AWS Certified Solutions Architect Associate Practice 2 Author: CloudVikas Published Date: 22 February 2020 1 Comment on AWS Certified Solutions Architect Associate Practice 2 Welcome to your AWS Certified Solutions Architect Associate Practice 2 . This QUIZ set will improve your AWS Solution Architect Exam preparation. Best Of Luck. Click on Next button to proceed. 1. ######QUESTION#########Jacob a Solutions Architect working on a cloud based project, is designing a Lambda function that calls an API to list all running Amazon RDS instances. How should the request be authorized?Assign an IAM role to the Lambda function with permissions to list all Amazon RDS instances.Assign an IAM role to Amazon RDS with permissions to list all Amazon RDS instances.2. ######QUESTION#########Consider the below scenario and Choose the correct answer:A large pharmaceutical company has many different applications that are built in different programming languages. How can you deploy applications as quickly as possible?Develop each app in one Docker container and deploy using Elastic BeanstalkDevelop each app in a separate Docker container and deploy using Elastic Beanstalk3. ######QUESTION#########Jason is working as a Solution Architect in a new startup company. He is assigned a task to design media processing flows for them. The file system should have an ability to be mounted on various Linux EC2 Instances and manipulate large files with file locking capability. Which of the following would be an ideal storage service for this requirement?Amazon S3Amazon EFS4. ######QUESTION#########Jason is a Solution Architect working on an application in a cloud based company cloudVikas, the application server needs to be in a private subnet without access to the internet. The solution must retrieve and upload files to an Amazon S3 bucket. How should Jason design a solution to meet these requirements?Deploy a proxy serverUse Amazon S3 VPC endpoints5. ######QUESTION#########Charles is a AWS Architect working on a new project, he is developing a photo sharing mobile application. The application should store the photos in S3, while the photo metadata in the DynamoDB. Application maintains the user details and their friends relationship in DynamoDB. The project wants a feature to automatically sends notifications to the mobile devices of all friends in a group as soon as one friend uploads a new picture. How can the application be designed in a performant manner?Setup CloudWatch logs to monitor the DynamoDB table for changes. Then trigger AWS SQS to send the changes to the application.Use DynamoDB Streams to monitor the changes in the DynamoDB table.6. ######QUESTION#########Yoh have been hired for AWS Solution Architect and have given work on database migration plan.So you are working on a database migration plan from an on-premise data center that includes a variety of databases that are being used for diverse purposes. You are trying to map each database to the correct service in AWS. Which of the below use cases are a good fit for DynamoDB (choose 2) Large amounts of dynamic data that require very low latency Rapid ingestion of clickstream data Migration from a Microsoft SQL relational database Complex queries and joins7. ######QUESTION#########Jason is working on a new project , there is a requirement in the project to host a database on an EC2 Instance. The EBS Volume is required to support a high rate of IOPS since a large number of read and write requests are expected on the database. Which Amazon EBS volume type can meet the performance requirements of this database?EBS Provisioned IOPS SSDEBS General Purpose SSD8. ######QUESTION#########Tom has joined in mnc company where he has to work on designing web application.You are putting together a design for a three-tier web application. The application tier requires a minimum of 6 EC2 instances to be running at all times. You need to provide fault tolerance to ensure that the failure of a single Availability Zone (AZ) will not affect application performance.Which of the options below is the optimum solution to fulfil these requirements?Create an ASG with 18 instances spread across 3 AZs behind an ELBCreate an ASG with 6 instances spread across 3 AZs behind an ELBCreate an ASG with 9 instances spread across 3 AZs behind an ELB9. ######QUESTION#########Which of the following option is correct?Your load balancer acts as a single point of contact for all incoming web traffic to your Auto Scaling group. When an instance is added to your Auto Scaling group, it needs to register with the load balancer or no traffic is routed to it. When an instance is removed from your Auto Scaling group, it must deregister from the load balancer or traffic continues to be routed to it.The purpose of automatic scaling is to automatically increase the size of your Auto Scaling group when demand goes up and decrease it when demand goes down. As capacity is increased or decreased, the Amazon EC2 instances being added or removed must be registered or deregistered with a load balancer. This enables your application to automatically distribute incoming web traffic across such a dynamically