Correction - Question 808 - Answer is C Least Operational Overhead: Option C leverages AWS managed services (EventBridge, Systems Manager Automation, and SNS) without the need for custom code (Lambda functions). This reduces the complexity of implementation and ongoing maintenance. Specific to KMS Key Deletion: EventBridge allows you to directly trigger an action based on the DeleteKey operation in KMS, making it more targeted than a general CloudTrail log analysis (Option D). Immediate Prevention: Systems Manager Automation runbooks can be configured to automatically cancel the deletion of the KMS key as soon as the EventBridge rule is triggered, providing immediate protection.
Hi, Q 794, correct answer is B. Resource Policy. To restrict access from EC2 instances so that they can only read and not write to an EFS file system, you should use a resource policy in EFS. This is because resource policies are more appropriate for controlling access to a specific resource, in this case, the EFS file system. Thank You very much for your excellent work.
Question 766. Your answer is correct. I am just adding more rationale. Hope this is correct. Both 'SystemAdministrator' and 'AdministratorAccess' seem to be valid policies. However, SystemAdministrator is an AWS managed policy that: Grants full access permissions necessary for resources required for application and development operations, whereas, AdministratorAccess is an AWS managed policy that: Provides full access to AWS services and resources. Given the requirement in the question “specific employees to have full access to AWS services and resources”, AdministratorAccess is the correct option.
Hi, I created a channel just to comment here. I would like to thank you from the bottom of my heart. Your videos helped me clear the solutions architect certification. The way you explain the questions, using elimination and keywords also helps with solving other related questions. I appreciate your hardwork and you have my utmost respect. I hope when I decide to give solutions architect professional in the future, I will find a playlist by you. Cheers!
Glad I could help! I am working on the SAP videos as we speak, will upload the first video sometime this week. Congratulations on SAA and all the best for future certifications.
A is incorrect because EFS is file sharing for multiple resources not just one specific use case.. over kill i guess , secondly , setting up of EFS is more work thank using already available S3. dont see any app changes mentioned in q
#780 as per AWS it is preferable to use Resources Based-Policies (S3, SQS, SNS etc.) when giving access to another account. When you assume a role, you give up your initial permissions
I disagree on question 804: I think correct option is A, option D has as side effect that is not possible for anyone to create public ip access ec2 and iam, while the question ask to prohibite that only trough cloudformation. Proactive control is implemented with cloudformation hooks, so it has effect only on cloudformation. Anycase thanks :)
Question 787. Is answer C "Provision an Amazon API Gateway API. Connect the API to AWS Lambda to run the containers" correct? Lambda has 15 minutes limit and is not intended to host ongoing tasks but rather respond to events and calls. We are not sure what is specific to the application but we can assume it should be working all the time without interruptions. Also running containers in Lambda requires implementing specific changes to the images themselves.
I second that. I cannot post a link because it gets removed but this is from AWS docs: "Proactive Control that will proactively identify and block noncompliant resources before they are provisioned by CloudFormation."
I agree. Option D is not the correct answer. SCP can not check the detailed policy in cloud formation. Control Tower could handle this. Proactive Controls scan resources deployed via AWS CloudFormation before provisioning to ensure compliance with that control.
Thanks for the content being delivered in your channel. Really helpful. Just wanted to highlight, Question # 808 asks for preventing accidental deletion of keys & notifying the same. Option D satisfies only notification. I believe the correct answer would be option C using automation runbook.
Thanks for the clear instructions on choosing proper answers. This really helped me to clear the exam after loosing touch for a long time and helped me refresh key topics on short time. Thanks for the videos 🎉
You're very welcome! I'm so happy to hear that my videos helped you brush up on key topics and pass your exam. It's always my goal to make complex subjects clear and understandable, especially for those returning to a subject after a break. Congratulations on your success!
Question 804- Answer is A not D (SCPs work at the account or organizational unit level and cannot filter based on specific CloudFormation stack configurations. SCPs cannot block specific configurations within CloudFormation stacks.)
q804 A definitely ....question says AWS control Tower is enabled on the account which means we should utilize control tower Proactive controls are optional controls implemented with AWS CloudFormation hooks. Proactive controls check resources whenever those resources are created or updated by means of AWS CloudFormation stack operations
Thanks for your detailed videos. I really appreciate your efforts. you are doing a great job. I passed my Solutions Architect Exams today. your method using elimination and keywords also helps.
