AWS-Solution-Architect-Associate Free Practice Test

- (Topic 1)
A company is running an SMB file server in its data center. The file server stores large files that are accessed frequently for the first few days after the files are created. After 7 days the files are rarely accessed.
The total data size is increasing and is close to the company's total storage capacity. A solutions architect must increase the company's available storage space without losing low-latency access to the most recently accessed files. The solutions architect must also provide file lifecycle management to avoid future storage issues.
Which solution will meet these requirements?

1. A. Use AWS DataSync to copy data that is older than 7 days from the SMB file server to AWS.
2. B. Create an Amazon S3 File Gateway to extend the company's storage spac
3. C. Create an S3 Lifecycle policy to transition the data to S3 Glacier Deep Archive after 7 days.
4. D. Create an Amazon FSx for Windows File Server file system to extend the company's storage space.
5. E. Install a utility on each user's computer to access Amazon S3. Create an S3 Lifecycle policy to transition the data to S3 Glacier Flexible Retrieval after 7 days.

Correct Answer: B
Amazon S3 File Gateway is a hybrid cloud storage service that enables on- premises applications to seamlessly use Amazon S3 cloud storage. It provides a file interface to Amazon S3 and supports SMB and NFS protocols. It also supports S3 Lifecycle policies that can automatically transition data from S3 Standard to S3 Glacier Deep Archive after a specified period of time. This solution will meet the requirements of increasing the company’s available storage space without losing low-latency access to the most recently accessed files and providing file lifecycle management to avoid future storage issues.
Reference:
https://docs.aws.amazon.com/storagegateway/latest/userguide/WhatIsStorageGateway.ht ml

- (Topic 1)
A company receives 10 TB of instrumentation data each day from several machines located at a single factory. The data consists of JSON files stored on a storage area network (SAN) in an on-premises data center located within the factory. The company wants to send this data to Amazon S3 where it can be accessed by several additional systems that provide critical near-real-lime analytics. A secure transfer is important because the data is considered sensitive.
Which solution offers the MOST reliable data transfer?

1. A. AWS DataSync over public internet
2. B. AWS DataSync over AWS Direct Connect
3. C. AWS Database Migration Service (AWS DMS) over public internet
4. D. AWS Database Migration Service (AWS DMS) over AWS Direct Connect

Correct Answer: B
These are some of the main use cases for AWS DataSync: • Data migration
– Move active datasets rapidly over the network into Amazon S3, Amazon EFS, or FSx for Windows File Server. DataSync includes automatic encryption and data integrity validation to help make sure that your data arrives securely, intact, and ready to use.
"DataSync includes encryption and integrity validation to help make sure your data arrives securely, intact, and ready to use." https://aws.amazon.com/datasync/faqs/

- (Topic 4)
A company plans to use Amazon ElastiCache for its multi-tier web application. A solutions architect creates a Cache VPC for the ElastiCache cluster and an App VPC for the application’s Amazon EC2 instances. Both VPCs are in the us-east-1 Region.
The solutions architect must implement a solution to provide the application’s EC2 instances with access to the ElastiCache cluster.
Which solution will meet these requirements MOST cost-effectively?

1. A. Create a peering connection between the VPC
2. B. Add a route table entry for the peering connection in both VPC
3. C. Configure an inbound rule for the ElastiCache cluster’s security group to allow inbound connection from the application’s security group.
4. D. Create a Transit VP
5. E. Update the VPC route tables in the Cache VPC and the App VPC to route traffic through the Transit VP
6. F. Configure an inbound rule for the ElastiCache cluster's security group to allow inbound connection from the application’s security group.
7. G. Create a peering connection between the VPC
8. H. Add a route table entry for the peering connection in both VPC
9. I. Configure an inbound rule for the peering connection’s security group to allow inbound connection from the application’s security group.
10. J. Create a Transit VP
11. K. Update the VPC route tables in the Cache VPC and the App VPC to route traffic through the Transit VP
12. L. Configure an inbound rule for the Transit VPC’s security group to allow inbound connection from the application’s security group.

Correct Answer: A
Creating a peering connection between the VPCs allows the application's EC2 instances to communicate with the ElastiCache cluster directly and efficiently. This is the most cost- effective solution as it does not involve creating additional resources such as a Transit VPC, and it does not incur additional costs for traffic passing through the Transit VPC. Additionally, it is also more secure as it allows you to configure a more restrictive security group rule to allow inbound connection from only the application's security group.

- (Topic 3)
A hospital is designing a new application that gathers symptoms from patients. The hospital has decided to use Amazon Simple Queue Service (Amazon SOS) and Amazon Simple Notification Service (Amazon SNS) in the architecture.
A solutions architect is reviewing the infrastructure design Data must be encrypted at test and in transit. Only authorized personnel of the hospital should be able to access the data.
Which combination of steps should the solutions architect take to meet these requirements? (Select TWO.)

1. A. Turn on server-side encryption on the SQS components Update tie default key policy to restrict key usage to a set of authorized principals.
2. B. Turn on server-side encryption on the SNS components by using an AWS Key Management Service (AWS KMS) customer managed key Apply a key policy to restrict key usage to a set of authorized principals.
3. C. Turn on encryption on the SNS components Update the default key policy to restrict key usage to a set of authorized principal
4. D. Set a condition in the topic pokey to allow only encrypted connections over TLS.
5. E. Turn on server-side encryption on the SOS components by using an AWS Key Management Service (AWS KMS) customer managed key Apply a key pokey to restrict key usage to a set of authorized principal
6. F. Set a condition in the queue pokey to allow only encrypted connections over TLS.
7. G. Turn on server-side encryption on the SOS components by using an AWS Key Management Service (AWS KMS) customer managed ke
8. H. Apply an IAM pokey to restrict key usage to a set of authorized principal
9. I. Set a condition in the queue pokey to allow only encrypted connections over TLS

Correct Answer: BD
https://docs.aws.amazon.com/sns/latest/dg/sns-server-side-encryption.html https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-server-side-encryption.html

- (Topic 1)
A company is storing backup files by using Amazon S3 Standard storage. The files are accessed frequently for 1 month. However, the files are not accessed after 1 month. The company must keep the files indefinitely.
Which storage solution will meet these requirements MOST cost-effectively?

1. A. Configure S3 Intelligent-Tiering to automatically migrate objects.
2. B. Create an S3 Lifecycle configuration to transition objects from S3 Standard to S3 Glacier Deep Archive after 1 month.
3. C. Create an S3 Lifecycle configuration to transition objects from S3 Standard to S3 Standard-Infrequent Access (S3 Standard-IA) after 1 month.
4. D. Create an S3 Lifecycle configuration to transition objects from S3 Standard to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 1 month.

Correct Answer: B
The storage solution that will meet these requirements most cost-effectively is B: Create an S3 Lifecycle configuration to transition objects from S3 Standard to S3 Glacier Deep Archive after 1 month. Amazon S3 Glacier Deep Archive is a secure, durable, and extremely low-cost Amazon S3 storage class for long-term retention of data that is rarely accessed and for which retrieval times of several hours are acceptable. It is the lowest-cost storage option in Amazon S3, making it a cost-effective choice for storing backup files that are not accessed after 1 month. You can use an S3 Lifecycle configuration to automatically transition objects from S3 Standard to S3 Glacier Deep Archive after 1 month. This will minimize the storage costs for the backup files that are not accessed frequently.