Font size
WorksheetsAISS_AWS-SA_Practice-Exam_Whizlabs
Total questions: 52
Worksheet time: 2hrs 30mins
You create a new VPC and you want to deploy your first instance in your public subnet. You are sure that you have already modified the routing table for your public subnet to have a route to IGW. Unfortunately, after launching your EC2 instance, you can’t reach the internet. You notice that you don’t have a Public IP address. What might be the cause of the problem?
You don’t have an IGW attached to your VPC that’s why it doesn’t have public IP
You don’t specify the subnet to have default Public IP assignment
You used a Private AMI in launching EC2 instance
It would really don’t have a Public IP since you don’t configure Elastic IP
You have 4 subnets created in you VPC. Two subnets for Availability zone A and two subnets for Availability zone B.
Subnet-1 is on availability zone A along with subnet-2.
Subnet-3 and subnet-4 is on Availability Zone B.
You want subnet-1 to be inaccessible for other subnets. What would be the least thing to do.
Remove the route going to subnet-1 from other subnet’s routing table
Remove the route to Subnet -2 going to Subnet-1
Deny Access going to Subnet-1 via Security Group
Deny Access going to Subnet-1 via NACLs
Redeploy Subnet-2 to another Availability Zone
You have an EC2 instance in your newly created VPC. You want your instance to be deployed in the private subnet, but you need an internet access for the Instance. You don’t want your subnet to have a direct route to IGW. Knowing the capability of NATGW, you decide to deploy a NATGW and assign a route going to NATGW from your private subnet’s routing table. After provisioning successfully, when you check your instance, you still don’t have an internet Access. What might be the possible solution?
You still need to attach IGW to your VPC
You should deploy your NATGW in the private subnet along with your instance
You didn’t specify port 80 and 443 to your NATGW security group
You have to assign EIP for your NATGW after provisioning.
You are planning to build a fleet of EBS-optimized EC2 instances for your new application. Due to security compliance, your organization wants you to encrypt root volume which is used to boot the instances. How can this be achieved?
Select Encryption option for the root EBS volume while launching EC2 instance.
Once the EC2 instances are launched, encrypt the root volume using AWS KMS Master Key.
Root volumes cannot be encrypted. Add another EBS volume with encryption option selected during launch. Once EC2 instances are launched, make encrypted EBS volume as root volume through the console.
Launch an unencrypted EC2 instance and create a snapshot of the root volume. Make a copy of the snapshot with the encryption option selected and CreateImage using encrypted snapshot. Use this image to launch EC2 instances.
Organization XYZ is planning to build an online chat application for their enterprise level collaboration for their employees across the world. They are looking for a single digit latency fully managed database to store and retrieve conversations. What would AWS Database service you recommend?
AWS DynamoDB
AWS RDS
AWS Redshift
AWS Aurora
When creating an AWS CloudFront distribution, which of the following is not an origin?
Elastic Load Balancer
AWS S3 bucket
AWS EC2 Instance
AWS Lambda
Which of the following statements are true with respect to VPC? (choose multiple)
A subnet can have multiple route tables associated with it.
A network ACL can be associated with multiple subnets.
A route with target “local” on the route table can be edited to restrict traffic within VPC.
Subnet’s IP CIDR block can be same as the VPC CIDR block.
Subnet from one Availability Zone can use NATGW in other Availability zone
Two departments A and B have been added into a consolidated billing organization. Department A has 5 reserved RDS instances with DB Engine as MySQL. During a particular hour, department A used three DB Instances and department B used two RDS instances, for a total of 5 DB Instances on the consolidated bill. How should the RDS instances in department B be configured so that all five instances are charged as Reserved DB Instances?
Department B should launch DB instances in the same availability zone as a Reserved Instance in department A.
The DB engine in Department B should be MySQL.
The DB Instance Class should be the same in both departments such as m1.large.
The deployment type such as Multi-AZ should be the same in both department A and department B.
All of the above are needed.
