AWS Certified Solutions Architect Associate Practice 1 Author: CloudVikas Published Date: 22 February 2020 1 Comment on AWS Certified Solutions Architect Associate Practice 1 Welcome to AWS Certified Solutions Architect Associate Practice 1. Please enter your email details to get QUIZ Details on your email id. Click on Next Button to proceed. 1. ######QUESTION#########Which of the following option is incorrect about DynamoDB?DynamoDB supports key-value and document data structures.DynamoDB Auto Scaling is a fully managed feature that automatically scales up or down provisioned read and write capacity of a DynamoDB table or a global secondary index, as application requests increase or decrease.DynamoDB is not managed NoSQL solution2. ######QUESTION#########John is working in a project for an advertising client, as per a new requirement the application must ingest and aggregate advertising data in near real time. Thousands of records arrive each second. What service can meet this requirement?AWS Data PipelineAmazon Kinesis Data Streams3. ######QUESTION#########You are AWS Solution Architect in your project. As part of Data Analytics team you have to work with S3 services.You would like to share some documents with public users accessing an S3 bucket over the Internet. What are two valid methods of granting public read permissions so you can share the documents? (choose 2) Share the documents using CloudFront and a static website Share the documents using a bastion host in a public subnet Grant public read on all objects using the S3 bucket ACL Use the AWS Policy Generator to create a bucket policy for your Amazon S3 bucket granting read access to public anonymous users Grant public read access to the objects when uploading4. ######QUESTION#########Jason has opened a new company and you are appointed as a solution architect , Jason wants to use Redshift cluster for petabyte-scale data warehousing. Data for processing would be stored on Amazon S3. As a security requirement, the company wants the data to be encrypted at rest. As a solution architect how would you implement the solution?Store the data in S3. Launch an encrypted Redshift cluster, copy the data to the Redshift cluster and store back in S3 in encrypted formatStore the data in S3 with Server Side Encryption. Launch an encrypted Redshift cluster and copy the data to the cluster.5. ######QUESTION#########As Solution Architect you got requirement to manage users.Your company would like to restrict the ability of most users to change their own passwords whilst continuing to allow a select group of users within specific user groups.What is the best way to achieve this? (choose 2) Disable the ability for all users to change their own passwords using the AWS Security Token Service Create an IAM Role that grants users the ability to change their own password and attach it to the groups that contain the users Create an IAM Policy that grants users the ability to change their own password and attach it to the groups that contain the users Under the IAM Password Policy deselect the option to allow users to change their own passwords6. ######QUESTION#########John is working in mnc company and that company is generating large datasets with millions of rows that must be summarized by column. Existing business intelligence tools will be used to build daily reports. Which storage service meets the requirements?Amazon ElastiCacheAmazon RDSAmazon DynamoDBAmazon RedShift7. ######QUESTION#########Suppose you are AWS Architect and You are planning to deploy a number of EC2 instances in your VPC. The EC2 instances will be deployed across several subnets and multiple AZs. What AWS feature can act as an instance-level firewall to control traffic between your EC2 instances? Network ACLRoute tableAWS WAFSecurity Group8. ######QUESTION#########Jacob is a Solution Architect, working on a restaurant reservation application. The application needs the ability to maintain a waiting list. When a customer tries to reserve a table, and none are available, the customer must be put on the waiting list, and the application must notify the customer when a table becomes free. What service should Jacob recommend ensuring that the system respects the order in which the customer requests are put onto the waiting list?A standard queue in Amazon SQSA FIFO queue in Amazon SQS9. ######QUESTION#########Suppose you are working for cloudVikas as a developer and you are building a new application that stores data coming from more than 10,000 sensors. CloudVikas would like to query information coming from a particular sensor for the past week very rapidly, after which the data is infrequently accessed for another week. The data then needs to be archived. Using Amazon DynamoDB for its scalability and rapidity, how do you implement this in the most cost-effective way?Create tables for each week. Move the data to S3 for archival and delete the old tablesCreate tables for each week with the current week configured for higher throughput. Move the data to Glacier for archival and delete the old tables10. ######QUESTION#########John is a freelancer Solution Architect , a media company asked