AWS Certified Solutions Architect Associate 2018 AWS Certified Solutions Architect Associate 2018 (SAA001) Free Practice Test — 30 Questions
Exam Code: SAA001
30 questions · Full explanations · No account required

Question 1

A financial services firm is migrating its customer-facing web portal to AWS. The application is stateful, requiring session persistence, and processes sensitive personally identifiable information (PII). The firm must ensure high availability across multiple Availability Zones, resilience against single points of failure, and a robust disaster recovery strategy that allows for a Recovery Point Objective (RPO) of less than 15 minutes and a Recovery Time Objective (RTO) of less than 1 hour in a secondary region. Additionally, the application must comply with stringent data residency regulations, meaning all customer data must reside within a specific geographic region.

Which combination of AWS services best addresses these requirements?

Accepted Answer

EC2 instances in an Auto Scaling group across multiple Availability Zones, an Application Load Balancer, Amazon RDS with Multi-AZ and read replicas in a secondary region, and Amazon ElastiCache for Redis configured for replication across Availability Zones.

Question 2

A global e-commerce platform, built on Amazon EC2 instances managed by an Auto Scaling group across multiple AWS Regions and Availability Zones, is experiencing frequent user session disruptions. Customers report losing their shopping cart contents and login status midway through their browsing experience, leading to significant dissatisfaction and cart abandonment. The current architecture utilizes sticky sessions configured on the Application Load Balancer (ALB) to maintain session state, but this approach is proving problematic with the increasing user base and the need for seamless failover. The development team needs to implement a robust solution that ensures session persistence without relying on ALB-based stickiness, thereby enhancing availability and scalability.

Which AWS service, when integrated into the application architecture, would most effectively address the intermittent session loss by providing a centralized, high-performance store for user session data, allowing any EC2 instance to retrieve and manage a user\'s current session state?

Accepted Answer

Amazon ElastiCache for Redis

Question 3

Anya, a Solutions Architect, is configuring IAM policies for a new team member. She has attached two policies to the team member\'s IAM role: "ProjectAlphaPermissions" and "CrossProjectAccess". The "ProjectAlphaPermissions" policy contains the following statement:
```json
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "s3:GetObject",
      "Resource": "arn:aws:s3:::project-alpha-bucket/*"
    }
  ]
}
```
Concurrently, the "CrossProjectAccess" policy includes this statement:
```json
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Deny",
      "Action": "s3:GetObject",
      "Resource": "arn:aws:s3:::project-alpha-bucket/*"
    }
  ]
}
```
Given these attached policies, what will be the outcome if the team member attempts to perform an `s3:GetObject` operation on an object within the `project-alpha-bucket`?

Accepted Answer

Access will be denied due to the explicit Deny statement in the CrossProjectAccess policy.

Question 4

A multinational financial services firm is mandated by a new regulatory directive to ensure that all sensitive customer Personally Identifiable Information (PII) is processed and stored exclusively within the European Union (EU) geographical boundaries. This directive is effective immediately and requires a robust architectural solution that maintains data sovereignty while allowing for sophisticated data analytics and application hosting. The firm\'s existing infrastructure is largely on-premises, but they are looking to leverage AWS for this specific compliance requirement without compromising on performance or security. Which AWS service configuration best addresses this stringent data residency requirement for ongoing processing and analytics?

Accepted Answer

Deploying a Virtual Private Cloud (VPC) exclusively within the AWS eu-central-1 (Frankfurt) Region and ensuring all compute, storage, and database resources are provisioned solely within this VPC, with IAM policies strictly enforcing no cross-region access.

Question 5

Aethelred Innovations, a global e-commerce platform, is planning a critical infrastructure migration to AWS. Their primary application is a monolithic legacy system with no inherent high availability features, relying on a single, on-premises relational database. The business mandate is to achieve near-zero downtime during this transition, with strict adherence to a predefined Service Level Agreement (SLA) that guarantees 99.95% uptime. The migration must also prevent any data loss. Considering the application\'s architecture and the stringent uptime requirements, what is the most effective AWS strategy to ensure continuous availability and data integrity throughout the migration process?

Accepted Answer

Establish AWS Direct Connect, deploy the application on Amazon EC2 instances within an Auto Scaling group across multiple Availability Zones behind an Application Load Balancer, and utilize AWS Database Migration Service (DMS) for continuous replication from the on-premises database to Amazon RDS, followed by a DNS-based cutover.

