Font size
S
M
L
XL
WorksheetsAWS SAA-C02 (Q1-Q100)
Total questions: 100
Worksheet time: 3hrs 20mins
Name
Class
Date
1.
A solutions architect is designing a new service behind Amazon API Gateway. The request patterns for the service will be unpredictable and can change suddenly from 0 requests to over 500 per second. The total size of the data that needs to be persisted in a backend database is currently less than 1 GB with unpredictable future growth Data can be queried using simple key-value requests. Which combination of AWS services would meet these requirements? (Select TWO )
a)
AWS Fargate
b)
AWS Lambda
c)
Amazon DynamoDB
d)
Amazon EC2 Auto Scaling
e)
MySQL-compatible Amazon Aurora
2.
A solutions architect needs to design a managed storage solution for a company's application that includes high-performance machine learning. This application runs on AWS Fargate and the connected storage needs to have concurrent access to files and deliver high performance. Which storage option should the solutions architect recommend?
a)
Create an Amazon S3 bucket for the application and establish an IAM role for Fargate to communicate with Amazon S3.
b)
Create an Amazon FSx for Lustre file share and establish an IAM role that allows Fargate to communicate with FSx for Lustre.
c)
Create an Amazon Elastic File System (Amazon EFS) file share and establish an IAM role that allows Fargate to communicate with Amazon EFS.
d)
Create an Amazon Elastic Block Store (Amazon EBS) volume for the application and establish an IAM role that allows Fargate to communicate with Amazon EBS.
3.
A company has a multi-tier application that runs six front-end web servers in an Amazon EC2 Auto Scaling group in a single Availability Zone behind an Application Load Balancer (ALB). A solutions architect needs to modify the infrastructure to be highly available without modifying the application. Which architecture should the solutions architect choose that provides high availability?
a)
Create an Auto Scaling group that uses three instances across each of two Regions
b)
Modify the Auto Scaling group to use three instances across each of two Availability Zones
c)
Create an Auto Scaling template that can be used to quickly create more instances in another Region
d)
Change the ALB in front of the Amazon EC2 instances in a round-robin configuration to balance traffic to the web tier
4.
A company runs an internal browser-based application The application runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an Amazon EC2 Auto Scaling group across multiple Availability Zones. The Auto Scaling group scales up to 20 instances during work hours, but scales down to 2 instances overnight Staff are complaining that the application is very slow when the day begins, although it runs well by mid-morning. How should the scaling be changed to address the staff complaints and keep costs to a minimum?
a)
Implement a scheduled action that sets the desired capacity to 20 shortly before the office opens
b)
Implement a step scaling action triggered at a lower CPU threshold, and decrease the cooldown period
c)
Implement a target tracking action triggered at a lower CPU threshold and decrease the cooldown period
d)
Implement a scheduled action that sets the minimum and maximum capacity to 20 shortly before the office opens
5.
A solutions architect is designing a solution to access a catalog of images and provide users with the ability to submit requests to customize images. Image customization parameters will be in any request sent to an AWS API Gateway API. The customized image will be generated on demand, and users will receive a link they can click to view or download their customized image. The solution must be highly available for viewing and customizing images What is the MOST cost-effective solution to meet these requirements?
a)
Use Amazon EC2 instances to manipulate the original image into the requested customization. Store the original and manipulated images in Amazon S3. Configure an Elastic Load Balancer in front of the EC2 instances.
b)
Use AWS Lambda to manipulate the original image to the requested customization. Store the original and manipulated images in Amazon S3. Configure an Amazon CloudFront distribution with the S3 bucket as the ongin.
c)
Use AWS Lambda to manipulate the original image to the requested customization. Store the original images in Amazon S3 and the manipulated images in Amazon DynamoDB. Configure an Elastic Load Balancer in front of the Amazon EC2 instances.
d)
Use Amazon EC2 instances to manipulate the original image into the requested customization. Store the original images in Amazon S3 and the manipulated images in Amazon DynamoDB. Configure an Amazon CloudFront distribution with the S3 bucket as the origin.
6.
A bicycle sharing company is developing a multi-tier architecture to track the location of its bicycles during peak operating hours. The company wants to use these data points in its existing analytics platform A solutions architect must determine the most viable multi-tier option to support this architecture. The data points must be accessible from the REST API. Which action meets these requirements for storing and retrieving location data?
a)
Use Amazon Athena with Amazon S3
b)
Use Amazon API Gateway with AWS Lambda
c)
Use Amazon QuickSight with Amazon Redshift
d)
Use Amazon API Gateway with Amazon Kinesis Data Analytics
7.
A solutions architect is deploying a distributed database on multiple Amazon EC2 instances. The database stores all data on multiple instances so it can withstand the loss of an instance. The database requires block storage with latency and throughput to support several million transactions per second per server. Which storage solution should the solutions architect use?
a)
Amazon EBS
b)
Amazon EC2 instance store
c)
Amazon EFS
d)
Amazon S3
8.
A solutions architect needs to ensure that API calls to Amazon DynamoDB from Amazon EC2 instances in a VPC do not traverse the internet. What should the solutions architect do to accomplish this? (Select TWO )
a)
Create a route table entry for the endpoint
b)
Create a gateway endpoint for DynamoDB
c)
Create a new DynamoDB table that uses the endpoint
d)
Create an ENI for the endpoint in each of the subnets of the VPC
e)
Create a security group entry in the default security group to provide access
9.
A solutions architect is designing a web application that will run on Amazon EC2 instances behind an Application Load Balancer (ALB). The company strictly requires that the application be resilient against malicious internet activity and attacks, and protect against new common vulnerabilities and exposures. What should the solutions architect recommend?
a)
Leverage Amazon CloudFront with the ALB endpoint as the origin
b)
Deploy an appropriate managed rule for AWS WAF and associate it with the ALB
c)
Subscribe to AWS Shield Advanced and ensure common vulnerabilities and exposures are blocked
d)
Configure network ACLs and security groups to allow only ports 80 and 443 to access the EC2 instances
10.
A company has been storing analytics data in an Amazon RDS instance for the past few years. The company asked a solutions architect to find a solution that allows users to access this data using an API. The expectation is that the application will experience periods of inactivity but could receive bursts of traffic within seconds. Which solution should the solutions architect suggest?
a)
Set up an Amazon API Gateway and use Amazon ECS.
b)
Set up an Amazon API Gateway and use AWS Elastic Beanstalk.
c)
Set up an Amazon API Gateway and use AWS Lambda functions
d)
Set up an Amazon API Gateway and use Amazon EC2 with Auto Scaling
11.
