AWS-Certified-Solutions-Architect-Professional Free Practice Test

- (Exam Topic 2)
A company runs a content management application on a single Windows Amazon EC2 instance in a development environment. The application reads and writes static content to a 2 TB Amazon Elastic Block Store (Amazon EBS) volume that is attached to the instance as the root device. The company plans to deploy this application in production as a highly available and fault-tolerant solution that runs on at least three EC2 instances across multiple Availability Zones.
A solutions architect must design a solution that joins all the instances that run the application to an Active Directory domain. The solution also must implement Windows ACLs to control access to file contents. The application always must maintain exactly the same content on all running instances at any given point in time.
Which solution will meet these requirements with the LEAST management overhead?

1. A. Create an Amazon Elastic File System (Amazon EFS) file shar
2. B. Create an Auto Scaling group that extends across three Availability Zones and maintains a minimum size of three instance
3. C. Implement a user data script to install the application, join the instance to the AD domain, and mount the EFS file share.
4. D. Create a new AMI from the current EC2 instance that is runnin
5. E. Create an Amazon FSx for Lustre file syste
6. F. Create an Auto Scaling group that extends across three Availability Zones and maintains a minimum size of three instance
7. G. Implement a user data script to join the instance to the AD domain and mount the FSx for Lustre file system.
8. H. Create an Amazon FSx for Windows File Server file syste
9. I. Create an Auto Scaling group that extends across three Availability Zones and maintains a minimum size of three instance
10. J. Implement a user data script to install the application and mount the FSx for Windows File Server file syste
11. K. Perform a seamless domain join to join the instance to the AD domain.
12. L. Create a new AMI from the current EC2 instance that is runnin
13. M. Create an Amazon Elastic File System (Amazon EFS) file syste
14. N. Create an Auto Scaling group that extends across three Availability Zones and maintains a minimum size of three instance
15. O. Perform a seamless domain join to join the instance to the AD domain.

Correct Answer: B

- (Exam Topic 2)
A retail company has a small ecommerce web application that uses an Amazon RDS for PostgreSQL DB instance The DB instance is deployed with the Multi-AZ option turned on.
Application usage recently increased exponentially and users experienced frequent HTTP 503 errors Users reported the errors, and the company's reputation suffered The company could not identify a definitive root cause.
The company wants to improve its operational readiness and receive alerts before users notice an incident The company also wants to collect enough information to determine the root cause of any future incident.
Which solution will meet these requirements with the LEAST operational overhead?

1. A. Turn on Enhanced Monitoring for the DB instance Modify the corresponding parameter group to turn on query logging for all the slow queries Create Amazon CloudWatch alarms Set the alarms to appropriate thresholds that are based on performance metrics in CloudWatch
2. B. Turn on Enhanced Monitoring and Performance Insights for the DB instance Create Amazon CloudWatch alarms Set the alarms to appropriate thresholds that are based on performance metrics in CloudWatch
3. C. Turn on log exports to Amazon CloudWatch for the PostgreSQL logs on the DB instance Analyze the logs by using Amazon Elasticsearch Service (Amazon ES) and Kibana Create a dashboard in Kibana Configure alerts that are based on the metrics that are collected
4. D. Turn on Performance Insights for the DB instance Modify the corresponding parameter group to turn on query logging for all the slow queries Create Amazon CloudWatch alarms Set the alarms to appropriate thresholds that are based on performance metrics in CloudWatch

Correct Answer: A

- (Exam Topic 2)
A solutions architect wants to make sure that only AWS users or roles with suitable permissions can access a new Amazon API Gateway endpoint The solutions architect wants an end-to-end view of each request to analyze the latency of the request and create service maps
How can the solutions architect design the API Gateway access control and perform request inspections''

1. A. For the API Gateway method, set the authorization to AWSJAM Then, give the IAM user or role execute-api Invoke permission on the REST API resource Enable the API caller to sign requests with AWS Signature when accessing the endpoint Use AWS X-Ray to trace and analyze user requests to API Gateway
2. B. For the API Gateway resource set CORS to enabled and only return the company's domain inAccess-Control-Allow-Origin headers Then give the IAM user or role execute-api Invoke permission on the REST API resource Use Amazon CloudWatch to trace and analyze user requests to API Gateway
3. C. Create an AWS Lambda function as the custom authorizer ask the API client to pass the key and secret when making the call, and then use Lambda to validate the key/secret pair against the IAM system Use AWS X-Ray to trace and analyze user requests to API Gateway
4. D. Create a client certificate for API Gateway Distribute the certificate to the AWS users and roles that need to access the endpoint Enable the API caller to pass the client certificate when accessing the endpoin
5. E. Use Amazon CloudWatch to trace and analyze user requests to API Gateway.

Correct Answer: A

- (Exam Topic 2)
A mobile gaming company is expanding into the global market. The company's game servers run in the
us-east-1 Region. The game's client application uses UDP to communicate with the game servers and needs to be able to connect to a set of static IP addresses.
The company wants its game to be accessible on multiple continents. The company also wants the game to maintain its network performance and global availability.
Which solution meets these requirements?

1. A. Provision an Application Load Balancer (ALB) in front of the game servers Create an Amazon CloudFront distribution that has no geographical restrictions Set the ALB as the origin Perform DNS lookups for the cloudfront net domain name Use the resulting IP addresses in the game's client application.
2. B. Provision game servers in each AWS Regio
3. C. Provision an Application Load Balancer in front of the game server
4. D. Create an Amazon Route 53 latency-based routing policy for the game's client application to use with DNS lookups
5. E. Provision game servers in each AWS Region Provision a Network Load Balancer (NLB) in front of thegame servers Create an accelerator in AWS Global Accelerator, and configure endpoint groups in each Region Associate the NLBs with the corresponding Regional endpoint groups Point the game client's application to the Global Accelerator endpoints
6. F. Provision game servers in each AWS Region Provision a Network Load Balancer (NLB) in front of the game servers Create an Amazon CloudFront distribution that has no geographical restrictions Set the NLB as the origin Perform DNS lookups for the cloudfront net domain nam
7. G. Use the resulting IP addresses in the game's client application

Correct Answer: A

- (Exam Topic 2)
A solutions architect is migrating an existing workload to AWS Fargate. The task can only run in a private subnet within the VPC where there is no direct connectivity from outside the system to the application When the Fargate task is launched the task fails with the following error:

How should the solutions architect correct this error?

1. A. Ensure the task is set to ENABLED for the auto-assign public IP setting when launching the task
2. B. Ensure the task is set to DISABLED (or the auto-assign public IP setting when launching the task Configure a NAT gateway in the public subnet in the VPC to route requests to the internet
3. C. Ensure the task is set to DISABLED for the auto-assign public IP setting when launching the task Configure a NAT gateway in the private subnet in the VPC to route requests to the internet
4. D. Ensure the network mode is set to bridge in the Fargate task definition

Correct Answer: B