Aws Certified Solutions Architect Associate Flashcards ionicons-v5-c

Which statement best describes IAM. A. IAM allows you to manage users, groups, roles, and their corresponding level of access to the AWS platform.B. IAM allows you to manage users passwords only. AWS staff must create new users for your organization. This is done by raising a ticket.C. IAM allows you to manage permissions for AWS resources only.D. IAM stands for Improvised Application Management and it allows you to deploy and manage applications in the AWS Cloud.

A

Which of the following is not a feature of IAM?A. Centralized control of your AWS account.B. Integrates with existing active directory account allowing single sing on.C. Fine-grained access control to AWS resources. D. The ability to create User/Group/Roles.E. Allows you to set up your own password rotation policy.F. Allows you to setup biometric authentication, so that no passwords are required.

F

Power User Access allowsA. Full access to all AWS services and resources.B. Read Only access to all AWS services and resources.C. Access to all AWS services except for management of groups and users within IAMD. Users to inspect the source code of the AWS platform

C

What level of access does the "root" account have?A. Read Only AccessB. Power User AccessC. Administrator AccessD. No Access

C

You are a solutions architect working for a large engineering company who are moving their existing legacy hardware to AWS. You have configured their first AWS account and you have set up IAM. Your company will be primarily based out of West Germany, however they will have a small subsidiary operating out of South Korea and you will need an AWS environment configured there as well. Which of the following statements is true:A. You will need to configure Users and Policy Documents for each region respectively.B. You will need to configure Users and Policy Documents only once, as these are applied globally. C. You will need to configure your users regionally, however your policy documents are global.D. You will need to configure your policy documents regionally, however your users are global.

B

You have a client who is considering moving to AWS services and do not yet have an account. What is the first thing the company should do to set up an AWS Account?A. Set up an account using Cloud SearchB. Set up an account using their company email address.C. Set up an account via SQSD. Set up an account via SNS

B

D

What is an additional way to secure IAM for both the root login and new users alike?A. Implement multi-factor Authentication fo all accounts.B. Store the access key id and secret access key of all users in a publicly accessible plain text document on S3 of which only you and members of your organization know the address to.C. Configure the AWS console so that you can only log in to it from a specific IP address range.D. Configure the AWS console so that you can only log in to it from your internal network IP address range.

A

By default when you create a new user in the IAM console, what level of access do they have?A. Read only access to all AWS services.B. No access to all AWS services.C. Administrator access to all AWS services.D. Power user access to all AWS services.

B

In what language are policy documents written in?A. Node.jsB. JavaC. JSOND. Python

C

S3 has what consistency model for PUTS of new objects?A. Read After Write ConsistencyB. Write After Read ConsistencyC. Eventual ConsistencyD. Usual Consistency

A

What is AWS Storage Gateway?A. It's an on-premise virtual appliance that can be used to cache S3 locally at a customers site.B. It allows large scale import/export in to the AWS cloud without the use of an internet connection.C. It allows a direct MPLS connection in to AWS.D. None of the above.

A

One of your users is trying to upload a 7.5GB file to S3 however they keep getting the following error message - "Your proposed upload exceeds the maximum allowed object size.". What is a possible solution for this?A. Design your application to use the multi-part upload API for all objects. B. Design your application to use large object upload API for this object.C. Raise a ticket with AWS to increase your maximum object size.D. Log in to the S3 console, click on the bucket and then click properties. You can then increase your maximum object size to 1TB.

A

What does RRS stand for when talking about S3?A. Relational Reaction StorageB. Reduced Redundancy StorageC. Regional Rights StorageD. Redundancy Reduced System

B

You have been asked by your company to create an S3 bucket with the name "acloudguru1234" in the EU West region. What would be the URL for this bucket?A. https://s3-eu-west-1.amazonaws.com/acloudguru1234B. https://s3-us-east-1.amazonaws.com/acloudguru1234C. https://s3.acloudguru1234.amazonaws.com/eu-west-1D. https://s3-acoudguru1234.amazonaws.com/

A

What is Amazon Glacier?A. A tool that allows to "freeze" an EBS volume.B. An AWS service designed for long term data archival.C. A highly secure firewall designed to keep everything out.D. It is a tool used to resurect deleted EC2 snapshots.