Question 6

A global e-commerce platform, hosted on AWS, is experiencing sporadic periods of extreme sluggishness and occasional complete unavailability for its customer-facing web application. These incidents correlate directly with surges in user traffic during promotional events and high volumes of concurrent data ingestion from partner systems. The architecture consists of Amazon EC2 instances behind an Elastic Load Balancer, an Amazon RDS for PostgreSQL database, and Amazon S3 for storing product images. The operations team has observed elevated CPU utilization on the EC2 instances and increased connection counts on the RDS instance during these times, but the exact point of failure remains elusive. Which AWS service, when implemented to trace requests across the entire application stack, would provide the most granular insight into the specific component or interaction causing the performance degradation?

Accepted Answer

AWS X-Ray

Question 7

A global e-commerce platform, operating on AWS, has observed a sharp increase in customer complaints regarding slow page load times and unresponsive user interfaces. The application\'s backend, including its primary relational database, is currently deployed in a single AWS region. The platform utilizes EC2 instances behind an Application Load Balancer with Auto Scaling configured to handle traffic fluctuations. Analysis of network telemetry indicates that the majority of users are experiencing high latency due to the physical distance between their locations and the AWS region hosting the application\'s data sources. Which AWS service, when implemented to cache and deliver frequently accessed application data, would most effectively mitigate this widespread geographic latency issue for the platform\'s diverse customer base?

Accepted Answer

AWS CloudFront

Question 8

A financial services firm is migrating a critical, legacy customer relationship management (CRM) system to AWS. The current on-premises system is a tightly coupled monolith that suffers from significant performance degradation during daily batch processing windows and requires manual intervention to scale up during peak user activity. The firm\'s primary business objectives for the migration are to achieve near-continuous availability, enable independent scaling of application components, and reduce the operational burden of managing infrastructure. Which AWS architectural approach would best align with these objectives?

Accepted Answer

Decompose the monolithic CRM application into smaller, independently deployable microservices, leveraging container orchestration services like Amazon ECS or EKS, and utilize Amazon API Gateway for inter-service communication.

Question 9

A global e-commerce platform, operating on AWS, is experiencing intermittent periods of severe performance degradation and occasional complete unavailability during peak shopping seasons. Analysis of incident reports indicates that the application\'s static assets are a significant bottleneck, and there\'s a lack of resilience in the dynamic content delivery layer, leading to cascading failures when individual application servers become unresponsive. The company needs a solution that enhances availability, improves performance by distributing content closer to users, and provides a foundational layer for security against common web threats, all while ensuring that dynamic content remains accessible even during localized infrastructure issues.

Accepted Answer

Deploy Amazon CloudFront with an S3 origin for static content and an Application Load Balancer (ALB) distributing traffic across EC2 instances in multiple Availability Zones for dynamic content.

Question 10

A financial services company operates a mission-critical relational database on Amazon RDS for PostgreSQL. The application demands a zero Recovery Point Objective (RPO) and a Recovery Time Objective (RTO) of less than 15 minutes. Furthermore, to adhere to stringent financial regulations, all database backups must be immutable and retained for a period of seven years, preventing any accidental or malicious deletion or modification during this time. Which architectural approach best satisfies these combined requirements?

Accepted Answer

Deploy Amazon RDS for PostgreSQL in a Multi-AZ configuration with automated daily backups managed by AWS Backup, configured with a seven-year retention period and immutability enabled.

Question 11

A financial services firm is migrating a critical, customer-facing web application from on-premises infrastructure to AWS. The application has a relational database backend that handles a significant volume of transactions, with read operations outnumbering write operations by a ratio of approximately 5:1. During peak trading hours, users report intermittent application slowness and occasional timeouts, which the operations team attributes to database contention. The firm prioritizes high availability and disaster recovery, requiring minimal downtime in the event of an infrastructure failure. Which AWS database strategy would best address the performance bottlenecks and meet the availability requirements?

Accepted Answer

Implement Amazon RDS Multi-AZ with read replicas for the existing relational database.

Question 12

A global financial institution, operating a hybrid cloud strategy, is experiencing substantial network latency and inconsistent throughput when its on-premises trading applications frequently access large datasets stored in Amazon S3 buckets. These applications require near real-time data retrieval for risk analysis and market trend evaluation. The current connection relies on the public internet, leading to unpredictable performance that impacts critical business operations and compliance with regulatory requirements for timely data processing. The institution needs a solution that provides a more reliable, private, and high-bandwidth connection between their data center and AWS.

Which AWS service best addresses this specific connectivity challenge for consistent, low-latency access to S3 data?

