AWS Certified Solutions Architect (SAA-C03) Practice Exam #2

You are working for an eCommerce multi-vendor marketplace startup and you have been tasked to create the business process workflow associate with an order fulfillment system and track ordering system.

What AWS service can assist with coordinating tasks across distributed application components?

Your company has a bookkeeping application that keeps records of the financial affairs of the company and saves the records to an S3 bucket. You have been instructed to keep the transaction logs for 30 days and then should be removed.

Which of the following solutions will you implement to accomplish this requirement?

You are working for a tech-educational company that uses EC2, CloudFront, and S3 for its tutorial videos. The company uses a standard S3 storage class to store all tutorials. You have been tasked to implement a solution so the tutorials should be transferred automatically from the S3 bucket to Amazon S3 Glacier storage.

Which of the following option will you use to meet the requirement?

You are building a new cloud infrastructure where you have EC2 instances that require access to various AWS services such as S3, Load Balancer and VPC. You will also need to provision access to system administrators so they can deploy and test their changes. In addition, you have to ensure that access to your resources is secured and not compromised.

Which of the following solutions will you implement? (Choose all that apply)

An Auto Scaling Group is unable to respond quickly enough to load changes resulting in lost messages from another application tier. The messages are typically around 78KB in size.

Which of the following solutions will you implement to prevent messages from being lost?

You are working as a Solution Architect in a fintech startup that processes a high number of credit card validation requests every day. All the tech architecture has been migrated to the AWS to increase the performance.

What type of Amazon SQS queue will you use to processes a high number of credit card validation requests with no issues?

A startup company has a serverless architecture that uses AWS Lambda to run code without managing servers, Amazon S3 to store and retrieve any amount of data from anywhere on the web and DynamoDB. The startup is using AWS CodeDeploy to automates application deployments to Amazon EC2 instances, and serverless Lambda functions. A new feature it’s ready to be pushed to the production.

Which of the following deployment configuration type will allow you to shift from the original Lambda function to the updated Lambda function version all at once?

You have been tasked to build a web architecture using On-Demand EC2 instances and a database using AWS products. However, due to budget constraints, the company instructed you to choose an AWS database to avoid managing DB related tasks, such as hardware provisioning, setup, and configuration, replication, software patching, or cluster scaling.

Which of the following Amazon database service will you choose for the project?

Your new application is hosted in an Auto Scaling group of EC2 instances. To improve the monitoring process, you have to configure it to keep the average aggregate CPU utilization of your Auto Scaling group at 50 percent. This should be done by specifying the scaling metrics and threshold values for the CloudWatch alarms that trigger the scaling process.

Which of the following scaling policy type you should use?

Which of the following ACL rules allows inbound HTTP traffic from any IPv4 address.

Match the virtual private cloud (VPC) features that you can use to increase and monitor the security with the respective descriptions.

Which of the following Container AWS services helps you to run, stop, and manage Docker containers on a cluster?

You are working as a Solutions Architect for a service marketplace startup. A tech stack includes MariaDB. You have been tasked to migrate the database to AWS to improve the performance and make the DB highly available in case of database server failure in the future.

Which of the following option is the best way to meet the requirement?

Which of the following AWS Key Management Service (AWS KMS)  practice encrypts plaintext data with a data key, and then encrypts the data key under another key?

The mobile application you have just launched stores player and score information using Amazon S3 and DynamoDB. The users of your app can sign in using an external identity provider (IdP), such as Login with Amazon, Facebook, or Google. Amazon recommends that you do not embed or distribute long-term AWS credentials with apps that a user downloads to a device, even in an encrypted store.

Which AWS Security Token Service will you use to requests temporary AWS security credentials when needed?

What are some of the major advantages of having a Virtual Private Network (VPN) in AWS? (Choose all that apply)

You are developing a new Social Media App and accidentally you deleted a file hosted in Amazon Amazon Simple Storage Service (S3) which has caused disruption of service.

Which of the following solution will prevent this from happening again?

You have been hired by a company to implement a solution to meet the following requirement.
The company handles sensitive data in their private subnet, the data is processed by the EC2 instances and then delivered to S3. You have been instructed that the data shouldn’t be passed through the public Internet.

How should you design this solution so that the data does not pass through the public Internet?

You are developing an educational mobile app that uploads the user’s performance of individuals lessons to DynamoDB. Amazon Cognito is being used for authentication, authorization, and user management, and users sign-in with Facebook IDs and Google IDs. In order to securely store data in DynamoDB, the design should use temporary AWS credentials.

Which of the following feature of Amazon Cognito is used to obtain temporary credentials to access AWS services?

You have been tasked to implement a solution for providing single sign-on to existing staff that manage on-premise web applications and need access to the AWS management console to manage resources in the AWS cloud.

Which of the following services will you use to meet the requirement?

