FREE AWS Certified Solutions Architect - Associate Question and Answers

Question 1

As a Solutions Architect for TPT Ltd., Adam is in charge of creating a shared service for hosting containers from various customers on Amazon ECS.
There are many AWS services that these containers will use.
The data from one customer's container must not be accessible by that of another customer, as required.
To satisfy the above requirements, Adam has been asked to propose a suitable solution.
In this circumstance, what should he do?

Accepted Answer

IAM roles for tasks

Answer

IAM Instance profile for EC2 Instances

Answer

Security Group rules

Answer

C85IAM roles for EC2 Instances

Question 2

Jacob is an employee of TPT Ltd. It has been requested of his team that they host the data on AWS Cloud, and the primary requirements are as follows:
(1) Capability to store JSON documents.
(2) High levels of both accessibility and longevity
Which of the following options represents the ideal mechanism for storage that Jacob and his team ought to make use of in order to fulfill this requirement?

Accepted Answer

DynamoDB

Answer

AWS CloudFormation

Answer

Amazon EFS

Answer

Amazon Redshift

Question 3

The configurations in an organization's AWS account need to be evaluated and audited. It must monitor each configuration change made to any of its Amazon S3 buckets in order to strictly enforce compliance. To prevent data breaches, automatically identifying S3 buckets with public access is also a good idea.
Which choices from the list below will satisfy this demand?

Accepted Answer

Use AWS Config to set up a rule in your AWS account.

Answer

Use AWS Trusted Advisor to analyze your AWS environment.

Answer

Use AWS CloudTrail and review the event history of your AWS account.

Answer

Use AWS IAM to generate a credential report.

Question 4

Your IT Director gave you the order to immediately set up an automated backup of each EBS Volume for your EC2 instances as part of the business continuity plan for your organization.
What is the quickest and least expensive method for backing up all of your EBS Volumes automatically?

Accepted Answer

Use Amazon Data Lifecycle Manager (Amazon DLM) to automate the creation of EBS snapshots.

Answer

Set your Amazon Storage Gateway with EBS volumes as the data source and store the backups in your on-premises servers through the storage gateway.

Answer

Use an EBS-cycle policy in Amazon S3 to automatically back up the EBS volumes.

Answer

For an automated solution, create a scheduled job that calls the "create-snapshot" command via the AWS CLI to take a snapshot of production EBS volumes periodically.

Question 5

Using stateless web servers, TPT Ltd. has created a highly available web application.
Which of the following services should be used to store session state data?

(1) Cloud Watch to store data
(2) DynamoDB
(3) Elastic Load Balancing to be used
(4) ElastiCache
(5) Storage Gateway

Accepted Answer

Only 2 and 4

Answer

Only 4 and 5

Answer

Only 1, 3 and 5

Answer

Only 2, 3 and 4

Question 6

Recently, your business adopted a hybrid architecture that links its on-premises data center to its AWS cloud. You have been given the responsibility for configuring the VPC and putting the necessary IAM groups, roles, users, and policies into place.
What is the best method for writing IAM policies in this circumstance?

Accepted Answer

Use the principle of least privilege which means granting only the permissions required to perform a task.

Answer

Determine what users need to do and then craft policies for them that let the users perform those tasks including additional administrative operations.

Answer

Grant all permissions to any EC2 user.

Answer

Use the principle of least privilege which means granting only the least number of people with full root access.

Question 7

Miguel has created an application that needs a highly available relational database and has an initial storage capacity of 8 TB. Every day, this database will expand by 8 GB. Now, a minimum of 8 read replicas will be needed to handle database reads and support anticipated traffic.
Which one of the following should Miguel employ to fulfill these conditions?

Accepted Answer

Amazon Aurora

Answer

Amazon Redshift

Answer

Amazon DynamoDB

Answer

Amazon S3