AWS Solutions Architect Associate Practice Questions -...

Q: How many questions are in this practice set?

This practice set contains 80 questions with detailed explanations.

Q: What topics does this practice cover?

It covers the key topics and question types for AWS Certified Solutions Architect - Associate, including vocabulary, grammar, reading, and practical test skills.

Q: Are there explanations for every question?

Yes, every question includes a clear explanation so you can understand the correct answer and learn from mistakes.

Q: Can I save my progress and mistakes?

Your wrong answers, favorites, scores, and study streak are saved in your browser, so you can review them on the same device.

Q: What practice modes are available?

You can practice randomly, take a timed mock exam, filter by difficulty, type, and topic, search questions, and review wrong answers.

Question 1

A company runs a batch processing workload that can stop and restart at any time. Which EC2 purchasing option offers the largest discount but allows AWS to reclaim the instances with a short warning?

Select an answer Spot InstancesDedicated HostsOn-Demand InstancesReserved Instances

Question 2

A company must retain video archives for years and can accept a retrieval time of up to 12 hours. Which S3 storage class provides the lowest storage cost for this data?

Select an answer S3 StandardS3 Intelligent-TieringS3 One Zone-IAS3 Glacier Deep Archive

Question 3

Which AWS service provides a managed relational database with automated backups, patching, and optional Multi-AZ failover?

Select an answer Amazon RDSAmazon ElastiCacheAmazon NeptuneAmazon DynamoDB

Question 4

Which AWS service is designed for key-value and document workloads that require single-digit millisecond latency at high scale?

Select an answer Amazon RedshiftAmazon AuroraAmazon RDSAmazon DynamoDB

Question 5

Which AWS service provides DNS resolution and can route traffic to AWS resources based on policies such as latency or failover?

Select an answer Elastic Load BalancingAmazon CloudFrontAmazon Route 53AWS Transit Gateway

Question 6

An Application Load Balancer accepts HTTP and HTTPS requests and routes them to EC2 instances. At which OSI layer does it operate?

Select an answer Layer 2Layer 3Layer 4Layer 7

Question 7

Which storage option provides block-level volumes that attach to an EC2 instance in the same Availability Zone?

Select an answer Amazon EBSAmazon EFSS3 GlacierAmazon S3

Question 8

Which AWS compute service runs application code without requiring the user to provision or manage servers?

Select an answer Amazon EC2AWS LambdaEC2 Auto ScalingAmazon EKS

Question 9

Amazon S3 Standard is designed to provide how many nines of object durability?

Select an answer 99.999999999 percent100 percent99 percent99.99 percent

Question 10

Which IAM identity should an EC2 instance use to call AWS services without storing long-term access keys on the instance?

Select an answer An IAM groupThe AWS root userAn IAM userAn IAM role

Question 11

Which AWS service creates and manages the encryption keys used to encrypt data at rest in other AWS services?

Select an answer AWS WAFAWS ShieldAWS Key Management ServiceAmazon Inspector

Question 12

What is the relationship between an AWS Region and its Availability Zones?

Select an answer Regions are isolated locations within an Availability ZoneAvailability Zones contain multiple RegionsAvailability Zones are edge locationsAvailability Zones are isolated locations within a Region

Question 13

Which pillar of the AWS Well-Architected Framework focuses on avoiding unnecessary spending and matching costs to business value?

Select an answer Cost optimizationOperational excellenceSecurityReliability

Question 14

Linux EC2 instances in multiple Availability Zones need to share the same file system. Which storage service supports this use case?

Select an answer Amazon S3Instance StoreAmazon EBSAmazon EFS

Question 15

What reacts to a CloudWatch alarm and changes the desired capacity of an EC2 Auto Scaling group?

Select an answer A Route 53 recordAn EBS snapshotA scaling policyA VPC endpoint

Question 16

What is the primary purpose of Amazon RDS read replicas?

Select an answer Automatic failoverOffloading read trafficIncreasing write throughputProviding in-memory caching

Question 17

Which AWS offering provides discounted compute rates for a 1- or 3-year commitment while allowing changes across instance families and Regions?

Select an answer Compute Savings PlansDedicated HostsOn-Demand InstancesSpot Instances

Question 18

Which AWS service stores database passwords and can automatically rotate them on a schedule?

Select an answer Amazon CloudWatchAWS Secrets ManagerAWS Identity and Access ManagementAWS Backup

Question 19

Which AWS service records API activity in an account so that administrators can audit who performed which action?

