Practice for the Exams exam with 21 exam-style practice questions, instant answer reveals, and concise explanations of every correct answer. Topics include: A media startup is looking at hosting their web application on AWS Cloud. The application will be accessed by users from. Follow @CertPunch and visit certpunch.com for more certification practice exams and study content.
Prefer hands-on? Take this round as an interactive practice test — answer every question, get instant feedback, and see your score: Start the AWS Certified Solutions Architect – Associate practice test →
What you will practice
- A media startup is looking at hosting their web application on AWS Cloud. The application will be accessed by…
- An engineering team wants to orchestrate multiple Amazon ECS task types running on Amazon EC2 instances that…
- A company is migrating a legacy workload from on-premises to AWS. The application receives customer order fil…
- An e-commerce company has deployed its application on several Amazon EC2 instances that are configured in a p…
- Your application is hosted by a provider on yourapp.provider.com. You would like to have your users access yo…
- The engineering team at an e-commerce company wants to migrate from Amazon Simple Queue Service (Amazon SQS)…
Answers and explanations
Tap a question to expand the answer and the exam reasoning. Try to commit to your own pick first.
Q1. A media startup is looking at hosting their web application on AWS Cloud. The application will be accessed by users from different geographic regions of the world to upload and download video files that can reach a maximum size of 10 gigab…
Answer: C. Use Amazon S3 for hosting the web application and use Amazon S3 Transfer Acceleration (Amazon S3TA) to reduce the latency that geographically dispersed users might face
Amazon S3 Transfer Acceleration optimizes large file uploads by routing traffic over the AWS global backbone. CloudFront can also accelerate large transfers, creating slight ambiguity.
Q2. An engineering team wants to orchestrate multiple Amazon ECS task types running on Amazon EC2 instances that are part of an Amazon ECS cluster. The output and state data for all tasks need to be stored. The amount of data output by each ta…
Answer: B. Use Amazon EFS with Provisioned Throughput mode
Amazon EFS with Provisioned Throughput mode decouples throughput capacity from storage size, optimizing high-frequency access for smaller datasets. DynamoDB has a strict 400 KB item size limit, while standard EFS bursting relies heavily on the total data stored.
Q3. A company is migrating a legacy workload from on-premises to AWS. The application receives customer order files from an on-premises ERP system by using the SFTP protocol. After files arrive, the application must process them immediately ra…
Answer: C. Deploy an internal AWS Transfer Family SFTP server across two Availability Zones backed by Amazon S3. Configure a Transfer Family managed workflow to invoke an AWS Lambda function immediately after file upload completes
Deploying an internal Transfer Family server across multiple Availability Zones ensures secure network integration and high availability. Configuring a managed workflow to trigger Lambda guarantees immediate event-driven processing without relying on inefficient polling.
Q4. An e-commerce company has deployed its application on several Amazon EC2 instances that are configured in a private subnet using IPv4. These Amazon EC2 instances read and write a huge volume of data to and from Amazon S3 in the same AWS re…
Answer: A. Set up a VPC gateway endpoint for Amazon S3. Attach an endpoint policy to the endpoint. Update the route table to direct the S3-bound traffic to the VPC endpoint
A VPC gateway endpoint routes S3 traffic privately within the AWS network, bypassing the NAT gateway and eliminating data processing fees. Egress-only gateways apply to IPv6 traffic, and Gateway Load Balancer endpoints secure virtual appliances, not S3 access.
Q5. Your application is hosted by a provider on yourapp.provider.com. You would like to have your users access your application using www.your-domain.com, which you own and manage under Amazon Route 53. Which Amazon Route 53 record should you…
Answer: D. Create a CNAME record
A CNAME record maps one fully qualified domain name to another, which properly aliases the third-party application. Alias records only point to AWS resources, and A records map to IP addresses.
Q6. The engineering team at an e-commerce company wants to migrate from Amazon Simple Queue Service (Amazon SQS) Standard queues to FIFO (First-In-First-Out) queues with batching. As a solutions architect, which of the following steps would yo…
Answer: C,D,E. Make sure that the name of the FIFO (First-In-First-Out) queue ends with the .fifo suffix || Make sure that the throughput for the target FIFO (First-In-First-Out) queue does not exceed 3,000 messages per second || Delete the existing standard queue and recreate it as a FIFO (First-In-First-Out) queue
To migrate from an SQS standard queue, you must delete it and recreate a new FIFO queue with the mandatory .fifo suffix. FIFO queues support up to 3,000 messages per second when batching is enabled. You cannot convert existing queues.
