2024 AWS SOLUTIONS ARCHITECT
ASSOCIATE EXAM WITH CORRECT
ANSWERS
What's the only S3 class that doesn't offer 99.999999999% (x11) durability?
- CORRECT-ANSWERSReduced Redundancy Storage
What should you do in DynamoDB to increase consistency? - CORRECT-
ANSWERSCode for strongly consistent reads (even though it costs a little
more)
For S3-IA and OneZone-IA, if you delete your data inside before 30 days, will
you still be charged for 30 days? - CORRECT-ANSWERSYes
S3 Standard - CORRECT-ANSWERSgeneral purpose storage for frequently
accessed data
S3 Reduced Redundancy - CORRECT-ANSWERSfor non-critical, reproducible
data that can be stored with less redundancy than STANDARD. (Not
recommended because S3 standard is more effective)
S3 IA (Infrequently Accessed) - CORRECT-ANSWERSfor long lived, but less
frequently accessed data. It stores objects redundantly across multiple
geographically separated AZs.
S3-OneZone-IA - CORRECT-ANSWERSStores object data in only one AZ. Less
expensive than S3-IA, but data is not resilient to the physical loss of the AZ.
S3 for infrequently accessed objects should be used for data of at least ____
KB, for at least ____ days. - CORRECT-ANSWERS128; 30
S3 Glacier - CORRECT-ANSWERSFor long-term archive; archived objects are
not available for real time access, meaning you must restore them first.
You cannot specify Glacier as the storage class at the time you create an
object; Glacier objects visible through S3 only.
3 types of Glacier retrieval - CORRECT-ANSWERS1. Expedited (1-5 mins;
can't do super large objects; can do on-demand or provisioned)
2. Standard (3-5 hours; default option)
3. Bulk (5-12 hours, good for large amounts of data, low-cost)
,S3 standard, S3-IA and Glacier automatically store your objects spanning a
minimum of ____ AZs. - CORRECT-ANSWERS3
T/F: FTP uses TCP and NOT UDP - CORRECT-ANSWERSTrue
Kinesis Shards - CORRECT-ANSWERSData streams are made of shards.
Write: each shard can support up to 1,000 records per second
Read: each shard can support up to 5 transactions per second
Do relational (SQL) databases scale well? - CORRECT-ANSWERSNo, they are
known for bring rigid.
Does SSL only encrypt data in transit? - CORRECT-ANSWERSYes
Can you load streaming data into Elastisearch? - CORRECT-ANSWERSYes
How many IP addresses can "/27" support? - CORRECT-ANSWERS32; (32-27)
= 5, 2^5 = 32
Amazon DynamoDB Accelerator (DAX) - CORRECT-ANSWERSin-memory
cache that can reduce DynamoDB response times from milliseconds to
microseconds.
Purpose if using RAID 1 - CORRECT-ANSWERSprovide mirroring, redundancy
and fault tolerance
RAID 0 purpose - CORRECT-ANSWERSprovides faster read and write
operations
Is there such a thing as on-premises encryption? - CORRECT-ANSWERSNo
Does Web Identity Federation utilize Active Directory? - CORRECT-
ANSWERSNo
In an ideal VPC, where do you launch database servers, web servers and
ELBs? - CORRECT-ANSWERSWeb Servers and ELBs should go in the public
subnet, and database servers should go in the private subnet.
Do DynamoDB and CloudFront have a read replica feature? - CORRECT-
ANSWERSNo
Does read replica provide synchronous or asynchronous replication? -
CORRECT-ANSWERSAsynchronous
,Data in an ephemeral (temporary) storage volume will be deleted completely
if (3)... - CORRECT-ANSWERS1. The underlying disk drive fails
2. The instance stops
3. The instance terminates
Can you manage your own underlying operating system with EC2 and EMR? -
CORRECT-ANSWERSYes; these are not managed by AWS.
Is the data in an instance store ephemeral? - CORRECT-ANSWERSYes
SSH protocol uses _____ and ______. - CORRECT-ANSWERSTCP and Port 22
When an EC2 instance becomes unhealthy, what does the ELB do? -
CORRECT-ANSWERSStops sending traffic to that EC2 instance and sends only
to the healthy one.
Redshift is primarily used for what type of system? - CORRECT-
ANSWERSOLAP
In Redshift, you can use Workload Management (WLM) to... - CORRECT-
ANSWERSdefine the number of query queues that are available, and how
queries are routed to those queues for processing
CloudTrail - CORRECT-ANSWERSprovides a record of the activity taking place
in an AWS account
Audit logging is used to... - CORRECT-ANSWERSget information about the
connection, queries, and user activities in Redshift Cluster
Redshift Spectrum is used to... - CORRECT-ANSWERSrun queries against
exabytes of data in S3 with no loading or ETL required
Do you have to enabled Enhanced VPC Routing and set up the required VPC
configuration to create a flow log for your Redshift Cluster since you can't
create one by default? - CORRECT-ANSWERSYes
Is Elasticache a file storage system? - CORRECT-ANSWERSNo
Can Cloudwatch track API calls? - CORRECT-ANSWERSNo
AWS X-ray - CORRECT-ANSWERSAWS X-Ray helps developers analyze and
debug distributed applications in production or
under development, such as those built using a microservices architecture.
