Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
exam questions

Exam AWS Certified Solutions Architect - Associate SAA-C03 All Questions

View all questions & answers for the AWS Certified Solutions Architect - Associate SAA-C03 exam

Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 332 discussion

A company needs to provide its employees with secure access to confidential and sensitive files. The company wants to ensure that the files can be accessed only by authorized users. The files must be downloaded securely to the employees’ devices.

The files are stored in an on-premises Windows file server. However, due to an increase in remote usage, the file server is running out of capacity.
.
Which solution will meet these requirements?

  • A. Migrate the file server to an Amazon EC2 instance in a public subnet. Configure the security group to limit inbound traffic to the employees’ IP addresses.
  • B. Migrate the files to an Amazon FSx for Windows File Server file system. Integrate the Amazon FSx file system with the on-premises Active Directory. Configure AWS Client VPN.
  • C. Migrate the files to Amazon S3, and create a private VPC endpoint. Create a signed URL to allow download.
  • D. Migrate the files to Amazon S3, and create a public VPC endpoint. Allow employees to sign on with AWS IAM Identity Center (AWS Single Sign-On).
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
elearningtakai
Highly Voted 1 year, 7 months ago
Selected Answer: B
This solution addresses the need for secure access to confidential and sensitive files, as well as the increase in remote usage. Migrating the files to Amazon FSx for Windows File Server provides a scalable, fully managed file storage solution in the AWS Cloud that is accessible from on-premises and cloud environments. Integration with the on-premises Active Directory allows for a consistent user experience and centralized access control. AWS Client VPN provides a secure and managed VPN solution that can be used by employees to access the files securely.
upvoted 8 times
...
pentium75
Highly Voted 10 months, 3 weeks ago
Selected Answer: B
C has "signed URL", everyone who has the URL could download. Plus, only B ensure the "must be downloaded securely" part by using VPN.
upvoted 5 times
...
NayeraB
Most Recent 9 months, 1 week ago
Selected Answer: B
My money is on B, but it's still not mentioned that the customer used an on-prem Active Directory.
upvoted 3 times
...
TariqKipkemei
1 year, 1 month ago
Selected Answer: B
Windows file server = Amazon FSx for Windows File Server file system Files can be accessed only by authorized users = On-premises Active Directory
upvoted 4 times
...
BrijMohan08
1 year, 2 months ago
Selected Answer: C
Remember: The file server is running out of capacity.
upvoted 2 times
awsgeek75
10 months, 1 week ago
But then how do you download the files to user's machine in a secure way?
upvoted 2 times
...
pentium75
10 months, 3 weeks ago
That's why we're using FSX for Windows File Server in AWS. "Signed URL to allow download" would allow everyone who has the URL to download the files, but we must "ensure that the files can be accessed only by authorized users". Plus, the "private VPC endpoint" is not really of use here, it's still S3 and the users are not in AWS.
upvoted 4 times
...
...
SkyZeroZx
1 year, 6 months ago
Selected Answer: B
B is the correct answer
upvoted 2 times
...
LuckyAro
1 year, 9 months ago
Selected Answer: B
B is the best solution for the given requirements. It provides a secure way for employees to access confidential and sensitive files from anywhere using AWS Client VPN. The Amazon FSx for Windows File Server file system is designed to provide native support for Windows file system features such as NTFS permissions, Active Directory integration, and Distributed File System (DFS). This means that the company can continue to use their on-premises Active Directory to manage user access to files.
upvoted 4 times
...
Bilalazure
1 year, 9 months ago
B is the correct answer
upvoted 2 times
...
jennyka76
1 year, 9 months ago
Answer - B 1- https://docs.aws.amazon.com/fsx/latest/WindowsGuide/what-is.html 2- https://docs.aws.amazon.com/fsx/latest/WindowsGuide/managing-storage-capacity.html
upvoted 2 times
...
Neha999
1 year, 9 months ago
B Amazon FSx for Windows File Server file system
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...