him to design a highly available storage solution to serve as a centralized document store for their Amazon EC2 instances. The storage solution needs to be POSIX-compliant, scale dynamic and able to serve up to 100 concurrent EC2 instances. Which solution meets these requirements?Create an Amazon EBS volume and allow multiple users to mount that volume to their EC2 instance(s).Create an Amazon Elastic File System (Amazon EFS) to store and share the documents.11. ######QUESTION#########CloudVikas is a startup company running a legacy with a single-tier architecture on an Amazon EC2 instance. Disk I/0 is low with occasional small spikes during business hours. The company requires the instance to be stopped from 8 PM to 8 AM daily. Which storage options is MOST appropriate for this workload?Amazon EBS Provision IOPS SSD (io1) storageAmazon EBS General Purpose SSD (gp2) storage12. At AWS, AWS Team wants you to be successful. AWS Support plans are designed to give you the right mix of tools and access to expertise so that you can be successful with AWS while optimizing performance, managing risk, and keeping costs under control. Which of the following support plans features a < 4-hour response time in the event of an impaired production system?BasicDeveloperBusiness13. ######QUESTION#########In project, authentication is required for security. We have found one requirement as below:A Solutions Architect is designing an authentication solution using the AWS STS that will provide temporary, limited-privilege credentials for IAM users or for users that you authenticate (federated users). What supported sources are available to the Architect for users? (choose 2) EC2 instance OpenID Connect A local user on a user's PC Another AWS account14. ######QUESTION#########Suppose you are AWS Solution Architect and you got one client requirement. In which You are building an application that will collect information about user behavior. The application will rapidly ingest large amounts of dynamic data and requires very low latency. The database must be scalable without incurring downtime. Which database would you recommend for this scenario? DynamoDBRDS with Microsoft SQLRedShiftRDS with MySQLHint15. ###############################Alex has created an application to run his business. Which service would help to support his web application to offload serving static assets and store user uploaded images? Select the best response.Amazon EC2Amazon EBSAmazon S316. In Team A, Many developers are working on two-tier application development. While building that application they have used a MySQL database layer. Which of the following AWS database deployments would provide automated backups to the application?Amazon DocumentDBAmazon Aurora17. ######QUESTION#########CloudVikas is a startup company, building a new application to track the high scores for a popular video game. Jason, their Solution Architect is tasked to design a solution to allow real-time processing of scores from millions of players worldwide. Which AWS service should Jason use to provide reliable data ingestion from the video game into the datastore?AWS Data PipelineAmazon Kinesis Firehose18. ######QUESTION#########An EC2 instance in an Auto Scaling group that has been reported as unhealthy has been marked for replacement. What is the process Auto Scaling uses to replace the instance? (choose 2) If connection draining is enabled, Auto Scaling will wait for in-flight connections to complete or timeout Auto Scaling will terminate the existing instance before launching a replacement instance Auto Scaling will send a notification to the administrator Auto Scaling has to perform rebalancing first, and then terminate the instance19. ######QUESTION#########Consider the following situation:You are working on a News company client project, the client has produced a lot of videos. They want to design a storage solution in AWS. These videos are used for a day, after which they should be archived. If required, the videos can be request with advance notices and expected to be available within 4 hours. However, in case of any breaking news the videos need to be made available within minutes. As a solution architect how would you be designing the solution in a cost-effective manner?Use AWS Glacier with pay for Expedited retrievals as needed.Use AWS S3 Infrequent Access20. At AWS, AWS Team wants you to be successful. AWS Support plans are designed to give you the right mix of tools and access to expertise so that you can be successful with AWS while optimizing performance, managing risk, and keeping costs under control. Which of the following support plans features a Full set of checks for AWS Trusted Advisor Best Practice Checks? Business Developer Enterprise21. ######QUESTION#########For which of the following workloads should a Solutions Architect consider using Elastic Beanstalk? (choose 2) A data lake A web application using Amazon RDS A management task run occasionally A long running worker process22. ######QUESTION#########Suppose you are working in cloudVikas company and the security team in the company needs each Amazon ECS task to have an IAM policy that