AWS Certified Solutions Architect – Associate Practice Questions Second Edition Part 3

AWS Security Token Service does not include which of the following features?

In AWS SNS, which of the following is not a message attribute item?

An Organization’s AWS Setup has an AWS S3 bucket that stores confidential documents that can only be downloaded by authorized and authenticated via the application created by the architect. The architect does not want to create IAM users for each of these users. As a best practice, he decided to generate AWS STS Federated User temporary credentials each time a download request is made and then use the credentials to generate a pre-signed URL and redirect the user for download. However, when the user is trying to access the presigned URL, they get Access Denied Error. What could be the reason?

Which of the following delivery protocols are acceptable for receiving AWS SNS notifications? (Choose three options)

Which of the following statements about AWS SQS is not correct?

Your company has an AWS setup and intends to use Amazon SQS to queue messages. Because of the design, two applications will receive and process the same message in the queue. The message should be erased after the applications have read it. However, the message is not returned when the 2nd application uses the ReceiveMessage API call. Which of the following could be the reasons? (Choose 2)

An organization has set up AWS and intends to implement Single Sign-On for users to authenticate with on-premise Microsoft Active Directory Federation Services (ADFS) and login to the AWS interface using AWS STS Enterprise Identity Federation. After they authenticate with their on-premise, which of the following services do they need to call from AWS STS?

Amazon SQS is being used as an enterprise message queuing platform by a company. Hundreds of apps read the queues every few seconds to process messages and discard them as soon as they are entered. The management is concerned about the pricing incurred due to the large number of requests issued to Amazon SQS APIs. How would the architect reduce pricing without compromising on time in this scenario? Please select two correct answers.

For auditing purposes, an organization has an AWS setup and requires the history of all API calls and responses provided by AWS SNS. Which of the logging techniques listed below should be configured?

Which method is correct for registering a target in the Elastic Load Balancer target group?

Which of the following are application load balancer monitoring features? Choose three correct options

Which of the following components helps a user set up AutoScaling for a web-based application on EC2 instances? Choose three correct options.

Which of the following metric types is not a default for the Auto Scaling Group policy?

Which statement is incorrect in an auto-scaling group setup with a default termination policy for scale?

A web-based application has a fleet of 10 EC2 instances under an AWS company setup. There are 7 EC2 instances in Availability Zone A, while there are 3 EC2 instances in Availability Zone B. The proportion (%) of requests received in Availability Zone B exceeds the percentage (%) of requests received in Availability Zone A. What can be done to balance the load between the two availability zones at the architectural level? Please choose three accurate answers.

When CPU utilization hits 85% in an organization, an application team configures an autoscaling group configuration (with a simple scaling policy) to launch a new instance. However, when an EC2 instance comes into in-service, it sometimes displays an Unhealthy status right away. The unhealthy instance must be manually deactivated because replacing the unhealthy instance with a new one (launched by the Autoscaling group) takes more than 15 minutes. What do you believe the explanation for this is?

An EC2 instance had been set up with Auto Scaling by a company. When the workload increases, they automatically run a new instance with the same configuration and shut it down when the workload returns to normal. However, they have applied operating system patches to the primary instance for security considerations and would like this to be reflected when the Auto Scaling group builds a new EC2 instance. What should be done in this situation?

An organization’s architect set up an internal HTTP(S) Elastic Load Balancer to route requests to two EC2 instances inside a private VPC. One of the targets EC2 instances, however, has an Unhealthy status. Which of the following is NOT a feasible reason for showing an unhealthy status?

You have set up an application load balancer with two Amazon EC2 instances as targets. When you try to request the load balancer from the internet, however, the requests fail. What could be the cause of this?

AWS Route 53 can monitor which of the following categories for health checks? Choose two of the right answers.

Which of the following AWS services cannot AWS Route 53 route traffic to?

An organization had set up an S3 bucket for hosting static websites. With the hostname http://example-bucket.com.s3-website-us-east-2.amazonaws.com, they had constructed and configured the necessary components for a static website, which was ready to use. However, they would like the website to be served through the already registered domain name www.example-bucket.com. What kind of recordset do they need to create?

Due to compliance requirements, a company intends to launch a web-based application on AWS in two separate US regions. In us-east-1, the company’s architect has put up two EC2 instances connected to an elastic load balancer. In us-west-1, he replicated the identical scenario. He now has two load balancers that must monitor internet traffic. He wants the requests from a domain name hosted on AWS Route 53 divided evenly between both load balancers. How should he configure Route 53 recordsets?

Which of the following are AWS Route 53’s primary functions? (Choose Three)

Which of the following is not a routing policy in the AWS Route 53 record set?

On AWS VPC, an organization set up a web application with four EC2 instances in a private subnet. They had set up an elastic load balancer to spread traffic among the four EC2 instances. They chose to send traffic from the internet to the elastic load balancer through a domain they had already created, ” www.example-web-application.com “. What kind of record set do they need to make?

Which of the following choices for logging and monitoring the AWS Route 53 service is correct? Choose three of the right answers.

In your VPC, you’ve started an RDS instance. Myexampledb.a1b2c3d4wxyz.us-west-2.rds.amazonaws.com is an example of a long, partially random alphanumeric string issued to your DB instance. Your company would like to use a name that is simpler to recall. So, you used the Route53 service to register a domain name. Which kind of recordset do you require?

An organization has a web application hosted on AWS VPC with a single EC2 instance with Auto Scaling. They also assigned an elastic IP address to the EC2 instance. When they access the elastic IP address, they can successfully connect to the web application. They decided to route requests to the application from a custom domain through Route 53. They have performed the setup on Route 53. However, when they access the custom domain name from the internet, they get a “Server Not Found” error. Which of the following could be a reason?

