AWS Solutions Architect Associate
You need to transfer data of around 50 TB offline to the AWS cloud. What service can you use for such offline data transfer to AWS?
AWS Snowball
AWS service that combines SNS and SQS with application logic is called ______.
AWS Step Functions
You are tasked to work on a storage solution that can be used with both on-premises storage and AWS storage services. Which AWS services will you choose?
AWS Storage Gateway
Your organization suspects there are many idle databases and Elastic IP addresses in AWS which are not used. You are asked to advise the AWS tool to assess this requirement. What AWS service would you recommend?
AWS Trusted Advisor
AWS follows the shared responsibility model; which is a correct statement about the shared responsibility model?
AWS is responsible for the security of the cloud, and the customer is responsible for security in the cloud.
Which of the following statement is true for warm standby disaster recovery design?
All components in warm standby are not active and are only initialized when a disaster occurs
AWS RDS supports various databases. Please choose the supported databases from below list. Choose all that applies. Oracle PostgresSQL MariaDB All of these answers
All of these answers
Please choose the AWS service tools that can help to automate the deployments. Choose all that applies. All of these answers CloudFormation Service Catalog Elastic Beanstalk
All of these answers
AWS SNS Simple Notification Service supports various subscribers that include which of the following
All of these answers: (AWS Lambda Email SQS)
AWS Auto Scaling uses a termination policy when it needs to scale in. What's the default termination policy?
It ensures instances are evenly placed across the availability zones hence terminate the instances accordingly
Please choose the correct statement about AWS SQS.
It is a Distributed Message Queuing Service
_________ is an AWS service that can help to do content customization when used with CloudFront
Lambda@Edge
Classic Load Balancer operates at which OSI layers?
Layer 4 & 7
What is another way to ensure maximum protection and prevent the accidental deletion of a preserved version? Cross-Region replication Multi-factor authentication Cross-Origin Resource Sharing (CORS) Bucket policy
Multi-factor authentication
What is a global DynamoDB table?
Multiple DynamoDB tables replicated across multiple AWS regions
While working with EC2 instances and using EBS volumes, what are the valid statements from the given options: EBS Volume and EC2 instances can be in different availability zones. Multiple EC2 instances can be attached to a single EBS Volume Multiple EBS Volumes can be attached to a single EC2 instance EBS Volume can be attached to a running EC2 instance
Multiple EBS Volumes can be attached to a single EC2 instance EBS Volume can be attached to a running EC2 instance
Which AWS Load Balancer service is best suited for load balance traffic based on ip addresses providing end to end security:
Network Load Balancer
What is an AWS availability zone?
One or more physical data centers, geographically located in an AWS Region.
Which of the following are true in regards to the AWS Solution Architect Associate exam options? Choose all that applies.
Online Proctored Exam Physically go to the testing center
AWS Lambda is an example of ________ service
PaaS
AWS Lambda is an example of:
PaaS
You are asked to provide a solution to connect two VPCs. What will be the best suitable service for this requirement?
Peering VPC connections
Which of the following is correct about RPO (Recovery Point Objective) and RTO (Recovery Time Objective)?
RPO is the amount of data that a business can accept to lose for a defined length of time, whereas RTO is the time takes to bring the system back to a defined service level
You are tasked to recommend an AWS data warehouse solution that supports SQL. Which of the following is the best solution for this requirement?
Redshift
AWS Well-Architected Framework follows five key principles, which of the below listed is not a valid principal:
Redundancy
What's true regarding the S3 replication feature?
Replication is possible between different AWS regions and different AWS accounts
You have a production environment, and you are sure that the application will be hosted in the AWS cloud for the long term, probably a couple of years. What type of EC2 instances will be the most cost-effective for such permanent confirmed requirement?
Reserved instances
Choose the AWS hosted DNS service:
Route53
You are tasked to recommend an AWS storage service that can be allowed to be accessed from the internet and can store static images. What would you recommend? S3 ElastiCache EBS EFS
S3
You are tasked to recommend an AWS solution to provide temporary access to different resources as and when required. What will be the best AWS service to achieve this requirement?
AWS Security Token Service STS
AWS service that provide protection from DDOS attack, is called __________.
AWS Shield
What is the time limit for the AWS Solution Architect Associate exam?
130 minutes
How many maximum read replicas are supported by AWS RDS MySQL and SQL databases? 5 4 6 7
5
Consider a scenario where you have a web application hosted in the AWS cloud. The application has two web servers for high availability, with each server having 95% availability and a single backend database with 97% availability. What will be the total availability in this scenario?
