users begin accessing the application.

Dynamic scaling based on CPU or memory reacts onlyafterutilization increases. Because launching EC2 instances takes time, reactive scaling can lead to delays and degraded user experience at the beginning of peak periods. That directly matches the problem described in the question, where performance is slow at the start but normalizes later once capacity catches up. Scheduled scaling solves this by making capacity available proactively.

Option A is incorrect because an Application Load Balancer distributes traffic among existing instances but does not add capacity ahead of predictable demand. Option B is incorrect because Auto Scaling does not natively scale on memory utilization unless a custom metric is configured, and even then it would still be reactive rather than proactive. Option C is also incorrect because CPU-based dynamic scaling reacts after demand increases and therefore may not prevent the startup lag during peak traffic.

AWS design guidance recommends usingscheduled scalingwhen traffic patterns are predictable and occur at known times. This approach improves application responsiveness and user experience by making sure enough EC2 capacity is available before the workload surge begins.

AWS WAF allows web applications to protect themselves from common web exploits and vulnerabilities. Using AWS managed rule groups ensures protection against known attack patterns, such as SQL injection and cross-site scripting. Associating AWS WAF with the ALB provides application-layer security and real-time threat mitigation.

The correct answer isCbecause the company needs asecure cross-account accesssolution that usestemporary credentials, followsleast privilege, and avoidslong-term access keys. The best practice for this design is to allow anIAM role in Account Ato access theAmazon S3 bucket in Account Bthrough aresource-based bucket policy. Analysts or applications in Account A can assume the IAM role and receive temporary credentials through AWS Security Token Service (AWS STS), which satisfies the requirement to avoid permanent access keys.

This approach is secure because permissions can be scoped precisely to the required bucket and prefixes, supporting least-privilege access. It also avoids creating separate IAM users in Account B and eliminates the operational and security risks of sharing static credentials across accounts. Cross-account access through IAM roles and S3 bucket policies is the standard AWS pattern for securely granting one account access to resources in another account.

Option A is incorrect because creating IAM users and sharing access keys introduces long-term credentials, which the company explicitly wants to avoid. Option B is incorrect because making the S3 bucket public violates security requirements and does not enforce least privilege. Option D is incorrect because using a bastion host adds unnecessary infrastructure and operational overhead and is not the recommended approach for S3 access.

AWS security best practices favorrole-based access with temporary credentialsandresource policiesfor cross-account resource sharing. Therefore, configuring the S3 bucket policy in Account B to allow access from an IAM role in Account A is the most secure and appropriate solution.