AWS-Certified-Solutions-Architect-Professional Free Practice Test

- (Exam Topic 2)
A company uses multiple AWS accounts in a single AWS Region A solutions architect is designing a solution to consolidate logs generated by Elastic Load Balancers (ELBs) in the AppDev, AppTest and AppProd accounts. The logs should be stored in an existing Amazon S3 bucket named s3-eib-logs in the central AWS account. The central account is used for log consolidation only and does not have ELBs deployed ELB logs must be encrypted at rest
Which combination of steps should the solutions architect take to build the solution'' (Select TWO )

1. A. Update the S3 bucket policy for the s3-elb-logs bucket to allow the s3 PutBucketLogging action for the central AWS account ID
2. B. Update the S3 bucket policy for the s3-eib-logs bucket to allow the s3 PutObject and s3 DeleteObject actions for the AppDev AppTest and AppProd account IDs
3. C. Update the S3 bucket policy for the s3-elb-logs bucket to allow the s3 PutObject action for the AppDev AppTest and AppProd account IDs
4. D. Enable access logging for the ELB
5. E. Set the S3 location to the s3-elb-logs bucket
6. F. Enable Amazon S3 default encryption using server-side encryption with S3 managed encryption keys (SSE-S3) for the s3-elb-logs S3 bucket

Correct Answer: AE

- (Exam Topic 2)
A company used Amazon EC2 instances to deploy a web fleet to host a blog site The EC2 instances are behind an Application Load Balancer (ALB) and are configured in an Auto ScaSng group The web application stores all blog content on an Amazon EFS volume.
The company recently added a feature 'or Moggers to add video to their posts, attracting 10 times the previous user traffic At peak times of day. users report buffering and timeout issues while attempting to reach the site or watch videos
Which is the MOST cost-efficient and scalable deployment that win resolve the issues for users?

1. A. Reconfigure Amazon EFS to enable maximum I/O.
2. B. Update the Nog site to use instance store volumes tor storag
3. C. Copy the site contents to the volumes at launch and to Amazon S3 al shutdown.
4. D. Configure an Amazon CloudFront distributio
5. E. Point the distribution to an S3 bucket, and migrate the videos from EFS to Amazon S3.
6. F. Set up an Amazon CloudFront distribution for all site contents, and point the distribution at the ALB.

Correct Answer: C
https://aws.amazon.com/premiumsupport/knowledge-center/cloudfront-https-connection-fails/ Using an Amazon S3 bucket
Using a MediaStore container or a MediaPackage channel Using an Application Load Balancer
Using a Lambda function URL
Using Amazon EC2 (or another custom origin)
Using CloudFront origin groups https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/restrict-access-to-load-balancer.html

- (Exam Topic 2)
A company is deploying a distributed in-memory database on a fleet of Amazon EC2 instances. The fleet consists of a primary node and eight worker nodes. The primary node is responsible for monitoring cluster health, accepting user requests, distributing user requests to worker nodes and sending an aggregate response back to a client. Worker nodes communicate with each other to replicate data partitions.
The company requires the lowest possible networking latency to achieve maximum performance. Which solution will meet these requirements?

1. A. Launch memory optimized EC2 instances in a partition placement group
2. B. Launch compute optimized EC2 instances in a partition placement group
3. C. Launch memory optimized EC2 instances in a cluster placement group
4. D. Launch compute optimized EC2 instances in a spread placement group.

Correct Answer: B

- (Exam Topic 2)
A company that has multiple AWS accounts is using AWS Organizations. The company’s AWS accounts host VPCs, Amazon EC2 instances, and containers.
The company’s compliance team has deployed a security tool in each VPC where the company has deployments. The security tools run on EC2 instances and send information to the AWS account that is dedicated for the compliance team. The company has tagged all the compliance-related resources with a key of “costCenter” and a value or “compliance”.
The company wants to identify the cost of the security tools that are running on the EC2 instances so that the company can charge the compliance team’s AWS account. The cost calculation must be as accurate as possible.
What should a solutions architect do to meet these requirements?

1. A. In the management account of the organization, activate the costCenter user-defined ta
2. B. Configure monthly AWS Cost and Usage Reports to save to an Amazon S3 bucket in the management accoun
3. C. Use the tag breakdown in the report to obtain the total cost for the costCenter tagged resources.
4. D. In the member accounts of the organization, activate the costCenter user-defined ta
5. E. Configure monthly AWS Cost and Usage Reports to save to an Amazon S3 bucket in the management accoun
6. F. Schedule a monthly AWS Lambda function to retrieve the reports and calculate the total cost for the costCenter tagged resources.
7. G. In the member accounts of the organization activate the costCenter user-defined ta
8. H. From the management account, schedule a monthly AWS Cost and Usage Repor
9. I. Use the tag breakdown in the report to calculate the total cost for the costCenter tagged resources.
10. J. Create a custom report in the organization view in AWS Trusted Adviso
11. K. Configure the report to generate a monthly billing summary for the costCenter tagged resources in the compliance team’s AWS account.

Correct Answer: C

- (Exam Topic 2)
A company is launching a web-based application in multiple regions around the world The application consists of both static content stored in a private Amazon S3 bucket and dyna ECS containers behind an Application Load Balancer (ALB) The company requires that the static and dynamic application content be accessible through Amazon CloudFront only
Which combination of steps should a solutions architect recommend to restrict direct content access to CloudFront? (Select THREE)

1. A. Create a web ACL in AWS WAF with a rule to validate the presence of a custom header and associate the web ACL with the ALB
2. B. Create a web ACL in AWS WAF with a rule to validate the presence of a custom header and associate the web ACL with the CloudFront distribution
3. C. Configure CloudFront to add a custom header to origin requests
4. D. Configure the ALB to add a custom header to HTTP requests
5. E. Update the S3 bucket ACL to allow access from the CloudFront distribution only
6. F. Create a CloudFront Origin Access Identity (OAI) and add it to the CloudFront distribution Update the S3 bucket policy to allow access to the OAI only

Correct Answer: ACF