restricts the task’s privileges to only those required for its use of AWS services. How can you achieve this?. Use IAM roles for Amazon ECS tasks to associate a specific IAM role with each ECS task definitionUse IAM roles on the Amazon ECS container instances to associate IAM role with each ECS task on that instance23. ######QUESTION#########John is working on a database migration plan from an on-premise data center that includes a variety of databases that are being used for diverse purposes. He is trying to map each database to the correct service in AWS. Which of the below use cases are a good fit for DynamoDB (choose 2) Backup for on-premises Oracle DB Complex queries and joins Large amounts of dynamic data that require very low latency Rapid ingestion of clickstream data24. ######QUESTION#########Jason is working for a bank client, as per a new requirement for an application, he is writing new software that is heavily dependent upon database transactions for write consistency. The application will also occasionally generate reports on data in the database and will do joins across multiple tables. The database must automatically scale as the amount of data grows. Which AWS service should he use to run the database?Amazon RedshiftAmazon Aurora25. ############################### Consider you have created Amazon EC2 instance.To find out the private and public IP addresses for an Amazon EC2 instance,you retrieve the instance metadata. http://169.254.169.254/latest/meta-data/.Is it true or false?FalseTrue26. ######QUESTION#########Ben is working for a mnc. As a Solution Architect, he is tasked for building a Wordpress-based web application to be hosted on AWS using Amazon ECS. This application serves as a blog for an international internet security company. The application must be geographically redundant and scalable. It must separate the public Amazon EC2 web servers from the Private Amazon RDS database. It must be highly available and it must support dynamic port routing. Which combination of AWS services or capabilities will meet these requirements?AWS Auto Scaling with a Classic Load balancer. And AWS CloudTrailAmazon Route 53, Auto scaling with an Application Load balancer, and Amazon CloudFront27. ######QUESTION#########Jason is working on a AWS project which hosts a website on-premises. The website has a mix of static and dynamic content but users experience latency when loading static files. Which AWS service can help reduce latency?Amazon CloudFront with on-premises servers as the origin.Amazon EFS to store and serve static files.28. ######QUESTION#########You are a solution Architect working on a web application that stores all data in an Amazon RDS Aurora database instance. You want to provide access to the data for a detailed report for the Marketing Team, but is concerned that the additional load on the database will affect the performance of the web application. How can the report be created without affecting the performance of the application?Provision a new RDS instance as a secondary master.Create a read replica of the database29. ######QUESTION#########A Solutions Architect is building a complex application with several back-end APIs. With Amazon API Gateway what are features that assist with creating and managing APIs? (Choose 2) You can define the maintenance window or AWS will schedule a 30 minute window You can define plans that meter and restrict third-party developer access to APIs Flexible message delivery over multiple transport protocols You can operate multiple API versions and multiple stages for each version simultaneously30. At AWS, AWS Team wants you to be successful. AWS Support plans are designed to give you the right mix of tools and access to expertise so that you can be successful with AWS while optimizing performance, managing risk, and keeping costs under control. Which of the following support plans features 7 Core checks for AWS Trusted Advisor Best Practice Checks?BusinessEnterpriseDeveloper31. ######QUESTION#########An airline company stores customer data files and must frequently increase the size of its on-premises storage system to enable quick access and archiving. The company now wants to migrate to AWS and needs an AWS solution. How can this requirement be met at the lowest cost?Use Amazon EBS for archiving data and Amazon Glacier for regular storage.Use Amazon S3 for regular storage and Amazon Glacier for archiving data.32. ######QUESTION#########George a Solutions Architect working for a mnc is tasked to design a solution that can monitor disk space and swap utilization of all Amazon EC2 instances running Amazon Linux and Windows. Which solution meets this requirement?Detailed monitoring of Amazon EC2 instances.Custom Amazon CloudWatch metrics.33. At AWS, AWS Team wants you to be successful. AWS Support plans are designed to give you the right mix of tools and access to expertise so that you can be successful with AWS while optimizing performance, managing risk, and keeping costs under control. Which of the following support plans features AWS Support API in Programmatic Case Management event? Developer Enterprise Business