changing number of instances.All of themWhen you launch a new EC2 instance, the EC2 service attempts to place the instance in such a way that all of your instances are spread out across underlying hardware to minimize correlated failures. You can use placement groups to influence the placement of a group of interdependent instances to meet the needs of your workload.Elastic Load Balancer with Auto Scaling helps provide high availability and durability to architecture as Auto Scaling helps scale EC2 instances as per the demand and ELB helps route traffic to the Auto Scaled instances.10. ######QUESTION#########You have gone for interview where you have been asked to describe the benefits of using AWS Lambda compared to EC2 instances. Which of the below statements are incorrect?With AWS lambda, the client is responsible for launching and administering the underlying AWS compute infrastructureAWS Lambda scales automaticallyWith AWS Lambda the customer does not have any responsibility for deploying and managing the compute infrastructure11. ######QUESTION#########George is working as a Solution Architect in cloudVikas. The company is using API Gateway and deployment stages to manage multiple release stages for each API, such as alpha, beta, and production. They want to specify a different AWS Lambda function name for each stage in your API. How should George design the API Gateway?Stage VariablesAPI Gateway variables12. ######QUESTION#########A website, with global users, runs on EC2 Instances behind an ELB Application Load Balancer. The instances run in an Auto Scaling Group across multiple Availability Zones and deliver several large files that are stored on a shared Amazon EFS file system. The company needs to avoid serving the files from website every time a user requests these digital assets. How can the company improve the user experience of the web site?Cache static content using CloudFront.Resize the files so that they are smaller.13. ######QUESTION#########Which of the following option is correct?All of themthe data in the cluster volume is represented as a single, logical volume to the primary instance and to Aurora Replicas in the DB cluster.Up to 15 Aurora Replicas can be distributed across the Availability Zones that a DB cluster spans within an AWS Region.Aurora Replicas are independent endpoints in an Aurora DB cluster, best used for scaling read operations and increasing availability.The DB cluster volume is made up of multiple copies of the data for the DB cluster.14. ######QUESTION#########Charles is working as a Solution Architect working on an application, he is using Amazon DynamoDB to stage its product catalog, which is 1 GB. Since a product entry, on average, consists of 100 KB of data, and the average traffic is about 250 requests per second, the database administrator has provisioned 3,000 RCUs of read capacity throughput. However, some products are very popular and users are experiencing delays or timeouts due to throttling. What improvement offers a long-term solution to this problem?Augment Amazon DynamoDB by storing only the key product attributes, with the details stored on Amazon S3.Change the partition key to consist of a hash of product key and product type, instead of just the product key.15. ######QUESTION######### The project team members who perform the same role are assigned to a Microsoft Active Directory group and you have been asked to use Identity Federation and RBAC. Which AWS services would you use to configure this access? (choose 2) AWS IAM Roles AWS IAM Groups AWS Directory Service AD Connector AWS Directory Service Simple AD16. ######QUESTION#########your manager has asked you to investigate an EC2 web server hosting videos that is constantly running at over 80% CPU utilization. Which of the approaches below would you recommend to fix the issue?Create an Elastic Load Balancer and register the EC2 instance to itCreate a CloudFront distribution and configure the Amazon EC2 instance as the originCreate an Auto Scaling group from the instance using the CreateAutoScalingGroup action17. ######QUESTION#########Consider the following situation:Your manager has assigned you a new task for architecting a workload that requires a highly available and scalable shared block file storage system that must be consumed by multiple Linux applications. Which service meets this requirement?Create an IAM access and secret key, and store it in the Lambda functionAssign an IAM role to the Lambda function with permissions to list all Amazon RDS instances.18. ######QUESTION#########Which of the following option is incorrect?Cognito and DynamoDB provides computing, but are rather authentication and storage services.API Gateway and AWS Lambda are both AWS managed services, which scale automatically without any need for provisioning compute resources.19. ######QUESTION#########CloudVikas a cloud company has a Redshift cluster, currently containing 60TB of data. As a part of compliance, there is a requirement that a recovery site be setup in a separate region in case of a disaster. Which of the following solutions would ensure this requirement is fulfilled?Create