Select an answer AWS CloudTrailAWS Trusted AdvisorAWS Cost ExplorerAmazon CloudWatch

Question 20

Which AWS service collects metrics, stores logs, and raises alarms when thresholds are breached?

Select an answer AWS CloudTrailAWS ConfigAWS OrganizationsAmazon CloudWatch

Question 21

Which statement about security groups is correct?

Select an answer They replace network ACLsThey are stateless and require explicit return-traffic rulesThey are stateful and automatically permit return trafficThey apply at the subnet level

Question 22

A company needs to grant principals in another AWS account access to objects in an S3 bucket. Which mechanism supports this cross-account access?

Select an answer A Route 53 recordAn S3 bucket policyAn EC2 security groupA CloudWatch alarm

Question 23

Which Amazon ECS launch type runs containers without the customer managing EC2 instances?

Select an answer On-PremisesSpot FleetFargateEC2

Question 24

Which AWS service caches content at edge locations to reduce latency for users around the world?

Select an answer Amazon Route 53Amazon CloudFrontAWS Direct ConnectAmazon S3 Transfer Acceleration

Question 25

Which S3 feature automatically moves objects to less expensive storage classes as data ages?

Select an answer Lifecycle policiesReplication rulesVersioningAccess points

Question 26

Why would a company enable S3 versioning on a bucket?

Select an answer To bypass encryption requirementsTo preserve previous object versions and recover from accidental overwrites or deletesTo make uploads fasterTo make all objects publicly readable

Question 27

A company must replicate objects from one bucket to a bucket in a different AWS Region. What is required for S3 Cross-Region Replication?

Select an answer All objects must be publicly readableReplication must complete instantlyVersioning must be enabled on the source and destination bucketsBoth buckets must be in the same AWS account

Question 28

Which service provides hybrid cloud storage that presents on-premises applications with file shares, volumes, or virtual tapes backed by AWS?

Select an answer Amazon EFSAmazon S3AWS Snowball EdgeAWS Storage Gateway

Question 29

What does an Amazon RDS Multi-AZ deployment provide?

Select an answer Automatic failover to a standby instance in another Availability ZoneRead scaling through multiple active replicasReplication across AWS RegionsIn-memory caching for the database

Question 30

Which statement about Amazon Aurora storage is correct?

Select an answer Aurora cannot create read replicasAurora stores six copies of data across three Availability ZonesAurora can store at most 10 GBAurora requires manual storage provisioning

Question 31

Which service provides microsecond-latency in-memory caching specifically for Amazon DynamoDB reads?

Select an answer Amazon CloudFrontAmazon RDS ProxyAmazon DynamoDB Accelerator (DAX)Amazon ElastiCache for Redis

Question 32

A DynamoDB table has unpredictable traffic that spikes suddenly. Which capacity mode charges per request and scales automatically without capacity planning?

Select an answer Provisioned with autoscalingFixed provisionedReserved capacityOn-demand

Question 33

What is the purpose of a DynamoDB global secondary index?

Select an answer Supporting queries with a different partition and sort keyReplicating data to another AWS RegionCaching frequently read itemsProviding strongly consistent reads for all queries

Question 34

A Lambda function is overwhelming a downstream API during spikes. Which Lambda setting limits the number of simultaneous executions?

Select an answer Layer configurationReserved concurrencyMemory allocationFunction timeout

Question 35

Which AWS service provides a managed Kubernetes control plane?

Select an answer AWS FargateAmazon ECRAmazon EKSAmazon ECS

Question 36

Two VPCs need private connectivity with no transitive routing. Which option requires non-overlapping CIDR blocks for the peer connection?

Select an answer Transit GatewayInternet GatewayNAT GatewayVPC peering

Question 37

A company has many VPCs that need to connect to each other and to on-premises networks. Which service acts as a central hub for this connectivity?

Select an answer AWS Transit GatewayA full mesh of VPC peering connectionsAn Internet GatewayA VPC endpoint

Question 38

Which option provides the lower-cost private access to S3 and DynamoDB from a VPC without using the internet or a NAT gateway?

Select an answer A NAT instanceA gateway VPC endpointAn interface VPC endpointA Site-to-Site VPN

Question 39

A company needs a dedicated private connection from its data center to AWS that does not use the public internet. Which service should it use?

Select an answer Client VPNVPC peeringAWS Direct ConnectSite-to-Site VPN

Question 40

Which ALB feature tracks the health of EC2 targets and stops sending requests to unhealthy instances?