If Game meta data is read frequently, a mem cache is a better solution. Also the question does not mention the Game was accessed globally, why to use Dynamo DB global table?
Yes the answer should be C, as Elasticache in general provides sub-milliseconds latency and with Redis in particular capabilities like replication and snapshots are provided by default. On the other hand Dynamodb needs DAX for sub-milliseconds latency ( microseconds ), which is not mentioned in the answer, not to mention the complexity and operational overhead needed for migrating from RDS to Dynamodb.
Congratulations on passing your SAA-C03 exam! 🎉 That's a huge accomplishment, and I'm so happy to hear that my videos played a role in your success. Thank you for your kind words and for recommending my channel to others. It means a lot to me that you found my content valuable. Your support is incredibly encouraging and motivates me to create even more helpful resources. Namaste to you as well! 🙏 Wishing you all the best in your continued cloud journey!
Thanks boss and subscribed! Cleared my AWS Certified Solutions Architect - Associate certification yesterday. Really appreciate the fully detailed explanations and small exam techniques. Looking forward if you are making videos for AWS Certified Solutions Architect - Pro💪
Successfully passed AWS certified solutions architect exam😍🎉 Special thanks to you sir, your tips and tricks really helped me to achieve this. I got many questions from this playlist in exam✌🏻
Hi sir, I think for question #779 option C might be better than B, as RDS is already fully sufficient and compatible with the on-prem db, using Aurora with higher price point might also be considered as increasing operational overhead?
May be specific point in time means that any specific second of the backup which aurora can provide but for the rds. Rds : precision within a few mins. Aurora : more granular. Not sure 😂
Thanks for the informative videos i learnt a lot of new things just wanted to ask you to revisit #805 cos i also was picking optiob B before i read that the Ec2 instance in an autoscaling group was in a private subnet? Just wonderign if it shouldnt rather be in a public subnet? please Clarify to further enforce my knowledge tx
Hello sir, why not the answer C when it comes to question 808? It lets you configure a run book to cancel the deletion of the KMS key. The question states that they need a solution to prevent the accidental deletion of KMS keys and answer D just gives a solution to be notified.
I cleared the Certification. Thank you so much. Your videos really helped a lot. I wish great success for you too, in all good things you are doing. :)
A Huge thank you to you i passed my SAA C03 yesterday.. i came across this particular video 5 hours before my exam and approximately 15 questions from this video was repeated..wish i had seen your videos earlier non the less i am SAA certified✅
@@craigm2381 I can answer that. I just finished with my test! The questions on my exam were easier and mostly shorter in general. I had a few exact questions repeated and those were the hard ones that I'd forgotten the answer to. I tried to answer everything with logic and from what I've learned from this channel. I think I'll pass
I’m sorry I’m just seeing your comment but yes it was shorter and no I don’t think I saw a question from here.. but the techniques helped me answer them well
Hii i cleared my AWS Solutions Architect exam today in my first attempt. Thank you. your videos are very helpful and most questions were very similar to the questions in your video. Great effort and explanation from you sir Thank you
#791 is a very contestable answer , you have always coached us to distinguish between relational and non relational databases and that they do not work together. So how does RDS meta data work with Dynamo db in this scenario? you also always encourage us to like and comment but i have noticed that most of our comments that are questions or contrary to your chosen answers does not get responses and so we are left in limbo. Don't forget we are all trying to learn so if there's a contestation about an answer it deserves to be addressed so we can enforce our collective knowledge. otherwise there would be no point commenting or raising a question sir.
I also think that DynamoDB with global tables is wrong answer. Especially that question specifies "SUB-millisecond" response times and DynamoDB documentation states only "single-digit millisecond". I think the correct answer here should be to utilize cache. And for the specific requirements that will be Redis because it offers "snapshots and replication" that were mentioned.