a CloudFormation template to restore the Cluster in another region.Enable Cross-Region snapshots for the Redshift Cluster.20. ######QUESTION#########John is working on an application for document sharing, it needs a storage layer. As a security measure, the storage should provide automatic support for versioning so that users can easily roll back to a previous version or recover a deleted document. Which AWS service will meet the above requirements for John?Amazon EFSAmazon S321. ######QUESTION#########Consider the following situation:Your manager has assigned you a job to design a disaster recovery model for all the resources in their AWS account. The key requirement while devising the solution is to ensure that the cost is at a minimum. Which of the following disaster recovery mechanisms would you employ in such a scenario?Multi-SiteBackup and Restore22. ######QUESTION#########For which of the following workloads should a Solutions Architect consider using Elastic Beanstalk?A management task run occasionallyA data lakeA web application using Amazon RDSA long running worker process23. ######QUESTION#########John is a Solution Architect working for a project in a mnc , he is building a mobile social media management solution and using S3 as their data store. As per the requirement the application should allow newly registered users to upload their profile picture within a week after registration is completed. How can John handle the uploads in a simplest way?Control it through the S3 bucket policyUse Pre-Signed URLs instead to upload the pictures.24. ######QUESTION#########Which of the following option is correct?With IAM roles for Amazon ECS tasks, you can specify an IAM role that can be used by the containers in a task.all of themInstead of creating and distributing your AWS credentials to the containers or using the EC2 instance’s role, you can associate an IAM role with an ECS task definition or RunTask API operation. The applications in the task’s containers can then use the AWS SDK or CLI to make API requests to authorized AWS services.Applications must sign their AWS API requests with AWS credentials, and this feature provides a strategy for managing credentials for your applications to use, similar to the way that Amazon EC2 instance profiles provide credentials to EC2 instances.25. ######QUESTION#########In Cloud project, John is working on EC2 instance creation and he used to provide EC2 instance details to his team members for project purpose.Consider he is deploying an application on Amazon EC2 that must call AWS APIs. Which method of securely passing credentials to the application should he use?Store API credentials as an object in Amazon S3Store the API credentials on the instance using instance metadataAssign IAM roles to the EC2 instances26. ######QUESTION#########Which of the following option is incorrect?Kinesis Firehose can help in the reliable data ingestion with least management.Amazon Kinesis Data Firehose is a fully managed service for delivering real-time streaming data to destinations such as Amazon Simple Storage Service (Amazon S3), Amazon Redshift, Amazon Elasticsearch Service (Amazon ES), and Splunk.You configure your data producers to send data to Kinesis Data Firehose, and it automatically delivers the data to the destination that you specified.Amazon Kinesis used for data storage27. ######QUESTION#########Database plays an important role and your organization is considering using DynamoDB for a new application that requires elasticity and high-availability. Which of the statements below is true about DynamoDB? Supports cross-region replication which allows you to replicate across regions Data is synchronously replicated across 3 regions When reading data from Amazon DynamoDB, users can specify whether they want the read to be eventually consistent or strongly consistent There is no default limit of the throughput you can provision28. ######QUESTION#########Database selection is very important for each cloud based project.Alex has joined one team where his team manager has requested some assistance with selecting a new database. The database must provide high performance and scalability. The data will be structured and persistent and the DB must support complex queries using SQL and BI tools.Which AWS service will you recommend for Alex to select?DynamoDBRedShiftRDS29. ######QUESTION#########A cloud based company cloudvikas.com is generating large datasets with millions of rows that must be summarized by column. Each company is using some storage service.Here,Which storage service meets the requirements?Amazon ElastiCacheAmazon RedShiftAmazon DynamoDB30. ######QUESTION#########John has started a new company, it has enabled CloudTrail logs for its AWS account for audits. In addition, the IT Security department has mentioned that the logs has to be encrypted and measures be taken to check if the logs are not being modified. How can this be achieved? Choose 2 answers CloudTrail, by default, encrypts the logs in S3 Enable CloudTrail Log File Integrity Validation. Enable SSL certificates for the CloudTrail logs.31 out of 30 Author: CloudVikas