PRACTICE TEST 1: PRACTICE EXAM - AWS CERTIFIED

PDF Download

PRACTICE TEST 1: PRACTICE EXAM - AWS CERTIFIED

SOLUTIONS ARCHITECT ASSOCIATE

Actual Qs and Ans Expert-Verified Explanation

This Exam contains:

-Guarantee passing score -65 Questions and Answers -format set of multiple-choice -Expert-Verified Explanation Question 1: Your company is deploying a website running on Elastic Beanstalk. The website takes over 45 minutes for the installation and contains both static as well as dynamic files that must be generated during the installation process.As a Solutions Architect, you would like to bring the time to create a new instance in your Elastic Beanstalk deployment to be less than 2 minutes. Which of the following options should be combined to build a solution for this requirement? (Select two)

Answer:

• Create a Golden AMI with the static installation components already setup
• Use EC2 user data to customize the dynamic installation parts at boot time

Question 2: A startup's cloud infrastructure

consists of a few Amazon EC2 instances, Amazon RDS instances and Amazon S3 storage . A year into their business operations, the startup is incurring costs that seem too high for their business requirements.Which of the following options represents a valid cost-optimization solution ?

Answer:

Use AWS Cost Explorer Resource Optimization to get a report of EC2 instances that are either idle or

have low utilization and use AWS Compute Optimizer to look at instance type recommendations Question 3: A big data analytics company is using Kinesis Data Streams (KDS) to process IoT data from the field devices of an agricultural sciences company. Multiple consumer applications are using the incoming data streams and the engineers have noticed a performance lag for the data delivery speed between producers and consumers of the data streams .As a solutions architect, which of the following would you recommend for improving the performance for the given use-case?

Answer:

Use Enhanced Fanout feature of Kinesis Data Streams Question 4: Your company runs a website for evaluating coding skills. As a Solutions Architect, you've designed the architecture of the website to follow a serverless pattern on the AWS Cloud using API Gateway and AWS Lambda. The backend is using an RDS PostgreSQL database.Caching is implemented using a Redis ElastiCache cluster. You would like to increase the security of your authentication to Redis from the Lambda function, leveraging a username and password combination.As a solutions architect, which of the following options would you recommend?

Answer:

Use Redis Auth Question 5: For security purposes, a development team has decided to deploy the EC2 instances in a private subnet. The team plans to use VPC endpoints so that the instances can access some AWS services securely. The members of the team would like to know about the two AWS services that support Gateway Endpoints .As a solutions architect, which of the following services would you suggest for this requirement? (Select two)

Answer:

• Amazon S3
• DynamoDB

Question 6: company has grown from a small startup to an enterprise employing over 1000 people. As the team size has grown, the company has recently observed some strange behavior, with S3 buckets settings being changed regularly.How can you figure out what's happening without restricting the rights of the users?

Answer:

Use CloudTrail to analyze API calls Question 7: A development team has deployed a microservice to the ECS. The application layer is in a Docker container that provides both static and dynamic content through an Application Load Balancer. With increasing load, the ECS cluster is experiencing higher network usage. The development team has looked into the network usage and found that 90% of it is due to distributing static content of the application.As a Solutions Architect, what do you recommend to improve the application's network usage and decrease costs ?

Answer:

Distribute the static content through Amazon S3 Question 8: An IT company wants to review its security best-practices after an incident was reported where a new developer on the team was assigned full access to DynamoDB. The developer accidentally deleted a couple of tables from the production environment while building out a new feature.Which is the MOST effective way to address this issue so that such incidents do not recur?

Answer:

Use permissions boundary to control the maximum permissions employees can grant to the IAM principals Question 9: The infrastructure team at a company maintains 5 different VPCs (let's call these VPCs A, B, C, D,

• for resource isolation. Due to the changed organizational structure, the team wants to

interconnect all VPCs together. To facilitate this, the team has set up VPC peering connections between VPC A and all other VPCs in a hub and spoke model with VPC A at the center. However, the team has still failed to establish connectivity between all VPCs.As a solutions architect, which of the following would you recommend as the MOST resource-efficient and scalable solution ?

Answer:

Use a transit gateway to interconnect the VPCs

Question 10: A media company has created an AWS Direct Connect connection for

migrating its flagship application to the AWS Cloud . The on-premises application writes hundreds of video files into a mounted NFS file system daily. Post-migration, the company will host the application on an Amazon EC2 instance with a mounted EFS file system. Before the migration cutover, the company must build a process that will replicate the newly created on-premises video files to the EFS file system .Which of the following represents the MOST operationally efficient way to meet this requirement?

Answer:

Configure an AWS DataSync agent on the on-premises server that has access to the NFS file system.Transfer data over the Direct Connect connection to an AWS PrivateLink interface VPC endpoint for Amazon EFS by using a private VIF. Set up a DataSync scheduled task to send the video files to the EFS file system every 24 hours Question 11: An IT company has an Access Control Management (ACM) application that uses Amazon RDS for MySQL but is running into performance issues despite using Read Replicas. The company has hired you as a solutions architect to address these performance-related challenges without moving away from the underlying relational database schema. The company has branch offices across the world, and it needs the solution to work on a global scale .Which of the following will you recommend as the MOST cost-effective and high-performance solution ?

Answer:

Use Amazon Aurora Global Database to enable fast local reads with low latency in each region Question 12: A social photo-sharing web application is hosted on EC2 instances behind an Elastic Load Balancer. The app gives the users the ability to upload their photos and also shows a leaderboard on the homepage of the app. The uploaded photos are stored in S3 and the leaderboard data is maintained in DynamoDB. The EC2 instances need to access both S3 and DynamoDB for these features.As a solutions architect, which of the following solutions would you recommend as the MOST secure option?

Answer:

Attach the appropriate IAM role to the EC2 instance profile so that the instance can access S3 and