Home/Directory/solutions architect associate

solutions architect associate Practice Questions

Page 1 of 3 (240 total questions)

You are designing a serverless microservices architecture for a new startup. The application needs to handle unpredictable traffic spikes without managing any underlying infrastructure. Which compute service should you use?
View Question & Answer ➔
A solutions architect is designing a serverless application that processes large quantities of images uploaded to S3. Parallelism is critical. Which Lambda feature should be used to control the maximum number of concurrent executions to avoid overwhelming a downstream database?
View Question & Answer ➔
An application requires lower latency for Lambda function starts after long periods of inactivity ('cold starts'). Which configuration is most appropriate for this use case?
View Question & Answer ➔
A solutions architect needs to ensure that sensitive database credentials used by a Lambda function are not stored in plain text in the environment variables. What is the most secure AWS-native architectural pattern?
View Question & Answer ➔
A Lambda function needs to process messages from an Amazon SQS queue. The architect wants to decrease the number of Lambda invocations to save costs. Which parameter should be adjusted?
View Question & Answer ➔
A Lambda function residing in a VPC needs to access the internet to call a third-party API. How should the VPC be configured?
View Question & Answer ➔
Which Lambda feature allows an architect to pass large blocks of common library code to multiple functions without including it in the deployment package of each individual function?
View Question & Answer ➔
An architect is using Lambda for an asynchronous process. If the function fails after all retry attempts, the event data must be preserved for later analysis. What should be configured?
View Question & Answer ➔
For a compute-intensive Lambda function, how can an architect provide more CPU cycles to speed up execution?
View Question & Answer ➔
A solutions architect is building a real-time data streaming pipeline using Amazon Kinesis Data Streams. A Lambda function will process the data. What is the unit of scale for the Lambda processing?
View Question & Answer ➔
You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?
View Question & Answer ➔
You need to grant developers read-only access to Amazon S3 buckets without giving them access to other services. What's the best approach using AWS IAM?
View Question & Answer ➔
A company stores sensitive logs in S3. Regulatory requirements dictate that these logs must be protected from deletion or modification for 7 years, even by an administrator. Which S3 feature should be implemented?
View Question & Answer ➔
An architect is designing a web application where users upload high-resolution images. These images are frequently accessed for 30 days, then rarely accessed. The architect wants the most cost-effective storage that maintains millisecond access. Which storage class strategy is best?
View Question & Answer ➔
A global application serves static assets from S3. Users in Europe report slow download speeds compared to users in the US. What is the most effective architectural change to improve performance globally?
View Question & Answer ➔
An architect needs to track every single API request made to any object in an S3 bucket for security auditing. Which S3 feature provides this level of detail?
View Question & Answer ➔
To protect against accidental deletion of objects in an S3 bucket, which combination of features should be enabled?
View Question & Answer ➔
A solutions architect is migrating a legacy application that requires a hierarchical file system and high-throughput access for a cluster of EC2 instances. Which storage service should be used if the application cannot be refactored for object storage?
View Question & Answer ➔
What is the primary benefit of using S3 Multi-Region Access Points?
View Question & Answer ➔
A data lake on S3 contains thousands of Parquet files. An architect needs to run a simple SQL query to extract a subset of data from these files without loading them into a database. Which service/feature is most efficient?
View Question & Answer ➔
A financial application requires a relational database that supports high availability and automated backups. The database must be fully managed to reduce operational overhead. Which service fits these requirements?
View Question & Answer ➔
A company requires a relational database in AWS that can handle unpredictable traffic spikes while minimizing operational overhead. Which RDS feature or engine should the solutions architect recommend?
View Question & Answer ➔
A solutions architect is designing a high-availability database for an application. The primary database should automatically fail over to a standby in another Availability Zone with zero data loss. Which feature is required?
View Question & Answer ➔
An application has a read-heavy workload that is causing performance degradation on the primary RDS MySQL instance. How can the architect scale the read capacity globally for users in different regions?
View Question & Answer ➔
A company needs to analyze audit logs stored in an RDS SQL Server database. They want to offload this analytical work from the production database. Which approach is most efficient for a SQL Server engine in RDS?
View Question & Answer ➔
An architect is designing an e-commerce platform using Amazon Aurora. The platform needs to survive the failure of an entire AWS Region with a low Recovery Point Objective (RPO). Which feature should be used?
View Question & Answer ➔
A legacy SQL application requires Windows-specific features and high availability. The architect chooses RDS for SQL Server. Which HA option should be selected for an Enterprise edition deployment?