Congratulations on passing your AWS SAA-C03 exam with such a great score! 862/1000 is a fantastic result, and I'm so proud of you for your hard work and dedication. I'm absolutely thrilled that my videos played a role in your success. It's incredibly rewarding to know that the time and effort I put into creating them is helping people like you achieve their certification goals. Now that you're a certified AWS Solutions Architect - Associate, you have a world of opportunities ahead of you. I wish you all the best in your future AWS endeavors!
@sthithapragnakk Question 788: In the option Answer: D need to create a launch template to start new instance, there we need to specify the min desired capacity right. So, In Option B was not right due to set up the min desired capacity. Can you clarify it?
I took AWS Certified Solutions Architect Associate exam dumps from P2PExams and it was benefical. Around 85% of exam questions came from these dumps. I passed the test and my expeirence with P2PExams was excellent.
I watched all your videos, but I can't figure out this analysis it's so confusing compared to others. Many questions feel opposite of what I normally choose, making me question if I even know anything. I watched a total of 36 of your videos. I'm taking the exam tomorrow we will see.
Correction - Question 808 - Answer is C
Least Operational Overhead: Option C leverages AWS managed services (EventBridge, Systems Manager Automation, and SNS) without the need for custom code (Lambda functions). This reduces the complexity of implementation and ongoing maintenance.
Specific to KMS Key Deletion: EventBridge allows you to directly trigger an action based on the DeleteKey operation in KMS, making it more targeted than a general CloudTrail log analysis (Option D).
Immediate Prevention: Systems Manager Automation runbooks can be configured to automatically cancel the deletion of the KMS key as soon as the EventBridge rule is triggered, providing immediate protection.
Hi, Q 794, correct answer is B. Resource Policy.
To restrict access from EC2 instances so that they can only read and not write to an EFS file system, you should use a resource policy in EFS. This is because resource policies are more appropriate for controlling access to a specific resource, in this case, the EFS file system.
Thank You very much for your excellent work.
B because identity policies are not created for EFS on the efs file system. C is incomplete and incorrect.
Thank you so much I passed my Amazon SAA-C03 exam. your videos and certifiedumps study guide + practice test helped me to pass my exam.
i want to ask some questions from you about the exam , how to contact you ? ( i am also planning to give this exam)
Great job! Congratulations ....
@@surajbhardwaj2599did you give the exam?
Could you please provide the dumps?
@@harshdwivedi5025 Yes bro i have passed the exam
Question 766. Your answer is correct. I am just adding more rationale. Hope this is correct.
Both 'SystemAdministrator' and 'AdministratorAccess' seem to be valid policies. However, SystemAdministrator is an AWS managed policy that: Grants full access permissions necessary for resources required for application and development operations, whereas, AdministratorAccess is an AWS managed policy that: Provides full access to AWS services and resources.
Given the requirement in the question “specific employees to have full access to AWS services and resources”, AdministratorAccess is the correct option.
Today i pass my aws exam, i used your video and certifiedumps practice test which help me a lot. thank you soo much.
Great job! Congratulations 🎊🎉
dumps from which website?
Thanks for uploading. I am from Toronto, I really appreciate for your all uploads and exceptional explanation.
You are welcome. All the best
Hi,
I created a channel just to comment here.
I would like to thank you from the bottom of my heart. Your videos helped me clear the solutions architect certification.
The way you explain the questions, using elimination and keywords also helps with solving other related questions.
I appreciate your hardwork and you have my utmost respect.
I hope when I decide to give solutions architect professional in the future, I will find a playlist by you.
Cheers!
Glad I could help! I am working on the SAP videos as we speak, will upload the first video sometime this week. Congratulations on SAA and all the best for future certifications.
Thanks for your detailed teachings and frequent uploads. I passed my Solutions Architect Exams today
hi bro which is your main resource
Are the questions the same? thank you
@@boopathys6356 Did the solutions Architect course on Skillsbuilder and this UA-cam channel
@@davidvalenciafit7941 not exactly but it has the same structure with these UA-cam dumps
Glad to help, congratulations 🎉🎊
q.768 i believe the answer is A. question makes mention of an on premise file system
I feel the same on question 768. D requires application changes, which violates minimizing operational effort.
