AWS Certified Solutions Architect - Associate

Question 1

An Administrator is hosting an application on a single Amazon EC2 instance, which users can access by the public hostname. The administrator is adding a second instance, but does not want users to have to decide between many public hostnames.
Which AWS service will decouple the users from specific Amazon EC2 instances?

A. Amazon EC2 security group

B. Amazon ELB

C. Auto Scaling group

D. Amazon SQS

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

A Solutions Architect is defining a shared Amazon S3 bucket where corporate applications will save objects.
How can the Architect ensure that when an application uploads an object to the Amazon S3 bucket, the object is encrypted?

A. Set a CORS configuration.

B. Set permission for users

C. Enable default encryption on the bucket.

D. Set a bucket policy to encrypt all Amazon S3 objects.

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

A Solutions Architect is designing an Amazon VPC. Applications in the VPC must have private connectivity to Amazon DynamoDB in the same AWS Region.
The design should route DynamoDB traffic through:

A. AWS Direct Connect

B. NAT gateway

C. VPC peering connection.

D. VPC endpoint

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

A customer is running a critical payroll system in a production environment in one data center and a disaster recovery (DR) environment in another. The application includes load-balanced web servers and failover for the MySQL database. The customer's DR process is manual and error-phone. For this reason, management has asked IT to migrate the application to AWS and make it highly available so that IT no longer has to manually fail over the environment.
How should a Solutions Architect migrate the system to AWS?

A. Migrate the production environment to span multiple Availability Zones, using Elastic Load Balancing and Multi-AZ Amazon RDS. Decommission the DR environment because it is no longer needed.

B. Migrate the production and DR environments to different Availability Zones within the same region. Let AWS manage failover between the environments.

C. Migrate the production environment to a single Availability Zone, and set up instance recovery for Amazon EC2. Decommission the DR environment because it is no longer needed.

D. Migrate the production and DR environments to different regions. Let AWS manage failover between the environments.

Correct Answer: A

Question 5

An application that runs on an Amazon EC2 instance must make secure calls to Amazon S3 buckets.
Which steps can a Solution Architect take to ensure that the calls are made without exposing credentials?

A. Generate an access key ID and a secret key and assign an I AM role with least privilege.

B. Generate temporary access keys to grant users temporary access to the Amazon EC2 instance.

C. Create an 1AM policy granting access to all services and assign it to the Amazon EC2 instance profile.

D. Create an 1AM role granting least privilege and assign it to the Amazon EC2 instance profile.

Correct Answer: D

Question 6

A Solution Architect is designing a disaster recovery solution for a 5 TB Amazon Redshift cluster. The recovery site must be at least 500 miles (805 kilometers) from the live site.
How should the Architect meet these requirements?

A. Enable cross-region snapshots to a different region.

B. Modify the Redshift cluster to span two regions.

C. Take a snapshot of the cluster and copy it to another Availability Zone.

D. Use AWS CloudFormation to deploy the cluster in a second region.

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 7

A Solutions Architect is designing the infrastructure for web application. One of the requirements is to notify an administrator by email of new registrations. Simultaneously, the user's email address must be sent to a Lambda function that will perform additional user verification.
Which of the following services meet the specified requirements while minimizing architectural complexity?

A. AWS ClotioTrail

B. Amazon SNS

C. Amazon SQS

D. Amazon Kinesis

Correct Answer: C

Question 8

A company has asked a Solutions Architect to ensure that data is protected during data transfer to and from Amazon S3.
Use of which service will protect the data in transit?

A. HTTPS

B. FTPS

C. AWS KMS

D. SFTP

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 9

company has a popular multi-player mobile game hosted in its on-premises datacenter. The current infrastructure can no longer keep up with demand and the company is considering a move to the cloud.
Which solution should a Solutions Architect recommend as the MOST scalable and cost-effective solution to meet these needs?

A. AWS Lambda and Amazon API Gateway

B. Amazon EC2 and an Application Load Balancer

C. Amazon EC2 and Amazon Elastic Transcoder

D. Amazon S3 and Amazon CloudFront

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Amazon AWS Certified Solutions Architect - Associate - SAA-C01 Exam Practice Test

Latest Update

Useful Links

Contact Us