View Question & Answer ➔
How can a solutions architect improve the performance of an RDS instance that is experiencing high disk I/O latency despite having enough CPU and RAM?
View Question & Answer ➔
A company wants to encrypt an existing unencrypted RDS for Oracle database. What is the process the architect must follow?
View Question & Answer ➔
Which RDS database engine is specifically designed by AWS to be compatible with MySQL and PostgreSQL, offering up to 3x-5x better performance than the standard community versions?
View Question & Answer ➔
Your application generates millions of clickstream events per second. You need a service to ingest and buffer this data in real-time before processing it. Which service fits this need?
View Question & Answer ➔
An architect is designing a globally distributed mobile application. Users in different regions must be able to read and write to the same DynamoDB table with low latency. Which feature should be used?
View Question & Answer ➔
An application is experiencing 'ProvisionedThroughputExceededException' during peak hours on a DynamoDB table. The architect needs a solution that provides microsecond read latency and reduces the load on the table. Which service is best?
View Question & Answer ➔
What is the primary difference between a Local Secondary Index (LSI) and a Global Secondary Index (GSI) in DynamoDB?
View Question & Answer ➔
A company wants to automatically delete old items in a DynamoDB table after 30 days to save costs. Which feature allows this without writing custom deletion code?
View Question & Answer ➔
An architect needs to capture all changes (insert, update, delete) to a DynamoDB table and trigger a Lambda function to update a search index in real-time. What should be enabled?
View Question & Answer ➔
A DynamoDB table is configured with 'On-Demand' capacity. In which scenario would this be more cost-effective than using 'Provisioned' capacity?
View Question & Answer ➔
Which consistency model should an architect choose in a DynamoDB 'GetItem' request to ensure that the application always reads the latest version of an item, even at the cost of higher latency or throughput?
View Question & Answer ➔
For a massive social media application with millions of concurrent users, what is the best strategy to avoid 'Hot Partitions' in DynamoDB?
View Question & Answer ➔
Does DynamoDB support ACID transactions across multiple items and tables?
View Question & Answer ➔
You are analyzing petabytes of data for business intelligence reports. You need a fully managed, serverless enterprise data warehouse that supports SQL queries. Which service is best suited for this task?
View Question & Answer ➔
A business intelligence team needs a petabyte-scale data warehouse to perform complex analytical queries across multiple sources. Which service is most appropriate?
View Question & Answer ➔
A solutions architect needs to run queries on data that is currently stored in Amazon S3 in Apache Parquet format, joining it with data in an Amazon Redshift cluster. Which Redshift feature should be used?
View Question & Answer ➔
An architect is concerned about the cost of an Amazon Redshift cluster during nights and weekends when no queries are being run. Which feature can help reduce costs automatically?
View Question & Answer ➔
What is the primary architectural difference between an Amazon Redshift cluster and an Amazon RDS instance?
View Question & Answer ➔
To improve performance of a specific large table in Redshift, an architect needs to decide how data is distributed across the compute nodes. Which distribution style is best for a small dimension table that is often joined with other large tables?
View Question & Answer ➔
Which Redshift feature allows an architect to share data across different Redshift clusters in different AWS accounts without moving the data?
View Question & Answer ➔
What is 'Concurrency Scaling' in Amazon Redshift?
View Question & Answer ➔
An architect is selecting a sort key for a Redshift table that is frequently queried using a date range. Which sort key type should be used?
View Question & Answer ➔
Which tool provides visual recommendations to improve the performance of a Redshift cluster, such as finding skewed tables or missing sort keys?
View Question & Answer ➔
Your media company streams video content to users globally. Users in different regions are experiencing high latency. You need to improve performance by caching content closer to the users. Which service should you implement?
View Question & Answer ➔
A company wants to serve content from an S3 bucket via Amazon CloudFront and ensure that users can ONLY access the bucket through CloudFront, not via direct S3 URLs. How should this be implemented?
View Question & Answer ➔
What is the purpose of 'Field-Level Encryption' in Amazon CloudFront?
View Question & Answer ➔
An architect needs to run custom code at the CloudFront edge locations to personalize content for different user devices. Which two services can be used?
View Question & Answer ➔
What is 'Cache Invalidation' in the context of CloudFront?
View Question & Answer ➔
To improve the cache hit ratio for a CloudFront distribution that serves dynamic content, which strategy should be used?
View Question & Answer ➔
Which CloudFront feature helps protect against DDoS attacks by integrating with AWS Shield?
View Question & Answer ➔
What is 'Amazon CloudFront Origin Shield' used for?
View Question & Answer ➔
How can an architect restrict access to content in a CloudFront distribution so that only paid subscribers can view it?
View Question & Answer ➔
Can Amazon CloudFront serve content from a custom origin (like a server on-premises or a different cloud provider)?
View Question & Answer ➔
Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?
View Question & Answer ➔
