Question 1

A large e-commerce company has a complex multi-account AWS environment managed with AWS Organizations. The company's Amazon S3 costs are escalating, but it lacks centralized visibility into storage usage, activity trends, and cost-efficiency opportunities across all member accounts. The central cloud governance team needs a solution to proactively identify cost-saving opportunities, such as identifying incomplete multipart uploads or buckets without lifecycle policies, across the entire organization.

Accepted Answer

Enable S3 Server Access Logging for all buckets in all accounts, and consolidate logs into a central account's S3 bucket. Use Amazon Athena to query the logs for usage patterns and cost anomalies., Deploy AWS Trusted Advisor in each member account and configure weekly email reports. Manually aggregate the findings from each account's report to identify S3-related cost optimizations., In each member account, create an AWS Lambda function that uses the S3 API to list buckets and their configurations. Send this data to a central Amazon DynamoDB table and build a custom dashboard., Configure an Amazon S3 Storage Lens dashboard at the organization level from the management account. Use the dashboard's recommendations to identify cost-saving opportunities and usage trends.

Question 2

A financial services organization is enforcing a strict data protection policy across its multi-account AWS environment, which is managed by AWS Organizations. A central security team must ensure that all new Amazon S3 objects are encrypted at rest using an AWS KMS key that the security team manages in a central security account. Application teams in member accounts must be able to upload objects, but they must be prevented from uploading unencrypted objects or using any KMS key other than the centrally managed one. Which combination of policies will enforce this requirement most effectively?

Accepted Answer

In each member account, deploy an AWS Config rule that checks for unencrypted S3 objects and triggers an AWS Lambda function to encrypt them using the central KMS key. In the central security account, create a CMK with a key policy that allows the Lambda execution roles to use the key., In each member account, apply an S3 bucket policy that denies `s3:PutObject` unless the `s3:x-amz-server-side-encryption` header is set to `aws:kms`. In the central security account, create a CMK and attach a key policy that grants `kms:*` permissions to the root user of each member account., In the management account of the organization, attach a Service Control Policy (SCP) that denies the `s3:PutObject` action if the request does not include the `s3:x-amz-server-side-encryption-aws-kms-key-id` condition key with the ARN of the central KMS key. In the central security account, create a CMK with a key policy granting usage permissions to the application roles in the member accounts., In the central security account, create a customer-managed key (CMK) and attach a key policy that allows the `kms:GenerateDataKey` and `kms:Decrypt` actions from IAM roles in the member accounts. In each member account, attach an IAM policy to the application roles that denies `s3:PutObject` if the `s3:x-amz-server-side-encryption` header is not present.

Question 3

A complex on-premises VMware environment must be migrated to AWS. The project requires two distinct capabilities: first, a detailed assessment to discover server dependencies and performance for wave planning; second, an execution tool that can migrate stateful servers with a minimal cutover window to satisfy a strict RTO. Which pair of AWS services fulfills these assessment and execution requirements? (Select TWO)

Accepted Answer

Use AWS Migration Hub to track the progress of the migration waves., Use AWS Database Migration Service (DMS) to replicate application data volumes to Amazon EBS., Use AWS Server Migration Service (SMS) to automate the creation of AMIs from the on-premises VMs., Use AWS Application Discovery Service with agent-based collection for the assessment phase., Use AWS Application Migration Service (MGN) for the migration execution phase.

Question 4

A large media company is planning to migrate its on-premises video transcoding platform to AWS. Before committing to the migration, the Chief Financial Officer (CFO) requires a detailed, multi-year cost projection for the proposed architecture, which includes Amazon EC2 instances with specific vCPU and memory configurations, Amazon S3 for storage, and significant data transfer out to the internet. The projection must account for different purchasing options, such as Savings Plans and Reserved Instances, to compare potential savings. Which AWS tool should a solutions architect use to create this detailed estimate for the new solution?

Accepted Answer

AWS Budgets, AWS Pricing Calculator, AWS Trusted Advisor, AWS Cost Explorer

Question 5

A global media company is designing a disaster recovery strategy for its stateful TCP-based application hosted in us-east-1 and us-west-2. The application runs on a fleet of EC2 instances behind a Network Load Balancer (NLB) in each Region. The company requires the ability to fail over traffic between Regions with minimal impact on user connections and without requiring users to change DNS settings. The recovery time objective (RTO) is less than 1 minute. Which solution should a solutions architect recommend to meet these requirements?

