AWS Design Resilient Architectures 3

Question 1

A financial services company runs a critical order-processing application on EC2 instances behind an Application Load Balancer. During peak trading hours, the application experiences sudden traffic spikes that cause latency issues. The architecture must handle these spikes automatically while keeping costs low during off-peak hours. Which combination of services best addresses this requirement?

Accepted Answer

Auto Scaling group with target tracking scaling policy based on ALB RequestCountPerTarget, with a minimum of 2 instances across multiple AZs

Answer

Target tracking scaling based on ALB RequestCountPerTarget is the most precise signal for an order-processing application tied to an ALB — it scales instances in proportion to actual incoming requests. A minimum of 2 instances across multiple AZs ensures high availability and fault tolerance. This combination automatically adds capacity during spikes and reduces it during off-peak hours, optimizing cost. Simple CPU-based scaling (option D) reacts slower and Spot Instances risk interruption for critical workloads. A fixed fleet (option C) wastes money off-peak.

Question 2

A company stores customer data in an Amazon RDS MySQL Multi-AZ instance. Their RPO is 1 hour and RTO is 15 minutes. A database administrator discovers that automated backups are disabled and only manual snapshots taken weekly exist. Which action should be taken FIRST to meet the recovery objectives?

Accepted Answer

Enable automated backups with a retention period of at least 1 day and set the backup window to a low-traffic period

Answer

Enabling automated backups on RDS is the most direct fix. Automated backups enable point-in-time recovery (PITR), which allows restoration to any second within the retention period — directly satisfying the 1-hour RPO. Multi-AZ already handles the 15-minute RTO for AZ-level failures via automatic failover. Read replicas (option B) do not replace automated backups and don't enable PITR. Option D with daily manual snapshots still leaves up to a 24-hour data loss window, violating the 1-hour RPO. Aurora migration (option C) is not the first step when the immediate fix is simply enabling a native RDS feature.

Question 3

A global e-commerce platform serves customers across North America, Europe, and Asia. Static assets (images, CSS, JavaScript) account for 70% of page load time for users in Asia. The company wants to reduce latency for these users without changing the origin infrastructure hosted in us-east-1. What is the MOST effective solution?

Accepted Answer

Configure Amazon CloudFront with edge locations and set appropriate cache behaviors with long TTLs for static assets

Answer

CloudFront is a Content Delivery Network (CDN) that caches static assets at edge locations geographically close to end users, including those in Asia. By setting long TTLs for static assets (images, CSS, JS), content is served from nearby edge locations rather than traveling to us-east-1, dramatically reducing latency. S3 Transfer Acceleration (option C) speeds up uploads to S3, not downloads to users. Global Accelerator (option D) improves routing for dynamic/TCP traffic but does not cache content at the edge — it still must reach us-east-1 for every request. Deploying to ap-southeast-1 (option A) changes the origin infrastructure, which the question explicitly prohibits.

Question 4

An application uses Amazon SQS to decouple a web frontend from a backend processing tier. The backend processes messages by calling a third-party API that occasionally times out after 25 seconds. Messages that fail processing must be retried up to 3 times before being moved to a dead-letter queue. What is the MINIMUM SQS visibility timeout that should be configured?

Accepted Answer

100 seconds

Answer

The visibility timeout must be long enough for the consumer to finish processing and delete the message before it becomes visible again (causing a duplicate). The third-party API can take up to 25 seconds, so processing takes at least 25 seconds. AWS recommends setting the visibility timeout to at least 6x the processing time to account for retries and overhead. More critically: with up to 3 retries, a message could be in flight for up to 4 attempts × 25 seconds = 100 seconds in a worst-case retry scenario. Setting the visibility timeout to 100 seconds ensures a message being processed in any retry attempt does not become visible to other consumers prematurely. A timeout of 25 or 30 seconds (options A/B) is too short and will cause duplicate processing. 75 seconds (option D) still risks duplicate delivery on the third retry.

Question 5

A startup's web application is deployed on a single EC2 instance with an attached EBS volume storing user uploads. The startup has a very limited budget but needs to ensure the application can recover from an EC2 instance failure within 30 minutes with no more than 24 hours of data loss. Which is the MOST cost-effective architecture meeting these requirements?

Accepted Answer

Enable EC2 Auto Recovery using a CloudWatch alarm on StatusCheckFailed_System and take daily EBS snapshots

Answer

EC2 Auto Recovery (triggered by a StatusCheckFailed_System alarm) automatically recovers the instance on the same underlying hardware or a new host, preserving the instance's public/private IP, Elastic IP, instance metadata, and EBS volumes — typically completing in minutes, well within the 30-minute RTO. Daily EBS snapshots satisfy the 24-hour RPO. This is the most cost-effective approach because it requires no additional instances, no EFS, and no architectural changes. Auto Scaling with EFS (option B) adds cost with a second instance running continuously. Option C changes the storage architecture significantly and adds RDS costs. AMI-based backup with manual launch (option D) would meet RTO but is more complex and slower than Auto Recovery.

AWS Practice Test

AWS Practice Test

AWS Design Resilient Architectures 3