96%
AWS provides SLA of ________ for EC2 service.
99.99%
AWS Certified Solution Architect Associate exam's focus is on below capabilities of candidates. Choose all that applies.
A candidate is capable of coming up with a solution using design principles, meeting the requirement. Implementation guidance
You are working on a requirement to ensure S3 objects are not deleted or updated for a defined period except for a specific user having permission to make changes at any time. Which of the following will be a suitable solution for this requirement?
A policy with governance mode retention
Which of the following is considered to be the weakest security measure for an S3 bucket?
ACL
You need to provide a solution to manage the SSL certificates for your applications hosted in AWS environment. What will be the suitable AWS service that can be utilized for this purpose?
ACM
You can create a custom key store using the AWS service called __________.
AWS CloudHSM
AWS code repository and version control tool is called ________.
AWS CodeCommit
Which of the following is true regarding AWS Config?
AWS Config charging is based on the number of resources being monitored by Config
Virtual Machines hosted in AWS cloud are called: AWS EC2 AWS VPC Route53 CloudWatch
AWS EC2
You are tasked to recommend a solution to process the large quantity of data for Machine Learning activity, which is already stored in S3. What is the best AWS storage option to achieve this?
AWS FSx for Lustre
What's the name of the AWS threat detection service?
AWS GuardDuty
You came across some unauthorized access on the S3 bucket from a remote host, what AWS service can you use to protect your account from such incidents?
AWS GuardDuty
If you use a third-party message broker and want to migrate to AWS, what will be the recommended service to integrate with the existing message broker?
AWS MQ
In order to manage the cost and billing centrally for multiple AWS accounts, you can make use of ____________.
AWS Organizations
What AWS service can you use if you have multiple AWS accounts and want to manage billing centrally?
AWS Organizations
What AWS service can you use if you have multiple AWS accounts and want to manage the resource in separate accounts centrally?
AWS Resource Access Manager
Which AWS-hosted messaging service can be used to deliver push notifications?
AWS SNS Simple Notification Service
The development team has reached out to you for an AWS solution, wherein they can get rid of using hard-coded secrets in applications hosted in AWS Cloud. What will be your recommendation?
AWS Secrets Manager
What's the AWS service that can be used to store credentials and keys for different AWS resources?
AWS Secrets Manager
While selecting an AWS region to deploy your infrastructure, what are the factors to be considered before making the right decision? All of these answers Compliance rules Latency Issues Pricing realities Services offered
All of these answers: (Compliance rules Latency Issues Pricing realities Services offered)
You are tasked to recommend an AWS solution to perform security checks and assessments on applications hosted in Windows or Linux EC2 instances, what will be the best AWS service for this requirement?
Amazon Inspector
You are tasked to recommend a database suitable where high performance is required. Which database would you recommend? MySQL PostgreSQL Aurora All of these databases would work well
Aurora
You have an on-premise application planned to be migrated to AWS, but you don't want to change the public IP address for your application. What IP address option will you go with?
BYOIP
Which of the following is a valid statement in regards to EBS volume's encryption?
Both EBS data and boot volume can be encrypted
Which of the following is true regarding the AWS ElastiCache service?
Both of these are true: a. ElastiCache Redis provides persistent storages b. ElastiCache Memcached doesn't support persistent storage
The S3 security policy that can be applied directly to the S3 bucket is called ________.
Bucket Policy
When migrating to the AWS cloud, it is recommended to consider the below approaches. Choose 2 answers.
Build a brand new application Start with low value/low-risk application
Choose the AWS CDN service:
CloudFront
AWS _____________ can be used to track API calls and authentication requests against an AWS account.
CloudTrail
What is the monitoring service provided by AWS and included in each service?
CloudWatch
Your organization has many teams using AWS resources for different projects. You want to have a closer view of AWS costs spend by different teams. What can you use to track resources and cost segregation for multiple teams?
Cost allocation tags
Which of the following is true regarding S3 glacier storage at rest?
Data at rest stored in S3 Glacier is automatically encrypted using SSE and AES-256 encryption. AWS maintains the encryption keys
What are the two biggest challenges when we host any application in the cloud?
High availability and resiliency
Which of the following statement are true regarding AWS CloudTrail?
Default CloudTrail stores events for 90 days The custom trail can be configured, and data can be stored indefinitely in S3
Which domain makes up the highest percentage of the exam?
Design Resilient Architectures
AWS Solution Architect Associate exam is broken into 4 x domains. What are the valid domains from the below list? Choose all that applies.
Design Resilient-Architectures
You are working on a solution to connect AWS infrastructure with the on-premise data center. What service can you use to achieve the goal?
