aws solutions architect associate practice exam Practice Exam 2025: Latest Questions

A company hosts a static marketing website in Amazon S3. The company wants to serve the site globally with low latency and ensure the S3 bucket cannot be accessed directly from the internet. Which solution meets these requirements?

A solutions architect needs to ensure that all data stored in an Amazon S3 bucket is encrypted at rest with minimal operational overhead. Which approach should the architect choose?

A web application runs on a single Amazon EC2 instance in a public subnet. The company needs to improve availability without changing the application code. Which solution provides the best improvement in availability?

An application stores frequently accessed key-value data and requires single-digit millisecond latency. The data must be durable and highly available. Which AWS service is MOST appropriate?

A company needs to allow an AWS Lambda function in Account A to read objects from an Amazon S3 bucket in Account B. The company must follow least-privilege access. Which solution should a solutions architect recommend?

A company runs an internal API on Amazon EC2 instances in private subnets behind an internal Application Load Balancer (ALB). Only specific on-premises networks should access the API over AWS Direct Connect. What should a solutions architect do to meet these requirements?

An application processes images uploaded by users. Upload events can arrive in large bursts, and processing takes several seconds per image. The company needs to decouple uploads from processing and automatically scale workers. Which architecture is MOST appropriate?

A company is migrating a read-heavy relational database to AWS. The application experiences many read queries and relatively few writes. The company wants to improve read scalability while keeping the database managed. Which solution should a solutions architect recommend?

A company has a workload with steady baseline usage and occasional large spikes in demand. The workload runs on Amazon EC2 and must minimize cost over time while maintaining performance during spikes. Which purchasing strategy should a solutions architect recommend?

A financial services company runs a multi-tier application on Amazon EC2 across multiple Availability Zones. The application stores session state on the local instance disk, and users are frequently logged out during scale-in events or instance failures. The company wants to improve availability and user experience with minimal application changes. Which solution should a solutions architect recommend?

A company wants to allow an EC2 instance in a private subnet to access Amazon S3 without using an internet gateway, NAT device, or public IP addresses. Which solution meets this requirement?

A company runs a web application on multiple EC2 instances behind an Application Load Balancer (ALB). The instances are in an Auto Scaling group. The application must support HTTPS and the company wants AWS to manage the TLS certificates. What should the solutions architect do?

A solutions architect needs to ensure that an Amazon S3 bucket is not publicly accessible, even if a bucket policy or ACL is accidentally misconfigured. Which feature should be used?

A company has an application running on Amazon ECS with tasks on AWS Fargate. The tasks must retrieve database credentials securely without storing secrets in environment variables or container images. What is the MOST secure and operationally efficient solution?

A company has a two-tier application: an internet-facing ALB and EC2 instances in private subnets. Users report intermittent 504 (Gateway Timeout) errors during traffic spikes. The target group health checks are passing. Which change is MOST likely to reduce these errors?

A company needs a highly available relational database that can automatically fail over to a standby instance in a different Availability Zone with minimal administrative effort. Which solution should a solutions architect recommend?

A company uses Amazon SQS to decouple a producer and a consumer. The company must ensure that messages are processed in the exact order they are sent, and that each message is processed exactly once. Which solution meets these requirements?

A company is running a stateful application on EC2 that writes user-generated files to an attached EBS volume. The application is in an Auto Scaling group across multiple Availability Zones. During scaling events and instance replacements, users sometimes lose recently uploaded files. What should the solutions architect do to prevent data loss with the LEAST architectural change?

A company needs to provide temporary, limited access for an external auditor to review objects in a specific S3 bucket prefix. The auditor must not be able to list other prefixes in the bucket or access any other AWS resources. The company also wants the access to expire automatically. What is the BEST solution?

A company runs a global application that stores data in an Amazon S3 bucket. The company must ensure that data remains available even if an entire AWS Region is unavailable. The recovery time objective (RTO) is low and the solution should minimize operational complexity. Which solution meets these requirements?

A company hosts a static website on Amazon S3. Users must authenticate with the company’s identity provider before accessing any content. The company also wants to cache content globally and prevent direct access to the S3 bucket. Which solution meets these requirements with the LEAST operational overhead?

An application runs on Amazon EC2 instances in an Auto Scaling group across two Availability Zones behind an Application Load Balancer. Users report intermittent 5xx errors during deployments when instances are being replaced. Which action will MOST improve availability during these deployments?

A workload stores millions of small image files in an Amazon S3 bucket. A web application frequently lists objects by prefix to build galleries. The listing performance has degraded as the number of objects grew. What is the BEST way to improve performance with minimal code changes?

A company uses AWS Organizations and wants to ensure that developers cannot disable encryption or make an Amazon S3 bucket public in any account. The company wants a preventive control that applies across accounts. Which solution should the solutions architect recommend?

A company runs a batch processing job nightly on EC2 instances. The job can be interrupted and resumed without data loss. The company wants to minimize compute cost while meeting the schedule. Which purchasing option is MOST appropriate?