Architecting on AWS Certification AWS Certified Solutions Architect - Associate 5

Question 1

A company wants to run containers without managing the underlying EC2 instances. Which combination of services achieves this?

Accepted Answer

Amazon ECS with AWS Fargate

Answer

ECS with the Fargate launch type is a serverless compute engine that runs containers without provisioning or managing EC2 instances.

Question 2

An architect needs to give a third-party auditor read-only access to specific AWS resources without sharing long-term credentials. Which IAM feature should be used?

Accepted Answer

Create an IAM role with a trust policy for the auditor's account

Answer

An IAM role with a cross-account trust policy allows the auditor to assume the role using their own credentials, eliminating the need for long-term shared keys.

Question 3

Which AWS service provides DDoS protection automatically for all AWS customers at no additional cost?

Accepted Answer

AWS Shield Standard

Answer

AWS Shield Standard is automatically enabled for all AWS customers at no charge and protects against common Layer 3 and Layer 4 DDoS attacks.

Question 4

A Lambda function needs to access an RDS database in a private subnet. What configuration is required?

Accepted Answer

Deploy Lambda in the same VPC and private subnet with appropriate security groups

Answer

Configuring a Lambda function to run inside a VPC with access to the private subnet where RDS resides, and allowing the security group, enables private connectivity.

Question 5

An application must process streaming clickstream data in real time and store raw events for later batch analysis. Which combination of services is most appropriate?

Accepted Answer

Amazon Kinesis Data Streams + Amazon S3

Answer

Kinesis Data Streams ingests real-time streaming data at scale, and S3 provides cost-effective durable storage for raw events for batch analysis.

Architecting on AWS Certification Practice Test

Architecting on AWS Certification Practice Test

Architecting on AWS Certification AWS Certified Solutions Architect - Associate 5