AWS-Certified-Solutions-Architect-Professional Free Practice Test

- (Exam Topic 1)
A company is developing and hosting several projects in the AWS Cloud. The projects are developed across multiple AWS accounts under the same organization in AWS Organizations. The company requires the cost lor cloud infrastructure to be allocated to the owning project. The team responsible for all of the AWS accounts has discovered that several Amazon EC2 instances are lacking the Project tag used for cost allocation.
Which actions should a solutions architect take to resolve the problem and prevent it from happening in the future? (Select THREE.)

1. A. Create an AWS Config rule in each account to find resources with missing tags.
2. B. Create an SCP in the organization with a deny action for ec2:Runlnstances if the Project tag is missing.
3. C. Use Amazon Inspector in the organization to find resources with missing tags.
4. D. Create an IAM policy in each account with a deny action for ec2:RunInstances if the Project tag is missing.
5. E. Create an AWS Config aggregator for the organization to collect a list of EC2 instances with the missing Project tag.
6. F. Use AWS Security Hub to aggregate a list of EC2 instances with the missing Project tag.

Correct Answer: CDE

- (Exam Topic 1)
A company is migrating its three-tier web application from on-premises to the AWS Cloud. The company has the following requirements for the migration process:
• Ingest machine images from the on-premises environment.
• Synchronize changes from the on-premises environment to the AWS environment until the production cutover.
• Minimize downtime when executing the production cutover.
• Migrate the virtual machines' root volumes and data volumes.
Which solution will satisfy these requirements with minimal operational overhead?

1. A. Use AWS Server Migration Service (SMS) to create and launch a replication job for each tier of the applicatio
2. B. Launch instances from the AMIs created by AWS SM
3. C. After initial testing, perform a final replication and create new instances from the updated AMIs.
4. D. Create an AWS CLIVM Import/Export script to migrate each virtual machin
5. E. Schedule the script to run incrementally to maintain changes in the applicatio
6. F. Launch instances from the AMIs created by VM Import/Expor
7. G. Once testing is done, rerun the script to do a final import and launch the instances from the AMIs.
8. H. Use AWS Server Migration Service (SMS) to upload the operating system volume
9. I. Use the AWS CLI import-snaps hot command 'or the data volume
10. J. Launch instances from the AMIs created by AWSSMS and attach the data volumes to the instance
11. K. After initial testing, perform a final replication, launch new instances from the replicated AMI
12. L. and attach the data volumes to the instances.
13. M. Use AWS Application Discovery Service and AWS Migration Hub to group the virtual machines as an applicatio
14. N. Use the AWS CLI VM Import/Export script to import the virtual machines as AMI
15. O. Schedule the script to run incrementally to maintain changes in the applicatio
16. P. Launch instances from the AMI
17. Q. After initial testing, perform a final virtual machine import and launch new instances from the AMIs.

Correct Answer: A
SMS can handle migrating the data volumes:
https://aws.amazon.com/about-aws/whats-new/2018/09/aws-server-migration-service-adds-support-for-migratin

- (Exam Topic 2)
A company is processing videos in the AWS Cloud by using Amazon EC2 instances in an Auto Scaling group. It takes 30 minutes to process a video. Several EC2 instances scale in and out depending on the number of videos in an Amazon Simple Queue Service (Amazon SQS) queue.
The company has configured the SQS queue with a redrive policy that specifies a target dead-letter queue and a maxReceiveCount of 1. The company has set the visibility timeout for the SQS queue to 1 hour. The company has set up an Amazon CloudWatch alarm to notify the development team when there are messages in the dead-letter queue.
Several times during the day, the development team receives notification that messages are in the dead-letter queue and that videos have not been processed properly. An investigation finds no errors in the application logs.
How can the company solve this problem?

1. A. Turn on termination protection for the EC2 instances.
2. B. Update the visibility timeout for the SOS queue to 3 hours.
3. C. Configure scale-in protection for the instances during processing.
4. D. Update the redrive policy and set maxReceiveCount to 0.

Correct Answer: D

- (Exam Topic 2)
A solutions architect is working with a company that is extremely sensitive to its IT costs and wishes to implement controls that will result in a predictable AWS spend each month Which combination ot steps can help the company control and monitor its monthly AWS usage to achieve a cost that is as close as possible to the target amount? (Select THREE.)

1. A. Implement an IAM policy that requires users to specify a 'workload' tag for cost allocation when launching Amazon EC2 instances
2. B. Contact AWS Support and ask that they apply limits to the account so that users are not able to launch more than a certain number of instance types
3. C. Purchase all upfront Reserved Instances that cover 100% of the account's expected Amazon EC2 usage
4. D. Place conditions in the users' IAM policies that limit the number of instances they are able to launch
5. E. Define 'workload' as a cost allocation tag in the AWS Billing and Cost Management console
6. F. Set up AWS Budgets to alert and notify when a given workload is expected to exceed a defined cost

Correct Answer: AEF

- (Exam Topic 2)
A company's AWS architecture currently uses access keys and secret access keys stored on each instance to access AWS services Database credentials are hard-coded on each instance SSH keys for command-line remote access are stored in a secured Amazon S3 bucket The company has asked its solutions architect to improve the security posture of the architecture without adding operational complexly.
Which combination of steps should the solutions architect take to accomplish this? (Select THREE.)

1. A. Use Amazon EC2 instance profiles with an IAM role
2. B. Use AWS Secrets Manager to store access keys and secret access keys
3. C. Use AWS Systems Manager Parameter Store to store database credentials
4. D. Use a secure fleet of Amazon EC2 bastion hosts for remote access
5. E. Use AWS KMS to store database credentials
6. F. Use AWS Systems Manager Session Manager for remote access

Correct Answer: ACF