AWS SAA Mock Exam 1
📋 Exam Instructions
- Time Limit: 40 minutes (20 questions)
- Passing Score: 14/20 (70%)
- Question Types: Multiple choice và multiple response
- Calculator: Not permitted
- Notes: Not permitted
Question 1
Domain: Design Resilient Architectures
Một company đang migrate ứng dụng web 3-tier lên AWS. Họ muốn đảm bảo high availability và fault tolerance. Database layer cần được protected khỏi direct internet access nhưng vẫn accessible từ application layer.
Kiến trúc nào BEST meets requirements này?
A) Place all components trong public subnets với restrictive security groups B) Place web tier trong public subnets, application và database tiers trong private subnets C) Place all components trong private subnets với NAT Gateway cho internet access D) Place web và application tiers trong public subnets, database tier trong private subnet
Correct Answer: B Explanation: Web tier cần public access cho users, application tier có thể ở private subnet và access internet qua NAT Gateway khi cần, database tier phải ở private subnet cho security.
Question 2
Domain: Design High-Performing Architectures
Một e-commerce website experiences traffic spikes trong holiday seasons. Hiện tại application chạy trên single EC2 instance và performance degraded during peak times.
Solution nào sẽ BEST address issue này?
A) Upgrade to larger EC2 instance type B) Implement Auto Scaling Group với Application Load Balancer C) Add read replicas cho database D) Use CloudFront cho static content delivery
Correct Answer: B Explanation: Auto Scaling Group với ALB sẽ automatically scale capacity based on demand, providing better performance và cost optimization compared to vertical scaling.
Question 3
Domain: Design Secure Applications and Architectures
Một company cần store sensitive financial documents trên S3. Documents phải được encrypted và chỉ specific users mới có thể access. Company muốn control encryption keys và audit key usage.
Encryption option nào BEST meets requirements?
A) SSE-S3 với default encryption B) SSE-KMS với Customer Managed Keys C) SSE-C với customer-provided keys D) Client-side encryption với AWS SDK
Correct Answer: B Explanation: SSE-KMS với Customer Managed Keys provides key control, rotation capabilities, và comprehensive audit trails through CloudTrail.
Question 4
Domain: Design Cost-Optimized Architectures
Một startup has predictable compute workload chạy 24/7 for next 3 years. Họ đang sử dụng On-Demand instances và muốn reduce costs.
Cost optimization strategy nào MOST appropriate?
A) Switch to Spot Instances B) Purchase Standard Reserved Instances cho 3 years, All Upfront C) Use Savings Plans với 3-year commitment D) Implement scheduled scaling để turn off instances overnight
Correct Answer: B Explanation: Với predictable 24/7 workload for 3 years, Standard RI với All Upfront payment provides maximum cost savings (up to 75% discount).
Question 5
Domain: Design Resilient Architectures
Một application requires RTO of 1 hour và RPO of 15 minutes. Current setup has database trong single AZ. Company wants implement disaster recovery strategy.
DR strategy nào BEST meets requirements?
A) Backup và Restore B) Pilot Light C) Warm Standby D) Multi-Site Active/Active
Correct Answer: C Explanation: Warm Standby có thể achieve RTO of ~1 hour và RPO of minutes, balancing cost và recovery requirements.
Question 6
Domain: Design High-Performing Architectures
Một global application serves users worldwide. Users complain về slow loading times cho static assets như images và CSS files.
Solution nào sẽ MOST effectively improve performance?
A) Use larger EC2 instances B) Implement ElastiCache C) Deploy CloudFront CDN D) Use multiple Application Load Balancers
Correct Answer: C Explanation: CloudFront CDN sẽ cache static content tại edge locations worldwide, significantly reducing latency cho global users.
Question 7
Domain: Design Secure Applications and Architectures
Một company cần provide temporary access cho third-party contractor để access specific S3 bucket for 2 weeks. Access should automatically expire.
Security approach nào MOST appropriate?
A) Create IAM user với programmatic access và manually delete after 2 weeks B) Use IAM role với AssumeRole và time-based condition C) Generate pre-signed URLs với 2-week expiration D) Create bucket policy với IP address restriction
Correct Answer: B Explanation: IAM role với time-based condition trong policy sẽ automatically expire access, providing better security than manual management.
Question 8
Domain: Design Cost-Optimized Architectures
Một company has S3 bucket với 10TB data. Most files are accessed frequently trong first 30 days, occasionally trong next 90 days, và rarely after that. Compliance requires 7-year retention.
