AWS Certified Solutions Architect – Associate Practice Questions Second Edition Part 1

AWS requires the setup of an application. It is made up of various components. Every day, two primary components must run for three hours. The EC2 instances should always be available for the components to run during the three hours. The other components must be used for more than 6-8 hours every day. Even if the EC2 instances are terminated, the tasks of these components are less crucial and can be readily restored. Which of the following would you utilize to ensure that COSTS for the underlying EC2 Instances are kept to a minimum?

For its application servers, a global IT firm has implemented hybrid connectivity spanning on-premise Data Center and AWS Cloud infrastructure. Developers have created a new programme that will be used at both locations and is expected to have 4000 users worldwide. When users access new applications from on-premise servers or AWS Cloud, the Customer Security Team mandates that the same security controls be applied to them. A customer has previously set up an Active Directory on their premises, complete with all security requirements. Budget limits have been communicated to you by the IT Director, and no additional costs for a new solution should be incurred. Which of the following can be utilized to create new AD services?

You are an AWS architect for a worldwide financial firm that provides customers with real-time stock trading quotations. You’re utilizing Kinesis Data Streams to process stock market inputs from exchanges and provide consumers with a real-time dashboard. Many people use these dashboards during stock market hours, but only a few users access these dashboards aftermarket hours. Within Kinesis Data Streams, the management team is looking for the optimal amount of Kinesis Shards. Which of the following is an automatic way to accomplish this? (Select 2)

A media company saves all footage shared by reporters worldwide in an Amazon S3 bucket. When uploading these large-sized movies to Amazon S3 buckets in each location, the Operation Team has ordered all reporters to use only Multipart Uploads. The majority of reporters operate from remote locations and have difficulty submitting videos. The Finance Department is concerned about the high price of storing data in an Amazon S3 bucket and is seeking your advice. Following verification, you see a huge number of incomplete uploads in each region’s Amazon S3 buckets. Unfinished uploads can be deleted once a specific amount of time has passed. Which of the following actions will help you save money when you save video files to an Amazon S3 bucket?

Your organization intends to use the Simple Storage Service to store sensitive documents in a bucket. They must verify that all objects in the bucket are encrypted at rest. Which of the following can assist you in achieving this goal? Select two answers from the options below.

An application that connects to a MySQL AWS RDS Instance is currently hosted by a company. When there are 20 database lookups, the application runs smoothly. When the number of lookups increases, the application’s performance suffers. Which of the following should be included in the architecture to improve performance?

A business intends to store confidential documents in an Amazon S3 bucket. They want to make sure that documents are encrypted when they’re not in use. They want to ensure they have control over the encryption keys, but not the encryption/decryption process. Which of the following can be employed to accomplish this goal?

You are employed as an AWS Architect for a large corporation. Users save all project-related documents to Amazon S3 buckets and use a business programme like Office 365 for day-to-day tasks. For a certain number of hours each day, these applications must be accessible from any device.
They use AWS SSO to manage and control access to AWS resources centrally. Users are saying that they are being logged out of the console every hour and must re-login. You must guarantee that the User session is optimized based on the activity completion. Which of the following alternatives can be used to meet this requirement?

For their application, your organization intends to use the following architecture.

• The web part of the application is hosted on a collection of EC2 Instances.
• Using the AWS RDS MySQL service, create a relational database for the backend.
• A load balancer that distributes traffic.
It is necessary to ensure that all data stored in the database service is encrypted in transit. How can you meet this demand in the simplest way possible? (Choose 2)

The following architecture is used to define an application for a firm.
• Users can upload videos to a fleet of EC2 Instances.
• The video uploads are processed using a fleet of EC2 Instances.
Which of the following would aid in the creation of an architecture that is both functional and satisfying?

AWS has been used to set up a company’s application. It is made up of a web layer that is hosted on EC2 Instances. These instances communicate with a private subnet-based MongoDB database server. In the private subnet, the web tier also interacts with several service-based applications. The traffic from the instances in the private subnet to the Internet is routed through a NAT Instance. The IT Administrative team is now receiving CloudWatch alerts that the NAT Instance is above its Network Activity threshold value. Which of the following would you recommend to improve the architecture’s performance?

A business has a set of EC2 Instances that are used to run revenue-generating apps. Some of the information on the root EBS volumes must be kept. As a result, it must be ensured that the EBS volumes stay intact even when the instances are terminated. Which of the following must be completed for this criterion to be met?

You are an AWS consultant for a biotech firm specializing in human genomic data processing. To process a large volume of data, they use HDFS. They intend to transfer these systems to AWS EC2, where data will be computed using 50 EC2 C5 instances. This is a major project that will result in significant financial loss if it fails. The company seeks your advice on the best solution to avoid associated failures. In this circumstance, what methods can be employed to mitigate the impact of any hardware failure? (Choose two)

Your organization is intending to develop a web-based application. EC2 Instances will sit behind an Application Load Balancer in this web layer. The company wishes to secure the app from assaults at the application level. Which of the following can be employed to accomplish this goal?

