Architecting On AWS Certification Flashcards
7 cards from real Architecting on AWS Certification practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Architecting On AWS Certification flashcards as text
A microservices application needs service-to-service authentication and encrypted traffic within a VPC. Which AWS service BEST addresses this?
Answer: AWS App Mesh with mutual TLS
AWS App Mesh provides a service mesh with mutual TLS for encrypted, authenticated east-west traffic between microservices.
Which S3 feature ensures that a specific version of an object cannot be deleted or overwritten for a defined retention period?
Answer: S3 Object Lock in Compliance mode
S3 Object Lock in Compliance mode prevents any user, including the root account, from deleting or overwriting objects during the retention period.
A company needs to run a stateful application on ECS. Which storage option persists data even if the container task is replaced?
Answer: Amazon EFS mounted to ECS tasks
Amazon EFS provides a shared, persistent file system that ECS tasks can mount, ensuring data survives task restarts or replacements.
What is the purpose of an AWS Service Control Policy (SCP) in AWS Organizations?
Answer: Set maximum permission boundaries for all accounts in an organizational unit
SCPs define the maximum available permissions for member accounts in an OU, acting as guardrails that IAM policies cannot exceed.
An architect must design an event-driven architecture where multiple downstream services react to the same S3 upload event. Which combination is BEST?
Answer: S3 → SNS topic → multiple SQS queues (fan-out pattern)
The SNS fan-out pattern publishes one event to an SNS topic, which delivers it to multiple SQS queues so each consumer processes independently.
Which AWS pricing model offers the GREATEST discount for a steady-state workload where the instance family may need to change over three years?
Answer: Compute Savings Plans (3-year)
Compute Savings Plans provide up to 66% savings and apply automatically to any EC2 instance family, size, or region, offering flexibility that Standard RIs lack.
A company needs to detect and remediate configuration drift on EC2 instances automatically. Which AWS service is MOST appropriate?
Answer: AWS Systems Manager State Manager
AWS Systems Manager State Manager automatically applies and re-applies desired configurations to EC2 instances on a defined schedule, correcting drift.