Design Secure Architectures Practice Questions
Identity, access control, network boundaries, encryption, logging, secrets, and secure application access patterns.
Practice questions
- For a regulated workload, an architect is reviewing IAM least privilege requirement set 1. Which de…
- For a public application, an architect is reviewing IAM roles requirement set 1. Which design choic…
- For a cross-account deployment, an architect is reviewing multi-account governance requirement set …
- For a data ingestion service, an architect is reviewing KMS keys requirement set 1. Which design ch…
- For a healthcare SaaS provider, an architect is reviewing Secrets Manager requirement set 1. Which …
- For a partner integration, an architect is reviewing VPC subnet design requirement set 1. Which des…
- For a regulated workload, an architect is reviewing security groups requirement set 1. Which design…
- For a public application, an architect is reviewing network ACLs requirement set 1. Which design ch…
- For a cross-account deployment, an architect is reviewing VPC endpoints requirement set 1. Which de…
- For a data ingestion service, an architect is reviewing S3 bucket policies requirement set 1. Which…
- For a healthcare SaaS provider, an architect is reviewing CloudTrail requirement set 1. Which desig…
- For a partner integration, an architect is reviewing GuardDuty requirement set 1. Which design choi…
- For a regulated workload, an architect is reviewing AWS WAF requirement set 1. Which design choice …
- For a public application, an architect is reviewing MFA and federation requirement set 1. Which des…
- For a cross-account deployment, an architect is reviewing IAM least privilege requirement set 2. Wh…
- For a data ingestion service, an architect is reviewing IAM roles requirement set 2. Which design c…
- For a healthcare SaaS provider, an architect is reviewing multi-account governance requirement set …
- For a partner integration, an architect is reviewing KMS keys requirement set 2. Which design choic…
- For a regulated workload, an architect is reviewing Secrets Manager requirement set 2. Which design…
- For a public application, an architect is reviewing VPC subnet design requirement set 2. Which desi…
- For a cross-account deployment, an architect is reviewing security groups requirement set 2. Which …
- For a data ingestion service, an architect is reviewing network ACLs requirement set 2. Which desig…
- For a healthcare SaaS provider, an architect is reviewing VPC endpoints requirement set 2. Which de…
- For a partner integration, an architect is reviewing S3 bucket policies requirement set 2. Which de…
- For a regulated workload, an architect is reviewing CloudTrail requirement set 2. Which design choi…
- For a public application, an architect is reviewing GuardDuty requirement set 2. Which design choic…
- For a cross-account deployment, an architect is reviewing AWS WAF requirement set 2. Which design c…
- For a data ingestion service, an architect is reviewing MFA and federation requirement set 2. Which…
- For a healthcare SaaS provider, an architect is reviewing IAM least privilege requirement set 3. Wh…
- For a partner integration, an architect is reviewing IAM roles requirement set 3. Which design choi…
- For a regulated workload, an architect is reviewing multi-account governance requirement set 3. Whi…
- For a public application, an architect is reviewing KMS keys requirement set 3. Which design choice…
- For a cross-account deployment, an architect is reviewing Secrets Manager requirement set 3. Which …
- For a data ingestion service, an architect is reviewing VPC subnet design requirement set 3. Which …
- For a healthcare SaaS provider, an architect is reviewing security groups requirement set 3. Which …
- For a partner integration, an architect is reviewing network ACLs requirement set 3. Which design c…
- For a regulated workload, an architect is reviewing VPC endpoints requirement set 3. Which design c…
- For a public application, an architect is reviewing S3 bucket policies requirement set 3. Which des…
- For a cross-account deployment, an architect is reviewing CloudTrail requirement set 3. Which desig…
- For a data ingestion service, an architect is reviewing GuardDuty requirement set 3. Which design c…
- For a healthcare SaaS provider, an architect is reviewing AWS WAF requirement set 3. Which design c…
- For a partner integration, an architect is reviewing MFA and federation requirement set 3. Which de…