Accepted Answer

Deploy AWS Global Accelerator with endpoints pointing to the NLBs in each Region. Configure health checks and set traffic dials to control failover., Use an Application Load Balancer in front of the NLBs in each Region. Configure a Route 53 latency-based routing policy to direct traffic to the closest healthy Region., Configure Amazon CloudFront with custom origins pointing to the NLBs in each Region. Use CloudFront origin failover to handle disaster recovery., Configure an Amazon Route 53 failover routing policy with health checks targeting the NLBs in each Region. Set a low TTL on the DNS record.

Question 6

To address severe performance degradation in a package tracking API that experiences unpredictable, massive traffic surges, an engineering team must implement a solution that automatically adjusts compute capacity. The primary goals are to maintain high availability during peak loads and minimize infrastructure costs during quiet periods. Which scaling strategy most effectively meets these requirements?

Accepted Answer

Implementing a target tracking auto scaling policy based on average CPU utilization., Deploying a global load balancer to distribute traffic across multiple geographic regions., Vertically scaling the existing servers by upgrading their CPU and memory resources., Implementing a scheduled scaling policy to add capacity based on historical peak traffic data.

Question 7

A global healthcare provider is required by regulation to retain patient medical records for a minimum of 10 years. These records are stored as objects in Amazon S3. For the first year, the records must be immediately accessible. For the subsequent 9 years, retrieval times of up to 12 hours are acceptable. After the 10-year period, the records must be permanently deleted. The company needs to implement a cost-effective strategy to automate this data lifecycle.

Accepted Answer

Configure an S3 Lifecycle policy to transition objects from S3 Standard to S3 Glacier Deep Archive after 365 days. After 10 years, configure the policy to expire the objects., Configure an S3 Lifecycle policy to transition objects from S3 Standard to S3 Glacier Instant Retrieval after 365 days. After 10 years, configure the policy to expire the objects., Configure an S3 Lifecycle policy to transition objects from S3 Standard to S3 Glacier Flexible Retrieval after 365 days. After 10 years, configure the policy to expire the objects., Configure an S3 Lifecycle policy to transition objects from S3 Standard to S3 Standard-IA after 90 days, and then to S3 Glacier Flexible Retrieval after 365 days. After 10 years, configure the policy to expire the objects.

Question 8

A manufacturing company runs a critical Enterprise Resource Planning (ERP) system on a cluster of physical servers in its on-premises data center. This system is vital for production line operations and is connected to the `us-east-1` Region via a 10 Gbps AWS Direct Connect connection. Management has mandated a disaster recovery plan with a Recovery Point Objective (RPO) of less than 1 minute and a Recovery Time Objective (RTO) of less than 30 minutes. The DR solution must not require significant re-architecture of the ERP application and should minimize costs in the DR region during normal operations. Which DR strategy should a solutions architect recommend to meet these requirements?

Accepted Answer

Establish a warm standby environment in AWS with EC2 instances running a scaled-down version of the ERP application. Use AWS DataSync to periodically synchronize application data from the on-premises servers to an Amazon EFS file system in AWS., Install AWS Backup Gateway on-premises and configure backup jobs for the physical servers. Store the backups in the DR AWS Region. In a disaster, perform a full restore of the servers from the most recent backup., Use AWS Application Migration Service (MGN) to perform a continuous data replication of the on-premises servers to AWS. During a disaster, cut over to the migrated instances in AWS., Implement AWS Elastic Disaster Recovery (DRS). Install the DRS agent on the on-premises servers to continuously replicate data to a low-cost staging area in the DR region. In a disaster, launch recovery instances in the target VPC from a recent recovery point.

Question 9

For a financial services firm with a complex application portfolio and stringent compliance requirements, a solutions architect is leading a migration readiness assessment. To create an effective wave plan that minimizes risk and business disruption, the architect must identify the most critical data points to inform the grouping and sequencing of applications. Which factors are most crucial to consider when defining migration waves for this portfolio? (Select TWO)

Accepted Answer

Inter-application dependencies and associated data gravity., The specific programming languages and frameworks used for each application., The physical location and rack placement of the on-premises servers within the data center., The age of each application's source code and last major update., Business criticality of the application and the designated migration strategy (e.g., rehost, replatform, refactor).

Question 10

A critical inventory system requires a Recovery Point Objective (RPO) of 15 minutes and a Recovery Time Objective (RTO) of one hour. The current disaster recovery plan involves nightly data backups and a manual recovery process that takes six hours. What is the most significant flaw in the existing DR plan based on these facts?