Storage strategy nào MOST cost-effective?
A) Keep all data trong S3 Standard B) Use S3 Intelligent-Tiering cho automatic optimization C) Manually move data giữa storage classes D) Implement lifecycle policy: Standard → Standard-IA → Glacier → Deep Archive
Correct Answer: D Explanation: Lifecycle policy automatically transitions objects dựa trên access patterns, optimizing costs while meeting retention requirements.
Question 9
Domain: Design Resilient Architectures
Một web application uses RDS MySQL database. Database experiences occasional high CPU utilization affecting application performance. Company wants improve database performance without changing application code.
Solution nào BEST addresses issue này?
A) Upgrade to larger RDS instance B) Enable Multi-AZ deployment C) Add Read Replicas và route read traffic D) Migrate to DynamoDB
Correct Answer: C Explanation: Read Replicas can offload read traffic từ primary database, reducing CPU utilization without requiring application code changes.
Question 10
Domain: Design High-Performing Architectures
Một data processing application needs process large files uploaded to S3. Processing takes 10-15 minutes per file và should start immediately after upload.
Architecture nào MOST efficient?
A) EC2 instance polling S3 bucket every minute B) S3 event notification → Lambda → SQS → EC2 C) S3 event notification → SQS → Lambda D) CloudWatch Events scheduled every 5 minutes
Correct Answer: B Explanation: S3 event notifications provide immediate trigger, SQS ensures reliable delivery, và EC2 can handle long-running processing tasks better than Lambda's 15-minute limit.
Question 11
Domain: Design Secure Applications and Architectures
Một company wants ensure all data transfers to/from S3 are encrypted in transit. Some legacy applications cannot be modified to use HTTPS.
Policy configuration nào will enforce encryption in transit?
A) Enable default encryption on S3 bucket B) Use bucket policy to deny requests without SSL C) Configure VPC endpoint cho S3 D) Enable S3 Transfer Acceleration
Correct Answer: B Explanation: Bucket policy có thể explicitly deny requests that don't use SSL/HTTPS, enforcing encryption in transit requirement.
Question 12
Domain: Design Cost-Optimized Architectures
Một development team needs EC2 instances cho testing during business hours (8 AM - 6 PM, Monday-Friday). Instances are not needed outside these hours.
Cost optimization approach nào MOST effective?
A) Use Spot Instances B) Purchase Reserved Instances C) Implement scheduled Auto Scaling D) Use Lambda instead of EC2
Correct Answer: C Explanation: Scheduled Auto Scaling có thể automatically start/stop instances based on predictable schedule, eliminating costs during non-business hours.
Question 13
Domain: Design Resilient Architectures
Một application stores session data trong memory trên EC2 instances. When instances terminate, users lose their sessions. Company wants implement persistent session storage.
Solution nào BEST addresses requirement này?
A) Use sticky sessions trên Application Load Balancer B) Store session data trong RDS database C) Use ElastiCache Redis cluster D) Store session data trong S3
Correct Answer: C Explanation: ElastiCache Redis provides fast, persistent session storage với high availability và low latency, ideal cho session management.
Question 14
Domain: Design High-Performing Architectures
Một database-intensive application experiences slow query performance. Database metrics show high IOPS utilization. Application cannot be modified to optimize queries.
Storage optimization nào MOST effective?
A) Increase EBS volume size B) Switch to Provisioned IOPS SSD (io2) C) Use instance store volumes D) Enable EBS optimization
Correct Answer: B Explanation: Provisioned IOPS SSD (io2) provides guaranteed high IOPS performance, directly addressing the IOPS bottleneck.
Question 15
Domain: Design Secure Applications and Architectures
Một company wants monitor và alert on unusual API activity trong AWS account. They need comprehensive auditing của all API calls và automated threat detection.
Solution combination nào BEST meets requirements?
A) CloudTrail + CloudWatch Logs B) CloudTrail + GuardDuty + CloudWatch Alarms C) VPC Flow Logs + CloudWatch D) AWS Config + CloudWatch Events
Correct Answer: B Explanation: CloudTrail logs all API calls, GuardDuty provides automated threat detection, và CloudWatch Alarms enable automated responses.
Question 16
Domain: Design Cost-Optimized Architectures
Một company has workload với variable demand throughout the day. Demand is predictable: low from 12 AM - 6 AM, medium from 6 AM - 6 PM, high from 6 PM - 12 AM.
