[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-seo-317606-105":3,"detail-sidebar-cat-0-en-105":81,"doc-detail-317606-en":131},{"code":4,"msg":5,"data":6},0,"ok",{"site_id":7,"language":8,"slug":9,"title":10,"keywords":11,"description":12,"schema_data":13,"social_meta":74,"head_meta":76,"extra_data":78,"updated_unix":80},105,"en","aws-certified-solutions-architect-associate-sample-questions-317606","AWS Certified Solutions Architect Associate Sample Questions","","Practice exam questions for the AWS Certified Solutions Architect – Associate credential, covering core architecture and security decisions across common AWS services. The set addresses secure credentials management, high availability session storage choices, durable and deletion-protected document storage, selecting managed relational database options, meeting EBS IOPS performance needs, scaling bottlenecks in event-driven S3-Lambda-SQS flows, S3 log retention via lifecycle rules, secure access to S3 over private networking, restricting Amazon Redshift cluster access, and VPC subnet/NAT design for tier separation and patch downloads.",{"@graph":14,"@context":73},[15,34,56],{"@type":16,"itemListElement":17},"BreadcrumbList",[18,23,27,31],{"item":19,"name":20,"@type":21,"position":22},"https://docshare.wps.com","Home","ListItem",1,{"item":24,"name":25,"@type":21,"position":26},"https://docshare.wps.com/document/","Document",2,{"item":28,"name":29,"@type":21,"position":30},"https://docshare.wps.com/document/exam/","Exam",3,{"item":32,"name":10,"@type":21,"position":33},"https://docshare.wps.com/document/aws-certified-solutions-architect-associate-sample-questions-317606/317606/",4,{"url":32,"name":10,"@type":35,"image":36,"author":41,"headline":10,"publisher":44,"fileFormat":47,"inLanguage":8,"description":12,"dateModified":48,"datePublished":49,"encodingFormat":47,"isAccessibleForFree":50,"interactionStatistic":51},"DigitalDocument",{"url":37,"@type":38,"width":39,"height":40},"https://docshare.wps.com/thumbnails/aws-certified-solutions-architect-associate-sample-questions-317606/317606.png","ImageObject",300,407,{"name":42,"@type":43},"Eliana","Person",{"url":19,"name":45,"@type":46},"DocShare","Organization","application/pdf","2026-10-31","2026-09-20",true,{"@type":52,"interactionType":53,"userInteractionCount":55},"InteractionCounter",{"@type":54},"ViewAction",13,{"@type":57,"mainEntity":58},"FAQPage",[59,65,69],{"name":60,"@type":61,"acceptedAnswer":62},"Which approach best avoids storing AWS access keys on an AMI?","Question",{"text":63,"@type":64},"Create an IAM role with permissions to access the DynamoDB table and launch instances using the new role (not by generating or distributing access keys).","Answer",{"name":66,"@type":61,"acceptedAnswer":67},"For a stateless web application, which services are suitable for storing session state data?",{"text":68,"@type":64},"DynamoDB and ElastiCache.",{"name":70,"@type":61,"acceptedAnswer":71},"What S3 feature helps protect against unintended deletion of important uploaded documents?",{"text":72,"@type":64},"Enable S3 versioning so deleted objects can be recovered by retrieving prior versions.","https://schema.org",{"og:url":32,"og:type":75,"og:title":10,"og:site_name":45,"og:description":12},"article",{"robots":77,"canonical":32},"index,follow",{"doc_id":79,"site_id":7},317606,1790027631,{"code":4,"msg":82,"data":83},"success",[84,88,92,95,100,105,110,115,120,123,127],{"id":22,"doc_module":4,"doc_module_name":25,"category_name":85,"show_sort_weight":86,"slug":87},"Story & Novel",90,"story-novel",{"id":26,"doc_module":4,"doc_module_name":25,"category_name":89,"show_sort_weight":90,"slug":91},"Literature",80,"literature",{"id":33,"doc_module":4,"doc_module_name":25,"category_name":29,"show_sort_weight":93,"slug":94},70,"exam",{"id":96,"doc_module":4,"doc_module_name":25,"category_name":97,"show_sort_weight":98,"slug":99},5,"Comic",60,"comic",{"id":101,"doc_module":4,"doc_module_name":25,"category_name":102,"show_sort_weight":103,"slug":104},6,"Technology",50,"technology",{"id":106,"doc_module":4,"doc_module_name":25,"category_name":107,"show_sort_weight":108,"slug":109},7,"Healthcare",40,"healthcare",{"id":111,"doc_module":4,"doc_module_name":25,"category_name":112,"show_sort_weight":113,"slug":114},8,"Research & Report",30,"research-report",{"id":116,"doc_module":4,"doc_module_name":25,"category_name":117,"show_sort_weight":118,"slug":119},9,"Religion & Spirituality",20,"religion-spirituality",{"id":118,"doc_module":4,"doc_module_name":25,"category_name":121,"show_sort_weight":118,"slug":122},"World Cup","world-cup",{"id":124,"doc_module":4,"doc_module_name":25,"category_name":125,"show_sort_weight":124,"slug":126},10,"Lifestyle","lifestyle",{"id":128,"doc_module":4,"doc_module_name":25,"category_name":129,"show_sort_weight":96,"slug":130},19,"General","general",{"code":4,"msg":82,"data":132},{"doc_id":79,"user_id":133,"nickname":42,"user_avatar":134,"doc_module":4,"category_id":33,"category_name":29,"doc_title":10,"doc_description":12,"doc_content":135,"file_id":136,"file_url":137,"file_type":138,"file_size":139,"view_count":55,"is_deleted":4,"is_public":22,"is_downloadable":22,"audit_status":22,"page_count":96,"language":140,"language_code":8,"site_id":7,"html_lang":8,"table_of_contents":141,"faqs":142,"seo_title":143,"seo_description":12,"update_tm":144,"read_time":55,"preview_page_count":4},4398048949847,"https://ap-avatar.wpscdn.com/avatar/400002536579ef2da7f?