AWS-Solution-Architect-Associate Free Practice Test

- (Exam Topic 3)
A company is building a new web-based customer relationship management application. The application will use several Amazon EC2 instances that are backed by Amazon Elastic Block Store (Amazon EBS) volumes behind an Application Load Balancer (ALB). The application will also use an Amazon Aurora database. All data for the application must be encrypted at rest and in transit.
Which solution will meet these requirements?

1. A. Use AWS Key Management Service (AWS KMS) certificates on the ALB to encrypt data in transi
2. B. Use AWS Certificate Manager (ACM) to encrypt the EBS volumes and Aurora database storage at rest.
3. C. Use the AWS root account to log in to the AWS Management Consol
4. D. Upload the company’s encryption certificate
5. E. While in the root account, select the option to turn on encryption for all data at rest and in transit for the account.
6. F. Use a AWS Key Management Service (AWS KMS) to encrypt the EBS volumes and Aurora database storage at res
7. G. Attach an AWS Certificate Manager (ACM) certificate to the ALB to encrypt data in transit.
8. H. Use BitLocker to encrypt all data at res
9. I. Import the company’s TLS certificate keys to AWS key Management Service (AWS KMS). Attach the KMS keys to the ALB to encrypt data in transit.

Correct Answer: C

- (Exam Topic 3)
A company has a popular gaming platform running on AWS. The application is sensitive to latency because latency can impact the user experience and introduce unfair advantages to some players. The application is deployed in every AWS Region. It runs on Amazon EC2 instances that are part of Auto Scaling groups configured behind Application Load Balancers (ALBs). A solutions architect needs to implement a mechanism to monitor the health of the application and redirect traffic to healthy endpoints.
Which solution meets these requirements?

1. A. Configure an accelerator in AWS Global Accelerato
2. B. Add a listener for the port that the application listens on, and attach it to a Regional endpoint in each Regio
3. C. Add the ALB as the endpoint.
4. D. Create an Amazon CloudFront distribution and specify the ALB as the origin serve
5. E. Configure the cache behavior to use origin cache header
6. F. Use AWS Lambda functions to optimize the traffic.
7. G. Create an Amazon CloudFront distribution and specify Amazon S3 as the origin serve
8. H. Configure the cache behavior to use origin cache header
9. I. Use AWS Lambda functions to optimize the traffic.
10. J. Configure an Amazon DynamoDB database to serve as the data store for the applicatio
11. K. Create a DynamoDB Accelerator (DAX) cluster to act as the in-memory cache for DynamoDB hosting the application data.

Correct Answer: A
AWS Global Accelerator directs traffic to the optimal healthy endpoint based on health checks, it can also route traffic to the closest healthy endpoint based on geographic location of the client. By configuring an accelerator and attaching it to a Regional endpoint in each Region, and adding the ALB as the endpoint, the solution will redirect traffic to healthy endpoints, improving the user experience by reducing latency and ensuring that the application is running optimally. This solution will ensure that traffic is directed to the closest healthy endpoint and will help to improve the overall user experience.

- (Exam Topic 3)
A company is developing a marketing communications service that targets mobile app users. The company needs to send confirmation messages with Short Message Service (SMS) to its users. The users must be able to reply to the SMS messages. The company must store the responses for a year for analysis.
What should a solutions architect do to meet these requirements?

1. A. Create an Amazon Connect contact flow to send the SMS message
2. B. Use AWS Lambda to process the responses.
3. C. Build an Amazon Pinpoint journe
4. D. Configure Amazon Pinpoint to send events to an Amazon Kinesis data stream for analysis and archiving.
5. E. Use Amazon Simple Queue Service (Amazon SQS) to distribute the SMS message
6. F. Use AWS Lambda to process the responses.
7. G. Create an Amazon Simple Notification Service (Amazon SNS) FIFO topi
8. H. Subscribe an Amazon Kinesis data stream to the SNS topic for analysis and archiving.

Correct Answer: B
https://aws.amazon.com/pinpoint/product-details/sms/ Two-Way Messaging: Receive SMS messages from your customers and reply back to them in a chat-like interactive experience. With Amazon Pinpoint, you can create automatic responses when customers send you messages that contain certain keywords. You can even use Amazon Lex to create conversational bots. A majority of mobile phone users read incoming SMS messages almost immediately after receiving them. If you need to be able to provide your customers with urgent or important information, SMS messaging may be the right solution for you. You can use Amazon Pinpoint to create targeted groups of customers, and then send them campaign-based messages. You can also use Amazon Pinpoint to send direct messages, such as appointment confirmations, order updates, and one-time passwords.

- (Exam Topic 2)
A company's web application is running on Amazon EC2 instances behind an Application Load Balancer. The company recently changed its policy, which now requires the application to be accessed from one specific country only.
Which configuration will meet this requirement?

1. A. Configure the security group for the EC2 instances.
2. B. Configure the security group on the Application Load Balancer.
3. C. Configure AWS WAF on the Application Load Balancer in a VPC.
4. D. Configure the network ACL for the subnet that contains the EC2 instances.

Correct Answer: C
https://aws.amazon.com/about-aws/whats-new/2017/10/aws-waf-now-supports-geographic-match/

- (Exam Topic 3)
A company is concerned that two NAT instances in use will no longer be able to support the traffic needed for the company’s application. A solutions architect wants to implement a solution that is highly available, fault tolerant, and automatically scalable.
What should the solutions architect recommend?

1. A. Remove the two NAT instances and replace them with two NAT gateways in the same Availability Zone.
2. B. Use Auto Scaling groups with Network Load Balancers for the NAT instances in different Availability Zones.
3. C. Remove the two NAT instances and replace them with two NAT gateways in different Availability Zones.
4. D. Replace the two NAT instances with Spot Instances in different Availability Zones and deploy a Network Load Balancer.

Correct Answer: C
If you have resources in multiple Availability Zones and they share one NAT gateway, and if the NAT
gateway’s Availability Zone is down, resources in the other Availability Zones lose internet access. To create an Availability Zone-independent architecture, create a NAT gateway in each Availability Zone and configure your routing to ensure that resources use the NAT gateway in the same Availability Zone. https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html#nat-gateway-basics