Which AWS service provides automatic protection against common Distributed Denial of Service (DDoS) attacks for all AWS customers at no additional cost?
View Question & Answer ➔
A large enterprise needs protection against sophisticated Layer 7 DDoS attacks and requires 24/7 access to the AWS Shield Response Team (SRT). Which service should they subscribe to?
View Question & Answer ➔
What is the 'DDoS Cost Protection' benefit provided by AWS Shield Advanced?
View Question & Answer ➔
Which AWS resources can be protected by AWS Shield Advanced?
View Question & Answer ➔
An architect wants to monitor DDoS attacks in real-time. Which tool provides a dashboard for Shield Advanced customers to see ongoing events across the AWS network?
View Question & Answer ➔
By combining CloudFront, Route 53, and WAF with AWS Shield, you are building a 'Defense in Depth' strategy. What is the primary role of WAF in this stack?
View Question & Answer ➔
Which AWS service can centrally manage and deploy AWS Shield Advanced and WAF rules across multiple accounts in an AWS Organization?
View Question & Answer ➔
Is AWS Shield Advanced required to protect against 'UDP reflection' attacks?
View Question & Answer ➔
To participate in the AWS Shield Advanced 'proactive engagement', what must a customer provide?
View Question & Answer ➔
Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?
View Question & Answer ➔
A solutions architect is designing an encryption strategy for S3. The company wants to manage the keys in AWS but requires that the keys cannot be exported from the AWS KMS service. Which key type should be used?
View Question & Answer ➔
What is the difference between an 'Symmetric' and 'Asymmetric' KMS key?
View Question & Answer ➔
To improve security and meet compliance, a company wants to automatically rotate their Customer Managed Keys every year. How is this enabled in KMS?
View Question & Answer ➔
Which KMS feature allows you to use the same key material for data in multiple AWS regions to support disaster recovery scenarios without re-encrypting data?
View Question & Answer ➔
What is an 'Encryption Context' in AWS KMS?
View Question & Answer ➔
A company has a regulatory requirement to store keys in a dedicated single-tenant hardware security module (HSM). Which KMS feature should be used?
View Question & Answer ➔
How can an architect grant a different AWS account permission to use a KMS key for encrypting data in an S3 bucket?
View Question & Answer ➔
What is the purpose of 'Grant' in AWS KMS?
View Question & Answer ➔
What happens if you delete a KMS key?
View Question & Answer ➔
A law firm wants to digitize millions of scanned contracts. You need an AI service to extract text, forms, and tables from these PDF documents automatically. Which service is designed for this?
View Question & Answer ➔
A company wants to automate the extraction of data from thousands of scanned medical forms. The forms contain tables and handwriting. Which service should be used for this task?
View Question & Answer ➔
To improve accuracy for high-stakes document extraction, an architect wants to incorporate human review for a subset of the results from Amazon Textract. Which service provides this integration?
View Question & Answer ➔
What is the primary technical advantage of using Textract over traditional Optical Character Recognition (OCR) software?
View Question & Answer ➔
An architect is building a document processing pipeline. When a file is uploaded to S3, a Lambda function should trigger Textract. If the file is a 500-page PDF, which Textract API should be used?
View Question & Answer ➔
Can Amazon Textract extract data from handwritten notes in different languages?
View Question & Answer ➔
How does Textract charge for its service?
View Question & Answer ➔
Which feature of Textract allows an architect to specify exactly which information they are looking for in a document using natural language (e.g., 'What is the total amount due?')?
View Question & Answer ➔
A specialized Textract feature is available for extracting specific data points from financial documents like invoices and receipts. What is it called?
View Question & Answer ➔
To extract information from passports and driver licenses, which Textract feature should be used?
View Question & Answer ➔
You are building a customer support chatbot that needs to understand natural language intent (e.g., 'book a flight'). Which service provides Natural Language Understanding (NLU) capabilities?
View Question & Answer ➔
Which AWS service is powered by the same deep learning technologies as Amazon Alexa and is used to build conversational interfaces into any application?
View Question & Answer ➔
What are the three core components used to define a bot in Amazon Lex?
View Question & Answer ➔
A company wants to add a voice-based interface to their existing customer service portal. Users should be able to check their account balance by speaking into their browser. Which service should they choose?
View Question & Answer ➔
In an Amazon Lex bot, how do you perform the actual backend logic (e.g., checking a database for a user's balance)?
View Question & Answer ➔
Which AWS service is most commonly used together with Amazon Lex to create a complete, AI-powered contact center solution?
View Question & Answer ➔
Does Amazon Lex support multi-turn conversations (e.g., the bot asking follow-up questions until it has all the details)?
View Question & Answer ➔
A bot needs to ensure it only accepts a valid city name from the user. What is the best way to implement this in Lex?
View Question & Answer ➔
How can an architect improve a Lex bot's performance if it frequently fails to understand user requests?
View Question & Answer ➔
Can you export an Amazon Lex bot to run on an edge device without an internet connection?
View Question & Answer ➔

