You have a web application that is hosted on a series of EC2 instances that have an Application Load Balancer in front of them. You have created a new CloudFront distribution. You then set up its origin to point to your ALB. You need to provide access to hundreds of private files served by your CloudFront distribution. What should you use?

CloudFront Origin Access Identity

A financial institution has begun using AWS services and plans to migrate as much of their IT infrastructure and applications to AWS as possible. The nature of the business dictates that strict compliance practices be in place. The AWS team has configured AWS CloudTrail to help meet compliance requirements and be ready for any upcoming audits. Which item is not a feature of AWS CloudTrail?

Monitor Auto Scaling Groups and optimize resource utilization.

Answer simple questions about user activity.

You work for a small startup that has a shoestring budget. You accidentally leave a large EC2 instance running over a few days and are hit with a huge bill. You need to prevent this from happening in the future. What should you do?

Create a billing alarm to monitor your AWS charges for when they go above a certain threshold.

Enable CloudFormation to alert you when any EC2 instance has been running for more than 24 hours.

Enable AWS CloudTrail to terminate any EC2 instance that has been running for more than 24 hours.

Use AWS Trusted Advisor to notify you whenever an EC2 instance has been running for more than 24 hours.

You have a custom VPC hosted in the AWS cloud that contains your secure web application. During routine analysis, you notice some port scans coming in from unrecognizable IP addresses. You are suspicious, and decide to block these IP addresses for the next 48 hours. What is the best way to achieve this?

Modify your network access control list (NACL) for all public IP addresses and block traffic to the suspicious IP addresses.

Modify your security group for all public IP addresses and block traffic to the suspicious IP addresses.

Modify your VPC control list and block access to the IP addresses.

Modify your internet gateway for all private IP addresses and block traffic to the suspicious IP addresses.

You need to design a stateless web application tier. Which of the following would NOT help you achieve this?

Save your session data on an EBS volume shared by EC2 instances running across different Availability Zones.

Store the session data in cookies saved to the users' browsers.

Store the session data in Elasticache.

Save your session data in Amazon RDS.

A web analytics company is receiving both structured and semi-structured data from a large number of different sources each day. The developers plan on using big data processing frameworks to analyze the data and access it using Business Intelligence (BI) tools and SQL queries. Which of the following provides the best high-performing solution?

Create an Amazon EMR Cluster and store the data in Amazon Redshift.

Use Amazon Kinesis Data Analytics and store the processed data in Aurora.

Use Amazon EC2 and store the data in RDS.

Use AWS Glue and store the processed data in S3.

You have an online store and you are preparing for the week before Christmas, which is your busiest period of the year. You estimate that your traffic will increase by 50% during this period. Your website is using an SQS standard queue, and you're running a fleet of EC2 instances configured in an Auto Scaling group which then consumes the SQS messages. What should you do to prepare your SQS queue for the 50% increase in traffic?

Nothing. SQS scales automatically.

Create multiple SQS queues and deploy these behind an SQS Load Balancer.

Increase the size of your SQS queue.

Create additional EC2 instances to help query the SQS queue.

You work for an automotive company that has a small estate on AWS, but the majority of their assets are hosted in-house at their own data center. They are now looking to save money by moving more and more real estate to AWS and have started creating multiple AWS accounts in the same Region. As part of their expansion strategy, they plan to deploy multiple VPCs across these AWS accounts. They currently have one Direct Connect connection installed between their on-premises data center and AWS. Now that they have multiple production accounts and a growing number of VPCs, they will need to connect these to the on-premises data center using a dedicated connection. What is the most cost-effective way of doing this?

Create a new Direct Connect gateway and set this up with the existing Direct Connect connection. Set up a transit gateway between the AWS accounts and connect the transit gateway to the Direct Connect gateway.

Provision an AWS VPN CloudHub and connect the AWS accounts directly back to the Direct Connect connection via a VPN connection.

Provision a new Direct Connect connection for each AWS account and connect it back to your on-premises data center.

Use a VPN concentrator to connect the AWS accounts back to the on-premises data center.

You work for a government agency who are migrating their production environment to AWS from on-premises. They want you to create a serverless solution that is high-performing and scales effortlessly. They have a web frontend, a MongoDB No-SQL backend, and large amounts of static files such as pictures and images. What would be the ideal serverless solution from the choices below?