A company's web application is using multiple Linux Amazon EC2 instances and storing data on Amazon EBS volumes. The company is looking for a solution to increase the resiliency of the application in case of a failure and to provide storage that complies with atomicity, consistency, isolation, and durability (ACID). What should a solutions architect do to meet these requirements?
a)
Launch the application on EC2 instances in each Availability Zone. Attach EBS volumes to each EC2 instance.
b)
Create an Application Load Balancer with Auto Scaling groups across multiple Availability Zones. Mount an instance store on each EC2 instance.
c)
Create an Application Load Balancer with Auto Scaling groups across multiple Availability Zones. Store data on Amazon EFS and mount a target on each instance.
d)
Create an Application Load Balancer with Auto Scaling groups across multiple Availability Zones. Store data using Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA).
12.
A company has an application that calls AWS Lambda functions. A recent code review found database credentials stored in the source code The database credentials need to be removed from the Lambda source code The credentials must then be securely stored and rotated on an ongoing basis to meet security policy requirements. What should a solutions architect recommend to meet these requirements?
a)
Store the password in AWS CloudHSM. Associate the Lambda function with a role that can retrieve the password from CloudHSM given its key ID.
b)
Store the password in AWS Secrets Manager. Associate the Lambda function with a role that can retrieve the password from Secrets Manager given its secret ID.
c)
Move the database password to an environment variable associated with the Lambda function. Retrieve the password from the environment variable upon execution.
d)
Store the password in AWS Key Management Service (AWS KMS). Associate the Lambda function with a role that can retrieve the password from AWS KMS given its key ID.
13.
A solutions architect needs the static website within an Amazon S3 bucket. A solutions architect needs to ensure that data can be recovered in case of accidental deletion. Which action will accomplish this?
a)
Enable Amazon S3 versioning
b)
Enable Amazon S3 Intelligent-Tiering.
c)
Enable an Amazon S3 lifecycle policy
d)
Enable Amazon S3 cross-Region replication.
14.
A company is managing health records on-premises. The company must keep these records indefinitely, disable any modifications to the records once they are stored, and granularly audit access at all levels. The chief technology officer (CTO) is concerned because there are already millions of records not being used by any application, and the current infrastructure is running out of space The CTO has requested a solutions architect design a solution to move existing data and support future records. Which services can the solutions architect recommend to meet these requirements'?
a)
Use AWS DataSync to move existing data to AWS. Use Amazon S3 to store existing and new data. Enable Amazon S3 object lock and enable AWS CloudTrail with data events.
b)
Use AWS Storage Gateway to move existing data to AWS. Use Amazon S3 to store existing and new data. Enable Amazon S3 object lock and enable AWS CloudTrail with management events.
c)
Use AWS DataSync to move existing data to AWS. Use Amazon S3 to store existing and new data. Enable Amazon S3 object lock and enable AWS CloudTrail with management events.
d)
Use AWS Storage Gateway to move existing data to AWS. Use Amazon Elastic Block Store (Amazon EBS) to store existing and new data. Enable Amazon S3 object lock and enable Amazon S3 server access logging.
15.
A company currently operates a web application backed by an Amazon RDS MySQL database. It has automated backups that are run daily and are not encrypted. A security audit requires future backups to be encrypted and the unencrypted backups to be destroyed. The company will make at least one encrypted backup before destroying the old backups What should be done to enable encryption for future backups?
a)
Enable default encryption for the Amazon S3 bucket where backups are stored
b)
Modify the backup section of the database configuration to toggle the Enable encryption check box.
c)
Create a snapshot of the database. Copy it to an encrypted snapshot. Restore the database from the encrypted snapshot.
d)
Enable an encrypted read replica on RDS for MySQL. Promote the encrypted read replica to primary. Remove the original database instance.
16.
A client reports that they want see an audit log of any changes made to AWS resources in their account. What can the client do to achieve this?
a)
Set up Amazon CloudWatch monitors on services they own
b)
Enable AWS CloudTrail logs to be delivered to an Amazon S3 bucket
c)
Use Amazon CloudWatch Events to parse logs
d)
Use AWS OpsWorks to manage their resources
17.
An application running in a private subnet accesses an Amazon DynamoDB table. There is a security requirement that the data never leave the AWS network. How should this requirement be met?
a)
Configure a network ACL on DynamoDB to limit traffic to the private subnet
b)
Enable DynamoDB encryption at rest using an AWS KMS key
c)
Add a NAT gateway and configure the route table on the private subnet
d)
Create a VPC endpoint for DynamoDB and configure the endpoint policy
18.
A three-tier application is being created to host small news articles. The application is expected to serve millions of users. When breaking news occurs, the site must handle very large spikes in traffic without significantly impacting database performance. Which design meets these requirements while minimizing costs?
a)
Use Auto Scaling groups to increase the number of Amazon EC2 instances delivering the web application
b)
Use Auto Scaling groups to increase the size of the Amazon RDS instances delivering the database
c)
Use Amazon DynamoDB strongly consistent reads to adjust for the increase in traffic
d)
Use Amazon DynamoDB Accelerator (DAX) to cache read operations to the database
19.
During a review of business applications, a Solutions Architect identifies a critical application with a relational database that was built by a business user and is running on the user's desktop. To reduce the risk of a business interruption, the Solutions Architect wants to migrate the application to a highly available, multi-tiered solution in AWS. What should the Solutions Architect do to accomplish this with the LEAST amount of disruption to the business?
a)
Create an import package of the application code for upload to AWS Lambda, and include a function to create another Lambda function to migrate data into an Amazon RDS database
b)
Create an image of the user's desktop, migrate it to Amazon EC2 using VM Import, and place the EC2 instance in an Auto Scaling group
c)
Pre-stage new Amazon EC2 instances running the application code on AWS behind an Application Load Balancer and an Amazon RDS Multi-AZ DB instance
d)
Use AWS DMS to migrate the backend database to an Amazon RDS Multi-AZ DB instance. Migrate the application code to AWS Elastic Beanstalk
20.
A company has thousands of files stored in an Amazon S3 bucket that has a well-defined access pattern. The files are accessed by an application multiple times a day for the first 30 days. Files are rarely accessed within the next 90 days. After that, the files are never accessed again. During the first 120 days, accessing these files should never take more than a few seconds. Which lifecycle policy should be used for the S3 objects to minimize costs based on the access pattern?
a)
Use Amazon S3 Standard-Infrequent Access (S3 Standard-IA) storage for the first 30 days. Then move the files to the GLACIER storage class for the next 90 days. Allow the data to expire after that.
b)
Use Amazon S3 Standard storage for the first 30 days. Then move the files to Amazon S3 Standard- Infrequent Access (S3 Standard-IA) for the next 90 days. Allow the data to expire after that.
c)
Use Amazon S3 Standard storage for first 30 days. Then move the files to the GLACIER storage class for the next 90 days. Allow the data to expire after that.
d)
Use Amazon S3 Standard-Infrequent Access (S3 Standard-IA) for the first 30 days. After that, move the data to the GLACIER storage class, where is will be deleted automatically.
