AWS Certified Solutions Architect (SAA-C03) Practice Exam #1

You have just launched an EC2 instance in a subnet into your VPC. After investigation, you have realized that the EC2 instance isn’t accessible from the Internet. What could be the primary cause of this issue?

A social media application that collects, processes, and analyzes feed data in real-time is using Kinesis Data Streams. What service will you use to send stream records directly to services such as Amazon Simple Storage Service (Amazon S3) or Amazon Redshift instead of creating a consumer application?

Your web application is on a fleet of EC2 instances located in three Availability Zones which are behind an Application Load Balancer. Which health check configuration will you implement to ensure that your web app is highly-available?

Your new online event management application is hosted in AWS. The application uses Multi-AZ RDS for its database tier, which has a standby replica. What are the events that will make Amazon RDS to automatically perform a failover to the standby replica? (Select all that apply.)

You have just hosted a website in an Amazon S3 bucket named examsdigest. The URL that loads the website is http://examsdigest.s3-website-eu-west-1.amazonaws.com. Now you want to use JavaScript on the webpages that are stored in this bucket to be able to make authenticated GET and PUT requests against the same bucket by using the Amazon S3 API endpoint for the bucket. The web browser blocks Javascript to make the requests.

What solution will you implement to allow the requests?

You have recently launched an EC2 instance that is hosting your new web application. The volume of users is expected to grow in the coming days as you are planning to post the product on producthunt.com. What AWS services will you use in order to handle the demand and keep the users satisfied? (Choose two answers)

Your new educational app for high-school students uses Amazon Cognito to handle user authentication and authorization. Now, you are thinking to add another method of authentication in addition to just a username and password to make the app more secure.

What solution will you implement to add the extra layer of security?

A company wants to add an additional layer of protection from web attacks that attempt to exploit vulnerabilities to its web app. The company needs to create rules to filter web traffic based on specific IP addresses and block common web exploits like SQL injection and cross-site scripting.

Which of the following AWS service meet these requirements?

You have been tasked to improve the security of the data flow between your Amazon Redshift cluster and other resources. The very first step is to use VPC flow logs to monitor all the COPY and UNLOAD traffic of your Redshift cluster that moves in and out of your VPC.

Which of the following option is the most suitable solution to improve the security of your data?

An IoT company hosts large volumes of data that are approximately 300 TB in size on their internal servers. They have decided to migrate the data to S3. The company currently has a poor connection line connecting its head office to the Internet.

Which of the following is the best way to import all these data to Amazon S3?

In Amazon EC2, you manage instance transitions through different states from the moment you launch it through to its termination. In some instance states, you are billed for the EC2 usage, while in other instance states, not.

In which of the following instance states the EC2 instance is billed for the usage? (Choose all the apply)

A company is hosting EC2 instances that are on a non-production environment and processing data analysis, batch jobs, background processing, and optional non-critical tasks.

Which of the following instance purchasing option considered the most cost-effective choice for our case?

A company has just launched a gamification feature on its mobile app that stores the score of the players to a DynamoDB table. You have been tasked to design a solution to trigger a Lambda function whenever the LeaderBoard attribute of the PlayerScore table is updated. The Lambda function would post a congratulatory message on a social media network.

What’s the best solution that can be implemented to trigger the Lambda function on specific events?

Which of the following is not a scenario for using Kinesis Data Streams?

An IoT application requires a service that can collect, process, and analyze IoT telemetry data for machine learning in real-time. Which of the following is the most suitable AWS service to use for the application?

Your company has just launched a new application that will be deployed on AWS which runs multiple components in Docker containers. Your company decides to use AWS managed infrastructure for running the containers as they do not want to manage EC2 instances.

Which of the following solution would address the requirement? (Choose two)

You are designing a service to host containers from several customers on Amazon ECS. These containers will use several AWS services. What solution will you implement in order to avoid containers from customers to get access to each other’s data?

A mobile app development company operates several apps such as social media apps, entertainment apps, and lifestyle apps that use various RESTful web APIs hosted on their on-premises data center. Due to the unprecedented growth of their company, they decided to migrate their system to AWS Cloud to scale out their resources as well to minimize costs. The company hired you to implement a solution that meets the above requirement.

Which of the following solution will you implement?

There is a real-time data analytics application called DataAnalytics APP that uses AWS Lambda to process data and store the results in JSON format to an S3 bucket. In order to speed up the workflow, you have to use a service where you can run sophisticated Big Data analytics on your data without moving them into a separate analytics system.

Which of the following services will you use to meet the above requirement? (Choose three answers)

You must specifically create a network path between your cluster’s VPC and your data resources otherwise COPY and UNLOAD commands might fail if the VPC is not configured correctly.

