AWS Certified Solutions Architect - Associate

• #321Choose 2

  A company needs to monitor the read and write IOPs metrics for their AWS MySQL RDS instance and send real-time alerts to their operations team. Which AWS services can accomplish this? (Choose 2 answers)

  • AAmazon Simple Email Service.
  • BAmazon CloudWatch.
  • CAmazon Simple Queue Service.
  • DAmazon Route 53.
  • EAmazon Simple Notification Service.
  Show answer
• #322

  A company's web application consists of multiple Amazon EC2 instances that run behind an Application Load Balancer in a VPC. An Amazon RDS for MySQL DB instance contains the data. The company needs the ability to automatically detect and respond to suspicious or unexpected behavior in its AWS environment. The company already has added AWS WAF to its architecture. What should a solutions architect do next to protect against threats?

  • AUse Amazon GuardDuty to perform threat detection. Configure Amazon EventBridge (Amazon CloudWatch Events) to filter for GuardDuty findings and to invoke an AWS Lambda function to adjust the AWS WAF rules.
  • BUse AWS Firewall Manager to perform threat detection. Configure Amazon EventBridge (Amazon CloudWatch Events) to filter for Firewall Manager findings and to invoke an AWS Lambda function to adjust the AWS WAF web ACL.
  • CUse Amazon Inspector to perform threat detection and to update the AWS WAF rules. Create a VPC network ACL to limit access to the web application.
  • DUse Amazon Macie to perform threat detection and to update the AWS WAF rules. Create a VPC network ACL to limit access to the web application.
  Show answer
• #323

  After moving an E-Commerce website for a client from a dedicated server to AWS you have also set up auto scaling to perform health checks on the instances in your group and replace instances that fail these checks. Your client has come to you with his own health check system that he wants you to use as it has proved to be very useful prior to his site running on AWS. What do you think would be an appropriate response to this given all that you know about auto scaling?

  • AIt is not possible to implement your own health check system. You need to use AWSs health check system.
  • BIt is not possible to implement your own health check system due to compatibility issues.
  • CIt is possible to implement your own health check system and then send the instance's health information directly from your system to Cloud Watch.
  • DIt is possible to implement your own health check system and then send the instance's health information directly from your system to Cloud Watch but only in the US East (Virginia) region.
  Show answer
• #324

  A global company runs its workloads on AWS. The company's application uses Amazon S3 buckets across AWS Regions for sensitive data storage and analysis. The company stores millions of objects in multiple S3 buckets daily. The company wants to identify all S3 buckets that are not versioning-enabled. Which solution will meet these requirements?

  • AUse AWS Config managed rule to identify S3 bucket that is not version controlled
  • BUse Amazon S3 Storage Lens to identify all S3 buckets that are not versioning-enabled across Regions.
  • CEnable IAM Access Analyzer for S3 to identify all S3 buckets that are not versioning-enabled across Regions.
  • DCreate an S3 Multi-Region Access Point to identify all S3 buckets that are not versioning-enabled across Regions.
  Show answer
• #325

  Name the disk storage supported by Amazon Elastic Compute Cloud (EC2)

  • ANone of these.
  • BAmazon AppStream store.
  • CAmazon SNS store.
  • DAmazon Instance Store.
  Show answer
• #326

  You need to pass a custom script to new Amazon Linux instances created in your Auto Scaling group. Which feature allows you to accomplish this?

  • AUser data.
  • BEC2Config service.
  • CIAM roles.
  • DAWS Config.
  Show answer
• #327

  A company has a production workload that runs on 1,000 Amazon EC2 Linux instances. The workload is powered by third-party software. The company needs to patch the third-party software on all EC2 instances as quickly as possible to remediate a critical security vulnerability. What should a solutions architect do to meet these requirements?

  • ACreate an AWS Lambda function to apply the patch to all EC2 instances.
  • BConfigure AWS Systems Manager Patch Manager to apply the patch to all EC2 instances.
  • CSchedule an AWS Systems Manager maintenance window to apply the patch to all EC2 instances.
  • DUse AWS Systems Manager Run Command to run a custom command that applies the patch to all EC2 instances.
  Show answer
• #328

  Is there a limit to how many groups a user can be in?

  • AYes for all users.
  • BYes for all users except root.
  • CNo.
  • DYes unless special permission granted.
  Show answer
• #329

  You are architecting an auto-scalable batch processing system using video processing pipelines and Amazon Simple Queue Service (Amazon SQS) for a customer. You are unsure of the limitations of SQS and need to find out. What do you think is a correct statement about the limitations of Amazon SQS?

