Exam Questions RP

Question 1

What vault lock mode would you use if you do not want the files to be altered for the duration of the retention period?

Answer 1

Compliance mode

Question 2

What can you use to securely transfer data between Salesforce and Amazon S3?

Answer 2

Amazon AppFlow

Question 3

If you want a low cost option for quick workloads, what would you use?

Answer 3

AWS Lambda

Question 4

What storage class would you use if you can’t predict the access pattern?

Answer 4

Intelligent-Tiering

Question 5

A company wants an application that runs on containers in a VPC that stores and accesses data from a S3 bucket. They want to prevent traffic from traversing the Internet when possible, what is the most cost efficient way to achieve this?

Answer 5

• Create a gateway VPC endpoint for S3
• Associate the endpoint with all route tables in the VPC

Question 6

What needs to be in place in buckets for object lock to work?

Answer 6

Versioning enabled

Question 7

A company needs to have hundreds of files that must be publicly readable, and prevent modifications/deleting by anyone before a designated future date.

Answer 7

S3 versioning and object lock

Question 8

What do you need if you want no application traffic between two services to traverse the public Internet?

Answer 8

VPC endpoint

Question 9

What type of retrieval would you use for a video archive in Amazon S3 Glacier that must be available within five minutes?

Answer 9

Expedited retrieval

Question 10

Where would you store video archive data that would be rarely accessed, and with low costs?

Answer 10

Amazon S3 Glacier

Question 11

is ECS or EKS cheaper?

Answer 11

ECS

Question 12

What solution would you use for continuous backups?

Answer 12

DynamoDB

Question 13

What data security service would you use for PII or sensitive data?

Answer 13

Macie

Question 14

What solution would you use to run a Java-based job on an EC2 instance that runs every hour for 10 seconds with 1 GB of memory, cost-effectively?

Answer 14

• AWS Lambda function
• Schedule run with EventBridge

Question 15

What is the most operationally efficient way for a new architect to build and map the relationship details of the workloads across all accounts?

Answer 15

Use Workload Discovery to generate architecture diagrams

Question 16

How would you set up budgets will billing allerts?

Answer 16

• Create IAM Role for AWS Budgets
• Create AWS Budget
• Set budget amount under the Billing dashboard
• Add a budget action that selects the IAM identity created with the right SCP
• Add an alert

Question 17

A company wants to make an existing application highly available and resilient that avoids any single point of failure, what is the bst solution?

Answer 17

• Deploy the application servers using EC2 instances in an auto scaling group across multiple AZs
• Use an Amazon RDS DB instance in a multi-AZ configuration

Question 18

How long does Amazon Kinesis Data Streams store records by default?

Answer 18

24 hours

Question 19

How should a solutions architect grant a developer permissions to upload files from an application that uses AWS Lambda to Amazon S3? The developer already has an IAM user with valid IAM credentials required for Amazon S3.

Answer 19

• Create an IAM execution role with the required permission
• Attach the IAM role to the Lambda function