Associate Certified Solutions Architect - Associate Flashcards
7 cards from real AWS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Associate Certified Solutions Architect - Associate flashcards as text
A company needs a managed relational database that automatically scales storage and supports read replicas across multiple AWS regions. Which service best fits this requirement?
Answer: Amazon Aurora Global Database
Aurora Global Database spans multiple AWS regions with sub-second replication latency and supports cross-region read replicas.
An application stores session data that must be accessible with microsecond latency and must survive an Availability Zone failure. Which solution meets both requirements?
Answer: Amazon ElastiCache for Redis with Multi-AZ and automatic failover
ElastiCache for Redis with Multi-AZ and automatic failover replicates data to a standby node in another AZ, surviving AZ failures.
A Solutions Architect must design an architecture where an EC2 instance in a private subnet can download software updates from the internet without being directly reachable from the internet. What should be used?
Answer: NAT Gateway in a public subnet with a route from the private subnet
A NAT Gateway in a public subnet allows outbound internet traffic from private subnets while blocking unsolicited inbound connections.
A company wants to enforce that all objects uploaded to an S3 bucket are encrypted at rest using AWS-managed keys, regardless of what the uploader specifies. How should this be enforced?
Answer: Enable default encryption on the bucket with SSE-S3 or SSE-KMS
Enabling default encryption ensures all newly uploaded objects are automatically encrypted even if the PUT request does not specify encryption headers.
An application running on EC2 needs to call the S3 API without embedding AWS credentials in the code. What is the recommended approach?
Answer: Assign an IAM role to the EC2 instance
Attaching an IAM role to an EC2 instance provides temporary credentials via the instance metadata service, eliminating the need to manage static credentials.
A web application must serve users in the US and Europe with low latency. Static assets are in S3. What is the simplest AWS solution to reduce latency globally?
Answer: Use Amazon CloudFront with the S3 bucket as the origin
CloudFront caches static assets at edge locations worldwide, serving users from the nearest edge point to minimize latency.
A company's on-premises data center must connect to its AWS VPC with consistent, dedicated bandwidth and does not want traffic traversing the public internet. Which service should be used?
Answer: AWS Direct Connect
AWS Direct Connect provides a dedicated private network connection from on-premises to AWS, bypassing the public internet entirely.