Architecting on AWS Certification Architecting On AWS Certification 5

Question 1

A microservices application needs service-to-service authentication and encrypted traffic within a VPC. Which AWS service BEST addresses this?

Accepted Answer

AWS App Mesh with mutual TLS

Answer

AWS App Mesh provides a service mesh with mutual TLS for encrypted, authenticated east-west traffic between microservices.

Question 2

Which S3 feature ensures that a specific version of an object cannot be deleted or overwritten for a defined retention period?

Accepted Answer

S3 Object Lock in Compliance mode

Answer

S3 Object Lock in Compliance mode prevents any user, including the root account, from deleting or overwriting objects during the retention period.

Question 3

A company needs to run a stateful application on ECS. Which storage option persists data even if the container task is replaced?

Accepted Answer

Amazon EFS mounted to ECS tasks

Answer

Amazon EFS provides a shared, persistent file system that ECS tasks can mount, ensuring data survives task restarts or replacements.

Question 4

What is the purpose of an AWS Service Control Policy (SCP) in AWS Organizations?

Accepted Answer

Set maximum permission boundaries for all accounts in an organizational unit

Answer

SCPs define the maximum available permissions for member accounts in an OU, acting as guardrails that IAM policies cannot exceed.

Question 5

An architect must design an event-driven architecture where multiple downstream services react to the same S3 upload event. Which combination is BEST?

Accepted Answer

S3 → SNS topic → multiple SQS queues (fan-out pattern)

Answer

The SNS fan-out pattern publishes one event to an SNS topic, which delivers it to multiple SQS queues so each consumer processes independently.

Architecting on AWS Certification Practice Test

Architecting on AWS Certification Practice Test

Architecting on AWS Certification Architecting On AWS Certification 5