- For a regulated workload, an architect is reviewing IAM least privilege requirement set 4. Which de…
- For a public application, an architect is reviewing IAM roles requirement set 4. Which design choic…
- For a cross-account deployment, an architect is reviewing multi-account governance requirement set …
- For a data ingestion service, an architect is reviewing KMS keys requirement set 4. Which design ch…
- For a healthcare SaaS provider, an architect is reviewing Secrets Manager requirement set 4. Which …
- For a partner integration, an architect is reviewing VPC subnet design requirement set 4. Which des…
- For a regulated workload, an architect is reviewing security groups requirement set 4. Which design…
- For a public application, an architect is reviewing network ACLs requirement set 4. Which design ch…
- For a cross-account deployment, an architect is reviewing VPC endpoints requirement set 4. Which de…
- For a data ingestion service, an architect is reviewing S3 bucket policies requirement set 4. Which…
- For a healthcare SaaS provider, an architect is reviewing CloudTrail requirement set 4. Which desig…
- For a partner integration, an architect is reviewing GuardDuty requirement set 4. Which design choi…
- For a regulated workload, an architect is reviewing AWS WAF requirement set 4. Which design choice …
- For a public application, an architect is reviewing MFA and federation requirement set 4. Which des…
- For a cross-account deployment, an architect is reviewing IAM least privilege requirement set 5. Wh…
- For a data ingestion service, an architect is reviewing IAM roles requirement set 5. Which design c…
- For a healthcare SaaS provider, an architect is reviewing multi-account governance requirement set …
- For a partner integration, an architect is reviewing KMS keys requirement set 5. Which design choic…
- For a regulated workload, an architect is reviewing Secrets Manager requirement set 5. Which design…
- For a public application, an architect is reviewing VPC subnet design requirement set 5. Which desi…
- For a cross-account deployment, an architect is reviewing security groups requirement set 5. Which …
- For a data ingestion service, an architect is reviewing network ACLs requirement set 5. Which desig…
- For a healthcare SaaS provider, an architect is reviewing VPC endpoints requirement set 5. Which de…
- For a partner integration, an architect is reviewing S3 bucket policies requirement set 5. Which de…
- For a regulated workload, an architect is reviewing CloudTrail requirement set 5. Which design choi…
- For a public application, an architect is reviewing GuardDuty requirement set 5. Which design choic…
- For a cross-account deployment, an architect is reviewing AWS WAF requirement set 5. Which design c…
- For a data ingestion service, an architect is reviewing MFA and federation requirement set 5. Which…
- For a healthcare SaaS provider, an architect is reviewing IAM least privilege requirement set 6. Wh…
- For a partner integration, an architect is reviewing IAM roles requirement set 6. Which design choi…
- For a regulated workload, an architect is reviewing multi-account governance requirement set 6. Whi…
- For a public application, an architect is reviewing KMS keys requirement set 6. Which design choice…
- For a cross-account deployment, an architect is reviewing Secrets Manager requirement set 6. Which …
- For a data ingestion service, an architect is reviewing VPC subnet design requirement set 6. Which …
- For a healthcare SaaS provider, an architect is reviewing security groups requirement set 6. Which …
- For a partner integration, an architect is reviewing network ACLs requirement set 6. Which design c…
- For a regulated workload, an architect is reviewing VPC endpoints requirement set 6. Which design c…
- For a public application, an architect is reviewing S3 bucket policies requirement set 6. Which des…
- For a cross-account deployment, an architect is reviewing CloudTrail requirement set 6. Which desig…
- For a data ingestion service, an architect is reviewing GuardDuty requirement set 6. Which design c…
- For a healthcare SaaS provider, an architect is reviewing AWS WAF requirement set 6. Which design c…
- For a partner integration, an architect is reviewing MFA and federation requirement set 6. Which de…
- For a regulated workload, an architect is reviewing IAM least privilege requirement set 7. Which de…
- For a public application, an architect is reviewing IAM roles requirement set 7. Which design choic…
- For a cross-account deployment, an architect is reviewing multi-account governance requirement set …
