wayground logo

Free Printable Worksheets

NEW

Font size

S
M
L
XL
Worksheets

AWS Solutions Architect Associate - Architectures

Total questions: 20

Worksheet time: 10mins

Name
Class
Date
1.

Your website TriangleSunglasses.com is hosted on a fleet of EC2 instances managed by an Auto Scaling Group and fronted by an Application Load Balancer. Your ASG has been configured to scale on-demand based on the traffic going to your website. To reduce costs, you have configured the ASG to scale based on the traffic going through the ALB. To make the solution highly available, you have updated your ASG and set the minimum capacity to 2. How can you further reduce the costs while respecting the requirements?

a)

Remove the ALB and use an Elastic IP instead

b)

Reserve two EC2 instances

c)

Reduce the minimum capacity to 1

d)

Reduce the minimum capacity to 0

2.

Which of the following will NOT help us while designing a STATELESS application tier?

a)

Store session data in Amazon RDS

b)

Store session data in Amazon ElastiCache

c)

Store session data in the client HTTP cookies

d)

Store session data on EBS volumes

3.

You want to install software updates on 100s of Linux EC2 instances you manage. You want to store these updates on shared storage which should be dynamically loaded on the EC2 instances and shouldn't require heavy operations. What do you suggest?

a)

Store the software updates on EBS and sync them using data replication software from one master in each AZ

b)

Store the software updates on EFS and mount EFS as a network drive at startup

c)

Package the software updates as an EBS snapshot and create EBS volumes for each new software update

d)

Store the software updates on Amazon RDS

4.

As a Solutions Architect, you plan to migrate a complex ERP software suite to AWS Cloud. You want to host the software on a set of Linux EC2 instances managed by an Auto Scaling Group. The software usually takes over an hour to set up on a Linux machine. How do you recommend speeding up the installation process during a scale-out event?

a)

Use a Golden AMI

b)

Bootstrap using EC2 User Data

c)

Store the application in Amazon RDS

d)

Retrieve the application setup files from EFS

5.

You're developing an application and would like to deploy it to Elastic Beanstalk with minimal cost. You should run it in ________.

a)

Single Instance Mode

b)

High Availability Mode

6.

You're deploying your application to an Elastic Beanstalk environment but notice that the deployment process is painfully slow. After reviewing the logs, you found that your dependencies are resolved on each EC2 instance each time you deploy. How can you speed up the deployment process with minimal impact?

a)

Remove some dependencies in your code

b)

Place the dependencies in Amazon EFS

c)

Create a Golden AMI that contains the dependencies and use that image to launch the EC2 instances

7.

A startup company plans to run its application on AWS. As a solutions architect, the company hired you to design and implement a fully Serverless REST API. Which technology stack do you recommend?

a)
  • API Gateway + AWS Lambda

b)
  • Application Load Balancer + EC2

c)
  • Elastic Container Service (ECS) + Elastic Block Store (EBS)

d)
  • Amazon CloudFront + S3

8.

The following AWS services have an out of the box caching feature, EXCEPT:

a)

API Gateway

b)

Lambda

c)

DynamoDB

9.

You have a lot of static files stored in an S3 bucket that you want to distribute globally to your users. Which AWS service should you use?

a)

S3 Cross-Region Replication

b)

Amazon CloudFront

c)

Amazon Route 53

d)

API Gateway

10.

You created a DynamoDB table in ap-northeast-1 and would like to make it available in eu-west-1, so you decided to create a DynamoDB Global Table. What needs to be enabled first before you create a DynamoDB Global Table?

a)

DynamoDB Streams

b)

DynamoDB DAX

c)

DynamoDB Versioning

d)

DynamoDB Backups

11.

You have configured a Lambda function to run each time an item is added to a DynamoDB table using DynamoDB Streams. The function is meant to insert messages into the SQS queue for further long processing jobs. Each time the Lambda function is invoked, it seems able to read from the DynamoDB Stream but it isn't able to insert the messages into the SQS queue. What do you think the problem is?

a)

Lambda can't be used to insert messages into the SQS queue, use an EC2 instance instead

b)

The Lambda Execution IAM Role is missing permissions

c)

The Lambda security group must allow outbound access to SQS

d)

The SQS security group must be edited to allow AWS LAmbda

12.

