AWS Solutions Architect Associate

You need to transfer data of around 50 TB offline to the AWS cloud. What service can you use for such offline data transfer to AWS?

AWS Snowball

AWS service that combines SNS and SQS with application logic is called ______.

AWS Step Functions

You are tasked to work on a storage solution that can be used with both on-premises storage and AWS storage services. Which AWS services will you choose?

AWS Storage Gateway

Your organization suspects there are many idle databases and Elastic IP addresses in AWS which are not used. You are asked to advise the AWS tool to assess this requirement. What AWS service would you recommend?

AWS Trusted Advisor

AWS follows the shared responsibility model; which is a correct statement about the shared responsibility model?

AWS is responsible for the security of the cloud, and the customer is responsible for security in the cloud.

Which of the following statement is true for warm standby disaster recovery design?

All components in warm standby are not active and are only initialized when a disaster occurs

AWS RDS supports various databases. Please choose the supported databases from below list. Choose all that applies. Oracle PostgresSQL MariaDB All of these answers

All of these answers

Please choose the AWS service tools that can help to automate the deployments. Choose all that applies. All of these answers CloudFormation Service Catalog Elastic Beanstalk

All of these answers

AWS SNS Simple Notification Service supports various subscribers that include which of the following

All of these answers: (AWS Lambda Email SQS)

AWS Auto Scaling uses a termination policy when it needs to scale in. What's the default termination policy?

It ensures instances are evenly placed across the availability zones hence terminate the instances accordingly

Please choose the correct statement about AWS SQS.

It is a Distributed Message Queuing Service

_________ is an AWS service that can help to do content customization when used with CloudFront

Lambda@Edge

Classic Load Balancer operates at which OSI layers?

Layer 4 & 7

What is another way to ensure maximum protection and prevent the accidental deletion of a preserved version? Cross-Region replication Multi-factor authentication Cross-Origin Resource Sharing (CORS) Bucket policy

Multi-factor authentication

What is a global DynamoDB table?

Multiple DynamoDB tables replicated across multiple AWS regions

While working with EC2 instances and using EBS volumes, what are the valid statements from the given options: EBS Volume and EC2 instances can be in different availability zones. Multiple EC2 instances can be attached to a single EBS Volume Multiple EBS Volumes can be attached to a single EC2 instance EBS Volume can be attached to a running EC2 instance

Multiple EBS Volumes can be attached to a single EC2 instance EBS Volume can be attached to a running EC2 instance

Which AWS Load Balancer service is best suited for load balance traffic based on ip addresses providing end to end security:

Network Load Balancer

What is an AWS availability zone?

One or more physical data centers, geographically located in an AWS Region.

Which of the following are true in regards to the AWS Solution Architect Associate exam options? Choose all that applies.

Online Proctored Exam Physically go to the testing center

AWS Lambda is an example of ________ service

PaaS

AWS Lambda is an example of:

PaaS

You are asked to provide a solution to connect two VPCs. What will be the best suitable service for this requirement?

Peering VPC connections

Which of the following is correct about RPO (Recovery Point Objective) and RTO (Recovery Time Objective)?

RPO is the amount of data that a business can accept to lose for a defined length of time, whereas RTO is the time takes to bring the system back to a defined service level

You are tasked to recommend an AWS data warehouse solution that supports SQL. Which of the following is the best solution for this requirement?

Redshift

AWS Well-Architected Framework follows five key principles, which of the below listed is not a valid principal:

Redundancy

What's true regarding the S3 replication feature?

Replication is possible between different AWS regions and different AWS accounts

You have a production environment, and you are sure that the application will be hosted in the AWS cloud for the long term, probably a couple of years. What type of EC2 instances will be the most cost-effective for such permanent confirmed requirement?

Reserved instances

Choose the AWS hosted DNS service:

Route53

You are tasked to recommend an AWS storage service that can be allowed to be accessed from the internet and can store static images. What would you recommend? S3 ElastiCache EBS EFS

S3

You are tasked to recommend an AWS solution to provide temporary access to different resources as and when required. What will be the best AWS service to achieve this requirement?

AWS Security Token Service STS

AWS service that provide protection from DDOS attack, is called __________.

AWS Shield

What is the time limit for the AWS Solution Architect Associate exam?

130 minutes

How many maximum read replicas are supported by AWS RDS MySQL and SQL databases? 5 4 6 7

5

Consider a scenario where you have a web application hosted in the AWS cloud. The application has two web servers for high availability, with each server having 95% availability and a single backend database with 97% availability. What will be the total availability in this scenario?

