AWS Certified Solutions Architect - Associate Flashcards
7 cards from real Architecting on AWS Certification practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 AWS Certified Solutions Architect - Associate flashcards as text
A company needs to store frequently accessed data with millisecond latency and the ability to scale to millions of requests per second. Which AWS service best meets these requirements?
Answer: Amazon DynamoDB
DynamoDB is a fully managed NoSQL database that provides single-digit millisecond performance at any scale.
An application requires a shared file system accessible by multiple EC2 instances simultaneously across multiple Availability Zones. Which storage solution should be used?
Answer: Amazon EFS
Amazon EFS is a fully managed NFS file system that can be mounted concurrently by multiple EC2 instances across AZs.
A Solutions Architect must ensure that an S3 bucket's objects are encrypted at rest using keys managed by the customer. Which encryption option achieves this with the least operational overhead?
Answer: SSE-KMS with customer managed key
SSE-KMS with a customer managed key gives the customer full control over key rotation, policies, and auditing while AWS manages the encryption engine.
A web application experiences unpredictable traffic spikes. The architect wants to decouple the front-end from the back-end processing layer to handle bursts without losing requests. Which AWS service is most appropriate?
Answer: Amazon SQS
SQS acts as a buffer between producers and consumers, absorbing traffic spikes and allowing back-end workers to process messages at their own pace.
Which VPC feature allows private subnets to initiate outbound internet traffic while preventing inbound connections from the internet?
Answer: NAT Gateway
A NAT Gateway provides outbound-only internet access for resources in private subnets by translating private IPs to the gateway's public IP.
A company wants to replicate an on-premises Active Directory to AWS for authentication of EC2 instances. Which service provides a managed Microsoft AD in the cloud?
Answer: AWS Directory Service for Microsoft Active Directory
AWS Directory Service for Microsoft Active Directory (AWS Managed Microsoft AD) provisions a fully managed AD domain in AWS.
An architect needs to route user requests to the nearest AWS Region to minimize latency. Which Route 53 routing policy should be used?
Answer: Latency-based routing
Latency-based routing directs users to the AWS Region that provides the lowest network latency for that user.