Accepted Answer

AWS Direct Connect

Question 13

A global e-commerce platform, currently running a monolithic application on EC2 instances behind a single Application Load Balancer in a primary AWS region, is experiencing significant latency for users in Asia and Europe. The application\'s database resides on a separate EC2 instance. The company aims to enhance user experience by reducing response times, improve the application\'s resilience against regional outages, and ensure cost-effective scaling to accommodate fluctuating global demand. Which architectural adjustment would most effectively achieve these objectives?

Accepted Answer

Implement a multi-region deployment strategy, distributing the application across multiple AWS regions with each region utilizing its own Application Load Balancer and Amazon RDS instances, and leveraging Amazon CloudFront for caching static assets, all orchestrated by Amazon Route 53 for intelligent latency-based traffic routing.

Question 14

A global e-commerce platform, operating entirely within AWS, needs to enhance its disaster recovery strategy to meet a Recovery Time Objective (RTO) of less than 15 minutes and a Recovery Point Objective (RPO) of less than 5 minutes. The platform consists of a web tier hosted on EC2 instances behind an Application Load Balancer (ALB), a relational database managed by Amazon RDS, and static assets stored in Amazon S3. The current architecture is deployed in a single AWS Region. The company has expressed concerns about regional outages and wishes to implement a solution that provides high availability and data durability across geographically distinct locations, while also considering cost-effectiveness. Which architectural approach would best satisfy these requirements?

Accepted Answer

Implement Amazon S3 Cross-Region Replication (CRR) for static assets, deploy Amazon RDS with Multi-AZ and cross-Region read replicas, utilize EC2 Auto Scaling with an ALB for the web tier in the primary Region, and configure Amazon Route 53 with weighted routing policies to distribute traffic across multiple Regions.

Question 15

A global e-commerce platform, currently running a monolithic application on-premises, is experiencing significant performance bottlenecks during peak sales events and finds its operational costs are spiraling due to over-provisioned infrastructure. The architecture lacks the agility to adapt to fluctuating customer traffic, leading to frequent outages and customer dissatisfaction. The company’s leadership has mandated a move to AWS to achieve greater scalability, cost-efficiency, and resilience, with a strict deadline for the initial phase of migration. Which AWS solution best addresses these critical requirements while enabling future iterative improvements to the application?

Accepted Answer

Decompose the monolithic application into microservices and deploy them using Amazon Elastic Kubernetes Service (EKS), leveraging Amazon Aurora for the relational database backend.

Question 16

A financial services firm is experiencing intermittent periods of application unresponsiveness, manifesting as user-reported timeouts. This began shortly after deploying a new customer onboarding microservice managed within an Amazon Elastic Kubernetes Service (EKS) cluster, while the core banking monolith remains on Amazon EC2 instances. The architecture utilizes an Application Load Balancer (ALB) to route traffic to the monolith and the microservice based on request path. CloudWatch is configured to collect metrics and logs from all AWS resources. To effectively diagnose the root cause of these sporadic availability issues and restore consistent performance, what is the most efficient and comprehensive initial approach to identify the problematic component or interaction?

Accepted Answer

Correlate CloudWatch Logs from the monolithic EC2 instances for failed API calls to the microservice with CloudWatch metrics for EKS pod resource utilization (CPU, memory) and ALB target group health status.

Question 17

Aethelred Innovations, a rapidly growing e-commerce platform, is experiencing unpredictable spikes in customer activity, particularly during seasonal sales events and marketing campaigns. Their current architecture, running on a fixed number of EC2 instances behind an Elastic Load Balancer, is failing to cope with these surges, leading to slow response times and occasional outright unavailability. The development team needs to implement a solution that can automatically provision and de-provision compute resources based on real-time demand, ensuring consistent performance and availability without manual intervention. Which AWS service is most critical for addressing this core requirement of dynamically adjusting compute capacity?

Accepted Answer

AWS Auto Scaling

Question 18

A financial services firm is undertaking a significant digital transformation initiative, migrating a mission-critical, monolithic customer relationship management (CRM) application from its on-premises data center to AWS. The application relies heavily on a proprietary, highly customized relational database system that incorporates complex, vendor-specific stored procedures and indexing strategies that are not compatible with standard SQL or AWS managed database services like Amazon RDS or Amazon Aurora. The firm mandates that all customer data must reside within the United States East (N. Virginia) region due to stringent regulatory compliance requirements. Additionally, the application must be architected for high availability, fault tolerance, and the ability to automatically scale compute resources in response to fluctuating user loads, which can vary significantly throughout the business day. What is the most appropriate AWS architecture to meet these requirements?

Accepted Answer

Deploy the application on Amazon EC2 instances within an Auto Scaling group, fronted by an Application Load Balancer (ALB). Host the proprietary database on separate Amazon EC2 instances, also configured within an Auto Scaling group and deployed across multiple Availability Zones within the us-east-1 region, utilizing EBS volumes and native database replication for data redundancy and availability.