DirectConnect
Choose the NoSQL Database service offered by AWS. Aurora RDS DynamoDB None of these answers
DynamoDB
You are working on an application design that will use an Application Load Balancer, and there will be a large number of concurrent users. What options will help to manage the large concurrent user sessions?
DynamoDB ElastiCache Nodes
What's the storage file system provided by AWS? EFS ElastiCache S3 Elastic Block Storage
EFS
Which AWS service can be used by developers to deploy the application quickly on the required runtime environment, and if needed, changes can be done in no time?
Elastic Beanstalk
What is the consistency level provided by S3 if an object is deleted or an existing object is updated?
Eventual consistency
What is the consistency level provided by S3 if an object is deleted or an existing object is updated? read-after-write consistency write-after-read consistency read-after-delete consistency Eventual consistency
Eventual consistency
Which AWS resource provides free digital training?
Exam Readiness
AWS Lambda function runs on EC2 instances in a specialized lightweight virtual machine format called ______.
Firecracker
There are several operational benefits of AWS; please choose all that apply. Flexible and optimized use of servers and storage Managed Services Unmanaged Services All of these answers
Flexible and optimized use of servers and storage Managed Services
There are several operational benefits of AWS; please choose that applies:
Flexible and optimized use of servers and storage Managed Services
Which of the following are correct statements about Horizontal and Vertical scaling? Horizontal scaling is also called "scaling out," and Vertical scaling is known as "scaling up." Horizontal scaling refers to adding more nodes and machines, whereas Vertical scaling is about adding more resources to an existing server. Horizontal scaling refers to adding more resources to an existing server, whereas Vertical scaling is about adding more nodes and machines. Horizontal and Vertical scaling both are the same terms.
Horizontal scaling is also called "scaling out," and Vertical scaling is known as "scaling up." Horizontal scaling refers to adding more nodes and machines, whereas Vertical scaling is about adding more resources to an existing server.
IaaS is _____ Internet as a Service Infrastructure as a Service Intranet as a Service Internet as a Solution
Infrastructure as a Service
AWS provides different connectivity options to connect AWS-hosted resources to the outer world. Please choose valid connectivity options from the below list:
Internet connectivity Direct Connect to securely connect your Datacenter to AWS cloud Private backbone network connection All of these answers
You are asked to provide a storage solution for static content storage wherein it will be required to be accessed once in 40-45 days. Whatever storage option is selected should be reliable as it will be difficult to recreate the data. What will be the best cost-effective storage option for this requirement?
S3 Standard-IA
You are asked to provide a storage solution for static content storage wherein it will be required to be accessed once in 40-45 days. Whatever storage option is selected should be reliable as it will be difficult to recreate the data. What will be the best cost-effective storage option for this requirement? S3 Standard-IA S3 One Zone-IA S3 Glacier S3 Standard
S3 Standard-IA
Select the S3 feature that prevents the accidental deletion of S3 objects
S3 Versioning
Choose the correct statement about SQS and SNS.
SNS is push-based, and SQS is a pull-based
You are tasked to provide recommendations on how S3 encryption shall be performed by using the customer's own generated keys. Which will be recommended option to achieve this?
SSE-C
Which of the following is not a key characteristic defined by NIST in the public cloud context? Self-programmable On-Demand Self Service Broad Network Access Resource Pooling Rapid Elasticity
Self-programmable
Choose the valid deployment options available for Aurora: Parallel Provisioned Customer managed Aurora Serverless Aurora Provisioned
Serverless Aurora Provisioned
AWS _________ is used to control and govern the resources that can be created and deployed by using defined portfolios using different AWS automation tools.
Service Catalogue
The team has reached out to you with the requirement to have several EC2 instances up for a short duration for some testing, and there is no business impact if instances are stopped sporadically any time of the day. What type of instances are best suited for this requirement?
Spot instances
AWS load balancers provide the feature of sticky sessions, which ensures _____.
The user is communicating with the same server during the whole session time
Your organization is paying a good amount for having database snapshots. What can you do the minimize the snapshots storage cost?
Use Amazon Data Lifecycle
While using the multiple load balancers for high availability, what's the best practice to ensure quick failover if one load balancer fails.
Use Elastic IP address to attach with multiple load balancers
What AWS service can you use to capture the network traffic for analysis and troubleshooting?
VPC Flow Logs
What tool can you use to information about IP traffic within your VPC?
VPC Flow Logs
What are the valid Storage Gateway configuration options?
Volume Gateway File Gateway Tape Gateway