21.
A company creates business-critical 3D images every night. The images are batch-processed every Friday and require an uninterrupted 48 hours to complete. What is the MOST cost-effective Amazon EC2 pricing model for this scenario?
a)
On-Demand Instances
b)
Scheduled Reserved Instances
c)
Reserved Instances
d)
Spot Instances
22.
An application generates audit logs of operational activities. Compliance requirements mandate that the application retain the logs for 5 years. How can these requirements be met?
a)
Save the logs in an Amazon S3 bucket and enable Multi-Factor Authentication Delete (MFA Delete) on the bucket.
b)
Save the logs in an Amazon EFS volume and use Network File System version 4 (NFSv4) locking with the volume.
c)
Save the logs in an Amazon Glacier vault and use the Vault Lock feature.
d)
Save the logs in an Amazon EBS volume and take monthly snapshots.
23.
A Solutions Architect is creating an application running in an Amazon VPC that needs to access AWS Systems Manager Parameter Store Network security rules prohibit any route table entry with a 0. 0. 0. 0/0 destination. What infrastructure addition will allow access to the AWS service while meeting the requirements?
a)
VPC peering
b)
NAT instance
c)
NAT gateway
d)
AWS PrivateLink
24.
A photo-sharing website running on AWS allows users to generate thumbnail images of photos stored in Amazon S3. An Amazon DynamoDB table maintains the locations of photos, and thumbnails are easily re- created from the originals if they are accidentally delete How should the thumbnail images be stored to ensure the LOWEST cost?
a)
Amazon S3 Standard-Infrequent Access (S3 Standard-IA) with cross-region replication
b)
Amazon S3
c)
Amazon Glacier
d)
Amazon S3 with cross-region replication
25.
A company is implementing a data lake solution on Amazon S3. Its security policy mandates that the data stored in Amazon S3 should be encrypted at rest. Which options can achieve this? (Select TWO. )
a)
Use S3 server-side encryption with an Amazon EC2 key pair.
b)
Use S3 server-side encryption with customer-provided keys (SSE-C).
c)
Use S3 bucket policies to restrict access to the data at rest.
d)
Use client-side encryption before ingesting the data to Amazon S3 using encryption keys.
e)
Use SSL to encrypt the data while in transit to Amazon S3.
26.
A solutions architect has created a new AWS account and must secure AWS account root user access. Which combination of actions will accomplish this? (Select TWO. )
a)
Ensure the root user uses a strong password
b)
Enable multi-factor authentication to the root user
c)
Store root user access keys in an encrypted Amazon S3 bucket
d)
Add the root user to a group containing administrative permissions.
e)
Apply the required permissions to the root user with an inline policy document
27.
A company's application runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances run in an Amazon EC2 Auto Scaling group across multiple Availability Zones. On the first day of every month at midnight the application becomes much slower when the month-end financial calculation batch executes. This causes the CPU utilization of the EC2 instances to immediately peak to 100% which disrupts the application. What should a solutions architect recommend to ensure the application is able to handle the workload and avoid downtime?
a)
Configure an Amazon CloudFront distribution in front of the ALB
b)
Configure an EC2 Auto Scaling simple scaling policy based on CPU utilization
c)
Configure an EC2 Auto Scaling scheduled scaling policy based on the monthly schedule.
d)
Configure Amazon ElastiCache to remove some of the workload from the EC2 instances
28.
A company is migrating from an on-premises infrastructure to the AWS Cloud. One of the company's applications stores files on a Windows file server farm that uses Distributed File System Replication (DFSR) to keep data in sync. A solutions architect needs to replace the file server farm. Which service should the solutions architect use?
a)
Amazon EFS
b)
Amazon FSx
c)
Amazon S3
d)
AWS Storage Gateway
29.
A company's website is used to sell products to the public. The site runs on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB). There is also an Amazon CloudFront distribution and AWS WAF is being used to protect against SQL injection attacks. The ALB is the origin for the CloudFront distribution. A recent review of security logs revealed an external malicious IP that needs to be blocked from accessing the websit What should a solutions architect do to protect the application?
a)
Modify the network ACL on the CloudFront distribution to add a deny rule for the malicious IP address
b)
Modify the configuration of AWS WAF to add an IP match condition to block the malicious IP address
c)
Modify the network ACL for the EC2 instances in the target groups behind the ALB to deny the malicious IP address
d)
Modify the security groups for the EC2 instances in the target groups behind the ALB to deny the malicious IP address
30.
A marketing company is storing CSV files in an Amazon S3 bucket for statistical analysis. An application on an Amazon EC2 instance needs permission to efficiently process the CSV data stored in the S3 bucket. Which action will MOST securely grant the EC2 instance access to the S3 bucket?
a)
Attach a resource-based policy to the S3 bucket
b)
Create an IAM user for the application with specific permissions to the S3 bucket
c)
Associate an IAM role with least privilege permissions to the EC2 instance profile
d)
Store AWS credentials directly on the EC2 instance for applications on the instance to use for API calls
31.
A solutions architect is designing a solution where users will De directed to a backup static error page it the primary website is unavailable. The primary website's DNS records are hosted in Amazon Route 53 where their domain is pointing to an Application Load Balancer (ALB). Which configuration should the solutions architect use to meet the company's needs while minimizing changes and infrastructure overhead?
a)
Point a Route 53 alias record to an Amazon CloudFront distribution with the ALB as one of its origins. Then, create custom error pages for the distribution.
b)
Set up a Route 53 active-passive failover configuration. Direct traffic to a static error page hosted within an Amazon S3 bucket when Route 53 health checks determine that the ALB endpoint is unhealthy.
c)
Update the Route 53 record to use a latency-based routing policy. Add the backup static error page hosted within an Amazon S3 bucket to the record so the traffic is sent to the most responsive endpoints.
d)
Set up a Route 53 active-active configuration with the ALB and an Amazon EC2 instance hosting a static error page as endpoints. Route 53 will only send requests to the instance if the health checks fail for the ALB.
32.
