AWS Architect interview questions part-42|Cloud Institution

AWS Solutions Architect Questions and Answers Part-42

Get ready to excel in your AWS Solutions Architect certification with this comprehensive collection of questions and answers. Covering critical topics like cloud architecture design, AWS services, security best practices, and cost optimization, these Q&A sessions will help you gain a deep understanding of AWS concepts and prepare effectively for the exam. Whether you are a beginner or an experienced professional, these answers provide clear explanations and practical examples to solidify your AWS knowledge and boost your confidence.

1.The base URI for all requests for instance metadata is ___________

A.http://254.169.169.254/latest/

B.http://169.169.254.254/latest/

C.http://127.0.0.1/latest/

D.http://169.254.169.254/latest/

Answer:B
http://169.254.169.254/latest/

Explanation:
AWS EC2 instances provide instance metadata, which allows applications and scripts running on the instance to retrieve information about the instance itself, such as instance ID, AMI ID, security groups, and more.

Click to know the Answer Collapse

2.When using IAM to control access to your RDS resources, the key names that can be used are case sensitive. For example,

aws:CurrentTime is NOT equivalent to AWS:currenttime.

A.TRUE

B.FALSE

Answer:A

TRUE

Explanation:

IAM (Identity and Access Management) policy keys are case-sensitive. This means that aws:CurrentTime is not the same as AWS:currenttime.

IAM policy conditions rely on specific key names, and any variation in case will cause the condition to fail.
AWS follows a strict naming convention where all global condition keys start with aws: (lowercase), while service-specific condition keys start with the service name (e.g., rds:, s3:, etc.).

Since IAM condition key names must be used exactly as specified, the statement is TRUE.

Click to know the Answer Collapse

3.Will my standby RDS instance be in the same Availability Zone as my primary?

A.Only for Oracle RDS types

B.Yes

C.Only if configured at launch

D.No

Answer:D

Explanation:

Amazon RDS Multi-AZ deployments are designed for high availability and automatic failover.

Standby instances are always placed in a different Availability Zone (AZ) than the primary instance.
This is to ensure fault tolerance—if one AZ goes down, the standby in the other AZ can take over.
Applies to all supported RDS engines, not just Oracle.

Since standby instances are never in the same AZ as the primary, the correct answer is “No”.

Click to know the Answer Collapse

4.What are the two permission types used by AWS?

A.Resource-based and Product-based

B.Product-based and Service-based

C.Service-based

D.User-based and Resource-based

Answer:D

User-based and Resource-based

Explanation:

AWS uses two primary types of permissions to control access

Click to know the Answer Collapse

5.While signing in REST/ Query requests, for additional security, you should transmit your requests using Secure Sockets Layer (SSL) by using _________

A.HTTP

B.Internet Protocol Security(IPsec)

C.TLS (Transport Layer Security)

D.HTTPS

Answer:D

HTTPS

Explanation:

When signing REST/Query requests in AWS, it is recommended to use Secure Sockets Layer (SSL) or its successor, Transport Layer Security (TLS) to encrypt the data in transit.

Click to know the Answer Collapse

For more AWS Question and Answer Click here

For more information Visit Cloud Institution