API Gateway > Lambda > DynamoDB > S3

ElasticBeanstalk > Application Load Balancer > EC2 > DynamoDB > S3

API Gateway > Lambda > DynamoDB > EBS

Application Load Balancer > EC2 > Aurora > S3

You have developed an AI-powered app that is used to predict the prices of cryptocurrency in real time. The app requires low latency and high throughput storage performance for processing training sets. You need to archive the completed processed training sets on storage that is as cost effective as possible, but can still maintain immediate access. What two storage solutions should you use? (Choose2)

Amazon FSx for Lustre for processing training sets

Amazon S3 Glacier Instant Retrieval for archiving completed processed training sets

Amazon Elastic File System for archiving completed processed training sets

AWS Storage Gateway for processing training sets

A recent audit of IT services deployed within many of the AWS Organization member accounts in your company has caused numerous remediation tasks for the SecOps team, as well as the member account owners. Post-remediation efforts, the CISO has asked you to identify a solution within AWS for preventing this from repeating. They would like you to instead find a way to allow end users in the accounts to deploy preapproved services within AWS to avoid them accidentally using the offending services. Which of the following is the optimal approach for this solution?

Create approved CloudFormation templates containing the required services that can be used throughout the organization. Load the templates to a shared catalog within AWS Service Catalog. List the templates as products, and then share the catalog with your Organization.

Create a CloudFormation Stack Set for each approved IT service. Have an organization administrator manually deploy these templates to the targeted accounts after approval.

Create approved Terraform templates containing the required services that are used throughout the organization. Create a shared catalog within AWS Service Catalog, list the templates as products, and then share the catalog with your Organization.

Create approved CloudFormation templates containing the required services that are used throughout the organization. Send email templates out to the account owners, so they can reference them as needed.

You run an online platform that specializes in five different dream vacations. The platform allows customers to submit queries about their five different experiences. You need to ensure that all queries are answered within 24 hours, either by a person or by a bot. You decide to create five separate SQS queues for each experience request. You need to automatically publish messages to their respective SQS queues as soon as customers submit their queries. Which architecture would be best suited to achieve this?

Create one SNS topic and configure the five SQS queues to subscribe to that topic. Configure the filter policies in the SNS subscription to publish the response to the designated SQS queue based on the experience request type.

Create 10 SNS topics and configure the five SQS queues to subscribe to two topics each. Publish the messages to the dedicated queue depending on the experience request.

Create five SNS topics and configure the five SQS queues to subscribe to those five topics. Publish the messages to the dedicated queue depending on the experience request.

Use AWS Lex and AWS Polly to respond automatically to the SQS queues.

You are planning to migrate a complex big data application to AWS using EC2. The application requires complex software to be installed, which typically takes a couple of hours. You need this application to be behind an Auto Scaling group so that it can react in a scaling event. How do you recommend speeding up the installation process when there's a scale-out event?

Create a golden AMI with the software pre-installed.

Create an EBS volume with PIOPS for faster installation performance.

Pre-deploy the software on an Application Load Balancer so when there's a scaling event it will automatically be installed on the EC2 instance.

Create a bootstrap script to automatically install the software.

You are a solutions architect working for a biotech company that has a large private cloud deployment using VMware. You have been tasked to setup their disaster recovery solution on AWS. What is the simplest way to achieve this?

Purchase VMware Cloud on AWS, leveraging VMware disaster recovery technologies and the speed of AWS cloud to protect your virtual machines

Deploy an EC2 instance into a public subnet and install vCenter on it

Deploy an EC2 instance into a private subnet and install vCenter on it

Use the VMware landing page on AWS to provision a EC2 instance with VMware vCenter installed on it

A pharmaceutical company has created a hybrid cloud that connects their on-premises data center and cloud infrastructure in AWS. They need to back up their storage to AWS. The backups must be stored and retrieved from AWS using the Server Message Block (SMB) protocol. The backups must be immediately accessible within minutes for three months. What is the best solution?

Create a Direct Connect connection and store the backups in DynamoDB.

Create a Direct Connect connection and store the backups using Route 53.

Your company has a local content management system (CMS) using Microsoft Sharepoint that is hosted on-premises. Due to a recent acquisition of another company, you expect traffic to the CMS to more than double in the coming week, so you have decided to migrate the SharePoint server to AWS. You need high performance using Windows shared file storage. You also need a high-performing cloud storage solution that is highly available and that can be integrated with Active Directory. What would be the best storage option?

Make an Amazon FSx for Windows File System and join this to an Active Directory Domain Controller hosted in AWS.

Create an EC2 Instance and mount an S3 bucket as the shared file repository. Connect the bucket to an Active Directory Domain Controller hosted in AWS.