- For a data ingestion service, an architect is reviewing KMS keys requirement set 7. Which design ch…
- For a healthcare SaaS provider, an architect is reviewing Secrets Manager requirement set 7. Which …
- For a partner integration, an architect is reviewing VPC subnet design requirement set 7. Which des…
- For a regulated workload, an architect is reviewing security groups requirement set 7. Which design…
- For a public application, an architect is reviewing network ACLs requirement set 7. Which design ch…
- For a cross-account deployment, an architect is reviewing VPC endpoints requirement set 7. Which de…
- For a data ingestion service, an architect is reviewing S3 bucket policies requirement set 7. Which…
- For a healthcare SaaS provider, an architect is reviewing CloudTrail requirement set 7. Which desig…
- For a partner integration, an architect is reviewing GuardDuty requirement set 7. Which design choi…
- For a regulated workload, an architect is reviewing AWS WAF requirement set 7. Which design choice …
- For a public application, an architect is reviewing MFA and federation requirement set 7. Which des…
- For a cross-account deployment, an architect is reviewing IAM least privilege requirement set 8. Wh…
- For a data ingestion service, an architect is reviewing IAM roles requirement set 8. Which design c…
- For a healthcare SaaS provider, an architect is reviewing multi-account governance requirement set …
- For a partner integration, an architect is reviewing KMS keys requirement set 8. Which design choic…
- For a regulated workload, an architect is reviewing Secrets Manager requirement set 8. Which design…
- For a public application, an architect is reviewing VPC subnet design requirement set 8. Which desi…
- For a cross-account deployment, an architect is reviewing security groups requirement set 8. Which …
- For a data ingestion service, an architect is reviewing network ACLs requirement set 8. Which desig…
- For a healthcare SaaS provider, an architect is reviewing VPC endpoints requirement set 8. Which de…
- For a partner integration, an architect is reviewing S3 bucket policies requirement set 8. Which de…
- For a regulated workload, an architect is reviewing CloudTrail requirement set 8. Which design choi…
- For a public application, an architect is reviewing GuardDuty requirement set 8. Which design choic…
- For a cross-account deployment, an architect is reviewing AWS WAF requirement set 8. Which design c…
- For a data ingestion service, an architect is reviewing MFA and federation requirement set 8. Which…
- For a healthcare SaaS provider, an architect is reviewing IAM least privilege requirement set 9. Wh…
- For a partner integration, an architect is reviewing IAM roles requirement set 9. Which design choi…
- For a regulated workload, an architect is reviewing multi-account governance requirement set 9. Whi…
- For a public application, an architect is reviewing KMS keys requirement set 9. Which design choice…
- For a cross-account deployment, an architect is reviewing Secrets Manager requirement set 9. Which …
- For a data ingestion service, an architect is reviewing VPC subnet design requirement set 9. Which …
- For a healthcare SaaS provider, an architect is reviewing security groups requirement set 9. Which …
- For a partner integration, an architect is reviewing network ACLs requirement set 9. Which design c…
- For a regulated workload, an architect is reviewing VPC endpoints requirement set 9. Which design c…
- For a public application, an architect is reviewing S3 bucket policies requirement set 9. Which des…
- For a cross-account deployment, an architect is reviewing CloudTrail requirement set 9. Which desig…
- For a data ingestion service, an architect is reviewing GuardDuty requirement set 9. Which design c…
- For a healthcare SaaS provider, an architect is reviewing AWS WAF requirement set 9. Which design c…
- For a partner integration, an architect is reviewing MFA and federation requirement set 9. Which de…
- For a regulated workload, an architect is reviewing IAM least privilege requirement set 10. Which d…
- For a public application, an architect is reviewing IAM roles requirement set 10. Which design choi…
- For a cross-account deployment, an architect is reviewing multi-account governance requirement set …
- For a data ingestion service, an architect is reviewing KMS keys requirement set 10. Which design c…
- For a healthcare SaaS provider, an architect is reviewing Secrets Manager requirement set 10. Which…