A solutions architect is designing the cloud architecture for a new application being deployed on AWS. The process should run in parallel while adding and removing application nodes as needed based on the number of jobs to be processed. The processor application is stateless. The solutions architect must ensure that the application is loosely coupled and the job items are durably stored. Which design should the solutions architect use?
a)
Create an Amazon SNS topic to send the jobs that need to be processed. Create an Amazon Machine Image (AMI) that consists of the processor application. Create a launch configuration that uses the AMI. Create an Auto Scaling group using the launch configuration. Set the scaling policy for the Auto Scaling group to add and remove nodes based on CPU usage
b)
Create an Amazon SQS queue to hold the jobs that need to be processed. Create an Amazon Machine Image (AMI) that consists of the processor application. Create a launch configuration that uses the AMI. Create an Auto Scaling group using the launch configuration. Set the scaling policy for the Auto Scaling group to add and remove nodes based on network usage
c)
Create an Amazon SQS queue to hold the jobs that needs to be processed. Create an Amazon Machine Image (AMI) that consists of the processor application. Create a launch template that uses the AMI. Create an Auto Scaling group using the launch template. Set the scaling policy for the Auto Scaling group to add and remove nodes based on the number of items in the SQS queue
d)
Create an Amazon SNS topic to send the jobs that need to be processed. Create an Amazon Machine Image (AMI) that consists of the processor application. Create a launch template that uses the AMI. Create an Auto Scaling group using the launch template. Set the scaling policy for the Auto Scaling group to add and remove nodes based on the number of messages published to the SNS topic.
33.
A company has a legacy application that processes data in two parts. The second part of the process takes longer than the first, so the company has decided to rewrite the application as two microservices running on Amazon ECS that can scale independently. How should a solutions architect integrate the microservices?
a)
Implement code in microservice 1 to send data to an Amazon S3 bucket. Use S3 event notifications to invoke microservice 2.
b)
Implement code in microservice 1 to publish data to an Amazon SNS topic. Implement code in microservice 2 to subscribe to this topic.
c)
Implement code in microservice 1 to send data to Amazon Kinesis Data Firehose. Implement code in microservice 2 to read from Kinesis Data Firehose.
d)
Implement code in microservice 1 to send data to an Amazon SQS queue. Implement code in microservice 2 to process messages from the queue.
34.
A solutions architect at an ecommerce company wants to back up application log data to Amazon S3. The solutions architect is unsure how frequently the logs will be accessed or which logs will be accessed the most. The company wants to keep costs as low as possible by using the appropriate S3 storage class. Which S3 storage class should be implemented to meet these requirements?
a)
S3 Glacier
b)
S3 Intelligent-Tiering
c)
S3 Standard-Infrequent Access (S3 Standard-IA)
d)
S3 One Zone-Infrequent Access (S3 One Zone-IA)
35.
A security team wants to limit access to specific services or actions in all of the team's AWS accounts. All accounts belong to a large organization in AWS Organizations. The solution must be scalable and there must be a single point where permissions can be maintained. What should a solutions architect do to accomplish this?
a)
Create an ACL to provide access to the services or actions.
b)
Create a security group to allow accounts and attach it to user groups
c)
Create cross-account roles in each account to deny access to the services or actions.
d)
Create a service control policy in the root organizational unit to deny access to the services or actions
36.
You are trying to launch an EC2 instance, however the instance seems to go into a terminated status immediately. What would probably not be a reason that this is happening?
a)
The AMI is missing a required part.
b)
The snapshot is corrupt.
c)
You need to create storage in EBS first.
d)
You've reached your volume limit.
37.
You have set up an Auto Scaling group. The cool down period for the Auto Scaling group is 7 minutes. The first instance is launched after 3 minutes, while the second instance is launched after 4 minutes. How many minutes after the first instance is launched will Auto Scaling accept another scaling activity request?
a)
11 minutes
b)
7 minutes
c)
10 minutes
d)
14 minutes
38.
In Amazon EC2 Container Service components, what is the name of a logical grouping of container instances on which you can place tasks?
a)
A cluster
b)
A container instance
c)
A container
d)
A task definition
39.
In the context of AWS support, why must an EC2 instance be unreachable for 20 minutes rather than allowing customers to open tickets immediately?
a)
Because most reachability issues are resolved by automated processes in less than 20 minutes
b)
Because all EC2 instances are unreachable for 20 minutes every day when AWS does routine maintenance
c)
Because all EC2 instances are unreachable for 20 minutes when first launched
d)
Because of all the reasons listed here
40.
Can a user get a notification of each instance start / terminate configured with Auto Scaling?
a)
Yes, if configured with the Launch Config
b)
Yes, always
c)
Yes, if configured with the Auto Scaling group
d)
No
41.
Amazon EBS provides the ability to create backups of any Amazon EC2 volume into what is known as ______.
a)
snapshots
b)
images
c)
instance backups
d)
mirrors
42.
To specify a resource in a policy statement, in Amazon EC2, can you use its Amazon Resource Name (ARN)?
a)
Yes, you can.
b)
No, you can't because EC2 is not related to ARN.
c)
No, you can't because you can't specify a particular Amazon EC2 resource in an IAM policy.
d)
Yes, you can but only for the resources that are not affected by the action.
43.
After you recommend Amazon Redshift to a client as an alternative solution to paying data warehouses to analyze his data, your client asks you to explain why you are recommending Redshift. Which of the following would be a reasonable response to his request?
a)
It has high performance at scale as data and query complexity grows.
b)
It prevents reporting and analytic processing from interfering with the performance of OLTP workloads.
c)
You don't have the administrative burden of running your own data warehouse and dealing with setup, durability, monitoring, scaling, and patching.
d)
All answers listed are a reasonable response to his question
44.
One of the criteria for a new deployment is that the customer wants to use AWS Storage Gateway. However you are not sure whether you should use gateway-cached volumes or gateway-stored volumes or even what the differences are Which statement below best describes those differences?
a)
Gateway-cached lets you store your data in Amazon Simple Storage Service (Amazon S3) and retain a copy of frequently accessed data subsets locally. Gateway-stored enables you to configure your on-premises gateway to store all your data locally and then asynchronously back up point-in-time snapshots of this data to Amazon S3.
b)
Gateway-cached is free whilst gateway-stored is not.
c)
Gateway-cached is up to 10 times faster than gateway-stored.
d)
Gateway-stored lets you store your data in Amazon Simple Storage Service (Amazon S3) and retain a copy of frequently accessed data subsets locally. Gateway-cached enables you to configure your on-premises gateway to store all your data locally and then asynchronously back up point-in-time snapshots of this data to Amazon S3.
45.
A user is launching an EC2 instance in the US East region. Which of the below mentioned options is recommended by AWS with respect to the selection of the availability zone?
a)
Always select the AZ while launching an instance
b)
Always select the US-East-1-a zone for HA
c)
Do not select the AZ; instead let AWS select the AZ
d)
The user can never select the availability zone while launching an instance
46.
