AWS Certified Solutions Architect Professional Practice Questions Part 4

A company has a mobile application which needs to communicate with AWS
resource S3. All users who use application need to store data in S3 then how they allow
each user to access S3?

A company has an ElastiCache Cluster and use Memcached engine for this use. From
the following option which is not a property of Memcached?

A company has an application on CloudFormation. The application takes images
and uploads it in S3 and the store its information into RDS. Now company CEO wants
to delete CloudFormation template but the images stored in S3 must remain in it, and
RDS information data also remain stored in it for future archival purpose. He also wants
that whenever they need that CloudFromation template to restore application, they can
do it. How you as solution architect provide a solution for this as you know that when
you delete CloudForamation template all resources that created by template also
deleted?

You have a Direct Connect connection in AWS, and this link is up, and routes are
also advertised from your end, but you are unable to connect to servers that are in Data
center from the EC2 instances in VPC. How as a solution architect you provide a
solution to this issue? (Choose any 2)

A company shifts its application form on-premises data center to AWS. To serve its
legacy application, they use ELB that use HTTP port 80 as health check ping port. When
you test IP address directly, it responds by returning website to port 80. However, the
instance is not registering as healthy even though the appropriate amount of time has
passed for the health check to register as healthy. How as a solution architect you
overcome this issue?

A company needs an application on AWS, but the database of application is MySQL
and must be on its on-premises data center rather than on AWS public cloud. How you
design this application?

An organization wants to set up VPN to connect to Amazon VPC environment from its
remote network by some requirement for the network like as per prediction it performs,
support BGP peering and routing policies and VPN connection use IPsec but not over
the internet. How you as solution architect setup the VPN?

A company has an application on-premises due to its dependency on non-x86
hardware and want to use AWS for data backup. Your backup application is only able
to write to POSIX-compatible block-based storage. You have 624TB of data and would
like to mount it as a single folder on your file server. Users must be able to access
portions of this data while the backups are taking place. What backup you as solution
architect choose?

A company has a manufacturing process that is rich in data and include complex
assessments to ensure that the custom electronics and materials used to assemble the
bike are to the highest standards. Assessments are a mixture of human and automated
assessments you need to add a new set of assessment to model the failure modes of the
custom electronics using GPUs across a cluster of servers with low latency networking.
What architecture you as solution architect use to automate the existing process using
a hybrid approach and ensure that the architecture can support the evolution of
processes over time?

You need read-only access to the history of AWS account activities of your
employee, with all actions taken on SDK and console and CLI or other AWS services.
How you get the access?

You need to monitor all the changes in AWS environment and all traffic to and from
the environment. How you do this? (Choose any 2)

A company needs to host their database server, and this server connects to the
internet in case of downloading database patches except that it will not connect to the
internet. How you as a solution architect provide a solution for this requirements?

You need to change the DHCP option set as we know there are many DHCP options
with VPC. Then how you do this?

A company has a transformation service system in which they need to store data
first in S3 which need to transform, and then it transformed by a group of EC2 instance.
They also need if their premium user wants to transformed data then their
transformation is at high priority. How you as solution architect deploy this system?

A company needs to configure NAT instance for fault tolerance scenario so if any
failure occurs their network does not go down. How they do this?

An organization needs to set up a central server in VPC. They also want that other
teams having their server in multiple VPC’s in the same region with unique CIDR block
for each connects to a central server which has nonconflicting CIDR block. How you as
a solution architect do this?

A company builds sensors to measure street noise and air quality in urban areas. The
company has been running a pilot deployment of around 100 sensors for 3 months. Each
sensor uploads 1KB of sensor data every minute to a backend hosted on AWS. During
the pilot, you measured a peak or 10 IOPS on the database, and you stored an average
of 3GB of sensor data per month in the database. The current deployment consists of a
load-balanced auto-scaled ingestion layer using EC2 instances and a PostgreSQL RDS
database with 500GB standard storage. Now they need deployment of at least 100K
sensors which is supported by the backend. You also need to store sensor data for at
least two years to be able to compare year over year improvements. How you as a
solution architect meet the following requirement?

You hired as a solution architect in a company to increase the size of existing VPC
with CIDR block 10.0.0.0/24 to host multiple resources in that. How you meet the
following requirements?