Q7. A media company wants a low-latency way to distribute live sports results which are delivered via a proprietary application using UDP protocol. As a solutions architect, which of the following solutions would you recommend such that it off…
Answer: B. Use AWS Global Accelerator to provide a low latency way to distribute live sports results
AWS Global Accelerator optimizes non-HTTP traffic like UDP by routing users to optimal endpoints over the AWS global network. CloudFront is meant for HTTP and HTTPS content delivery, making it incompatible with proprietary UDP protocols.
Q8. A company has a license-based, expensive, legacy commercial database solution deployed at its on-premises data center. The company wants to migrate this database to a more efficient, open-source, and cost-effective option on AWS Cloud. The…
Answer: A,C. AWS Database Migration Service (AWS DMS) || AWS Schema Conversion Tool (AWS SCT)
Heterogeneous database migrations require the AWS Schema Conversion Tool to translate source schemas before moving data with AWS Database Migration Service. Basic Schema Copy omits stored procedures and foreign keys, failing complex requirements.
Q9. An online gaming application has a large chunk of its traffic coming from users who download static assets such as historic leaderboard reports and the game tactics for various games. The current infrastructure and design are unable to cop…
Answer: A. Use Amazon CloudFront with Amazon S3 as the storage solution for the static assets
Amazon CloudFront paired with Amazon S3 creates a highly available, serverless architecture ideal for delivering static assets globally without provisioning underlying infrastructure. Distractors involving relational databases or Lambda introduce unnecessary compute overhead for simple file downloads.
Q10. A regional transportation authority operates a high-traffic public information portal hosted on AWS. The backend consists of Amazon EC2 instances behind an Application Load Balancer (ALB). In recent weeks, the operations team has observed…
Answer: A. Subscribe to AWS Shield Advanced to gain proactive DDoS protection. Engage the AWS DDoS Response Team (DRT) to analyze traffic patterns and apply mitigations. Use the built-in logging and reporting to maintain an audit trail of detected events
AWS Shield Advanced provides managed DDoS protection, access to the DDoS Response Team, and detailed diagnostic reports for Layer 3, 4, and 7 attacks. Services like Inspector and GuardDuty focus on vulnerability and threat detection, not real-time volumetric attack mitigation.
Q11. A startup has created a new web application for users to complete a risk assessment survey via a self-administered questionnaire. The startup has purchased a domain using Amazon Route 53. The web development team would like to create an Am…
Answer: D. Create an alias record for covid19survey.com that routes traffic to www.covid19survey.com
Amazon Route 53 alias records allow traffic routing for a zone apex to specific AWS resources and other records. Alias queries to AWS resources are free, making them more cost-effective than standard CNAME records.
Q12. A social media startup uses AWS Cloud to manage its IT infrastructure. The engineering team at the startup wants to perform weekly database rollovers for a MySQL database server using a serverless cron job that typically takes about 5 minu…
Answer: B. Schedule a weekly Amazon EventBridge event cron expression to invoke an AWS Lambda function that runs the database rollover job
Amazon EventBridge can trigger AWS Lambda on a weekly cron schedule to execute a short Python script efficiently. AWS Glue is suited for heavy ETL processing, and EC2 instances violate the serverless requirement while adding unnecessary operational overhead.
Q13. A big data analytics company is working on a real-time vehicle tracking solution. The data processing workflow involves both I/O intensive and throughput intensive database workloads. The development team needs to store this real-time data…
Answer: D. Provisioned IOPS SSD (io1)
Provisioned IOPS SSD volumes deliver consistent, high-performance storage tailored for I/O intensive workloads. It easily scales to 25,000 IOPS per volume, whereas standard SSDs cap at 16,000 and HDDs offer significantly lower limits.
Q14. The development team at a retail company wants to optimize the cost of Amazon EC2 instances. The team wants to move certain nightly batch jobs to spot instances. The team has hired you as a solutions architect to provide the initial guidan…
Answer: D,E,F. If a spot request is persistent, then it is opened again after your Spot Instance is interrupted || Spot Fleets can maintain target capacity by launching replacement instances after Spot Instances in the fleet are terminated || When you cancel an active spot request, it does not terminate the associated instance
Persistent spot requests reopen after an instance is interrupted, and Spot Fleets automatically launch replacement instances to maintain target capacity. Canceling an active spot request does not terminate its already running associated instances.