@@mcl.7799 Transfer Family is used for transfer data in or out to s3
A is incorrect because EFS is file sharing for multiple resources not just one specific use case.. over kill i guess , secondly , setting up of EFS is more work thank using already available S3. dont see any app changes mentioned in q
#780 as per AWS it is preferable to use Resources Based-Policies (S3, SQS, SNS etc.) when giving access to another account. When you assume a role, you give up your initial permissions
I disagree on question 804: I think correct option is A, option D has as side effect that is not possible for anyone to create public ip access ec2 and iam, while the question ask to prohibite that only trough cloudformation. Proactive control is implemented with cloudformation hooks, so it has effect only on cloudformation.
Anycase thanks :)
Yes Option A is correct.
Question 787. Is answer C "Provision an Amazon API Gateway API. Connect the API to AWS Lambda to run the containers" correct?
Lambda has 15 minutes limit and is not intended to host ongoing tasks but rather respond to events and calls.
We are not sure what is specific to the application but we can assume it should be working all the time without interruptions.
Also running containers in Lambda requires implementing specific changes to the images themselves.
I would go for A,B as both ECS and EKS considered managed services which utilizing Serverless compute.
A and B. There is no clue about the type of application. And the question seems to be A or B. the question about A and B is which combination of ....
Q804, I think correct answer is A and not D because it is standard functionality of Control tower proactive controls, [CT.IAM.PR.1] and [CT.EC2.PR.9]
I second that. I cannot post a link because it gets removed but this is from AWS docs: "Proactive Control that will proactively identify and block noncompliant resources before they are provisioned by CloudFormation."
I agree. Option D is not the correct answer. SCP can not check the detailed policy in cloud formation. Control Tower could handle this. Proactive Controls scan resources deployed via AWS CloudFormation before provisioning to ensure compliance with that control.
Exactly
Thanks for the content being delivered in your channel. Really helpful.
Just wanted to highlight, Question # 808 asks for preventing accidental deletion of keys & notifying the same. Option D satisfies only notification.
I believe the correct answer would be option C using automation runbook.
Yes, you are correct. C would be more appropriate.
Thanks for the clear instructions on choosing proper answers. This really helped me to clear the exam after loosing touch for a long time and helped me refresh key topics on short time.
Thanks for the videos 🎉
You're very welcome! I'm so happy to hear that my videos helped you brush up on key topics and pass your exam. It's always my goal to make complex subjects clear and understandable, especially for those returning to a subject after a break. Congratulations on your success!
Question 804- Answer is A not D (SCPs work at the account or organizational unit level and cannot filter based on specific CloudFormation stack configurations. SCPs cannot block specific configurations within CloudFormation stacks.)
Thank you very much!! I just passed my exam!!!
Congratulations on passing your exam! 🎉 Well done, and I’m so glad to have been part of your journey. Wishing you continued success ahead! 😊🙌
q804 A definitely ....question says AWS control Tower is enabled on the account which means we should utilize control tower
Proactive controls are optional controls implemented with AWS CloudFormation hooks.
Proactive controls check resources whenever those resources are created or updated by means of AWS CloudFormation stack operations
its efs resource policy not efs identity policy, please correct your answer, Q794
Thanks for your detailed videos. I really appreciate your efforts. you are doing a great job.
I passed my Solutions Architect Exams today. your method using elimination and keywords also helps.
Congratulations .................
I passed my exam with your awesome videos. Big thank you! Next stop SAP ...
Great job! Congratulations 🎊🎉
We're the questions repeated?
#791 (1:32:00) - I dont' think DynamoDB is the right answer since we are looking for a SQL database (Amazon RDS).
If Game meta data is read frequently, a mem cache is a better solution. Also the question does not mention the Game was accessed globally, why to use Dynamo DB global table?
In my opinion answer is C: wouldn't require a database change, provide superior caching with Redis and reduce load times.
Yes the answer should be C, as Elasticache in general provides sub-milliseconds latency and with Redis in particular capabilities like replication and snapshots are provided by default. On the other hand Dynamodb needs DAX for sub-milliseconds latency ( microseconds ), which is not mentioned in the answer, not to mention the complexity and operational overhead needed for migrating from RDS to Dynamodb.
