[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-317365-105":59,"doc-detail-317365-en":131},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":124,"head_meta":126,"extra_data":128,"updated_unix":130},105,"en","aws-certified-solutions-architect-associate-sample-questions","AWS Certified Solutions Architect Associate Sample Questions","","Sample AWS Certified Solutions Architect – Associate questions covering core architectural decisions across security, availability, storage durability, database selection, and scaling. Topics include securing access keys using IAM roles, choosing services for session state, preventing unintended deletion with S3 versioning, selecting AWS services for highly available relational databases and Aurora read replicas, mapping EBS volume types to IOPS requirements, identifying bottlenecks for scaling with S3/Lambda/SQS/DynamoDB, managing log retention via S3 lifecycle rules, securing S3 access with VPC endpoints, controlling Redshift access using security groups, and designing VPC subnet/NAT layouts for restricted database internet access.",{"@graph":69,"@context":123},[70,84,106],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":20,"@type":76,"position":81},"https://docshare.wps.com/document/exam/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/aws-certified-solutions-architect-associate-sample-questions/317365/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/aws-certified-solutions-architect-associate-sample-questions/317365.png","ImageObject",300,407,{"name":92,"@type":93},"Skyler","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-10-28","2026-09-20",true,{"@type":102,"interactionType":103,"userInteractionCount":105},"InteractionCounter",{"@type":104},"ViewAction",13,{"@type":107,"mainEntity":108},"FAQPage",[109,115,119],{"name":110,"@type":111,"acceptedAnswer":112},"Why is using an access key stored on an AMI less secure, and what is the recommended alternative?","Question",{"text":113,"@type":114},"Storing secrets in an AMI requires managing and protecting the access key and its complexity. Using IAM roles for EC2 instances lets applications access AWS resources without creating or storing access keys.","Answer",{"name":116,"@type":111,"acceptedAnswer":117},"What options are suitable for storing session state data in a highly available web application?",{"text":118,"@type":114},"Amazon DynamoDB and Amazon ElastiCache are suitable because they provide high-performance key-value storage for session state.",{"name":120,"@type":111,"acceptedAnswer":121},"How can an application keep S3 logs for 1 month and then automatically purge them?",{"text":122,"@type":114},"Configure lifecycle configuration rules on the S3 bucket to transition or delete objects after the specified retention period.","https://schema.org",{"og:url":83,"og:type":125,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":127,"canonical":83},"index,follow",{"doc_id":129,"site_id":62},317365,1789995805,{"code":4,"msg":5,"data":132},{"doc_id":129,"user_id":133,"nickname":92,"user_avatar":134,"doc_module":4,"category_id":19,"category_name":20,"doc_title":65,"doc_description":67,"doc_content":135,"file_id":136,"file_url":137,"file_type":138,"file_size":139,"view_count":105,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":19,"language":140,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":141,"faqs":142,"seo_title":143,"seo_description":67,"update_tm":144,"read_time":52,"preview_page_count":4},2336464648746,"https://ap-avatar.wpscdn.com/davatar_276721f389ce27ea32af1340a28f341c","1) A company is storing an access key with an access key ID and secret access key in a text file on a custom Amazon Machine Image (AMI) . The company uses the access key to access Amazon DynamoDB tables from instances created from the AMI. The security team has mandated a more secure solution.  \nWhich solution will meet the security team’s mandate?  \nA) Put the access key in an Amazon S3 bucket and retrieve the access key on boot from the instance.  \nB) Pass the access key to the instances through instance user data.  \nC) Obtain the access key from a key server launched in a private subnet.  \nD) Create an IAM role with permissions to access the table and launch all instances with the new role.  \n2) A company is developing a highly available web application using stateless web servers.  \nWhich AWS services or features are suitable for storing session state data? (Select TWO.)  \nA) Amazon CloudWatch  \nB) Amazon DynamoDB  \nC) Elastic Load Balancing  \nD) Amazon ElastiCache  \nE) AWS Storage Gateway  \n3) Company salespeople upload their sales figures daily. A solutions architect needs a durable storage solution for these documents that also protects against users accidentally deleting important documents.  \nWhich action will protect against unintended user actions?  \nA) Store data in an Amazon Elastic Block Store (Amazon EBS) volume and create snapshots once a week.  \nB) Store data in an Amazon S3 bucket and enable versioning.  \nC) Store data in two Amazon S3 buckets in different AWS Regions.  \nD) Store data in Amazon EC2 instance storage.  \n4) An application requires a highly available relational database with an initial storage capacity of 8 TB. The database will grow by 8 GB every day. To support expected traffic, at least eight read replicas will be required to handle database reads.  \nWhich AWS service will meet these requirements?  \nA) Amazon DynamoDB  \nB) Amazon S3  \nC) Amazon Aurora  \nD) Amazon Redshift  \n5) A solutions architect is designing a critical business application with a relational database that runs on an Amazon EC2 instance. It requires a single Amazon Elastic Block Store (Amazon EBS) volume that can support up to 32,000 IOPS.  \nWhich EBS volume type can meet the performance requirements of this application?  \nA) EBS Provisioned IOPS SSD (io1)  \nB) EBS Throughput Optimized HDD (st1)  \nC) EBS General Purpose SSD (gp2)  \nD) EBS Cold HDD (sc1)  \n6) A web application allows users to upload orders to an Amazon S3 bucket. The resulting Amazon S3 events trigger an AWS Lambda function that inserts a message to an Amazon SQS queue. A single Amazon EC2 instance reads messages from the queue, processes them, and stores them in an Amazon DynamoDB table partitioned by unique order ID. Next month, traffic is expected to increase by a factor of 10 and a solutions architect is reviewing the architecture for possible scaling problems.  \nWhich component is MOST likely to need re-architecting to be able to scale to accommodate the new traffic?  \nA) Lambda function  \nB) SQS queue  \nC) EC2 instance  \nD) DynamoDB table  \n7) An application saves its logs to an Amazon S3 bucket. A user wants to keep the logs for 1 month for troubleshooting purposes, and then purge the logs.  \nWhat feature will enable this?  \nA) Adding a bucket policy to the S3 bucket  \nB) Configuring lifecycle configuration rules for the S3 bucket  \nC) Creating an IAM policy for the S3 bucket  \nD) Enabling cross-origin resource sharing (CORS) on the S3 bucket  \n8) An application running on Amazon EC2 instances processes sensitive information stored in Amazon S3 . The information is accessed over the internet. The security team is concerned that the internet connectivity to Amazon S3 is a security risk.  \nWhich solution will resolve the security concern?  \nA) Access the data through an internet gateway.  \nB) Access the data through a VPN connection.  \nC) Access the data through a NAT gateway.  \nD) Access the data through a VPC endpoint for Amazon S3 .  \n9) A company is b","cbCaisRYMkmINXiA","https://ap.wps.com/l/cbCaisRYMkmINXiA","pdf",448172,"English","# Security and Identity\n## IAM roles vs access keys\n## VPC endpoints and database access control\n# Storage and Durability\n## S3 versioning and lifecycle rules\n## EBS volume performance (IOPS)\n# Databases and Availability\n## Aurora and read replicas\n## Redshift network access\n# Scaling and Sessions\n## Session state storage options\n## Scaling bottlenecks in message processing\n# Networking and VPC Design\n## Subnet types and NAT gateway","[{\"question\":\"Why is using an access key stored on an AMI less secure, and what is the recommended alternative?\",\"answer\":\"Storing secrets in an AMI requires managing and protecting the access key and its complexity. Using IAM roles for EC2 instances lets applications access AWS resources without creating or storing access keys.\"},{\"question\":\"What options are suitable for storing session state data in a highly available web application?\",\"answer\":\"Amazon DynamoDB and Amazon ElastiCache are suitable because they provide high-performance key-value storage for session state.\"},{\"question\":\"How can an application keep S3 logs for 1 month and then automatically purge them?\",\"answer\":\"Configure lifecycle configuration rules on the S3 bucket to transition or delete objects after the specified retention period.\"}]","AWS Certified Solutions Architect Associate Sample Questions | PDF",1789932359]