AWS Associate Certified Solutions Architect - Associate 2

Question 1

A company needs a managed relational database that automatically scales storage and supports read replicas across multiple AWS regions. Which service best fits this requirement?

Accepted Answer

Amazon Aurora Global Database

Answer

Aurora Global Database spans multiple AWS regions with sub-second replication latency and supports cross-region read replicas.

Question 2

An application stores session data that must be accessible with microsecond latency and must survive an Availability Zone failure. Which solution meets both requirements?

Accepted Answer

Amazon ElastiCache for Redis with Multi-AZ and automatic failover

Answer

ElastiCache for Redis with Multi-AZ and automatic failover replicates data to a standby node in another AZ, surviving AZ failures.

Question 3

A Solutions Architect must design an architecture where an EC2 instance in a private subnet can download software updates from the internet without being directly reachable from the internet. What should be used?

Accepted Answer

NAT Gateway in a public subnet with a route from the private subnet

Answer

A NAT Gateway in a public subnet allows outbound internet traffic from private subnets while blocking unsolicited inbound connections.

Question 4

A company wants to enforce that all objects uploaded to an S3 bucket are encrypted at rest using AWS-managed keys, regardless of what the uploader specifies. How should this be enforced?

Accepted Answer

Enable default encryption on the bucket with SSE-S3 or SSE-KMS

Answer

Enabling default encryption ensures all newly uploaded objects are automatically encrypted even if the PUT request does not specify encryption headers.

Question 5

An application running on EC2 needs to call the S3 API without embedding AWS credentials in the code. What is the recommended approach?

Accepted Answer

Assign an IAM role to the EC2 instance

Answer

Attaching an IAM role to an EC2 instance provides temporary credentials via the instance metadata service, eliminating the need to manage static credentials.

AWS Practice Test

AWS Practice Test

AWS Associate Certified Solutions Architect - Associate 2