AWS CERTIFIED SOLUTIONS ARCHITECT
ASSOCIATE FULL QUESTIONS AND
CORRECT ANSWERS VERIFIED
CERTIFICATION STUDY PACK
●● Question 2 ( Topic 1)
A company needs the ability to analyze the log files of its proprietary
application. The logs are stored in JSON format in an Amazon S3
bucket. Queries will be simple and will run on-demand. A solutions
architect needs to perform the analysis with minimal changes to the
existing architecture.
What should the solutions architect do to meet these requirements with
the LEAST amount of operational overhead?
A. Use Amazon Redshift to load all the content into one place and run
the SQL queries as needed.
B. Use Amazon CloudWatch Logs to store the logs. Run SQL queries as
needed from the Amazon CloudWatch console.
C. Use Amazon Athena directly with Amazon S3 to run the queries as
needed.
D. Use AWS Glue to catalog the logs. Use a transient Apache Spark
cluster on Amazon EMR to run the SQL queries as needed.
Answer: Answer : C. Use Amazon Athena directly with Amazon S3 to
run the queries as needed.
,●● Question 3 ( Topic 1)
A company uses AWS Organizations to manage multiple AWS accounts
for different departments. The management account has an Amazon S3
bucket that contains project reports. The company wants to limit access
to this S3 bucket to only users of accounts within the organization in
AWS Organizations.
Which solution meets these requirements with the LEAST amount of
operational overhead?
A. Add the aws PrincipalOrgID global condition key with a reference to
the organization ID to the S3 bucket policy.
B. Create an organizational unit (OU) for each department. Add the
aws:PrincipalOrgPaths global condition key to the S3 bucket policy.
C. Use AWS CloudTrail to monitor the CreateAccount,
InviteAccountToOrganization, LeaveOrganization, and
RemoveAccountFromOrganization
events. Update the S3 bucket policy accordingly.
D. Tag each user that needs access to the S3 bucket. Add the
aws:PrincipalTag global conditio
Answer: Answer : A. Add the aws PrincipalOrgID global condition key
with a reference to the organization ID to the S3 bucket policy.
●● Question 4 ( Topic 1)
An application runs on an Amazon EC2 instance in a VPC. The
application processes logs that are stored in an Amazon S3 bucket. The
EC2 instance needs to access the S3 bucket without connectivity to the
internet.
,Which solution will provide private network connectivity to Amazon
S3?
A. Create a gateway VPC endpoint to the S3 bucket.
B. Stream the logs to Amazon CloudWatch Logs. Export the logs to the
S3 bucket.
C. Create an instance profile on Amazon EC2 to allow S3 access.
D. Create an Amazon API Gateway API with a private link to access the
S3 endpoint.
Answer: Answer : A. Create a gateway VPC endpoint to the S3 bucket.
●● Question 5 ( Topic 1)
A company is hosting a web application on AWS using a single Amazon
EC2 instance that stores user-uploaded documents in an Amazon EBS
volume. For better scalability and availability, the company duplicated
the architecture and created a second EC2 instance and EBS volume in
another Availability Zone, placing both behind an Application Load
Balancer. After completing this change, users reported that, each time
they refreshed the website, they could see one subset of their documents
or the other, but never all of the documents at the same time.
What should a solutions architect propose to ensure users see all of their
documents at once?
A. Copy the data so both EBS volumes contain all the documents.
B. Configure the Application Load Balancer to direct a user to the server
with the documents.
C. Copy the data from both EBS volumes to Amazon EFS. Modify the
application to save new documents to Amazo
, Answer: Answer : C. Copy the data from both EBS volumes to Amazon
EFS. Modify the application to save new documents to Amazon EFS.
●● Question 6 ( Topic 1)
A company uses NFS to store large video files in on-premises network
attached storage. Each video file ranges in size from 1 MB to 500 GB.
The total storage is 70 TB and is no longer growing. The company
decides to migrate the video files to Amazon S3. The company must
migrate the video files as soon as possible while using the least possible
network bandwidth.
Which solution will meet these requirements?
A. Create an S3 bucket. Create an IAM role that has permissions to write
to the S3 bucket. Use the AWS CLI to copy all files locally to the S3
bucket.
B. Create an AWS Snowball Edge job. Receive a Snowball Edge device
on premises. Use the Snowball Edge client to transfer data to the device.
Return the device so that AWS can import the data into Amazon S3.
C. Deploy an S3 File Gateway on premises. Create a public service
endpoint to connect to the S3 File Gateway. Create an S3 bucket. Create
an
Answer: Answer : C. Deploy an S3 File Gateway on premises. Create a
public service endpoint to connect to the S3 File Gateway. Create an S3
bucket. Create a new NFS file share on the S3 File Gateway. Point the
new file share to the S3 bucket. Transfer the data from the existing NFS
file share to the S3 File Gateway.