Your organization currently uses an S3 bucket to store documents. They aim to save money by transferring the files to a low-cost storage unit after two months. Which of the following options can be utilized to automate this task?

A Redshift cluster is currently hosted by a firm. As part of the company’s disaster recovery plan, the data must be available in another Redshift cluster in another location. How would you go about accomplishing this?

The global sports news organization website is hosted on an Amazon EC2 instance with a single public IP address. It is front-ended via a TLS-enabled Application Load Balancer. They intend to establish a new website on the existing Amazon EC2 instance for an upcoming huge sports event. The corporation has acquired a distinct domain name for this new website and obtained a separate TLS certificate.
Which of the following recommendations will you make to this firm as an AWS expert to enable multiple certifications with current Public IP addresses in the most cost-effective way?

You work for a media company as an AWS Administrator. They are broadcasting live sports matches using AWS services in various areas. Daily, several EC2 On-Demand, Spot, and Reserved Instances are started based on user usage, resulting in astronomical monthly charges. Top management is looking for a customized analysis of these charges based on numerous parameters such as month-wise and instance-wise to understand better the costs incurred. On a chart display, they should be able to visualize the cost analysis. The accounts team is searching for a simpler way to examine these costs and query this report to meet this goal. Propose a cost-effective solution that requires the least amount of effort to implement.

A startup company is leveraging open-source container orchestration to build a microservices-based application. Other Public Cloud applications will be integrated with this one. To build up this container, the company cannot provide and manage back-end infrastructure. You’ve been tasked with providing container deployment advice. Which of the following do you think will suffice to achieve the requirement?

Your organization has built an application that needs to be hosted on an EC2 instance. The EC2 Instance is in a private subnet and requires access to AWS Kinesis streams without going through the Internet. How can you do this in the most effective way possible?

Radio devices have been implanted across the country by a telecom provider. They collect logs from these thousands of devices daily and analyze them to monitor problems and uptime patterns. They intend to use Amazon Redshift to perform log analysis. These logs do not require any additional processing. The organization is concerned about gathering and transmitting compressed data to Amazon Redshift and seeking a scalable solution that does not require ad-hoc management. Which of the services listed below can be used to fulfill this requirement?

You work as an architect for a company that plans to use AWS to host an application. They wish to load balance traffic based on the user’s preferred route. The application has two possible routes: /customer and /orders. Which of the following elements would you incorporate into the design?

In a custom VPC, you have a set of EC2 Instances. You’ve set up a web application and need to ensure that only HTTP and HTTPS traffic are let in. Which of the following options would you consider for this job?

An application needs to be hosted on an EC2 instance for a firm. From the application, the average throughput data per volume will be in the range of 400-500 MiB/s. To be cost-effective, which of the following should be utilized as the storage type for the underlying EC2 Instance?

A corporation intends to host an application using the architecture shown below.

• A lambda function for reading object metadata from an S3 bucket.
• The metadata is subsequently stored in DynamoDB and AWS RDS- MySQL by the Lambda function.
Which of the following requirements must be met for the architecture above to be highly available?

Your organization intends to build an application with the architecture shown below.

• A web application will be hosted on a group of EC2 Instances.
• An Elastic Load Balancer will be used to support the application.
• The Elastic Load Balancer will allow users to access the application via the internet.
• The programme will connect to a database server on the backend.
• There is also a NAT Gateway in place.
Which of the following is the best network architecture to ensure high availability and security?

For administering container-based applications, your organization intends to employ the Elastic Container service. With these programmes, they will process both critical and non-critical workloads. Which of the following is the most cost-effective setup?

Your team has created an application with web and database tiers hosted on distinct EC2 Instances. The underlying volume type for both EC2 Instances is General Purpose SSD. Recently, there have been performance concerns with the database EC2 Instance’s read and write operations. Which of the following options could be employed to solve the problem?

Your organization intends to use an S3 bucket to store critical documents. They want to keep the documents confidential and serve content to a limited number of users for a set period. Which of the following can assist you in achieving this goal?

A set of web servers has been spun up as part of an Autoscaling group in your present architecture. Following that, these web servers’ interface with a group of database servers. You must ensure that the security groups on the database servers are configured correctly to receive traffic from the web servers. Which of the following is the most effective method for achieving this?

An application that connects to a MySQL AWS RDS Instance is currently hosted by a company. There have been many performance difficulties in recent months. Following a thorough investigation, it was discovered that the problem is caused by the database being bombarded with the same queries. Which of the following should be included in the architecture to improve performance?

In your AWS account, you launched nine spot instances for a specific task. The spot price at the launch time was $0.06 per hour, and your bid price was $0.07 per hour. The spot price climbs to $0.08 per hour after 1.5 hours. How much did it cost you?

