AWS-Solution-Architect-Associate Free Practice Test

- (Topic 1)
A company maintains a searchable repository of items on its website. The data is stored in an Amazon RDS for MySQL database table that contains more than 10 million rows The database has 2 TB of General Purpose SSD storage There are millions of updates against this data every day through the company's website
The company has noticed that some insert operations are taking 10 seconds or longer The company has determined that the database storage performance is the problem
Which solution addresses this performance issue?

1. A. Change the storage type to Provisioned IOPS SSD
2. B. Change the DB instance to a memory optimized instance class
3. C. Change the DB instance to a burstable performance instance class
4. D. Enable Multi-AZ RDS read replicas with MySQL native asynchronous replication.

Correct Answer: A
https://aws.amazon.com/ebs/features/
"Provisioned IOPS volumes are backed by solid-state drives (SSDs) and are the highest performance EBS volumes designed for your critical, I/O intensive database applications.
These volumes are ideal for both IOPS-intensive and throughput-intensive workloads that require extremely low latency."
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Storage.html

- (Topic 4)
A recent analysis of a company's IT expenses highlights the need to reduce backup costs. The company's chief information officer wants to simplify the on- premises backup infrastructure and reduce costs by eliminating the use of physical backup tapes. The company must preserve the existing investment in the on- premises backup applications and workflows.
What should a solutions architect recommend?

1. A. Set up AWS Storage Gateway to connect with the backup applications using the NFS interface.
2. B. Set up an Amazon EFS file system that connects with the backup applications using the NFS interface.
3. C. Set up an Amazon EFS file system that connects with the backup applications using the iSCSI interface.
4. D. Set up AWS Storage Gateway to connect with the backup applications using the iSCSI- virtual tape library (VTL) interface.

Correct Answer: D
it allows the company to simplify the on-premises backup infrastructure and reduce costs by eliminating the use of physical backup tapes. By setting up AWS Storage Gateway to connect with the backup applications using the iSCSI-virtual tape library (VTL) interface, the company can store backup data on virtual tapes in S3 or Glacier. This preserves the existing investment in the on-premises backup applications and workflows while leveraging AWS storage services. References:
✑ AWS Storage Gateway
✑ Tape Gateway

- (Topic 1)
A company needs guaranteed Amazon EC2 capacity in three specific Availability Zones in a specific AWS Region for an upcoming event that will last 1 week.
What should the company do to guarantee the EC2 capacity?

1. A. Purchase Reserved instances that specify the Region needed
2. B. Create an On Demand Capacity Reservation that specifies the Region needed
3. C. Purchase Reserved instances that specify the Region and three Availability Zones needed
4. D. Create an On-Demand Capacity Reservation that specifies the Region and three Availability Zones needed

Correct Answer: D
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-capacity- reservations.html
Reserve instances: You will have to pay for the whole term (1 year or 3years) which is not cost effective

- (Topic 1)
A company hosts its multi-tier applications on AWS. For compliance, governance, auditing, and security, the company must track configuration changes on its AWS resources and record a history of API calls made to these resources.
What should a solutions architect do to meet these requirements?

1. A. Use AWS CloudTrail to track configuration changes and AWS Config to record API calls
2. B. Use AWS Config to track configuration changes and AWS CloudTrail to record API calls
3. C. Use AWS Config to track configuration changes and Amazon CloudWatch to record API calls
4. D. Use AWS CloudTrail to track configuration changes and Amazon CloudWatch to record API calls

Correct Answer: B
AWS Config is a fully managed service that allows the company to assess, audit, and evaluate the configurations of its AWS resources. It provides a detailed inventory of the resources in use and tracks changes to resource configurations. AWS Config can detect configuration changes and alert the company when changes occur. It also provides a historical view of changes, which is essential for compliance and governance purposes. AWS CloudTrail is a fully managed service that provides a detailed history of API calls made to the company's AWS resources. It records all API activity in the AWS account, including who made the API call, when the call was made, and what resources were affected by the call. This information is critical for security and auditing purposes, as it allows the company to investigate any suspicious activity that might occur on its AWS resources.

- (Topic 1)
A company hosts its web applications in the AWS Cloud. The company configures Elastic Load Balancers to use certificate that are imported into AWS Certificate Manager (ACM). The company’s security team must be notified 30 days before the expiration of each certificate.
What should a solutions architect recommend to meet the requirement?

1. A. Add a rule m ACM to publish a custom message to an Amazon Simple Notification Service (Amazon SNS) topic every day beginning 30 days before any certificate will expire.
2. B. Create an AWS Config rule that checks for certificates that will expire within 30 day
3. C. Configure Amazon EventBridge (Amazon CloudWatch Events) to invoke a custom alert by way of Amazon Simple Notification Service (Amazon SNS) when AWS Config reports a noncompliant resource
4. D. Use AWS trusted Advisor to check for certificates that will expire within to day
5. E. Createan Amazon CloudWatch alarm that is based on Trusted Advisor metrics for check status changes Configure the alarm to send a custom alert by way of Amazon Simple rectification Service (Amazon SNS)
6. F. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to detect any certificates that will expire within 30 day
7. G. Configure the rule to invoke an AWS Lambda functio
8. H. Configure the Lambda function to send a custom alert by way of Amazon Simple Notification Service (Amazon SNS).

Correct Answer: B
https://aws.amazon.com/premiumsupport/knowledge-center/acm-certificate- expiration/