, Redshift Spectrum - CORRECT-ANSWERSenables you to query and analyze all
of your data in Amazon S3 using the open data formats you already use, with
no data loading or transformations needed.
DynamoDB Stream - CORRECT-ANSWERSan ordered flow of information
about changes to items in an Amazon DynamoDB table. When you enable a
stream on a table, DynamoDB captures information about every modification
to data items in the table.
The recommended way to secure private data in AWS is through... -
CORRECT-ANSWERSSecrets Manager or Systems Manager Parameter Store
Is it recommended to store sensitive credentials in S3? - CORRECT-
ANSWERSNo
Does CloudFront do a lot for the backend? - CORRECT-ANSWERSNo
Does a security group affect inbound and outbound traffic at the VPC level? -
CORRECT-ANSWERSNo, just the instance level.
Enhanced Monitoring is a feature of... - CORRECT-ANSWERSRDS
When would you use CloudFront Signed URLs - CORRECT-ANSWERS-You want
to use an RTMP distribution. Signed cookies aren't supported for RTMP
distributions.
-You want to restrict access to individual files, for example, an installation
download for your application.
-Your users are using a client (for example, a custom HTTP client) that
doesn't support cookies.
When would you use CloudFront Signed Cookies - CORRECT-ANSWERS-You
want to provide access to multiple restricted files, for example, all of the files
for a video in HLS format or all of the files in the subscribers' area of a
website.
-You don't want to change your current URLs.
Field Level Encryption - CORRECT-ANSWERSsecurely upload user submitted
sensitive information to your web server
Do EBS snapshots occur synchronously or asynchronously - CORRECT-
ANSWERSAsynchronously; an in progress snapshot doesn't affect anything
Is Elasticache used as an in memory data store? - CORRECT-ANSWERSYes
Does DynamoDB support both document and key-value store models? -
CORRECT-ANSWERSYes
ASSOCIATE EXAM WITH CORRECT
ANSWERS
What's the only S3 class that doesn't offer 99.999999999% (x11) durability?
- CORRECT-ANSWERSReduced Redundancy Storage
What should you do in DynamoDB to increase consistency? - CORRECT-
ANSWERSCode for strongly consistent reads (even though it costs a little
more)
For S3-IA and OneZone-IA, if you delete your data inside before 30 days, will
you still be charged for 30 days? - CORRECT-ANSWERSYes
S3 Standard - CORRECT-ANSWERSgeneral purpose storage for frequently
accessed data
S3 Reduced Redundancy - CORRECT-ANSWERSfor non-critical, reproducible
data that can be stored with less redundancy than STANDARD. (Not
recommended because S3 standard is more effective)
S3 IA (Infrequently Accessed) - CORRECT-ANSWERSfor long lived, but less
frequently accessed data. It stores objects redundantly across multiple
geographically separated AZs.
S3-OneZone-IA - CORRECT-ANSWERSStores object data in only one AZ. Less
expensive than S3-IA, but data is not resilient to the physical loss of the AZ.
S3 for infrequently accessed objects should be used for data of at least ____
KB, for at least ____ days. - CORRECT-ANSWERS128; 30
S3 Glacier - CORRECT-ANSWERSFor long-term archive; archived objects are
not available for real time access, meaning you must restore them first.
You cannot specify Glacier as the storage class at the time you create an
object; Glacier objects visible through S3 only.
3 types of Glacier retrieval - CORRECT-ANSWERS1. Expedited (1-5 mins;
can't do super large objects; can do on-demand or provisioned)
2. Standard (3-5 hours; default option)
3. Bulk (5-12 hours, good for large amounts of data, low-cost)
,S3 standard, S3-IA and Glacier automatically store your objects spanning a
minimum of ____ AZs. - CORRECT-ANSWERS3
T/F: FTP uses TCP and NOT UDP - CORRECT-ANSWERSTrue
Kinesis Shards - CORRECT-ANSWERSData streams are made of shards.
Write: each shard can support up to 1,000 records per second
Read: each shard can support up to 5 transactions per second
Do relational (SQL) databases scale well? - CORRECT-ANSWERSNo, they are
known for bring rigid.
