AWS-Solution-Architect-Associate Free Practice Test

- (Topic 1)
A company uses NFS to store large video files in on-premises network attached storage. Each video file ranges in size from 1MB to 500 GB. The total storage is 70 TB and is no longer growing. The company decides to migrate the video files to Amazon S3. The company must migrate the video files as soon as possible while using the least possible network bandwidth.
Which solution will meet these requirements?

1. A. Create an S3 bucket Create an IAM role that has permissions to write to the S3 bucke
2. B. Use the AWS CLI to copy all files locally to the S3 bucket.
3. C. Create an AWS Snowball Edge jo
4. D. Receive a Snowball Edge device on premise
5. E. Use the Snowball Edge client to transfer data to the devic
6. F. Return the device so that AWS can import the data into Amazon S3.
7. G. Deploy an S3 File Gateway on premise
8. H. Create a public service endpoint to connect to the S3 File Gateway Create an S3 bucket Create a new NFS file share on the S3 File Gateway Point the new file share to the S3 bucke
9. I. Transfer the data from the existing NFS file share to the S3 File Gateway.
10. J. Set up an AWS Direct Connect connection between the on-premises network and AW
11. K. Deploy an S3 File Gateway on premise
12. L. Create a public virtual interlace (VIF) to connect to the S3 File Gatewa
13. M. Create an S3 bucke
14. N. Create a new NFS file share on the S3 File Gatewa
15. O. Point the new file share to the S3 bucke
16. P. Transfer the data from the existing NFS file share to the S3 File Gateway.

Correct Answer: B
The basic difference between Snowball and Snowball Edge is the capacity they provide. Snowball provides a total of 50 TB or 80 TB, out of which 42 TB or 72 TB is available, while Amazon Snowball Edge provides 100 TB, out of which 83 TB is available.

- (Topic 4)
A company is deploying an application that processes large quantities of data in parallel. The company plans to use Amazon EC2 instances for the workload. The network architecture must be configurable to prevent groups of nodes from sharing the same underlying hardware.
Which networking solution meets these requirements?

1. A. Run the EC2 instances in a spread placement group.
2. B. Group the EC2 instances in separate accounts.
3. C. Configure the EC2 instances with dedicated tenancy.
4. D. Configure the EC2 instances with shared tenancy.

Correct Answer: A
it allows the company to deploy an application that processes large quantities of data in parallel and prevent groups of nodes from sharing the same underlying hardware. By running the EC2 instances in a spread placement group, the company can launch a small number of instances across distinct underlying hardware to reduce correlated failures. A spread placement group ensures that each instance is isolated from each other at the rack level. References:
✑ Placement Groups
✑ Spread Placement Groups

- (Topic 4)
A company is migrating its multi-tier on-premises application to AWS. The application consists of a single-node MySQL database and a multi-node web tier. The company must minimize changes to the application during the migration. The company wants to improve application resiliency after the migration.
Which combination of steps will meet these requirements? (Select TWO.)

1. A. Migrate the web tier to Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer.
2. B. Migrate the database to Amazon EC2 instances in an Auto Scaling group behind a Network Load Balancer.
3. C. Migrate the database to an Amazon RDS Multi-AZ deployment.
4. D. Migrate the web tier to an AWS Lambda function.
5. E. Migrate the database to an Amazon DynamoDB table.

Correct Answer: AC
An Auto Scaling group is a collection of EC2 instances that share similar characteristics and can be scaled in or out automatically based on demand. An Auto
Scaling group can be placed behind an Application Load Balancer, which is a type of Elastic Load Balancing load balancer that distributes incoming traffic across multiple targets in multiple Availability Zones. This solution will improve the resiliency of the web tier by providing high availability, scalability, and fault tolerance. An Amazon RDS Multi-AZ deployment is a configuration that automatically creates a primary database instance and synchronously replicates the data to a standby instance in a different Availability Zone. When a failure occurs, Amazon RDS automatically fails over to the standby instance without manual intervention. This solution will improve the resiliency of the database tier by providing data redundancy, backup support, and availability. This combination of steps will meet the requirements with minimal changes to the application during the migration. References:
✑ 1 describes the concept and benefits of an Auto Scaling group.
✑ 2 provides an overview of Application Load Balancers and their benefits.
✑ 3 explains how Amazon RDS Multi-AZ deployments work and their benefits.

