2024 AWS SOLUTIONS ARCHITECT
PROFESSIONAL EXAM MAMUN 1-
100 QUESTIONS WITH ANSWERS
RTO - CORRECT-ANSWERSRecovery Time Objective
RPO - CORRECT-ANSWERSRecovery Point Objective
Name 3 example IaC tools that go with AWS: - CORRECT-ANSWERSTerraform
Cloudformation
OpsWorks
Fn::GetAtt lets us get ___________ - CORRECT-ANSWERSvalue associated with
an attribute from resource
Sample JSON code using Fn::GetAtt - CORRECT-ANSWERS"Fn::GetAtt":
["foobarELB","DNSName"]
NAT Instance vs NAT Gateway: which one has HA? - CORRECT-ANSWERSNAT
Gateway
NAT Instance is just ec2. ec2 instance goes down,NAT-ing goes down
What is ONE problem with NAT Instance: - CORRECT-ANSWERSbandwidth
limited to that of the NIC of that ec2 instance
ec2 type: way to remember: t2: use case - CORRECT-ANSWERSdeveloper
machine
Limit for cloud formation stacks per region. - CORRECT-ANSWERS200
Route53. Can you use latency resource set with weighted resource set in
combination? - CORRECT-ANSWERSYes
Route53 ______-based routing makes users get served by the servers in the
closest region - CORRECT-ANSWERSlatency
If you don't have listBucket permission AND the bucket does not exist: what
error do you get? - CORRECT-ANSWERS403 (permission denied), not 404
, From Miha Kralj: There were several questions related to DR solutions with
specified RPO/RTO times. Modern cloud-born solutions use completely
different BCP approach, but hey, someone in AWS really likes traditional
disaster recovery scenarios and is making sure that you love them too. I
know it is 2016, but you need to learn the old skool BCP techniques for this
exam. - CORRECT-ANSWERSok
Miha Kralj: Questions about the AWS Storage Gateway appear at least 3
times. Yeah. Storage Gateway. The stuff that cloud-native architects never
saw in action — nor do we want to. You have to learn the difference between
Cached Volumes, Stored Volumes and understand how VTL works. -
CORRECT-ANSWERSok
Miha K: Each question was a dense wall of text — not just the description of a
scenario, it provided extremely long and convoluted set of possible answers -
CORRECT-ANSWERSok
Miha K: Lots and lots and lots of questions on deployment management.
CloudFormation. Elastic Beanstalk. OpsWorks. Learn these three
technologies well — not well for an architect, but well for a 2nd-tier
escalation operations engineer - CORRECT-ANSWERSok
Miha K: Networking questions were everywhere, like 30% of the test or even
more: VPN/DirectConnect/VPC peering. For me, DDOS protection, WAF,
Cloudfront, and SSL/TLS stuff is networking too, although AWS treats them as
security issues. Anyway, the examiners *love* networking. Learn networking.