With the Multicontainer Docker platform, a startup business is creating a three-tier application. The Amazon RDS database instance must be linked with this application. AWS Elastic Beanstalk will be used to launch the application. As an AWS consultant for this organization, you will be responsible for designing the environment for blue/green deployment and decoupled architecture in the production environment. What method would you suggest for combining Amazon RDS with AWS Elastic Beanstalk?

Your team is working on Lambda functions. These functionalities would have to communicate with databases from various settings. Which of the following approaches is the best for ensuring that Lambda functions are created correctly to interface with databases in various environments?

Your application is made up of a collection of EC2 Instances created as part of an Auto scaling group. These Instances require access to S3 bucket objects. Which of the following is the best strategy for ensuring that this access is established?

A fleet of EC2 Instances makes up an application. These Instances are being deployed in the Oregon (us-west-2) region, divided into three availability zones. This application requires a total of 6 instances to be active at all times. As an architect, you must spread the instances to maintain the application’s capacity even if one of the availability zones fails.

Your organization has recently begun to use the AWS RDS service. On this service, they have an application that sends requests to a MySQL instance. You must guarantee that the backup activities on the database do not interfere with the database’s normal operation due to the unexpected rush of high requests. In this case, which of the following would be most useful?

On AWS, a Solutions Architect is tasked with designing an order processing e-commerce application that does not require synchronous transaction processing. Some order processing activities may take a long time and may necessitate the use of third-party software. What is the best way to achieve this?

In the Frankfurt region, your company has an AWS account and many resources defined. They wish to employ an API monitoring service to keep track of changes to their account’s resources. For this aim, which of the following should be used?

A company’s Amazon S3 buckets are spread across multiple AWS accounts. According to a new compliance and audit requirement, all S3 buckets server access logs should be gathered and organized under an Audit AWS account. What would you do if you were in charge of designing this solution?

For their application, your organization intends to use the following architecture.

• The web element of the programme is hosted on a collection of EC2 Instances.
• For the backend, a relational database
• A load balancer for traffic distribution
The data held on the underlying EBS volumes associated with the EC2 Instances are of essential importance. Your boss has asked you to follow the best backup procedures as a Solutions Architect to guarantee data is available in another area for disaster recovery. Which of the following do you think would satisfy this requirement?

A business has built up an Amazon Aurora cluster and needs to call a Lambda function. Which of the following must be present for this arrangement to function? Choose two answers from the options below.

Your team has an AWS-hosted application. Currently, our application interacts with a DynamoDB table with a Read capacity of 10. Based on recent CloudWatch alarms indicating that requests to the DynamoDB table were being throttled. Which of the following would assist ensure that the problem was handled immediately and that it would not recur in the future?

Your organization uses AWS to host an application. A web tier plus a database tier makes up this application. EC2 Instances are used to host the web tier. The database is hosted on AWS RDS, and the data is updated every few hours. The programme has recently experienced performance challenges as a result of the high amount of read requests. Which of the following can be used to assist in the resolution of the problem?

As demonstrated here, a three-tier web application runs on AWS VPC in two availability zones. The CIDR ranges for each subnet and the servers are listed below.

Only the Application Server tier should have access to the DB server, which runs MySQL on its default port. Access to the other tiers should be blocked.
Which inbound rule from the DB server’s Security Group should be linked to meet this requirement?

You must create a new subnet in your AWS VPC that will allow you to host a total of 20 EC2 instances. To achieve the same result, which IPv4 CIDR block would you use?

A mid-sized Fintech company is using AWS Organization to handle several AWS accounts generated for each department. Each account has purchased a Reserved Instance and uses a combination of On-Demand and Reserved Instance pools to execute web apps. For all accounts, a default IAM policy is set. Because of the high recurrent costs, Management has hired you as an AWS consultant to make cost-cutting proposals. Following your investigation, you recommended acquiring additional Reserved Instances rather than On-Demand EC2 instances. What justifications would you use to persuade management to accept your recommendations?

A corporation is planning an active-active site. One site will be hosted on AWS, while the other will be hosted in their own datacenter. They must make sure that traffic is spread evenly between the two sites. For this aim, which of the following routing policies would you use?

A consulting firm is required to deliver a service to a company. The consultancy company’s service and the major company’s application both exist in their VPCs. The VPCs are spread out across the country. What actions must be taken to establish connectivity between these VPCs so that data does not have to pass across the Internet? Select two options from the list below.

You work for a startup firm that develops mobile apps with Amazon DynamoDB. The majority of scenarios are successfully executed during POC for a new application utilizing AWS SDK, but Amazon DynamoDB returns the ThrottlingException error message in some circumstances. The Development Team requests your assistance in suggesting a solution to lessen the number of these errors.