A company's website runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The website has a mix of dynamic and static content Users around the globe are reporting that the website is slow. Which set of actions will improve website performance for users worldwide?
a)
Create an Amazon CloudFront distribution and configure the ALB as an origin. Then update the Amazon Route 53 record to point to the CloudFront distribution.
b)
Create a latency-based Amazon Route 53 record for the ALB. Then launch new EC2 instances with larger instance sizes and register the instances with the ALB.
c)
Launch nev. EC2 instances hosting the same web application in different Regions closer to the users. Then register the instances with the same ALB using cross-Region VPC peering.
d)
Host the website in an Amazon S3 bucket in the Regions closest to the users and delete the ALB and EC2 instances. Then update an Amazon Route 53 record to point to the S3 buckets.
47.
A company wants to migrate a high performance computing (HPC) application and data from on- premises to the AWS Cloud. The company uses tiered storage on premises with hot high-performance parallel storage to support the application during periodic runs of the application and more economical cold storage to hold the data when the application is not actively running. Which combination of solutions should a solutions architect recommend to support the storage needs of the application? (Select TWO )
a)
Amazon S3 for cold data storage
b)
Amazon EFS for cold data storage
c)
Amazon S3 for high-performance parallel storage
d)
Amazon FSx for Lustre for high-performance parallel storage
e)
Amazon FSx for Windows for high-performance parallel storage
48.
A company has on-premises servers running a relational database. The current database serves high read traffic for users in different locations. The company wants to migrate to AWS with the least amount of effort. The database solution should support disaster recovery and not affect the company's current traffic flow. Which solution meets these requirements?
a)
Use a database in Amazon RDS with Multi-AZ and at least one read replica
b)
Use a database in Amazon RDS with Multi-AZ and at least one standby replica
c)
Use databases hosted on multiple Amazon EC2 instances in different AWS Regions
d)
Use databases hosted on Amazon EC2 instances behind an Application Load Balancer in different Availability Zones
49.
A media streaming company collects real-time data and stores it in a disk-optimized database system. The company is not getting the expected throughput and wants an in-memory database storage solution that performs faster and provides high availability using data replication. Which database should a solutions architect recommend'?
a)
Amazon RDS for MySQL
b)
Amazon RDS for PostgreSQL
c)
Amazon ElastiCache for Redis
d)
Amazon ElastiCache for Memcached
50.
A company's application is running on Amazon EC2 instances within an Auto Scaling group behind an Elastic Load Balancer. Based on the application's history, the company anticipates a spike in traffic during a holiday each year. A solutions architect must design a strategy to ensure that the Auto Scaling group proactively increases capacity to minimize any performance impact on application users. Which solution will meet these requirements?
a)
Create an Amazon CloudWatch alarm to scale up the EC2 instances when CPU utilization exceeds 90%
b)
Create a recurring scheduled action to scale up the Auto Scaling group before the expected period of peak demand
c)
Increase the minimum and maximum number of EC2 instances in the Auto Scaling group during the peak demand period
d)
Configure an Amazon Simple Notification Service (Amazon SNS) notification to send alerts when there are auto scaling EC2_INSTANCE_LAUNCH events
51.
A company has a two-tier application architecture that runs in public and private subnets Amazon EC2 instances running the web application are in the public subnet and a database runs on the private subnet. The web application instances and the database are running in a single Availability Zone (AZ). Which combination of steps should a solutions architect take to provide high availability for this architecture? (Select TWO. )
a)
Create new public and private subnets in the same AZ for high availability
b)
Create an Amazon EC2 Auto Scaling group and Application Load Balancer spanning multiple AZs
c)
Add the existing web application instances to an Auto Scaling group behind an Application Load Balancer
d)
Create new public and private subnets in a new AZ Create a database using Amazon EC2 in one AZ
e)
Create new public and private subnets in the same VPC each in a new AZ Migrate the database to an Amazon RDS multi-AZ deployment
52.
A financial services company has a web application that serves users in the United States and Europe. The application consists of a database tier and a web server tier. The database tier consists of a MySQL database hosted in us-east-1 Amazon Route 53 geoproximity routing is used to direct traffic to instances in the closest Region. A performance review of the system reveals that European users are not receiving the same level of query performance as those in the United States. Which changes should be made to the database tier to improve performance?
a)
Migrate the database to Amazon RDS for MySQL. Configure Multi-AZ in one of the European Regions.
b)
Migrate the database to Amazon DynamoDB. Use DynamoDB global tables to enable replication to additional Regions.
c)
Deploy MySQL instances in each Region. Deploy an Application Load Balancer in front of MySQL to reduce the load on the primary instance
d)
Migrate the database to an Amazon Aurora global database in MySQL compatibility mode. Configure read replicas in one of the European Regions.
53.
A solutions architect is tasked with transferring 750 TB of data from a network-attached file system located at a branch office to Amazon S3 Glacier. The solution must avoid saturating the branch office's low-bandwidth internet connection. What is the MOST cost-effective solution1?
a)
Create a site-to-site VPN tunnel to an Amazon S3 bucket and transfer the files directly. Create a bucket policy to enforce a VPC endpoint.
b)
Order 10 AWS Snowball appliances and select an S3 Glacier vault as the destination. Create a bucket policy to enforce a VPC endpoint.
c)
Mount the network-attached file system to Amazon S3 and copy the files directly. Create a lifecycle policy to transition the S3 objects to Amazon S3 Glacier.
d)
Order 10 AWS Snowball appliances and select an Amazon S3 bucket as the destination. Create a lifecycle policy to transition the S3 objects to Amazon S3 Glacier.
54.
A company's production application runs online transaction processing (OLTP) transactions on an Amazon RDS MySQL DB instance.The company is launching a new reporting tool that will access the same data. The reporting tool must be highly available and not impact the performance of the production application. How can this be achieved'?
a)
Create hourly snapshots of the production RDS DB instance.
b)
Create a Multi-AZ RDS Read Replica of the production RDS DB instance
c)
Create multiple RDS Read Replicas of the production RDS DB instance Place the Read Replicas in an Auto Scaling group.
d)
Create a Single-AZ RDS Read Replica of the production RDS DB instance Create a second Single-AZ RDS Read Replica from the replica.
55.