B

C

What is the minimum file size that I can store on S3?A. 1 KbB. 1 MbC. 1 GbD. 1 Byte

D

S3 has eventual consistency for which HTTP methods?A. PUTS of new objects and DELETESB. overwrite PUTS and DELETESC. PUTS of new object and UPDATESD. UPDATES and DELETES

B

You run a popular photo sharing website that is based off s3. You generate revenue from your website via paid for adverts, however you have discovered that other websites are linking directly to the images on your site, and not to the HTML pages that serve the content. This means that people are not seeing your adverts and every time a request is made to S3 to serve an image it is costing your business money. How could you resolve this issue?A. Use CloudFront to serve the static content.B. Remove the ability for images to be served publicly to the site and then use signed URL's with expiry dates.C. Use security groups to blacklist the IP addresses of the sites that do this.D. Use EBS rather than S3 to store the content.

B

There is a limit to the number of domain names that you can manage using Route 53.A. True. There is a hard limit of 10 domain names. You cannot go above this number.B. True and False. There is a limit of 50 domain names however this limit can be raised by contacting AWS support.C. False. You can support as many domain names on Route53 as you want, by default.

B

EBS snapshots are backed up to S3 in what manner?A. IncrementallyB. ExponentiallyC. DecreasinglyD. EBS snapshots are not stored on S3

A

Do Amazon EBS volumes persist independently from the life of an Amazon EC2 instance, for example, if I terminated an EC2 instance, would that EBS volume remain?A. YesB. NoC. Only if structured to when createdD. Depends on the region

CBy default EBS volumes are set to 'Delete on Termination' meaning they persist only if instructed.

Can I delete a snapshot of an EBS volume that is used as the root device of a registered AMI?A. NoB. YesC. Only via the Command LineD. Only via the API

AYou must deregister the AMI before being able to delete the root device.

A placement group can be deployed across multiple availability zones.A. TrueB. False

B

While creating the snapshots using the command line tools, which command should I be using?A. ec2-create-snapshotB. ec2-fresh-snapshotC. ec2-deploy-snapshotD. ec2-new-snapshot

A

Can you attach an EBS volume to more than one EC2 instance at the same time?A. YesB. NoC. If that EC2 volume is part of an AMID. Depends on the region

B

A placement group is ideal forA. Distributing content on a CDN networkB. EC2 instances that require high disk I/OC. EC2 instances that require low latency and high network throughput across multiple availability zonesD. EC2 instances that require high network throughput and low latency across a single availability zone.

D

Using the console, I can add a role to an EC2 instance, after that instance has been created and powered up. A. TrueB. False

B

I can change the permissions to a role, even if that role is already assigned to an existing EC2 instance, and these changes will take effect immediately. A. TrueB. False

A

What AWS DB platform is most suitable for OLTP?A. ElasticacheB. RDS/DynamoDBC. Redshift

B

When replicating data from your primary RDS instance to your secondary RDS instance, what is the charge?A. Double the standard data transfer chargeB. Same as the standard data transfer chargeC. No charge, it's freeD. Half of the standard data transfer charge

C

What happens to the I/O operations while you take a database snapshot?A. I/O operations to the database are suspended for the duration of the snapshotB. I/O operations to the database are sent to a replica (if available) for the duration of the snapshotC. I/O operations will be functioning normallyD. Nothing

A

In RDS when using multiple availability zones, can you use the secondary database as an independent read node?A. NoB. Only in US-West-1C. Depends on how you set it upD. Yes

A

Amazon's Elasticache uses which two engines?A. Redis & MemoryB. Reddit & MemcrushC. Redis & MemcachedD. MyISAM & InnoDB

C

By default, the maximum provisioned IOPS capacity on an Oracle and MySQL RDS instance (using provisioned IOPS) is 30,000 IOPS. A. TrueB. False

A

Security groups act like a firewall at the instance level whereas ___ are an additional layer of security that act at the subnet level.A. Network ACLsB. DB Security groupsC. VPC security groupsD. Route Tables

A

How many VPCs am I allowed in each AWS region by default?A. 1B. 2C. 3D. 4E. 5F. 10

E

You have a VPC with both public and private subnets. You have 3 EC2 instances that have been deployed in to the public subnet and each has internet access. You deploy a 4th instance using the same AMI and this instance does not have internet access. What could be the cause of this?A. The instance needs a private route out to the internet.B. The instance needs either an Elastic IP address/Public IP address assigned to it.C. The instance's security group is preventing it from connecting to the internet.D. The ACL of the subnet is preventing access to the internet.