An enterprise intends to move its existing on-premise application to the AWS Cloud. The backend database is Microsoft SQL Server, and the application is currently written in.Net. They have some constraints because they do not have the developers to make the latest code improvements. They also don’t have an Infrastructure staff to manage the AWS infrastructure right now. For the optimal use of AWS, which of the following data services should the company choose?

A multinational bank uses a hybrid cloud architecture. A MySQL Server RDS instance serves as the database for the bank’s currency exchange website. A read replica of the production RDS instance must be kept in the bank’s on-premise data centre as part of the company’s business continuity plan. What is the most secure and effective strategy to accomplish this requirement in this scenario?

A cloud architect was employed by a large IT organization. The architect deployed the auto-scaled EC2 instances in various Availability Zones with an Application Load Balancer in front to provide high availability of both the web servers and the web application database. To the RDS instance, he added Multi-Availability Zone. In the last several hours, there has been an increase in incoming requests, and the primary database’s performance is beginning to suffer. What happens to the database if the primary database instance goes down?

A complex enterprise application is hosted on an M5—large on-demand EC2 instance with DynamoDB as its database. The architect created a table called “coursedetails”, which has a hash key of “course_id”. He can query the data based on the “course_id” hash key without any issues. According to the Supervisor, the web application should also be able to query the “coursedetails” table by “student name,” according to the Supervisor. What should the architect do to correctly configure DynamoDB to meet the aforementioned requirement? Course id (hash key), course name, and student name are the three columns in the table “coursedetails.”

An on-premises 15 TB MySQL database cluster is being moved to AWS by a company. The cluster’s replication lag must be less than 100 milliseconds, and its size is likely to double in the coming months. Which of the following would be the best data store to use with Amazon Web Services?

Using CloudFormation, a company created an online feedback application for the best image competition in AWS. The application accepts and stores high-quality images of each participant in S3. The information about the image and the participant’s profile is then stored in RDS. The CloudFormation stack is no longer in use after the competition and should be terminated to save cost. The manager told the team to back up the RDS database and S3 bucket so that the data could be used even if the CloudFormation template was removed. Which of the following options fulfills this requirement?

The records of an online eCommerce WordPress website are currently stored in an AWS Single MySQL RDS database. The database has major performance concerns after a few days. They attempted to scale up the DB instance. They are now using SQS to retrieve Queue queries. Which of the following may be added to the architecture to solve the performance problem while remaining cost-effective?

For a 3-tier application, your organization has a client whose data is stored in AWS. The relational database should be long-lasting and able to accommodate schema changes. There should be no downtime as a result of database changes. As a Cloud Architect for the company, which of the following would be the best data storage solution for the client?

You are a Cloud Engineer for a startup that is intending to build a web application with a ReactJS frontend and DynamoDB as the database, with provisioned throughput (1000 Writes/Sec). During peak hours, they anticipate a large volume of writes to the database (3000 Writes/Sec). To reduce the load on the DynamoDB database, how could you ensure the application’s scalability and cost-effectiveness? (Select three options)

A company’s cloud architect is investigating the impact on real-time transactions. He built up a multi-AZ RDS system with a primary and read-replica instance. What effect does the read-replica have on the primary instance’s transactions?

Your company intends to deploy a web-based application on Amazon Web Services (AWS). This would be a content-based system with users from all around the world attempting to access the content. You must ensure that users worldwide enjoy a consistent user experience when using the online application. Which of the AWS services listed below must be included in the architecture for this application?

For their application, your organization has built up EC2 Instances in a VPC. When it comes to traffic coming in, and out of the instance, the IT Security department has to know what security techniques are available to secure the instances. In the VPC, what are the two layers of security provided by AWS? Select Two answers.

Your organization intends to use AWS to host a web-based application. An AWS RDS instance will be used to link the application. If possible, ensure that the database layer’s performance is up to the mark to guarantee that recently queried results are supplied as quickly as possible. Which of the following features would be included in the design?

Your company wants to use Amazon Web Services to host its website with a unique domain name in the format www.example.com. It must be deployed rapidly and does not necessitate the use of server-side scripting. What is the best solution for you?

A company intends to deploy a web-based application on AWS. IT management has given specific instructions to ensure that the application follows a serverless architecture to save money on infrastructure. Which of the services listed below could be used in this situation? Choose three answers.

A corporation has employed you as an AWS Architect. The use of EC2 Instances to host an application is required. Infrastructure must be able to scale up and down in response to demand and be fault-tolerant. Which of the following would you incorporate into the design? Select two options from the list below.

For their application, your organization has built up EC2 Instances in a VPC. They’re now worried that not all of the EC2 instances are being used. Which of the following services can assist you in locating underused AWS resources? Choose two answers from below.

Because of the cost savings over hosting their servers, a firm began employing EBS-backed EC2 instances. The development servers are turned down during the weekend and restarted each week, according to their policy. The servers were brought back for the first time. They could not be accessed through SSH by any of the developers. What was it that the server most likely missed?

AWS DynamoDB is where your company’s data is now stored. The tables in this service are used in one of your primary revenue-generating apps. Your application is now growing to two more locations, and you want to make sure that the latency for data retrieval from the new regions is as low as possible. Which of the following can assist you in achieving this goal?

On the AWS Cloud, your organization has a set of 100 servers. They require the Logs from the Instances to be streamed for examination. This is being done to comply with security regulations. The data will then be analyzed by programs to look for any abnormal behavior. To stream the log data, which of the following would be used?

A company just decided to manage its APIs using the AWS API Gateway service. Other domains’ code must be able to access the APIs behind the API gateway service. Which of the API gateway’s security features can be utilized to ensure that API resources can receive requests from domains other than the API’s own?