AWS Certified Solutions Architect - Associate

• #541

  Are you able to integrate a multi-factor token service with the AWS Platform?

  • AYes, you can integrate private multi-factor token devices to authenticate users to the AWS platform.
  • BNo, you cannot integrate multi-factor token devices with the AWS platform.
  • CYes, using the AWS multi-factor token devices to authenticate users on the AWS platform.
  उत्तर दिखाएँ
  💬चर्चा
• #542

  You run an ad-supported photo sharing website using Amazon S3 to serve photos to visitors of your site. At some point you find out that other sites have been linking to the photos on your site, causing loss to your business. What is an effective method to mitigate this?

  • ARemove public read access and use signed URLs with expiry dates.
  • BUse CloudFront distributions for static content.
  • CBlock the IPs of the offending websites in Security Groups.
  • DStore photos on an EBS volume of the web server.
  उत्तर दिखाएँ
  💬चर्चा
• #543

  In the context of AWS support, why must an EC2 instance be unreachable for 20 minutes rather than allowing customers to open tickets immediately?

  • ABecause most reachability issues are resolved by automated processes in less than 20 minutes.
  • BBecause all EC2 instances are unreachable for 20 minutes every day when AWS does routine maintenance.
  • CBecause all EC2 instances are unreachable for 20 minutes when first launched.
  • DBecause of all the reasons listed here.
  उत्तर दिखाएँ
  💬चर्चा
• #544

  How are the EBS snapshots saved on Amazon S3?

  • AExponentially.
  • BIncrementally.
  • CEBS snapshots are not stored in the Amazon S3.
  • DDecrementally.
  उत्तर दिखाएँ
  💬चर्चा
• #5452 चुनें

  Which services allow the customer to retain full administrative privileges of the underlying EC2 instances? (Choose 2 answers)

  • AAmazon Relational Database Service.
  • BAmazon Elastic MapReduce.
  • CAmazon ElastiCache.
  • DAmazon DynamoDB.
  • EAWS Elastic Beanstalk.
  उत्तर दिखाएँ
  💬चर्चा
• #546

  True or False: The new DB Instance that is created when you promote a Read Replica retains the backup window period.

  • ATrue.
  • BFalse.
  उत्तर दिखाएँ
  💬चर्चा
• #547

  You decide that you need to create a number of Auto Scaling groups to try and save some money as you have noticed that at certain times most of your EC2 instances are not being used. By default, what is the maximum number of Auto Scaling groups that AWS will allow you to create?

  • A12.
  • BUnlimited.
  • C20.
  • D2.
  उत्तर दिखाएँ
  💬चर्चा
• #548

  A company is planning to run a group of Amazon EC2 instances that connect to an Amazon Aurora database. The company has built an AWS CloudFormation template to deploy the EC2 instances and the Aurora DB cluster. The company wants to allow the instances to authenticate to the database in a secure way. The company does not want to maintain static database credentials. Which solution meets these requirements with the LEAST operational effort?

  • ACreate a database user with a user name and password. Add parameters for the database user name and password to the CloudFormation template. Pass the parameters to the EC2 instances when the instances are launched.
  • BCreate a database user with a user name and password. Store the user name and password in AWS Systems Manager Parameter Store. Configure the EC2 instances to retrieve the database credentials from Parameter Store.
  • CConfigure the DB cluster to use IAM database authentication. Create a database user to use with IAM authentication. Associate a role with the EC2 instances to allow applications on the instances to access the database.
  • DConfigure the DB cluster to use IAM database authentication with an IAM user. Create a database user that has a name that matches the IAM user. Associate the IAM user with the EC2 instances to allow applications on the instances to access the database.
  उत्तर दिखाएँ
  💬चर्चा
• #5492 चुनें

  You are designing an intrusion detection prevention (IDS/IPS) solution for a customer web application in a single VPC. You are considering the options for implementing IOS IPS protection for traffic coming from the Internet. Which of the following options would you consider? (Choose 2 answers)

  • AImplement IDS/IPS agents on each Instance running in VPC.
  • BConfigure an instance in each subnet to switch its network interface card to promiscuous mode and analyze network traffic.
  • CImplement Elastic Load Balancing with SSL listeners in front of the web applications.
  • DImplement a reverse proxy layer in front of web servers and configure IDS/ IPS agents on each reverse proxy server.
  उत्तर दिखाएँ
  💬चर्चा
• #550

  Which of the following is NOT a characteristic of Amazon Elastic Compute Cloud (Amazon EC2)?

  • AIt can be used to launch as many or as few virtual servers as you need.
  • BIt increases the need to forecast traffic by providing dynamic IP addresses for static cloud computing.
  • CIt eliminates your need to invest in hardware up front, so you can develop and deploy applications faster.
  • DIt offers scalable computing capacity in the Amazon Web Services (AWS) cloud.
  उत्तर दिखाएँ
  💬चर्चा
• #551

  A company uses AWS Organizations to create dedicated AWS accounts for each business unit to manage each business unit's account independently upon request. The root email recipient missed a notification that was sent to the root user email address of one account. The company wants to ensure that all future notifications are not missed. Future notifications must be limited to account administrators. Which solution will meet these requirements?

  • AConfigure the company's email server to forward notification email messages that are sent to the AWS account root user email address to all users in the organization.
  • BConfigure all AWS account root user email addresses as distribution lists that go to a few administrators who can respond to alerts. Configure AWS account alternate contacts in the AWS Organizations console or programmatically.
  • CConfigure all AWS account root user email messages to be sent to one administrator who is responsible for monitoring alerts and forwarding those alerts to the appropriate groups.
  • DConfigure all existing AWS accounts and all newly created accounts to use the same root user email address. Configure AWS account alternate contacts in the AWS Organizations console or programmatically.
  उत्तर दिखाएँ
  💬चर्चा
• #552

  A company has two AWS accounts: Production and Development. There are code changes ready in the Development account to push to the Production account. In the alpha phase, only two senior developers on the development team need access to the Production account. In the beta phase, more developers might need access to perform testing as well. What should a solutions architect recommend?

