AWS Certified Solutions Architect – Associate Practice Questions Second Edition Part 2

You have a set of web servers in public subnets as part of your architecture. Database servers, as well as a NAT instance, are in the private subnet. You want to replace the NAT instance with a NAT gateway since it has become a bottleneck. Which of the following would assure the NAT device’s high availability?

A company is intending to create a Docker-based container-based application. Elastic Container Service will be used to set up the containers. Load balancing for the underlying services based on dynamic port values must also be set up. For this purpose, which of the following would be the best completely managed service to use?

You have enlisted the help of an AWS partner to conduct an audit on your AWS account. You must confirm that the partner is capable of conducting an audit on your assets. Which of the following steps would you take?

Your organization currently has a public subnet with web servers and a private subnet with database servers. You must verify administrators can access that database servers from your on-premises infrastructure. Which of the following methods is the most secure for accessing database servers?

For all project-related tasks, a multinational software firm uses Amazon EC2 Reserved and On-Demand Instance. They have separate accounts for each vertical, such as finance, project management, and human resources, which are maintained separately by account owners in each vertical. Management is searching for ways to cut down on these reoccurring fees. How could management save money on monthly subscription rates while maintaining the same level of performance? [Select TWO]

Your organization must create an application that includes a login module. Their main requirement is that users log into the app using their existing IDs from other suppliers, such as Facebook. Which of the following can assist you in achieving this goal?

Your team intends to build and deploy an application on AWS using the architecture shown below.

• The web tier is hosted by a series of EC2 Instances in a VPC.
• A database that is hosted on an AWS RDS MySQL instance.
Only HTTPS users should be able to access the web application, and only the web application should access the database. (Select 2)

Your company’s e-commerce application currently has the following architecture:

• EC2 Instances hosting the application
• Autoscaling group for the EC2 Instances
Users of the app frequently claim that the app is slow in the mornings between 9:00 and 9:30 a.m., after which there are no issues. Which of the following can be done to ensure that the problem does not arise in the morning?

Your organization uses AWS to host many applications. The IT Admin is currently manually examining the database storage to determine whether it is approaching capacity. Which of the following methods can be used to automate these procedures? (Choose 2)

A major IT firm is working on a project for a scientific organization to process genomic data. Researchers are looking for a way to quickly analyze massive amounts of data that they can access from anywhere in the world. From the on-premise datacenter to the AWS VPC, the IT firm has an AWS Direct Connect link. They’re asking for your help as an AWS expert to build a long-term, cost-effective solution that can reliably handle any quantity of data.

There are many applications deployed across AWS regions, and a company has branches all over the world. According to organization compliance standards, data in an S3 bucket must be replicated to another S3 bucket in a different region within 24 hours. What is the most cost-effective way to accomplish this?

Your company’s On-premise system is currently hosting a long-running heavy-load application. This application was created in-house by the company. Consulting firms then use this service through API calls, which can take up to half an hour to complete. You should now think about transferring this application to AWS. Which of the following services would be best suitable for architecture design while also assisting in delivering a cost-effective solution? Choose two answers from the options below.

A VPC hosts a set of EC2 Instances for a firm. The IT Security department has requested a list of IP addresses from all sources requesting EC2 Instances. Which of the following would be the most beneficial in fulfilling this requirement?

For their application, your organization intends to use the following architecture.

• The web element of the programme is hosted on a collection of EC2 Instances.
• For the backend, you’ll need a relational database.
• A load balancer that distributes traffic.
• A network address translation (NAT) gateway that routes traffic from the database server to the Internet.
Which of the following architectures assures that all components are available at all times?

Which of the following services does not invoke the AWS Lambda function asynchronously? (Select two options)

In relation to the AWS Lambda service, which of the following is the customer’s responsibility? (Select two options)

Which of the following is NOT a possible use case for AWS Lambda?

What is the maximum batch size permitted by AWS SQS for ReceiveMessage calls when using AWS SQS as an event source for an AWS Lambda function?

Which of the following AWS CloudFront events can cause an AWS Lambda@Edge function to be triggered? (Select three options)

Which of the following AWS Lambda configurations is correct?

To write the logs into AWS CloudWatch, which of the following actions is required by the Lambda execution role? (Select three options)

Which option is not an AWS CloudWatch metric for an AWS Lambda function?

For an AWS Lambda function, which of the following are poll-based event sources? (Select three options)

Which of the following ARNs for a Lambda function is correct? (Select three options)

On error, which of the following services does the DLQ configured under lambda populate? (Select two options)

A company’s architect is uploading large files to the AWS S3 bucket, ranging from 1GB – 3GB. The company requires that the hash checksum of a file be calculated by reading the full file so that consumers can verify the checksum and identify any potential corruptions during downloads. For this, the architect created a Lambda function and got it triggered through S3 notifications. However, the request is getting timed out. What could be the reason?

An organization must perform big data analysis to transform data and store the result in the AWS S3 bucket. Because of its zero-administrative upkeep and cost-effectiveness, they chose AWS Lambda to construct the solution. However, in a small number of situations, the execution is abruptly stopped after 15 minutes. In such situations, they would like to be notified. What should be done?

An organization uploads relatively large compressed files to an AWS S3 bucket, ranging in size from 100 MB to 200 MB. They want to determine the total number of objects in the compressed file and add the total count as metadata to the compressed file in AWS S3 once it’s been uploaded. They enlisted the help of their architect to find a cost-effective solution. To conduct this operation, he suggests using AWS Lambda using S3 event notifications. They were worried about failures because S3 event notification is an asynchronous one-time trigger, and lambda can fail due to operation timeouts, memory limits, and execution time limits, among other things. What is the suggested retry strategy?

