Free AWS Certified Solutions Architect - Professional Exam Questions and Answers

Last updated: September 11, 2026

Provider

Amazon

Questions in our bank

1000+

Free to read

First 10, with answers

Official page

Official Exam website

Our test mode duration & pass mark

130 mins · 70%

Verified answers

Reviewed weekly

Recommended: Switch to Test Mode to start a practice test that simulates the real exam experience.

1. Question #1

   An organization is planning to host a Wordpress blog as well a joomla CMS on a single instance launched with VPC. The organization wants to have separate domains for each application and assign them using Route 53. The organization may have about ten instances each with two applications as mentioned above. While launching the instance, the organization configured two separate network interfaces (primary + ENI) and wanted to have two elastic IPs for that instance. It was suggested to use a public IP from AWS instead of an elastic IP as the number of elastic IPs is restricted. What action will you recommend to the organization?

   • A. I agree with the suggestion but will prefer that the organization should use separate subnets with each ENI for different public IPs.
   • B. I do not agree as it is required to have only an elastic IP since an instance has more than one ENI and AWS does not assign a public IP to an instance with
   • C. I do not agree as AWS VPC does not attach a public IP to an ENI; so the user has to use only an elastic IP only.
   • D. I agree with the suggestion and it is recommended to use a public IP from AWS since the organization is going to use DNS with Route 53.
   Reveal Answer

2. Question #2

   A user authenticating with Amazon Cognito will go through a multi-step process to bootstrap their credentials. Amazon Cognito has two different flows for authentication with public providers. Which of the following are the two flows?

   • A. Authenticated and non-authenticated
   • B. Public and private
   • C. Enhanced and basic
   • D. Single step and multistep
   Reveal Answer

3. Question #3

   An organization is hosting a scalable web application using AWS. The organization has configured ELB and Auto Scaling to make the application scalable. Which of the below mentioned statements is not required to be followed for ELB when the application is planning to host a web application on VPC?

   • A. The ELB and all the instances should be in the same subnet.
   • B. Configure the security group rules and network ACLs to allow traffic to be routed between the subnets in the VPC.
   • C. The internet facing ELB should have a route table associated with the internet gateway.
   • D. The internet facing ELB should be only in a public subne
   Reveal Answer

4. Question #4

   You want to define permissions for a role in an IAM policy. Which of the following configuration formats should you use?

   • A. An XML document written in the IAM Policy Language
   • B. An XML document written in a language of your choice
   • C. A JSON document written in the IAM Policy Language
   • D. A JSON document written in a language of your choice
   Reveal Answer

5. Question #5

   In Amazon SNS, to send push notifications to mobile devices using Amazon SNS and ADM, you need to obtain the following, except:

   • A. Device token
   • B. Client ID
   • C. Registration ID
   • D. Client secret
   Reveal Answer

6. Question #6

   A user has created a VPC with CIDR 20.0.0.0/16. The user has created one subnet with CIDR 20.0.0.0/16 in this VPC. The user is trying to create another subnet with the same VPC for CIDR 20.0.0.1/24. What will happen in this scenario?

   • A. The VPC will modify the first subnet CIDR automatically to allow the second subnet IP range
   • B. The second subnet will be created
   • C. It will throw a CIDR overlaps error
   • D. It is not possible to create a subnet with the same CIDR as VPC
   Reveal Answer

7. Question #7

   Which of following IAM policy elements lets you specify an exception to a list of actions?

   • A. NotException
   • B. ExceptionAction
   • C. Exception
   • D. NotAction
   Reveal Answer

8. Question #8

   An organization is setting up a web application with the JEE stack. The application uses the JBoss app server and |V|ySQL DB. The application has a logging module which logs all the actMties whenever a business function of the JEE application is called. The logging actMty takes some time due to the large size of the log file. If the application wants to setup a scalable infrastructure which of the below mentioned options will help achieve this setup?

   • A. Host the log files on EBS with PIOPS which will have higher I/O.
   • B. Host logging and the app server on separate sewers such that they are both in the same zone.
   • C. Host logging and the app server on the same instance so that the network latency will be shorter.
   • D. Create a separate module for logging and using SQS compartmentalize the module such that all calls to logging are asynchronous.
   Reveal Answer

9. Question #9

   To get started using AWS Direct Connect, in which of the following steps do you configure Border Gateway Protocol (BGP)?

   • A. Complete the Cross Connect
   • B. Configure Redundant Connections with AWS Direct Connect
   • C. Create a Virtual Interface
   • D. Download Router Configuration
   Reveal Answer

10. Question #10

    You have been asked to design the storage layer for an application. The application requires disk performance of at least 100,000 IOPS. In addition, the storage layer must be able to survive the loss of an indMdual disk, EC2 instance, or Availability Zone without any data loss. The volume you provide must have a capacity of at least 3 TB. Which of the following designs will meet these objectives?

    • A. Instantiate a c3.8x|arge instance in us-east-1. Provision 4x1TB EBS volumes, attach them to the instance, and configure them as a single RAID 5 volum
    • B. Ensure that EBS snapshots are performed every 15 minutes.
    • C. Instantiate a c3.8xIarge instance in us-east-1. Provision 3xITB EBS volumes, attach them to the Instance, and configure them as a single RAID 0 volum
    • D. Ensure that EBS snapshots are performed every 15 minutes.
    Reveal Answer