B

Amazon SWF is designed to help usersA. Manage user identification and authorization.B. Coordinate synchronous and asynchronous tasks.C. Secure their VPCs.D. Help users store file based objects.

B

In RDS, what is the maximum value I can set for my backup retention period?A. 15 daysB. 30 daysC. 35 daysD. 45 days

C

Automated backups are enabled by default for a new DB instance?A. TrueB. False

A

Amazon RDS does not currently support increasing storage on a _____ DB instance. A. MySQLB. AuroraC. OracleD. SQL Server

D

In what circumstances would I choose provisioned IOPS in RDS over standard storage?A. If you use production online transaction processing. B. If you have workloads that are not sensitive to latency/lag.C. If your business was trying to save money.D. If this was a test DB.

A

Amazon's S3 is____A. Object based storage.B. Block based storage.C. A Data warehouse solution.D. Suitable for data archival, not frequently used files.

A

Amazon's EBS volumes are_____A. Object based storage.B. Block based storage.C. Encrypted by default.D. Not suitable for database.

B

D

Can you access Amazon EBS snapshots?A. Yes through the AWS APIs/CLI & AWS Console.B. NoC. Depends on the regionD. EBS does not have snapshot functionality

A

A_____is a document that provides a formal statement of one or more permissions.A. policyB. userC. groupD. role

A

In a default VPC, all Amazon EC2 instances are assigned 2 IP addresses at launch, what are these?A. Private IP address & Public IP address.B. Public IP Address & Secret IP Address.C. Elastic IP Address & Public IP Address.D. IPv6 Address and Elastic IP Address.

A

If an Amazon EBS volume is the root device of an instance, can I detach it without stopping the instance?A. YesB. No

B

If you want your application to check whether a request generated an error then you look for an_____node in the response from the Amazon RDS API. A. IncorrectB. ErrorC. FalseD. True

B

Can I move a reserved instance from one region to another?A. YesB. Only in the USC. NoD. Depends on the region

C

Can I "force" a failover for any RDS instance that has Multi-AZ configured?A. YesB. NoC. Only for Oracle RDS instances

A

You can conduct your own vulnerability scans within your own VPC without alerting AWS first?A. TrueB. False

B

Reserved instances are available for multi-AZ deployments.A. TrueB. False

A

If an Amazon EBS volume is an additional partition (i.e. not the root volume), can I detach it without stopping the instance?A. Yes, although it may take some time.B. No, you will need to stop the instance.

A

Individual instances are provisioned in____A. Regions only. You cannot chose anything below this.B. Availability zones.C. Global

B

How many copies of my data does RDS-Aurora store by default?A. 3B. 6C. 2D. 1

B

What is the difference between Elastic Beanstalk & CloudFormation?A. Elastic Beanstalk is a monitoring tool to view the performance of your AWS resources, where as CloudFormation is an automated provisioning engine designed to deploy entire could environments via a JSON script. B. Elastic Beanstalk automatically handles the deployment, from capacity provisioning, load balancing, auto-scaling to application health monitoring based on the code you upload to it, where as CloudFormation is an automated provisioning engine designed to deploy entire cloud environments via a JSON script. C. There is no difference between the two. Elastic Beanstalk was simply the code name used internally for CloudFormation, prior to the product being released.D. Elastic Beanstalk automatically handles the deployment, from capacity provisioning, load balancing, auto-scaling to application health monitoring based on the code you upload to it, where as CloudFormation is a security service designed to harden your cloud against an attack such as a DDOS.