A company allows its developers to attach existing IAM policies to existing IAM roles to enable faster experimentation and agility. However the security operations team is concerned that the developers could attach the existing administrator policy, which would allow the developers to circumvent any other security policies. How should a solutions architect address this issue?
a)
Create an Amazon SNS topic to send an alert every time a developer creates a new policy
b)
Use service control policies to disable IAM activity across all accounts in the organizational unit
c)
Prevent the developers from attaching any policies and assign all IAM duties to the security operations team
d)
Set an IAM permissions boundary on the developer IAM role that explicitly denies attaching the administrator policy
56.
A user is storing a large number of objects on AWS S3. The user wants to implement the search functionality among the objects. How can the user achieve this?
a)
Use the indexing feature of S3.
b)
Tag the objects with the metadata to search on that.
c)
Use the query functionality of S3.
d)
Make your own DB system which stores the S3 metadata for the search functionality.
57.
After setting up a Virtual Private Cloud (VPC) network, a more experienced cloud engineer suggests that to achieve low network latency and high network throughput you should look into setting up a placement group. You know nothing about this, but begin to do some research about it and are especially curious about its limitations. Which of the below statements is wrong in describing the limitations of a placement group?
a)
Although launching multiple instance types into a placement group is possible, this reduces the likelihood that the required capacity will be available for your launch to succeed.
b)
A placement group can span multiple Availability Zones.
c)
You can't move an existing instance into a placement group.
d)
A placement group can span peered VPCs
58.
What is a placement group in Amazon EC2?
a)
It is a group of EC2 instances within a single Availability Zone.
b)
It the edge location of your web content.
c)
It is the AWS region where you run the EC2 instance of your web content.
d)
It is a group used to span multiple Availability Zones.
59.
You are migrating an internal server on your DC to an EC2 instance with EBS volume. Your server disk usage is around 500GB so you just copied all your data to a 2TB disk to be used with AWS Import/Export. Where will the data be imported once it arrives at Amazon?
a)
to a 2TB EBS volume
b)
to an S3 bucket with 2 objects of 1TB
c)
to an 500GB EBS volume
d)
to an S3 bucket as a 2TB snapshot
60.
A client needs you to import some existing infrastructure from a dedicated hosting provider to AWS to try and save on the cost of running his current website. He also needs an automated process that manages backups, software patching, automatic failure detection, and recovery. You are aware that his existing set up currently uses an Oracle database. Which of the following AWS databases would be best for accomplishing this task?
a)
Amazon RDS
b)
Amazon Redshift
c)
Amazon SimpleDB
d)
Amazon ElastiCache
61.
True or false: A VPC contains multiple subnets, where each subnet can span multiple Availability Zones.
a)
This is true only if requested during the set-up of VPC.
b)
This is true.
c)
This is false.
d)
This is true only for US regions.
62.
An edge location refers to which Amazon Web Service?
a)
An edge location is refered to the network configured within a Zone or Region
b)
An edge location is an AWS Region
c)
An edge location is the location of the data center used for Amazon CloudFront.
d)
An edge location is a Zone within an AWS Region
63.
You are looking at ways to improve some existing infrastructure as it seems a lot of engineering resources are being taken up with basic management and monitoring tasks and the costs seem to be excessive. You are thinking of deploying Amazon ElasticCache to help. Which of the following statements is true in regards to ElasticCache?
a)
You can improve load and response times to user actions and queries however the cost associated with scaling web applications will be more.
b)
You can't improve load and response times to user actions and queries but you can reduce the cost associated with scaling web applications.
c)
You can improve load and response times to user actions and queries however the cost associated with scaling web applications will remain the same.
d)
You can improve load and response times to user actions and queries and also reduce the cost associated with scaling web applications.
64.
Do Amazon EBS volumes persist independently from the running life of an Amazon EC2 instance?
a)
Yes, they do but only if they are detached from the instance
b)
No, you cannot attach EBS volumes to an instance
c)
No, they are dependent.
d)
Yes, they do.
65.
Your supervisor has asked you to build a simple file synchronization service for your department. He doesn't want to spend too much money and he wants to be notified of any changes to files by email. What do you think would be the best Amazon service to use for the email solution?
a)
Amazon SES
b)
Amazon CloudSearch
c)
Amazon SWF
d)
Amazon AppStream
66.
A product team is creating a new application that will store a large amount of data. The data will be analyzed hourly and modified by multiple Amazon EC2 Linux instances. The application team believes the amount of space needed will continue to grow for the next 6 months. Which set of actions should a solutions architect take to support these needs'?
a)
Store the data in an Amazon EBS volume. Mount the EBS volume on the application instances
b)
Store the data in an Amazon EFS file system. Mount the file system on the application instances.
c)
Store the data in Amazon S3 Glacier. Update the vault policy to allow access to the application instances.
d)
Store the data in Amazon S3 Standard-Infrequent Access (S3 Standard-IA). Update the bucket policy to allow access to the application instances.
67.
A gaming company has multiple Amazon EC2 instances in a single Availability Zone for its multiplayer game that communicates with users on Layer 4. The chief technology officer (CTO) wants to make the architecture highly available and cost- effective. What should a solutions architect do to meet these requirements? (Select TWO. )
a)
Increase the number of EC2 instances.
b)
Decrease the number of EC2 instances
c)
Configure a Network Load Balancer in front of the EC2 instances.
d)
Configure an Application Load Balancer in front of the EC2 instances
e)
Configure an Auto Scaling group to add or remove instances in multiple Availability Zones automatically.
68.
A company hosts an application on multiple Amazon EC2 instances. The application processes messages from an Amazon SQS queue writes to an Amazon RDS table and deletes the message from the queue Occasional duplicate records are found in the RDS table. The SQS queue does not contain any duplicate messages. What should a solutions archived do to ensure messages are being processed once only?
a)
Use the CreateQueue API call to create a new queue
b)
Use the AddPermission API call to add appropriate permissions
c)
Use the ReceiveMessage API call to set an appropriate wait time.
d)
Use the ChangeMessageVisibility API call to increase the visibility timeout
69.
A solutions architect is designing an application for a two-step order process. The first step is synchronous and must return to the user with little latency. The second step takes longer, so it will be implemented in a separate component Orders must be processed exactly once and in the order in which they are received. How should the solutions architect integrate these components?
a)
Use Amazon SQS FIFO queues.
b)
Use an AWS Lambda function along with Amazon SQS standard queues
c)
Create an SNS topic and subscribe an Amazon SQS FIFO queue to that topic
d)
Create an SNS topic and subscribe an Amazon SQS Standard queue to that topic.
70.