  • AIt supports an unlimited number of queues but a limited number of messages per queue for each user but automatically deletes messages that have been in the queue for more than 4 weeks.
  • BIt supports an unlimited number of queues and unlimited number of messages per queue for each user but automatically deletes messages that have been in the queue for more than 4 days.
  • CIt supports an unlimited number of queues but a limited number of messages per queue for each user but automatically deletes messages that have been in the queue for more than 4 days.
  • DIt supports an unlimited number of queues and unlimited number of messages per queue for each user but automatically deletes messages that have been in the queue for more than 4 weeks.
  Show answer
• #330

  Can a 'user' be associated with multiple AWS accounts?

  • AYes.
  • BNo.
  Show answer
• #331

  While creating the snapshots using the command line tools, which command should I be using?

  • Aec2-deploy-snapshot.
  • Bec2-fresh-snapshot.
  • Cec2-create-snapshot.
  • Dec2-new-snapshot.
  Show answer
• #332

  Do Amazon EBS volumes persist independently from the running life of an Amazon EC2 instance?

  • AYes, they do but only if they are detached from the instance.
  • BNo, you cannot attach EBS volumes to an instance.
  • CNo, they are dependent.
  • DYes, they do.
  Show answer
• #333Choose 3

  Your fortune 500 company has undertaken a TCO analysis evaluating the use of Amazon S3 versus acquiring more hardware. The outcome was that all employees would be granted access to use Amazon S3 for storage of their personal documents. Which of the following will you need to consider so you can set up a solution that incorporates single sign-on from your corporate AD or LDAP directory and restricts access for each user to a designated user folder in a bucket? (Choose 3 answers)

  • ASetting up a federation proxy or identity provider.
  • BUsing AWS Security Token Service to generate temporary tokens.
  • CTagging each folder in the bucket.
  • DConfiguring IAM role.
  • ESetting up a matching IAM user for every user in your corporate directory that needs access to a folder in the bucket.
  Show answer
• #334

  Prior to the introduction of this function, the HA feature provided redundancy and performance, but required that a failed/lost group member be [...] reinstated.

  • Aautomatically.
  • Bperiodically.
  • Cmanually.
  • Dcontinuously.
  Show answer
• #335

  You are building a solution for a customer to extend their on-premises data center to AWS. The customer requires a 50-Mbps dedicated and private connection to their VPC. Which AWS product or feature satisfies this requirement?

  • AAmazon VPC peering.
  • BElastic IP Addresses.
  • CAWS Direct Connect.
  • DAmazon VPC virtual private gateway.
  Show answer
• #336

  A user has created an ELB with Auto Scaling. Which of the below mentioned offerings from ELB helps the user to stop sending new requests traffic from the load balancer to the EC2 instance when the instance is being deregistered while continuing in-flight requests?

  • AELB sticky session.
  • BELB deregistration check.
  • CELB auto registration Off.
  • DELB connection draining.
  Show answer
• #337

  What is the durability of S3 RRS?

  • A99.99%.
  • B99.95%.
  • C99.995%.
  • D99.999999999%.
  Show answer
• #338

  Which of the following approaches provides the lowest cost for Amazon Elastic Block Store snapshots while giving you the ability to fully restore data?

  • AMaintain two snapshots: the original snapshot and the latest incremental snapshot.
  • BMaintain a volume snapshot; subsequent snapshots will overwrite one another
  • CMaintain a single snapshot the latest snapshot is both Incremental and complete.
  • DMaintain the most current snapshot, archive the original and incremental to Amazon Glacier.
  Show answer
• #339

  Which of the following statements is true regarding attaching network interfaces to your instances in your VPC?

  • AYou can attach 5 ENIs per instance type.
  • BYou can attach as many ENIs as you want.
  • CThe number of ENIs you can attach varies by instance type.
  • DYou can attach 100 ENIs total regardless of instance type.
  Show answer
• #340

  A major client who has been spending a lot of money on his internet service provider asks you to set up an AWS Direct Connection to try and save him some money. You know he needs high-speed connectivity. Which connection port speeds are available on AWS Direct Connect?

  • A500Mbps and 1Gbps.
  • B1Gbps and 10Gbps.
  • C100Mbps and 1Gbps.
  • D1Gbps.
  Show answer

Want to track your score, take timed mock exams and get AI explanations? Create a free account