B

When I create a new security group, all outbound traffic is allowed by default.A. TrueB. False

A

B

AWS DNS service is known as_______A. ClouDNSB. CloudFrontC. CloudTrailD. Route53

D

You are a solutions architect working for a company that specializes in ingesting large data feeds (using Kinesis) and then analyzing these feeds using EMR. The results are then stored on a custom MySQL database which is hosted on an EC2 instance which has 3 volumes, the root/boot volume, and then 2 additional volumes which are striped in to a RAID 1. Your company recently had an outage and lost some key data and have since decided that they will need to run nightly back ups. Your application is only used during office hours, so you can afford to have some down time in the middle of the night if required. You decide to take a snapshot of all three volumes every 24 hours. In what manner should you do this?A. Take a snapshot of each volume independently, while the EC2 instance is running.B. Stop the EC2 instance and take a snapshot of each EC2 instance independently. Once the snapshots are complete, start the EC2 instance and ensure that all relevant volumes are remounted. C. Add two additional volumes to the existing RAID 0 volume and mirror these volumes creating a RAID 10. Take a snap of only the two new volumes.D. Create a read replica of existing EC2 instance and then take your snapshots from the read replica and not the live EC2 instance.

B

What are the valid methodologies for encrypting data on S3?A. Server Side Encryption (SSE)-S3, SSE-C, SSE-KMS or a client library such as Amazon S3 Encryption Client.B. Server Side Encryption (SSE)-S3, SSE-A, SSE-KMS or a client library such as Amazon S3 Encryption Client.C. Server Side Encryption (SSE)-S3, SSE-C, SSE-SSL or a client library such as Amazon S3 Encryption Client.D. Server Side Encryption (SSE)-S3, SSE-C, SSE-SSL or a server library such as Amazon S3 Encryption Client.

A

In Identity and Access Management, when you first create a new user, certain security credentials are automatically generated. Which of the below are valid security credentials?A. Access Key ID, Authorized KeyB. Private Key, Secret Access KeyC. Private Key, Authorized KeyD. Access Key ID, Secret Access Key

D

Amazon Web Services offer 3 different levels of support, which of the below are valid support levels.A. Corporate, Business, Developer.B. Enterprise, Business, Developer.C. Enterprise, Business, Free Tier.D. Enterprise, Company, Free Tier.

B

You are a solutions architect working for a large digital media company. Your company is migrating their production estate to AWS and you are in the process of setting up access to the AWS console using Identity Access Management (IAM). You have created 5 users for your system administrators. What further steps do you need to take to enable your system administrators to get access to the AWS console?A. Generate an Access Key ID & Secret Access Key, and give these to your system administrators. B. Enable multifactor authentication on their accounts and define a password policy.C. Generate a password for each user created and give these passwords to your system administrators.D. Give the system administrators the secret access key and access key id, and tell them to use these credentials to log in to the AWS console.

C

Which of the following services allows you root access (i.e. you can login using SSH)?A. Elastic Load BalancerB. Elastic Map ReduceC. ElasticacheD. RDS

B

When trying to grant an Amazon account access to S3 using access control lists, what method of identification should you use to identify that account with?A. The email address of the account or the canonical user ID.B. The AWS account number.C. The ARN.D. An email address with a 2FA token.

A

You are a solutions architect working for a large oil and gas company. Your company runs their production environment on AWS and has a custom VPC. The VPC contains 3 subnets, 1 of which is public and the other 2 are private. Inside the public subnet is a fleet of EC2 instances which are the result of an autoscaling group. All EC2 instances are in the same security group. Your company has created a new custom application which connects to mobile devices using a custom port. This application has been rolled out to production and you need to open this port globally to the internet. What steps should you take to do this, and how quickly will the change occur?A. Open the port on the existing network Access Control List. Your EC2 instances will be able to communicate on this port after a reboot.B. Open the port on the existing network access control list. Your EC2 instances will be able to communicate over this port immediately.C. Open the port on the existing security group. Your EC2 instances will be able to communicate over this port immediately.D. Open the port on the existing security group. Your EC2 instances will be able to communicate over this port as soon as the relevant Time To Live (TTL) expires.

C

Which of the following is not a service of the security category of the AWS trusted advisor service?A. Security Groups-Specific ports unrestrictedB. MFA on root accountC. IAM useD. Vulnerability scans on existing VPC

D

You work for a market analysis firm who are designing a new environment. They will ingest large amounts of market data via Kinesis and then analyze this data using EMR. The data is then imported in to a high performance NoSQL Cassandra database which will run on EC2 and then be accessed by traders from around the world. The database volume itself will sit on 2 EBS volumes that will be grouped into a RAID 0 volume. They are expecting very high demand during peak times, with an IOPS performance level of approximately 15,000. Which EBS volume should you recommend?A. MagneticB. General Purpose SSDC. Provisioned IOPSD. Turbo IOPS

C

Which of the following is not a valid configuration type for AWS Storage Gateway?A. Gateway-accessed volumes.B. Gateway-cached volumes.C. Gateway-stored volumes.D. Gateway-virtual tape library.