Accepted Answer

The six-hour manual recovery process fails to meet the Recovery Point Objective (RPO)., The current recovery process meets the Recovery Point Objective (RPO) but not the Recovery Time Objective (RTO)., The backup frequency is insufficient to meet the Recovery Point Objective (RPO) of 15 minutes., The Recovery Time Objective (RTO) of one hour is not being met because of the 15-minute data loss tolerance.

Question 11

A large enterprise with a complex on-premises environment, comprising thousands of VMware virtual machines and physical servers, is planning a multi-year migration to AWS. The migration program involves multiple teams working in parallel across different business units, each managing their own AWS accounts within AWS Organizations. The program management office requires a centralized, cross-account dashboard to visualize the real-time status of all application migrations, track progress against business goals, and consolidate discovery data from various sources. The solution must integrate seamlessly with native AWS migration tools.

Accepted Answer

Implement AWS Control Tower to govern the multi-account environment. Use AWS Service Catalog to define and deploy standardized migration patterns, and track deployments through the Service Catalog console., Use AWS Config with an aggregator in a central account to collect resource configuration data from all on-premises and AWS environments. Develop custom AWS Config rules to assess the migration status of each application based on resource tags., Use AWS Systems Manager Explorer to aggregate operational data from all on-premises servers and AWS accounts. Create custom OpsData reports to track the state of EC2 instances tagged for migration., Deploy AWS Application Discovery Service collectors on-premises. Configure AWS Migration Hub in a designated home Region and enable it as a delegated administrator for the organization. Use Migration Hub to group servers into applications and track their migration status across all member accounts.

Question 12

Within a large AWS Organization, a central security team needs to find IAM roles with trust policies that grant external access. The required solution must operate continuously from a delegated security account, produce actionable findings, and avoid custom log analysis. Which method is most effective?

Accepted Answer

Enable AWS CloudTrail in all accounts with an organization trail writing to a central Amazon S3 bucket. Create an Amazon Athena table over the CloudTrail data and run scheduled queries to identify AssumeRole events from external principals., Deploy an AWS Config conformance pack across all accounts to track changes to IAM role trust policies. Configure an AWS Lambda function to trigger on policy changes, parse the policy document, and send a notification if an external principal is detected., Enable AWS IAM Access Analyzer at the organization level, delegating administration to the security account. Create an organization-level analyzer to monitor all member accounts and review the generated findings for external access., Enable AWS Security Hub in all accounts, delegating administration to the security account. Rely on the AWS Foundational Security Best Practices standard to generate findings for overly permissive IAM policies.

Question 13

A multinational logistics corporation is initiating a large-scale migration of its on-premises data centers to AWS. The environment consists of several thousand servers, including a mix of physical hardware, VMware vSphere virtual machines, and Microsoft Hyper-V virtual machines. The migration team needs to perform a comprehensive discovery of all IT assets, map intricate application dependencies, and generate a detailed Total Cost of Ownership (TCO) analysis to build a business case. The solution must be highly automated to minimize manual effort and provide a centralized dashboard for tracking the discovery and planning process.

Accepted Answer

Use AWS Systems Manager Inventory to collect metadata from all on-premises servers. Manually document application dependencies in a shared spreadsheet. Use this information to provision right-sized Amazon EC2 instances with AWS CloudFormation and calculate costs using AWS Cost Explorer after the migration., Install the Migration Evaluator agentless collector to scan the vSphere environment. For physical and Hyper-V servers, manually gather configuration details and upload them to Migration Evaluator. Use the resulting TCO report to plan the migration waves in AWS Migration Hub., Deploy the AWS Application Discovery Service agent on all servers to collect system performance and process data. Use the agentless collector for VMware environments. Import the collected data into AWS Migration Hub to visualize servers and application dependencies. Then, export the data and use the AWS Pricing Calculator to manually build a TCO report., Deploy the AWS Application Discovery Service agent and agentless collector to gather comprehensive data from the on-premises environment. Feed this data into AWS Migration Hub for a unified view of the portfolio and dependency mapping. Use the integrated Migration Evaluator service to perform a data-driven TCO analysis and build a business case for the migration.

Question 14

During a routine security audit of an existing three-tier web application running on Amazon EC2, it was determined that the IAM instance profile role attached to all instances has overly permissive policies, including wildcard actions for Amazon EC2 and Amazon RDS. The security team must replace this role with one that adheres to the principle of least privilege without causing application downtime. The application's access patterns are complex and not fully documented.