Question 19

A financial services firm is migrating a critical, customer-facing web application from its on-premises data center to AWS. The application is a monolithic architecture that experiences significant performance degradation during peak trading hours, leading to user complaints and potential lost revenue. The firm\'s operational budget is constrained, requiring a cost-effective scaling strategy. They also need to ensure high availability and disaster recovery capabilities. The current infrastructure struggles to provision resources rapidly enough to meet demand spikes. The firm plans to re-architect the application into smaller, independent services, deploy them in containers, and utilize managed AWS services for data storage and content delivery. Which AWS services, when implemented together, would best address the firm\'s requirements for scalability, cost-effectiveness, high availability, and disaster recovery in this re-architected solution?

Accepted Answer

Amazon ECS with EC2 launch type for container orchestration, Amazon S3 for static asset storage, Amazon RDS for relational data, Amazon DynamoDB for session state, Amazon CloudFront for content delivery, and AWS Lambda with Amazon SQS for asynchronous processing.

Question 20

A fintech company is developing a new trading platform that handles sensitive financial transactions. The application is stateful and requires persistent storage that can be accessed concurrently by multiple compute instances deployed across different Availability Zones within the same AWS region to ensure high availability and fault tolerance. The data integrity and consistent access are paramount, and the solution must minimize operational overhead. Which AWS storage service is most appropriate for this requirement?

Accepted Answer

Amazon Elastic File System (EFS)

Question 21

Aether Dynamics operates a critical customer relationship management (CRM) application deployed across multiple AWS regions to serve its global clientele. The application leverages Amazon EC2 instances behind regional Application Load Balancers (ALBs) and utilizes Amazon RDS for its relational database. Users are reporting inconsistent performance, characterized by significant latency and occasional connection interruptions, particularly when their workflows involve accessing diverse customer data segments that may be distributed across different Availability Zones or even regions. The current traffic management relies on Amazon Route 53\'s latency-based routing to direct users to the nearest AWS region. What architectural adjustment would most effectively mitigate these performance and reliability concerns for Aether Dynamics\' global user base?

Accepted Answer

Re-architect the database to use Amazon Aurora Global Database and configure Route 53 with latency-based routing to direct users to the nearest Aurora read replica.

Question 22

A financial services firm is operating a critical, legacy monolithic application that handles customer onboarding and transaction processing. This application is characterized by tightly coupled components and a stateful backend, leading to slow development cycles, deployment challenges, and difficulties in scaling individual functionalities. The firm\'s leadership has mandated a strategic shift towards a more agile and scalable architecture, enabling faster feature releases and independent scaling of different application modules. They are considering a transition to a microservices-based architecture. Which migration strategy best addresses the firm\'s objectives while minimizing operational risk and ensuring business continuity during the transition?

Accepted Answer

Gradually extract specific business capabilities from the monolith into independent microservices, implementing an anti-corruption layer to manage interactions with the remaining monolithic components.

Question 23

A global e-commerce enterprise is migrating its monolithic customer-facing web application to AWS. The application experiences significant, unpredictable traffic spikes during promotional events and holiday seasons. Key requirements include maintaining application availability during these peaks, ensuring rapid deployment of new features to stay competitive, and adhering to stringent data protection regulations, such as those requiring data to remain within a specific geographical jurisdiction and be encrypted both in transit and at rest. The architecture must also minimize the burden of infrastructure management to allow the development team to focus on feature development. Which combination of AWS services best addresses these requirements for the application\'s compute layer and traffic management?

Accepted Answer

Amazon EC2 instances managed by an Auto Scaling group, fronted by an Application Load Balancer, deployed across multiple Availability Zones within a single AWS Region.

Question 24

A global e-commerce platform, currently operating a monolithic application on a single EC2 instance, is experiencing significant performance degradation and frequent unplanned downtime. The application\'s architecture makes it challenging to scale individual components independently, and deployment of new features often requires extended maintenance windows, negatively impacting customer transactions. The company\'s compliance team has also raised concerns about the application\'s ability to meet stringent data residency requirements for certain customer segments. The development team wants to adopt a more agile approach to deployment and scaling. Which combination of AWS services would best address these multifaceted challenges, enabling independent scaling, high availability, improved deployment velocity, and compliance with data residency regulations?

Accepted Answer

Amazon EKS for container orchestration, Amazon EFS for shared persistent storage, Amazon CloudFront for content delivery, and AWS WAF for web security.