A solutions architect is designing a high performance computing (HPC) workload on Amazon EC2. The EC2 instances need to communicate to each other frequently and require network performance with low latency and high throughput. Which EC2 configuration meets these requirements?
a)
Launch the EC2 instances in a cluster placement group in one Availability Zone
b)
Launch the EC2 instances in a spread placement group in one Availability Zone
c)
Launch the EC2 instances in an Auto Scaling group in two Regions and peer the VPCs
d)
Launch the EC2 instances in an Auto Scaling group spanning multiple Availability Zones
71.
A company is planning to use Amazon S3 lo store images uploaded by its users. The images must be encrypted at rest in Amazon S3. The company does not want to spend time managing and rotating the keys, but it does want to control who can access those keys. What should a solutions architect use to accomplish this?
a)
Server-Side Encryption with keys stored in an S3 bucket
b)
Server-Side Encryption with Customer-Provided Keys (SSE-C)
c)
Server-Side Encryption with Amazon S3-Managed Keys (SSE-S3)
d)
Server-Side Encryption with AWS KMS-Managed Keys (SSE-KMS)
72.
An Amazon EC2 administrator created the following policy associated with an IAM group containing several users. What is the effect of this policy?
a)
Users can terminate an EC2 instance in any AWS Region except us-east-1.
b)
Users can terminate an EC2 instance with the IP address 10. 100. 1001 in the us-east-1 Region.
c)
Users can terminate an EC2 instance in the us-east-1 Region when the user's source IP is 10. 100. 100. 254.
d)
Users cannot terminate an EC2 instance in the us-east-1 Region when the user's source IP is 10. 100. 100. 254.
73.
A company is running an ecommerce application on Amazon EC2. The application consists of a stateless web tier that requires a minimum of 10 instances, and a peak of 250 instances to support the application's usage. The application requires 50 instances 80% of the time. Which solution should be used to minimize costs?
a)
Purchase Reserved Instances to cover 250 instances
b)
Purchase Reserved Instances to cover 80 instances. Use Spot Instances to cover the remaining instances
c)
Purchase On-Demand Instances to cover 40 instances. Use Spot Instances to cover the remaining instances
d)
Purchase Reserved Instances to cover 50 instances. Use On-Demand and Spot Instances to cover the remaining instances
74.
Does DynamoDB support in-place atomic updates?
a)
Yes
b)
No
c)
It does support in-place non-atomic updates
d)
It is not defined
75.
Your manager has just given you access to multiple VPN connections that someone else has recently set up between all your company's offices. She needs you to make sure that the communication between the VPNs is secure. Which of the following services would be best for providing a low-cost hub-and-spoke model for primary or backup connectivity between these remote offices?
a)
Amazon CloudFront
b)
AWS Direct Connect
c)
AWS CloudHSM
d)
AWS VPN CloudHub
76.
Amazon EC2 provides a _____. It is an HTTP or HTTPS request that uses the HTTP verbs GET or POST.
a)
web database
b)
. net framework
c)
Query API
d)
C library
77.
In Amazon AWS, which of the following statements is true of key pairs?
a)
Key pairs are used only for Amazon SDKs.
b)
Key pairs are used only for Amazon EC2 and Amazon CloudFront.
c)
Key pairs are used only for Elastic Load Balancing and AWS IAM.
d)
Key pairs are used for all Amazon services.
78.
Does Amazon DynamoDB support both increment and decrement atomic operations?
a)
Only increment, since decrement are inherently impossible with DynamoDB's data model.
b)
No, neither increment nor decrement operations.
c)
Yes, both increment and decrement operations.
d)
Only decrement, since increment are inherently impossible with DynamoDB's data model.
79.
An organization has three separate AWS accounts, one each for development, testing, and production. The organization wants the testing team to have access to certain AWS resources in the production account. How can the organization achieve this?
a)
It is not possible to access resources of one account with another account.
b)
Create the IAM roles with cross account access.
c)
Create the IAM user in a test account, and allow it access to the production environment with the IAM policy.
d)
Create the IAM users with cross account access.
80.
You need to import several hundred megabytes of data from a local Oracle database to an Amazon RDS DB instance. What does AWS recommend you use to accomplish this?
a)
Oracle export/import utilities
b)
Oracle SQL Developer
c)
Oracle Data Pump
d)
DBMS_FILE_TRANSFER
81.
A user has created an EBS volume with 1000 IOPS. What is the average IOPS that the user will get for most of the year as per EC2 SLA if the instance is attached to the EBS optimized instance?
a)
950
b)
990
c)
1000
d)
900
82.
You need to migrate a large amount of data into the cloud that you have stored on a hard disk and you decide that the best way to accomplish this is with AWS Import/Export and you mail the hard disk to AWS. Which of the following statements is incorrect in regards to AWS Import/Export?
a)
It can export from Amazon S3
b)
It can Import to Amazon Glacier
c)
It can export from Amazon Glacier.
d)
It can Import to Amazon EBS
83.
You are in the process of creating a Route 53 DNS failover to direct traffic to two EC2 zones. Obviously, if one fails, you would like Route 53 to direct traffic to the other region. Each region has an ELB with some instances being distributed. What is the best way for you to configure the Route 53 health check?
a)
Route 53 doesn't support ELB with an internal health check. You need to create your own Route 53 health check of the ELB
b)
Route 53 natively supports ELB with an internal health check. Turn "Evaluate target health" off and "Associate with Health Check" on and R53 will use the ELB's internal health check.
c)
Route 53 doesn't support ELB with an internal health check. You need to associate your resource record set for the ELB with your own health check
d)
Route 53 natively supports ELB with an internal health check. Turn "Evaluate target health" on and "Associate with Health Check" off and R53 will use the ELB's internal health check.
84.
A user wants to use an EBS-backed Amazon EC2 instance for a temporary job. Based on the input data, the job is most likely to finish within a week. Which of the following steps should be followed to terminate the instance automatically once the job is finished?
a)
Configure the EC2 instance with a stop instance to terminate it.
b)
Configure the EC2 instance with ELB to terminate the instance when it remains idle.
c)
Configure the CloudWatch alarm on the instance that should perform the termination action once the instance is idle.
d)
Configure the Auto Scaling schedule activity that terminates the instance after 7 days.
85.
Which of the following is true of Amazon EC2 security group?
a)
You can modify the outbound rules for EC2-Classic.
b)
You can modify the rules for a security group only if the security group controls the traffic for just one instance
c)
You can modify the rules for a security group only when a new instance is created.
d)
You can modify the rules for a security group at any time.
86.
An Elastic IP address (EIP) is a static IP address designed for dynamic cloud computing. With an EIP, you can mask the failure of an instance or software by rapidly remapping the address to another instance in your account. Your EIP is associated with your AWS account, not a particular EC2 instance, and it remains associated with your account until you choose to explicitly release it. By default how many EIPs is each AWS account limited to on a per region basis?
a)
1
b)
5
c)
Unlimited
d)
10
87.
