Architecting on AWS Certification Architecting On AWS Certification 4 — Questions and Answers
Question 1: Which Route 53 routing policy directs traffic to the endpoint with the lowest network latency for the user?
- Weighted routing
- Failover routing
- Latency-based routing (Correct answer)
- Geolocation routing
Correct answer: Latency-based routing
Latency-based routing directs users to the AWS region that provides the lowest network latency based on actual measurements.
Question 2: A solutions architect must ensure an S3 bucket policy prevents data from being publicly exposed even if a bucket ACL is misconfigured. Which feature addresses this?
- S3 Object Lock
- S3 Block Public Access (Correct answer)
- S3 Versioning
- S3 Replication
Correct answer: S3 Block Public Access
S3 Block Public Access settings override bucket policies and ACLs to ensure buckets and objects are never publicly accessible.
Question 3: Which AWS compute service is MOST appropriate for running a batch processing job that requires 10,000 vCPUs for two hours and then terminates?
- On-Demand EC2 instances with manual launch scripts
- AWS Batch with managed compute environments (Correct answer)
- AWS Lambda with maximum concurrency
- Elastic Beanstalk with auto scaling
Correct answer: AWS Batch with managed compute environments
AWS Batch automatically provisions the optimal quantity and type of compute resources and terminates them when the job completes.
Question 4: An application uses DynamoDB and experiences hot partition issues during peak traffic. What is the BEST solution?
- Switch to RDS for better partitioning
- Use DynamoDB Accelerator (DAX) as a caching layer (Correct answer)
- Reduce the provisioned throughput
- Consolidate data into fewer table items
Correct answer: Use DynamoDB Accelerator (DAX) as a caching layer
DAX is an in-memory cache for DynamoDB that absorbs read traffic and reduces hot partition pressure without changing application code.
Question 5: A company wants to enforce that all new EC2 instances must use approved AMIs. Which AWS service enforces this at scale?
- AWS Config with a managed rule (Correct answer)
- AWS CloudTrail
- Amazon Inspector
- AWS Trusted Advisor
Correct answer: AWS Config with a managed rule
AWS Config can evaluate EC2 instances against a rule that checks whether they use only approved AMI IDs and flags non-compliant resources.
Question 6: Which disaster recovery strategy has the LOWEST RTO and RTO but also the HIGHEST cost?
- Backup and Restore
- Pilot Light
- Warm Standby
- Multi-Site Active/Active (Correct answer)
Correct answer: Multi-Site Active/Active
Multi-Site Active/Active runs full-capacity environments in multiple regions simultaneously, providing near-zero RTO/RPO at the highest cost.
Question 7: An architect needs to connect an on-premises data center to AWS with a consistent, dedicated 10 Gbps network connection. Which service provides this?
- AWS Site-to-Site VPN
- AWS Direct Connect (Correct answer)
- AWS Transit Gateway
- Amazon CloudFront
Correct answer: AWS Direct Connect
AWS Direct Connect provides a dedicated, private network connection between an on-premises data center and AWS at speeds up to 100 Gbps.
Architecting on AWS Certification Architecting On AWS Certification 4
Which Route 53 routing policy directs traffic to the endpoint with the lowest network latency for the user?