Architecting on AWS Certification Joint Design & Preparation 4

Question 1

A joint design team must architect a real-time analytics pipeline ingesting 500,000 events per second. Which AWS service is designed for this ingestion scale?

Accepted Answer

Amazon Kinesis Data Streams

Answer

Kinesis Data Streams is designed for real-time, high-throughput data streaming and scales by adding shards to handle millions of records per second.

Question 2

During joint preparation, the team discovers that their on-premises Active Directory must authenticate users for AWS Management Console access. Which service enables this without syncing all credentials to AWS?

Accepted Answer

AWS IAM Identity Center with AD Connector as the identity source

Answer

IAM Identity Center with AD Connector federates authentication to on-premises AD so users log in with existing credentials without syncing passwords to AWS.

Question 3

A cross-team architecture review requires a cost-optimized compute strategy for a batch workload that runs 6 hours per night and can tolerate interruptions. Which EC2 purchasing option is most appropriate?

Accepted Answer

Spot Instances with checkpointing to S3

Answer

Spot Instances offer up to 90% savings, and checkpointing allows the batch job to resume from the last saved state if interrupted.

Question 4

During joint design, the team needs to expose a REST API that aggregates data from three backend Lambda functions. Which service orchestrates this with the least custom code?

Accepted Answer

API Gateway with separate integrations per route mapped to each Lambda

Answer

API Gateway natively routes each HTTP method/path to a different Lambda integration, handling request/response transformation without custom aggregation code.

Question 5

Two teams are jointly designing a multi-account AWS environment following AWS Organizations best practices. Which account structure isolates production workloads most effectively?

Accepted Answer

Separate AWS accounts for production, staging, and development within an AWS Organization

Answer

Separate accounts provide the strongest blast-radius isolation because IAM boundaries, service quotas, and billing are completely independent per account.

Architecting on AWS Certification Practice Test

Architecting on AWS Certification Practice Test

Architecting on AWS Certification Joint Design & Preparation 4