AWS Certified Solutions Architect - Associate
758 questions · 130 min · Pass 720
- #1Design High-Performing Architectures
A development team runs a database that is idle most of the day but has short bursts of heavy activity. They want to avoid paying for unused capacity. Which database option fits?
- #2Design Secure Architectures
A web application behind an Application Load Balancer is vulnerable to SQL injection attacks. Which AWS service combination best mitigates this threat?
- #3Design Resilient Architectures
A SaaS company requires zero-downtime global deployments where both us-east-1 and eu-west-1 serve live write traffic simultaneously. If one region fails, the other must continue without data loss. Which architecture pattern is needed?
- #4Design Cost-Optimized Architectures
A company has an API that receives requests in bursts—thousands per minute during business hours, near zero at night. Currently running on EC2 24/7. How can costs be reduced without impacting performance?
- #5Design Resilient Architectures
A web application experiences unpredictable traffic spikes. The architecture must automatically add EC2 instances when CPU exceeds 70% and remove them when traffic subsides. Which combination should be used?
- #6Design Cost-Optimized Architectures
A company stores log files in S3 Standard. Logs are accessed frequently for 30 days, occasionally for 90 days, then rarely but must be retained for 7 years for compliance. Which S3 lifecycle configuration minimizes cost?
- #7Design High-Performing Architectures
A research team runs tightly coupled HPC workloads that require the lowest possible network latency between EC2 instances. Which placement strategy should be used?
- #8Design High-Performing Architectures
A company receives image uploads to S3 and needs to automatically generate thumbnails within seconds. The workload is sporadic with zero traffic at night. Which compute option is most efficient?
- #9Design Secure Architectures
A security team must enforce multi-factor authentication for all IAM users accessing the AWS Management Console. Which approach achieves this?
- #10Design Secure Architectures
Company A needs to give Company B's application temporary read access to an S3 bucket in Company A's AWS account. Which method is most secure?
- #11Design Resilient Architectures
A company hosts its primary website in us-east-1 and a disaster recovery copy in eu-west-1. If the primary becomes unhealthy, DNS should automatically resolve to the DR site. Which Route 53 routing policy should be used?
- #12Design Cost-Optimized Architectures
A company's monthly AWS bill shows high NAT Gateway data processing charges from instances in private subnets accessing S3 frequently. How should the architect reduce these costs?
- #13Design Cost-Optimized Architectures
A company stores data in S3 but cannot predict access patterns. Some objects are accessed daily while others go months without access. Which storage class automatically optimizes cost without retrieval fees?
- #14Design Cost-Optimized Architectures
A company notices its EC2 costs are higher than expected. Many instances show average CPU utilization below 10%. Which AWS tool helps identify and recommend right-sizing opportunities?
- #15Design Secure Architectures
A healthcare company stores patient records in S3 and must ensure encryption at rest with a full audit trail of key usage. Which encryption option meets these requirements?
- #16Design High-Performing Architectures
A multiplayer game server in us-east-1 serves players globally. Players in Asia experience high latency and packet loss due to internet routing inefficiencies. Which AWS service improves network performance without adding new regional deployments?
- #17Design Secure Architectures
A company must encrypt its RDS MySQL database at rest using keys it controls and rotates annually. Which approach meets this requirement?
- #18Design Secure Architectures
A development team hardcodes database credentials in application source code. Which AWS service should they use to store and automatically rotate these credentials?
- #19Design Secure Architectures
A financial company must log all API calls across all AWS regions for compliance auditing. Which service should be configured?
- #20Design Resilient Architectures
A system must send each uploaded file notification to three independent processing services simultaneously. If one service is down, the others must still receive the message. Which architecture achieves this?
Want to track your score, take timed mock exams and get AI explanations? Create a free account