96%

AWS provides SLA of ________ for EC2 service.

99.99%

AWS Certified Solution Architect Associate exam's focus is on below capabilities of candidates. Choose all that applies.

A candidate is capable of coming up with a solution using design principles, meeting the requirement. Implementation guidance

You are working on a requirement to ensure S3 objects are not deleted or updated for a defined period except for a specific user having permission to make changes at any time. Which of the following will be a suitable solution for this requirement?

A policy with governance mode retention

Which of the following is considered to be the weakest security measure for an S3 bucket?

ACL

You need to provide a solution to manage the SSL certificates for your applications hosted in AWS environment. What will be the suitable AWS service that can be utilized for this purpose?

ACM

You can create a custom key store using the AWS service called __________.

AWS CloudHSM

AWS code repository and version control tool is called ________.

AWS CodeCommit

Which of the following is true regarding AWS Config?

AWS Config charging is based on the number of resources being monitored by Config

Virtual Machines hosted in AWS cloud are called: AWS EC2 AWS VPC Route53 CloudWatch

AWS EC2

You are tasked to recommend a solution to process the large quantity of data for Machine Learning activity, which is already stored in S3. What is the best AWS storage option to achieve this?

AWS FSx for Lustre

What's the name of the AWS threat detection service?

AWS GuardDuty

You came across some unauthorized access on the S3 bucket from a remote host, what AWS service can you use to protect your account from such incidents?

AWS GuardDuty

If you use a third-party message broker and want to migrate to AWS, what will be the recommended service to integrate with the existing message broker?

AWS MQ

In order to manage the cost and billing centrally for multiple AWS accounts, you can make use of ____________.

AWS Organizations

What AWS service can you use if you have multiple AWS accounts and want to manage billing centrally?

AWS Organizations

What AWS service can you use if you have multiple AWS accounts and want to manage the resource in separate accounts centrally?

AWS Resource Access Manager

Which AWS-hosted messaging service can be used to deliver push notifications?

AWS SNS Simple Notification Service

The development team has reached out to you for an AWS solution, wherein they can get rid of using hard-coded secrets in applications hosted in AWS Cloud. What will be your recommendation?

AWS Secrets Manager

What's the AWS service that can be used to store credentials and keys for different AWS resources?

AWS Secrets Manager

While selecting an AWS region to deploy your infrastructure, what are the factors to be considered before making the right decision? All of these answers Compliance rules Latency Issues Pricing realities Services offered

All of these answers: (Compliance rules Latency Issues Pricing realities Services offered)

You are tasked to recommend an AWS solution to perform security checks and assessments on applications hosted in Windows or Linux EC2 instances, what will be the best AWS service for this requirement?

Amazon Inspector

You are tasked to recommend a database suitable where high performance is required. Which database would you recommend? MySQL PostgreSQL Aurora All of these databases would work well

Aurora

You have an on-premise application planned to be migrated to AWS, but you don't want to change the public IP address for your application. What IP address option will you go with?

BYOIP

Which of the following is a valid statement in regards to EBS volume's encryption?

Both EBS data and boot volume can be encrypted

Which of the following is true regarding the AWS ElastiCache service?

Both of these are true: a. ElastiCache Redis provides persistent storages b. ElastiCache Memcached doesn't support persistent storage

The S3 security policy that can be applied directly to the S3 bucket is called ________.

Bucket Policy

When migrating to the AWS cloud, it is recommended to consider the below approaches. Choose 2 answers.

Build a brand new application Start with low value/low-risk application

Choose the AWS CDN service:

CloudFront

AWS _____________ can be used to track API calls and authentication requests against an AWS account.

CloudTrail

What is the monitoring service provided by AWS and included in each service?

CloudWatch

Your organization has many teams using AWS resources for different projects. You want to have a closer view of AWS costs spend by different teams. What can you use to track resources and cost segregation for multiple teams?

Cost allocation tags

Which of the following is true regarding S3 glacier storage at rest?

Data at rest stored in S3 Glacier is automatically encrypted using SSE and AES-256 encryption. AWS maintains the encryption keys

What are the two biggest challenges when we host any application in the cloud?

High availability and resiliency

Which of the following statement are true regarding AWS CloudTrail?

Default CloudTrail stores events for 90 days The custom trail can be configured, and data can be stored indefinitely in S3

Which domain makes up the highest percentage of the exam?

Design Resilient Architectures

AWS Solution Architect Associate exam is broken into 4 x domains. What are the valid domains from the below list? Choose all that applies.

Design Resilient-Architectures

You are working on a solution to connect AWS infrastructure with the on-premise data center. What service can you use to achieve the goal?