Select an answer VPC peeringRoute 53 geolocation routingCloudFront origin groupsTarget groups with health checks

Question 41

A company wants Route 53 to send traffic to a primary Region and switch to a passive secondary Region only when health checks fail. Which routing policy should be used?

Select an answer FailoverWeightedSimpleGeolocation

Question 42

Which Route 53 routing policy directs users to the AWS Region that provides the lowest measured latency for their location?

Select an answer Multivalue answer routingLatency-based routingWeighted routingGeolocation routing

Question 43

Which statement correctly describes how security group rules handle traffic?

Select an answer Security groups are statelessSecurity groups replace network ACLsIf inbound traffic is allowed, return traffic is automatically permittedReturn traffic requires a separate outbound allow rule

Question 44

Which AWS component is a stateless firewall attached at the subnet level?

Select an answer Security groupVPC endpointInternet gatewayNetwork ACL

Question 45

Which statement about customer managed keys in AWS KMS is true?

Select an answer You control rotation, key policies, and deletionAWS rotates them automatically every hourThey can only encrypt DynamoDB dataThey are tied to a specific EC2 instance

Question 46

Which AWS service can store a database password and rotate it automatically without redeploying the application?

Select an answer AWS KMSAWS Secrets ManagerAWS IAMAWS CloudTrail

Question 47

Which AWS service applies managed rules to block SQL injection and cross-site scripting attacks against web applications?

Select an answer Amazon GuardDutyAmazon InspectorAWS WAFAWS Shield

Question 48

Which AWS DDoS protection offering includes 24/7 access to the DDoS Response Team and cost protection during an attack?

Select an answer AWS Shield StandardAWS WAFAmazon CloudFrontAWS Shield Advanced

Question 49

How should an application running on EC2 obtain permissions to call Amazon S3 securely?

Select an answer Attach an IAM role to the EC2 instanceStore access keys in the application codeUse the root user credentialsCreate an IAM user for every request

Question 50

A user needs time-limited access to one private S3 object without changing its access policy. Which mechanism grants this access?

Select an answer An S3 access pointA presigned URLA bucket policyA lifecycle rule

Question 51

Which statement about Amazon EBS snapshots is correct?

Select an answer They are stored on the attached instanceThey cannot be copied to another RegionThey are incremental and stored in Amazon S3They must remain in the same Availability Zone as the volume

Question 52

Which AWS storage service provides a shared file system that Linux instances in multiple Availability Zones can mount simultaneously?

Select an answer Amazon EBSInstance StoreAmazon S3Amazon EFS

Question 53

A video encoding workload requires maximum CPU performance per instance. Which EC2 instance family category is most appropriate?

Select an answer Compute optimizedMemory optimizedStorage optimizedBurstable

Question 54

How can an Auto Scaling group reduce EC2 costs for an interruption-tolerant batch workload while keeping capacity available?

Select an answer Use one very large instanceUse Spot Instances in a mixed instances groupUse Dedicated HostsUse only On-Demand Instances

Question 55

What is the main difference between the Fargate and EC2 launch types in Amazon ECS?

Select an answer Fargate cannot run Docker containersThe EC2 launch type does not use containersFargate manages the underlying instances for containersThe EC2 launch type is serverless

Question 56

Which pair of AWS services should a team use to monitor resource metrics and audit the API calls that changed those resources?

Select an answer Amazon Route 53 and Amazon CloudFrontAWS IAM and AWS OrganizationsAWS Cost Explorer and AWS BudgetsAmazon CloudWatch and AWS CloudTrail

Question 57

Which AWS service can patch and run commands on EC2 instances at scale without requiring SSH or RDP access?

Select an answer AWS Systems ManagerAmazon InspectorAWS CloudFormationAWS CodeCommit

Question 58

Which AWS tool shows historical cost and usage charts and can forecast future spending, while AWS Budgets sends alerts when thresholds are exceeded?

Select an answer AWS Compute OptimizerAWS Cost ExplorerAWS Pricing CalculatorAWS Trusted Advisor

Question 59

Which AWS service uses machine learning to recommend EC2 instance types and sizes based on historical utilization?

Select an answer Amazon CloudWatchAWS Service QuotasAWS Compute OptimizerAWS Trusted Advisor

Question 60

Which AWS tool checks an account against best practices for cost optimization, security, fault tolerance, performance, and service limits?

