AWS-Certified-Solutions-Architect-Professional Free Practice Test

- (Exam Topic 2)
A company is running applications on AWS in a multi-account environment. The company's sales team and marketing team use separate AWS accounts in AWS Organizations.
The sales team stores petabytes of data in an Amazon S3 bucket. The marketing team uses Amazon QuickSight for data visualizations. The marketing team needs access to data that the sates team stores in the S3 bucket. The company has encrypted the S3 bucket with an AWS Key Management Service (AWS KMS) key. The marketing team has already created the IAM service role for QuickSight to provide QuickSight access in the marketing AWS account. The company needs a solution that will provide secure access to the data in the S3 bucket across AWS accounts.
Which solution will meet these requirements with the LEAST operational overhead?

1. A. Create a new S3 bucket in the marketing accoun
2. B. Create an S3 replication rule in the sales account to copy the objects to the new S3 bucket in the marketing accoun
3. C. Update the QuickSight permissions in the marketing account to grant access to the new S3 bucket.
4. D. Create an SCP to grant access to the S3 bucket to the marketing accoun
5. E. Use AWS Resource Access Manager (AWS RAM) to share the KMS key from the sates account with the marketing accoun
6. F. Update the QuickSight permissions in the marketing account to grant access to the S3 bucket.
7. G. Update the S3 bucket policy in the marketing account to grant access to the QuickSight rol
8. H. Create a KMS grant for the encryption key that is used in the S3 bucke
9. I. Grant decrypt access to the QuickSight rol
10. J. Update the QuickSight permissions in the marketing account to grant access to the S3 bucket.
11. K. Create an 1AM role in the sales account and grant access to the S3 bucke
12. L. From the marketing account,assume the 1AM role in the sales account to access the S3 bucke
13. M. Update the QuickSight rote, to create a trust relationship with the new 1AM role in the sales account.

Correct Answer: D

- (Exam Topic 2)
A company is running an application in the AWS Cloud. The application runs on containers in an Amazon Elastic Container Service (Amazon ECS) cluster. The ECS tasks use the Fargate launch type. The application's data is relational and is stored in Amazon Aurora MySQL. To meet regulatory requirements, the application must be able to recover to a separate AWS Region in the event of an application failure. In case of a failure, no data can be lost. Which solution will meet these requirements with the LEAST amount of operational overhead?

1. A. Provision an Aurora Replica in a different Region.
2. B. Set up AWS DataSync for continuous replication of the data to a different Region.
3. C. Set up AWS Database Migration Service (AWS DMS) to perform a continuous replication of the data toa different Region.
4. D. Use Amazon Data Lifecycle Manager {Amazon DLM) to schedule a snapshot every 5 minutes.

Correct Answer: A

- (Exam Topic 2)
A company has loT sensors that monitor traffic patterns throughout a large city. The company wants to read and collect data from the sensors and perform aggregations on the data.
A solutions architect designs a solution in which the loT devices are streaming to Amazon Kinesis Data Streams. Several applications are reading from the stream. However, several consumers are experiencing throttling and are periodically encountering a ReadProvisionedThroughputExceeded error.
Which actions should the solutions architect take to resolve this issue? (Select THREE.)

1. A. Reshard the stream to increase the number of shards in the stream.
2. B. Use the Kinesis Producer Library (KPL). Adjust the polling frequency.
3. C. Use consumers with the enhanced fan-out feature.
4. D. Reshard the stream to reduce the number of shards in the stream.
5. E. Use an error retry and exponential backoff mechanism in the consumer logic.
6. F. Configure the stream to use dynamic partitioning.

Correct Answer: ACD

- (Exam Topic 2)
A delivery company needs to migrate its third-party route planning application to AWS. The third party supplies a supported Docker image from a public registry. The image can run in as many containers as required to generate the route map.
The company has divided the delivery area into sections with supply hubs so that delivery drivers travel the shortest distance possible from the hubs to the customers. To reduce the time necessary to generate route maps, each section uses its own set of Docker containers with a custom configuration that processes orders only in the section's area.
The company needs the ability to allocate resources cost-effectively based on the number of running containers.
Which solution will meet these requirements with the LEAST operational overhead?

1. A. Create an Amazon Elastic Kubernetes Service (Amazon EKS) cluster on Amazon EC2. Use the Amazon EKS CLI to launch the planning application in pods by using the -tags option to assign a custom tag to the pod.
2. B. Create an Amazon Elastic Kubernetes Service (Amazon EKS) cluster on AWS Fargat
3. C. Use the Amazon EKS CLI to launch the planning applicatio
4. D. Use the AWS CLI tag-resource API call to assign a custom tag to the pod.
5. E. Create an Amazon Elastic Container Service (Amazon ECS) cluster on Amazon EC2. Use the AWS CLI with run-tasks set to true to launch the planning application by using the -tags option to assign a custom tag to the task.
6. F. Create an Amazon Elastic Container Service (Amazon ECS) cluster on AWS Fargat
7. G. Use the AWS CLI run-task command and set enableECSManagedTags to true to launch the planning applicatio
8. H. Use the --tags option to assign a custom tag to the task.

Correct Answer: D

- (Exam Topic 2)
A large education company recently introduced Amazon Workspaces to provide access to internal applications across multiple universities. The company is storing user proxies on an Amazon FSx for Windows File Server tile system. The Me system is configured with a DNS alias and is connected to a self-managed Active Directory As more users begin to use the Workspaces login time increases to unacceptable levels
An investigation reveals a degradation in performance of the file system. The company created the file system on HDD storage with a throughput of 16 MBps A solutions architect must improve the performance of the file system during a defined maintenance window
What should the solutions architect do to meet these requirements with the LEAST administrative effort?

1. A. Use AWS Backup to create a point-in-time backup of the file system Restore the backup to a new FSx for Windows File Server file system Select SSD as the storage type Select 32 MBps as the throughput capacity When the backup and restore process is completed adjust the DNS alias accordingly Delete the original file system
2. B. Disconnect users from the file system In the Amazon FSx console, update the throughput capacity to 32 MBps Update the storage type to SSD Reconnect users to the file system
3. C. Deploy an AWS DataSync agent onto a new Amazon EC2 instanc
4. D. Create a task Configure the existing file system as the source location Configure a new FSx for Windows File Server file system with SSD storage and 32 MBps of throughput as the target location Schedule the task When the task is completed adjust the DNS alias accordingly Delete the original file system.
5. E. Enable shadow copies on the existing file system by using a Windows PowerShell command Schedulethe shadow copy job to create a point-in-time backup of the file system Choose to restore previous versions Create a new FSx for Windows File Server file system with SSD storage and 32 MBps of throughput When the copy job is completed, adjust the DNS alias Delete the original file system

Correct Answer: D