Accepted Answer

Replace the overly permissive policies on the existing role with the AWS managed policies `AmazonEC2ReadOnlyAccess` and `AmazonRDSReadOnlyAccess`. Monitor Amazon CloudWatch metrics for access denied errors and incrementally add write permissions as needed., Enable AWS CloudTrail management events. Use IAM Access Analyzer to generate a policy based on the access activity recorded in CloudTrail over a representative period. Create a new IAM role with this generated policy and replace the existing instance profile., Create a new IAM role with no permissions. Attach an inline policy that denies all actions by default. Manually review application source code to determine the required permissions and add them to the new policy. Replace the existing instance profile with the new one., Apply a Service Control Policy (SCP) to the organizational unit (OU) containing the application's AWS account. The SCP should explicitly deny all EC2 and RDS actions not documented as necessary. This will restrict the effective permissions of the existing IAM role.

Question 15

An online retail company's primary application has a service level agreement (SLA) requiring 99th percentile (p99) API latency for its product catalog to be under 150 milliseconds. During peak traffic, metrics from Amazon CloudWatch show that p99 latency is exceeding 500 ms, directly impacting user experience and sales. The architecture consists of an Application Load Balancer, an Amazon EC2 Auto Scaling group for the application tier, and a Multi-AZ Amazon RDS for MySQL database. Analysis reveals that the database is experiencing high read IOPS, with 95% of queries being repetitive read operations for popular products. Which strategy should be implemented to meet the latency SLA most effectively?

Accepted Answer

Implement an Amazon ElastiCache for Redis cluster in front of the RDS database and modify the application to cache product catalog data., Migrate the database to an Amazon Aurora cluster and add multiple Aurora Replicas to distribute the read load., Configure Amazon RDS Proxy between the application tier and the database to improve connection pooling and efficiency., Increase the instance size of the Amazon RDS for MySQL database to a larger, memory-optimized instance class.

Question 16

A company has deployed a complex microservices architecture on Amazon EKS, where dozens of services communicate to fulfill a single user request. The development team is struggling to identify the root cause of latency issues, as a delay in any single service can impact the overall request time. They require a solution that provides an end-to-end view of requests as they travel through the entire application, highlighting performance bottlenecks in downstream services. Which approach will meet these requirements most effectively?

Accepted Answer

Instrument the application code in each microservice with the AWS X-Ray SDK. Use the X-Ray service map to visualize the request flow and analyze traces to identify services with high latency., Deploy the CloudWatch agent as a DaemonSet in the EKS cluster to collect detailed logs and metrics from each pod. Create CloudWatch alarms based on pod-level CPU utilization thresholds., Configure Amazon Managed Service for Prometheus to scrape metrics from all EKS pods. Use Amazon Managed Grafana to build dashboards that correlate CPU and memory utilization across services., Enable VPC Flow Logs for the EKS cluster's VPC and stream them to Amazon CloudWatch Logs. Use CloudWatch Logs Insights to query for traffic patterns and latency between service IP addresses.

Question 17

An HPC workload on Amazon EC2 is bottlenecked by high inter-node network latency. The goal is to re-architect the cluster for the lowest possible latency for its tightly coupled processes. Additionally, a cost-reduction strategy is needed for fault-tolerant simulation jobs. Which combination of features and instance purchasing options would best achieve both performance and cost-optimization goals?

Accepted Answer

Increase the instance size of the C5n instances and use a Compute Savings Plan to reduce the overall compute expenditure., Migrate the EC2 instances to a spread placement group across multiple Availability Zones to improve fault tolerance and use Reserved Instances to lower costs., Deploy the EC2 instances into a cluster placement group within a single Availability Zone, enable Elastic Fabric Adapter (EFA), and use Spot Instances for cost-sensitive workloads., Re-launch the EC2 instances into a partition placement group within a single Availability Zone and enable Elastic Fabric Adapter (EFA) on the instances.

Question 18

To satisfy a near-zero Recovery Point Objective (RPO) requirement for a highly transactional on-premises database supporting a critical manufacturing pipeline, which data protection strategy should be implemented?

Accepted Answer

Schedule hourly volume-level snapshots of the database server and replicate them to a cloud storage object., Configure nightly full backups combined with differential backups executed every 15 minutes., Use a database export utility to create logical backups every five minutes and upload them to archival storage., Implement continuous, asynchronous replication of transaction logs to a cloud-based recovery instance.

Question 19

A multinational corporation is initiating a large-scale migration to AWS from its multiple on-premises data centers, which host several hundred applications with complex interdependencies. The migration team has limited visibility into the existing IT landscape. The primary goal is to create a data-driven migration plan that groups applications into waves, prioritizes quick wins, and accurately estimates costs. The solution must minimize manual effort and provide a centralized location to track migration progress.

