AWS-Certified-Solutions-Architect-Professional Free Practice Test

- (Exam Topic 2)
A software development company has multiple engineers who are working remotely. The company is running Active Directory Domain Services (AD DS) on an Amazon EC2 instance. The company's security policy states that all internal, nonpublic services that are deployed in a VPC must be accessible through a VPN Multi-factor authentication (MFA) must be used for access to a VPN.
Whet should a solution architect do to meet these requirements?

1. A. Create an AWS Site-to-Site VPN connection Configure integration between a VPN and AD D
2. B. Use an Amazon Workspaces client with MFA support enabled to establish a VPN connection.
3. C. Create an AWS Client VPN endpoint Create an AD Connector directory for integration with AD DS Enable MFA for AD Connector Use AWS Client VPN to establish a VPN connection.
4. D. Create multiple AWS Site-to-Site VPN connections by using AWS VPN CloudHub Configure integration between AWS VPN CloudHub and AD DS Use AWS Cop4ot to establish a VPN connection.
5. E. Create an Amazon WorkLink endpoint Configure integration between Amazon WorkLink and AD D
6. F. Enable MFA in Amazon WorkLink Use AWS Client VPN to establish a VPN connection.

Correct Answer: B

- (Exam Topic 1)
A large company is running a popular web application. The application runs on several Amazon EC2 Linux Instances in an Auto Scaling group in a private subnet. An Application Load Balancer is targeting the Instances In the Auto Scaling group in the private subnet. AWS Systems Manager Session Manager Is configured, and AWS Systems Manager Agent is running on all the EC2 instances.
The company recently released a new version of the application Some EC2 instances are now being marked as unhealthy and are being terminated As a result, the application is running at reduced capacity A solutions architect tries to determine the root cause by analyzing Amazon CloudWatch logs that are collected from the application, but the logs are inconclusive
How should the solutions architect gain access to an EC2 instance to troubleshoot the issue1?

1. A. Suspend the Auto Scaling group's HealthCheck scaling proces
2. B. Use Session Manager to log in to an instance that is marked as unhealthy
3. C. Enable EC2 instance termination protection Use Session Manager to log In to an instance that is marked as unhealthy.
4. D. Set the termination policy to Oldestinstance on the Auto Scaling grou
5. E. Use Session Manager to log in to an instance that is marked as unhealthy
6. F. Suspend the Auto Scaling group's Terminate proces
7. G. Use Session Manager to log in to an instance that is marked as unhealthy

Correct Answer: D
https://docs.aws.amazon.com/autoscaling/ec2/userguide/as-suspend-resume-processes.html
it shows For Amazon EC2 Auto Scaling, there are two primary process types: Launch and Terminate. The Launch process adds a new Amazon EC2 instance to an Auto Scaling group, increasing its capacity. The
Terminate process removes an Amazon EC2 instance from the group, decreasing its capacity. HealthCheck process for EC2 autoscaling is not a primary process! It is a process along with the following AddToLoadBalancer AlarmNotification AZRebalance HealthCheck InstanceRefresh ReplaceUnhealthy ScheduledActions From the requirements, Some EC2 instances are now being marked as unhealthy and are being terminated. Application is running at reduced capacity not because instances are marked unhealthy but because they are being terminated.
https://docs.aws.amazon.com/autoscaling/ec2/userguide/as-suspend-resume-processes.html#choosing-suspend-r

- (Exam Topic 2)
An international delivery company hosts a delivery management system on AWS. Drivers use the system to upload confirmation of delivery. Confirmation includes the recipient's signature or a photo of the package with the recipient. The driver's handheld device uploads signatures and photos through FTP to a single Amazon EC2 instance. Each handheld device saves a file in a directory based on the signed-in user, and the file name matches the delivery number. The EC2 instance then adds metadata to the file after querying a central database to pull delivery information. The file is then placed in Amazon S3 for archiving.
As the company expands, drivers report that the system is rejecting connections. The FTP server is having problems because of dropped connections and memory issues. In response to these problems, a system engineer schedules a cron task to reboot the EC2 instance every 30 minutes. The billing team reports that files are not always in the archive and that the central system is not always updated.
A solutions architect needs to design a solution that maximizes scalability to ensure that the archive always receives the files and that systems are always updated. The handheld devices cannot be modified, so the company cannot deploy a new application.
Which solution will meet these requirements?