(From Whizlabs sample exam)
As an AWS specialist, you are in charge of configuring consolidated billing in a multinational IT company. In the linked accounts, users have set up AWS resources using a tag called Department, which is used to differentiate resources. There are some other user-created tags such as Phase, CICD, Trial, etc. In the cost allocation report, you only want to filter it using the tag of Department and other tags are excluded in the report. How should you implement this so that the cost report is properly set up?
In the Cost Allocation Tags console of master account, select the Department tag in the User-Defined Cost Allocation Tags area and activate it. The tag starts appearing on the cost allocation report after it is applied but does not appear on earlier reports.
In the Cost Explorer console of master account, deactivate all the other tags except the Department tag in the User-Defined Cost Allocation Tags area. By default, all user-defined tags are activated.
In the Cost Explorer console of master account, select the Department tag in the User-Defined Cost Allocation Tags area and activate it. Make sure that other tags are inactive at the same time.
In the Cost Allocation Tags console of master account and linked accounts, select the Department tag in the User-Defined Cost Allocation Tags area and activate it. The tag starts appearing on the cost allocation report after it is applied and also appears on earlier reports after 1 hour.
(From Whizlabs sample exam)
You are an AWS solutions architect and are in charge of the maintenance of an RDS on VMware database which is deployed on-premise. You have created a read replica in ap-south-1 region to share some read traffic. The system has run smoothly for a while then the company decides to migrate all the products to AWS including the on-premise RDS instance. Other than that, the instance needs to have another replica in another region ap-southeast-1. What actions should you take to fulfill this requirement?
Use Data Migration Service to migrate the on-premise database to a RDS instance in AWS. Create a read replica in ap-southeast-1 region afterwards.
In RDS console, click “migrating the instance” to create a new RDS instance. Then create a new read replica in the ap-southeast-1 region.
Create another read replica in ap-southeast-1 region to share the read traffic for the RDS instance on VMware. Promote the RDS read replica in ap-south-1 to be the new RDS instance so that the original on-premise database is migrated in AWS with a replica in ap-southeast-1.
Promote the RDS read replica in ap-south-1 to be the new RDS instance. Create another read replica in ap-southeast-1 for this new instance.
(From Whizlabs sample exam)
There are two departments in a company. Both departments have owned several EC2 instances. Department A has a requirement to backup EBS volumes every 12 hours and the administrator set up a Data LifeCycle Policy in DLM for their instances. Department B requires a similar Data LifeCycle Policy as well for their instances. However, they prefer the schedule to run every 24 hours. The administrator has noticed that 2 EC2 EBS volumes have been owned by two departments at the same time. How can the administrator set up the Data LifeCycle Policy for Department B?
Add a tag for EBS volumes that Department B has owned. Set up a Data LifeCycle Policy based on the tag. For the EBS volumes owned by two departments, snapshots will be taken every 12 hours and 24 hours.
Add a tag for EBS volumes that Department B has owned. Set up a Data LifeCycle Policy based on the tag. For the EBS volumes owned by two departments, snapshots will not be taken as there is a schedule conflict between two policies. However other EBS volumes are not affected.
Add a tag for EBS volumes that Department B has owned. Set up a Data LifeCycle Policy based on the tag. For the EBS volumes owned by two departments, snapshots will be taken every 12 hours as 12 hours schedule takes priority.
Add a tag for EBS volumes that Department B has owned except the EBS volumes owned by two departments. Set up a Data LifeCycle Policy based on this tag. For the EBS volumes owned by two departments, snapshots are taken every 12 hours due to the policy of Department A.
(From Whizlabs sample exam)
You work at an AWS consulting company. A customer plans to migrate all its products into AWS and you are required to provide a detailed plan. The company has good experiences of Chef and prefers to continue using that. They wish that their EC2 instances use a blue/green deployment method. Moreover, it will be best if their infrastructure setup such as network layer can be easily re-run using scripts. Automatic scalability is also required for EC2. Which below options should you choose for the migration plan? Choose 3.
