AWS Certified Solutions Architect-Associate Exam Testbank |
All Questions And Answers 2026/2027 | Verified Answers Plus
Rationales | Graded Q&A Comprehensive Study Guide |
Verified Latest 2027
1. A solutions architect is designing a web application running on Amazon EC2 instances
behind an Application Load Balancer. The application experiences unpredictable traffic
spikes. Which combination of services should the architect use to automatically scale
compute capacity cost-effectively?
A. AWS Lambda with Amazon SQS
B. Amazon EC2 Auto Scaling with target tracking scaling policies
C. Manual resizing of EC2 instance types via AWS CLI scripts
D. AWS Elastic Beanstalk with fixed-size worker tiers
Answer: B
Amazon EC2 Auto Scaling with target tracking scaling policies automatically adjusts the
number of EC2 instances based on real-time metrics like CPU utilization, ensuring optimal
performance during traffic spikes without manual intervention.
2. A financial services company needs to store transactional records that must remain
unmodifiable and undeletable for a mandatory compliance period of seven years. Which
Amazon S3 feature should be implemented to satisfy this requirement?
A. S3 Lifecycle expiration rules
B. S3 Object Lock in Compliance mode
C. S3 Versioning with MFA Delete
D. Cross-Region Replication (CRR)
Answer: B
S3 Object Lock in Compliance mode prevents objects from being deleted or overwritten by any
user, including the root account, for the specified retention period, meeting strict regulatory
compliance mandates.
3. An enterprise is migrating an on-premises Oracle database to Amazon RDS for Oracle.
The database size is 4 TB, and the organization has a limited maintenance window with a
restricted network bandwidth connection to AWS. Which migration method minimizes
downtime during the initial data load?
A. AWS Database Migration Service (AWS DMS) with full load and continuous replication
B. Exporting database backups to physical tapes and mailing them via AWS Snowball Edge
C. Setting up a direct VPN tunnel and executing an immediate dump and restore via SQL client
,D. Migrating the database schema manually using flat files over SFTP
Answer: A
AWS Database Migration Service performs the initial full data migration while supporting
ongoing change data capture (CDC) to synchronize databases with minimal operational
downtime.
4. A multinational media company requires a globally distributed file storage solution that
allows Windows users to access low-latency file shares on-premises while automatically
caching frequently used data locally and archiving older data to Amazon S3. Which AWS
service is best suited?
A. Amazon Elastic File System (Amazon EFS)
B. AWS Storage Gateway (File Gateway configuration)
C. Amazon FSx for Windows File Server
D. Amazon EBS provisioned IOPS volumes
Answer: B
AWS Storage Gateway File Gateway provides on-premises applications with seamless, low-
latency access to virtually unlimited cloud storage in Amazon S3 while maintaining local
caching for high-performance access.
5. A solutions architect is designing a secure three-tier web application in AWS. Web
servers reside in public subnets, application servers in private subnets, and databases in
isolated database subnets. Which component must be configured in the public subnets to
allow outbound internet access for the application servers to download software patches?
A. Internet Gateway (IGW)
B. NAT Gateway
C. Virtual Private Gateway (VGW)
D. AWS Direct Connect Gateway
Answer: B
A NAT Gateway deployed in a public subnet allows instances in private subnets to initiate
outbound connections to the internet for patches while preventing unsolicited inbound traffic.
6. An e-commerce platform experiences high read latency on its relational database during
flash sales. The database workload is read-heavy with infrequent writes. Which
architectural pattern should the solutions architect implement to relieve database
pressure?
A. Enable multi-AZ failover for the primary database instance
B. Deploy Amazon ElastiCache for Redis in front of the database to cache frequent read queries
,C. Migrate the database storage from General Purpose SSD to Provisioned IOPS SSD
D. Implement synchronous database replication across three Availability Zones
Answer: B
Caching frequently accessed query results using Amazon ElastiCache drastically reduces
database read load, improves response times, and absorbs sudden traffic spikes during flash
sales.
7. A global enterprise requires a content delivery network to distribute static and dynamic
media assets to users worldwide with low latency and high security, including AWS Shield
Advanced integration. Which AWS service should be utilized?
A. Amazon Route 53 latency routing
B. Amazon CloudFront
C. AWS Global Accelerator
D. Amazon API Gateway
Answer: B
Amazon CloudFront is a globally distributed content delivery network (CDN) that accelerates
the delivery of static and dynamic web content through edge locations backed by AWS
security safeguards.
8. An organization is deploying a multi-tier application across two AWS Regions for
disaster recovery purposes. The recovery point objective (RPO) is near zero, and the
recovery time objective (RTO) must be instantaneous. Which disaster recovery strategy
aligns with these requirements?
A. Backup and restore
B. Pilot light
C. Warm standby
D. Multi-site active-active
Answer: D
A multi-site active-active disaster recovery strategy operates workloads concurrently across
multiple regions, ensuring seamless traffic failover and zero data loss during an outage.