A company has some secret files on S3, and they need to share these file via
CloudFront rather than accessing directly then how you as solution architect
professional do this?

A company has an application on multiple platforms for AWS. The application is
running on EC2 instances and support accessing platforms like Windows and MACOS,
IOS and androids. Now how they separate sticky session and SSL certificates set up that
is needed for multiple platforms?

You need to use Origin protocol policy in CloudFront for communication with
origin. Now you need to choose which policy is used for communication via HTTP or
HTTPS.

A company wants to do monitoring of all EC2 instances which are in multiple
regions then how you as solution architect provide a solution?

An institution needs to shift EC2 instance from one region to other via use of same
PEM keys. How the solution architect do this?

Ahmed has an application whose front end is .NET and backend is DynamoDB. Now
he wants to make its application ready for the heavy load, then how he makes sure that
application scalability and cost-effectiveness is used to reduce the load on DynamoDB
database?

Ahmed has an application whose front end is .NET and backend is DynamoDB. Now
he wants to make its application ready for the heavy load, then how he makes sure that
application scalability and cost-effectiveness is used to reduce the load on DynamoDB
database?

An organization uploaded a large amount of aerial image data to S3. In the past, in
its on-premises environment, they used a dedicated group of servers to process this data
and used Rabbit MQ – An open source messaging system to get job information to the
servers. Once processed the data would go to the tape and be shipped offsite. Now they
need to put same architectural design but with leverage AWS archival storage and
messaging services to minimize cost. How as a solution architect you can meet the
requirements?

You need to deploy IDS/IPS for your deployed VPC. VPC has the capability to scale
thousands of instances running inside it. How you deploy this?

An organization has its website deployed via Elastic Beanstalk and in that they
enable log files rotation to S3. They need to check usage dashboard for which via EMR
they perform analyzing of logs that are on S3. Now they change infrastructure, and their
performance is improved. In changing they used CloudFront for dynamic content
delivery and their website as origin but when they see the dashboard, they observed
that traffic of website dropped by order of magnitude. How you as a solution architect
resolve this issue?

A company has multiple environments which they need to shift to AWS, and they
think to use separate accounts for each environment and for billing purpose link each
account to master payer account by using consolidated billing. For making things in
the budget, you need to make sure that master account has administrator right to stop,
run and delete resources from any of the accounts. How you as solution architect meet
the given demands?

An organization has a mobile application, and for that, they think to store user
preferences in AWS. So user experiences cross-device accessing of the application using
multiple devices. Each user preferences data is of 50KB in size and approx. 5 million
users use this application on a daily basis. Now as solution architect you need to provide
a solution for this storage in a cost-effective, securable and scalable way.

An institution has an on-premises application through which public can search their
catalog and retrieve single pages of their prospectus by using website written in java.
They also make jpeg format of their previous prospectus that has a size of 20TB and
used OCR to occupy commercial search products. Now they need to shift their archives
to AWS in cost effective way and also with availability and durability. How you as a
solution architect do this?

A company has an application that takes files for analyzing. When it performs analyzing
it writes some data to the output stream to a number of files. Now the amount of input
files is increasing per day, and it is fixed in a few hours of the day. Currently, the server
is on an EC2 instance with large EBS volumes that host input data and give result after
almost 20 hours per day for completion. How you as solution architect improve
availability and reduce elaboration time?

A company purchase 10 large RI’s and distribute them equally among two AZ’s and
use Route53to route its traffic to ELB. But when they see that their company grows and
they need some more capacity, so they purchase two c5.2xlage RI and register them
with ELB. Now they find that large instances are at 100% of capacity while c5.2xlarge
instances have the significant capacity that is not used then how you as solution
architect use EC2 instances most effectively?

You have run a batch analysis every hour on company’s main transactional DB
running on an RDS MySQL instance to populate their central Data Warehouse running
on Redshift. When execution is performed on the batch, the transactional applications
become slow. When the batch completes, they need to update the top management
dashboard with the new data. The dashboard is produced by another system running
on-premises that is currently started when a manually-sent email notifies that an
update is required. The on-premises system cannot be modified because is managed by
another team. How you as solution architect overcome this issue and make this process
automatic as much as possible?