As Blue/Green deployment is not supported in OpsWorks, use Elastic Beanstalk Swap Url feature to deploy the application. Swap CNAMEs of the two environments to redirect traffic to the new version instantly.
Use Chef/Recipes in OpsWorks to add/deploy/edit the app in EC2 instances. The Blue/Green deployment in OpsWorks would require the Route 53 weighted routing feature.
In OpsWorks, set up a set of load-based EC2 instances, which AWS OpsWorks Stacks starts and stops to handle unpredictable traffic variations.
Create an autoscaling group with a suitable configuration based on CPU usage. Add the autoscaling group in OpsWorks stack so that its EC2 instances can scale up and down according to the CPU level automatically.
Edit CloudFormation templates and creates stacks for infrastructure. Add a dedicated CloudFormation stack for OpsWorks deployment and use the nested infrastructure stacks.
(From Whizlabs sample exam)
API gateway and Lambda non-proxy integrations have been chosen to implement an application by a software engineer. The application is a data analysis tool that returns some statistic results when the HTTP endpoint is called. The lambda needs to communicate with some back-end data services such as Keen.io however there are chances that error happens such as wrong data requested, bad communications, etc. The lambda is written using Java and two exceptions may be returned which are BadRequestException and InternalErrorException. What should the software engineer do to map these two exceptions in API gateway with proper HTTP return codes? For example, BadRequestException and InternalErrorException are mapped to HTTP return codes 400 and 500 respectively. Select 2.
Add the corresponding error codes (400 and 500) on the Integration Response in API gateway.
Add the corresponding error codes (400 and 500) on the Method Response in API gateway.
Put the mapping logic into Lambda itself so that when exception happens, error codes are returned at the same time in a JSON body.
Add Integration Responses where regular expression patterns are set such as BadRequest or InternalError. Associate them with HTTP status codes.
Add Method Responses where regular expression patterns are set such as BadRequest or InternalError. Associate them with HTTP status codes 400 and 500.
(From Whizlabs sample exam)
An IT company owns a web product in AWS that provides discount restaurant information to customers. It has used one S3 Bucket (my_bucket) to store restaurant data such as pictures, menus, etc. The product is deployed in VPC subnets. The company’s Cloud Architect decides to configure a VPC endpoint for this S3 bucket so that the performance will be enhanced. To be compliance to security rules, it is required that the new VPC endpoint is only used to communicate with this specific S3 Bucket and on the other hand, the S3 bucket only allows the read/write operations coming from this VPC endpoint. Which two options should the Cloud Architect choose to meet the security needs?
Use a VPC Endpoint policy for Amazon S3 to restrict access to the S3 Bucket “my_bucket” so that the VPC Endpoint is only allowed to perform S3 actions on “my_bucket”.
Modify the security group of the EC2 instance to limit the outbound actions to the VPC Endpoint if the outgoing traffic destination is the S3 bucket “my_bucket”.
In the S3 bucket “my_bucket”, add an S3 bucket policy in which all actions are denied if the source IP address is not equal to the EC2 public IP (use “NotIpAddress” condition).
For the S3 bucket “my_bucket”, use an S3 bucket policy that denies all actions if the source VPC Endpoint is no equal to the endpoint ID that is created.
Create a S3 bucket policy in the S3 bucket “my_bucket” which denies all actions unless the source IP address is equal to the EC2 public IP (use “IpAddress” condition).
(From Whizlabs sample exam)
An IOT company has a new product which is a camera device. The device has installed several sensors and can record video as required. The device has AWS Kinesis Video Streams SDK in the software and is able to transmit recorded video in real time to AWS Kinesis. Then the end users can use a desktop or web client to view, download or share the video stream. The client app should be simple and use a third-party player such as Google Shaka Player to display the video stream from Kinesis. How should the client app be designed?
The client can use HTTP Live Streaming (HLS) for live playback. Use GetMedia API to process and play Kinesis video streams.
The client can use HLS for live playback. Use GetHLSStreamingSessionURL API to retrieve the HLS streaming session URL then provide the URL to the video player.