  • ACreate two policy documents using the AWS Management Console in each account. Assign the policy to developers who need access.
  • BCreate an IAM role in the Development account. Give one IAM role access to the Production account. Allow developers to assume the role.
  • CCreate an IAM role in the Production account with the trust policy that specifies the Development account. Allow developers to assume the role.
  • DCreate an IAM group in the Production account and add it as a principal in the trust policy that specifies the Production account. Add developers to the group.
  उत्तर दिखाएँ
  💬चर्चा
• #553

  Your company has multiple IT departments, each with their own VPC. Some VPCs are located within the same AWS account, and others in a different AWS account. You want to peer together all VPCs to enable the IT departments to have full access to each others' resources. There are certain limitations placed on VPC peering. Which of the following statements is incorrect in relation to VPC peering?

  • APrivate DNS values cannot be resolved between instances in peered VPCs.
  • BYou can have up to 3 VPC peering connections between the same two VPCs at the same time.
  • CYou cannot create a VPC peering connection between VPCs in different regions.
  • DYou have a limit on the number active and pending VPC peering connections that you can have per VP.
  उत्तर दिखाएँ
  💬चर्चा
• #554

  Disabling automated backups [...] disable the point-in-time recovery.

  • Aif configured to can.
  • Bwill never.
  • Cwill.
  उत्तर दिखाएँ
  💬चर्चा
• #555

  A large company wants to provide its globally located developers separate, limited size, managed PostgreSQL databases for development purposes. The databases will be low volume. The developers need the databases only when they are actively working. Which solution will meet these requirements MOST cost-effectively?

  • AGive the developers the ability to launch separate Amazon Aurora instances. Set up a process to shut down Aurora instances at the end of the workday and to start Aurora instances at the beginning of the next workday.
  • BDevelop an AWS Service Catalog product that enforces size restrictions for launching Amazon Aurora instances. Give the developers access to launch the product when they need a development database.
  • CCreate an Amazon Aurora Serverless cluster. Develop an AWS Service Catalog product to launch databases in the cluster with the default capacity settings. Grant the developers access to the product.
  • DMonitor AWS Trusted Advisor checks for idle Amazon RDS databases. Create a process to terminate identified idle RDS databases.
  उत्तर दिखाएँ
  💬चर्चा
• #556

  Every user you create in the IAM system starts with [...].

  • Apartial permissions.
  • Bfull permissions.
  • Cno permissions.
  उत्तर दिखाएँ
  💬चर्चा
• #557

  Regarding the attaching of ENI to an instance, what does 'warm attach' refer to?

  • AAttaching an ENI to an instance when it is stopped.
  • BThis question doesn't make sense.
  • CAttaching an ENI to an instance when it is running.
  • DAttaching an ENI to an instance during the launch process.
  उत्तर दिखाएँ
  💬चर्चा
• #558

  A company plans to rehost an application to Amazon EC2 instances that use Amazon Elastic Block Store (Amazon EBS) as the attached storage. A solutions architect must design a solution to ensure that all newly created Amazon EBS volumes are encrypted by default. The solution must also prevent the creation of unencrypted EBS volumes. Which solution will meet these requirements?

  • AConfigure the EC2 account attributes to always encrypt new EBS volumes.
  • BUse AWS Config. Configure the encrypted-volumes identifier. Apply the default AWS Key Management Service (AWS KMS) key.
  • CConfigure AWS Systems Manager to create encrypted copies of the EBS volumes. Reconfigure the EC2 instances to use the encrypted volumes.
  • DCreate a customer managed key in AWS Key Management Service (AWS KMS). Configure AWS Migration Hub to use the key when the company migrates workloads.
  उत्तर दिखाएँ
  💬चर्चा
• #559

  An International company has deployed a multi-tier web application that relies on DynamoDB in a single region. For regulatory reasons they need disaster recovery capability in a separate region with a Recovery Time Objective of 2 hours and a Recovery Point Objective of 24 hours. They should synchronize their data on a regular basis and be able to provision the web application rapidly using CloudFormation. The objective is to minimize changes to the existing web application, control the throughput of DynamoDB used for the synchronization of data and synchronize only the modified elements. Which design would you choose to meet these requirements?

  • AUse AWS data Pipeline to schedule a DynamoDB cross region copy once a day. Create a 'Last updated' attribute in your DynamoDB table that would represent the timestamp of the last update and use it as a filter.
  • BUse EMR and write a custom script to retrieve data from DynamoDB in the current region using a SCAN operation and push it to DynamoDB in the second region.
  • CUse AWS data Pipeline to schedule an export of the DynamoDB table to S3 in the current region once a day, then schedule another task immediately after it that will import data from S3 to DynamoDB in the other region.
  • DSend also each item into an SQS queue in the second region; use an auto-scaling group behind the SQS queue to replay the write in the second region.
  उत्तर दिखाएँ
  💬चर्चा
• #560

  What is the type of monitoring data (for Amazon EBS volumes) which is available automatically in 5- minute periods at no charge called?

  • ABasic.
  • BPrimary.
  • CDetailed.
  • DLocal.
  उत्तर दिखाएँ
  💬चर्चा

अपना स्कोर ट्रैक करना, समयबद्ध मॉक परीक्षा देना और AI व्याख्या पाना चाहते हैं? निःशुल्क खाता बनाएँ