AWS Certified Solutions Architect - Associate

• #241

  A company is running an SMB file server in its data center. The file server stores large files that are accessed frequently for the first few days after the files are created. After 7 days the files are rarely accessed. The total data size is increasing and is close to the company's total storage capacity. A solutions architect must increase the company's available storage space without losing low-latency access to the most recently accessed files. The solutions architect must also provide file lifecycle management to avoid future storage issues. Which solution will meet these requirements?

  • AUse AWS DataSync to copy data that is older than 7 days from the SMB file server to AWS.
  • BCreate an Amazon S3 File Gateway to extend the company's storage space. Create an S3 Lifecycle policy to transition the data to S3 Glacier Deep Archive after 7 days.
  • CCreate an Amazon FSx for Windows File Server file system to extend the company's storage space.
  • DInstall a utility on each user's computer to access Amazon S3. Create an S3 Lifecycle policy to transition the data to S3 Glacier Flexible Retrieval after 7 days.
  उत्तर दिखाएँ
• #242

  What will be the status of the snapshot until the snapshot is complete?

  • ARunning.
  • BWorking.
  • CProgressing.
  • DPending.
  उत्तर दिखाएँ
• #243

  In Amazon EC2, partial instance-hours are billed [...].

  • Aper second used in the hour.
  • Bper minute used.
  • Cby combining partial segments into full hours.
  • Das full hours.
  उत्तर दिखाएँ
• #244

  You are running PostgreSQL on Amazon RDS and it seems to be all running smoothly deployed in one Availability Zone. A database administrator asks you if DB instances running PostgreSQL support Multi-AZ deployments. What would be a correct response to this question?

  • AYes.
  • BYes but only for small db instances.
  • CNo.
  • DYes but you need to request the service from AWS.
  उत्तर दिखाएँ
• #245

  You have created a Route 53 latency record set from your domain to a machine in Northern Virginia and a similar record to a machine in Sydney. When a user located in US visits your domain he will be routed to

  • ANorthern Virginia.
  • BSydney.
  • CBoth, Northern Virginia and Sydney.
  • DDepends on the Weighted Resource Record Sets.
  उत्तर दिखाएँ
• #246

  A customer has a single 3-TB volume on-premises that is used to hold a large repository of images and print layout files. This repository is growing at 500 GB a year and must be presented as a single logical volume. The customer is becoming increasingly constrained with their local storage capacity and wants an off-site backup of this data, while maintaining low-latency access to their frequently accessed data. Which AWS Storage Gateway configuration meets the customer requirements?

  • AGateway-Cached volumes with snapshots scheduled to Amazon S3.
  • BGateway-Stored volumes with snapshots scheduled to Amazon S3.
  • CGateway-Virtual Tape Library with snapshots to Amazon S3.
  • DGateway-Virtual Tape Library with snapshots to Amazon Glacier.
  उत्तर दिखाएँ
• #247

  True or False: When you view the block device mapping for your instance, you can see only the EBS volumes, not the instance store volumes.

  • ADepends on the instance type.
  • BFalse.
  • CDepends on whether you use API call.
  • DTrue.
  उत्तर दिखाएँ
• #248

  If you are using Amazon RDS Provisioned IOPS storage with MySQL and Oracle database engines, you can scale the throughput of your database Instance by specifying the IOPS rate from [...].

  • A1,000 to 100,000.
  • B100 to 1,000.
  • C10,000 to 100,000.
  • D1,000 to 10,000.
  उत्तर दिखाएँ
• #249

  In Amazon EC2 Container Service components, what is the name of a logical grouping of container instances on which you can place tasks?

  • AA cluster.
  • BA container instance.
  • CA container.
  • DA task definition.
  उत्तर दिखाएँ
• #250

  In Amazon EC2, while sharing an Amazon EBS snapshot, can the snapshots with AWS Marketplace product codes be public?

  • AYes, but only for US-based providers.
  • BYes, they can be public.
  • CNo, they cannot be made public.
  • DYes, they are automatically made public by the system.
  उत्तर दिखाएँ
• #251

  You are running a successful multitier web application on AWS and your marketing department has asked you to add a reporting tier to the application. The reporting tier will aggregate and publish status reports every 30 minutes from user-generated information that is being stored in your web application s database. You are currently running a Multi-AZ RDS MySQL instance for the database tier. You also have implemented Elasticache as a database caching layer between the application tier and database tier. Please select the answer that will allow you to successful ly implement the reporting tier with as little impact as possible to your database.

  • AContinually send transaction logs from your master database to an S3 bucket and generate the reports off the S3 bucket using S3 byte range requests.
  • BGenerate the reports by querying the synchronously replicated standby RDS MySQL instance maintained through Multi-AZ.
  • CLaunch a RDS Read Replica connected to your Multi-AZ master database and generate reports by querying the Read Replica.
  • DGenerate the reports by querying the ElastiCache database caching tier.
  उत्तर दिखाएँ
• #252

  You have a lot of data stored in the AWS Storage Gateway and your manager has come to you asking about how the billing is calculated, specifically the Virtual Tape Shelf usage. What would be a correct response to this?