The client can use Adobe HTTP Dynamic Streaming (HDS) for live playback. Use GetHDSStreamingSessionURL API to retrieve the HDS streaming session URL then provide the URL to the video player.
The client can use Microsoft Smooth Streaming (MSS) for live playback. Use GetMSSStreaming API to retrieve the MSS streaming to the video player.
(From Whizlabs sample exam)
You are hired as an AWS solutions architect in a startup company. You notice that there are some issues for the backup strategy of EC2 instances and there is no snapshot lifecycle management at all. Users just create snapshots manually without a routine policy to control. You want to suggest to use a proper EBS Snapshot Lifecycle policy. How would you persuade your team lead to approve this suggestion? (Select TWO)
A snapshot lifecycle policy helps to retain backups as required by auditors or internal compliance.
An EBS Snapshot Lifecycle helps to protect valuable data by enforcing a regular backup schedule.
A proper snapshot lifecycle policy is able to reduce storage costs as the snapshots taken by the scheduling policy are free.
The user can design their own schedule to backup snapshots according to different requirements, such as every 1 hour, 12 hours, 24 hours, 1 week, etc.
(From Whizlabs sample exam)
An IT company has a big data analytics application that is deployed in EC2 in multiple availability zones. These EC2 instances simultaneously access a shared Amazon EFS file system using a traditional file permissions model. A recent internal security audit has found that there is a potential security risk as the EFS file system is not encrypted for either at rest or in transit. What actions could be taken to address the potential security threat posed by non encryption of the EFS volume?
The encryption of data at rest has to be enabled when the Amazon EFS file system is created. The encryption of data in transit can be enabled when the file system is mounted in EC2 instance.
The encryption of data at rest and in transit can be enabled when the Amazon EFS file system is created.
The encryption of data at rest and in transit can only be enabled when the Amazon EFS file system is mounted in EC2 instance.
The encryption of data at rest is able to be enabled when the Amazon EFS file system is mounted in EC2 instance. The encryption of data in transit is enabled when the EFS file system is created using AWS console or CLI.
(From Whizlabs practice exam)
An application is going to be developed using AWS. The application needs a storage layer to store important documents. Which of the following option is incorrect to fulfill this requirement?
Amazon S3
Amazon EBS
Amazon EFS
Amazon Storage Gateway VTL
(From Whizlabs practice exam)
Your company is planning on hosting an e-commerce application on the AWS Cloud. There is a requirement for sessions to be always maintained for users. Which of the following can be used for storing session data? Choose 2 answers from the options given below.
CloudWatch
DynamoDB
Elastic Load Balancing
ElastiCache
Storage Gateway
(From Whizlabs practice exam)
A company needs to have their data stored on AWS. The initial size of data would be around 500 GB, with overall growth expected to go into 80TB over the next couple of months. The solution must also be durable. Which of the following would be an ideal storage option to use for such a requirement?
DynamoDB
Amazon S3
Amazon Aurora
Amazon Redshift
(From Whizlabs practice exam)
A company has decided to host a MongoDB database on an EC2 Instance. There is an expectancy of a large number of reads and writes on the database. Which of the following EBS storage types would be the ideal one to implement for the database?
EBS Provisioned IOPS SSD
EBS Throughput Optimized HDD
EBS General Purpose SSD
EBS Cold HDD
(From Whizlabs practice exam)
A company is planning to use AWS Simple Storage Service for hosting their project documents. At the end of the project, the documents need to be moved to archival storage. Which of the following implementation steps would ensure the documents are managed accordingly? What feature will enable this requirement?
Adding a bucket policy on the S3 bucket
Configuring lifecycle configuration rules on the S3 bucket
Creating an IAM policy for the S3 bucket
Enabling CORS on the S3 bucket
(From Whizlabs practice exam)
Your company is planning on developing a new application. Your development team needs a quick environment setup in AWS using NGINX as the underlying web server environment.
Which of the following services can be used to quickly provision such an environment? Please select 2 correct options.