The architect of a company must construct a REST API with AWS API Gateway, Lambda as the backend system, and Oracle RDS as the database. He generated API methods, Lambda function code and spun up Oracle RDS instance in a private VPC with no Internet Gateway. When he attempts to connect to the RDS instance from Lambda, the connection fails. What could be the cause of this? (Select two options)

An AWS architect created a Lambda function to read data from the Kinesis stream of transactions. He utilized a context logger in the code to log to CloudWatch, which he could then monitor later. Along with the Kinesis stream, the Lambda function began to run. However, he does not notice any log entries for the new Lambda function. What could be the cause of this?

An organization wants to set up a daily task with an AWS CloudWatch scheduled event and an AWS Lambda function that will execute a daily health check on their applications running on a fleet of EC2 instances. To do so, they must supply the name tags of the EC2 instances to identify the appropriate resources. In this scenario, what is the proper approach to pass the inputs?

An organization has an existing AWS setup with DirectConnect. They’ve moved some on-premise backend applications to AWS EC2 instances, where specific operations are conducted in response to triggers from other apps. The JAVA programming language is used to create these procedures. The organization wants to move these processes to Lambda to save money on EC2 instances. What should be done in this situation?

To process files uploaded to an AWS S3 bucket, an organization created an AWS Lambda function. The Lambda function began to receive requests and began to perform properly. They updated the code and uploaded it to the AWS Lambda function in a new version. What happens to requests that are sent immediately after the AWS lambda function is updated?

A company uses AWS EC2 instances to run tens of applications. A common backend processing job would be required for all of these applications. To ensure that any changes to the function by anyone will not affect the PROD execution code, the architect built an AWS Lambda function with the name “app-backend-job”. He published a PROD version with version “1.” He has shared the version qualified ARN to all applications, anticipating that requests will be sent to the correct version. He had to alter the Lambda function code many times due to frequent changes in requirements, and he had to maintain publishing versions. This requires a lot of work at the application level to update the Lambda function ARN each time he releases a new version. What is the best way to overcome this situation?

As an AWS architect, you work for a company. Your company has two accounts, one for DEV and the other for TEST. You want to use AWS Lambda on the DEV account to activate particular user applications running on the TEST account. What is the permission model that must be specified for this configuration to work?

You need to establish an AWS Lambda function within a private VPC that will communicate with an RDS instance within the same private VPC. For the Lambda function, you’ve set the memory to 1 GB. You anticipate 100 concurrent requests per second during peak hours, with an average Function execution time of 1 second. What minimum subnet range should you choose when creating a subnet to run the Lambda function effectively?

A company is developing a Lambda function in production mode. They stated that production-grade code must not be modified during execution unless the modification goes via a change process due to auditing compliance. They decided to establish an alias, publish a version for PROD, and use the alias ARN to invoke the Lambda function. However, according to your company, if the version is $LATEST, the code should not run. How can the organization accomplish this? (Select two options)

Which of the following statements about the AWS Lambda function’s default retry behavior is false?

A WS Lambda function is built up by an organization to receive messages from an SQS queue, process the message body, and put one record into a MySQL RDS instance. SQS event trigger has been set up as an AWS Lambda function. However, they will require MySQL details such as hostname, username, and password to connect to an RDS instance. Where would they configure them?

Which of the following is not included as a metric for EBS Volumes in AWS CloudWatch?

Which of the following actions cannot be performed on an EBS snapshot?

A developer uses an AWS EC2 Linux instance for log processing, which requires high throughput. He selected 500 GB of throughput optimized HDD storage. His application has been deployed to production mode and is performing as intended. After a month, the number of log files has increased, quickly nearing 500 GB and running out of capacity on the EBS volume. Which of the following options is the most effective way to mitigate the situation with the least configuration?

In an organization, an application is being deployed on an AWS EC2 instance, and database workloads require a local volume with low latency. They discovered that the Provisioned IOPS SSD volume type is the most appropriate. On the other hand, the application team discovered an option called “EBS-optimized” when launching an EC2 instance. They reached out to their AWS architect, asking the purpose of EBS optimized instances. Which of the following is the correct suggestion given by the architect?

An AWS architect is working in an organization’s Linux environment. An application team uses EBS volume for database workloads that require high throughput, low latency, and maximum I/O. For improved performance, they used Provisioned IOPS EBS volume. However, after completing the installation, they discover that the application’s performance is inadequate. Which performance tuning mechanisms should the architect suggest? Choose three correct options.

A data management company uses the AWS platform to manage the data for various customers. They’re running an AWS EBS-backed EC2 instance with the “Delete EBS volume on termination” enabled. Data streaming applications generate logs stored on EBS volumes and are executed on EC2 instances. For auditing purposes, the log files are essential. How would an architect safeguard data on EBS volumes from EC2 instances being terminated by mistake?

A company is using AWS to construct a BigData project. For large workloads to stream through with the improved performance, they require high data transfer rates. They are also looking for a low-cost option. In this circumstance, which EBS storage type should they choose?

Which of the following statements about encryption is correct?

Which of the following statements about the instance store and EBS volume is correct? Choose two correct answers.

Which of the following statements about EBS volume encryption is false?

An architect has set up an SNS topic to send emails to a group of users about CloudWatch resource utilization and outage alarms. Except for catastrophic system disruptions, the department head has requested that he be excluded from those alarms. How quickly can the architect accomplish this?