PDF Download
AWS SOLUTIONS ARCHITECT ASSOCIATE EXAM
QUESTIONS
Actual Qs and Ans Expert-Verified Explanation
This Exam contains:
-Guarantee passing score -33 Questions and Answers -format set of multiple-choice -Expert-Verified Explanation
Question 1: AWS Managed Microsoft AD
Answer:
An e-commerce company uses Microsoft Active Directory to provide users and groups with access to resources on the on-premises infrastructure. The company has extended its IT infrastructure to AWS in the form of a hybrid cloud. The engineering team at the company wants to run directory-aware workloads on AWS for a SQL Server-based application. The team also wants to configure a trust relationship to enable single sign-on (SSO) for its users to access resources in either domain.As a solutions architect, which of the following AWS services would you recommend for this use-case?Question 2: Use AWS CloudFormation StackSets to deploy the same template across AWS accounts and regions
Answer:
A multi-national company uses AWS Cloud to manage its IT infrastructure. The company has set up "AWS Organizations" to manage several departments running their AWS accounts. The departments operate from different countries and are spread across various AWS regions. The company wants to set up a consistent resource provisioning process across departments so that each resource follows pre-defined configurations such as using a specific type of EC2 instances, specific IAM roles for Lambda functions, etc.As a solutions architect, which of the following options would you recommend for this use-case?
Question 3: A recovered instance is identical to the original instance, including the instance ID, private IP addresses, Elastic IP addresses, and all instance metadata If your instance has a public IPv4 address, it retains the public IPv4 address after recovery
Answer:
The engineering team at a social media company wants to use Amazon CloudWatch alarms to automatically recover EC2 instances if they become impaired. The team has hired you as a solutions architect to provide subject matter expertise.As a solutions architect, which of the following statements would you identify as CORRECT regarding this automatic recovery process? (Select two)
Question 4: AWS Snowmobile
Answer:
A Hollywood production studio is looking at transferring their existing digital media assets of around 20PB to AWS Cloud in the shortest possible timeframe.Which of the following is an optimal solution for this requirement, given that the studio's data centers are located at a remote location?Question 5: Use AWS DataSync to migrate existing data to Amazon S3 and then use File Gateway to retain access to the migrated data for ongoing updates from the on-premises applications
Answer:
A leading media company wants to do an accelerated online migration of hundreds of terabytes of files from their on-premises data center to Amazon S3 and then establish a mechanism to access the migrated data for ongoing updates from the on-premises applications.As a solutions architect, which of the following would you select as the MOST performant solution for the given use-case?
Question 6: Create an alias record for covid19survey.com that routes traffic to
www.covid19survey.com
Answer:
A startup has created a new web application for users to complete a risk assessment survey for COVID-19 symptoms via a self-administered questionnaire. The startup has purchased the domain covid19survey.com using Route 53. The web development team would like to create a Route 53 record so that all traffic for covid19survey.com is routed to www.covid19survey.com.As a solutions architect, which of the following is the MOST cost-effective solution that you would recommend to the web development team?
Question 7: AWS Kinesis Data Streams
Answer:
A media company wants to use clickstream for data science tasks, develop algorithms, and create visualizations and dashboards to support the business stakeholders. Each of these groups work independently and would need real-time access to this clickstream data for their applications.Which of the following AWS services provides a highly available and fault-tolerant solution to capture the clickstream events from the source and then provide a simultaneous feed of the data stream to the downstream applications?
Question 8: Use EC2 dedicated hosts
Answer:
A financial services company is looking to move its on-premises IT infrastructure to AWS Cloud. The company has multiple long-term server bound licenses across the application stack and the CTO wants to continue to utilize those licenses while moving to AWS.As a solutions architect, which of the following would you recommend as the MOST cost-effective solution?
Question 9: Internet Gateway (I1)
Answer:
The DevOps team at an IT company has created a custom VPC (V1) and attached an Internet Gateway (I1) to the VPC. The team has also created a subnet (S1) in this custom VPC and added a route to this subnet's route table (R1) that directs internet-bound traffic to the Internet Gateway. Now the team launches an EC2 instance (E1) in the subnet S1 and assigns a public IPv4 address to this instance.Next the team also launches a NAT instance (N1) in the subnet S1.Under the given infrastructure setup, which of the following entities is doing the Network Address Translation for the EC2 instance E1?
Question 10: AWS Step Functions
Answer:
A big data consulting firm needs to set up a data lake on Amazon S3 for a retail client. The data lake is split in raw and refined zones. The source data arrives in the raw zone and is then processed via an AWS Glue based ETL job into the refined zone. The workflow also involves multiple lambda functions that perform data hygiene and data completeness checks in both the raw and refined zones. The firm is looking for an orchestration solution to manage this end to end workflow.As a solutions architect, which of the following AWS services involves the LEAST development effort for this use-case?
Question 11: This is a scale-up example of vertical scalability
Answer:
A DevOps engineer at an IT company just upgraded an EC2 instance type from t2.nano (0.5G of RAM,
- vCPU) to u-12tb1.metal (12.3 TB of RAM, 448 vCPUs). How would you categorize this upgrade?
Question 12: If a user or role has an IAM permission policy that grants access to an action that is either not allowed or explicitly denied by the applicable SCPs, the user or role can't perform that action SCPs affect all users and roles in attached accounts, including the root user SCPs do not affect service-linked role
Answer:
An AWS Organization is using Service Control Policies (SCP) for central control over the maximum available permissions for all accounts in their organization. This allows the organization to ensure that all accounts stay within the organization's access control guidelines.Which of the given scenarios are correct regarding the permissions described below? (Select three)
Question 13: Delete the existing standard queue and recreate it as a FIFO queue
Make sure that the name of the FIFO queue ends with the .fifo suffix Make sure that the throughput for the target FIFO queue does not exceed 3,000 messages per second
Answer:
A leading hotel reviews business uses Amazon Web Services to store and process images for their website. The team uses Amazon EC2 and Amazon SQS in an integrated workflow to generate the sizes they need for each photo. SQS communicates the photos that need to be processed and the status of the jobs. Because of changes in the business processes, the engineering team is now migrating from SQS Standard queues to FIFO queues with batching.As a solutions architect, which of the following steps would you add to the migration checklist for the engineering team? (Select three) Question 14: With cross-zone load balancing enabled, one instance in Availability Zone A receives 20% traffic and four instances in Availability Zone B receive 20% traffic each. With cross-zone load balancing disabled, one instance in Availability Zone A receives 50% traffic and four instances in Availability Zone B receive 12.5% traffic each
Answer:
An e-commerce company is using an Elastic Load Balancer for its fleet of EC2 instances spread across two Availability Zones, with one instance as a target in Availability Zone A and four instances as targets in Availability Zone
- The company is doing benchmarking for server performance when cross-zone load balancing is
enabled compared to the case when cross-zone load balancing is disabled.As a solutions architect, which of the following traffic distribution outcomes would you identify as correct?