What will be corrected if the option B comes with DAX 😂
@@rickgrimes800 agreed
Thanks for your detailed videos. I really appreciate your efforts. you are doing a great job
☺️ you are welcome, all the best.
very good explanations.. i am learning a lot.. Thanks a ton
1:59:23 804. Answer is A.
Subscribed, very useful uploads and explanations, thanks 🙏
Thank you. All the best
I passed my test and this video definitely made that possible!
🙏🏾, congratulations 🎉🎊
@@sthithapragnakk thank you!
Could you please tell if the questions were same?
I have passed SAA C03 yesterday. Thank you so much for your videos. Have suggested your channel to my known people. Thank you once again. Namaste 🙏
Congratulations on passing your SAA-C03 exam! 🎉 That's a huge accomplishment, and I'm so happy to hear that my videos played a role in your success.
Thank you for your kind words and for recommending my channel to others. It means a lot to me that you found my content valuable. Your support is incredibly encouraging and motivates me to create even more helpful resources.
Namaste to you as well! 🙏 Wishing you all the best in your continued cloud journey!
Thanks boss and subscribed! Cleared my AWS Certified Solutions Architect - Associate certification yesterday. Really appreciate the fully detailed explanations and small exam techniques.
Looking forward if you are making videos for AWS Certified Solutions Architect - Pro💪
Welcome aboard! Congratulations 🎊🎉, yeah just started professional videos couple of days ago
I'm taking mine in 10 days. are they same questions as this?
Cleared by AWS Certificated Solution Architect - Associate certification today. thanks a ton. Your video series helped me a lot.
Hi bro by watching this playlist you cleared this exam?
Congratulations!!
Q808-) i think correct answer is A and not D because we have to prevent the accidental deletion of KMS keys. Correct me if i am wrong?
I agree with Option A is the best answer. Not D.
Option C is correct. AWS Config cannot be used to directly cancel deletion.
@@danksbaby yes you are right .
Thank you I passed my exams last week.
Today i pass my aws CSA exam, i have used your video and Dumps provided by Dumpsgate which help me a lot.
Great job, congratulations 🎉🎊
Could you please share the dumps
Thank You so Much. SAA-C03 Certified. ✅
Welcome! Congratulations!!
Were the questions same?
Sir the explanation was too good. informative rich
Glad you like it. All the best
Successfully passed AWS certified solutions architect exam😍🎉
Special thanks to you sir, your tips and tricks really helped me to achieve this.
I got many questions from this playlist in exam✌🏻
Most welcome 😊, congratulations
We're the questions repeated?
I just passed the SAA-C03 exam with a great score thanks to your videos and Passexam4sure study guide + practice test helped me to pass my exam.
you are the best
Hi sir, I think for question #779 option C might be better than B, as RDS is already fully sufficient and compatible with the on-prem db, using Aurora with higher price point might also be considered as increasing operational overhead?
May be specific point in time means that any specific second of the backup which aurora can provide but for the rds.
Rds : precision within a few mins.
Aurora : more granular.
Not sure 😂
Thanks for the informative videos i learnt a lot of new things just wanted to ask you to revisit #805 cos i also was picking optiob B before i read that the Ec2 instance in an autoscaling group was in a private subnet? Just wonderign if it shouldnt rather be in a public subnet? please Clarify to further enforce my knowledge tx
I am so thankful for all ur insights and inputs.. please let me know how to obtain membership of ur channel
send me an email - sthithapragnasya@gmail.com
Thanks
Welcome
Hello sir, why not the answer C when it comes to question 808? It lets you configure a run book to cancel the deletion of the KMS key. The question states that they need a solution to prevent the accidental deletion of KMS keys and answer D just gives a solution to be notified.
For question 808: the solution does not help to prevent deletion of AWS KMS keys. Can you please check and confirm
I cleared the Certification. Thank you so much. Your videos really helped a lot.
I wish great success for you too, in all good things you are doing. :)
Thanks and welcome, congratulations 🎊🎉 to you
Were the questions repeated?