Q15. A retail company uses AWS Cloud to manage its IT infrastructure. The company has set up AWS Organizations to manage several departments running their AWS accounts and using resources such as Amazon EC2 instances and Amazon RDS databases. T…
Answer: C. Use VPC sharing to share one or more subnets with other AWS accounts belonging to the same parent organization from AWS Organizations
VPC sharing via AWS Resource Access Manager enables sharing individual subnets across accounts within AWS Organizations. VPC peering connects entire VPC networks and does not support centralized subnet sharing for highly interconnected application resources.
Q16. A healthcare startup is modernizing its monolithic Python-based analytics application by transitioning to a microservices architecture on AWS. As a pilot, the team wants to refactor one module into a standalone microservice that can handle…
Answer: B. Use AWS Lambda to run the Python-based microservice. Integrate it with Amazon API Gateway for HTTP access and enable provisioned concurrency for performance during peak loads
AWS Lambda paired with Amazon API Gateway provides a fully managed, automatically scaling serverless architecture ideal for Python microservices. Provisioned concurrency further reduces cold start latency. Container services like ECS require more operational overhead.
Q17. A small business has been running its IT systems on the on-premises infrastructure but the business now plans to migrate to AWS Cloud for operational efficiencies. As a Solutions Architect, can you suggest a cost-effective serverless solut…
Answer: C. Host the static content on Amazon S3 and use AWS Lambda with Amazon DynamoDB for the serverless web application that handles dynamic content. Amazon CloudFront will sit in front of AWS Lambda for distribution across diverse regions
A serverless architecture requires services that do not require you to provision or manage servers, making S3, Lambda, and DynamoDB the ideal combination here. Options using Amazon EC2 are eliminated because virtual servers require operating system management.
Q18. The engineering team at a company wants to use Amazon Simple Queue Service (Amazon SQS) to decouple components of the underlying application architecture. However, the team is concerned about the VPC-bound components accessing Amazon Simpl…
Answer: A. Use VPC endpoint to access Amazon SQS
VPC endpoints powered by AWS PrivateLink allow private connectivity to supported AWS services without traversing the public internet. Since the requirement is to keep traffic off the public internet, options relying on internet gateways, NAT devices, or VPNs are invalid.
Q19. A health care application processes the real-time health data of the patients into an analytics workflow. With a sharp increase in the number of users, the system has become slow and sometimes even unresponsive as it does not have a retry…
Answer: B. Use Amazon Kinesis Data Streams to ingest the data, process it using AWS Lambda or run analytics using Amazon Kinesis Data Analytics
Amazon Kinesis Data Streams provides massive scalability for real-time data streaming and integrates natively with Lambda for analytics. SQS handles message decoupling, but Kinesis is purpose-built for high-throughput streaming time-series data.
Q20. A company maintains its business-critical customer data on an on-premises system in an encrypted format. Over the years, the company has transitioned from using a single encryption key to multiple encryption keys by dividing the data into…
Answer: B. Configure a single Amazon S3 bucket to hold all data. Use server-side encryption with Amazon S3 managed keys (SSE-S3) to encrypt the data
When using Amazon S3 server-side encryption with S3 managed keys (SSE-S3), each object is automatically encrypted with a unique data key. This satisfies the requirement for unique keys without requiring complex data partitioning or KMS configuration.
Q21. The database backend for a retail company's website is hosted on Amazon RDS for MySQL having a primary instance and three read replicas to support read scalability. The company has mandated that the read replicas should lag no more than 1…
Answer: C. Set up database migration from Amazon RDS MySQL to Amazon Aurora MySQL. Swap out the MySQL read replicas with Aurora Replicas. Configure Aurora Auto Scaling
Migrating to Amazon Aurora MySQL provides low-latency replicas that share the same distributed storage volume as the primary instance. This virtually eliminates replication lag without requiring code changes or intense resource management.
More AWS Certified Solutions Architect – Associate drills and other practice exams are on @CertPunch. New rounds drop every few days at certpunch.com.