AWS EC2
AWS Elastic Beanstalk
AWS SQS
AWS ELB
(From Whizlabs practice exam)
A company is planning on a Facebook-type application where users will upload videos and images. These are going to be stored in S3. There is a concern that there could be an overwhelming number of read and write requests on the S3 bucket. Which of the following could be an implementation step to help ensure optimal performance on the underlying S3 storage bucket
Which of the following could be an implementation step to help ensure optimal performance on the underlying S3 storage bucket?
Use a sequential ID for the prefix
Use a hexadecimal hash for the prefix
Use a hexadecimal hash for the suffix
Use a sequential ID for the suffix
(From Whizlabs practice exam)
A company has a set of resources hosted in a VPC on the AWS Cloud. The IT Security department has now mandated that all IP traffic from all network interfaces in the VPC be monitored. Which of the following would help suffice this requirement?
Trusted Advisor
VPC Flow Logs
Use CloudWatch metrics
Use CloudTrail
(From Whizlabs practice exam)
A company has a requirement to implement block level storage. Each storage device will store around 100 GB of data. Which of the following can be used to fulfill this requirement?
AWS EBS Volumes
AWS S3
AWS Glacier
AWS EFS
(From Whizlabs practice exam)
An application consists of EC2 Instances placed in different Availability Zones. The EC2 Instances sit behind an application load balancer. The EC2 Instances are managed via an Auto Scaling Group. There is a NAT Instance which is used for the EC2 Instances to download updates from the Internet. Which of the following is a bottleneck in the architecture?
The EC2 Instances
The ELB
The NAT Instance
The Auto Scaling Group
(From Whizlabs practice exam)
A development team wants to deploy a complete serverless application on the AWS Cloud. This application will be invoked by users across the globe. Which of the following services would be an ideal component in such an architecture?
Choose 2 services from the options given below.
AWS Lambda
API Gateway
AWS RDS
AWS EC2
(From Whizlabs practice exam)
A company has decided to use Amazon Glacier to store all of their archived documents. The management has now issued an update that documents stored in Glacier need to be accessed within a time span of 20 minutes for an IT audit requirement. Which of the following would allow for documents stored in Amazon Glacier to be accessed within the required time frame after the retrieval request?
Vault Lock
Expedited retrieval
Bulk retrieval
Standard retrieval
(From Whizlabs practice exam)
An application is hosted on EC2 Instances. There is a promotional campaign due to start in two weeks for the application. There is a mandate from the management to ensure that no performance problems are encountered due to traffic growth during this time. What action must be taken on the Auto Scaling Group to ensure this requirement can be fulfilled?
Configure step scaling for the Auto Scaling Group.
Configure Dynamic scaling for the Auto Scaling Group
Configure Scheduled scaling for the Auto Scaling Group.
Configure Static scaling for the Auto Scaling Group.
(From Whizlabs practice exam)
A company is planning on hosting an application in AWS. The application will consist of a web layer and database layer. Both will be hosted in a VPC. The web server is created in a public subnet and the MySQL database in a private subnet. All subnets are created with the default ACL settings.
Following are the key requirements:
a) The web servers must be accessible only to customers on an SSL connection.
b) The database should only be accessible to web servers in a public subnet.
Which solution meets these requirements without impacting other running applications?
Select 2 answers from the options given below:
Create a network ACL on the web server's subnets, allow HTTPS port 443 inbound and specify the source as 0.0.0.0/0
Create a web server security group that allows HTTPS port 443 inbound traffic from anywhere (0.0.0.0/0) and apply it to the web servers
Create a DB server security group that allows MySQL port 3306 inbound and specify the source as the web server security group.
Create a network ACL on the DB subnet, allow MySQL port 3306 inbound for web servers and deny all outbound traffic.
(From Whizlabs practice exam)
Your development team has just finished developing an application on AWS. This application is created in .NET and is hosted on an EC2 instance. The application currently accesses a DynamoDB table and is now going to be deployed to production.
Which of the following is the ideal and most secure way for the application to access the DynamoDB table?
Pass API credentials to the instance using instance user data.
