Architecting on AWS Certification Amazon Web Services 2 — Questions and Answers
Question 1: A company needs to run a stateful workload that requires persistent block storage with consistent low-latency performance. Which AWS service is the best fit?
- Amazon S3
- Amazon EBS (Correct answer)
- Amazon EFS
- Amazon Glacier
Correct answer: Amazon EBS
Amazon EBS provides persistent block storage with consistent low-latency performance ideal for stateful workloads like databases.
Question 2: Which VPC feature allows instances in a private subnet to initiate outbound internet traffic without exposing them to inbound connections?
- Internet Gateway
- VPC Peering
- NAT Gateway (Correct answer)
- Transit Gateway
Correct answer: NAT Gateway
A NAT Gateway allows private subnet instances to initiate outbound internet connections while blocking unsolicited inbound traffic.
Question 3: An architect wants to decouple a producer microservice from multiple consumer microservices using a fan-out pattern. Which combination of AWS services achieves this?
- SQS to SQS
- SNS to SQS (Correct answer)
- EventBridge to Kinesis
- SQS to SNS
Correct answer: SNS to SQS
SNS publishes a message once and fans it out to multiple SQS queues, decoupling producers from consumers.
Question 4: Which AWS Well-Architected pillar focuses on the ability of a system to recover from failures and dynamically acquire resources to meet demand?
- Security
- Reliability (Correct answer)
- Performance Efficiency
- Operational Excellence
Correct answer: Reliability
The Reliability pillar addresses recovering from failures and dynamically scaling to meet demand.
Question 5: A workload requires storing session state shared across multiple EC2 instances in an Auto Scaling group. Which service is best suited for this?
- Amazon EBS Multi-Attach
- Amazon ElastiCache (Correct answer)
- Amazon RDS Read Replicas
- AWS Storage Gateway
Correct answer: Amazon ElastiCache
ElastiCache provides a fast, shared in-memory data store for session state accessible by all instances in an Auto Scaling group.
Question 6: What is the primary purpose of an AWS Service Control Policy (SCP) in AWS Organizations?
- Grant IAM permissions to users
- Define guardrails for maximum permissions in member accounts (Correct answer)
- Enable cross-account role assumption
- Configure VPC flow logs
Correct answer: Define guardrails for maximum permissions in member accounts
SCPs set permission guardrails that limit what actions can be performed in member accounts, regardless of IAM policies.
Question 7: Which CloudFront feature allows you to run custom code at edge locations to modify HTTP requests and responses with sub-millisecond latency?
- CloudFront Functions (Correct answer)
- Lambda@Edge
- CloudFront Origins
- AWS WAF Rules
Correct answer: CloudFront Functions
CloudFront Functions execute lightweight JavaScript at edge locations with sub-millisecond startup for simple request/response manipulation.
Architecting on AWS Certification Amazon Web Services 2
A company needs to run a stateful workload that requires persistent block storage with consistent low-latency performance.
Which AWS service is the best fit?