Q12 — AWS SAA-C03 Ch.15

Question 12 of 100 | ← Chapter 15

Q1112. A software as a service (SaaS) company uses AWS Organizations to manage its AWS accounts. The company uses a central security account to manage security-related services such as AWS Config and AWS Security Hub.To gather data for the service that the company provides, the company runs a large number of Amazon EMR jobs in an account on an Amazon EC2 fleet that includes hundreds of instances for each job. The company launches EC2 instances by using a launch template definition. The company wants to monitor workload compliance and security findings. Which combination of solutions will meet these requirements MOST cost-effectively? (Select TWO.)

Correct Answer: A. Use Spot Instances to host the EMR jobs., C. Configure AWS Config to record items on an hourly basis.

Explanation

To meet the SaaS company's requirements for monitoring workload compliance and security findings in a cost-effective manner, the following combination of solutions would be most suitable:A. Use Spot Instances to host the EMR jobs.Cost Efficiency: Spot Instances allow the company to take advantage of unused EC2 capacity at a significantly reduced cost compared to On-Demand Instances. This can lead to substantial savings, especially for large-scale EMR jobs that require hundreds of instances. Flexibility: Spot Instances are well-suited for workloads that are flexible in terms of start and end times, as they may be interrupted with a two-minute notice if AWS needs the capacity back. However, for batch processing jobs like EMR, this flexibility is often acceptable. C. Configure AWS Config to record items on an hourly basis.Comprehensiveness: Recording items on an hourly basis provides a good balance between cost and detail. It ensures that the company has sufficient data to monitor compliance and security findings without incurring the higher costs associated with more frequent recording. Timeliness: Hourly recording is timely enough to capture most changes and events related to the EMR workloads, allowing the company to promptly address any compliance or security issues.Now, let's evaluate the other options:B. Configure AWS Config to record items on a daily basis.While daily recording is less expensive than hourly recording, it may not provide sufficient timeliness for monitoring compliance and security findings, especially for rapidly changing environments like those with frequent EMR jobs.D. Use Reserved Instances to host the EMR jobs.Reserved Instances offer cost savings over On-Demand Instances for long-term, predictable workloads. However, for EMR jobs that may vary in frequency and scale, Reserved Instances may not be the most cost-effective option.E. Exclude the account that runs the EMR workloads from AWS Config.Excluding the account from AWS Config would prevent the company from monitoring compliance and security findings in that account, which is not acceptable given the company's requirements. In conclusion, the combination of using Spot Instances to host the EMR jobs and configuring AWS Config to record items on an hourly basis would most effectively meet the company's requirements for monitoring workload compliance and security findings in a cost-effective manner.