A Huge thank you to you i passed my SAA C03 yesterday.. i came across this particular video 5 hours before my exam and approximately 15 questions from this video was repeated..wish i had seen your videos earlier non the less i am SAA certified✅
Great job! Congratulations 🎉🎊
@@sthithapragnakk thanks i really appreciate your help
For 794, if you say C is the answer, can you give a scenario where resource policy is used?
thanks a lot
🙏🏾
Thanks for your videos and explanation... It greatly helped me pass my exam today💃💃
You had your exam in March. What percentage of questions from the playlist would you say was repeated in your exam?
Great job!
@@kharChehrei need the same question answered 😂
@@craigm2381 I can answer that. I just finished with my test!
The questions on my exam were easier and mostly shorter in general. I had a few exact questions repeated and those were the hard ones that I'd forgotten the answer to. I tried to answer everything with logic and from what I've learned from this channel. I think I'll pass
I’m sorry I’m just seeing your comment but yes it was shorter and no I don’t think I saw a question from here.. but the techniques helped me answer them well
Hii
i cleared my AWS Solutions Architect exam today in my first attempt. Thank you. your videos are very helpful and most questions were very similar to the questions in your video. Great effort and explanation from you sir Thank you
Well done! Congratulations 🎊🎉
which videos did you watch including this one?
#791 is a very contestable answer , you have always coached us to distinguish between relational and non relational databases and that they do not work together. So how does RDS meta data work with Dynamo db in this scenario? you also always encourage us to like and comment but i have noticed that most of our comments that are questions or contrary to your chosen answers does not get responses and so we are left in limbo. Don't forget we are all trying to learn so if there's a contestation about an answer it deserves to be addressed so we can enforce our collective knowledge. otherwise there would be no point commenting or raising a question sir.
I also think that DynamoDB with global tables is wrong answer. Especially that question specifies "SUB-millisecond" response times and DynamoDB documentation states only "single-digit millisecond". I think the correct answer here should be to utilize cache. And for the specific requirements that will be Redis because it offers "snapshots and replication" that were mentioned.
Thank you very much Sir. I passed my AWS SAA-C03 with 862/1000 marks. Your videos helped me a lot.
Congratulations on passing your AWS SAA-C03 exam with such a great score! 862/1000 is a fantastic result, and I'm so proud of you for your hard work and dedication.
I'm absolutely thrilled that my videos played a role in your success. It's incredibly rewarding to know that the time and effort I put into creating them is helping people like you achieve their certification goals.
Now that you're a certified AWS Solutions Architect - Associate, you have a world of opportunities ahead of you. I wish you all the best in your future AWS endeavors!
Question 808: How does answer D "prevents the accidental deletion of KMS Keys"? Answer D does not address this requirement, at least not explicitly.
Corrected the answer. Thank you for pointing that out.
@sthithapragnakk
Question 788: In the option Answer: D need to create a launch template to start new instance, there we need to specify the min desired capacity right. So, In Option B was not right due to set up the min desired capacity. Can you clarify it?
I took AWS Certified Solutions Architect Associate exam dumps from P2PExams and it was benefical. Around 85% of exam questions came from these dumps. I passed the test and my expeirence with P2PExams was excellent.
please what mean the P2PExams ? i need this file please help me
Hi, Do you offer transcripts of the questions and answers that I could use as extra study once I've watched all the videos?
Thanks
Yeah, pdfs are available thorugh memberships
@@sthithapragnakk how do I join up?
Hi sir ,which video has 740 to 760 questions explanation . Couldn’t find
797 answer is D right?
Many thanks Sir, waiting for SAP-C02
Mostly the first video will be up today or tomorrow
waiting SAP-CO2. Thanks
Will try to release the first video tomorrow
I watched all your videos, but I can't figure out this analysis it's so confusing compared to others. Many questions feel opposite of what I normally choose, making me question if I even know anything. I watched a total of 36 of your videos. I'm taking the exam tomorrow we will see.
Hi,how did it go?
Sir these questions also come in aws exams ?
Like AWS CP Exam ?
For cloud practitioner exam there is a different playlist
These questions are real exam questions ?
Yes