AWS-Certified-Solutions-Architect-Professional Free Practice Test

- (Exam Topic 2)
A company is migrating some of its applications to AWS. The company wants to migrate and modernize the applications quickly after it finalizes networking and security strategies. The company has set up an AWS Direct Connection connection in a central network account.
The company expects to have hundreds of AWS accounts and VPCs in the near future. The corporate network must be able to access the resources on AWS seamlessly and also must be able to communicate with all the VPCs. The company also wants to route its cloud resources to the internet through its on-premises data center.
Which combination of steps will meet these requirements? (Choose three.)

1. A. Create a Direct Connect gateway in the central accoun
2. B. In each of the accounts, create an association proposal by using the Direct Connect gateway and the account ID for every virtual private gateway.
3. C. Create a Direct Connect gateway and a transit gateway in the central network accoun
4. D. Attach the transit gateway to the Direct Connect gateway by using a transit VIF.
5. E. Provision an internet gatewa
6. F. Attach the internet gateway to subnet
7. G. Allow internet traffic through the gateway.
8. H. Share the transit gateway with other account
9. I. Attach VPCs to the transit gateway.
10. J. Provision VPC peering as necessary.
11. K. Provision only private subnet
12. L. Open the necessary route on the transit gateway and customer gateway to allow outbound internet traffic from AWS to flow through NAT services that run in the data center.

Correct Answer: BDF

- (Exam Topic 2)
A new startup is running a serverless application using AWS Lambda as the primary source of compute New versions of the application must be made available to a subset of users before deploying changes to all users Developers should also have the ability to stop the deployment and have access to an easy rollback mechanism A solutions architect decides to use AWS CodeDeploy to deploy changes when a new version is available.
Which CodeDeploy configuration should the solutions architect use?

1. A. A blue/green deployment
2. B. A linear deployment
3. C. A canary deployment
4. D. An all-at-once deployment

Correct Answer: C

- (Exam Topic 1)
A company wants to host a new global website that consists of static content. A solutions architect is working on a solution that uses Amazon CloudFront with an origin access identity During testing, the solutions architect receives 404 errors from the S3 bucket. Error messages appear only for attempts to access paths that end with a forward slash. such as example.com/path/. These requests should return the existing S3 object path/index.html. Any potential solution must not prevent CloudFront from caching the content.
What should the solutions architect do to resolve this problem?

1. A. Change the CloudFront origin to an Amazon API Gateway proxy endpoin
2. B. Rewrite the S3 request URL by using an AWS Lambda function.
3. C. Change the CloudFront origin to an Amazon API Gateway endpoin
4. D. Rewrite the S3 request URL in an AWS service integration.
5. E. Change the CloudFront configuration to use an AWS Lambda@Edge function that is invoked by a viewer request event to rewrite the S3 request URL.
6. F. Change the CloudFront configuration to use an AWS Lambda@Edge function that is invoked by an origin request event to rewrite the S3 request URL.

Correct Answer: C

- (Exam Topic 2)
An AWS partner company is building a service in AWS Organizations using Its organization named org. This service requires the partner company to have access to AWS resources in a customer account, which is in a separate organization named org2 The company must establish least privilege security access using an API or command line tool to the customer account
What is the MOST secure way to allow org1 to access resources h org2?

1. A. The customer should provide the partner company with their AWS account access keys to log in and perform the required tasks
2. B. The customer should create an IAM user and assign the required permissions to the IAM user The customer should then provide the credentials to the partner company to log In and perform the required tasks.
3. C. The customer should create an IAM role and assign the required permissions to the IAM rol
4. D. The partner company should then use the IAM rote's Amazon Resource Name (ARN) when requesting access to perform the required tasks
5. E. The customer should create an IAM rote and assign the required permissions to the IAM rot
6. F. The partner company should then use the IAM rote's Amazon Resource Name (ARN). Including the external ID in the IAM role's trust pokey, when requesting access to perform the required tasks

Correct Answer: D
https://docs.aws.amazon.com/IAM/latest/UserGuide/confused-deputy.html

- (Exam Topic 2)
A company is creating a sequel for a popular online game. A large number of users from all over the world will play the game within the first week after launch. Currently, the game consists of the following components deployed in a single AWS Region:
• Amazon S3 bucket that stores game assets
• Amazon DynamoDB table that stores player scores
A solutions architect needs to design a multi-Region solution that will reduce latency improve reliability, and require the least effort to implement
What should the solutions architect do to meet these requirements?

1. A. Create an Amazon CloudFront distribution to serve assets from the S3 bucket Configure S3Cross-Region Replication Create a new DynamoDB able in a new Region Use the new table as a replica target tor DynamoDB global tables.
2. B. Create an Amazon CloudFront distribution to serve assets from the S3 bucke
3. C. Configure S3Same-Region Replicatio
4. D. Create a new DynamoDB able m a new Regio
5. E. Configure asynchronous replication between the DynamoDB tables by using AWS Database Migration Service (AWS DMS) with change data capture (CDC)
6. F. Create another S3 bucket in a new Region and configure S3 Cross-Region Replication between the buckets Create an Amazon CloudFront distribution and configure origin failover with two origins accessing the S3 buckets in each Regio
7. G. Configure DynamoDB global tables by enabling Amazon DynamoDB Streams, and add a replica table in a new Region.
8. H. Create another S3 bucket in the same Region, and configure S3 Same-Region Replication between the buckets- Create an Amazon CloudFront distribution and configure origin failover with two origin accessing the S3 buckets Create a new DynamoDB table m a new Region Use the new table as a replica target for DynamoDB global tables.

Correct Answer: C