You are working for Examsdigest LLC, as a Solutions Architect. You have been tasked to connect the on-premises infrastructure to their AWS cloud as secure as possible.

Which of the following AWS services can you use to accomplish this? (Choose all that apply)

You are building a text to speech conversion service for a company in which a fleet of EC2 worker instances processes an uploaded text file and generates an audio file as an output. You must store both of these frequently accessed files in the same durable storage. You are building the service with scalability in mind.

Which storage option in AWS can you use in this situation, which is both cost-efficient and scalable?

You are working on a bookkeeping accountant application for a startup. Your project manager asked you to have the ability to automatically transfer obsolete data from their S3 bucket to a low-cost storage system in AWS.

Which of the following solution will you use to meet the requirement?

Υou have just launched a new Online Travel Agency (OTA) application so accommodation owners can log into and upload their property types. Since you are in the early stage and the funding is still hard to come by without investors, you need to get an alert when the AWS service cost or usage exceed your budgeted amount.

Which of the following services can help you manage the budgets for all your AWS resources?

You have hosted your new application in an Auto Scaling group of EC2 instances. Now you need to implement an SSL solution for your system to improve its security. The certificate is obtained from a third-party issuer.

Where can you import the SSL/TLS certificate to improve the security of your application?

You are working on a social media web application that receives large amounts of object data. Due to the strict budget, you can’t afford to purchase storage hardware and you decide to use AWS instead.

Which of the following service will you use in order to store a virtually unlimited amount of object data without any effort to scale when the demand of the social media app unexpectedly increases?

How can you grant additional permission to an individual ECS application container on an ECS cluster without granting additional permissions to other containers which run on the cluster?

A Linux instance running in your VPC requires some configuration changes to be implemented locally and you need to run some commands. Which of the following can be used to securely access the instance?

You are working for a content management company as an AWS Architect. The company needs a storage service that provides the scale and performance the content management applications require such as high throughput and low-latency file operations. In addition, their data needs to be stored redundantly across multiple AZs and allows concurrent connections from multiple EC2 instances hosted on multiple AZs.

Which of the following AWS storage services is most suitable for the project?

Which of the following Amazon Database services is compatible with MongoDB?

As a Solutions Architect for a startup, you have been tasked to provide the most suitable database service for the company in order to:

1. Store and retrieve any amount of data and serve any level of request traffic.
2. Scale up or scale down your tables’ throughput capacity without downtime or performance degradation.
3. Create full backups of your tables for long-term retention and archival for regulatory compliance needs.

Which of the following Amazon database service is the most suitable solution to use to achieve the above requirements?

Your company has a VPC for the IT department, and another VPC for the accounting department. Which type of networking connection in AWS should you use for the IT department in order to get access to all resources that are in the accounting department, and vice versa?

You are developing a service marketplace platform in which people buy and sell online services. The project manager instructed you that the API calls on the AWS resources should be monitored and recorded. You used CloudTrail to help you in compliance, operational, and risk auditing of your AWS account. The project manager asked you where does CloudTrail store all of the logs?

You are developing a fitness application that provides users with a rich array of guided workouts for a variety of fitness levels. Your application resides on an EC2 instance which requires access to various AWS services for its operations.

Which of the following is the best way to allow your EC2 instance to access your S3 bucket and other AWS services?

You have just created a number of IAM users in your AWS account. What else needs to be done in order to ensure that the users are able to make API calls to AWS services and use AWS PowerShell tools?

Your company has just launched a new application that will be deployed on AWS which runs multiple components in Docker containers. Your company decides to use AWS managed infrastructure for running the containers as they do not want to manage EC2 instances.

Which of the following solution would address the requirement? (Choose two)

You are designing a service to host containers from several customers on Amazon ECS. These containers will use several AWS services. What solution will you implement in order to avoid containers from customers to get access to each other’s data?

You have just launched an EC2 instance in a subnet into your VPC. After investigation, you have realized that the EC2 instance isn’t accessible from the Internet. What could be the primary cause of this issue?

A social media application that collects, processes, and analyzes feed data in real-time is using Kinesis Data Streams. What service will you use to send stream records directly to services such as Amazon Simple Storage Service (Amazon S3) or Amazon Redshift instead of creating a consumer application?

Your new educational app for high-school students uses Amazon Cognito to handle user authentication and authorization. Now, you are thinking to add another method of authentication in addition to just a username and password to make the app more secure.

What solution will you implement to add the extra layer of security?

A company has just launched a gamification feature on its mobile app that stores the score of the players to a DynamoDB table. You have been tasked to design a solution to trigger a Lambda function whenever the LeaderBoard attribute of the PlayerScore table is updated. The Lambda function would post a congratulatory message on a social media network.

What’s the best solution that can be implemented to trigger the Lambda function on specific events?

You are working for an eCommerce startup as a Solutions Architect. You have been tasked to implement a solution so each time the inventory level of a specific product collection reaches the threshold of out-of-stock, only then to get notified instantly for this event.