Auto Scaling strategy nào MOST cost-effective?
A) Target tracking scaling only B) Scheduled scaling với target tracking C) Step scaling với detailed CloudWatch metrics D) Manual scaling based on time
Correct Answer: B Explanation: Scheduled scaling anticipates predictable demand changes, while target tracking handles unexpected variations, optimizing both performance và cost.
Question 17
Domain: Design Resilient Architectures
Một critical application must maintain 99.99% availability. Application currently runs trên single EC2 instance trong one AZ. Database is RDS Single-AZ MySQL.
Architecture change nào will BEST improve availability?
A) Enable RDS Multi-AZ only B) Use Auto Scaling Group across multiple AZs only C) Both RDS Multi-AZ và Auto Scaling Group across multiple AZs D) Migrate to Lambda và DynamoDB
Correct Answer: C Explanation: Both compute và database layers need multi-AZ deployment để eliminate single points of failure và achieve 99.99% availability target.
Question 18
Domain: Design High-Performing Architectures
Một video streaming application needs deliver content globally với low latency. Videos are stored trong S3 và range from 100MB to 2GB.
Content delivery strategy nào MOST effective?
A) Use S3 Transfer Acceleration B) Deploy CloudFront với multiple origin servers C) Use CloudFront với S3 origin và appropriate caching policies D) Replicate S3 buckets to multiple regions
Correct Answer: C Explanation: CloudFront với S3 origin provides global edge caching, reducing latency. Appropriate caching policies optimize performance cho different video sizes.
Question 19
Domain: Design Secure Applications and Architectures
Một financial application processes sensitive customer data và must comply với PCI DSS requirements. Data must be encrypted at rest và in transit, với detailed audit trails.
Compliance strategy nào MOST comprehensive?
A) Use S3 với SSE-S3 và CloudTrail B) Use S3 với SSE-KMS, CloudTrail, và VPC Flow Logs C) Use EBS encryption và CloudWatch Logs D) Use database encryption và AWS Config
Correct Answer: B Explanation: SSE-KMS provides key management và detailed encryption audit trails, CloudTrail logs API access, và VPC Flow Logs provide network activity auditing.
Question 20
Domain: Design Cost-Optimized Architectures
Một company has batch processing workload that can tolerate interruptions và has flexible timing requirements. Workload typically runs for 4-6 hours once per day.
Instance purchasing strategy nào MOST cost-effective?
A) On-Demand Instances B) Reserved Instances C) Spot Instances D) Dedicated Hosts
Correct Answer: C Explanation: Spot Instances provide up to 90% cost savings và are perfect cho fault-tolerant, flexible batch workloads that can handle interruptions.
📊 Answer Key Summary
| Question | Answer | Domain |
|---|---|---|
| 1 | B | Resilient |
| 2 | B | Performance |
| 3 | B | Security |
| 4 | B | Cost |
| 5 | C | Resilient |
| 6 | C | Performance |
| 7 | B | Security |
| 8 | D | Cost |
| 9 | C | Resilient |
| 10 | B | Performance |
| 11 | B | Security |
| 12 | C | Cost |
| 13 | C | Resilient |
| 14 | B | Performance |
| 15 | B | Security |
| 16 | B | Cost |
| 17 | C | Resilient |
| 18 | C | Performance |
| 19 | B | Security |
| 20 | C | Cost |
📈 Score Analysis
By Domain:
- Resilient Architectures (6 questions): 30%
- High-Performing Architectures (6 questions): 30%
- Secure Applications (4 questions): 20%
- Cost-Optimized Architectures (4 questions): 20%
Performance Targets:
- 18-20 correct: Excellent (Ready for exam)
- 15-17 correct: Good (Review weak areas)
- 12-14 correct: Fair (Additional study needed)
- Below 12: Poor (Comprehensive review required)
🎯 Study Recommendations
If you scored 15-17:
- Review incorrect answers carefully
- Focus on specific domain weaknesses
- Practice hands-on labs
- Take additional practice exams
If you scored 12-14:
- Review all 4 domains thoroughly
- Complete hands-on labs
- Study AWS documentation
- Join study groups or courses
If you scored below 12:
- Start với AWS fundamentals
- Complete AWS Cloud Practitioner first
- Extensive hands-on practice
- Consider instructor-led training