I mean, learn it like this is a Cisco exam, not a cloud architecture exam. -
CORRECT-ANSWERSok
Miha K: Federated access, SAML, IAM roles and all possible AuthZ/AuthN
scenarios — learn them all. Learn how IAM policies work. How cross-account
trust works. And specifically how they don't work. Think like troubleshooting
support personnel and what they need to know about identity flows; that's
what you need to know for this exam - CORRECT-ANSWERSok
Miha K: Whenever you see the need for high-performing scalable solution,
the answer is always DynamoDB. Even if you think that architecturally there
might be a better choice (Cassandra, or CouchDB anyone?), the correct
answer will be DynamoDB. People that wrote the test were clearly in love
with DynamoDB, Elasticache and Kinesis. Just pick the answer that includes
all three of them and you'll be right - CORRECT-ANSWERSok
Miha K: If a scenario is asking for something cheap (cost-effective), the
answer must include spot instances, SQS for throttling and perhaps S3 RRS
or Glacier. - CORRECT-ANSWERSok
PROFESSIONAL EXAM MAMUN 1-
100 QUESTIONS WITH ANSWERS
RTO - CORRECT-ANSWERSRecovery Time Objective
RPO - CORRECT-ANSWERSRecovery Point Objective
Name 3 example IaC tools that go with AWS: - CORRECT-ANSWERSTerraform
Cloudformation
OpsWorks
Fn::GetAtt lets us get ___________ - CORRECT-ANSWERSvalue associated with
an attribute from resource
Sample JSON code using Fn::GetAtt - CORRECT-ANSWERS"Fn::GetAtt":
["foobarELB","DNSName"]
NAT Instance vs NAT Gateway: which one has HA? - CORRECT-ANSWERSNAT
Gateway
NAT Instance is just ec2. ec2 instance goes down,NAT-ing goes down
What is ONE problem with NAT Instance: - CORRECT-ANSWERSbandwidth
limited to that of the NIC of that ec2 instance
ec2 type: way to remember: t2: use case - CORRECT-ANSWERSdeveloper
machine
Limit for cloud formation stacks per region. - CORRECT-ANSWERS200
Route53. Can you use latency resource set with weighted resource set in
combination? - CORRECT-ANSWERSYes
Route53 ______-based routing makes users get served by the servers in the
closest region - CORRECT-ANSWERSlatency
If you don't have listBucket permission AND the bucket does not exist: what
error do you get? - CORRECT-ANSWERS403 (permission denied), not 404
, From Miha Kralj: There were several questions related to DR solutions with
specified RPO/RTO times. Modern cloud-born solutions use completely
different BCP approach, but hey, someone in AWS really likes traditional
disaster recovery scenarios and is making sure that you love them too. I
know it is 2016, but you need to learn the old skool BCP techniques for this
exam. - CORRECT-ANSWERSok
Miha Kralj: Questions about the AWS Storage Gateway appear at least 3
times. Yeah. Storage Gateway. The stuff that cloud-native architects never
saw in action — nor do we want to. You have to learn the difference between
Cached Volumes, Stored Volumes and understand how VTL works. -
CORRECT-ANSWERSok
Miha K: Each question was a dense wall of text — not just the description of a
scenario, it provided extremely long and convoluted set of possible answers -
CORRECT-ANSWERSok
Miha K: Lots and lots and lots of questions on deployment management.
CloudFormation. Elastic Beanstalk. OpsWorks. Learn these three
technologies well — not well for an architect, but well for a 2nd-tier
escalation operations engineer - CORRECT-ANSWERSok
Miha K: Networking questions were everywhere, like 30% of the test or even
more: VPN/DirectConnect/VPC peering. For me, DDOS protection, WAF,
Cloudfront, and SSL/TLS stuff is networking too, although AWS treats them as
security issues. Anyway, the examiners *love* networking. Learn networking.
I mean, learn it like this is a Cisco exam, not a cloud architecture exam. -
CORRECT-ANSWERSok
Miha K: Federated access, SAML, IAM roles and all possible AuthZ/AuthN
scenarios — learn them all. Learn how IAM policies work. How cross-account
trust works. And specifically how they don't work. Think like troubleshooting
support personnel and what they need to know about identity flows; that's
what you need to know for this exam - CORRECT-ANSWERSok
Miha K: Whenever you see the need for high-performing scalable solution,
the answer is always DynamoDB. Even if you think that architecturally there
might be a better choice (Cassandra, or CouchDB anyone?), the correct
answer will be DynamoDB. People that wrote the test were clearly in love
with DynamoDB, Elasticache and Kinesis. Just pick the answer that includes
all three of them and you'll be right - CORRECT-ANSWERSok
Miha K: If a scenario is asking for something cheap (cost-effective), the
answer must include spot instances, SQS for throttling and perhaps S3 RRS
or Glacier. - CORRECT-ANSWERSok
