Q40 — AWS SAA-C03 Ch.17

Question 40 of 89 | ← Chapter 17

Q1340. An insurance company is creating an application to record personal user data.The data includes name,age, and health data about users.The company wants to run the application in a private subnet on AWS. Because of data security requirements, the company must have access must have access to the operating system of the compute resource that run the application tier. The company must use a low-latency NoSQL database to store the data.Which solution will meet these requirements?

Correct Answer: A. Use Amazon EC2 instances for the application tier. Use an Amazon DynamoDB table for the database tier. Create a VPC endpoint for DynamoDB. Assign the instances an instance profile that has permission to access DynamoDB.

Explanation

Let's analyze each option based on the given requirements:Requirements RecapApplication Location: Run the application in a private subnet on AWS. OS Access: Have access to the operating system of the compute resource that runs the application tier. Database: Use a low - latency NoSQL database to store the data.Option AApplication Tier: Amazon EC2 instances are virtual servers in the cloud. When using EC2 instances, you have full access to the underlying operating system. This meets the requirement of having access to the OS of the compute resource running the application.Database Tier: Amazon DynamoDB is a fully managed, serverless, low - latency NoSQL database service. It is well - suited for storing personal user data such as name, age, and health data. VPC Endpoint: Creating a VPC endpoint for DynamoDB allows the EC2 instances in the private subnet to communicate with DynamoDB without going through the public internet, enhancing security. IAM Permissions: Assigning the instances an instance profile with permissions to access DynamoDB ensures that the application running on the EC2 instances can securely interact with the database. This option meets all the requirements.Option BApplication Tier: AWS Lambda is a serverless compute service. With Lambda, you do not have direct access to the underlying operating system. Lambda functions run in an isolated environment, and you cannot manage or access the OS as you would with an EC2 instance. So, this option does not meet the requirement of having OS access.Database Tier: While Amazon DynamoDB is a suitable low - latency NoSQL database, the lack of OS access in the application tier makes this option invalid.Option CApplication Tier: AWS Fargate is a serverless compute engine for containers. Although it provides a way to run applications in containers, it does not offer the same level of direct operating system access as Amazon EC2 instances. Fargate abstracts away the underlying infrastructure management to a large extent, limiting OS - level access.Database Tier: Amazon Aurora PostgreSQL is a relational database, not a NoSQL database. The requirement specifies the use of a low - latency NoSQL database, so this option does not meet the database requirement.Option DApplication Tier: Amazon EC2 instances can meet the requirement of running the application in a private subnet and providing OS access.Database Tier: Amazon S3 is an object storage service, not a NoSQL database. While Amazon Athena can be used to query data stored in S3, it is not a traditional database for storing and managing structured data like personal user information in a low - latency, transactional manner. Also, using S3 and Athena in this way does not meet the requirement of a low - latency NoSQL database. Therefore, the solution that will meet all the requirements is Option A.So the answer is A.