You would like to create an architecture for a micro-services application whose sole purpose is to encode videos stored in an S3 bucket and store the encoded videos back into an S3 bucket. You would like to make this micro-services application reliable and has the ability to retry upon failures. Each video may take over 25 minutes to be processed. The services used in the architecture should be asynchronous and should have the capability to be stopped for a day and resume the next day from the videos that haven't been encoded yet. Which of the following AWS services would you recommend in this scenario?

a)

Amazon S3 + AWS Lambda

b)

Amazon SNS + Amazon EC2

c)

Amazon SQS + Amazon EC2

d)

Amazon SQS + AWS Lambda

13.

You are running a photo-sharing website where your images are downloaded from all over the world. Every month you publish a master pack of beautiful mountain images that are over 15 GB in size. The content is currently hosted on an Elastic File System (EFS) file system and distributed by an Application Load Balancer and a set of EC2 instances. Each month, you are experiencing very high traffic which increases the load on your EC2 instances and increases network costs. What do you recommend to reduce EC2 load and network costs without refactoring your website?

a)

Host the master pack on S3

b)

Enable Application Load Balancer Caching

c)

Scale up the EC2 instances

d)

Create a CloudFront distribution

14.

________ is an AWS service that allows you to capture gigabytes of data per second in real-time and deliver these data to multiple consuming applications, with a replay feature.

a)

Kinesis Data Streams

b)

Amazon S3

c)

Amazon MQ

15.

You are working on a Serverless application where you want to process objects uploaded to an S3 bucket. You have configured S3 Events on your S3 bucket to invoke a Lambda function every time an object has been uploaded. You want to ensure that events that can't be processed are sent to a Dead Letter Queue (DLQ) for further processing. Which AWS service should you use to set up the DLQ?

a)

S3 Events

b)

SNS Topic

c)

Lambda Function

16.

As a Solutions Architect, you have created an architecture for a company that includes the following AWS services: CloudFront, Web Application Firewall (AWS WAF), AWS Shield, Application Load Balancer, and EC2 instances managed by an Auto Scaling Group. Sometimes the company receives malicious requests and wants to block these IP addresses. According to your architecture, Where should you do it?

a)

NACL

b)

AWS WAF

c)

AWS Shield

d)

ALB Security Group

e)

EC2 Security Group

17.

Your EC2 instances are deployed in Cluster Placement Group in order to perform High-Performance Computing (HPC). You would like to maximize network performance between your EC2 instances. What should you use?

a)

Elastic Fabric Adapter

b)

Elastic Network Interface

c)

Elastic Network Adapter

d)

FSx for Lustre

18.

A company has a website hosted on AWS. The website is behind an Application Load Balancer (ALB) that is configured to handle HTTP and HTTPS separately. The company wants to forward all requests to the website so that the requests will use HTTPS. What should a solutions architect do to meet this requirement?

a)

Update the ALB's network ACL to accept only HTTPS traffic

b)

Create a rule that replaces the HTTP in the URL with HTTPS.

c)

Create a listener rule on the ALB to redirect HTTP traffic to HTTPS.

d)

Replace the ALB with a Network Load Balancer configured to use Server Name Indication (SNI).

19.

A company is developing a two-tier web application on AWS. The company's developers have deployed the application on an Amazon EC2 instance that connects directly to a backend Amazon RDS database. The company must not hardcode database credentials in the application. The company must also implement a solution to automatically rotate the database credentials on a regular basis. Which solution will meet these requirements with the LEAST operational overhead?

a)

Store the database credentials in the instance metadata.

b)

Use Amazon EventBridge (Amazon CloudWatch Events) rules to run a scheduled AWS Lambda function that updates the RDS credentials and instance metadata at the same time.

c)

Store the database credentials as a secret in AWS Secrets Manager and use versioning to ensure the ability to fall back to previous values.

d)

Store the database credentials as encrypted parameters in AWS Systems Manager Parameter Store.

20.

Which AWS Service analyzes your AWS account and provides recommendations for cost optimization, performance, security, fault tolerance, and service limits?

a)

AWS Trusted Advisor

b)

AWS CloudTrail

c)

AWS Identity and Access Management (AWS IAM)

d)

AWS CloudFormation