AWS Solutions Architect Associate (SAA-C03) — Practice

Questions in this quiz

1. 1. A web tier in a public subnet must call an internal API on EC2 instances in a private subnet. Which design is most secure and cost-effective?
   1. Place both tiers in public subnets with security groups.
   2. Put the API in a private subnet and route through a NAT gateway.
   3. Put the API in a private subnet, expose it via an internal Application Load Balancer, restrict by security group to the web tier.
   4. Use a VPN connection between the two subnets.
2. 2. An application needs to store session state shared across Auto Scaling group instances with sub-millisecond reads. Which service?
   1. Amazon RDS
   2. Amazon DynamoDB with DAX
   3. Amazon ElastiCache for Redis
   4. Amazon S3
3. 3. Which approach provides the highest availability for an RDS database across an AWS Region?
   1. Single-AZ RDS with automated backups
   2. Multi-AZ RDS deployment
   3. Read replicas in the same AZ
   4. Manual snapshots every hour
4. 4. A workload uploads thousands of small files per second to S3 from many clients. Latency is increasing. What should you check first?
   1. S3 bucket policy
   2. S3 Transfer Acceleration is enabled
   3. Whether requests are spread across many key prefixes (no longer required since 2018, but partition warmup may apply)
   4. S3 Storage Class
5. 5. An application running on EC2 needs to call S3 without traversing the public internet. What should you configure?
   1. NAT gateway
   2. Internet gateway
   3. VPC Gateway Endpoint for S3
   4. AWS Direct Connect
6. 6. Which storage option offers shared POSIX-compliant file access across multiple Linux EC2 instances?
   1. Amazon EBS
   2. Amazon S3
   3. Amazon EFS
   4. Amazon FSx for Windows
7. 7. A company wants to decouple a producer from a fleet of worker EC2 instances. Messages must be delivered at least once and processed in any order. Which service?
   1. Amazon SQS Standard
   2. Amazon SQS FIFO
   3. Amazon SNS
   4. Amazon MQ
8. 8. Which combination provides cross-Region disaster recovery for an S3 bucket with versioning?
   1. S3 lifecycle policies
   2. Cross-Region Replication (CRR) with versioning enabled on source and destination
   3. S3 Intelligent-Tiering
   4. Multipart uploads
9. 9. Which AWS service provides DDoS protection with detailed visibility and automatic mitigation at the application layer?
   1. AWS Shield Standard
   2. AWS Shield Advanced
   3. AWS WAF alone
   4. Amazon GuardDuty
10. 10. An application has unpredictable traffic spikes. Which compute platform scales fastest with the least management overhead for HTTP APIs?
    1. EC2 Auto Scaling group with ALB
    2. AWS Lambda behind API Gateway
    3. ECS on EC2
    4. Elastic Beanstalk with multi-AZ
11. 11. Which feature lets you grant temporary, scoped access to AWS resources for a federated user?
    1. IAM users with long-lived keys
    2. IAM roles with STS AssumeRole
    3. Root account credentials
    4. Access key rotation
12. 12. A read-heavy MySQL workload on RDS is hitting CPU limits. Which is the most appropriate first step?
    1. Increase backup retention
    2. Add an RDS read replica and offload reads
    3. Switch to Multi-AZ
    4. Enable encryption at rest