AWS Certified Solutions Architect - Associate

• #261

  A user has launched 10 EC2 instances inside a placement group. Which of the following statements is true in regards to what ability launching your instances into a VPC instead of EC2-Classic gives you?

  • AAll of the things listed here.
  • BChange security group membership for your instances while they're running.
  • CAssign static private IP addresses to your instances that persist across starts and stops.
  • DDefine network interfaces, and attach one or more network interfaces to your instances.
  उत्तर दिखाएँ
• #262

  What does Amazon Cloud Formation provide?

  • AThe ability to setup Autoscaling for Amazon EC2 instances.
  • BNone of these.
  • CA templated resource creation for Amazon Web Services.
  • DA template to map network resources for Amazon Web Services.
  उत्तर दिखाएँ
• #263

  What is the name of licensing model in which I can use your existing Oracle Database licenses to run Oracle deployments on Amazon RDS?

  • ABring Your Own License.
  • BRole Bases License.
  • CEnterprise License.
  • DLicense Included.
  उत्तर दिखाएँ
• #264

  When an EC2 instance that is backed by an S3-based AMI is terminated, what happens to the data on the root volume?

  • AData is automatically saved as an EBS snapshot.
  • BData is automatically saved as an EBS volume.
  • CData is unavailable until the instance is restarted.
  • DData is automatically deleted.
  उत्तर दिखाएँ
• #265

  A customer needs to capture all client connection information from their load balancer every five minutes. The company wants to use this data for analyzing traffic patterns and troubleshooting their applications. Which of the following options meets the customer requirements?

  • AEnable AWS CloudTrail for the load balancer.
  • BEnable access logs on the load balancer.
  • CInstall the Amazon CloudWatch Logs agent on the load balancer.
  • DEnable Amazon CloudWatch metrics on the load balancer.
  उत्तर दिखाएँ
• #266

  A company runs an online marketplace web application on AWS. The application serves hundreds of thousands of users during peak hours. The company needs a scalable, near-real-time solution to share the details of millions of financial transactions with several other internal applications. Transactions also need to be processed to remove sensitive data before being stored in a document database for low-latency retrieval. What should a solutions architect recommend to meet these requirements?

  • AStore the transactions data into Amazon DynamoDB. Set up a rule in DynamoDB to remove sensitive data from every transaction upon write. Use DynamoDB Streams to share the transactions data with other applications.
  • BStream the transactions data into Amazon Kinesis Data Firehose to store data in Amazon DynamoDB and Amazon S3. Use AWS Lambda integration with Kinesis Data Firehose to remove sensitive data. Other applications can consume the data stored in Amazon S3.
  • CStream the transactions data into Amazon Kinesis Data Streams. Use AWS Lambda integration to remove sensitive data from every transaction and then store the transactions data in AmazonDynamoDB. Other applications can consume the transactions data off the Kinesis data stream.
  • DStore the batched transactions data in Amazon S3 as files. Use AWS Lambda to process every file and remove sensitive data before updating the files in Amazon S3. The Lambda function then stores the data in Amazon DynamoDB. Other applications can consume transaction files stored in Amazon S3.
  उत्तर दिखाएँ
• #267

  Can Amazon S3 uploads resume on failure or do they need to restart?

  • ARestart from beginning.
  • BYou can resume them, if you flag the 'resume on fai lure' option before uploading.
  • CResume on failure.
  • DDepends on the file size.
  उत्तर दिखाएँ
• #268

  Amazon Elastic Load Balancing is used to manage traffic on a fleet of Amazon EC2 instances, distributing traffic to instances across all Availability Zones within a region. Elastic Load Balancing has all the advantages of an on-premises load balancer, plus several security benefits. Which of the following is not an advantage of ELB over an on-premise load balancer?

  • AELB uses a four-tier, key-based architecture for encryption.
  • BELB offers clients a single point of contact, and can also serve as the first line of defense against attacks on your network.
  • CELB takes over the encryption and decryption work from the Amazon EC2 instances and manages it centrally on the load balancer.
  • DELB supports end-to-end traffic encryption using TLS (previously SSL) on those networks that use secure HTTP (HTTPS) connections.
  उत्तर दिखाएँ
• #269

  A company hosts its application in the AWS Cloud. The application runs on Amazon EC2 instances behind an Elastic Load Balancer in an Auto Scaling group and with an Amazon DynamoDB table. The company wants to ensure the application can be made available in another AWS Region with minimal downtime. What should a solutions architect do to meet these requirements with the LEAST amount of downtime?

  • ACreate an Auto Scaling group and a load balancer in the disaster recovery Region. Configure the DynamoDB table as a global table. Configure DNS failover to point to the new disaster recovery Region's load balancer.
  • BCreate an AWS CloudFormation template to create EC2 instances, load balancers, and DynamoDB tables to be executed when needed. Configure DNS failover to point to the new disaster recovery Region's load balancer.
  • CCreate an AWS CloudFormation template to create EC2 instances and a load balancer to be executed when needed. Configure the DynamoDB table as a global table. Configure DNS failover to point to the new disaster recovery Region's load balancer.
  • DCreate an Auto Scaling group and load balancer in the disaster recovery Region. Configure the DynamoDB table as a global table. Create an Amazon CloudWatch alarm to trigger and AWS Lambda function that updates Amazon Route 53 pointing to the disaster recovery load balancer.
  उत्तर दिखाएँ
• #270

  You need to set up security for your VPC and you know that Amazon VPC provides two features that you can use to increase security for your VPC: Security groups and network access control lists (ACLs). You start to look into security groups first. Which statement below is incorrect in relation to security groups?