9. A healthcare provider must store patient records encrypted with keys managed
independently by the organization. The provider requires absolute control over key
creation, rotation, and deletion policies. Which AWS service satisfies this requirement?
A. AWS Secrets Manager
B. AWS Key Management Service (AWS KMS) with Customer Managed Keys (CMKs)
C. Amazon S3 default server-side encryption with Amazon S3 managed keys (SSE-S3)
, D. AWS Certificate Manager (ACM)
Answer: B
Customer Managed Keys in AWS KMS grant organizations granular control over
cryptographic keys, including custom rotation schedules, access policies, and key destruction
oversight.
10. A solutions architect needs to design a serverless event-driven processing pipeline that
triggers image thumbnail generation whenever a user uploads an image to an Amazon S3
bucket. Which combination of services provides the most efficient architecture?
A. Amazon EC2 Auto Scaling group behind an Application Load Balancer
B. Amazon S3 event notifications triggering an AWS Lambda function
C. Amazon DynamoDB streams polling S3 storage changes continuously
D. AWS Glue scheduled batch jobs running every hour
Answer: B
S3 event notifications can directly invoke an AWS Lambda function upon object creation,
establishing a scalable, event-driven, serverless processing workflow.
11. An enterprise company manages multiple AWS accounts across different business
units. The finance department requires centralized visibility and consolidated billing for all
accounts, along with mandatory security guardrails enforced across every account. Which
AWS service combination meets these requirements?
A. AWS Organizations with Consolidated Billing and Service Control Policies (SCPs)
B. Independent AWS accounts sharing a single IAM root user password
C. AWS Trusted Advisor reports emailed manually to department heads
D. AWS Cost Explorer shared via public S3 bucket links
Answer: A
AWS Organizations enables centralized account management, consolidated billing, and policy
enforcement via Service Control Policies to govern multi-account environments.
12. A media streaming company stores massive video archives in Amazon S3. Access
patterns show that files are accessed frequently during the first 30 days, rarely accessed
between 31 and 90 days, and rarely accessed thereafter but must remain immediately
available upon request. Which S3 Storage Class lifecycle policy optimizes costs best?
A. Transition objects from S3 Standard to S3 Glacier Deep Archive immediately upon upload
B. Transition objects to S3 Standard-Infrequent Access (S3 Standard-IA) after 30 days, and S3
Glacier Flexible Retrieval after 90 days
C. Keep all objects in S3 Standard to avoid retrieval fees
All Questions And Answers 2026/2027 | Verified Answers Plus
Rationales | Graded Q&A Comprehensive Study Guide |
Verified Latest 2027
1. A solutions architect is designing a web application running on Amazon EC2 instances
behind an Application Load Balancer. The application experiences unpredictable traffic
spikes. Which combination of services should the architect use to automatically scale
compute capacity cost-effectively?
A. AWS Lambda with Amazon SQS
B. Amazon EC2 Auto Scaling with target tracking scaling policies
C. Manual resizing of EC2 instance types via AWS CLI scripts
D. AWS Elastic Beanstalk with fixed-size worker tiers
Answer: B
Amazon EC2 Auto Scaling with target tracking scaling policies automatically adjusts the
number of EC2 instances based on real-time metrics like CPU utilization, ensuring optimal
performance during traffic spikes without manual intervention.
2. A financial services company needs to store transactional records that must remain
unmodifiable and undeletable for a mandatory compliance period of seven years. Which
Amazon S3 feature should be implemented to satisfy this requirement?
A. S3 Lifecycle expiration rules
B. S3 Object Lock in Compliance mode
C. S3 Versioning with MFA Delete
D. Cross-Region Replication (CRR)
Answer: B
S3 Object Lock in Compliance mode prevents objects from being deleted or overwritten by any
user, including the root account, for the specified retention period, meeting strict regulatory
compliance mandates.
3. An enterprise is migrating an on-premises Oracle database to Amazon RDS for Oracle.
The database size is 4 TB, and the organization has a limited maintenance window with a
restricted network bandwidth connection to AWS. Which migration method minimizes
downtime during the initial data load?
A. AWS Database Migration Service (AWS DMS) with full load and continuous replication
B. Exporting database backups to physical tapes and mailing them via AWS Snowball Edge
C. Setting up a direct VPN tunnel and executing an immediate dump and restore via SQL client
,D. Migrating the database schema manually using flat files over SFTP
Answer: A
AWS Database Migration Service performs the initial full data migration while supporting
ongoing change data capture (CDC) to synchronize databases with minimal operational
downtime.
4. A multinational media company requires a globally distributed file storage solution that
allows Windows users to access low-latency file shares on-premises while automatically
caching frequently used data locally and archiving older data to Amazon S3. Which AWS
service is best suited?
