Solutions Architect Cloud Architecture & Design Flashcards
7 cards from real AWS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Solutions Architect Cloud Architecture & Design flashcards as text
A company needs to run a stateful application that requires consistent, low-latency network performance between instances. Which AWS placement strategy should be used?
Answer: Cluster placement group
Cluster placement groups pack instances close together in a single AZ, providing low-latency, high-throughput networking ideal for tightly coupled stateful workloads.
An architect must design a solution where an S3 bucket in Account A can be accessed by EC2 instances in Account B. What is the recommended approach?
Answer: Use a bucket policy on the S3 bucket to grant access to Account B's IAM role
A resource-based bucket policy that grants access to the trusted IAM role or account in Account B is the recommended cross-account S3 access pattern.
A workload requires processing messages exactly once, even if a producer sends duplicates. Which SQS feature addresses this requirement?
Answer: SQS FIFO Queue with content-based deduplication enabled
SQS FIFO queues with content-based deduplication use a SHA-256 hash of the message body to deduplicate messages within a 5-minute window.
A Solutions Architect needs to ensure an application can tolerate the failure of an entire AWS Region. Which architecture best satisfies this requirement?
Answer: Active-active deployment across two AWS Regions with Route 53 latency routing
An active-active multi-region architecture with Route 53 routing ensures traffic is served from a healthy region if an entire region fails.
Which AWS service provides a fully managed, serverless graph database optimized for storing and traversing highly connected datasets?
Answer: Amazon Neptune
Amazon Neptune is a fully managed graph database service designed for use cases like social networks, knowledge graphs, and fraud detection that require traversing relationships.
A company wants to enforce that all objects uploaded to an S3 bucket are encrypted at rest using AWS KMS. What is the correct configuration?
Answer: Both A and B together to enforce encryption
Enabling default SSE-KMS encryption AND a bucket policy that denies unencrypted uploads together ensure all objects are KMS-encrypted regardless of client behavior.
An application writes to an Amazon Kinesis Data Stream. Processing must start within seconds and the application needs to replay events from the past 7 days. Which consumer type is most appropriate?
Answer: Kinesis Enhanced Fan-Out consumer
Kinesis Enhanced Fan-Out provides dedicated throughput per consumer with sub-second latency, and Kinesis retains data for up to 365 days (default 24 hours, configurable to 7 days or more).