AWS Certified Solutions Architect - Associate

• #521

  What is a placement group in Amazon EC2?

  • AIt is a group of EC2 instances within a single Availability Zone.
  • BIt the edge location of your web content.
  • CIt is the AWS region where you run the EC2 instance of your web content.
  • DIt is a group used to span multiple Availability Zones.
  Show answer
  💬Discussion
• #522

  Your system recently experienced down time during the troubleshooting process. You found that a new administrator mistakenly terminated several production EC2 instances. Which of the following strategies will help prevent a similar situation in the future? The administrator still must be able to: Launch, start stop, and terminate development resources. Launch and start production instances.

  • ACreate an IAM user, which is not allowed to terminate instances by leveraging production EC2 termination protection.
  • BLeverage resource based tagging along with an IAM user, which can prevent specific users from terminating production EC2 resources.
  • CLeverage EC2 termination protection and multi-factor authentication, which together require users to authenticate before terminating EC2 instances.
  • DCreate an IAM user and apply an IAM role which prevents users from terminating production EC2 instances.
  Show answer
  💬Discussion
• #523

  Can a user get a notification of each instance start / terminate configured with Auto Scaling?

  • AYes, if configured with the Launch Config.
  • BYes, always.
  • CYes, if configured with the Auto Scaling group.
  • DNo.
  Show answer
  💬Discussion
• #524

  Which of the following AWS CLI commands is syntactically incorrect?

  • A$ aws ec2 describe-instances.
  • B$ aws ec2 start-instances --instance-ids i-1348636c.
  • C$ aws sns publish --topic-arn arn:aws:sns:us-east-1:546419318123:OperationsError -message "Script Failure".
  • D$ aws sqs receive-message --queue-url https://queue.amazonaws.com/546419318123/Test.
  Show answer
  💬Discussion
• #525

  Which Amazon storage do you think is the best for my database-style applications that frequently encounter many random reads and writes across the dataset?

  • ANone of these.
  • BAmazon Instance Storage.
  • CAny of these.
  • DAmazon EBS.
  Show answer
  💬Discussion
• #526Choose 3

  You have multiple Amazon EC2 instances running in a cluster across multiple Availability Zones within the same region. What combination of the following should be used to ensure the highest network performance (packets per second), lowest latency, and lowest jitter? (Choose 3 answers)

  • AAmazon EC2 placement groups.
  • BEnhanced networking.
  • CAmazon PV AMI.
  • DAmazon HVM AMI.
  • EAmazon Linux.
  • FAmazon VPC.
  Show answer
  💬Discussion
• #527

  Your department creates regular analytics reports from your company's log files All log data is collected in Amazon S3 and processed by daily Amazon Elastic MapReduce (EMR) jobs that generate daily PDF reports and aggregated tables in CSV format for an Amazon Redshift data warehouse. Which of the following alternatives will lower costs without compromising average performance of the system or data integrity for the raw data?

  • AUse reduced redundancy storage (RRS) for all data in S3. Use a combination of Spot Instances and Reserved Instances for Amazon EMR jobs. Use Reserved Instances for Amazon Redshift.
  • BUse reduced redundancy storage (RRS) for PDF and .csv data in S3. Add Spot Instances to EMR jobs. Use Spot Instances for Amazon Redshift.
  • CUse reduced redundancy storage (RRS) for PDF and .csv data in Amazon S3. Add Spot Instances to Amazon EMR jobs. Use Reserved Instances for Amazon Redshift.
  • DUse reduced redundancy storage (RRS) for all data in Amazon S3. Add Spot Instances to Amazon EMR jobs. Use Reserved Instances for Amazon Redshift.
  Show answer
  💬Discussion
• #528

  A company wants to relocate its on-premises MySQL database to AWS. The database accepts regular imports from a client-facing application, which causes a high volume of write operations. The company is concerned that the amount of traffic might be causing performance issues within the application. How should a solutions architect design the architecture on AWS?

  • AProvision an Amazon RDS for MySQL DB instance with Provisioned IOPS SSD storage. Monitor write operation metrics by using Amazon CloudWatch. Adjust the provisioned IOPS if necessary.
  • BProvision an Amazon RDS for MySQL DB instance with General Purpose SSD storage. Place an Amazon ElastiCache cluster in front of the DB instance. Configure the application to query ElastiCache instead.
  • CProvision an Amazon DocumentDB (with MongoDB compatibility) instance with a memory optimized instance type. Monitor Amazon CloudWatch for performance-related issues. Change the instance class if necessary.
  • DProvision an Amazon Elastic File System (Amazon EFS) file system in General Purpose performance mode. Monitor Amazon CloudWatch for IOPS bottlenecks. Change to Provisioned Throughput performance mode if necessary.
  Show answer
  💬Discussion
• #529

  Security groups act like a firewall at the instance level, whereas [...] are an additional layer of security that act at the subnet level.

  • ADB Security Groups.
  • BVPC Security Groups.
  • Cnetwork ACLs.
  Show answer
  💬Discussion
• #530Choose 2

  You would like to create a mirror image of your production environment in another region for disaster recovery purposes. Which of the following AWS resources do not need to be recreated in the second region? (Choose 2 answers)

  • ARoute 53 Record Sets.
  • BIAM Roles.
  • CElastic IP Addresses (EIP).
  • DEC2 Key Pairs.
  • ELaunch configurations.
  • FSecurity Groups.
  Show answer
  💬Discussion
• #531

  If I write the below command, what does it do? ec2-run ami-e3a5408a -n 20 -g appserver

  • AStart twenty instances as members of appserver group.
  • BCreates 20 rules in the security group named appserver.
  • CTerminate twenty instances as members of appserver group.
  • DStart 20 security groups.
  Show answer
  💬Discussion
• #532

  What are the two permission types used by AWS?

