AWS-Solution-Architect-Associate Free Practice Test

- (Exam Topic 3)
A solutions architect wants all new users to have specific complexity requirements and mandatory rotation periods tor IAM user passwords What should the solutions architect do to accomplish this?

1. A. Set an overall password policy for the entire AWS account
2. B. Set a password policy for each IAM user in the AWS account
3. C. Use third-party vendor software to set password requirements
4. D. Attach an Amazon CloudWatch rule to the Create_newuser event to set the password with the appropriate requirements

Correct Answer: A

- (Exam Topic 3)
A company will deployed a web application on AWS. The company hosts the backend database on Amazon RDS for MySQL with a primary DB instance and five read replicas to support scaling needs. The read replicas must log no more than 1 second bahind the primary DB Instance. The database routinely runs scheduled stored procedures.
As traffic on the website increases, the replicas experinces addtional lag during periods of peak lead. A solutions architect must reduce the replication lag as much as possible. The solutions architect must minimize changes to the applicatin code and must minimize ongoing overhead.
Which solution will meet these requirements?
Migrate the database to Amazon Aurora MySQL. Replace the read replicas with Aurora Replicas, and configure Aurora Auto Scaling. Replace the stored procedures with Aurora MySQL native functions.
Deploy an Amazon ElasticCache for Redis cluser in front of the database. Modify the application to check the cache before the application queries the database. Repace the stored procedures with AWS Lambda funcions.

1. A. Migrate the database to a MYSQL database that runs on Amazn EC2 instance
2. B. Choose large, compute optimized for all replica node
3. C. Maintain the stored procedures on the EC2 instances.
4. D. Deploy an Amazon ElastiCache for Redis cluster in fornt of the databas
5. E. Modify the application to check the cache before the application queries the databas
6. F. Replace the stored procedures with AWS Lambda functions.
7. G. Migrate the database to a MySQL database that runs on Amazon EC2 instance
8. H. Choose large, compute optimized EC2 instances for all replica nodes, Maintain the stored procedures on the EC2 instances.
9. I. Migrate the database to Amazon DynamoDB, Provision number of read capacity units (RCUs) to support the required throughput, and configure on-demand capacity scalin
10. J. Replace the stored procedures with DynamoDB streams.

Correct Answer: A

- (Exam Topic 3)
A company wants to migrate its 1 PB on-premises image repository to AWS. The images will be used by a serverless web application Images stored in the repository are rarely accessed, but they must be immediately available Additionally, the images must be encrypted at rest and protected from accidental deletion
Which solution meets these requirements?

1. A. Implement client-side encryption and store the images in an Amazon S3 Glacier vault Set a vault lock to prevent accidental deletion
2. B. Store the images in an Amazon S3 bucket in the S3 Standard-Infrequent Access (S3 Standard-IA) storage class Enable versioning default encryption and MFA Delete on the S3 bucket.
3. C. Store the images in an Amazon FSx for Windows File Server file share Configure the Amazon FSx file share to use an AWS Key Management Service (AWS KMS) customer master key (CMK) to encrypt the images in the file share Use NTFS permission sets on the images to prevent accidental deletion
4. D. Store the images in an Amazon Elastic File System (Amazon EFS) file share in the Infrequent Access storage class Configure the EFS file share to use an AWS Key Management Service (AWS KMS) customer master key (CMK) to encrypt the images in the file shar
5. E. Use NFS permission sets on the images to prevent accidental deletion

Correct Answer: B

- (Exam Topic 3)
A company hosts its application on AWS The company uses Amazon Cognito to manage users When users log in to the application the application fetches required data from Amazon DynamoDB by using a REST API that is hosted in Amazon API Gateway. The company wants an AWS managed solution that will control access to the REST API to reduce
development efforts
Which solution will meet these requirements with the LEAST operational overhead?

1. A. Configure an AWS Lambda function to be an authorize! in API Gateway to validate which user made the request
2. B. For each user, create and assign an API key that must be sent with each request Validate the key by using an AWS Lambda function
3. C. Send the user's email address in the header with every request Invoke an AWS Lambda function tovalidate that the user with that email address has proper access
4. D. Configure an Amazon Cognito user pool authorizer in API Gateway to allow Amazon Cognito to validate each request

Correct Answer: D

- (Exam Topic 3)
A company needs to export its database once a day to Amazon S3 for other teams to access. The exported object size vanes between 2 GB and 5 GB. The S3 access pattern for the data is variable and changes rapidly. The data must be immediately available and must remain accessible for up to 3 months. The company needs the most cost-effective solution that will not increase retrieval time
Which S3 storage class should the company use to meet these requirements?

1. A. S3 Intelligent-Tiering
2. B. S3 Glacier Instant Retrieval
3. C. S3 Standard
4. D. S3 Standard-Infrequent Access (S3 Standard-IA)

Correct Answer: D
S3 Intelligent-Tiering is a cost-optimized storage class that automatically moves data to the most cost-effective access tier based on changing access patterns. Although it offers cost savings, it also introduces additional latency and retrieval time into the data retrieval process, which may not meet the requirement of "immediately available" data. On the other hand, S3 Standard-Infrequent Access (S3 Standard-IA) provides low cost storage
with low latency and high throughput performance. It is designed for infrequently accessed data that can be recreated if lost, and can be retrieved in a timely manner if required. It is a cost-effective solution that meets the requirement of immediately available data and remains accessible for up to 3 months.