AWS-Certified-Solutions-Architect-Professional Free Practice Test

- (Exam Topic 1)
A large payroll company recently merged with a small staffing company. The unified company now has multiple business units, each with its own existing AWS account.
A solutions architect must ensure that the company can centrally manage the billing and access policies for all the AWS accounts. The solutions architect configures AWS Organizations by sending an invitation to all member accounts of the company from a centralized management account.
What should the solutions architect do next to meet these requirements?

1. A. Create the OrganizationAccountAccess IAM group in each member accoun
2. B. Include the necessary IAM roles for each administrator.
3. C. Create the OrganizationAccountAccessPolicy IAM policy in each member accoun
4. D. Connect the member accounts to the management account by using cross-account access.
5. E. Create the OrganizationAccountAccessRole IAM role in each member accoun
6. F. Grant permission to the management account to assume the IAM role.
7. G. Create the OrganizationAccountAccessRole IAM role in the management account Attach the Administrator Access AWS managed policy to the IAM rol
8. H. Assign the IAM role to the administrators in each member account.

Correct Answer: C

- (Exam Topic 1)
The company needs to determine which costs on the monthly AWS bill are attributable to each application or team. The company also must be able to create reports to compare costs from the last 12 months and to help forecast costs for the next 12 months. A solutions architect must recommend an AWS Billing and Cost Management solution that provides these cost reports.
Which combination of actions will meet these requirements? (Select THREE.)

1. A. Activate the user-defined cost allocation tags that represent the application and the team.
2. B. Activate the AWS generated cost allocation tags that represent the application and the team.
3. C. Create a cost category for each application in Billing and Cost Management.
4. D. Activate IAM access to Billing and Cost Management.
5. E. Create a cost budget.
6. F. Enable Cost Explorer.

Correct Answer: ACF
https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/manage-cost-categories.html https://aws.amazon.com/premiumsupport/knowledge-center/cost-explorer-analyze-spending-and-usage/ https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/manage-cost-categories.html
https://docs.aws.amazon.com/cost-management/latest/userguide/ce-enable.html

- (Exam Topic 1)
A company uses an on-premises data analytics platform. The system is highly available in a fully redundant configuration across 12 servers in the company's data center.
The system runs scheduled jobs, both hourly and daily, in addition to one-time requests from users. Scheduled jobs can take between 20 minutes and 2 hours to finish running and have tight SLAs. The scheduled jobs account for 65% of the system usage. User jobs typically finish running in less than 5 minutes and have no SLA. The user jobs account for 35% of system usage. During system failures, scheduled jobs must continue to meet SLAs. However, user jobs can be delayed.
A solutions architect needs to move the system to Amazon EC2 instances and adopt a consumption-based model to reduce costs with no long-term commitments. The solution must maintain high availability and must not affect the SLAs.
Which solution will meet these requirements MOST cost-effectively?

1. A. Split the 12 instances across two Availability Zones in the chosen AWS Regio
2. B. Run two instances in each Availability Zone as On-Demand Instances with Capacity Reservation
3. C. Run four instances in each Availability Zone as Spot Instances.
4. D. Split the 12 instances across three Availability Zones in the chosen AWS Regio
5. E. In one of the Availability Zones, run all four instances as On-Demand Instances with Capacity Reservation
6. F. Run the remaining instances as Spot Instances.
7. G. Split the 12 instances across three Availability Zones in the chosen AWS Regio
8. H. Run two instances in each Availability Zone as On-Demand Instances with a Savings Pla
9. I. Run two instances in each Availability Zone as Spot Instances.
10. J. Split the 12 instances across three Availability Zones in the chosen AWS Regio
11. K. Run three instances in each Availability Zone as On-Demand Instances with Capacity Reservation
12. L. Run one instance in each Availability Zone as a Spot Instance.

Correct Answer: D

- (Exam Topic 2)
A company has deployed an application to multiple environments in AWS. including production and testing the company has separate accounts for production and testing, and users are allowed to create additional application users for team members or services. as needed. The security team has asked the operations team tor better isolation between production and testing with centralized controls on security credentials and improved management of permissions between environments
Which of the following options would MOST securely accomplish this goal?

1. A. Create a new AWS account to hold user and service accounts, such as an identity account Create users and groups m the identity accoun
2. B. Create roles with appropriate permissions in the production and testing accounts Add the identity account to the trust policies for the roles
3. C. Modify permissions in the production and testing accounts to limit creating new IAM users to members of the operations team Set a strong IAM password policy on each account Create new IAM users and groups in each account to Limit developer access to just the services required to complete their job function.
4. D. Create a script that runs on each account that checks user accounts For adherence to a security policy.Disable any user or service accounts that do not comply.
5. E. Create all user accounts in the production account Create roles for access in me production account and testing account
6. F. Grant cross-account access from the production account to the testing account

Correct Answer: A

- (Exam Topic 2)
A company wants to migrate its website from an on-premises data center onto AWS At the same time it wants to migrate the website to a containerized microservice-based architecture to improve the availability and cost efficiency The company's security policy states that privileges and network permissions must be configured according to best practice, using least privilege
A solutions architect must create a containerized architecture that meets the security requirements and has deployed the application to an Amazon ECS cluster
What steps are required after the deployment to meet the requirements'? (Select TWO.)

1. A. Create tasks using the bridge network mode
2. B. Create tasks using the awsvpc network mode
3. C. Apply security groups to Amazon EC2 instances and use IAM roles for EC2 instances to access other resources
4. D. Apply security groups to the tasks, and pass IAM credentials into the container at launch time to access other resources
5. E. Apply security groups to the tasks; and use IAM roles for tasks to access other resources

Correct Answer: BE