- For a partner integration, an architect is reviewing VPC subnet design requirement set 10. Which de…
- For a regulated workload, an architect is reviewing security groups requirement set 10. Which desig…
- For a public application, an architect is reviewing network ACLs requirement set 10. Which design c…
- For a cross-account deployment, an architect is reviewing VPC endpoints requirement set 10. Which d…
- For a data ingestion service, an architect is reviewing S3 bucket policies requirement set 10. Whic…
- For a healthcare SaaS provider, an architect is reviewing CloudTrail requirement set 10. Which desi…
- For a partner integration, an architect is reviewing GuardDuty requirement set 10. Which design cho…
- For a regulated workload, an architect is reviewing AWS WAF requirement set 10. Which design choice…
- For a public application, an architect is reviewing MFA and federation requirement set 10. Which de…
- For a cross-account deployment, an architect is reviewing IAM least privilege requirement set 11. W…
- For a data ingestion service, an architect is reviewing IAM roles requirement set 11. Which design …
- For a healthcare SaaS provider, an architect is reviewing multi-account governance requirement set …
- For a partner integration, an architect is reviewing KMS keys requirement set 11. Which design choi…
- For a regulated workload, an architect is reviewing Secrets Manager requirement set 11. Which desig…
- For a public application, an architect is reviewing VPC subnet design requirement set 11. Which des…
- For a cross-account deployment, an architect is reviewing security groups requirement set 11. Which…
- For a data ingestion service, an architect is reviewing network ACLs requirement set 11. Which desi…
- For a healthcare SaaS provider, an architect is reviewing VPC endpoints requirement set 11. Which d…
- For a partner integration, an architect is reviewing S3 bucket policies requirement set 11. Which d…
- For a regulated workload, an architect is reviewing CloudTrail requirement set 11. Which design cho…
- For a public application, an architect is reviewing GuardDuty requirement set 11. Which design choi…
- For a cross-account deployment, an architect is reviewing AWS WAF requirement set 11. Which design …
- For a data ingestion service, an architect is reviewing MFA and federation requirement set 11. Whic…
- For a healthcare SaaS provider, an architect is reviewing IAM least privilege requirement set 12. W…
- For a partner integration, an architect is reviewing IAM roles requirement set 12. Which design cho…
- For a regulated workload, an architect is reviewing multi-account governance requirement set 12. Wh…
- For a public application, an architect is reviewing KMS keys requirement set 12. Which design choic…
- For a cross-account deployment, an architect is reviewing Secrets Manager requirement set 12. Which…
- For a data ingestion service, an architect is reviewing VPC subnet design requirement set 12. Which…
- For a healthcare SaaS provider, an architect is reviewing security groups requirement set 12. Which…
- For a partner integration, an architect is reviewing network ACLs requirement set 12. Which design …
- For a regulated workload, an architect is reviewing VPC endpoints requirement set 12. Which design …
- For a public application, an architect is reviewing S3 bucket policies requirement set 12. Which de…
- For a cross-account deployment, an architect is reviewing CloudTrail requirement set 12. Which desi…
- For a data ingestion service, an architect is reviewing GuardDuty requirement set 12. Which design …
- For a healthcare SaaS provider, an architect is reviewing AWS WAF requirement set 12. Which design …
- For a partner integration, an architect is reviewing MFA and federation requirement set 12. Which d…
- For a regulated workload, an architect is reviewing IAM least privilege requirement set 13. Which d…
- For a public application, an architect is reviewing IAM roles requirement set 13. Which design choi…
- For a cross-account deployment, an architect is reviewing multi-account governance requirement set …
- For a data ingestion service, an architect is reviewing KMS keys requirement set 13. Which design c…
- For a healthcare SaaS provider, an architect is reviewing Secrets Manager requirement set 13. Which…
- For a partner integration, an architect is reviewing VPC subnet design requirement set 13. Which de…
- For a regulated workload, an architect is reviewing security groups requirement set 13. Which desig…