Select an answer AWS ConfigAWS CloudTrailAWS ArtifactAWS Trusted Advisor

Question 61

Which S3 storage class automatically moves objects between access tiers based on changing usage patterns?

Select an answer S3 Intelligent-TieringS3 StandardS3 Glacier Deep ArchiveS3 One Zone-IA

Question 62

A MySQL-compatible application has growing storage needs and wants a relational database that scales storage automatically up to 128 TiB. Which service is the best fit?

Select an answer Amazon ElastiCacheAmazon AuroraAmazon RDS for MySQLAmazon DynamoDB

Question 63

An application needs to handle millions of TCP connections, preserve client source IP addresses, and support static IP addresses for the load balancer. Which load balancer should be used?

Select an answer Classic Load BalancerGateway Load BalancerNetwork Load BalancerApplication Load Balancer

Question 64

Which Amazon CloudFront feature restricts access to private content for a limited time period?

Select an answer Origin access control aloneA WAF rate-based ruleCache invalidationSigned URLs and signed cookies

Question 65

A solutions architect is designing a highly available web tier. Which two choices improve availability? Select TWO.

Select an answer Deploy instances in multiple Availability Zones behind an Application Load BalancerPlace all instances in one Availability Zone to reduce latencyUse Route 53 failover routing to a standby RegionStore all session data on a single instance store volumeDisable load balancer health checks

Question 66

A company wants an S3 bucket that is private by default but still allows one named IAM user to upload objects. Which two configurations achieve this? Select TWO.

Select an answer Use a bucket policy that denies everyone except the named userCreate a lifecycle rule that makes new objects publicGrant anonymous write accessEnable Block Public Access and grant upload permission through an IAM policySet the bucket ACL to public-read

Question 67

A microservices application needs to decouple components so a slow consumer does not block the producer. Which two AWS services support this pattern? Select TWO.

Question 68

An architect wants to protect an ALB-backed web API from application-layer attacks. Which two defenses are appropriate? Select TWO.

Select an answer Subscribe to AWS Shield AdvancedAdd a security group rule allowing all inbound HTTPS trafficConfigure Route 53 latency routingEnable AWS CloudTrail data events onlyAttach an AWS WAF web ACL to the Application Load Balancer

Question 69

Which statements about Amazon DynamoDB are correct? Select all that apply.

Select an answer A global secondary index must use the same partition key as the base tableDynamoDB is a relational database that supports SQL joinsDAX provides in-memory caching for DynamoDB readsGlobal tables replicate data across AWS RegionsOn-demand mode automatically scales read and write capacity

Question 70

Which practices improve the high availability and disaster recovery of an Amazon RDS database? Select all that apply.

Select an answer Create cross-Region read replicasCopy snapshots to another RegionStore database files on a single EBS volume onlyDisable automated backups to reduce costEnable Multi-AZ for automatic failover

Question 71

Which S3 features help protect data and support compliance requirements? Select all that apply.

Select an answer Versioning automatically encrypts all objectsDisabling encryption reduces compliance riskVersioning to preserve and recover previous object versionsS3 Replication to copy objects to another RegionS3 Object Lock for write-once-read-many retention

Question 72

Which measures reduce AWS costs without reducing availability? Select all that apply.

Select an answer Purchase Compute Savings Plans for steady workloadsUse Spot Instances for interruption-tolerant jobsRightsize EC2 instances with AWS Compute OptimizerKeep idle EC2 instances running 24/7Move cold data to S3 Standard with lifecycle policies

Question 73

Amazon S3 Standard is designed to provide 99.999999999 percent durability for objects.

Select an answer TrueFalse

Question 74

An Amazon RDS read replica can be promoted to become a standalone primary database.

Select an answer TrueFalse

Question 75

Security groups are stateless, so return traffic for an allowed inbound request must be explicitly permitted by an outbound rule.

Select an answer TrueFalse

Question 76

A VPC peering connection supports transitive routing, so a third VPC can route traffic through an existing peer connection.

Select an answer TrueFalse

Question 77

DynamoDB on-demand mode automatically adjusts read and write capacity to handle traffic changes.

Select an answer TrueFalse

Question 78

A gateway VPC endpoint for S3 incurs an hourly charge while it is attached to a VPC.

Select an answer TrueFalse

Question 79

AWS Secrets Manager can automatically rotate credentials for Amazon RDS databases.

Select an answer TrueFalse

Question 80

In an RDS Multi-AZ deployment, the standby instance can serve read traffic to offload the primary.

Select an answer TrueFalse