1. A. Create an AMI of the existing EC2 instanc
2. B. Create an Auto Scaling group of EC2 instances behind an Application Load Balance
3. C. Configure the Auto Scaling group to have a minimum of three instances.
4. D. Use AWS Transfer Family to create an FTP server that places the files in Amazon Elastic File System (Amazon EFS). Mount the EFS volume to the existing EC2 instanc
5. E. Point the EC2 instance to the new path for file processing.
6. F. Use AWS Transfer Family to create an FTP server that places the files in Amazon S3. Use an S3 event notification through Amazon Simple Notification Service (Amazon SNS) to invoke an AWS Lambda functio
7. G. Configure the Lambda function to add the metadata and update the delivery system.
8. H. Update the handheld devices to place the files directly in Amazon S3. Use an S3 event notification through Amazon Simple Queue Service (Amazon SQS) to invoke an AWS Lambda functio
9. I. Configure the Lambda function to add the metadata and update the delivery system.

Correct Answer: C

- (Exam Topic 2)
A company is running a web application in the AWS Cloud. The application consists of dynamic content that is created on a set of Amazon EC2 instances. The EC2 instances run in an Auto Scaling group that is configured as a target group for an Application Load Balancer (ALB).
The company is using an Amazon CloudFront distribution to distribute the application globally. The CloudFront distribution uses the ALB as an origin. The company uses Amazon Route 53 for DNS and has created an A record of www.example.com for the CloudFront distribution.
A solutions architect must configure the application so that itis highly available and fault tolerant. Which solution meets these requirements?

1. A. Provision a full, secondary application deployment in a different AWS Regio
2. B. Update the Route 53 A record to be a failover recor
3. C. Add both of the CloudFront distributions as value
4. D. Create Route 53 health checks.
5. E. Provision an ALB, an Auto Scaling group, and EC2 instances in a different AWS Regio
6. F. Update the CloudFront distribution, and create a second origin for the new AL
7. G. Create an origin group for the two origin
8. H. Configure one origin as primary and one origin as secondary.
9. I. Provision an Auto Scaling group and EC2 instances in a different AWS Regio
10. J. Create a second target for the new Auto Scaling group in the AL
11. K. Set up the failover routing algorithm on the ALB.
12. L. Provision a full, secondary application deployment in a different AWS Regio
13. M. Create a second CloudFront distribution, and add the new application setup as an origi
14. N. Create an AWS Global Accelerator accelerato
15. O. Add both of the CloudFront distributions as endpoints.

Correct Answer: B
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/DownloadDistS3AndCustomOrigins.h https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/high_availability_origin_failover.html
You can set up CloudFront with origin failover for scenarios that require high availability. To get started, you create an origin group with two origins: a primary and a secondary. If the primary origin is unavailable, or returns specific HTTP response status codes that indicate a failure, CloudFront automatically switches to the secondary origin.

- (Exam Topic 1)
A company needs to store and process image data that will be uploaded from mobile devices using a custom mobile app. Usage peaks between 8 AM and 5 PM on weekdays, with thousands of uploads per minute. The app is rarely used at any other time A user is notified when image processing is complete.
Which combination of actions should a solutions architect take to ensure image processing can scale to handle the load1? (Select THREE.)

1. A. Upload files from the mobile software directly to Amazon S3. Use S3 event notifications to create a message in an Amazon MQ queue.
2. B. Upload files from the mobile software directly to Amazon S3. Use S3 event notifications to create a message in an Amazon Simple Queue Service (Amazon SQS) standard queue.
3. C. Invoke an AWS Lambda function to perform image processing when a message is available in the queue.
4. D. Invoke an S3 Batch Operations job to perform image processing when a message is available in the queue.
5. E. Send a push notification to the mobile app by using Amazon Simple Notification Service (Amazon SNS) when processing is complete.
6. F. Send a push notification to the mobile app by using Amazon Simple Email Service (Amazon SES) when processing is complete.

Correct Answer: BCE
https://docs.aws.amazon.com/AmazonS3/latest/userguide/batch-ops-basics.html