_k=1778318612642679267","1) A company is storing an access key (access key ID and secret access key) in a text file on a custom  \nAMI. The company uses the access key to access DynamoDB tables from instances created from the AMI. The security team has mandated a more secure solution.  \nWhich solution will meet the security team’s mandate?  \nA. Put the access key in an S3 bucket, and retrieve the access key on boot from the instance.  \nB. Pass the access key to the instances through instance user data.  \nC. Obtain the access key from a key server launched in a private subnet.  \nD. Create an IAM role with permissions to access the table, and launch all instances with the new role.  \n2) A company is developing a highly available web application using stateless web servers. Which services are suitable for storing session state data? (Select TWO.)  \nA. CloudWatch  \nB. DynamoDB  \nC. Elastic Load Balancing  \nD. ElastiCache  \nE. Storage Gateway  \n3) Company salespeople upload their sales figures daily. A Solutions Architect needs a durable storage solution for these documents that also protects against users accidentally deleting important documents.  \nWhich action will protect against unintended user actions?  \nA. Store data in an EBS volume and create snapshots once a week.  \nB. Store data in an S3 bucket and enable versioning.  \nC. Store data in two S3 buckets in different AWS regions.  \nD. Store data on EC2 instance storage.  \n4) An application requires a highly available relational database with an initial storage capacity of 8 TB. The database will grow by 8 GB every day. To support expected traffic, at least eight read replicas will be required to handle database reads.  \nWhich option will meet these requirements?  \nA. DynamoDB  \nB. Amazon S3  \nC. Amazon Aurora  \nD. Amazon Redshift  \n5) A Solutions Architect is designing a critical business application with a relational database that runson an EC2 instance. It requires a single EBS volume that can support up to 16,000 IOPS.  \nWhich Amazon EBS volume type can meet the performance requirements of this application?  \nA. EBS Provisioned IOPS SSD  \nB. EBS Throughput Optimized HDD  \nC. EBS General Purpose SSD  \nD. EBS Cold HDD  \n6) A web application allows customers to upload orders to an S3 bucket. The resulting Amazon S3 events trigger a Lambda function that inserts a message to an SQS queue. A single EC2 instance reads messages from the queue, processes them, and stores them in an DynamoDB table partitioned by unique order ID. Next month traffic is expected to increase by a factor of 10 and a Solutions Architect is reviewing the architecture for possible scaling problems.  \nWhich component is MOST likely to need re-architecting to be able to scale to accommodate the new traffic?  \nA. Lambda function  \nB. SQS queue  \nC. EC2 instance  \nD. DynamoDB table  \n7) An application saves the logs to an S3 bucket. A user wants to keep the logs for one month for troubleshooting purposes, and then purge the logs.  \nWhat feature will enable this?  \nA. Adding a bucket policy on the S3 bucket.  \nB. Configuring lifecycle configuration rules on the S3 bucket.  \nC. Creating an IAM policy for the S3 bucket.  \nD. Enabling CORS on the S3 bucket.  \n8) An application running on EC2 instances processes sensitive information stored on Amazon S3 . The information is accessed over the Internet. The security team is concerned that the Internet connectivity to Amazon S3 is a security risk.  \nWhich solution will resolve the security concern?  \nA. Access the data through an Internet Gateway.  \nB. Access the data through a VPN connection.  \nC. Access the data through a NAT Gateway.  \nD. Access the data through a VPC endpoint for Amazon S3 .  \n9) An organization is building an Amazon Redshift cluster in their shared services VPC. The cluster will host sensitive data.  \nHow can the organization control which networks can access the cluster?  \nA. Run the cluster in a different VPC and connect through VPC peering.  \nB. Create a database user ","cbCaiclx98v2skZ5","https://ap.wps.com/l/cbCaiclx98v2skZ5","pdf",389035,"English","# Sample Questions\n## Credentials and Access\n## Session State Storage\n## Durable Document Storage\n## Relational Database and Read Replicas\n## EBS Performance Requirements\n## Scaling in Event-Driven Workflows\n## S3 Log Retention and Purging\n## Private Access to S3\n## Redshift Cluster Network Access\n## VPC Design for Application and Database Tiers","[{\"question\":\"Which approach best avoids storing AWS access keys on an AMI?\",\"answer\":\"Create an IAM role with permissions to access the DynamoDB table and launch instances using the new role (not by generating or distributing access keys).\"},{\"question\":\"For a stateless web application, which services are suitable for storing session state data?\",\"answer\":\"DynamoDB and ElastiCache.\"},{\"question\":\"What S3 feature helps protect against unintended deletion of important uploaded documents?\",\"answer\":\"Enable S3 versioning so deleted objects can be recovered by retrieving prior versions.\"}]","AWS Certified Solutions Architect Associate Sample Questions | PDF",1789936812]