Create a file system using Amazon NFS and connect this file system to an Active Directory Domain Controller hosted in AWS.

Create a file system using Amazon EFS and connect this file system to an Active Directory Domain Controller hosted in AWS.

You work for a large advertising company that is moving its videos and photos to AWS. The size of the migration is 70 terabytes, and it needs to be completed as quickly and cost-effectively as possible. What is the best way to achieve this?

An AWS Snowball Edge Storage Optimized device

You manage 12 EC2 instances and you need to have a central file repository that these EC2 instances can access. What would be the best possible solutions for this? (Choose2)

Attach a volume to multiple instances with Amazon EBS Multi-Attach.

Create an EFS volume and attach this to the EC2 instances.

Create a custom Lambda function behind API Gateway. Point your EC2 instances to the Lambda function when they need to access the centralized storage system.

Create a Route53 EBS storage record and create a network mount on your EC2 instances pointing at the Route53 alias record.

A junior intern just started working at your company. During the course of the day, they accidentally delete a critical encryption key that you had stored securely in S3. You need to prevent this from happening in the future. Which two steps should you take to prevent this from happening again in the future? (Choose2)

Enable multi-factor authentication (MFA) delete

As a car manufacturing enterprise, you're using Amazon RDS to store data from a web-based application. The application typically experiences low RDS usage. However, sporadic bursts of high, ready-heavy traffic to RDS will occur in response to the launch of new marketing campaigns. Additionally, you're tasked with developing an API that allows third-party database queries. Given these conditions, which architecture would be most optimal?

Create an API using Amazon API Gateway. Configure a read replica to handle the additional traffic.

Create an API using Amazon API Gateway. Configure S3 to handle the traffic.

Create an API using Amazon API Gateway. Use Auto Scaling with EC2 to increase the load on your database.

Create an API using Amazon API Gateway. Use CloudFront to handle the scaling of read traffic.

You have a serverless image-sharing website that utilizes S3 to store high-quality images. Unfortunately, your competitors start linking to your website and borrowing your photos. How can you best prevent unauthorized access?

Restrict public access to the bucket and turn on presigned URLs with expiry dates.

Store the images in an RDS database and restrict access.

Enable CloudFront on the website.

Block the IP addresses of the websites using AWS WAF.

You run a popular online store that specializes in Christmas decorations. You are about to enter the Christmas period and the traffic to your website is expected to increase by 10x. Your website uses API Gateway, Lambda, and DynamoDB on the background. Last year during the sale, you got the following exception from DynamoDB: ProvisionedThroughputExceededException . You need to prevent this from happening again this year. What would you do to prevent this?

Use Aurora Serverless NoSQL as an alternative.

Create an autoscaling group in front of your Lambda function so that the queries are dealt with in parallel.

Create an Auto Scaling group in front of DynamoDB and create DynamoDB read replicas to spread the load of the queries.

You have a secure web application hosted on AWS using Application Load Balancers, Auto Scaling, and a fleet of EC2 instances connected to an RDS database. You need to ensure that your RDS database can only be accessed using the profile credentials specific to your EC2 instances (via an authentication token). How can you achieve this?

Using IAM database authentication

Using Active Directory federation via Amazon Inspector

You are migrating your automotive company's customer-facing systems to AWS. One of the backend systems requires a database that is scalable globally and that can handle frequent updates to the database schema. You need to ensure there is no downtime or performance issues every time there is a schema change. You always require low-latency responses to high-traffic queries. What database would best suit this requirement?

Amazon Aurora Database with read replicas enabled

RDS SQL Server with read replicas

A small biotech company has finalized their decision to begin deploying their application to the AWS cloud. They expect to have a handful of AWS accounts to begin with, but expect to grow to over 100 by the end of the year. The security engineer on the project has stressed that they want to have a centralized method of storing AWS CloudTrail logs for all accounts and alert on any notifications regarding compliance violations with AWS services in the member accounts. What solution would be the best fit for this scenario?

AWS Control Tower can deploy a Log Archive account for centralized security logs and an Audit account for any SNS notifications around compliance violations.

AWS Organization Service Control Policies can be used to create new accounts. Then deploy the policies to each AWS account and use them to notify security on any violations.

AWS Config with AWS Lambda can deploy AWS Config rules throughout the organizations and use AWS Lambda to remediate or notify the security team.

Deploy an SIEM application on Amazon EC2 in the management account. Grant the EC2 instances permissions to assume cross-account roles into each member account with Read-Only permissions. Use them to notify security of any violations.