Does SSL only encrypt data in transit? - CORRECT-ANSWERSYes
Can you load streaming data into Elastisearch? - CORRECT-ANSWERSYes
How many IP addresses can "/27" support? - CORRECT-ANSWERS32; (32-27)
= 5, 2^5 = 32
Amazon DynamoDB Accelerator (DAX) - CORRECT-ANSWERSin-memory
cache that can reduce DynamoDB response times from milliseconds to
microseconds.
Purpose if using RAID 1 - CORRECT-ANSWERSprovide mirroring, redundancy
and fault tolerance
RAID 0 purpose - CORRECT-ANSWERSprovides faster read and write
operations
Is there such a thing as on-premises encryption? - CORRECT-ANSWERSNo
Does Web Identity Federation utilize Active Directory? - CORRECT-
ANSWERSNo
In an ideal VPC, where do you launch database servers, web servers and
ELBs? - CORRECT-ANSWERSWeb Servers and ELBs should go in the public
subnet, and database servers should go in the private subnet.
Do DynamoDB and CloudFront have a read replica feature? - CORRECT-
ANSWERSNo
Does read replica provide synchronous or asynchronous replication? -
CORRECT-ANSWERSAsynchronous
,Data in an ephemeral (temporary) storage volume will be deleted completely
if (3)... - CORRECT-ANSWERS1. The underlying disk drive fails
2. The instance stops
3. The instance terminates
Can you manage your own underlying operating system with EC2 and EMR? -
CORRECT-ANSWERSYes; these are not managed by AWS.
Is the data in an instance store ephemeral? - CORRECT-ANSWERSYes
SSH protocol uses _____ and ______. - CORRECT-ANSWERSTCP and Port 22
When an EC2 instance becomes unhealthy, what does the ELB do? -
CORRECT-ANSWERSStops sending traffic to that EC2 instance and sends only
to the healthy one.
Redshift is primarily used for what type of system? - CORRECT-
ANSWERSOLAP
In Redshift, you can use Workload Management (WLM) to... - CORRECT-
ANSWERSdefine the number of query queues that are available, and how
queries are routed to those queues for processing
CloudTrail - CORRECT-ANSWERSprovides a record of the activity taking place
in an AWS account
Audit logging is used to... - CORRECT-ANSWERSget information about the
connection, queries, and user activities in Redshift Cluster
Redshift Spectrum is used to... - CORRECT-ANSWERSrun queries against
exabytes of data in S3 with no loading or ETL required
Do you have to enabled Enhanced VPC Routing and set up the required VPC
configuration to create a flow log for your Redshift Cluster since you can't
create one by default? - CORRECT-ANSWERSYes
Is Elasticache a file storage system? - CORRECT-ANSWERSNo
Can Cloudwatch track API calls? - CORRECT-ANSWERSNo
AWS X-ray - CORRECT-ANSWERSAWS X-Ray helps developers analyze and
debug distributed applications in production or
under development, such as those built using a microservices architecture.
, Redshift Spectrum - CORRECT-ANSWERSenables you to query and analyze all
of your data in Amazon S3 using the open data formats you already use, with
no data loading or transformations needed.
DynamoDB Stream - CORRECT-ANSWERSan ordered flow of information
about changes to items in an Amazon DynamoDB table. When you enable a
stream on a table, DynamoDB captures information about every modification
to data items in the table.
The recommended way to secure private data in AWS is through... -
CORRECT-ANSWERSSecrets Manager or Systems Manager Parameter Store
Is it recommended to store sensitive credentials in S3? - CORRECT-
ANSWERSNo
Does CloudFront do a lot for the backend? - CORRECT-ANSWERSNo
Does a security group affect inbound and outbound traffic at the VPC level? -
CORRECT-ANSWERSNo, just the instance level.
Enhanced Monitoring is a feature of... - CORRECT-ANSWERSRDS
When would you use CloudFront Signed URLs - CORRECT-ANSWERS-You want
to use an RTMP distribution. Signed cookies aren't supported for RTMP
distributions.
-You want to restrict access to individual files, for example, an installation
download for your application.
-Your users are using a client (for example, a custom HTTP client) that
doesn't support cookies.
When would you use CloudFront Signed Cookies - CORRECT-ANSWERS-You
want to provide access to multiple restricted files, for example, all of the files
for a video in HLS format or all of the files in the subscribers' area of a
website.
-You don't want to change your current URLs.
Field Level Encryption - CORRECT-ANSWERSsecurely upload user submitted
sensitive information to your web server
Do EBS snapshots occur synchronously or asynchronously - CORRECT-
ANSWERSAsynchronously; an in progress snapshot doesn't affect anything
Is Elasticache used as an in memory data store? - CORRECT-ANSWERSYes
Does DynamoDB support both document and key-value store models? -
CORRECT-ANSWERSYes