  • AAre stateful: Return traffic is automatically allowed, regardless of any rules.
  • BEvaluate all rules before deciding whether to allow traffic.
  • CSupport allow rules and deny rules.
  • DOperate at the instance level (first layer of defense).
  उत्तर दिखाएँ
• #271

  A solutions architect is using Amazon S3 to design the storage architecture of a new digital media application. The media files must be resilient to the loss of an Availability Zone. Some files are accessed frequently while other files are rarely accessed in an unpredictable pattern. The solutions architect must minimize the costs of storing and retrieving the media files. Which storage option meets these requirements?

  • AS3 Standard.
  • BS3 Intelligent-Tiering.
  • CS3 Standard-Infrequent Access (S3 Standard-IA).
  • DS3 One Zone-Infrequent Access (S3 One Zone-IA).
  उत्तर दिखाएँ
• #272

  When controlling access to Amazon EC2 resources, each Amazon EBS Snapshot has a [...] attribute that controls which AWS accounts can use the snapshot.

  • AcreateVolumePermission.
  • BLaunchPermission.
  • CSharePermission.
  • DRequestPermission.
  उत्तर दिखाएँ
• #273

  The common use cases for DynamoDB Fine-Grained Access Control (FGAC) are cases in which the end user wants [...].

  • Ato change the hash keys of the table directly.
  • Bto check if an IAM policy requires the hash keys of the tables directly.
  • Cto read or modify any code commit key of the table directly, without a middle-tier service.
  • Dto read or modify the table directly, without a middle-tier service.
  उत्तर दिखाएँ
• #274

  An administrator is using Amazon CloudFormation to deploy a three tier web application that consists of a web tier and application tier that will utilize Amazon DynamoDB for storage. When creating the CloudFormation template, which of the following would allow the application instance access to the DynamoDB tables without exposing API credentials?

  • ACreate an Identity and Access Management Role that has the required permissions to read and write from the required DynamoDB table and associate the Role to the application instances by referencing an instance profile.
  • BUse the Parameter section in the Cloud Formation template to have the user input Access and Secret Keys from an already created IAM user that has the permissions required to read and write from the required DynamoDB table.
  • CCreate an Identity and Access Management Role that has the required permissions to read and write from the required DynamoDB table and reference the Role in the instance profile property of the application instance.
  • DCreate an identity and Access Management user in the CloudFormation template that has permissions to read and write from the required DynamoDB table, use the GetAtt function to retrieve the Access and secret keys and pass them to the application instance through user-data.
  उत्तर दिखाएँ
• #275

  Does AWS CloudFormation support Amazon EC2 tagging?

  • AYes, AWS CloudFormation supports Amazon EC2 tagging.
  • BNo, CloudFormation doesn't support any tagging.
  • CNo, it doesn't support Amazon EC2 tagging.
  • DIt depends if the Amazon EC2 tagging has been defined in the template.
  उत्तर दिखाएँ
• #276

  You deployed your company website using Elastic Beanstalk and you enabled log file rotation to S3. An Elastic MapReduce job is periodically analyzing the logs on S3 to build a usage dashboard that you share with your CIO. You recently improved overall performance of the website using CloudFront for dynamic content delivery and your website as the origin. After this architectural change, the usage dashboard shows that the traffic on your website dropped by an order of magnitude. How do you fix your usage dashboard?

  • AEnable CloudFront to deliver access logs to S3 and use them as input of the Elastic MapReduce job.
  • BTurn on Cloud Trail and use trail log tiles on S3 as input of the Elastic MapReduce job.
  • CChange your log collection process to use Cloud Watch ELB metrics as input of the Elastic Map Reduce job.
  • DUse Elastic Beanstalk 'Rebuild Environment' option to update log delivery to the Elastic Map Reduce job.
  • EUse Elastic Beanstalk 'Restart App server(s)' option to update log delivery to the Elastic Map Reduce job.
  उत्तर दिखाएँ
• #277

  Are penetration tests allowed as long as they are limited to the customer's instances?

  • AYes, they are allowed but only for selected regions.
  • BNo, they are never allowed.
  • CYes, they are allowed without any permission.
  • DYes, they are allowed but only with approval.
  उत्तर दिखाएँ
• #278

  Which one of the below doesn't affect Amazon CloudFront billing?

  • ADistribution Type.
  • BData Transfer Out.
  • CDedicated IP SSL Certificates.
  • DRequests.
  उत्तर दिखाएँ
• #279

  Is decreasing the storage size of a DB Instance permitted?

  • ADepends on the ROMS used.
  • BYes.
  • CNo.
  उत्तर दिखाएँ
• #280

  You have been asked to set up a database in AWS that will require frequent and granular updates. You know that you will require a reasonable amount of storage space but are not sure of the best option. What is the recommended storage option when you run a database on an instance with the above criteria?

  • AAmazon S3.
  • BAmazon EBS.
  • CAWS Storage Gateway.
  • DAmazon Glacier.
  उत्तर दिखाएँ

अपना स्कोर ट्रैक करना, समयबद्ध मॉक परीक्षा देना और AI व्याख्या पाना चाहते हैं? निःशुल्क खाता बनाएँ