AWS Solutions Architect Professional Practice Test

Answer choices

1. A. Purchase Standard Reserved Instances for one EC2 instance type and expect the discount to apply to Fargate and Lambda, for the stated implementation and support requirements.
2. B. Purchase a Compute Savings Plan that applies to eligible EC2, Fargate, and Lambda usage in exchange for a committed hourly spend, for the affected environment.
3. C. Use Auto Scaling to shut down all compute at night regardless of workload availability requirements, for the required cost optimization outcome.
4. D. Assume an Enterprise Discount Program creates one flat rate for every Fargate task, as the proposed design for the complete governed operational workflow.

Wrong-answer review

• A. Purchase Standard Reserved Instances for one EC2 instance type and expect the discount to apply to Fargate and Lambda, for the stated implementation and support requirements.: Standard Reserved Instances are tied to EC2 attributes and do not cover Fargate or Lambda.
• C. Use Auto Scaling to shut down all compute at night regardless of workload availability requirements, for the required cost optimization outcome.: Scheduled shutdown can break workloads and is not a purchasing model.
• D. Assume an Enterprise Discount Program creates one flat rate for every Fargate task, as the proposed design for the complete governed operational workflow.: Enterprise agreements are negotiated commercial constructs and do not replace Savings Plans behavior.

Answer choices

1. A. Start AWS Application Migration Service replication for every server before mapping application dependencies, as the primary implementation for the described business requirement.
2. B. Use AWS Database Migration Service only and assume the application tier can be cut over at any time, within the documented operational, security, ownership, and validation requirements.
3. C. Create the target VPC and change production DNS before testing the migrated application, within the described operational context.
4. D. Use discovery data with AWS Migration Hub to group dependencies and plan migration waves before cutover, as the primary proposed approach.

Answer choices

1. A. Use VPC peering between every pair of accounts and rely on manual route updates, for the required operational result and control objective.
2. B. Use an S3 gateway endpoint as the shared connection point for branch offices, within the defined security and accountability boundaries.
3. C. Publish private services through public load balancers and restrict access by source IP, for this decision.
4. D. Use AWS Transit Gateway as the central routing hub for VPC, VPN, and Direct Connect attachments, within this context.

Answer choices

1. A. Attach the VPCs and on-premises connections to AWS Transit Gateway and manage routing centrally, for the required hybrid and network design outcome.
2. B. Use an internet gateway in a central VPC and advertise its public IP address to every on-premises router.
3. C. Deploy one Site-to-Site VPN per application VPC without a shared routing hub, within the documented scope, ownership, and validation boundaries.
4. D. Use AWS RAM resource shares to exchange route tables between accounts, for the required hybrid and network design outcome.

Answer choices

1. A. Deploy a NAT gateway in a public subnet in each Availability Zone and route each private subnet to the NAT gateway in the same Availability Zone, under the stated technical, operational, and governance constraints.
2. B. Run one small NAT instance in a private subnet and assign it an Elastic IP address, as the recommended implementation across the complete governed service lifecycle.
3. C. Attach an internet gateway directly to each private subnet and route private instances to it, for the described technical objective and its associated operational control requirements, for the required outcome.
4. D. Create a VPC endpoint for a third-party repository and use it for all internet-bound traffic, for the described technical objective and its associated operational control requirements, as proposed.

Answer choices

1. A. Request a quota increase for one VPN tunnel and send all traffic through that single tunnel, under the stated technical, operational, and governance constraints.
2. B. Enable ECMP routing on AWS Transit Gateway and use multiple Site-to-Site VPN tunnels to the customer gateway, as described.
3. C. Replace the VPN with VPC peering over the public internet, under the documented operational and governance requirements.
4. D. Use an Application Load Balancer to distribute database backup traffic across VPN tunnels, within the defined security and accountability boundaries.

Answer choices

1. A. Create nightly AMIs of the application servers and rely on operators to rebuild the stack during an outage, within organization-wide risk-and-accountability boundaries.
2. B. Design the workload with isolated failure domains, automated recovery, validated backups, and redundancy that matches the RTO and RPO, within the resilient architectures context.
3. C. Scale the primary database instance vertically so it is less likely to fail, under the stated technical, operational, and governance constraints.
4. D. Use Amazon CloudFront caching for every request, including write transactions, to avoid database failover design, within the proposed design.

Answer choices

1. A. Create a permanent IAM user and browser-stored access keys for each tenant, for the described technical objective and its associated operational control requirements, within the proposed design.
2. B. Pass an STS session policy with the AssumeRole request that restricts the temporary credentials to the tenant-specific S3 prefix, within the defined security and accountability boundaries.
3. C. Add thousands of tenant-specific statements directly to one bucket policy, within the documented operational, security, ownership, and validation requirements.
4. D. Create an S3 access point for each tenant and configure the tenant router to use it, within the documented operational, security, ownership, and validation requirements.

Answer choices

1. A. Match storage tiers, compute scaling, and purchasing options to access patterns and recovery requirements.
2. B. Buy three-year Reserved Instances for every workload before collecting utilization data, in the described situation.
3. C. Move all data to S3 Glacier Deep Archive, including data used by active services, under end-to-end security-and-governance requirements.
4. D. Turn off all production resources every night with a scheduled script, as the primary implementation for the described business requirement.

Answer choices

1. A. Layer identity boundaries, network isolation, encryption, centralized logs, and detective controls around the healthcare container workloads, as the selected approach for the stated technical and business outcome.
2. B. Rely on a single S3 bucket policy to protect all services in all accounts, as the primary implementation for the described business requirement.
3. C. Centralize passwords in a spreadsheet that only the security team can edit, for the described technical objective and its associated operational control requirements, as proposed.
4. D. Use larger subnets so workloads do not need multiple VPCs or account boundaries, for the described technical objective and its associated operational control requirements, under organization-wide implementation-governance requirements.