You have a website for recording purpose and your client upload two million records
per month. The average size of each record is 200KB, and an access rate of this record
drops to negligible 6 months after uploading and client access this record 1 year after
uploading. At the beginning of the first three months of uploaded record there is a high
modification rate and then drops to zero after 6 months. Now you want to use
CloudFront for improving load times then how you do this?

A company has an application which the main purpose is to process a huge amount
of process logs generated by mobile apps and websites. There is a requirement for
analyzing the petabyte unstructured data by EMR and the output data stored in S3. In
application, they use c4.8xlarge instances whose CPU utilization is mostly idle in data
processing. How you as solution architect minimize the runtime of log processing in a
cost effective way?

An organization has its new IT structure in which they manage mobile sleep
tracking application. When activated at night, the mobile app is sending collected data
points of 1 KB every 5 minutes to your middleware. The middleware layer takes care of
authenticating the user and writing the data points into an Amazon DynamoDB table.
Every morning, you scan the table to extract and aggregate last night’s data on a peruser basis, and store the results in Amazon S3. Users are notified via Amazon SMS
mobile push notifications that new data is available, which is analyzed and visualized
by the mobile app. Currently, they have around 100k users. How you as solution
architect optimize the architecture of the middleware system to minimize the cost?
(choose any 2)

In the banking sector, they have a very large e-commerce site, and they need to
enhance the performance of its security structure. The application is on VPC with ELB’s
in front of its both web and app tier as this application is multi-tier application. For
dynamic data storing it uses a combination of RDS and DynamoDB and then archive
data to S3 nightly for further processing with EMR. Now they are worried because they
get some questionable log entries and flooding of superfluous requests to access the
resources and also suspect that some unauthorized entity is trying to access. How you
as solution architect professional provide a cost effective solution to remove this sort of
attack?

You have SaaS application of the third party that is hosted on other AWS accounts.
Now SaaS application wants access to issue API commands for the discovery of EC2
resources running on your account. You have your own security policies which need to
confirm some principal of less authority to any outside access. They also want that the
credentials that are used by SaaS vendor are not used by some other third party. How
you as a solution architect provide a solution for this?

A company deploys its two-tier web application on CloudFormation. Its application
tier needs to communicate with DynamoDB for data storage. How you as solution
architect professional define accessing of DynamoDB table to application instances in
Template without using API?

A company needs to shift its legacy application from its data center to Amazon VPC.
The application needs to access some resources that are on its on-premises services, but
there is no one who performs configuration, so application still works for a company,
or also they don’t have any documentation. How they run the application in VPC with
accessing internal resources without reconfigured? (Choose any 2)

An enterprise developing an SSL/TLS solution so via client certificate authentication
in web server, HTTP clients are authenticated. How you as solution architect
professional perform configuration of the web server? (Choose any 2)

You have a web application in VPC for which you architect IDS/IPS solution. How
you as solution architect implement IDS/IPS protection for incoming traffic from the
internet? (Choose any 2)

An organization has an application which allows the user to download files from
private S3 bucket via pre-signed URL with verification of the existence of a file in S3.
The application is running on the instance. How you as solution architect provide a
solution to access S3 bucket securely by the application via AWS Credentials?

You have a three-tier application which is running on VPC in AWS. In public web
tier, NAT instance is present. The application has enough capacity to handle the
expected workload of benefit enrolment. But after some days the web tier become
unresponsive and after finding out the reason by checking monitoring tools like
CloudWatch and other you found that a huge amount of incoming traffic is observed
from few specific IP on port 80 but these IP’s belongs to the country from where you
have no client for the application. Now web tier becomes overloaded and benefit
enrolment you are not even capable of doing SSH into them. How you defend from this
attack as solution architect?

As a solution architect professional how you transfer a massive amount of data
among organization on-premises and AWS. For this purpose, you need to design a
hybrid structure with high consistency and low latency traffic to AWS?

A company has its MySQL RDS instance in AWS, and they need read replica of this
running instance to on-premises location. How was that possible?

A company has a legacy application and wants to move this to AWS. How does a
legacy application start working in AWS as it has some dependencies on multicast?

You need to communicate an application on AWS with DynamoDB. The application
is hosted in EC2 instance. How you as a solution architect do this?

A company hired an auditor and wanted to give him access to view AWS services of
the company. How they give him access?