Page 1 of 3Next →

solutions architect associate Practice Questions

You are designing a serverless microservices architecture for a new startup. The application needs to handle unpredictable traffic spikes without managing any underlying infrastructure. Which compute service should you use?

A solutions architect is designing a serverless application that processes large quantities of images uploaded to S3. Parallelism is critical. Which Lambda feature should be used to control the maximum number of concurrent executions to avoid overwhelming a downstream database?

An application requires lower latency for Lambda function starts after long periods of inactivity ('cold starts'). Which configuration is most appropriate for this use case?

A solutions architect needs to ensure that sensitive database credentials used by a Lambda function are not stored in plain text in the environment variables. What is the most secure AWS-native architectural pattern?

A Lambda function needs to process messages from an Amazon SQS queue. The architect wants to decrease the number of Lambda invocations to save costs. Which parameter should be adjusted?

A Lambda function residing in a VPC needs to access the internet to call a third-party API. How should the VPC be configured?

Which Lambda feature allows an architect to pass large blocks of common library code to multiple functions without including it in the deployment package of each individual function?

An architect is using Lambda for an asynchronous process. If the function fails after all retry attempts, the event data must be preserved for later analysis. What should be configured?

For a compute-intensive Lambda function, how can an architect provide more CPU cycles to speed up execution?

A solutions architect is building a real-time data streaming pipeline using Amazon Kinesis Data Streams. A Lambda function will process the data. What is the unit of scale for the Lambda processing?

You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?

