Architecting on AWS Certification Amazon Web Services 4 — Questions and Answers
Question 1: A company wants to migrate an on-premises VMware environment to AWS with minimal changes. Which service is specifically designed for this use case?
- AWS Database Migration Service
- AWS Application Migration Service
- VMware Cloud on AWS (Correct answer)
- AWS Snowball Edge
Correct answer: VMware Cloud on AWS
VMware Cloud on AWS lets customers run their VMware workloads natively on AWS infrastructure without refactoring.
Question 2: Which AWS networking feature provides a private, dedicated network connection between an on-premises data center and AWS, bypassing the public internet?
- AWS Site-to-Site VPN
- AWS Direct Connect (Correct answer)
- AWS PrivateLink
- AWS Transit Gateway
Correct answer: AWS Direct Connect
AWS Direct Connect establishes a dedicated private network connection from on-premises to AWS, offering consistent bandwidth and latency.
Question 3: An architect needs to ensure that an RDS database can survive an Availability Zone failure with automatic failover and no data loss. Which feature enables this?
- RDS Read Replicas
- RDS Multi-AZ Deployment (Correct answer)
- RDS Snapshot Restore
- RDS Proxy
Correct answer: RDS Multi-AZ Deployment
RDS Multi-AZ maintains a synchronous standby replica in a different AZ and automatically fails over to it if the primary instance fails.
Question 4: Which AWS service provides a fully managed Apache Kafka-compatible streaming service for real-time data ingestion and processing?
- Amazon Kinesis Data Streams
- Amazon MSK (Correct answer)
- Amazon SQS FIFO
- AWS Glue Streaming
Correct answer: Amazon MSK
Amazon MSK (Managed Streaming for Apache Kafka) is a fully managed service that makes it easy to build and run Kafka-based streaming applications.
Question 5: A company needs to run containers without managing underlying servers. Which two AWS services support serverless container execution? (Choose the best single answer representing both)
- ECS with EC2 launch type
- EKS with managed node groups
- AWS Fargate (Correct answer)
- Amazon Lightsail Containers
Correct answer: AWS Fargate
AWS Fargate is the serverless compute engine for containers that works with both ECS and EKS, removing the need to provision or manage servers.
Question 6: Which caching strategy writes data to the cache and the database simultaneously, ensuring cache and database are always in sync?
- Lazy loading (cache-aside)
- Write-through (Correct answer)
- Write-behind (write-back)
- Read-through
Correct answer: Write-through
Write-through caching updates both the cache and the backing store synchronously on every write, keeping them consistent.
Question 7: An architect needs to enforce that all objects uploaded to an S3 bucket are encrypted. Which S3 feature ensures this without relying on the client?
- S3 Access Points
- S3 Bucket Policies denying uploads without encryption (Correct answer)
- S3 Object Lambda
- S3 Intelligent-Tiering
Correct answer: S3 Bucket Policies denying uploads without encryption
A bucket policy with a Deny condition on s3:PutObject when server-side encryption headers are absent enforces encryption for all uploads.
Architecting on AWS Certification Amazon Web Services 4
A company wants to migrate an on-premises VMware environment to AWS with minimal changes.
Which service is specifically designed for this use case?