[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-seo-317401-105":3,"detail-sidebar-cat-0-en-105":81,"doc-detail-317401-en":130},{"code":4,"msg":5,"data":6},0,"ok",{"site_id":7,"language":8,"slug":9,"title":10,"keywords":11,"description":12,"schema_data":13,"social_meta":74,"head_meta":76,"extra_data":78,"updated_unix":80},105,"en","aws-certified-solutions-architect-professional-sample-questions","AWS Certified Solutions Architect Professional Sample Questions","","Practice questions for the AWS Certified Solutions Architect – Professional exam focus on designing secure, scalable solutions across multiple AWS accounts and services. Scenarios cover preventing excessive AWS spending with governance controls, granting cross-account read-only access for third-party monitoring, enabling browser-based HTML form submissions through S3 and API Gateway CORS configuration, resolving intermittent 502 errors in a serverless mobile app during traffic surges, and securing ECS cluster instances by limiting inbound access. Additional questions address identity and credential strategies for separating production and development responsibilities.",{"@graph":14,"@context":73},[15,34,56],{"@type":16,"itemListElement":17},"BreadcrumbList",[18,23,27,31],{"item":19,"name":20,"@type":21,"position":22},"https://docshare.wps.com","Home","ListItem",1,{"item":24,"name":25,"@type":21,"position":26},"https://docshare.wps.com/document/","Document",2,{"item":28,"name":29,"@type":21,"position":30},"https://docshare.wps.com/document/exam/","Exam",3,{"item":32,"name":10,"@type":21,"position":33},"https://docshare.wps.com/document/aws-certified-solutions-architect-professional-sample-questions/317401/",4,{"url":32,"name":10,"@type":35,"image":36,"author":41,"headline":10,"publisher":44,"fileFormat":47,"inLanguage":8,"description":12,"dateModified":48,"datePublished":49,"encodingFormat":47,"isAccessibleForFree":50,"interactionStatistic":51},"DigitalDocument",{"url":37,"@type":38,"width":39,"height":40},"https://docshare.wps.com/thumbnails/aws-certified-solutions-architect-professional-sample-questions/317401.png","ImageObject",300,407,{"name":42,"@type":43},"Mason","Person",{"url":19,"name":45,"@type":46},"DocShare","Organization","application/pdf","2026-10-21","2026-09-20",true,{"@type":52,"interactionType":53,"userInteractionCount":55},"InteractionCounter",{"@type":54},"ViewAction",5,{"@type":57,"mainEntity":58},"FAQPage",[59,65,69],{"name":60,"@type":61,"acceptedAnswer":62},"How can a solutions architect prevent high-cost instance launches across multiple AWS accounts while keeping account control?","Question",{"text":63,"@type":64},"Use AWS Organizations with a service control policy (SCP) in the management account to block launching high-cost EC2 instance types in each member account.","Answer",{"name":66,"@type":61,"acceptedAnswer":67},"What is the recommended approach to provide third-party monitoring read-only access across all accounts in an AWS Organizations environment?",{"text":68,"@type":64},"Create an IAM role in the organization’s management account that the third-party monitoring account can assume, granting the required read-only permissions through role assumption.",{"name":70,"@type":61,"acceptedAnswer":71},"Why would an HTML form hosted in a public S3 bucket fail to post to an API Gateway endpoint, and what must be configured?",{"text":72,"@type":64},"Cross-origin requests require CORS to be enabled. Configure CORS in API Gateway (and ensure the client’s requests meet the CORS requirements) so the browser accepts the responses.","https://schema.org",{"og:url":32,"og:type":75,"og:title":10,"og:site_name":45,"og:description":12},"article",{"robots":77,"canonical":32},"index,follow",{"doc_id":79,"site_id":7},317401,1791358680,{"code":4,"msg":82,"data":83},"success",[84,88,92,95,99,104,109,114,119,122,126],{"id":22,"doc_module":4,"doc_module_name":25,"category_name":85,"show_sort_weight":86,"slug":87},"Story & Novel",90,"story-novel",{"id":26,"doc_module":4,"doc_module_name":25,"category_name":89,"show_sort_weight":90,"slug":91},"Literature",80,"literature",{"id":33,"doc_module":4,"doc_module_name":25,"category_name":29,"show_sort_weight":93,"slug":94},70,"exam",{"id":55,"doc_module":4,"doc_module_name":25,"category_name":96,"show_sort_weight":97,"slug":98},"Comic",60,"comic",{"id":100,"doc_module":4,"doc_module_name":25,"category_name":101,"show_sort_weight":102,"slug":103},6,"Technology",50,"technology",{"id":105,"doc_module":4,"doc_module_name":25,"category_name":106,"show_sort_weight":107,"slug":108},7,"Healthcare",40,"healthcare",{"id":110,"doc_module":4,"doc_module_name":25,"category_name":111,"show_sort_weight":112,"slug":113},8,"Research & Report",30,"research-report",{"id":115,"doc_module":4,"doc_module_name":25,"category_name":116,"show_sort_weight":117,"slug":118},9,"Religion & Spirituality",20,"religion-spirituality",{"id":117,"doc_module":4,"doc_module_name":25,"category_name":120,"show_sort_weight":117,"slug":121},"World Cup","world-cup",{"id":123,"doc_module":4,"doc_module_name":25,"category_name":124,"show_sort_weight":123,"slug":125},10,"Lifestyle","lifestyle",{"id":127,"doc_module":4,"doc_module_name":25,"category_name":128,"show_sort_weight":55,"slug":129},19,"General","general",{"code":4,"msg":82,"data":131},{"doc_id":79,"user_id":132,"nickname":42,"user_avatar":133,"doc_module":4,"category_id":33,"category_name":29,"doc_title":10,"doc_description":12,"doc_content":134,"file_id":135,"file_url":136,"file_type":137,"file_size":138,"view_count":55,"is_deleted":4,"is_public":22,"is_downloadable":22,"audit_status":22,"page_count":105,"language":139,"language_code":8,"site_id":7,"html_lang":8,"table_of_contents":140,"faqs":141,"seo_title":142,"seo_description":12,"update_tm":143,"read_time":144,"preview_page_count":4},5909887256941,"https://ap-avatar.wpscdn.com/davatar_9964176cb1d06d4a9deccf72a44ae3dc","1) A company has many AWS accounts that individual business groups own. One of the accounts was recently compromised. The attacker launched a large number of instances, resulting in a high bill for that account.  \nThe company addressed the security breach, but a solutions architect needs to develop a solution to prevent excessive spending in all accounts. Each business group wants to retain full control of its AWS account.  \nWhich solution should the solutions architect recommend to meet these requirements?  \nA) Use AWS Organizations. Add each AWS account to the management account. Create an SCP that uses the ec2:instanceType condition key to prevent the launch of high-cost instance types in each account.  \nB) Attach a new customer-managed IAM policy to an IAM group in each account. Configure the policy to use the ec2:instanceType condition key to prevent the launch of high-cost instance types. Place all the existing IAM users in each group.  \nC) Turn on billing alerts for each AWS account. Create Amazon CloudWatch alarms that send an Amazon Simple Notification Service (Amazon SNS) notification to the account administrator whenever the account exceeds a designated spending threshold.  \nD) Turn on AWS Cost Explorer in each account. Review the Cost Explorer reports for each account on a regular basis to ensure that spending does not exceed the desired amount.  \n2) A company has multiple AWS accounts in an organization in AWS Organizations. The company has integrated its on-premises Active Directory with AWS Single Sign-On (AWS SSO) to grant Active Directory users least privilege permissions to manage infrastructure across all the accounts.  \nA solutions architect must integrate a third-party monitoring solution that requires read-only access across all AWS accounts. The monitoring solution will run in its own AWS account.  \nWhat should the solutions architect do to provide the monitoring solution with the required permissions?  \nA) Create a user in an AWS SSO directory. Assign a read-only permissions set to the user. Assign all AWS accounts that need monitoring to the user. Provide the third-party monitoring solution with the user name and password.  \nB) Create an IAM role in the organization's management account. Allow the AWS account of the third-party monitoring solution to assume the role.  \nC) Invite the AWS account of the third-party monitoring solution to join the organization. Enable all features.  \nD) Create an AWS CloudFormation template that defines a new IAM role for the third-party monitoring solution. Specify the AWS account of the third-party monitoring solution in the trust policy. Create the IAM role across all linked AWS accounts by using a stack set.  \n3) A team is building an HTML form that is hosted in a public Amazon S3 bucket. The form uses JavaScript to post data to an Amazon API Gateway API endpoint. The API endpoint is integrated with AWS Lambda functions. The team has tested each method in the API Gateway console and has received valid responses.  \nWhich combination of steps must the team complete so that the form can successfully post to the API endpoint and receive a valid response? (Select TWO.)  \nA) Configure the S3 bucket to allow cross-origin resource sharing (CORS) .  \nB) Host the form on Amazon EC2 rather than on Amazon S3 .  \nC) Request a quota increase for API Gateway.  \nD) Enable cross-origin resource sharing (CORS) in API Gateway.  \nE) Configure the S3 bucket for web hosting.  \n4) A company runs a serverless mobile app that uses Amazon API Gateway, AWS Lambda functions, Amazon Cognito, and Amazon DynamoDB. During large surges in traffic, users report intermittent system failures. The API Gateway API endpoint is returning [HTTP status](HTTP status) code 502 (Bad Gateway) errors to valid requests.  \nWhich solution will resolve this issue?  \nA) Increase the concurrency quota for the Lambda functions. Configure Amazon CloudWatch to send notification alerts when the ConcurrentExecutions metric a","cbCailOcw7WXounU","https://ap.wps.com/l/cbCailOcw7WXounU","pdf",214536,"English","# Question 1: Preventing excessive spending across AWS accounts\n# Question 2: Granting read-only access for third-party monitoring\n# Question 3: Posting data from an HTML form to API Gateway (CORS)\n# Question 4: Resolving API Gateway 502 Bad Gateway errors\n# Question 5: Securing an ECS cluster to allow only HTTPS inbound traffic\n# Question 6: Separation of production/development access with single credentials","[{\"question\":\"How can a solutions architect prevent high-cost instance launches across multiple AWS accounts while keeping account control?\",\"answer\":\"Use AWS Organizations with a service control policy (SCP) in the management account to block launching high-cost EC2 instance types in each member account.\"},{\"question\":\"What is the recommended approach to provide third-party monitoring read-only access across all accounts in an AWS Organizations environment?\",\"answer\":\"Create an IAM role in the organization’s management account that the third-party monitoring account can assume, granting the required read-only permissions through role assumption.\"},{\"question\":\"Why would an HTML form hosted in a public S3 bucket fail to post to an API Gateway endpoint, and what must be configured?\",\"answer\":\"Cross-origin requests require CORS to be enabled. Configure CORS in API Gateway (and ensure the client’s requests meet the CORS requirements) so the browser accepts the responses.\"}]","AWS Certified Solutions Architect Professional Sample Questions | PDF",1789932613,18]