You need to grant developers read-only access to Amazon S3 buckets without giving them access to other services. What's the best approach using AWS IAM?

A company stores sensitive logs in S3. Regulatory requirements dictate that these logs must be protected from deletion or modification for 7 years, even by an administrator. Which S3 feature should be implemented?

An architect is designing a web application where users upload high-resolution images. These images are frequently accessed for 30 days, then rarely accessed. The architect wants the most cost-effective storage that maintains millisecond access. Which storage class strategy is best?

A global application serves static assets from S3. Users in Europe report slow download speeds compared to users in the US. What is the most effective architectural change to improve performance globally?

An architect needs to track every single API request made to any object in an S3 bucket for security auditing. Which S3 feature provides this level of detail?

To protect against accidental deletion of objects in an S3 bucket, which combination of features should be enabled?

A solutions architect is migrating a legacy application that requires a hierarchical file system and high-throughput access for a cluster of EC2 instances. Which storage service should be used if the application cannot be refactored for object storage?

What is the primary benefit of using S3 Multi-Region Access Points?

A data lake on S3 contains thousands of Parquet files. An architect needs to run a simple SQL query to extract a subset of data from these files without loading them into a database. Which service/feature is most efficient?

A financial application requires a relational database that supports high availability and automated backups. The database must be fully managed to reduce operational overhead. Which service fits these requirements?

A company requires a relational database in AWS that can handle unpredictable traffic spikes while minimizing operational overhead. Which RDS feature or engine should the solutions architect recommend?

A solutions architect is designing a high-availability database for an application. The primary database should automatically fail over to a standby in another Availability Zone with zero data loss. Which feature is required?

An application has a read-heavy workload that is causing performance degradation on the primary RDS MySQL instance. How can the architect scale the read capacity globally for users in different regions?

A company needs to analyze audit logs stored in an RDS SQL Server database. They want to offload this analytical work from the production database. Which approach is most efficient for a SQL Server engine in RDS?

An architect is designing an e-commerce platform using Amazon Aurora. The platform needs to survive the failure of an entire AWS Region with a low Recovery Point Objective (RPO). Which feature should be used?

A legacy SQL application requires Windows-specific features and high availability. The architect chooses RDS for SQL Server. Which HA option should be selected for an Enterprise edition deployment?

How can a solutions architect improve the performance of an RDS instance that is experiencing high disk I/O latency despite having enough CPU and RAM?

A company wants to encrypt an existing unencrypted RDS for Oracle database. What is the process the architect must follow?

Which RDS database engine is specifically designed by AWS to be compatible with MySQL and PostgreSQL, offering up to 3x-5x better performance than the standard community versions?

Your application generates millions of clickstream events per second. You need a service to ingest and buffer this data in real-time before processing it. Which service fits this need?

An architect is designing a globally distributed mobile application. Users in different regions must be able to read and write to the same DynamoDB table with low latency. Which feature should be used?

An application is experiencing 'ProvisionedThroughputExceededException' during peak hours on a DynamoDB table. The architect needs a solution that provides microsecond read latency and reduces the load on the table. Which service is best?

What is the primary difference between a Local Secondary Index (LSI) and a Global Secondary Index (GSI) in DynamoDB?

A company wants to automatically delete old items in a DynamoDB table after 30 days to save costs. Which feature allows this without writing custom deletion code?

An architect needs to capture all changes (insert, update, delete) to a DynamoDB table and trigger a Lambda function to update a search index in real-time. What should be enabled?

A DynamoDB table is configured with 'On-Demand' capacity. In which scenario would this be more cost-effective than using 'Provisioned' capacity?

Which consistency model should an architect choose in a DynamoDB 'GetItem' request to ensure that the application always reads the latest version of an item, even at the cost of higher latency or throughput?

For a massive social media application with millions of concurrent users, what is the best strategy to avoid 'Hot Partitions' in DynamoDB?

Does DynamoDB support ACID transactions across multiple items and tables?

You are analyzing petabytes of data for business intelligence reports. You need a fully managed, serverless enterprise data warehouse that supports SQL queries. Which service is best suited for this task?