An application running on AWS uses an Amazon Aurora Multi-AZ deployment for its database. When evaluating performance metrics, a solutions architect discovered that the database reads are causing high I/O and adding latency to the write requests against the database. What should the solutions architect do to separate the read requests from the write requests?
a)
Enable read-through caching on the Amazon Aurora database
b)
Update the application to read from the Multi-AZ standby instance
c)
Create a read replica and modify the application to use the appropriate endpoint
d)
Create a second Amazon Aurora database and link it to the primary database as a read replica.
88.
An application runs on Amazon EC2 instances across multiple Availability Zones. The instances run in an Amazon EC2 Auto Scaling group behind an Application Load Balancer. The application performs best when the CPU utilization of the EC2 instances is at or near 40%. What should a solutions architect do to maintain the desired performance across all instances m the group?
a)
Use a simple scaling policy to dynamically scale the Auto Scaling group
b)
Use a target tracking policy to dynamically scale the Auto Scaling group
c)
Use an AWS Lambda function to update the desired Auto Scaling group capacity
d)
Use scheduled scaling actions to scale up and scale down the Auto Scaling group
89.
A company runs a multi-tier web application that hosts news content. The application runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an EC2 Auto Scaling group across multiple Availability Zones and use an Amazon Aurora database. A solutions architect needs to make the application more resilient to periodic increases in request rates. Which architecture should the solutions architect implement? (Select TWO )
a)
Add AWS Shield.
b)
Add Aurora Replicas
c)
Add AWS Direct Connect
d)
Add AWS Global Accelerator.
e)
Add an Amazon CloudFront distribution in front of the Application Load Balancer
90.
A solutions architect is optimizing a website for an upcoming musical event Videos of the performances will be streamed in real time and then will be available on demand. The event is expected to attract a global online audience.Which service will improve the performance of both the real-time and on-demand streaming?
a)
Amazon CloudFront
b)
AWS Global Accelerator
c)
Amazon Route 53
d)
Amazon S3 Transfer Acceleration
91.
A company serves content to its subscribers across the world using an application running on AWS. The application has several Amazon EC2 instances in a private subnet behind an Application Load Balancer (ALB). Due to a recent change in copyright restrictions the chief information officer (CIO) wants to block access for certain countries. Which action will meet these requirements?
a)
Modify the ALB security group to deny incoming traffic from blocked countries
b)
Modify the security group for EC2 instances to deny incoming traffic from blocked countries
c)
Use Amazon CloudFront to serve the application and deny access to blocked countries
d)
Use ALB listener rules to return access denied responses to incoming traffic from blocked countries
92.
A manufacturing company wants to implement predictive maintenance on its machinery equipment. The company will install thousands of loT sensors that will send data to AWS in real time. A solutions architect is tasked with implementing a solution that will receive events in an ordered manner for each machinery asset and ensure that data is saved for further processing at a later time. Which solution would be MOST efficient?
a)
Use Amazon Kinesis Data Streams for real-time events with a partition for each equipment asset. Use Amazon Kinesis Data Firehose to save data to Amazon S3.
b)
Use Amazon Kinesis Data Streams for real-time events with a shard for each equipment asset. Use Amazon Kinesis Data Firehose to save data to Amazon EBS.
c)
Use an Amazon SQS FIFO queue for real-time events with one queue for each equipment asset. Trigger an AWS Lambda function for the SQS queue to save data to Amazon EFS.
d)
Use an Amazon SQS standard queue for real-time events with one queue for each equipment asset. Trigger an AWS Lambda function from the SQS queue to save data to Amazon S3.
93.
A company has deployed an API in a VPC behind an internet-facing Application Load Balancer (ALB). An application that consumes the API as a client is deployed in a second account in private subnets behind a NAT gateway. When requests to the client application increase, the NAT gateway costs are higher than expected. A solutions architect has configured the ALB to be internal. Which combination of architectural changes will reduce the NAT gateway costs'? (Select TWO )
a)
Configure a VPC peering connection between the two VPCs. Access the API using the private address
b)
Configure an AWS Direct Connect connection between the two VPCs. Access the API using the private address.
c)
Configure a ClassicLink connection for the API into the client VPC. Access the API using the ClassicLink address.
d)
Configure a PrivateLink connection for the API into the client VPC. Access the API using the PrivateLink address.
e)
Configure an AWS Resource Access Manager connection between the two accounts. Access the API using the private address
94.
In Amazon EC2, partial instance-hours are billed _____.
a)
per second used in the hour
b)
per minute used
c)
by combining partial segments into full hours
d)
as full hours
95.
In EC2, what happens to the data in an instance store if an instance reboots (either intentionally or unintentionally)?
a)
Data is deleted from the instance store for security reasons.
b)
Data persists in the instance store.
c)
Data is partially present in the instance store.
d)
Data in the instance store will be lost.
96.
You are setting up a VPC and you need to set up a public subnet within that VPC. Which following requirement must be met for this subnet to be considered a public subnet?
a)
Subnet's traffic is not routed to an internet gateway but has its traffic routed to a virtual private gateway.
b)
Subnet's traffic is routed to an internet gateway.
c)
Subnet's traffic is not routed to an internet gateway.
d)
None of these answers can be considered a public subnet.
97.
Can you specify the security group that you created for a VPC when you launch an instance in EC2-Classic?
a)
No, you can specify the security group created for EC2-Classic when you launch a VPC instance
b)
No
c)
Yes
d)
No, you can specify the security group created for EC2-Classic to a non-VPC based instance only.
98.
While using the EC2 GET requests as URLs, the _______ is the URL that serves as the entry point for the web service.
a)
token
b)
endpoint
c)
action
d)
None of these
99.
You have been asked to build a database warehouse using Amazon Redshift. You know a little about it, including that it is a SQL data warehouse solution, and uses industry standard ODBC and JDBC connections and PostgreSQL drivers. However you are not sure about what sort of storage it uses for database tables. What sort of storage does Amazon Redshift use for database tables?
a)
InnoDB Tables
b)
NDB data storage
c)
Columnar data storage
d)
NDB CLUSTER Storage
100.
You are checking the workload on some of your General Purpose (SSD) and Provisioned IOPS (SSD) volumes and it seems that the I/O latency is higher than you require. You should probably check the ____ to make sure that your application is not trying to drive more IOPS than you have provisioned.
a)
Amount of IOPS that are available
b)
Acknowledgement from the storage subsystem
c)
Average queue length
d)
Time it takes for the I/O operation to complete
Reset