A

You have started a new role as a solution architect for an architectural firm that designs large sky scrapers in the Middle East. Your company hosts large volumes of data and has about 250Tb of data on internal servers. They have decided to store this data on S3 due to the redundancy offered by it. The company currently has telecoms line of 2Mbps connecting their head office to the internet. What method should they use to import this data on to S3 in the fastest manner possible.A. Upload it directly to S3.B. Purchase AWS Direct Connect and transfer the data over that once it is installed.C. AWS datapipe lineD. AWS Import/Export

D

You are designing a site for a new start up which generates cartoon images for people automatically. Customers will log on to the site, upload an image which is stored in S3. The application then passes a job to AWS SQS and a fleet of EC2 instances poll the queue to receive new processing jobs. These EC2 instances will then turn the picture in to a cartoon and will then need to store the processed job somewhere. Users will typically download the image once (immediately), and then never download the image again. What is the most commercially feasible method to store the processed images?A. Rather than use S3, store the image inside a BLOB on RDS with Multi-AZ configured for redundancy.B. Store the images on S3 RRS, and create a lifecycle policy to delete the image after 24 hours. C. Store the images on glacier instead of S3.D. Use elastic block storage volumes to store the images.

B

You have a high performance compute application and you need to minimize network latency between EC2 instances as much as possible. What can you do to achieve this?A. Use Elastic Load Balancing to load balance traffic between availability zones.B. Create a CloudFront distribution and to cache objects from an S3 bucket at Edge Locations. C. Create a placement group within an Availability Zone and place the EC2 instances within that placement group. D. Deploy your EC2 instances within the same region, but in different subnets and different availability zones so as to maximize redundancy.

C

Amazon S3 buckets in all Regions provide read-after-write consistency for PUTS of new objects and eventual consistency for overwirte PUTS and DELETES.A. TrueB. False

A

Placement Groups can be created across 2 or more Availability Zones. A. TrueB. False

B

You can add multiple volumes to an EC2 instance and then create your own RAID 5/RAID 10/RAID 0 configurations using those volumes.A. TrueB. False

A

You are creating your own relational database on an EC2 instance and you need to maximize IOPS performance. What can you do to achieve this goal?A. Add a single additional volume to the EC2 instance with provisioned IOPS. B. Create the database on an S3 bucket.C. Add multiple additional volumes with provisioned IOPS and then create a RAID 0 stripe across those volumes.D. Attach the single volume to multiple EC2 instances so as to maximize performance.

C

Which of the services below do you get root access to?A. Elasticache & Elastic MapReduceB. RDS & DynamoDBC. EC2 & Elastic MapReduceD. Elasticache & DynamoDB

C

Using SAML you can give your federated users single sign-on (SSO) access to the AWS Management Console.A. TrueB. False

A

You can have 1 subnet stretched across multiple availability zones.A. TrueB. False

B

When you create new subnets within a custom VPC, by default they can communicate with each other, across availability zones. A. TrueB. False

A

It is possible to transfer a reserved instance from one Availability Zone to another.A. TrueB. False

A

You have an EC2 instance which needs to find out both its private IP address and its public IP address. To do this you need to_______A. Run IPCONFIG (Windows) or IFCONFIG (Linux)B. Retrieve the instance Metadata from http://169.254.169.254/latest/meta-data/C. Retrieve the instance Userdata from http://169.254.169.254/latest/meta-data/D. User the following command: AWS EC2 displayIP

B

You can select a specific Availability Zone in which to place your DynamoDB Table.A. TrueB. False

B

When creating an RDS instance you can select which availability zone in which to deploy your instance.A. TrueB. False

A

You run a website which hosts videos and you have two types of members, premium fee paying members and free members. All videos uploaded by both your premium members and free members are processed by a fleet of EC2 instances which will poll SQS as videos are uploaded. However you need to ensure that your premium fee paying members videos have a higher priority than your free members. How do you design SQS?A. SQS allows you to set priorities on individual items within the queue, so simply set the fee paying members at a higher priority than your free members. B. Create two SQS queues, one for premium members and one for free members. Program your EC2 fleet to poll the premium queue first and if empty, to then poll your free members SQS queue.C. SQS would not be suitable for this scenario. It would be much better to use SNS to encode the videos.