You work for an insurance company that stores a lot of confidential medical data. They are migrating to AWS and have an encryption requirement where you need to manage the hardware security modules (HSMs) that generate and store the encryption keys. You also create the symmetric keys and asymmetric key pairs that the HSM stores. Which AWS service should you use to meet these requirements?

AWS Key Management Service (KMS)

You work for an insurance company that uses an AWS web application to look up customers' credit scores. For security purposes, this web application cannot traverse the internet or leave the Amazon network. It needs to communicate to Amazon DynamoDB and Amazon S3 in a custom VPC. What networking technology should you implement to achieve this?

Use VPC endpoints to connect the AWS web application to Amazon DynamoDB and Amazon S3.

Use AWS VPN CloudHub to connect the web application to Amazon DynamoDB and Amazon S3.

Use AWS WAF to connect the web application to Amazon DynamoDB and Amazon S3.

Use AWS Direct Connect to connect directly to Amazon DynamoDB and Amazon S3.

You work for a Fintech company that is migrating its application to AWS. You have a small team of six developers who need varying levels of access to the AWS platform. Using IAM, what is the most secure way to achieve this?

Create the appropriate groups with the appropriate permissions and then create an IAM user account per developer. Assign the accounts to the appropriate groups.

Create one IAM user account with a user name and password and then share the login details with the six developers.

Create six IAM user accounts and add them to the administrator group, giving them full access to AWS.

Give each developer a root level AWS account and join each of these accounts to AWS Organizations.

You host a web application on Amazon EC2 that contains a large number of files that are infrequently accessed. Currently, the files are hosted on provisioned IOPS; however, due to budget cuts, your manager asks you to move the files to a more cost-effective solution. What storage solution should you choose?

Use an S3 Infrequent Access storage bucket. Create a role in IAM granting S3 access and attach this role to your EC2 instance.

Use an Elastic Block Storage General Purpose SSD (gp3).

Use a Throughput Optimized HDD (st1).

AWS Certified Solutions Architect - Associate (SAA-C03) - 3

Authored by José Diaz

Computers

1st Grade

Used 8+ times

AWS Certified Solutions Architect - Associate (SAA-C03) - 3

AI Actions

Add similar questions

Adjust reading levels

Convert to real-world scenario

Translate activity

More...

Content View

Student View

65 questions

Show all answers

MULTIPLE CHOICE QUESTION

2 mins • 1 pt

What EBS Volume type gives you the highest performance in terms of IOPS?

EBS Provisioned IOPS SSD (io2)

EBS Provisioned IOPS SSD (io2 Block Express)

EBS Provisioned IOPS SSD (io1)

EBS General Purpose SSD (gp3)

MULTIPLE CHOICE QUESTION

2 mins • 1 pt

You are a solutions architect for an online gambling company. You notice a series of web-layer DDoS attacks. This is coming from a large number of multiple IP addresses. In order to mitigate these web-layer DDoS attacks, you have been asked to implement a rule capable of blocking all IPs that have more than 2,000 requests in the last 5 minute interval. What should you do?

Update your VPC's network access control list (NACL) and block access to the IP addresses as and when they come in

Create a rate-based rule on your AWS WAF and associate the web access control list (ACL) to the Application Load Balancer

Create a standard rule on your AWS WAF and associate the web access control list (ACL) to the Application Load Balancer

Use AWS Trusted Advisor to filter the traffic

MULTIPLE CHOICE QUESTION

2 mins • 1 pt

You work for a large chip manufacturer in Taiwan who has a large dedicated cluster running MongoDB. Unfortunately, they have a large period of downtime and would now like to migrate their MongoDB instance to the AWS cloud. They do not want to make any changes to their application architecture. What AWS service would you recommend to use for MongoDB?

Amazon Neptune

Amazon DocumentDB

Aurora Serverless

Amazon QLDB

MULTIPLE CHOICE QUESTION

2 mins • 1 pt

You have a large number of files in S3 and you have been asked to build an index of these files. In order to do this, you need to read the the first 250 bytes of each object in S3. This data contains some metadata about the content of the file itself. Unfortunately, there are over 10,000,000 files in your S3 bucket, and this is about 100 TB of data. The data will then need to be stored in an Aurora Database. How can you build this index in the fastest way possible?

Create a program to use a byte range fetch for the first 250 Bytes of data and then store this in the Aurora Database.

Use AWS Athena to query the S3 bucket for the first 250 bytes of data. Take the result of the query and build an Aurora Database.

Use the index bucket function in AWS Macie to query the S3 bucket and then load this data in to the Aurora Database.