DirectConnect

Choose the NoSQL Database service offered by AWS. Aurora RDS DynamoDB None of these answers

DynamoDB

You are working on an application design that will use an Application Load Balancer, and there will be a large number of concurrent users. What options will help to manage the large concurrent user sessions?

DynamoDB ElastiCache Nodes

What's the storage file system provided by AWS? EFS ElastiCache S3 Elastic Block Storage

EFS

Which AWS service can be used by developers to deploy the application quickly on the required runtime environment, and if needed, changes can be done in no time?

Elastic Beanstalk

What is the consistency level provided by S3 if an object is deleted or an existing object is updated?

Eventual consistency

What is the consistency level provided by S3 if an object is deleted or an existing object is updated? read-after-write consistency write-after-read consistency read-after-delete consistency Eventual consistency

Eventual consistency

Which AWS resource provides free digital training?

Exam Readiness

AWS Lambda function runs on EC2 instances in a specialized lightweight virtual machine format called ______.

Firecracker

There are several operational benefits of AWS; please choose all that apply. Flexible and optimized use of servers and storage Managed Services Unmanaged Services All of these answers

Flexible and optimized use of servers and storage Managed Services

There are several operational benefits of AWS; please choose that applies:

Flexible and optimized use of servers and storage Managed Services

Which of the following are correct statements about Horizontal and Vertical scaling? Horizontal scaling is also called "scaling out," and Vertical scaling is known as "scaling up." Horizontal scaling refers to adding more nodes and machines, whereas Vertical scaling is about adding more resources to an existing server. Horizontal scaling refers to adding more resources to an existing server, whereas Vertical scaling is about adding more nodes and machines. Horizontal and Vertical scaling both are the same terms.

Horizontal scaling is also called "scaling out," and Vertical scaling is known as "scaling up." Horizontal scaling refers to adding more nodes and machines, whereas Vertical scaling is about adding more resources to an existing server.

IaaS is _____ Internet as a Service Infrastructure as a Service Intranet as a Service Internet as a Solution

Infrastructure as a Service

AWS provides different connectivity options to connect AWS-hosted resources to the outer world. Please choose valid connectivity options from the below list:

Internet connectivity Direct Connect to securely connect your Datacenter to AWS cloud Private backbone network connection All of these answers

You are asked to provide a storage solution for static content storage wherein it will be required to be accessed once in 40-45 days. Whatever storage option is selected should be reliable as it will be difficult to recreate the data. What will be the best cost-effective storage option for this requirement?

S3 Standard-IA

You are asked to provide a storage solution for static content storage wherein it will be required to be accessed once in 40-45 days. Whatever storage option is selected should be reliable as it will be difficult to recreate the data. What will be the best cost-effective storage option for this requirement? S3 Standard-IA S3 One Zone-IA S3 Glacier S3 Standard

S3 Standard-IA

Select the S3 feature that prevents the accidental deletion of S3 objects

S3 Versioning

Choose the correct statement about SQS and SNS.

SNS is push-based, and SQS is a pull-based

You are tasked to provide recommendations on how S3 encryption shall be performed by using the customer's own generated keys. Which will be recommended option to achieve this?

SSE-C

Which of the following is not a key characteristic defined by NIST in the public cloud context? Self-programmable On-Demand Self Service Broad Network Access Resource Pooling Rapid Elasticity

Self-programmable

Choose the valid deployment options available for Aurora: Parallel Provisioned Customer managed Aurora Serverless Aurora Provisioned

Serverless Aurora Provisioned

AWS _________ is used to control and govern the resources that can be created and deployed by using defined portfolios using different AWS automation tools.

Service Catalogue

The team has reached out to you with the requirement to have several EC2 instances up for a short duration for some testing, and there is no business impact if instances are stopped sporadically any time of the day. What type of instances are best suited for this requirement?

Spot instances

AWS load balancers provide the feature of sticky sessions, which ensures _____.

The user is communicating with the same server during the whole session time

Your organization is paying a good amount for having database snapshots. What can you do the minimize the snapshots storage cost?

Use Amazon Data Lifecycle

While using the multiple load balancers for high availability, what's the best practice to ensure quick failover if one load balancer fails.

Use Elastic IP address to attach with multiple load balancers

What AWS service can you use to capture the network traffic for analysis and troubleshooting?

VPC Flow Logs

What tool can you use to information about IP traffic within your VPC?

VPC Flow Logs

What are the valid Storage Gateway configuration options?

Volume Gateway File Gateway Tape Gateway