AWS-Certified-Solutions-Architect-Professional Free Practice Test

- (Exam Topic 2)
A solutions architect is auditing the security setup of an AWS Lambda function for a company. The Lambda function retrieves the latest changes from an Amazon Aurora database. The Lambda function and the database run in the same VPC. Lambda environment variables are providing the database credentials to the Lambda function.
The Lambda function aggregates data and makes the data available in an Amazon S3 bucket that is configured for server-side encryption with AWS KMS managed encryption keys (SSE-KMS). The data must not travel across the internet. If any database credentials become compromised, the company needs a solution that minimizes the impact of the compromise.
What should the solutions architect recommend to meet these requirements?

1. A. Enable IAM database authentication on the Aurora DB cluste
2. B. Change the IAM role for the Lambda function to allow the function to access the database by using IAM database authenticatio
3. C. Deploy a gateway VPC endpoint for Amazon S3 in the VPC.
4. D. Enable IAM database authentication on the Aurora DB cluste
5. E. Change the IAM role for the Lambda function to allow the function to access the database by using IAM database authenticatio
6. F. Enforce HTTPS on the connection to Amazon S3 during data transfers.
7. G. Save the database credentials in AWS Systems Manager Parameter Stor
8. H. Set up password rotation on the credentials in Parameter Stor
9. I. Change the IAM role for the Lambda function to allow the function to access Parameter Stor
10. J. Modify the Lambda function to retrieve the credentials from Parameter Stor
11. K. Deploy a gateway VPC endpoint for Amazon S3 in the VPC.
12. L. Save the database credentials in AWS Secrets Manage
13. M. Set up password rotation on the credentials in Secrets Manage
14. N. Change the IAM role for the Lambda function to allow the function to access Secrets Manage
15. O. Modify the Lambda function to retrieve the credentials Om Secrets Manage
16. P. Enforce HTTPS on the connection to Amazon S3 during data transfers.

Correct Answer: A
https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.IAMDBAuth.html

- (Exam Topic 2)
A company operates quick-service restaurants. The restaurants follow a predictable model with high sales traffic for -4 hours daily Sates traffic is lower outside of those peak hours.
The point of sale and management platform is deployed in the AWS Cloud and has a backend that is based or Amazon DynamoDB The database table uses provisioned throughput mode with 100.000 RCUs and 80.000 WCUs to match Known peak resource consumption.
The company wants to reduce its DynamoDB cost and minimize the operational overhead for the IT staff. Which solution meets these requirements MOST cost-effectively?

1. A. Reduce the provisioned RCUs and WCUs
2. B. Change the DynamoDB table to use on-demand capacity
3. C. Enable Dynamo DB auto seating for the table.
4. D. Purchase 1-year reserved capacity that is sufficient to cover the peak load for 4 hours each day.

Correct Answer: C

- (Exam Topic 1)
A company is providing weather data over a REST-based API to several customers. The API is hosted by Amazon API Gateway and is integrated with different AWS Lambda functions for each API operation. The company uses Amazon Route 53 for DNS and has created a resource record of weather.example.com. The company stores data for the API in Amazon DynamoDB tables. The company needs a solution that will give the API the ability to fail over to a different AWS Region.
Which solution will meet these requirements?

1. A. Deploy a new set of Lambda functions in a new Regio
2. B. Update the API Gateway API to use an edge-optimized API endpoint with Lambda functions from both Regions as target
3. C. Convert the DynamoDB tables to global tables.
4. D. Deploy a new API Gateway API and Lambda functions in another Regio
5. E. Change the Route 53 DNS record to a multivalue answe
6. F. Add both API Gateway APIs to the answe
7. G. Enable target health monitorin
8. H. Convert the DynamoDB tables to global tables.
9. I. Deploy a new API Gateway API and Lambda functions in another Regio
10. J. Change the Route 53 DNS record to a failover recor
11. K. Enable target health monitorin
12. L. Convert the DynamoDB tables to global tables.
13. M. Deploy a new API Gateway API in a new Regio
14. N. Change the Lambda functions to global functions.Change the Route 53 DNS record to a multivalue answe
15. O. Add both API Gateway APIs to the answe
16. P. Enable target health monitorin
17. Q. Convert the DynamoDB tables to global tables.

Correct Answer: C
https://docs.aws.amazon.com/apigateway/latest/developerguide/dns-failover.html

- (Exam Topic 2)
A company runs a Python script on an Amazon EC2 instance to process data. The script runs every
10 minutes. The script ingests files from an Amazon S3 bucket and processes the files. On average, the script takes approximately 5 minutes to process each file The script will not reprocess a file that the script has already processed.
The company reviewed Amazon CloudWatch metrics and noticed that the EC2 instance is idle for approximately 40% of the time because of the file processing speed. The company wants to make the workload highly available and scalable. The company also wants to reduce long-term management overhead.
Which solution will meet these requirements MOST cost-effectively?

1. A. Migrate the data processing script to an AWS Lambda functio
2. B. Use an S3 event notification to invoke the Lambda function to process the objects when the company uploads the objects.
3. C. Create an Amazon Simple Queue Service (Amazon SQS) queu
4. D. Configure Amazon S3 to send event notifications to the SQS queu
5. E. Create an EC2 Auto Scaling group with a minimum size of one instanc
6. F. Update the data processing script to poll the SQS queu
7. G. Process the S3 objects that the SQS message identifies.
8. H. Migrate the data processing script to a container imag
9. I. Run the data processing container on an EC2instanc
10. J. Configure the container to poll the S3 bucket for new objects and to process the resulting objects.
11. K. Migrate the data processing script to a container image that runs on Amazon Elastic Container Service (Amazon ECS) on AWS Fargat
12. L. Create an AWS Lambda function that calls the Fargate RunTaskAPI operation when the container processes the fil
13. M. Use an S3 event notification to invoke the Lambda function.

Correct Answer: D

Which of following IAM policy elements lets you specify an exception to a list of actions?

1. A. NotException
2. B. ExceptionAction
3. C. Exception
4. D. NotAction

Correct Answer: D
The NotAction element lets you specify an exception to a list of actions. Reference:
http://docs.aws.amazon.com/IAM/latest/UserGuide/AccessPoIicyLanguage_EIementDescriptions.html