Create a program to use Macie to select the first 250 Bytes of data and then store this in Aurora Database.

MULTIPLE CHOICE QUESTION

2 mins • 1 pt

Your website is an online store, and it has sporadic and unpredictable transactional workloads throughout the day and night that are very hard to predict. The website is currently being hosted at your corporate data center and needs to be migrated to AWS. A new relational database is required that autoscales capacity to meet these peaks as well as being able to scale back when not being used. Which database technology would be best suited for your website?

Amazon Redshift with Auto Scaling enabled

Aurora Serverless DB cluster

DynamoDB with Auto Scaling enabled

Amazon RDS with Auto Scaling enabled and read replicas turned on

MULTIPLE CHOICE QUESTION

2 mins • 1 pt

Janelle works as a cloud solutions architect for a large enterprise that has begun the process of migrating to AWS for all of their application needs. The CTO and CISO have already decided that AWS Organizations is a required service for the multi-account environment that will be put into place. Janelle has been brought in to help solve the primary concern of member AWS accounts not following the required compliance rules set forth by the company. They want to both send alerts on configuration changes and prevent specific actions from occurring. Which solution would be the most efficient in solving this projected problem?

Create individual AWS Config rules in each AWS account. Set up AWS Lambda functions in each AWS account to remediate any suspected drift.

Install third-party SIEM software on Amazon EC2 instances in each account. Attach to them a Read-Only IAM instance profile within the respective account. Have them generate alerts for each flagged activity.

Create a set of Global AWS Config rules that can cover all Regions in the management account that apply to the member accounts. Set up an AWS Lambda function in the management AWS account to alert an administrator when drift is detected.

Create new AWS accounts using AWS Control Tower. Leverage the preventative and detective guardrails that come with it to prevent governance drift as well as send alerts on suspicious activities.

MULTIPLE CHOICE QUESTION

2 mins • 1 pt

A Fintech startup has a small application that receives intermittent and random traffic. At some points, it may not receive any traffic at all; at other times, it might receive tens of thousand of queries at once. You need to rearchitect the application for the AWS cloud using a relational database. What database technology would best suit your needs while keeping costs at a minimum?

RDS for MySQL

DynamoDB

Aurora Serverless

NeptuneDB

Access all questions and much more by creating a free account

Create resources

Host any resource

Get auto-graded reports

Continue with Google

Continue with Email

Continue with Classlink

Continue with Clever

or continue with

Microsoft

Apple

Others

Already have an account?

Similar Resources on Wayground

60 questions

Unit-IV

Quiz

•

1st - 3rd Grade

68 questions

CC exam Jan 22

Quiz

•

1st Grade

65 questions

AWS Certified Solutions Architect - Associate (SAA-C03) - 2

Quiz

•

1st Grade

65 questions

(CLF-C02) AWS Certified Cloud Practitioner Practice Exam 3

Quiz

•

1st Grade

61 questions

Алма

Quiz

•

1st - 5th Grade

66 questions

SCM 1

Quiz

•

1st Grade

65 questions

AWS Certified Developer - Associate (DVA-C02) - Practice Exam 4

Quiz

•

1st Grade

70 questions

test

Quiz

•

1st - 5th Grade

Popular Resources on Wayground

8 questions

Spartan Way - Classroom Responsible

Quiz

•

9th - 12th Grade

15 questions

Fractions on a Number Line

Quiz

•

3rd Grade

14 questions

Boundaries & Healthy Relationships

Lesson

•

6th - 8th Grade

20 questions

Equivalent Fractions

Quiz

•

3rd Grade

3 questions

Integrity and Your Health

Lesson

•

6th - 8th Grade

25 questions

Multiplication Facts

Quiz

•

5th Grade

9 questions

FOREST Perception

Lesson

•

20 questions

Main Idea and Details

Quiz

•

5th Grade

Discover more resources for Computers

20 questions

Telling Time to the Hour and Half hour

Quiz

•

1st Grade

7 questions

Understanding Parallel, Intersecting, and Perpendicular Lines

Interactive video

•

1st - 6th Grade

16 questions

Counting Coins counting money

Quiz

•

1st - 2nd Grade

20 questions

Place Value

Quiz

•

KG - 3rd Grade

10 questions

Counting Coins

Quiz

•

1st Grade

10 questions

Telling time to the hour and half hour

Quiz

•

1st - 2nd Grade

15 questions

Grammar

Quiz

•

KG - 7th Grade

10 questions

First Grade Balancing Equations

Quiz

•

1st - 2nd Grade