- (Topic 4)
A company has a three-tier environment on AWS that ingests sensor data from its users' devices The traffic flows through a Network Load Balancer (NIB) then to Amazon EC2 instances for the web tier and finally to EC2 instances for the application tier that makes database calls
What should a solutions architect do to improve the security of data in transit to the web tier?

1. A. Configure a TLS listener and add the server certificate on the NLB
2. B. Configure AWS Shield Advanced and enable AWS WAF on the NLB
3. C. Change the load balancer to an Application Load Balancer and attach AWS WAF to it
4. D. Encrypt the Amazon Elastic Block Store (Amazon EBS) volume on the EC2 instances using AWS Key Management Service (AWS KMS)

Correct Answer: A
A: How do you protect your data in transit?
Best Practices:
Implement secure key and certificate management: Store encryption keys and certificates securely and rotate them at appropriate time intervals while applying strict access control; for example, by using a certificate management service, such as AWS Certificate Manager (ACM).
Enforce encryption in transit: Enforce your defined encryption requirements based on appropriate standards and recommendations to help you meet your organizational, legal, and compliance requirements.
Automate detection of unintended data access: Use tools such as GuardDuty to automatically detect attempts to move data outside of defined boundaries based on data classification level, for example, to detect a trojan that is copying data to an unknown or untrusted network using the DNS protocol.
Authenticate network communications: Verify the identity of communications by using protocols that support authentication, such as Transport Layer Security (TLS) or IPsec.
https://wa.aws.amazon.com/wat.question.SEC_9.en.html

- (Topic 4)
A company is preparing a new data platform that will ingest real-time streaming data from multiple sources. The company needs to transform the data before writing the data to Amazon S3. The company needs the ability to use SQL to query the transformed data.
Which solutions will meet these requirements? (Choose two.)

1. A. Use Amazon Kinesis Data Streams to stream the dat
2. B. Use Amazon Kinesis Data Analytics to transform the dat
3. C. Use Amazon Kinesis Data Firehose to write the data to Amazon S3. Use Amazon Athena to query the transformed data from Amazon S3.
4. D. Use Amazon Managed Streaming for Apache Kafka (Amazon MSK) to stream the dat
5. E. Use AWS Glue to transform the data and to write the data to Amazon S3. Use Amazon Athena to query the transformed data from Amazon S3.
6. F. Use AWS Database Migration Service (AWS DMS) to ingest the dat
7. G. Use Amazon EMR to transform the data and to write the data to Amazon S3. Use Amazon Athena to query the transformed data from Amazon S3.
8. H. Use Amazon Managed Streaming for Apache Kafka (Amazon MSK) to stream the dat
9. I. Use Amazon Kinesis Data Analytics to transform the data and to write the data to Amazon S3. Use the Amazon RDS query editor to query the transformed data from Amazon S3.
10. J. Use Amazon Kinesis Data Streams to stream the dat
11. K. Use AWS Glue to transform the dat
12. L. Use Amazon Kinesis Data Firehose to write the data to Amazon S3. Use the Amazon RDS query editor to query the transformed data from Amazon S3.

Correct Answer: AB
To ingest, transform, and query real-time streaming data from multiple sources, Amazon Kinesis and Amazon MSK are suitable solutions. Amazon Kinesis Data Streams can stream the data from various sources and integrate with other AWS services. Amazon Kinesis Data Analytics can transform the data using SQL or Apache Flink.
Amazon Kinesis Data Firehose can write the data to Amazon S3 or other destinations. Amazon Athena can query the transformed data from Amazon S3 using standard SQL. Amazon MSK can stream the data using Apache Kafka, which is a popular open-source platform for streaming data. AWS Glue can transform the data using Apache Spark or Python scripts and write the data to Amazon S3 or other destinations. Amazon Athena can also query the transformed data from Amazon S3 using standard SQL.
References:
✑ What Is Amazon Kinesis Data Streams?
✑ What Is Amazon Kinesis Data Analytics?
✑ What Is Amazon Kinesis Data Firehose?
✑ What Is Amazon Athena?
✑ What Is Amazon MSK?
✑ What Is AWS Glue?