Store API credentials as an object in Amazon S3.
Embed the API credentials into your JAR files.
Assign IAM roles to the EC2 Instances.
(From Whizlabs practice exam)
A company is planning to adopt Infrastructure as Code (IaC) since the priority from senior management is to achieve as much automation as required.
Which of the following components would help them achieve this purpose?
AWS Beanstalk
AWS CloudFormation
AWS CodeBuild
AWS CodeDeploy
(From Whizlabs practice exam)
A company has a set of EC2 Instances that store critical data on EBS Volumes. The IT Security team has now mandated that the data on the disk needs to be encrypted.
Which of the following can be used to achieve this purpose?
AWS KMS API
AWS Certificate Manager
API Gateway with STS
IAM Access Key
(From Whizlabs practice exam)
A company has a set of EC2 Instances that store critical data on EBS Volumes. There is a fear from IT Supervisors that if data on the EBS Volumes is lost, then it could result in a lot of effort to recover the data from other sources. Which of the following would help alleviate this concern?
Take regular EBS Snapshots.
Enable EBS Volume encryption
Create a script to copy data to an EC2 Instance Store
Mirror data across 2 EBS Volumes
(From Whizlabs practice exam)
A team is planning to host data on the AWS Cloud. Following are the key requirements:
a) Ability to store JSON documents
b) High availability and durability
Select the ideal storage mechanism that should be employed to fit this requirement.
Amazon EFS
Amazon Redshift
DynamoDB
AWS CloudFormation
(From Whizlabs practice exam)
A Solutions Architect is designing a shared service for hosting containers from several customers on Amazon ECS. These containers will use several AWS services. A container from one customer must not be able access data from another customer.
Which solution should the architect use to meet the above requirements?
IAM roles for tasks
IAM roles for EC2 Instances
IAM Instance profile for EC2 Instances
Security Group rules
You’ve set up an EC2 Instance in one of the default subnets in a default VPC. You need to setup an application on the EC2 Instance. For that you need to ensure that you can log into the Linux Instance. Which of the following changes would you need to implement to be able to log into the Instance.
Incoming for Security Group for TCP protocol on port 22
Outgoing for Security Group for TCP protocol on port 22
Incoming for NACL for TCP protocol on port 22
Outgoing for NACL for TCP protocol on port 22
An application requires a minimum of 4 instances to run to ensure that it can cater to its users. You want to ensure fault tolerance and high availability. Which of the following is the best option.
Deploy 2 instances in each of 3 Availability Zones, add a load balancer and an Auto Scaling group to launch more instances if required.
Deploy 2 instances in each of 2 Availability Zones, add a load balancer and an Auto Scaling group to launch more instances if required.
Deploy 4 instance in one Availability Zone, add a load balancer and an Auto Scaling group to launch more instances if required.
Deploy 1 instance in each of 3 Availability Zones, add a load balancer and an Auto Scaling group to launch more instances if required.
You are a consultant tasked with migrating an on-premise application architecture to AWS. During your design process you have to give consideration to current on-premise security and determine which security attributes you are responsible for on AWS. Which of the following does AWS provide you as part of the shared responsibility model. Choose the 2 correct options.
EC2 Instance Security
Physical network infrastructure
User access to the AWS environment via IAM
Virtualization infrastructure
One of your instances reporting an unhealthy system status check. However, this is not something you should have to monitor and repair on your own. How might you automate the repair of the system status check failure in an AWS environment? Choose the correct answer from the options given below.
Create a CloudWatch rule that stop and start the instance based off of the status check alarms
Write a script that queries the EC2 API for each instance status check
Write a script that periodically shuts down and starts instances based on certain stats
Implement a third party monitoring tool
A photo-sharing service stores pictures in Amazon Simple Storage Service (S3) and allows application sign-in using an OpenID Connect-compatible identity provider. Which AWS Security Token Service approach to temporary access should you use for the Amazon S3 operations?