Question 25

A financial services company is migrating a critical, stateful trading application to AWS. The application relies on a relational database for transaction processing and order management. The primary requirements are to ensure zero data loss during any infrastructure failure and to maintain application availability with minimal interruption to users, particularly during peak trading hours. The company needs a solution that can automatically handle failover events without manual intervention and provide robust monitoring for early detection of potential issues.

Which combination of AWS services best meets these requirements?

Accepted Answer

Amazon RDS configured for Multi-AZ deployment, Elastic Load Balancing (ELB), and Amazon CloudWatch alarms

Question 26

Aether Dynamics, a healthcare technology firm, is migrating its customer relationship management (CRM) data to Amazon S3. This data contains personally identifiable information (PII) and protected health information (PHI), necessitating strict adherence to regulations like GDPR and HIPAA. The company requires a solution that encrypts this data at rest within S3, provides robust auditing capabilities for compliance, and allows for centralized management of encryption keys. Which of the following AWS configurations best addresses these requirements?

Accepted Answer

Enable server-side encryption for S3 buckets using AWS Key Management Service (KMS) with customer-managed keys, and configure IAM policies to restrict access to both the S3 bucket and the KMS keys.

Question 27

A financial services company operates a mission-critical, read-heavy web application on AWS. The application requires high availability and the ability to withstand a complete AWS Region failure. The company\'s compliance mandate dictates a maximum Recovery Point Objective (RPO) of 5 minutes and a maximum Recovery Time Objective (RTO) of 15 minutes. The application\'s data resides in a relational database. Which AWS architecture best meets these stringent requirements while optimizing for read performance in the secondary region?

Accepted Answer

Deploy Amazon Aurora Global Database with a secondary cluster in a different AWS Region, configured for read-only access and rapid promotion to primary during a failover event.

Question 28

A global e-commerce platform, operating its backend services on Amazon EC2 instances behind an Application Load Balancer (ALB) and utilizing Amazon RDS for its primary database, has observed a significant decline in customer satisfaction due to intermittent unresponsiveness during peak shopping seasons. Analysis of monitoring data reveals that during these periods, CPU utilization on the EC2 instances consistently reaches saturation, and the application latency increases dramatically. The platform experiences unpredictable spikes in user traffic, making manual scaling efforts reactive and often insufficient. The company needs a robust, automated solution to ensure consistent application availability and performance without manual intervention.

Which AWS service, when configured with appropriate scaling policies, would most effectively address the dynamic compute resource needs of this e-commerce platform\'s web tier?

Accepted Answer

AWS Auto Scaling for EC2

Question 29

A multinational e-commerce platform, relying on a dynamic web application hosted on AWS, is experiencing significant performance degradation during its seasonal promotional events. Customers report intermittent slowdowns and occasional application timeouts when attempting to browse products and complete transactions. The current architecture utilizes an Application Load Balancer (ALB) distributing traffic across an Amazon EC2 Auto Scaling group. The Auto Scaling group is configured to scale based on average CPU utilization across its instances, with a target of 60%. The database layer consists of an Amazon RDS for PostgreSQL instance configured for Multi-AZ deployment. After reviewing monitoring data, it\'s observed that during peak event hours, the average CPU utilization on the EC2 instances frequently spikes above 85%, but the Auto Scaling group only initiates a scale-out event when the average CPU utilization consistently exceeds 70% for a 5-minute period, with a 300-second cooldown before new instances can serve traffic. Which of the following adjustments would most effectively address the observed performance issues by improving the system\'s ability to handle sudden traffic surges?

Accepted Answer

Modify the EC2 Auto Scaling group's scaling policy to initiate a scale-out action when average CPU utilization exceeds 50% and reduce the cooldown period to 60 seconds.

Question 30

A financial services firm is migrating its customer-facing web portal to AWS. The application is stateful, requiring session persistence, and processes sensitive personally identifiable information (PII). The firm must ensure high availability across multiple Availability Zones, resilience against single points of failure, and a robust disaster recovery strategy that allows for a Recovery Point Objective (RPO) of less than 15 minutes and a Recovery Time Objective (RTO) of less than 1 hour in a secondary region. Additionally, the application must comply with stringent data residency regulations, meaning all customer data must reside within a specific geographic region.

Which combination of AWS services best addresses these requirements?

Accepted Answer

Elastic Load Balancing (ELB) with EC2 Auto Scaling across multiple Availability Zones

AWS Certified Solutions Architect Associate 2018 AWS Certified Solutions Architect Associate 2018 (SAA001) Free Practice Test — 30 Questions

A lot more is already mapped out

About the AWS Certified Solutions Architect Associate 2018 AWS Certified Solutions Architect Associate 2018 (SAA001) Certification