Basic34. ######QUESTION#########John is a Solutions Architect in cloudVikas company. He is working with an infrastructure that consists of multiple Amazon EC2 application and web servers. He needs to be able to meet demand for an expected spike in traffic to the website. How can John ensure high availability and durability?Auto scaling and Elastic Load BalancingPlacement groups and Amazon CloudFront35. ######QUESTION#########Jason is working on a project that runs an online media site, hosted on-premises. An employee posted a product review that contained videos and pictures. The review went viral and the application needs to handle the resulting spikes in website traffic. What action would provide an immediate solution?Add server instances using Amazon EC2 and use Amazon Route 53 with a failover routing policyServe the images and videos via an Amazon CloudFront Distribution created using the news site as the origin36. ######QUESTION#########George is a Solutions Architect working for cloudVikas . The company has an application is running on an Amazon EC2 instance in a VPC that needs to access external third-party services. A client running in another VPC in the same region must be able to communicate with this application. Security policies require that this application should not be accessible from the internet. Which architectures will meet these requirements? (Select TWO) Configure AWS Direct Connect and private virtual interface between the application VPC and the client VPC Configure a VPC peering connection between the application VPC and the client VPC Configure a NAT gateway in the VPC in the application VPC37. ######QUESTION#########A Solution Architect is deploying a production portal application on AWS. The database tier has structured data. The organization requires a solution that is easily manageable and highly available. How can these requirements be met?Use Amazon RDS with a multiple Availability Zone option.Use Amazon DynamoDB38. Compute capacity is an important parameter in each cloud-based project. Amazon Elastic Compute Cloud (Amazon EC2) is a web service that provides secure, resizable compute capacity in the cloud. It is designed to make web-scale cloud computing easier for developers. Which AWS feature should the company use to ensure that their applications are automatically adding/removing compute capacity to closely match the required demand?AWS Auto ScalingAWS Budgets39. ######QUESTION#########Your team lead wants a highly available database. The database is a relational OLTP type of database and the customer does not want to manage the operating system the database runs on. Failover between AZs must be automatic.Which of the below options would you suggest to the lead?Install a relational database on EC2 instances in multiple AZs and create a clusterUse RDS in a Multi-AZ configurationUse DynamoDBUse RedShift in a Multi-AZ configuration40. ######QUESTION#########Consider you are working in a AWS project, your team has to redesign the application layer of their SaaS solution so that no matter the request volume required, at any given time the solution will scale automatically to support the exact needs of that application. You have decided to go serverless. Which of the following services would best fit these requirements?Amazon Cognito and Amazon DynamoDBAmazon API gateway and AWS Lambda.41. You work as an on-premises MySQL DBA. The work of database configuration, backups, patching, and DR can be time-consuming and repetitive. Your company has decided to migrate to the AWS Cloud. Which of the following can help save time on the regular database tasks so you can focus on giving users the fast performance and high availability that they need?Amazon RDSAmazon Redshift42. ######QUESTION#########One of your clients has requested that you design a solution for distributing load across a number of EC2 instances across multiple AZs within a region. Customers will connect to several different applications running on the client’s servers through their browser using multiple domain names and SSL certificates. The certificates are stored in AWS Certificate Manager (ACM).What is the optimal architecture to ensure high availability, cost effectiveness, and performance?Launch multiple ALBs and bind separate SSL certificates to each ELBLaunch a single ALB and bind multiple SSL certificates to the same secure listener. Clients will use the Server Name Indication (SNI) extensionLaunch a single ALB and bind multiple SSL certificates to multiple secure listenersLaunch a single ALB, configure host-based routing for the domain names and bind an SSL certificate to each routing rule43. ######QUESTION#########Ben is working as a Solution Architect, as per a new requirement in the project he has to select the storage type for a big data application that requires very high sequential I/0. The data must persist if the instance is stopped. Which of the following storage types will provide the best fit at the LOWEST cost for the application?An Amazon EC2 instance store local SSD volumeAn Amazon EBS Throughput Optimized HDD volume44. ######QUESTION#########You have setup one VPC for your project purpose. Now