AWS SOLUTIONS ARCHITECT ASSOCIATE LATEST
ACTUAL EXAM WITH VERIFIED QUESTIONS & CORRECT
ANSWERS
Question 1.
*Server Side Encryption at rest with Customer Provided Keys*
ANSWER
SSE-C
Question 2.
Highest performance SSD vol- ume designed for latency-sensitive transactional workloads.
Used for I/O-intensive NoSQL and relational databases.
ANSWER
EBS - Provisioned IOPS SSD
Question 3.
Spot Instances
ANSWER
Massive Paralell Computations
Question 4.
(Optional) Specifies the AWS CloudFormation template version that the template conforms to.
(Optional) Cloudformation Sec- tion that can change independently of the API and WSDL versions.
ANSWER
Cloudformation - Format Version
Question 5.
Uses iSCSI Uses block storage and is comprised of Stored Volumes and Cached Volumes
ANSWER
Storage Gateway - Volumes Gateway
,Question 6.
IAM Entity that is primarily used with IAM Roles. Can be requested to have more restricted set of
permissions than a standard user.
IAM Entity that can be set to expire automatically after a set period of time. You control the expiration
of the Entity.
You can use the AWS Security Token Service (STS) to create and provide trusted users with credentials
that can control access to your AWS resources.
ANSWER
IAM - Temporary Credentials
Question 7.
T2, M4 & M5
__________ instances provide a balance of compute, memory, and networking resources, and can be
used for a variety of workloads.
ANSWER
EC2 - Instance Type: General purpose
Question 8.
__________ enables you to capture information about the IP traffic going to and from network interfaces
in your VPC.
ANSWER
Virtual Private Cloud (VPC) - Flow Logs
Question 9.
Specialty - Memory Optimized
Use Case - Memory Intensive
Apps
DBs
ANSWER
EC2 - Instance Type - R
,Question 10.
__________ is data about your instance that you can use to configure or manage the running instance.
__________ can be ac-
cessed using this
URI: http://169.254.169.254/latest/meta-data/
__________ can only be accessed from within the Instance
ANSWER
Instance Metadata
Question 11.
An __________ endpoint is an endpoint for a DB instance in an Aurora DB cluster that connects to that
specific DB instance.
Each DB instance in a DB cluster, regardless of instance type, has its own unique __________ endpoint.
So, there is one __________ endpoint for the current primary instance of the DB cluster, and there is one
__________ endpoint for each of the Aurora Replicas in the DB cluster.
ANSWER
Aurora - Instance Endpoint
Question 12.
IAM Entity that has complete unrestricted access to all resources in your AWS account, including billing
and password changes.
IAM Entity that should NOT be used for everyday access.
ANSWER
IAM - AWS Account Root User
Question 13.
DynamoDB Consistency mod- el that Maximizes your read throughput. However, might not reflect the
results of a recently completed write.
DynamoDB Consistency Model where Consistency across all copies of data is usually reached within a
second.
ANSWER
DynamoDB Eventually Consistent Reads (Default)
, Question 14.
__________ enables customers to import VM images in order to create EC2 instances. Customers can
also export previously imported EC2 instances to create VMs.
ANSWER
VM - Import/Export
Question 15.
*Simple Workflow*
__________ helps developers build, run, and scale background jobs that have parallel or sequential
steps.
A _______ is a fully-managed state tracker and task coordinator in the Cloud.
ANSWER
SWF
Question 16.
IAM Entity that is very similar to a user, with permission policies that determine what the identity can
and cannot do in AWS.
IAM Entity that does not have any credentials (password or access keys) associated with it.
IAM Entity that Instead of being uniquely associated with one person, is intended to be assumable by
anyone who needs it.
ANSWER
IAM - Role
Question 17.
(Optional) Cloudformation Sec- tion that describes the values that are returned whenever you view
your stack's properties.
ANSWER
Cloudformation - Outputs
Question 18.
__________ is the location where content will be cached. This is separate to an AWS Region/AZ
You can write to the __________ (i.e. put an object on the __________).