B

You have uploaded a file to S3. What HTTP code would indicate that the upload was successful?A. HTTP 404B. HTTP 501C. HTTP 200D. HTTP 307

C

You are hosting a MySQL database on the root volume of an EC2 instance. The database is using a large amount of IOPs and you need to increase the IOPs available to it. What should you do?A. Migrate the database to an S3 bucket.B. Migrate the database to Glacier.C. Add 4 additional EBS SSD volumes and create a RAID 10 using these volumes.D. Use Cloud Front to cache the database.

C

You have been asked to create VPC for your company. The VPC must support both Internet-facing web applications (ie they need to be publicly accessible) and internal private applications (i.e. they are not publicly accessible and can be accessed only over VPN). The internal private applications must be inside a private subnet. Both the internet-facing and private applications must be able to leverage at least three Availability Zones for high availability. At a minimum, how many subnets must you create within your VPC to achieve this?A. 5B. 3C. 4D. 6

D

You working in the media industry and you have created a web application where users will be able to upload photos they create to your website. This web application must be able to call the S3 API in order to be able to function. Where should you store your API credentials whilst maintaining the maximum level of security.A. Save the API credentials to your php files.B. Don't save your API credentials. Instead create a role in IAM and assign this role to an EC2 instance when you first create it.C. Save your API credentials in a public github repository.D. Pass API credentials to the instance using instance metadata.

B

You are a systems administrator and you need to monitor the health of your production environment. You decide to do this using Cloud Watch, however you notice that you cannot see the health of every important metric in the default dash board. Which of the following metrics do you need to design a custom cloud watch metric for, when monitoring the health of your EC2 instances?A. CPU usageB. Memory usageC. Disk read operationsD. Network inE. Estimated charges

B

You are a student currently learning about the different AWS services. Your employer asks you to tell him a bit about Amazon's glacier service. Which of the following best describes the use cases for Glacier?A. Infrequently accessed data & data archives.B. Hosting active databases.C. Replicating files across multiple availability zones and regions. D. Frequently accessed data.

A

You work for a toy company that has a busy online store. As you are approaching Christmas, you find that your store is getting more and more traffic. Your web tier is behind an Auto Scaling group, but you notice that is is frequently scaling, sometimes multiple times in an hour, only to scale back down after peak usage. You need to keep Auto Scaling from scaling up and down so rapidly. Which of the following options would help you to achieve this?A. Configure Auto Scaling to terminate your oldest instances first, then adjust your CloudWatch alarm.B. Configure Auto Scaling to terminate your newest instances first, then ad just your CloudWatch alarm.C. Change your Auto Scaling so that it only scales at scheduled times.D. Modify the Auto Scaling group cool-down timers & modify the Amazon CloudWatch alarm period that triggers your Auto Scaling scale down policy.

D

You work in the genomics industry and you process large amounts of genomic data using a nightly Elastic Map Reduce (EMR) job. This job processes a single 3 Tb file which is stored on S3. The EMR job runs on 3 on-demand core nodes and four on-demand task nodes. The EMR job is now taking longer than anticipated and you have been asked to advise how to reduced the completion time?A. Use for Spot Instances for the task nodes rather than four On-Demand instances.B. You should reduce the input split size in the MapReduce job configuration and then adjust the number of simultaneous mapper tasks so that more tasks can be processed at once. C. Store the file on Elastic File Service instead of S3 and then mount EFS as an independent volume for your core nodes.D. Configure an independent VPC in which to run the EMR jobs and then mount EFS as an independent volume for your core nodes.E. Enable termination protection for the job flow.

B

You are a security architect working for a large antivirus company. The production environment has recently been moved to AWS and is in a public subnet. You are able to view the production environment over HTTP however when your customers try to update their virus definition files over a custom port, that port is blocked. You log in to the console and you allow traffic in over the custom port. How long will this take to take effect?A. Straight away but to the new instances only.B. ImmediatelyC. After a few minutes this should take effect.D. Straight away to the new instances, but old instances must be stopped and restarted before the new rules apply.