You have set up a VPC with a public subnet and the Internet gateway attached. You set up an EC2 instance with a public IP as well. The rule type and the rule source of the security group are ‘All Traffic’ and ‘0.0.0.0/0’ respectively. However, you are still not able to connect to the instance via the Internet.

How to resolve the issue in this case?

The startup you are working for has a fleet of Amazon EC2 instances that process student’s performance data and then outputs reports based on the student’s performance. The reports should be stored in durable storage as the startup expanding and also they need a solution to distribute the files to students across the globe as fast as possible.

Which of the following is a cost-efficient and scalable storage option that meets the requirements?

You are working on a Video Resume maker app that can be used as a repository for videos by candidates. When a candidate uploads a video, the video would be sent to Kinesis for processing before it is stored in an S3 bucket. Once the video is uploaded a success notification is sent to the candidate. The process takes approximately 7 minutes to finish.

Which of the following options will allow you to asynchronously process the request to the application in the most cost-effective way?

You have a distributed application in AWS that periodically processes large volumes of data across multiple instances. You designed the application to recover gracefully from any instance failures. You are required to launch the application in the most cost-effective way.

Which type of EC2 instance will meet your requirements?

Which of the following AWS feature helps you ensure that you have the correct number of Amazon EC2 instances available to handle the load for your application?

Which of the following Amazon EBS volume types allows you to predictably scale to tens of thousands of IOPS (input/output operations per second) per EC2 instance?

Your Online Travel Agent (OTA) startup in California recently faced tremendous growth. Users from all over the world started using the APP. After investigation, you noticed 60% of the traffic was originated from Germany. Because of this, you decide to localize your content and present all of your website’s content in German to the users from Germany and English to the rest of the users. Also, you want all queries from Europe to be routed to an ELB load balancer in the Frankfurt region.

Which of the following services would allow you to fulfill this requirement?

An application that you will be deploying in your VPC requires 30 EC2 instances. You need to implement a strategy to avoid a single point of failure for your EC2 instances in case of hardware failure.

Which of the following placement group will be used to address the requirement?

A new VR/AR platform is using Docker considering that application containers are optimal for running small, decoupled services. You have been tasked to implement a solution that removes the need to provision and manage servers, pay for resources per application, and improve security through application isolation by design.

Which of the following AWS service will be used for this new platform?

You have been hired by a company that is in need of a storage solution that can be simultaneously accessed by 500 servers in multiple availability zones. The servers are hosted in EC2 instances. The solution you have been tasked to implement should be able to handle the rapidly changing data at scale while still maintaining high performance. It should also be highly durable and highly available whenever the servers will pull data from it, with little need for management.

Which of the following solutions will you implement?

At ExamsDigest we use machine learning technologies to collect and analyze data, and we use Amazon Redshift for a data warehouse. Now, we need your help to implement a disaster recovery plan for ExamsDigest to automatically back up our cluster to a second AWS region in the event of an AWS region outage.

Which of the following option will you suggest to implement?

Answer the fill-in-the-blank by typing one of the following options:

CloudWatch    CloudTrail    Lambda    CloudMonitor

Assuming you are working for a company in the gaming APP industry. The demand for your applications is growing but the performance of your APPs decreases drastically. You have been tasked to improve the performance by integrating an in-memory data store to your applications using ElastiCache.

How does Amazon ElastiCache improve database performance?

You are working for an eCommerce startup as a Solutions Architect. You have been tasked to implement a solution so each time the inventory level of a specific product collection reaches the threshold of out-of-stock, only then to get notified instantly for this event.

Which AWS service will you use to accomplish this requirement?

You are an AWS consultant for a company that currently has an on-premises infrastructure and they have a plan to extend their storage capacity using AWS services. Which AWS service can help the company to achieve this requirement?

It is considered as a best practice to rely on instance store for valuable, long-term data, instead of using Amazon S3, Amazon EBS, or Amazon EFS.

You are deploying an application on Amazon EC2 that call AWS APIs. Which method of securely passing credentials to the application should you use?

You are developing an application that uses Python Lambda functions. You need to store some sensitive data such as credentials for accessing the database. How will you store this data securely and adjust your function’s behavior without updating code?

You have just launched an SFTP Secure Server Windows using an On-Demand EC2 instance in a newly created VPC named vpc-0e359265 with default settings. The server should not be accessible publicly but only through your IP address 155.144.123.12.

Which of the following is the most suitable way to implement this requirement?

A company wants to incorporate a single sign-on feature from its corporate Active Directory. The company also wants to restrict access for each individual user to a designated user folder in an S3 bucket.

Which of the following statements can meet the requirement? (Select all that apply)

For data privacy, a European company has been asked to comply with the General Data Protection Regulation (GDRP). They have been told that all of the data being transferred and stored to Amazon Simple Storage Service (S3) must be encrypted.

