2024 AWS SOLUTIONS ARCHITECT
ASSOCIATE PRACTICE EXAM 6
WITH CORRECT ANSWERS
As a Solutions Architect, you would like to completely secure the
communications between your Amazon CloudFront distribution and your
Amazon S3 bucket which contains the static files for your website. Users
should only be able to access the Amazon S3 bucket through Amazon
CloudFront and not directly.
What do you recommend? - CORRECT-ANSWERSCreate an origin access
identity (OAI) and update the Amazon S3 Bucket Policy
Which of the following options represents the most cost-optimal solution for
the given use case? - CORRECT-ANSWERSServer-side encryption with
Amazon S3 managed keys (SSE-S3)
A security consultant is designing a solution for a company that wants to
provide developers with individual AWS accounts through AWS
Organizations, while also maintaining standard security controls. Since the
individual developers will have AWS account root user-level access to their
own accounts, the consultant wants to ensure that the mandatory AWS
CloudTrail configuration that is applied to new developer accounts is not
modified.
Which of the following actions meets the given requirements? - CORRECT-
ANSWERSSet up a service control policy (SCP) that prohibits changes to AWS
CloudTrail, and attach it to the developer accounts
The engineering team at a multi-national company uses AWS Firewall
Manager to centrally configure and manage firewall rules across its accounts
and applications using AWS Organizations.
Which of the following AWS resources can the AWS Firewall Manager
configure rules on? (Select three) - CORRECT-ANSWERSAWS Web Application
Firewall (AWS WAF)
AWS Shield Advanced
VPC Security Groups
, You are looking to build an index of your files in Amazon S3, using Amazon
RDS PostgreSQL. To build this index, it is necessary to read the first 250
bytes of each object in Amazon S3, which contains some metadata about the
content of the file itself. There are over 100,000 files in your S3 bucket,
amounting to 50 terabytes of data.
How can you build this index efficiently? - CORRECT-ANSWERSCreate an
application that will traverse the S3 bucket, issue a Byte Range Fetch for the
first 250 bytes, and store that information in Amazon RDS
An engineering team wants to orchestrate multiple Amazon ECS task types
running on Amazon EC2 instances that are part of the Amazon ECS cluster.
The output and state data for all tasks need to be stored. The amount of data
output by each task is approximately 20 megabytes and there could be
hundreds of tasks running at a time. As old outputs are archived, the storage
size is not expected to exceed 1 terabyte.
As a solutions architect, which of the following would you recommend as an
optimized solution for high-frequency reading and writing? - CORRECT-
ANSWERSUse Amazon EFS with Provisioned Throughput mode
A company has moved its business critical data to Amazon Elastic File
System (Amazon EFS) which will be accessed by multiple Amazon EC2
instances.
As an AWS Certified Solutions Architect - Associate, which of the following
would you recommend to exercise access control such that only the
permitted Amazon EC2 instances can read from the Amazon EFS file system?
(Select two) - CORRECT-ANSWERSUse VPC security groups to control the
network traffic to and from your file system
Use an IAM policy to control access for clients who can mount your file
system with the required permissions
As a Solutions Architect, you have set up a database on a single Amazon EC2
instance that has an Amazon EBS volume of type gp2. You currently have
300 gigabytes of space on the gp2 device. The Amazon EC2 instance is of
type m5.large. The database performance has recently been poor and upon
looking at Amazon CloudWatch, you realize the IOPS on the Amazon EBS
volume is maxing out. The disk size of the database must not change
because of a licensing issue.
How do you troubleshoot this issue? - CORRECT-ANSWERSConvert the gp2
volume to an io1
ASSOCIATE PRACTICE EXAM 6
WITH CORRECT ANSWERS
As a Solutions Architect, you would like to completely secure the
communications between your Amazon CloudFront distribution and your
Amazon S3 bucket which contains the static files for your website. Users
should only be able to access the Amazon S3 bucket through Amazon
CloudFront and not directly.
What do you recommend? - CORRECT-ANSWERSCreate an origin access
identity (OAI) and update the Amazon S3 Bucket Policy
Which of the following options represents the most cost-optimal solution for
the given use case? - CORRECT-ANSWERSServer-side encryption with
Amazon S3 managed keys (SSE-S3)
A security consultant is designing a solution for a company that wants to
provide developers with individual AWS accounts through AWS
Organizations, while also maintaining standard security controls. Since the
individual developers will have AWS account root user-level access to their
own accounts, the consultant wants to ensure that the mandatory AWS
CloudTrail configuration that is applied to new developer accounts is not
modified.
Which of the following actions meets the given requirements? - CORRECT-
ANSWERSSet up a service control policy (SCP) that prohibits changes to AWS
CloudTrail, and attach it to the developer accounts
The engineering team at a multi-national company uses AWS Firewall
Manager to centrally configure and manage firewall rules across its accounts
and applications using AWS Organizations.
Which of the following AWS resources can the AWS Firewall Manager
configure rules on? (Select three) - CORRECT-ANSWERSAWS Web Application
Firewall (AWS WAF)
AWS Shield Advanced
VPC Security Groups
, You are looking to build an index of your files in Amazon S3, using Amazon
RDS PostgreSQL. To build this index, it is necessary to read the first 250
bytes of each object in Amazon S3, which contains some metadata about the
content of the file itself. There are over 100,000 files in your S3 bucket,
amounting to 50 terabytes of data.
How can you build this index efficiently? - CORRECT-ANSWERSCreate an
application that will traverse the S3 bucket, issue a Byte Range Fetch for the
first 250 bytes, and store that information in Amazon RDS
An engineering team wants to orchestrate multiple Amazon ECS task types
running on Amazon EC2 instances that are part of the Amazon ECS cluster.
The output and state data for all tasks need to be stored. The amount of data
output by each task is approximately 20 megabytes and there could be
hundreds of tasks running at a time. As old outputs are archived, the storage
size is not expected to exceed 1 terabyte.
As a solutions architect, which of the following would you recommend as an
optimized solution for high-frequency reading and writing? - CORRECT-
ANSWERSUse Amazon EFS with Provisioned Throughput mode
A company has moved its business critical data to Amazon Elastic File
System (Amazon EFS) which will be accessed by multiple Amazon EC2
instances.
As an AWS Certified Solutions Architect - Associate, which of the following
would you recommend to exercise access control such that only the
permitted Amazon EC2 instances can read from the Amazon EFS file system?
(Select two) - CORRECT-ANSWERSUse VPC security groups to control the
network traffic to and from your file system
Use an IAM policy to control access for clients who can mount your file
system with the required permissions
As a Solutions Architect, you have set up a database on a single Amazon EC2
instance that has an Amazon EBS volume of type gp2. You currently have
300 gigabytes of space on the gp2 device. The Amazon EC2 instance is of
type m5.large. The database performance has recently been poor and upon
looking at Amazon CloudWatch, you realize the IOPS on the Amazon EBS
volume is maxing out. The disk size of the database must not change
because of a licensing issue.
How do you troubleshoot this issue? - CORRECT-ANSWERSConvert the gp2
volume to an io1