  • AYou are billed for the virtual tape data you store in Amazon Glacier and are billed for the size of the virtual tape.
  • BYou are billed for the virtual tape data you store in Amazon Glacier and billed for the portion of virtual tape capacity that you use, not for the size of the virtual tape.
  • CYou are billed for the virtual tape data you store in Amazon S3 and billed for the portion of virtual tape capacity that you use, not for the size of the virtual tape.
  • DYou are billed for the virtual tape data you store in Amazon S3 and are billed for the size of the virtual tape.
  उत्तर दिखाएँ
• #253

  You have some very sensitive data stored on AWS S3 and want to try every possible alternative to keeping it secure in regards to access control. What are the mechanisms available for access control on AWS S3?

  • A(IAM) policies, Access Control Lists (ACLs), bucket policies, and query string authentication.
  • B(IAM) policies, Access Control Lists (ACLs) and bucket policies.
  • CAccess Control Lists (ACLs), bucket policies, and query string authentication.
  • D(IAM) policies, Access Control Lists (ACLs), bucket policies, query string authentication and encryption.
  उत्तर दिखाएँ
• #254

  An instance is launched into a VPC subnet with the network ACL configured to allow all inbound traffic and deny all outbound traffic. The instance's security group is configured to allow SSH from any IP address and deny all outbound traffic. What changes need to be made to allow SSH access to the instance?

  • AThe outbound security group needs to be modified to allow outbound traffic.
  • BThe outbound network ACL needs to be modified to allow outbound traffic.
  • CNothing, it can be accessed from any IP address using S3.
  • DBoth the outbound security group and outbound network ACL need to be modified to allow outbound traffic.
  उत्तर दिखाएँ
• #255

  If your DB instance runs out of storage space or file system resources, its status will change to [...] and your DB Instance will no longer be available.

  • Astorage-overflow.
  • Bstorage-full.
  • Cstorage-exceed.
  • Dstorage-overage.
  उत्तर दिखाएँ
• #256

  A company has an AWS account that contains three VPCs (Dev, Test, and Prod) in the same region. Test is peered to both Prod and Dev. All VPCs have non-overlapping CIDR blocks. The company wants to push minor code releases from Dev to Prod to speed up time to market. Which of the following options helps the company accomplish this?

  • ACreate a new peering connection Between Prod and Dev along with appropriate routes.
  • BCreate a new entry to Prod in the Dev route table using the peering connection as the target.
  • CAttach a second gateway to Dev. Add a new entry in the Prod route table identifying the gateway as the target.
  • DThe VPCs have non-overlapping Cl DR blocks in the same account. The route tables contain local routes for all VPCs.
  उत्तर दिखाएँ
• #257

  A government client needs you to set up secure cryptographic key storage for some of their extremely confidential data. You decide that the AWS CloudHSM is the best service for this. However, there seem to be a few pre-requisites before this can happen, one of those being a security group that has certain ports open. Which of the following is correct in regards to those security groups?

  • AA security group that has port 22 (for SSH) or port 3389 (for RDP) open to your network.
  • BA security group that has no ports open to your network.
  • CA security group that has only port 3389 (for RDP) open to your network.
  • DA security group that has only port 22 (for SSH) open to your network.
  उत्तर दिखाएँ
• #258

  Can you create IAM security credentials for existing users?

  • AYes, existing users can have security credentials associated with their account.
  • BNo, IAM requires that all users who have credentials set up are not existing users.
  • CNo, security credentials are created within GROUPS, and then users are associated to GROUPS at a later time.
  • DYes, but only IAM credentials, not ordinary security credentials.
  उत्तर दिखाएँ
• #259

  If I want my instance to run on a single-tenant hardware, which value do I have to set the instance's tenancy attribute to?

  • ADedicated.
  • BIsolated.
  • COne.
  • DReserved.
  उत्तर दिखाएँ
• #260

  Select a true statement about Amazon EC2 Security Groups (EC2-Classic).

  • AAfter you launch an instance in EC2-Classic, you can't change its security groups.
  • BAfter you launch an instance in EC2-Classic, you can change its security groups only once.
  • CAfter you launch an instance in EC2-Classic, you can only add rules to a security group.
  • DAfter you launch an instance in EC2-Classic, you cannot add or remove rules from a security group.
  उत्तर दिखाएँ

अपना स्कोर ट्रैक करना, समयबद्ध मॉक परीक्षा देना और AI व्याख्या पाना चाहते हैं? निःशुल्क खाता बनाएँ