- For a public application, an architect is reviewing network ACLs requirement set 13. Which design c…
- For a cross-account deployment, an architect is reviewing VPC endpoints requirement set 13. Which d…
- For a data ingestion service, an architect is reviewing S3 bucket policies requirement set 13. Whic…
- For a healthcare SaaS provider, an architect is reviewing CloudTrail requirement set 13. Which desi…
- For a partner integration, an architect is reviewing GuardDuty requirement set 13. Which design cho…
- For a regulated workload, an architect is reviewing AWS WAF requirement set 13. Which design choice…
- For a public application, an architect is reviewing MFA and federation requirement set 13. Which de…
- For a cross-account deployment, an architect is reviewing IAM least privilege requirement set 14. W…
- For a data ingestion service, an architect is reviewing IAM roles requirement set 14. Which design …
- For a healthcare SaaS provider, an architect is reviewing multi-account governance requirement set …
- For a partner integration, an architect is reviewing KMS keys requirement set 14. Which design choi…
- For a regulated workload, an architect is reviewing Secrets Manager requirement set 14. Which desig…
- For a public application, an architect is reviewing VPC subnet design requirement set 14. Which des…
- For a cross-account deployment, an architect is reviewing security groups requirement set 14. Which…
- For a data ingestion service, an architect is reviewing network ACLs requirement set 14. Which desi…
- For a healthcare SaaS provider, an architect is reviewing VPC endpoints requirement set 14. Which d…
- For a partner integration, an architect is reviewing S3 bucket policies requirement set 14. Which d…
- For a regulated workload, an architect is reviewing CloudTrail requirement set 14. Which design cho…
- For a public application, an architect is reviewing GuardDuty requirement set 14. Which design choi…
- For a cross-account deployment, an architect is reviewing AWS WAF requirement set 14. Which design …
- For a data ingestion service, an architect is reviewing MFA and federation requirement set 14. Whic…
- For a healthcare SaaS provider, an architect is reviewing IAM least privilege requirement set 15. W…
- For a partner integration, an architect is reviewing IAM roles requirement set 15. Which design cho…
- For a regulated workload, an architect is reviewing multi-account governance requirement set 15. Wh…
- For a public application, an architect is reviewing KMS keys requirement set 15. Which design choic…
- For a cross-account deployment, an architect is reviewing Secrets Manager requirement set 15. Which…
- For a data ingestion service, an architect is reviewing VPC subnet design requirement set 15. Which…
- For a healthcare SaaS provider, an architect is reviewing security groups requirement set 15. Which…
- For a partner integration, an architect is reviewing network ACLs requirement set 15. Which design …
- For a regulated workload, an architect is reviewing VPC endpoints requirement set 15. Which design …
- For a public application, an architect is reviewing S3 bucket policies requirement set 15. Which de…
- For a cross-account deployment, an architect is reviewing CloudTrail requirement set 15. Which desi…
- For a data ingestion service, an architect is reviewing GuardDuty requirement set 15. Which design …
- For a healthcare SaaS provider, an architect is reviewing AWS WAF requirement set 15. Which design …
- For a partner integration, an architect is reviewing MFA and federation requirement set 15. Which d…
- For a regulated workload, an architect is reviewing IAM least privilege requirement set 16. Which d…
- For a public application, an architect is reviewing IAM roles requirement set 16. Which design choi…
- For a cross-account deployment, an architect is reviewing multi-account governance requirement set …
- For a data ingestion service, an architect is reviewing KMS keys requirement set 16. Which design c…
- For a healthcare SaaS provider, an architect is reviewing Secrets Manager requirement set 16. Which…
- For a partner integration, an architect is reviewing VPC subnet design requirement set 16. Which de…
- For a regulated workload, an architect is reviewing security groups requirement set 16. Which desig…
- For a public application, an architect is reviewing network ACLs requirement set 16. Which design c…
- For a cross-account deployment, an architect is reviewing VPC endpoints requirement set 16. Which d…