B

You are a solutions architect working for a biotech company who is pioneering research in immunotherapy. They have developed a new cancer treatment that may be able to cure up to 94% of cancers. They store their research data on S3, however recently an intern accidentally deleted some critical files. You've been asked to prevent this from happening in the future. What options below can prevent this?A. Make sure the interns can only access data on S3 using signed URLs.B. Enable S3 versioning on the bucket & enable Enable multifactor authemtication (MFA) on the bucket.C. Use S3 infrequently accessed storage to store the data on.D. Create an IAM bucket policy that disables deletes.

B

C

You are a solutions architect who has been asked to do some consulting for a US company that produces re-useable rocket parts. They have a new web application that needs to be built and this application must be stateless. Which three services could you use to achieve this?A. AWS Storage Gateway, Elasticache & ELBB. ELB, ELasticache & RDSC. CloudWatch, RDS & DynamoDBD. RDS, DynamoDB & Elasticache

D

You work for a famous bakery who are deploying a hybrid cloud approach. Their legacy IBM AS400 servers will remain on premise within their own datacenter however they will need to be able to communicate to the AWS environment over a site to site VPN connection. What do you need to do to establish the VPN connection?A. Connect to the environment using AWS Direct Connect.B. Assign a public IP address to your Amazon VPC Gateway.C. Create a dedicated NAT and deploy this to the public subnet.D. Update your route table to add a route for the NAT to 0.0.0.0/0

B

You work for a major news network in Europe. They have just released a new app which allows users to report on events as and when they happen using their mobile phone. Users are able to upload pictures from the app and then other users will be able to view these pics. Your organisation expects this app to grow very quickly, essentially doubling it's user base every month. The app uses S3 to store the media and you are expecting sudden and large increases in traffic to S3 when a major news event takes place (as people will be uploading content in huge numbers). You need to keep your storage costs to a minimum however and it does not matter if some objects are lost. Which storage media should you use to keep costs as low as possible?A. S3-Infrequently Accessed Storage.B. S3-Reduced Redundancy Storage (RRS).C. GlacierD. S3-Provisioned IOPS.

B

You work for a construction company that has their production environment in AWS. The production environment consists of 3 identical web servers that are launched from a standard Amazon linux AMI using Auto Scaling. The web servers are launched in to the same public subnet and belong to the same security group. They also sit behind the same ELB. You decide to do some test and dev and you launch a 4th EC2 instance in to the same subnet and same security group. Annoyingly your 4th instance does not appear to have internet connectivity. What could be the cause of this?A. You need to update your routing table so as to provide a route out for this instance.B. Assign an elastic IP address to the fourth instance.C. You have not configured a NAT in the public subnet.D. You have not configured a routable IP address in the host OS of the fourth instance.

B

You are a solutions architect working for a large pharmaceutical company who are involved in high performance computing to develop new drugs to treat arthritis. You are helping them to design a new application which will need to keep network traffic the lowest latency possible while leveraging very high CPU performance. They would like to place this solution on to the AWS platform and are looking for your recommendations. Which of the following do you suggest?A. CPU optimized EC2 instances deployed into placement groups.B. Elastic High Performance Compute Services.C. Leverage Redshift to perform business intelligence analysis on your dataset.D. CPU optimized EC2 instances deployed across multiple availability zones for redundancy.

A

You work for a automotive company which is migrating their production environment in to AWS. The company has 4 separate segments, Dev, Test, UAT & Production. They require each segment to be logically isolated from each other. What VPC configuration should you recommend?A. A separate subnet for each segment. Then create DENY routes to stop each subnet from being able to communicate to each other.B. A separate VPC for each segment. Then create VPN tunnels from your HQ to each VPC so the appropriate teams can each speak to their dedicated VPC.C. Deploy the EC2 instances for each segment in to separate security groups inside the same subnet.D. Use 1 VPC and 2 subnets. Separate each segment using a combination of security groups and ACLs.

B

By default how many VPCs can you have per region in your AWS account?A. 1B. 2C. 5D. 10

C

Which of the following is not a responsibility of Amazon's under the shared responsibility model?A. Data center security.B. Hypervisor patching.C. OS level patching for RDS.D. OS level patching for EC2.

