AWS-Solution-Architect-Associate Free Practice Test

- (Exam Topic 3)
A company has migrated an application to Amazon EC2 Linux instances. One of these EC2 instances runs several 1-hour tasks on a schedule. These tasks were written by different teams and have no common programming language. The company is concerned about performance and scalability while these tasks run on a single instance. A solutions architect needs to implement a solution to resolve these concerns.
Which solution will meet these requirements with the LEAST operational overhead?

1. A. Use AWS Batch to run the tasks as job
2. B. Schedule the jobs by using Amazon EventBridge (Amazon CloudWatch Events).
3. C. Convert the EC2 instance to a containe
4. D. Use AWS App Runner to create the container on demand to run the tasks as jobs.
5. E. Copy the tasks into AWS Lambda function
6. F. Schedule the Lambda functions by using AmazonEventBridge (Amazon CloudWatch Events).
7. G. Create an Amazon Machine Image (AMI) of the EC2 instance that runs the task
8. H. Create an Auto Scaling group with the AMI to run multiple copies of the instance.

Correct Answer: C

- (Exam Topic 2)
A company has an event-driven application that invokes AWS Lambda functions up to 800 times each minute with varying runtimes. The Lambda functions access data that is stored in an Amazon Aurora MySQL OB cluster. The company is noticing connection timeouts as user activity increases The database shows no signs of being overloaded. CPU. memory, and disk access metrics are all low.
Which solution will resolve this issue with the LEAST operational overhead?

1. A. Adjust the size of the Aurora MySQL nodes to handle more connection
2. B. Configure retry logic in the Lambda functions for attempts to connect to the database
3. C. Set up Amazon ElastiCache tor Redls to cache commonly read items from the databas
4. D. Configure the Lambda functions to connect to ElastiCache for reads.
5. E. Add an Aurora Replica as a reader nod
6. F. Configure the Lambda functions to connect to the reader endpoint of the OB cluster rather than lo the writer endpoint.
7. G. Use Amazon ROS Proxy to create a prox
8. H. Set the DB cluster as the target database Configure the Lambda functions lo connect to the proxy rather than to the DB cluster.

Correct Answer: D

- (Exam Topic 3)
A company is launching a new application deployed on an Amazon Elastic Container Service (Amazon ECS) cluster and is using the Fargate launch type tor ECS tasks The company is monitoring CPU and memory usage because it is expecting high traffic to the application upon its launch However the company wants to reduce costs when utilization decreases
What should a solutions architect recommend?

1. A. Use Amazon EC2 Auto Scaling to scale at certain periods based on previous traffic patterns
2. B. Use an AWS Lambda function to scale Amazon ECS based on metric breaches that trigger an Amazon CloudWatch alarm
3. C. Use Amazon EC2 Auto Scaling with simple scaling policies to scale when ECS metric breaches trigger an Amazon CloudWatch alarm
4. D. Use AWS Application Auto Scaling with target tracking policies to scale when ECS metric breaches trigger an Amazon CloudWatch alarm

Correct Answer: C

- (Exam Topic 3)
A company needs to retain its AWS CloudTrail logs for 3 years. The company is enforcing CloudTrail across a set of AWS accounts by using AWS Organizations from the parent account. The CloudTrail target S3 bucket is configured with S3 Versioning enabled. An S3 Lifecycle policy is in place to delete current objects after 3 years.
After the fourth year of use of the S3 bucket, the S3 bucket metrics show that the number of objects has continued to rise. However, the number of new CloudTrail logs that are delivered to the S3 bucket has remained consistent.
Which solution will delete objects that are older than 3 years in the MOST cost-effective manner?

1. A. Configure the organization’s centralized CloudTrail trail to expire objects after 3 years.
2. B. Configure the S3 Lifecycle policy to delete previous versions as well as current versions.
3. C. Create an AWS Lambda function to enumerate and delete objects from Amazon S3 that are older than 3 years.
4. D. Configure the parent account as the owner of all objects that are delivered to the S3 bucket.

Correct Answer: B
https://docs.aws.amazon.com/awscloudtrail/latest/userguide/best-practices-security.html#:~:text=The Cloud

- (Exam Topic 1)
A solutions architect is developing a multiple-subnet VPC architecture. The solution will consist of six subnets in two Availability Zones. The subnets are defined as public, private and dedicated for databases. Only the Amazon EC2 instances running in the private subnets should be able to access a database.
Which solution meets these requirements?

1. A. Create a now route table that excludes the route to the public subnets' CIDR block
2. B. Associate the route table to the database subnets.
3. C. Create a security group that denies ingress from the security group used by instances in the public subnet
4. D. Attach the security group to an Amazon RDS DB instance.
5. E. Create a security group that allows ingress from the security group used by instances in the private subnet
6. F. Attach the security group to an Amazon RDS DB instance.
7. G. Create a new peering connection between the public subnets and the private subnet
8. H. Create a different peering connection between the private subnets and the database subnets.

Correct Answer: C
Security groups are stateful. All inbound traffic is blocked by default. If you create an inbound rule allowing traffic in, that traffic is automatically allowed back out again. You cannot block specific IP address using Security groups (instead use Network Access Control Lists).
"You can specify allow rules, but not deny rules." "When you first create a security group, it has no inbound rules. Therefore, no inbound traffic originating from another host to your instance is allowed until you add inbound rules to the security group." Source: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_SecurityGroups.html#VPCSecurityGroups