Which AWS service will you use to accomplish this requirement?

You have just launched an SFTP Secure Server Windows using an On-Demand EC2 instance in a newly created VPC named vpc-0e359265 with default settings. The server should not be accessible publicly but only through your IP address 155.144.123.12.

Which of the following is the most suitable way to implement this requirement?

You are working as a Solutions Architect for a startup that develops a Social media app. The Social Media App is expected to receive a significant load in the upcoming days that could scale to millions of messages. As you are unsure of the load required for the database layer what is the most cost-effective way to ensure that the messages are not dropped?

You are developing a web app for restaurant tables reservation and you need a managed service to send a text message to users every time a reservation is confirmed.

Which AWS service will you use to achieve this?

Which of the following options can be used to apply specific-settings in one go for all of the Relational database instances?

You are working as a site reliability engineer (SRE) for a large US-based IT company. You have been tasked to find an automated way to monitor and resolve issues with their on-demand EC2 instances.

Which of the following option can be used to automatically monitor the EC2 instances and notify you for any possible incident?

You have just created a new On-Demand EC2 instance located in a subnet with ID subnet-aa181cd0 and IPv4 CIRD 172.31.16.0/20 in AWS which hosts your WordPress blog site. The security group attached to this EC2 instance has the following Inbound Rules:

You can establish an FTP connection into the EC2 instance from the internet. However, you are not able to establish an SSH connection from the internet. How to resolve the issue?

You are working for an audio streaming startup as an AWS Architect. You have been tasked to design a serverless application that will accept audio files uploaded by users from around the world. The application will make API calls to back-end services and save the number of uploaded files of the users to a database.

Which combination of services would provide a solution that is cost-effective while delivering the least latency?

Predictive scaling uses machine learning to analyze each resource’s historical workload and regularly forecasts the future load for the next two days, whereas Dynamic scaling creates target tracking scaling policies for the resources in your scaling plan. (True or False)

You are developing an application that uses Python Lambda functions. You need to store some sensitive data such as credentials for accessing the database. How will you store this data securely and adjust your function’s behavior without updating code?

It is considered as a best practice to rely on instance store for valuable, long-term data, instead of using Amazon S3, Amazon EBS, or Amazon EFS.

Your Online Travel Agent (OTA) startup in California recently faced tremendous growth. Users from all over the world started using the APP. After investigation, you noticed 60% of the traffic was originated from Germany. Because of this, you decide to localize your content and present all of your website’s content in German to the users from Germany and English to the rest of the users. Also, you want all queries from Europe to be routed to an ELB load balancer in the Frankfurt region.

Which of the following services would allow you to fulfill this requirement?

Which of the following AWS feature helps you ensure that you have the correct number of Amazon EC2 instances available to handle the load for your application?

You have set up a VPC with a public subnet and the Internet gateway attached. You set up an EC2 instance with a public IP as well. The rule type and the rule source of the security group are ‘All Traffic’ and ‘0.0.0.0/0’ respectively. However, you are still not able to connect to the instance via the Internet.

How to resolve the issue in this case?

A mobile app development company operates several apps such as social media apps, entertainment apps, and lifestyle apps that use various RESTful web APIs hosted on their on-premises data center. Due to the unprecedented growth of their company, they decided to migrate their system to AWS Cloud to scale out their resources as well to minimize costs. The company hired you to implement a solution that meets the above requirement.

Which of the following solution will you implement?

An IoT application requires a service that can collect, process, and analyze IoT telemetry data for machine learning in real-time. Which of the following is the most suitable AWS service to use for the application?

In Amazon EC2, you manage instance transitions through different states from the moment you launch it through to its termination. In some instance states, you are billed for the EC2 usage, while in other instance states, not.

In which of the following instance states the EC2 instance is billed for the usage? (Choose all the apply)

A company wants to add an additional layer of protection from web attacks that attempt to exploit vulnerabilities to its web app. The company needs to create rules to filter web traffic based on specific IP addresses and block common web exploits like SQL injection and cross-site scripting.

Which of the following AWS service meet these requirements?

You have been tasked to improve the security of the data flow between your Amazon Redshift cluster and other resources. The very first step is to use VPC flow logs to monitor all the COPY and UNLOAD traffic of your Redshift cluster that moves in and out of your VPC.

Which of the following option is the most suitable solution to improve the security of your data?

Which of the following AWS analytic services collect, process, and analyze real-time, streaming data so you can get timely insights and react quickly to new information?

Which of the following AWS services makes simple and cost-effective to set up, manage, and scale a search solution for your website or application?

Which of the following VPC features acts as a firewall for associated subnets, controlling both inbound and outbound traffic at the subnet level?

Which of the following VPC features acts as a firewall for associated Amazon EC2 instances, controlling both inbound and outbound traffic at the instance level?