SAML-based Identity Federation
Cross-Account Access
AWS Identity and Access Management roles
Web Identity Federation
A customer is running a multi-tier web application farm in a virtual private cloud (VPC) that is not connected to their corporate network. They are connecting to the VPC over the Internet to manage all of their Amazon EC2 Instances running in both public and private subnets. They have only authorized the bastion-security-group with Microsoft Remote Desktop Protocol (RDP) access to the application instance security groups, but the company want to further limit administrative access to all of the instances in the VPC. Which of the following Bastion deployment scenarios will meet this requirement?
Deploy a Windows Bastion host on the corporate network that has RDP access to all instances in the VPC
Deploy a Windows Bastion host with an Elastic IP address in the public subnet and allow SSH access to the bastion from anywhere
Deploy a Windows Bastion host with an Elastic IP address in the private subnet, and restrict RDP access to the bastion from only the corporate public IP addresses
Deploy a Windows Bastion host with an auto-assigned Public IP address in the public subnet, and allow RDP access to the bastion from only the corporate public IP addresses.
You are a solution architect for a company. The company has a requirement to deploy an application which will need to have a session management in place. Which of the following services can be used for session management accordingly?
AWS Storage Gateway, Elasticache and ELB
ELB, Elasticache and RDS
Cloudwatch, RDS and DynamoDB
RDS, DynamoDB and Elasticache
You have 2 Ubuntu instances located in different subnets in the same VPC. Now to your understanding these instances should be able to communicate with each other, but when you try to ping from one instance to another, you get a timeout. The Route Tables seem to be valid and has the entry for the Target ‘local’ for your VPC CIDR. Which of the following could be a valid reason for this issue.
The instances are of the wrong AMI, hence you are not able to ping the instances
The security Group has not been modified for allow the required traffic
The instances don’t have Public IP so that the ping commands can be routed
The instances don’t have Elastic IP, so that the ping can be routed
When it comes to API credentials, what is the best practice recommended by AWS?
Create a role which has the necessary and can be assumed by the EC2 instance
Use the API credentials from an EC2 instance
Use the API credentials from a bastion host
Use the API credentials from a NAT Instance
What is the AWS service provided which provides a fully managed NoSQL database service that provides fast and predictable performance with seamless scalability.
AWS RDS
DynamoDB
Oracle RDS
Elastic Map Reduce
If you want to launch Amazon Elastic Compute Cloud (EC2) instances and assign each instance a private IP address in a predetermined range, you should:
Launch the instance from private Amazon Machine Image (AMI)
Assign a group of sequential Elastic IP Address to the instances
Launch the instances in the Amazon Virtual Private Cloud(VPC)
Launch the instances in a Placement Group
Use standard EC2 instances since each instance gets a private Domain Name Serbice (DNS) already.
A company is building a service in which Amazon EC2 worker instances process an uploaded audio file and generate a text file. You must store both of these files in the same durable storage until the text files is retrieved. You do not know what the storage capacity requirements are. Which storage option is both cos-efficient and scalable?
Multiple Amazon EBS volume with snapshots
A single Amazon Glacier vault
A single Amazon S3 bucket
Multiple instance stores
A company’s application is intending to use Auto Scaling and has the requirement to store user state information. Which of the following AWS services provides a shared data store with durability and low latency?
AWS Elaticache Memcached
Amazon Simple Storage Service
Amazon EC2 instance storage
Amazon DynamoDB
A company has a requirement to store file in S3. After a period of a month, these files can be archived files might be required after a period of 3-4 months. Which of the following suits the requirements
Use EC2 instances with EBS volumes, one for normal storage and the other for archived storage
Use S3 for normal file storage and use lifecycle policies for moving the files to glacier
Use EC2 instances with EBS volumes and use lifecycle policies for moving the files to glacier
A. Use glacier for normal file storage and use lifecycle policies for moving the files to S3
In what events would cause Amazon RDS to initiate a failover to the standby replica? Choose 3 answers from the option below
Loss of availability in Availability Zone
Loss of network connectivity to primary
Storage failure on secondary
Compute unit failure on primary