A. Amazon Elastic File System (Amazon EFS)
B. AWS Storage Gateway (File Gateway configuration)
C. Amazon FSx for Windows File Server
D. Amazon EBS provisioned IOPS volumes
Answer: B
AWS Storage Gateway File Gateway provides on-premises applications with seamless, low-
latency access to virtually unlimited cloud storage in Amazon S3 while maintaining local
caching for high-performance access.
5. A solutions architect is designing a secure three-tier web application in AWS. Web
servers reside in public subnets, application servers in private subnets, and databases in
isolated database subnets. Which component must be configured in the public subnets to
allow outbound internet access for the application servers to download software patches?
A. Internet Gateway (IGW)
B. NAT Gateway
C. Virtual Private Gateway (VGW)
D. AWS Direct Connect Gateway
Answer: B
A NAT Gateway deployed in a public subnet allows instances in private subnets to initiate
outbound connections to the internet for patches while preventing unsolicited inbound traffic.
6. An e-commerce platform experiences high read latency on its relational database during
flash sales. The database workload is read-heavy with infrequent writes. Which
architectural pattern should the solutions architect implement to relieve database
pressure?
A. Enable multi-AZ failover for the primary database instance
B. Deploy Amazon ElastiCache for Redis in front of the database to cache frequent read queries
,C. Migrate the database storage from General Purpose SSD to Provisioned IOPS SSD
D. Implement synchronous database replication across three Availability Zones
Answer: B
Caching frequently accessed query results using Amazon ElastiCache drastically reduces
database read load, improves response times, and absorbs sudden traffic spikes during flash
sales.
7. A global enterprise requires a content delivery network to distribute static and dynamic
media assets to users worldwide with low latency and high security, including AWS Shield
Advanced integration. Which AWS service should be utilized?
A. Amazon Route 53 latency routing
B. Amazon CloudFront
C. AWS Global Accelerator
D. Amazon API Gateway
Answer: B
Amazon CloudFront is a globally distributed content delivery network (CDN) that accelerates
the delivery of static and dynamic web content through edge locations backed by AWS
security safeguards.
8. An organization is deploying a multi-tier application across two AWS Regions for
disaster recovery purposes. The recovery point objective (RPO) is near zero, and the
recovery time objective (RTO) must be instantaneous. Which disaster recovery strategy
aligns with these requirements?
A. Backup and restore
B. Pilot light
C. Warm standby
D. Multi-site active-active
Answer: D
A multi-site active-active disaster recovery strategy operates workloads concurrently across
multiple regions, ensuring seamless traffic failover and zero data loss during an outage.
9. A healthcare provider must store patient records encrypted with keys managed
independently by the organization. The provider requires absolute control over key
creation, rotation, and deletion policies. Which AWS service satisfies this requirement?
A. AWS Secrets Manager
B. AWS Key Management Service (AWS KMS) with Customer Managed Keys (CMKs)
C. Amazon S3 default server-side encryption with Amazon S3 managed keys (SSE-S3)
, D. AWS Certificate Manager (ACM)
Answer: B
Customer Managed Keys in AWS KMS grant organizations granular control over
cryptographic keys, including custom rotation schedules, access policies, and key destruction
oversight.
10. A solutions architect needs to design a serverless event-driven processing pipeline that
triggers image thumbnail generation whenever a user uploads an image to an Amazon S3
bucket. Which combination of services provides the most efficient architecture?
A. Amazon EC2 Auto Scaling group behind an Application Load Balancer
B. Amazon S3 event notifications triggering an AWS Lambda function
C. Amazon DynamoDB streams polling S3 storage changes continuously
D. AWS Glue scheduled batch jobs running every hour
Answer: B
S3 event notifications can directly invoke an AWS Lambda function upon object creation,
establishing a scalable, event-driven, serverless processing workflow.
11. An enterprise company manages multiple AWS accounts across different business
units. The finance department requires centralized visibility and consolidated billing for all
accounts, along with mandatory security guardrails enforced across every account. Which
AWS service combination meets these requirements?
A. AWS Organizations with Consolidated Billing and Service Control Policies (SCPs)
B. Independent AWS accounts sharing a single IAM root user password
C. AWS Trusted Advisor reports emailed manually to department heads
D. AWS Cost Explorer shared via public S3 bucket links
Answer: A
AWS Organizations enables centralized account management, consolidated billing, and policy
enforcement via Service Control Policies to govern multi-account environments.
12. A media streaming company stores massive video archives in Amazon S3. Access
patterns show that files are accessed frequently during the first 30 days, rarely accessed
between 31 and 90 days, and rarely accessed thereafter but must remain immediately
available upon request. Which S3 Storage Class lifecycle policy optimizes costs best?
A. Transition objects from S3 Standard to S3 Glacier Deep Archive immediately upon upload
B. Transition objects to S3 Standard-Infrequent Access (S3 Standard-IA) after 30 days, and S3
Glacier Flexible Retrieval after 90 days
C. Keep all objects in S3 Standard to avoid retrieval fees