ASSOCIATE FULL QUESTIONS AND
CORRECT ANSWERS VERIFIED
CERTIFICATION STUDY PACK
●● Question 2 ( Topic 1)
A company needs the ability to analyze the log files of its proprietary
application. The logs are stored in JSON format in an Amazon S3
bucket. Queries will be simple and will run on-demand. A solutions
architect needs to perform the analysis with minimal changes to the
existing architecture.
What should the solutions architect do to meet these requirements with
the LEAST amount of operational overhead?
A. Use Amazon Redshift to load all the content into one place and run
the SQL queries as needed.
B. Use Amazon CloudWatch Logs to store the logs. Run SQL queries as
needed from the Amazon CloudWatch console.
C. Use Amazon Athena directly with Amazon S3 to run the queries as
needed.
D. Use AWS Glue to catalog the logs. Use a transient Apache Spark
cluster on Amazon EMR to run the SQL queries as needed.
Answer: Answer : C. Use Amazon Athena directly with Amazon S3 to
run the queries as needed.
,●● Question 3 ( Topic 1)
A company uses AWS Organizations to manage multiple AWS accounts
for different departments. The management account has an Amazon S3
bucket that contains project reports. The company wants to limit access
to this S3 bucket to only users of accounts within the organization in
AWS Organizations.
Which solution meets these requirements with the LEAST amount of
operational overhead?
A. Add the aws PrincipalOrgID global condition key with a reference to
the organization ID to the S3 bucket policy.
B. Create an organizational unit (OU) for each department. Add the
aws:PrincipalOrgPaths global condition key to the S3 bucket policy.
C. Use AWS CloudTrail to monitor the CreateAccount,
InviteAccountToOrganization, LeaveOrganization, and
RemoveAccountFromOrganization
events. Update the S3 bucket policy accordingly.
D. Tag each user that needs access to the S3 bucket. Add the
aws:PrincipalTag global conditio
Answer: Answer : A. Add the aws PrincipalOrgID global condition key
with a reference to the organization ID to the S3 bucket policy.
●● Question 4 ( Topic 1)
An application runs on an Amazon EC2 instance in a VPC. The
application processes logs that are stored in an Amazon S3 bucket. The
EC2 instance needs to access the S3 bucket without connectivity to the
internet.
,Which solution will provide private network connectivity to Amazon
S3?
A. Create a gateway VPC endpoint to the S3 bucket.
B. Stream the logs to Amazon CloudWatch Logs. Export the logs to the
S3 bucket.
C. Create an instance profile on Amazon EC2 to allow S3 access.
D. Create an Amazon API Gateway API with a private link to access the
S3 endpoint.
Answer: Answer : A. Create a gateway VPC endpoint to the S3 bucket.
●● Question 5 ( Topic 1)
A company is hosting a web application on AWS using a single Amazon
EC2 instance that stores user-uploaded documents in an Amazon EBS
volume. For better scalability and availability, the company duplicated
the architecture and created a second EC2 instance and EBS volume in
another Availability Zone, placing both behind an Application Load
Balancer. After completing this change, users reported that, each time
they refreshed the website, they could see one subset of their documents
or the other, but never all of the documents at the same time.
What should a solutions architect propose to ensure users see all of their
documents at once?
A. Copy the data so both EBS volumes contain all the documents.
B. Configure the Application Load Balancer to direct a user to the server
with the documents.
C. Copy the data from both EBS volumes to Amazon EFS. Modify the
application to save new documents to Amazo
, Answer: Answer : C. Copy the data from both EBS volumes to Amazon
EFS. Modify the application to save new documents to Amazon EFS.
●● Question 6 ( Topic 1)
A company uses NFS to store large video files in on-premises network
attached storage. Each video file ranges in size from 1 MB to 500 GB.
The total storage is 70 TB and is no longer growing. The company
decides to migrate the video files to Amazon S3. The company must
migrate the video files as soon as possible while using the least possible
network bandwidth.
Which solution will meet these requirements?
A. Create an S3 bucket. Create an IAM role that has permissions to write
to the S3 bucket. Use the AWS CLI to copy all files locally to the S3
bucket.
B. Create an AWS Snowball Edge job. Receive a Snowball Edge device
on premises. Use the Snowball Edge client to transfer data to the device.
Return the device so that AWS can import the data into Amazon S3.
C. Deploy an S3 File Gateway on premises. Create a public service
endpoint to connect to the S3 File Gateway. Create an S3 bucket. Create
an
Answer: Answer : C. Deploy an S3 File Gateway on premises. Create a
public service endpoint to connect to the S3 File Gateway. Create an S3
bucket. Create a new NFS file share on the S3 File Gateway. Point the
new file share to the S3 bucket. Transfer the data from the existing NFS
file share to the S3 File Gateway.