What is the best option to do this? (Choose all that apply)

In your startup, there is a requirement to allow one IAM user to modify the configuration of the security groups and placement groups which are used in a specific project. Each engineer and developer in your startup has an individual IAM user and they usually move from one project to another.

Which of the following would be the best way to allow this access?

You are working as a Solutions Architect for a startup that develops a Social media app. The Social Media App is expected to receive a significant load in the upcoming days that could scale to millions of messages. As you are unsure of the load required for the database layer what is the most cost-effective way to ensure that the messages are not dropped?

You are developing a web app for restaurant tables reservation and you need a managed service to send a text message to users every time a reservation is confirmed.

Which AWS service will you use to achieve this?

Assuming, you manage 500 third party resources such as YourCompany::Dashboard::Instance. You perform one daily operation on each of the resources. We’ll assume that none of the handler operations, in this case, are above the 30s threshold.

Which of the following is your monthly AWS CloudFormation bill?

Predictive scaling uses machine learning to analyze each resource’s historical workload and regularly forecasts the future load for the next two days, whereas Dynamic scaling creates target tracking scaling policies for the resources in your scaling plan. (True or False)

You have been tasked to migrate all of your company’s Windows-based applications to AWS. The only requirement is that the storage service must have full support for the Server Message Block protocol, Active Directory (AD) integration, and Distributed File System (DFS).

Which of the following storage service will be used to complete the migration according to the requirement?

An eCommerce marketplace uses an Auto Scaling group of EC2 instances, in multiple Availability Zones with an Application Load Balancer, to increase the availability and performance of the app. To better serve the users you decide to localize the content of the website, so each time users from Germany visit the site will be directed to de.marketplace.com and users from China to ch.marketplace.com.

Which of the following rule condition type allows you to route requests to multiple domains using a single load balancer?

You are working for an audio streaming startup as an AWS Architect. You have been tasked to design a serverless application that will accept audio files uploaded by users from around the world. The application will make API calls to back-end services and save the number of uploaded files of the users to a database.

Which combination of services would provide a solution that is cost-effective while delivering the least latency?

You are working on a blockchain application in AWS which will be deployed in an Auto Scaling group of On-Demand EC2 instances and a MySQL database. It is expected that the database will have high-throughput workloads performing intensive I/O operations. As the Solutions Architect, you are required to properly set up and launch the required resources in AWS.

Which of the following is the most suitable EBS type to use for your database?

Which of the following options can be used to apply specific-settings in one go for all of the Relational database instances?

Match the AWS analytics services with the respective descriptions.

You are working as a site reliability engineer (SRE) for a large US-based IT company. You have been tasked to find an automated way to monitor and resolve issues with their on-demand EC2 instances.

Which of the following option can be used to automatically monitor the EC2 instances and notify you for any possible incident?

Answer the fill-in-the-blank by typing one of the following options:

SQS    SNS    MQ    SWF

Which of the following function setting requires adjustment in order to allow a Lamba function to run for 900 seconds before stopping the execution?

Type the remaining AWS CLI Lambda command to update a function’s memory setting to 256MB. The name of the function is “examsdigest-function”.

Answer the fill-in-the-blank by typing one of the following options:

store    cache    data    block

Your new machine learning application is hosted on an EC2 instance with multiple Elastic Block Storage Volumes attached and uses Redshift as it is simple and cost-effective to efficiently analyze all your data. Due to a security policy, you encrypted all of the EBS volumes attached to the instance to protect the confidential data stored in the volumes.

Which of the following statements are true about encrypted Amazon Elastic Block Store volumes? (Select all that apply.)

You have just created a new On-Demand EC2 instance located in a subnet with ID subnet-aa181cd0 and IPv4 CIRD 172.31.16.0/20 in AWS which hosts your WordPress blog site. The security group attached to this EC2 instance has the following Inbound Rules:

You can establish an FTP connection into the EC2 instance from the internet. However, you are not able to establish an SSH connection from the internet. How to resolve the issue?

You have been tasked to set up a Linux bastion host that will allow access to the Amazon EC2 instances running in the VPC with ID vpc-0e359265. For security reasons, only the clients connecting from a specific external IP address should have SSH access to the host. The external public IP address is 23.24.25.26.

Which is the best option to complete the task?

Which of the following AWS analytic services is serverless and makes it easy to analyze data in Amazon S3 using standard SQL?

Which of the following AWS services is a web service that helps you reliably process and move data between different AWS compute and storage services?

Which of the following VPC features copies the network traffic from an elastic network interface of an Amazon EC2 instance and send the traffic to monitoring appliances?

Which of the following VPC features captures information about the IP traffic going to and from network interfaces?