- For a data ingestion service, an architect is reviewing S3 bucket policies requirement set 16. Whic…
- For a healthcare SaaS provider, an architect is reviewing CloudTrail requirement set 16. Which desi…
- For a partner integration, an architect is reviewing GuardDuty requirement set 16. Which design cho…
- For a regulated workload, an architect is reviewing AWS WAF requirement set 16. Which design choice…
- For a public application, an architect is reviewing MFA and federation requirement set 16. Which de…
- For a cross-account deployment, an architect is reviewing IAM least privilege requirement set 17. W…
- For a data ingestion service, an architect is reviewing IAM roles requirement set 17. Which design …
- For a healthcare SaaS provider, an architect is reviewing multi-account governance requirement set …
- For a partner integration, an architect is reviewing KMS keys requirement set 17. Which design choi…
- For a regulated workload, an architect is reviewing Secrets Manager requirement set 17. Which desig…
- For a public application, an architect is reviewing VPC subnet design requirement set 17. Which des…
- For a cross-account deployment, an architect is reviewing security groups requirement set 17. Which…
- For a data ingestion service, an architect is reviewing network ACLs requirement set 17. Which desi…
- For a healthcare SaaS provider, an architect is reviewing VPC endpoints requirement set 17. Which d…
- For a partner integration, an architect is reviewing S3 bucket policies requirement set 17. Which d…
- For a regulated workload, an architect is reviewing CloudTrail requirement set 17. Which design cho…
- For a public application, an architect is reviewing GuardDuty requirement set 17. Which design choi…
- For a cross-account deployment, an architect is reviewing AWS WAF requirement set 17. Which design …
- For a data ingestion service, an architect is reviewing MFA and federation requirement set 17. Whic…
- For a healthcare SaaS provider, an architect is reviewing IAM least privilege requirement set 18. W…
- For a partner integration, an architect is reviewing IAM roles requirement set 18. Which design cho…
- For a regulated workload, an architect is reviewing multi-account governance requirement set 18. Wh…
- For a public application, an architect is reviewing KMS keys requirement set 18. Which design choic…
- For a cross-account deployment, an architect is reviewing Secrets Manager requirement set 18. Which…
- For a data ingestion service, an architect is reviewing VPC subnet design requirement set 18. Which…
- For a healthcare SaaS provider, an architect is reviewing security groups requirement set 18. Which…
- For a partner integration, an architect is reviewing network ACLs requirement set 18. Which design …
- For a regulated workload, an architect is reviewing VPC endpoints requirement set 18. Which design …
- For a public application, an architect is reviewing S3 bucket policies requirement set 18. Which de…
- For a cross-account deployment, an architect is reviewing CloudTrail requirement set 18. Which desi…
- For a data ingestion service, an architect is reviewing GuardDuty requirement set 18. Which design …
- For a healthcare SaaS provider, an architect is reviewing AWS WAF requirement set 18. Which design …
- For a partner integration, an architect is reviewing MFA and federation requirement set 18. Which d…
- For a regulated workload, an architect is reviewing IAM least privilege requirement set 19. Which d…
- For a public application, an architect is reviewing IAM roles requirement set 19. Which design choi…
- For a cross-account deployment, an architect is reviewing multi-account governance requirement set …
- For a data ingestion service, an architect is reviewing KMS keys requirement set 19. Which design c…
- For a healthcare SaaS provider, an architect is reviewing Secrets Manager requirement set 19. Which…
- For a partner integration, an architect is reviewing VPC subnet design requirement set 19. Which de…
- For a regulated workload, an architect is reviewing security groups requirement set 19. Which desig…
- For a public application, an architect is reviewing network ACLs requirement set 19. Which design c…
- For a cross-account deployment, an architect is reviewing VPC endpoints requirement set 19. Which d…
- For a data ingestion service, an architect is reviewing S3 bucket policies requirement set 19. Whic…
- For a healthcare SaaS provider, an architect is reviewing CloudTrail requirement set 19. Which desi…
View all AWS Certified Solutions Architect - Associate categories