A business intelligence team needs a petabyte-scale data warehouse to perform complex analytical queries across multiple sources. Which service is most appropriate?

A solutions architect needs to run queries on data that is currently stored in Amazon S3 in Apache Parquet format, joining it with data in an Amazon Redshift cluster. Which Redshift feature should be used?

An architect is concerned about the cost of an Amazon Redshift cluster during nights and weekends when no queries are being run. Which feature can help reduce costs automatically?

What is the primary architectural difference between an Amazon Redshift cluster and an Amazon RDS instance?

To improve performance of a specific large table in Redshift, an architect needs to decide how data is distributed across the compute nodes. Which distribution style is best for a small dimension table that is often joined with other large tables?

Which Redshift feature allows an architect to share data across different Redshift clusters in different AWS accounts without moving the data?

What is 'Concurrency Scaling' in Amazon Redshift?

An architect is selecting a sort key for a Redshift table that is frequently queried using a date range. Which sort key type should be used?

Which tool provides visual recommendations to improve the performance of a Redshift cluster, such as finding skewed tables or missing sort keys?

Your media company streams video content to users globally. Users in different regions are experiencing high latency. You need to improve performance by caching content closer to the users. Which service should you implement?

A company wants to serve content from an S3 bucket via Amazon CloudFront and ensure that users can ONLY access the bucket through CloudFront, not via direct S3 URLs. How should this be implemented?

What is the purpose of 'Field-Level Encryption' in Amazon CloudFront?

An architect needs to run custom code at the CloudFront edge locations to personalize content for different user devices. Which two services can be used?

What is 'Cache Invalidation' in the context of CloudFront?

To improve the cache hit ratio for a CloudFront distribution that serves dynamic content, which strategy should be used?

Which CloudFront feature helps protect against DDoS attacks by integrating with AWS Shield?

What is 'Amazon CloudFront Origin Shield' used for?

How can an architect restrict access to content in a CloudFront distribution so that only paid subscribers can view it?

Can Amazon CloudFront serve content from a custom origin (like a server on-premises or a different cloud provider)?

Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?

Which AWS service provides automatic protection against common Distributed Denial of Service (DDoS) attacks for all AWS customers at no additional cost?

A large enterprise needs protection against sophisticated Layer 7 DDoS attacks and requires 24/7 access to the AWS Shield Response Team (SRT). Which service should they subscribe to?

What is the 'DDoS Cost Protection' benefit provided by AWS Shield Advanced?

Which AWS resources can be protected by AWS Shield Advanced?

An architect wants to monitor DDoS attacks in real-time. Which tool provides a dashboard for Shield Advanced customers to see ongoing events across the AWS network?

By combining CloudFront, Route 53, and WAF with AWS Shield, you are building a 'Defense in Depth' strategy. What is the primary role of WAF in this stack?

Which AWS service can centrally manage and deploy AWS Shield Advanced and WAF rules across multiple accounts in an AWS Organization?

Is AWS Shield Advanced required to protect against 'UDP reflection' attacks?

To participate in the AWS Shield Advanced 'proactive engagement', what must a customer provide?

Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?

A solutions architect is designing an encryption strategy for S3. The company wants to manage the keys in AWS but requires that the keys cannot be exported from the AWS KMS service. Which key type should be used?

What is the difference between an 'Symmetric' and 'Asymmetric' KMS key?

To improve security and meet compliance, a company wants to automatically rotate their Customer Managed Keys every year. How is this enabled in KMS?

Which KMS feature allows you to use the same key material for data in multiple AWS regions to support disaster recovery scenarios without re-encrypting data?

What is an 'Encryption Context' in AWS KMS?

A company has a regulatory requirement to store keys in a dedicated single-tenant hardware security module (HSM). Which KMS feature should be used?

How can an architect grant a different AWS account permission to use a KMS key for encrypting data in an S3 bucket?

What is the purpose of 'Grant' in AWS KMS?