AWS Certified Solutions Architect – Associate Questions and Answers (Dumps and Practice Questions)

Question : You have an independent .Net utility which take input data from S files and generates the output files and its metadata. However, you want that after processing these files, output files should be
distributed in your company owned Google Drive, Microsoft One drive and S3 bucket. At the same time generated metadata should be stored in DynamoDB . Which of the AWS service will help you to accomplish this given
requirement



1. AWS Elastic Beanstalk

2. AWS Container Service

3. AWS Simple Workflow Service

4. AWS Lambda

Correct Answer : 4
Explanation: As it is given in question that it is an independent .Net utility and can take input as a file and process output file which needs to be distributed to various internet based storage. You
should use AWS Lambda for this requirement because, AWS Lambda can store output metadata data in DynamoDB as well as generated files can be submitted various internet based storage service.

Elastic Beanstalk: It is a service for deploying and scaling web applications in which you retain the ownership and full control over underlying EC2 instances.

AWS Container Service: It is a scalable management service that supports Docker containers and allows you to easily run distributed applications on a managed cluster of EC2 instances.





Question : You have a Java based independent utility which process files, these files are very critical and contain health information of various VIP patients and data must not to be exposed. Hence, they are
password protected and encrypted as well. However, you need to process these files before delivering to patient. Which of the following service you will be using, it must be cost efficient solutions.

A. AWS Lambda
B. AWS Key Management Service
C. AWS EC2
D. Amazon Elastic Beanstalk
E. Amazon container service

1. A,B
2. B,C
3. C,D
4. D,E
5. A,E

Correct Answer : 1
Explanation: You can use Lambda functions for running independent Java utility for processing files. However, data is encrypted and password protected. So you need to use AWS Key Management Service, for
having client side encryption and storing password and cipher text in AWS Key management service.

Elastic Beanstalk: It is a service for deploying and scaling web applications in which you retain the ownership and full control over underlying EC2 instances.

AWS Container Service: It is an scalable management service that supports Docker containers and allows you to easily run distributed applications on a managed cluster of EC2 instances.




Question : You have developed a website which will take collection of word docs in zip file and process these files and convert them back into pdf file and compress it back to zip file and which will be downloaded
by any public user. You are using AWS Lambda to process uploaded zip file and converting them to pdf file. Your site suddenly become popular and more people have started using it. You have seen that out of 120 jobs
submitted in a day, 20 were not completed and in timeout state. What could be the cause?


1. You can submit only 100 Lambda calls in a day, until limit is increased by requesting AWS support.

2. AWS does not have enough capacity to run Lambda functions that particular day.

3. Zip files have many files which can take more than 5 minutes to process a uploaded zip file.

4. AWS found that your account has crossed the payment limit set by you

Correct Answer : 3
Explanation: AWS has setup some limit of using Lambda function and you cannot abuse their system. As a publisher you should put some limit to the services used by your public user like size of the zip
files, maximum number of files in a zip file etc.

Here timeout is a limit, if you put big zip file for processing which take more than 5 minutes than your Lambda will be timed out. There are various limits like

- 300 Seconds is a timeout for Lambda function. Even you can set timeout for individual lambda function between 1 to 300 seconds.
- Memory limit, you can have setup up to 3 GB memory requirement between 128MB to 3GB, with increment of 64MB
- You can have 500MB of non-persistent disk space, which will be allocated your own /tmp directory

Related Questions

---

Question : The website www.Acmesheel.com is deployed on one of EC instance in AWS VPC. However, this is also provides JAX-WS (Java web service) to
send and receive internet traffic. Which of the following needs to be configured so that Internet traffic can be possible in both the direction in secured manner.

A. Your EC2 instance must have at least one IP address attached.
B. Your EC2 instance must have at least either Public IP address or Elastic IP address.
C. We need to make sure that our WebServer secure hence, it should be having only Private IP address.
D. We need to configure, proper ACLs and Security group to allow Internet Traffic for EC2 instance.
E. We must have one IGW (Internet Gateway) for the AWS VPC and create a subnet route table which send all Internet traffic to that IGW

1. A,B,C
2. B,C,D
3. C,D,E
4. B,D,E
5. A,C,E


Question : You have to choose EBS for the below requirement

"Your Application during boot up needed moderate I/O with 60 IOPS on volumes, on average"

Which of the following are types of the Elastic Block Storage will you choose?


1. Standard EBS Volumes
2. Provisioned IOPS Volumes
3. Amazon S3
4. Amazon SimpleDB




Question : What would be the best way to set permissions on an S bucket if you would like to deliver the content over the internet but only to your employees?

1. Use S3 signed URL's through the API
2. Create an S3 account for every employee
3. Download the content on your internal intranet
4. None of the above




Question : Can I directly access the binary logs of Database Instance(RDS) to manage replication?

1. Yes for MySQL based RDS
2. No for all RDS
3. Only Oracle based RDS
4. Only with MSSQL based RDS



Question : You have deployed www.HadoopExam.com sites in a VPC , with EC instances. However, while creating an instances you have not configured any
of the security group. What would happen?

A. All three instances will be having Default security group.
B. We have to have at-least one custom security group should be created.
C. All three instances can send outbound traffic.
D. All three instances can communicate with each other.
E. All three instances can be rechead from internet and vulnerable to DDOS attack.

1. A,B,C
2. B,C,D
3. C,D,E
4. A,D,E
5. A,C,D


Question : You are an AWS architect and hired by HadoopExam.com Inc. As you know HadoopExam.com sells their training courses online. Hence, any payment
data needs to be secured. As well as any communication happens between HadoopExam web application and backend Oracle database should also be secured. What all security major you
will take if WebApplication and Oracle database are deployed on AWS ?

A. As we know, AWS itself is quite secure and it is the responsibility of the AWS to have every communication in AWS should be secured by AWS. So you don't
have to do anything explicitly.
B. You should use third party encryption tool. To avoid any data loss during Payment.
C. Use Secure HTTP communication between client and WebApplication (HadoopExam.com)
D. On Server side communication between database and web application should be secured using SSL/TLS
E. AWS is PCI compliance , hence no worry for Payment security.

1. A,B
2. B,C
3. C,D
4. D,E
5. A,E