Home Certifications Editorials

Exam overview and study plan

Solutions Architect Associate Practice Questions

Certified Solutions Architect Associate

Read questions, check verified answers and discuss the reasoning. Use reading options to shape your revision, or switch to the simulator for timed practice.

View 221 free questions

221 questions in this view

Page 1 of 37

Question 1

A company is developing a highly sensitive application on AWS. The application uses SSH to access Amazon EC2 instances.

A security team needs to centrally manage all user access to the application. User management must be fully automated. The team needs to eliminate manual distribution of SSH keys.

Which solution will meet these requirements?

Use EC2 Instance Connect. Do not require SSH keys.
Use AWS Systems Manager Session Manager to manage instance access and to disable SSH on the instances.
Use security groups to allow access only from specific IP addresses. Use AWS KMS to manage SSH keys.
Use an EC2 key pair to provide SSH access. Distribute the private key securely to all users.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

A company runs an application on Amazon EC2 instances in an Auto Scaling group behind a Network Load Balancer (NLB). The application returns HTTP 503 errors when internal service dependencies fail. The application maintains TCP connections to the NLB during these failures. The company terminates affected EC2 instances daily. The company needs to automatically detect application failures and instance replacement without building custom monitoring solutions.

Which solution will meet these requirements?

Configure HTTP health checks on the NLB that target the application endpoint URL.
Create an AWS Lambda function that queries application logs every minute. Configure the Lambda function to terminate EC2 instances that return HTTP errors.
Replace the NLB with an Application Load Balancer (ALB). Configure HTTP health checks that target the application endpoint URL. Configure the Auto Scaling group to use ELB health checks to replace unhealthy instances.
Create an Amazon CloudWatch alarm that monitors the UnHealthyHostCount metric for the NLB target group. Configure an Auto Scaling policy to terminate instances when the alarm triggers.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

A company runs its critical storage application in the AWS Cloud. The application uses Amazon S3 in two AWS Regions. The company wants the application to send remote user data to the nearest S3 bucket with no public network congestion. The company also wants the application to fail over with the least amount of management of Amazon S3.

Which solution will meet these requirements?

Implement an active-active design between the two Regions. Configure the application to use the regional S3 endpoints closest to the user.
Use an active-passive configuration with S3 Multi-Region Access Points. Create a global endpoint for each of the Regions.
Send user data to the regional S3 endpoints closest to the user. Configure an S3 cross-account replication rule to keep the S3 buckets synchronized.
Set up Amazon S3 to use Multi-Region Access Points in an active-active configuration with a single global endpoint. Configure S3 Cross-Region Replication.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

A company provides a three-tier web application to its customers. Each customer has an AWS account in which the application is deployed, and these accounts are members of the company's organization in AWS Organizations.

To protect its customers' AWS accounts and applications, the company wants to monitor them for unusual and unexpected behavior. The company needs to analyze and monitor customer VPC Flow Logs, AWS CloudTrail logs, and DNS logs.

What should a solutions architect do to meet these requirements?

Designate an account in the organization as the AWS Shield administrator account. Enable Shield and Shield logs in every account, and invite the accounts to join the Shield administrator account. Analyze Shield findings in the Shield administrator account.
Designate an account in the organization as the Amazon GuardDuty administrator account. Enable GuardDuty in every account, and invite the accounts to join the GuardDuty administrator account. Analyze GuardDuty findings in the GuardDuty administrator account.
Designate an account in the organization as the AWS WAF administrator account. Enable AWS WAF and AWS WAF logs in every account, and invite the accounts to join the AWS WAF administrator account. Analyze AWS WAF logs in the AWS WAF administrator account.
Designate an account in the organization as the AWS Resource Access Manager (AWS RAM) administrator account. Enable AWS RAM in every account, and invite the accounts to join the AWS RAM administrator account. Analyze AWS RAM logs in the AWS RAM administrator account.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

A global ecommerce company uses a monolithic architecture. The company needs a solution to manage the increasing volume of product data. The solution must be scalable and have a modular service architecture. The company needs to maintain its structured database schemas. The company also needs a storage solution to store product data and product images.

Which solution will meet these requirements with the LEAST operational overhead?

Use an Amazon EC2 instance in an Auto Scaling group to deploy a containerized application. Use an Application Load Balancer to distribute web traffic. Use an Amazon RDS DB instance to store product data and product images.
Use AWS Lambda functions to manage the existing monolithic application. Use Amazon DynamoDB to store product data and product images. Use Amazon SNS for event-driven communication between the Lambda functions.
Use Amazon EKS with an Amazon EC2 deployment to deploy a containerized application. Use an Amazon Aurora cluster to store the product data. Use AWS Step Functions to manage workflows. Store the product images in Amazon S3 Glacier Deep Archive.
Use Amazon ECS with AWS Fargate to deploy a containerized application. Use Amazon RDS with a Multi-AZ deployment to store the product data. Store the product images in an Amazon S3 bucket.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

A company is migrating an application to the AWS Cloud. The application runs in an on-premises data center and writes thousands of images into a mounted NFS file system each night. After the company migrates the application, the company will host the application on an Amazon EC2 instance with a mounted Amazon EFS file system.

The company has established an AWS Direct Connect connection to AWS. Before the migration cutover, a solutions architect must build a process that will replicate the newly created on-premises images to the EFS file system.

What is the MOST operationally efficient way to replicate the images?

Configure a periodic process to run the aws s3 sync command from the on-premises file system to Amazon S3. Configure an AWS Lambda function to process event notifications from Amazon S3 and copy the images from Amazon S3 to the EFS file system.
Deploy an AWS Storage Gateway file gateway with an NFS mount point. Mount the file gateway file system on the on-premises server. Configure a process to periodically copy the images to the mount point.
Deploy an AWS DataSync agent to an on-premises server that has access to the NFS file system. Send data over the Direct Connect connection to an S3 bucket by using a public VIF. Configure an AWS Lambda function to process event notifications from Amazon S3 and copy the images from Amazon S3 to the EFS file system.
Deploy an AWS DataSync agent to an on-premises server that has access to the NFS file system. Send data over the Direct Connect connection to an AWS PrivateLink interface VPC endpoint for Amazon EFS by using a private VIF. Configure a DataSync scheduled task to send the images to the EFS file system every 24 hours.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Page 1 of 37

Build confidence for exam day with expert-reviewed questions and realistic practice. Your next certification starts here.

Company

About Contact Our Authors FAQ

Trust and policies

Methodology Editorial policy Terms and conditions Privacy policy

Contact

ExamPrepare LLC5203 Juan Tabo Blvd STE 2BAlbuquerque, NM 87111[email protected]

© 2026 ExamPrepare LLC. All rights reserved. All certification names, exam codes and logos are the property of their respective owners. All associated trademark and copyright rights belong to those owners. ExamPrepare is not affiliated with, endorsed by, or sponsored by any certification vendor.