Objects are cached for the life of the TTL (Time To Live)
ANSWER
CDN - Edge
ACTUAL EXAM WITH VERIFIED QUESTIONS & CORRECT
ANSWERS
Question 1.
*Server Side Encryption at rest with Customer Provided Keys*
ANSWER
SSE-C
Question 2.
Highest performance SSD vol- ume designed for latency-sensitive transactional workloads.
Used for I/O-intensive NoSQL and relational databases.
ANSWER
EBS - Provisioned IOPS SSD
Question 3.
Spot Instances
ANSWER
Massive Paralell Computations
Question 4.
(Optional) Specifies the AWS CloudFormation template version that the template conforms to.
(Optional) Cloudformation Sec- tion that can change independently of the API and WSDL versions.
ANSWER
Cloudformation - Format Version
Question 5.
Uses iSCSI Uses block storage and is comprised of Stored Volumes and Cached Volumes
ANSWER
Storage Gateway - Volumes Gateway
,Question 6.
IAM Entity that is primarily used with IAM Roles. Can be requested to have more restricted set of
permissions than a standard user.
IAM Entity that can be set to expire automatically after a set period of time. You control the expiration
of the Entity.
You can use the AWS Security Token Service (STS) to create and provide trusted users with credentials
that can control access to your AWS resources.
ANSWER
IAM - Temporary Credentials
Question 7.
T2, M4 & M5
__________ instances provide a balance of compute, memory, and networking resources, and can be
used for a variety of workloads.
ANSWER
EC2 - Instance Type: General purpose
Question 8.
__________ enables you to capture information about the IP traffic going to and from network interfaces
in your VPC.
ANSWER
Virtual Private Cloud (VPC) - Flow Logs
Question 9.
Specialty - Memory Optimized
Use Case - Memory Intensive
Apps
DBs
ANSWER
EC2 - Instance Type - R
,Question 10.
__________ is data about your instance that you can use to configure or manage the running instance.
__________ can be ac-
cessed using this
URI: http://169.254.169.254/latest/meta-data/
__________ can only be accessed from within the Instance
ANSWER
Instance Metadata
Question 11.
An __________ endpoint is an endpoint for a DB instance in an Aurora DB cluster that connects to that
specific DB instance.
Each DB instance in a DB cluster, regardless of instance type, has its own unique __________ endpoint.
So, there is one __________ endpoint for the current primary instance of the DB cluster, and there is one
__________ endpoint for each of the Aurora Replicas in the DB cluster.
ANSWER
Aurora - Instance Endpoint
Question 12.
IAM Entity that has complete unrestricted access to all resources in your AWS account, including billing
and password changes.
IAM Entity that should NOT be used for everyday access.
ANSWER
IAM - AWS Account Root User
Question 13.
DynamoDB Consistency mod- el that Maximizes your read throughput. However, might not reflect the
results of a recently completed write.
DynamoDB Consistency Model where Consistency across all copies of data is usually reached within a
second.
ANSWER
DynamoDB Eventually Consistent Reads (Default)
, Question 14.
__________ enables customers to import VM images in order to create EC2 instances. Customers can
also export previously imported EC2 instances to create VMs.
ANSWER
VM - Import/Export
Question 15.
*Simple Workflow*
__________ helps developers build, run, and scale background jobs that have parallel or sequential
steps.
A _______ is a fully-managed state tracker and task coordinator in the Cloud.
ANSWER
SWF
Question 16.
IAM Entity that is very similar to a user, with permission policies that determine what the identity can
and cannot do in AWS.
IAM Entity that does not have any credentials (password or access keys) associated with it.
IAM Entity that Instead of being uniquely associated with one person, is intended to be assumable by
anyone who needs it.
ANSWER
IAM - Role
Question 17.
(Optional) Cloudformation Sec- tion that describes the values that are returned whenever you view
your stack's properties.
ANSWER
Cloudformation - Outputs
Question 18.
__________ is the location where content will be cached. This is separate to an AWS Region/AZ
You can write to the __________ (i.e. put an object on the __________).
Objects are cached for the life of the TTL (Time To Live)
ANSWER
CDN - Edge