  • AResource-based and Product-based.
  • BProduct-based and Service-based.
  • CService-based.
  • DUser-based and Resource-based.
  Show answer
  💬Discussion
• #533

  A company has migrated a fleet of hundreds of on-premises virtual machines (VMs) to Amazon EC2 instances. The instances run a diverse fleet of Windows Server versions along with several Linux distributions. The company wants a solution that will automate inventory and updates of the operating systems. The company also needs a summary of common vulnerabilities of each instance for regular monthly reviews. What should a solutions architect recommend to meet these requirements?

  • ASet up AWS Systems Manager Patch Manager to manage all the EC2 instances. Configure AWS Security Hub to produce monthly reports.
  • BSet up AWS Systems Manager Patch Manager to manage all the EC2 instances. Deploy Amazon Inspector, and configure monthly reports.
  • CSet up AWS Shield Advanced, and configure monthly reports. Deploy AWS Config to automate patch installations on the EC2 instances.
  • DSet up Amazon GuardDuty in the account to monitor all EC2 instances. Deploy AWS Config to automate patch installations on the EC2 instances.
  Show answer
  💬Discussion
• #534

  What does the AWS Storage Gateway provide?

  • AIt allows to integrate on-premises IT environments with Cloud Storage.
  • BA direct encrypted connection to Amazon S3.
  • CIt's a backup solution that provides an on-premises Cloud storage.
  • DIt provides an encrypted SSL endpoint for backups in the Cloud.
  Show answer
  💬Discussion
• #535

  Company B is launching a new game app for mobile devices. Users will log into the game using their existing social media account to streamline data capture. Company B would like to directly save player data and scoring information from the mobile app to a DynamoDB table named Score Data. When a user saves their game, the progress data will be stored to the Game State S3 bucket. What is the best approach for storing data to DynamoDB and S3?

  • AUse an EC2 Instance that is launched with an EC2 role providing access to the Score Data DynamoDB table and the GameState S3 bucket that communicates with the mobile app via web services.
  • BUse temporary security credentials that assume a role providing access to the Score Data DynamoDB table and the Game State S3 bucket using web identity federation.
  • CUse Login with Amazon allowing users to sign in with an Amazon account providing the mobile app with access to the Score Data DynamoDB table and the Game State S3 bucket.
  • DUse an IAM user with access credentials assigned a role providing access to the Score Data DynamoDB table and the Game State S3 bucket for distribution with the mobile app.
  Show answer
  💬Discussion
• #536Choose 2

  A company runs several Amazon RDS for Oracle On-Demand DB instances that have high utilization. The RDS DB instances run in member accounts that are in an organization in AWS Organizations. The company's finance team has access to the organization's management account and member accounts. The finance team wants to find ways to optimize costs by using AWS Trusted Advisor. Which combination of steps will meet these requirements? (Choose two.)

  • AUse the Trusted Advisor recommendations in the management account.
  • BUse the Trusted Advisor recommendations in the member accounts where the RDS DB instances are running.
  • CReview the Trusted Advisor checks for Amazon RDS Reserved Instance Optimization.
  • DReview the Trusted Advisor checks for Amazon RDS Idle DB Instances.
  • EReview the Trusted Advisor checks for compute optimization. Crosscheck the results by using AWS Compute Optimizer.
  Show answer
  💬Discussion
• #537

  You are tasked with setting up a Linux bastion host for access to Amazon EC2 instances running in your VPC. Only clients connecting from the corporate external public IP address 72.34.51.100 should have SSH access to the host. Which option will meet the customer requirement?

  • ASecurity Group Inbound Rule: Protocol – TCP. Port Range – 22, Source 72.34.51.100/32
  • BPort Range- 22, Source 72.34.51. 100/32.
  • CSecurity Group Inbound Rule: Protocol – UDP, Port Range- 22, Source 72.34.51.100/32.
  • DNetwork ACL Inbound Rule: Protocol – UDP, Port Range- 22, Source 72.34.51.100/32.
  • ENetwork ACL Inbound Rule: Protocol – TCP, Port Range-22, Source 72.34.51.100/0.
  Show answer
  💬Discussion
• #538

  While creating a network in the VPC, which of the following is true of a NAT device?

  • AYou have to administer the NAT Gateway Service provided by AW
  • BYou can choose to use any of the three kinds of NAT devices offered by AWS for special purposes.
  • CYou can use a NAT device to enable instances in a private subnet to connect to the Internet.
  • DYou are recommended to use AWS NAT instances over NAT gateways, as the instances provide better availability and bandwidth.
  Show answer
  💬Discussion
• #539Choose 2

  Which of the following notification endpoints or clients are supported by Amazon Simple Notification Service? (Choose 2 answers)

  • AEmail.
  • BCloudFront distribution.
  • CFile Transfer Protocol.
  • DShort Message Service.
  • ESimple Network Management Protocol.
  Show answer
  💬Discussion
• #540

  True or False: Without IAM, you cannot control the tasks a particular user or system can do and what AWS resources they might use.

  • ATrue.
  • BFalse.
  Show answer
  💬Discussion

Want to track your score, take timed mock exams and get AI explanations? Create a free account