Accepted Answer

Deploy the AWS Application Discovery Service Agentless Collector to gather server profile information and performance data. Import the collected data into AWS Migration Hub to visualize dependencies, group servers into applications, and plan the migration in waves., Manually survey application owners using questionnaires to gather server specifications, application dependencies, and business value. Use this data with the AWS Pricing Calculator to estimate costs and group applications for migration., Engage a third-party consulting firm to perform a complete portfolio analysis. Use their final report to build a migration backlog in a project management tool and track progress manually., Use AWS Database Migration Service (DMS) to assess all on-premises databases and identify low-complexity candidates for the first migration wave. Use the results to build an initial migration plan focused on data-tier migration.

Question 20

A global logistics company's critical shipment tracking application has a business requirement to be fully operational within one hour of a regional outage. The maximum acceptable data loss for this application is 15 minutes. Which disaster recovery strategy most effectively meets these objectives?

Accepted Answer

A hot standby in a different region with daily database snapshots., A warm standby in a different region with continuous asynchronous database replication., A cold site in a different region with nightly database backups restored from object storage., A backup and restore strategy using infrastructure as code to provision a new environment upon failure, with transaction log shipping every 10 minutes.

AWS Certified Solutions Architect Professional Practice Exams (2025) for DevelopersData ScientistsData AnalystsData EngineersAnyoneDevelopers

Master the AWS Certified Solutions Architect Professional Exam

Practice Exam Domains Covered - Latest 2025 certification alignment

2025 Practice Exam Details

Cutting Edge Exam Prep with AI Enhanced Learning

AI Enhanced Learning With Premium Certification Practice Exams

Real-time AI Learning:

Unparalleled Understanding:

Advanced Learning with AI:

Exam Prep Powered by our Certification Practice System

Fast-Track Your Preparation Path

Realistic Exam Experience and Comprehensive Preparation

Fully Crafted and Supported by Experts in the USA

Proven Quality and Trust for Real Success

In-depth Explanations for Complete Mastery

Chosen and Trusted by Professionals Worldwide

Edward Martinez

Jiwon Thomas

Ella Sanders

Ali Karim

Brandon Hill

Marvin Watson

Peter Chen

Sophia Padilla

Daniel Garcia

Ava Thompson

Edward Martinez

Jiwon Thomas

Ella Sanders

Ali Karim

Brandon Hill

Marvin Watson

Peter Chen

Sophia Padilla

Daniel Garcia

Ava Thompson

Edward Martinez

Jiwon Thomas

Ella Sanders

Ali Karim

Brandon Hill

Marvin Watson

AWS Certified Solutions Architect Professional Certification Preparation Path

Focus on Passing on the First Attempt

Practice with Realistic Exams for Real Success

Build a Deep and Solid Foundation

Invest in Your Future

Why Choose Our AWS Practice Exams?

Built on Trust, Quality, and Proven Success

Expertise Backed by Professionals

Customer Focused, Always

AWS Certified Solutions Architect Professional Certification PreparationChoose Your Path to Success

Starter Practice Exam1 Exam

Pro Practice Pack3 Exam Bundle

Ultimate Practice Pack6 Exam Bundle

Prepare for Success with AWS Certified Solutions Architect Professional Exam Practice

AWS Certified Solutions Architect Professional Certification Preparation

The Goal of our Certification Preparation

Who Should Pursue this Certification Preparation?

ConsiderationsWhen Choosing Practice Exams

Beware of Outdated Content

Quality Matters in Exam Prep

Avoid Non-Expert Materials

Anytime, Anywhere Access

Unlimited Attempts

Cross-Device Sync

Frequently Asked Questions

How closely do your practice questions resemble the actual exam?▼

How up-to-date are your practice exams?▼

How long do I have access to the practice exams?▼

Are your practice exams available on mobile devices?▼

Do you provide explanations for the answers?▼

Take the Next Step Towards AWS Certification Prep

AWS Certified Solutions Architect Professional Practice Exams (2025) for
Developers
Data Scientists
Data Analysts
Data Engineers
Anyone
Developers

AWS Certified Solutions Architect Professional Certification Preparation
Choose Your Path to Success

Starter Practice Exam
1 Exam

Pro Practice Pack
3 Exam Bundle

Ultimate Practice Pack
6 Exam Bundle

Considerations
When Choosing Practice Exams