A Linux instance running in your VPC requires some configuration changes to be implemented locally and you need to run some commands. Which of the following can be used to securely connect to the instance?Key pairsEC2 passwordSSL/TLS certificatePublic key45. ######QUESTION#########Which of the following option is correct?Instead of creating and distributing your AWS credentials to the containers or using the EC2 instance’s role, you can associate an IAM role with an ECS task definition or RunTask API operation. The applications in the task’s containers can then use the AWS SDK or CLI to make API requests to authorized AWS services.all of them.With IAM roles for Amazon ECS tasks, you can specify an IAM role that can be used by the containers in a task. Applications must sign their AWS API requests with AWS credentials, and this feature provides a strategy for managing credentials for your applications to use, similar to the way that Amazon EC2 instance profiles provide credentials to EC2 instances.46. ######QUESTION#########Consider in your project ,client has requested a design for a highly-available, fault tolerant architecture for the web and app tiers of a three-tier application. The requirements are as follows:- Web instances will be in a public subnet and app instances will be in a private subnet- Connections to EC2 instances should be automatically distributed across AZs- A minimum of 12 web server EC2 instances must be running at all times- A minimum of 6 app server EC2 instances must be running at all times- The failure of a single availability zone (AZ) must not affect the availability of the application or result in a reduction of capacity beneath the stated requirementsWhich of the following design options would be the most suitable and cost-effective solution?One Auto Scaling Group using 3 AZs and a minimum of 18 EC2 instances behind an Internet facing ALB for the web layer. One Auto Scaling Group using 3 AZs and a minimum of 9 EC2 instances behind an internal-only ALB for the app layerOne Auto Scaling Group with a minimum of 12 EC2 instances for the web layer. One Auto Scaling Group using 3 AZs and a minimum of 6 EC2 instances for the app layer. A single Internet-facing ALB using 3 AZs and two target groups for the web and app layersOne Auto Scaling Group using 3 AZs and a minimum of 12 EC2 instances behind an Internet facing ALB for the web layer. One Auto Scaling Group using 3 AZs and a minimum of 6 EC2 instances behind an internal-only ALB for the app layerOne Auto Scaling Group with a minimum of 18 EC2 instances for the web layer. One Auto Scaling Group using 3 AZs and a minimum of 9 EC2 instances for the app layer. A single Internet-facing ALB using 3 AZs and two target groups for the web and app layers47. ######QUESTION#########Suppose John is working on a web application, the existing web application requires a persistent key-value store database that must service 50,000 reads/second. His company is expecting 10% growth in traffic and data volume month over month for the next several years. Which service meets these requirements?Amazon DynamoDBAmazon Redshift48. ######QUESTION#########In your project , you have multiple EC2 Instance.One of your EC2 instances runs an application process that saves user data to an attached EBS volume. The EBS volume was attached to the EC2 instance after it was launched and is unencrypted. You would like to encrypt the data that is stored on the volume as it is considered sensitive however you cannot shutdown the instance due to other application processes that are running.What is the best method of applying encryption to the sensitive data without any downtime?Leverage the AWS Encryption CLI to encrypt the data on the volumeCreate an encrypted snapshot of the current EBS volume. Restore the snapshot to the EBS volumeUnmount the volume and enable server-side encryption. Re-mount the EBS volumeCreate and mount a new encrypted EBS volume. Move the data to the new volume and then delete the old volume49. At AWS, AWS Team wants you to be successful. AWS Support plans are designed to give you the right mix of tools and access to expertise so that you can be successful with AWS while optimizing performance, managing risk, and keeping costs under control. Which of the following support plans features 1 hour response time in the event of the Production system down? Business Enterprise Basic Developer50. ######QUESTION#########cloudVikas is planing to migrate their 20TB video archive to AWS. These are the files that are rarely accessed but sometimes they would like to access them and a 3 to 5-hour retrieval time frame is acceptable. However, when there is a breakup the editors require access to archived footage within minutes. Which storage solution meets the needs of this organization while providing the lowest cost of storage?Store the archive in Amazon Glacier and pay the additional charge for expedited retrieval when needed.Store the archive in Amazon S3 with a lifecycle policy to move this to S3 infrequent access after 30 days.51 out of 50Please fill in the comment box below. Enter your email ID details to get QUIZ Result Author: CloudVikas