AWS Solutions Architect
Examination Questions And
Correct Answers (Verified
Answers) Plus Rationales 2026
Q&A | Instant Download Pdf
1.
A company runs a web application on EC2 instances behind an Application Load
Balancer. Traffic spikes unpredictably. What is the BEST way to ensure automatic
scaling?
A. Manual scaling based on CPU alarms
B. AWS Auto Scaling Group with target tracking policies
C. Increase instance size permanently
D. Use Spot Instances only
Answer: B
Auto Scaling Groups with target tracking automatically adjust capacity based on
demand metrics like CPU or request count.
2.
A company needs to store infrequently accessed data at the lowest cost with
millisecond retrieval when needed. Which storage class is BEST?
A. S3 Standard
B. S3 Intelligent-Tiering
,C. S3 Standard-IA
D. S3 Glacier Deep Archive
Answer: C
Standard-IA is designed for infrequent access with fast retrieval at lower cost than
Standard storage.
3.
A developer needs a highly available relational database with automatic failover
across multiple AZs. What should be used?
A. Amazon EC2 MySQL
B. Amazon RDS Multi-AZ deployment
C. Amazon DynamoDB
D. Amazon Redshift
Answer: B
RDS Multi-AZ provides synchronous replication and automatic failover for high
availability.
4.
A company wants to decouple microservices and ensure messages are processed
at least once. Which service is BEST?
A. Amazon SNS
B. Amazon SQS
C. AWS Lambda
D. Amazon EventBridge Scheduler
Answer: B
SQS is a durable queue system that ensures at-least-once message delivery.
5.
,A company requires globally distributed low-latency DNS with health checks.
What should be used?
A. Amazon CloudFront
B. Amazon Route 53
C. AWS Global Accelerator
D. Elastic Load Balancer
Answer: B
Route 53 provides DNS routing with health checks and latency-based routing.
6.
A company wants to host a static website with minimal cost and high availability.
What is BEST?
A. EC2 with Apache
B. Amazon S3 static website hosting
C. AWS Elastic Beanstalk
D. Amazon Lightsail instance
Answer: B
S3 static hosting is highly available, scalable, and low cost for static content.
7.
A workload requires consistent sub-millisecond latency key-value storage at scale.
Which service is BEST?
A. Amazon Aurora
B. Amazon DynamoDB
C. Amazon RDS
D. Amazon Redshift
Answer: B
DynamoDB is a fully managed NoSQL database with single-digit millisecond
performance.
, 8.
A company wants to restrict access to S3 so only a specific VPC can access it. What
should be used?
A. IAM Role
B. Security Group
C. S3 Bucket Policy with VPC endpoint condition
D. ACL only
Answer: C
Bucket policies with VPC endpoint conditions restrict access to specific VPCs.
9.
A company needs a service to run containerized applications without managing
servers. What should be used?
A. Amazon ECS with Fargate
B. Amazon EC2 Auto Scaling
C. AWS Lambda only
D. Amazon S3
Answer: A
ECS with Fargate is serverless container execution.
10.
A company needs to encrypt data at rest in S3 with full AWS-managed key
control. What is BEST?
A. SSE-S3
B. SSE-KMS
C. Client-side encryption only
D. SSL/TLS only
Examination Questions And
Correct Answers (Verified
Answers) Plus Rationales 2026
Q&A | Instant Download Pdf
1.
A company runs a web application on EC2 instances behind an Application Load
Balancer. Traffic spikes unpredictably. What is the BEST way to ensure automatic
scaling?
A. Manual scaling based on CPU alarms
B. AWS Auto Scaling Group with target tracking policies
C. Increase instance size permanently
D. Use Spot Instances only
Answer: B
Auto Scaling Groups with target tracking automatically adjust capacity based on
demand metrics like CPU or request count.
2.
A company needs to store infrequently accessed data at the lowest cost with
millisecond retrieval when needed. Which storage class is BEST?
A. S3 Standard
B. S3 Intelligent-Tiering
,C. S3 Standard-IA
D. S3 Glacier Deep Archive
Answer: C
Standard-IA is designed for infrequent access with fast retrieval at lower cost than
Standard storage.
3.
A developer needs a highly available relational database with automatic failover
across multiple AZs. What should be used?
A. Amazon EC2 MySQL
B. Amazon RDS Multi-AZ deployment
C. Amazon DynamoDB
D. Amazon Redshift
Answer: B
RDS Multi-AZ provides synchronous replication and automatic failover for high
availability.
4.
A company wants to decouple microservices and ensure messages are processed
at least once. Which service is BEST?
A. Amazon SNS
B. Amazon SQS
C. AWS Lambda
D. Amazon EventBridge Scheduler
Answer: B
SQS is a durable queue system that ensures at-least-once message delivery.
5.
,A company requires globally distributed low-latency DNS with health checks.
What should be used?
A. Amazon CloudFront
B. Amazon Route 53
C. AWS Global Accelerator
D. Elastic Load Balancer
Answer: B
Route 53 provides DNS routing with health checks and latency-based routing.
6.
A company wants to host a static website with minimal cost and high availability.
What is BEST?
A. EC2 with Apache
B. Amazon S3 static website hosting
C. AWS Elastic Beanstalk
D. Amazon Lightsail instance
Answer: B
S3 static hosting is highly available, scalable, and low cost for static content.
7.
A workload requires consistent sub-millisecond latency key-value storage at scale.
Which service is BEST?
A. Amazon Aurora
B. Amazon DynamoDB
C. Amazon RDS
D. Amazon Redshift
Answer: B
DynamoDB is a fully managed NoSQL database with single-digit millisecond
performance.
, 8.
A company wants to restrict access to S3 so only a specific VPC can access it. What
should be used?
A. IAM Role
B. Security Group
C. S3 Bucket Policy with VPC endpoint condition
D. ACL only
Answer: C
Bucket policies with VPC endpoint conditions restrict access to specific VPCs.
9.
A company needs a service to run containerized applications without managing
servers. What should be used?
A. Amazon ECS with Fargate
B. Amazon EC2 Auto Scaling
C. AWS Lambda only
D. Amazon S3
Answer: A
ECS with Fargate is serverless container execution.
10.
A company needs to encrypt data at rest in S3 with full AWS-managed key
control. What is BEST?
A. SSE-S3
B. SSE-KMS
C. Client-side encryption only
D. SSL/TLS only
