AWS-Certified-Solutions-Architect-Professional Free Practice Test

- (Exam Topic 2)
An auction website enables users to bid on collectible items The auction rules require that each bid is processed only once and in the order it was received The current implementation is based on a fleet of Amazon EC2 web servers that write bid records into Amazon Kinesis Data Streams A single 12 large instance has a cron job that runs the bid processor, which reads incoming bids from Kinesis Data Streams and processes each bid The auction site is growing in popularity, but users are complaining that some bids are not registering
Troubleshooting indicates that the bid processor is too slow during peak demand hours sometimes crashes while processing and occasionally loses track of which record is being processed
What changes should make the bid processing more reliable?

1. A. Refactor the web application to use the Amazon Kinesis Producer Library (KPL) when posting bids to Kinesis Data Streams Refactor the bid processor to flag each record in Kinesis Data Streams as being unread processing and processed At the start of each bid processing run; scan Kinesis Data Streams for unprocessed records
2. B. Refactor the web application to post each incoming bid to an Amazon SNS topic in place of Kinesis Data Streams Configure the SNS topic to trigger an AWS Lambda function that
3. C. processes each bid as soon as a user submits it
4. D. Refactor the web application to post each incoming bid to an Amazon SQS FIFO queue in place of Kinesis Data Streams Refactor the bid processor to continuously consume the SQS queue Place the bid processing EC2 instance in an Auto Scaling group with a minimum and a maximum size of 1
5. E. Switch the EC2 instance type from t2 large to a larger general compute instance type Put the bid processor EC2 instances in an Auto Scaling group that scales out the number of EC2 instances running the bid processor based on the incomingRecords metric in Kinesis Data Streams

Correct Answer: C
https://aws.amazon.com/sqs/faqs/#:~:text=A single Amazon SQS message,20,000 for%2

- (Exam Topic 1)
A security engineer determined that an existing application retrieves credentials to an Amazon RDS for MySQL database from an encrypted file in Amazon S3. For the next version of the application, the security engineer wants to implement the following application design changes to improve security:
The database must use strong, randomly generated passwords stored in a secure AWS managed service.
The application resources must be deployed through AWS CloudFormation.
The application must rotate credentials for the database every 90 days.
A solutions architect will generate a CloudFormation template to deploy the application.
Which resources specified in the CloudFormation template will meet the security engineer's requirements with the LEAST amount of operational overhead?

1. A. Generate the database password as a secret resource using AWS Secrets Manage
2. B. Create an AWS Lambda function resource to rotate the database passwor
3. C. Specify a Secrets Manager RotationSchedule resource to rotate the database password every 90 days.
4. D. Generate the database password as a SecureString parameter type using AWS Systems Manager Parameter Stor
5. E. Create an AWS Lambda function resource to rotate the database passwor
6. F. Specify a Parameter Store RotationSchedule resource to rotate the database password every 90 days.
7. G. Generate the database password as a secret resource using AWS Secrets Manage
8. H. Create an AWS Lambda function resource to rotate the database passwor
9. I. Create an Amazon EventBridge scheduled rule resource to trigger the Lambda function password rotation every 90 days.
10. J. Generate the database password as a SecureString parameter type using AWS Systems Manager Parameter Stor
11. K. Specify an AWS AppSync DataSource resource to automatically rotate the database password every 90 days.

Correct Answer: A
https://aws.amazon.com/blogs/security/how-to-securely-provide-database-credentials-to-lambda-functions-by-us https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotating-secrets.html https://docs.aws.amazon.com/secretsmanager/latest/userguide/integrating_cloudformation.html

- (Exam Topic 2)
A company runs many workloads on AWS and uses AWS Organizations to manage its accounts. The workloads are hosted on Amazon EC2, AWS Fargate, and AWS Lambda. Some of the workloads have unpredictable demand. Accounts record high usage in some months and low usage in other months.
The company wants to optimize its compute costs over the next 3 years. A solutions architect obtains a 6-month average for each of the accounts across the organization to calculate usage.
Which solution will provide the MOST cost savings for all the organization's compute usage?

1. A. Purchase Reserved Instances for the organization to match the size and number of the most common EC2 instances from the member accounts.
2. B. Purchase a Compute Savings Plan for the organization from the management account by using the recommendation at the management account level.
3. C. Purchase Reserved Instances for each member account that had high EC2 usage according to the data from the last 6 months.
4. D. Purchase an EC2 Instance Savings Plan for each member account from the management account based on EC2 usage data from the last 6 months.

Correct Answer: A

- (Exam Topic 1)
A company is developing and hosting several projects in the AWS Cloud. The projects are developed across multiple AWS accounts under the same organization in AWS Organizations. The company requires the cost lor cloud infrastructure to be allocated to the owning project. The team responsible for all of the AWS accounts has discovered that several Amazon EC2 instances are lacking the Project tag used for cost allocation.
Which actions should a solutions architect take to resolve the problem and prevent it from happening in the future? (Select THREE.)

1. A. Create an AWS Config rule in each account to find resources with missing tags.
2. B. Create an SCP in the organization with a deny action for ec2:Runlnstances if the Project tag is missing.
3. C. Use Amazon Inspector in the organization to find resources with missing tags.
4. D. Create an IAM policy in each account with a deny action for ec2:RunInstances if the Project tag is missing.
5. E. Create an AWS Config aggregator for the organization to collect a list of EC2 instances with the missing Project tag.
6. F. Use AWS Security Hub to aggregate a list of EC2 instances with the missing Project tag.

Correct Answer: CDE

- (Exam Topic 1)
A company is migrating its three-tier web application from on-premises to the AWS Cloud. The company has the following requirements for the migration process:
• Ingest machine images from the on-premises environment.
• Synchronize changes from the on-premises environment to the AWS environment until the production cutover.
• Minimize downtime when executing the production cutover.
• Migrate the virtual machines' root volumes and data volumes.
Which solution will satisfy these requirements with minimal operational overhead?

1. A. Use AWS Server Migration Service (SMS) to create and launch a replication job for each tier of the applicatio
2. B. Launch instances from the AMIs created by AWS SM
3. C. After initial testing, perform a final replication and create new instances from the updated AMIs.
4. D. Create an AWS CLIVM Import/Export script to migrate each virtual machin
5. E. Schedule the script to run incrementally to maintain changes in the applicatio
6. F. Launch instances from the AMIs created by VM Import/Expor
7. G. Once testing is done, rerun the script to do a final import and launch the instances from the AMIs.
8. H. Use AWS Server Migration Service (SMS) to upload the operating system volume
9. I. Use the AWS CLI import-snaps hot command 'or the data volume
10. J. Launch instances from the AMIs created by AWSSMS and attach the data volumes to the instance
11. K. After initial testing, perform a final replication, launch new instances from the replicated AMI
12. L. and attach the data volumes to the instances.
13. M. Use AWS Application Discovery Service and AWS Migration Hub to group the virtual machines as an applicatio
14. N. Use the AWS CLI VM Import/Export script to import the virtual machines as AMI
15. O. Schedule the script to run incrementally to maintain changes in the applicatio
16. P. Launch instances from the AMI
17. Q. After initial testing, perform a final virtual machine import and launch new instances from the AMIs.

Correct Answer: A
SMS can handle migrating the data volumes:
https://aws.amazon.com/about-aws/whats-new/2018/09/aws-server-migration-service-adds-support-for-migratin