AWS-Solution-Architect-Associate Practice Questions

A.  

Create an Amazon Route 53 geolocation routing policy to route requests to one of the two NLBs. Create an Amazon CloudFront distribution. Use the Route 53 record as the distribution's origin.

B.  

Create a standard accelerator in AWS Global Accelerator. Create endpoint groups in us-west-2 and eu-west-1. Add the two NLBs as endpoints for the endpoint groups.

C.  

Attach Elastic IP addresses to the six EC2 instances. Create an Amazon Route 53 geolocation routing policy to route requests to one of the six EC2 instances. Create an Amazon CloudFront distribution. Use the Route 53 record as the distribution's origin.

D.  

Replace the two NLBs with two Application Load Balancers (ALBs). Create an Amazon Route 53 latency routing policy to route requests to one of the two ALBs. Create an Amazon CloudFront distribution. Use the Route 53 record as the distribution's origin.

A.  

Use AWS Budgets to create a budget report and compare EC2 costs based on instance types

B.  

Use Cost Explorer's granular filtering feature to perform an in-depth analysis of EC2 costs based on instance types

C.  

Use graphs from the AWS Billing and Cost Management dashboard to compare EC2 costs based on instance types for the last 2 months

D.  

Use AWS Cost and Usage Reports to create a report and send it to an Amazon S3 bucket Use Amazon QuickSight with Amazon S3 as a source to generate an interactive graph based on instance types.

A.  

Add the aws:PrincipalOrgID global condition key with a reference to the organization ID to the S3 bucket policy.

B.  

Create an organizational unit (OU) for each department. Add the aws:PrincipalOrgPaths global condition key to the S3 bucket policy.

C.  

Use AWS CloudTrail to monitor the CreateAccount, InviteAccountToOrganization, LeaveOrganization, and RemoveAccountFromOrganization events. Update the S3 bucket policy accordingly.

D.  

Tag each user that needs access to the S3 bucket. Add the aws:PrincipalTag global condition key to the S3 bucket policy.

A.  

Replicate the S3 bucket that contains the website to all AWS Regions. Add Route 53 geolocation routing entries.

B.  

Provision accelerators in AWS Global Accelerator. Associate the supplied IP addresses with the S3 bucket. Edit the Route 53 entries to point to the IP addresses of the accelerators.

C.  

Add an Amazon CloudFront distribution in front of the S3 bucket. Edit the Route 53 entries to point to the CloudFront distribution.

D.  

Enable S3 Transfer Acceleration on the bucket. Edit the Route 53 entries to point to the new endpoint.

A.  

Use AWS Secrets Manager. Turn on automatic rotation.

B.  

Use AWS Systems Manager Parameter Store. Turn on automatic rotation.

C.  

Create an Amazon S3 bucket lo store objects that are encrypted with an AWS Key

C.  

D.  

Create an encrypted Amazon Elastic Block Store (Amazon EBS) volume (or each EC2 instance. Attach the new EBS volume to each EC2 instance. Migrate the credential file to the new EBS volume. Point the application to the new EBS volume.

A.  

Use Amazon Aurora MySQL with Multi-AZ Aurora Replicas for production. Populate the staging database by implementing a backup and restore process that uses the mysqldump utility.

B.  

Use Amazon Aurora MySQL with Multi-AZ Aurora Replicas for production Use database cloning to create the staging database on-demand

C.  

Use Amazon RDS for MySQL with a Mufti AZ deployment and read replicas for production Use the standby instance tor the staging database.

D.  

Use Amazon RDS for MySQL with a Multi-AZ deployment and read replicas for production. Populate the staging database by implementing a backup and restore process that uses the mysqldump utility.

A.  

Users can terminate an EC2 instance in any AWS Region except us-east-1.

B.  

Users can terminate an EC2 instance with the IP address 10 100 100 1 in the us-east-1 Region

C.  

Users can terminate an EC2 instance in the us-east-1 Region when the user's source IP is 10.100.100.254.

D.  

Users cannot terminate an EC2 instance in the us-east-1 Region when the user's source IP is 10.100 100 254

A.  

Add an execution role to the function with lambda:InvokeFunction as the action and * as the principal.

B.  

Add an execution role to the function with lambda:InvokeFunction as the action and Service:amazonaws.com as the principal.

C.  

Add a resource-based policy to the function with lambda:'* as the action and Service:events.amazonaws.com as the principal.

D.  

Add a resource-based policy to the function with lambda:InvokeFunction as the action and Service:events.amazonaws.com as the principal.

A.  

Enable versioning on the S3 bucket.

B.  

Enable MFA Delete on the S3 bucket.

C.  

Create a bucket policy on the S3 bucket.

D.  

Enable default encryption on the S3 bucket.

E.  

Create a lifecycle policy for the objects in the S3 bucket.

A.  

Create stage variables in API Gateway with Name="Endpoint-URL" and Value="Company Domain Name" to overwrite the default URL. Import the public certificate associated with the company's domain name into AWS Certificate Manager (ACM).

B.  

Create Route 53 DNS records with the company's domain name. Point the alias record to the Regional API Gateway stage endpoint. Import the public certificate associated with the company's domain name into AWS Certificate Manager (ACM) in the us-east-1 Region.

C.  

Create a Regional API Gateway endpoint. Associate the API Gateway endpoint with the company's domain name. Import the public certificate associated with the company's domain name into AWS Certificate Manager (ACM) in the same Region. Attach the certificate to the API Gateway endpoint. Configure Route 53 to route traffic to the API Gateway endpoint.

D.  

Create a Regional API Gateway endpoint. Associate the API Gateway endpoint with the company's domain name. Import the public certificate associated with the company's domain name into AWS Certificate Manager (ACM) in the us-east-1 Region. Attach the certificate to the API Gateway APIs. Create Route 53 DNS records with the company's domain name. Point an A record to the company's domain name.