D

In regards to EC2 which of the following is not a customers responsibility under the shared responsibility model?A. AntivirusB. Decommissioning and destruction of storage media.C. OS level patches.D. Application level patches

B

You are solutions architect working for a busy e-commerce store. Due to your organization's unique security requirements, you decide to utilize EC2 running a MySQL database, rather than using RDS. You need to architect this EC2 instance to maximize your disk IO. Which of the following would give you the best disk performance?A. Install your MySQL instance on your root device volume on your EC2 instance.B. Add 2 x additional General Purpose SSD volumes to your EC2 instance, create a RAID 1 and then install MySQL to the newly created RAID 1 partition.C. Add 3 x additional PIOPS SSD volumes and create a RAID 5. Install MySQL to this RAID 5 partition.D. Add 2 x additional PIOPS SSD volumes and create a RAID 0. Install MySQL to this RAID 0 partition.

D

You are creating a new VPC with 3 subnets in 3 separate availability zones. You require instances in each subnet to be able to communicate to each other by default. What additional steps should you take in order to achieve this objective.A. Create a route between each subnet in a new route table and then associate this with each subnet.B. You do not need to do anything, by default all subnets can communicate with each other using the main route table.C. Create a route between each subnet in the main route table and then associate this main route table with each subnet.D. Ensure that each subnet is associated with a security group that will contain your EC2 instances.

B

You are an AWS architect and you require encryption at rest for additional volumes attached to your EC2 instance. What is the quickest and most efficient way to achieve this?A. Configure encryption when creating the EBS volume.B. Configure encryption using the appropriate Operating Systems file system.C. Configure encryption using X.509 certificates.D. Mount the EBS volume in to S3 and then encrypt the bucket using a bucket policy.

A

A

What blocksize does Redshift use when storing it's data in columnar storage?A. 2KBB. 4KBC. 32KBD. 1024KB

D

You are designing an image sharing website that will distribute images across the world. You need maximise performance so that your end users can download frequently accessed images as fast as possible. What AWS technology should you implement?A. GlacierB. Global Load BalancingC. CloudFrontD. Autoscaling

C

You are putting together a wordpress site for a local charity and you are using a combination of Route53, Elastic Load Balancers, EC2 & RDS. You launch your EC2 instance, download wordpress and setup the configuration files connection string so that it can communicate to RDS. When you browse to your URL however, nothing happens. Which of the following could NOT be the cause of this.A. You have forgotten to open port 80/443 on your security group in which the EC2 instance is placed.B. Your elastic load balancer has a health check which is checking webpage that does not exist, therefore your EC2 instance is not in service.C. You have not configured an ALIAS for your A record to point to your elastic load balancer.D. You have locked port 22 down to your specific IP address, therefore users cannot access your site using HTTP/HTTPS.

D

You have created a custom VPC with 3 subnets, 2 private, 1 public. You deploy 3 EC2 instances in to your public subnet and attach Elastic IP addresses to these instances. You then deploy an EC2 instance in to your private subnet and then attempt to apply security patches to this instance, however it has no internet connectivity. What can you do to give this instance internet access?A. Deploy a NAT to the public subnet and then update the main route table to send traffic via the NAT to the private subnet.B. Deploy your instance to a public subnet instead.C. Attach a public IP address to your EC2 instance in the private subnet.D. Attach an additional internet gateway to your EC2 instance in the private subnet.

A

Placement Groups can be created across 2 or more Availability Zones.A. TureB. False

BPlacement Groups are restricted to a single AZ.

You have three AWS accounts (A, B & C) which share data. In an attempt to maximize performance between the accounts, you deploy the instances owned by these three accounts in "eu-west-1b". During testing, you find inconsistent results in transfer latency between the instances. Transfer between accounts A and B is excellent, but transfers between accounts B and C, and C and A, are slower. What could be the problem ?A. The names of the AZs are randomly applied, so 'eu-west-1b' is not necessarily the same physical location for all three accounts. B. You have incorrectly configured the cross-account authentication policies in Account C, adding latency to those instances.C. Account C has been allocated to an older section of the Data Hall with slower networking. D. The instances for Account C are on an overloaded host. Stop all the Account C instances and then start them together so that they run on a new host.E. You have accidentally set up Account C in "us-west-1b".

A

Your company is moving their 10TB data warehouse to the cloud. Taking into account your company's 100Mbps connection, which service would most quickly get your data into AWS?A. Amazon Import/Export diskB. Amazon S3 multi-part uploadC. Amazon redshift importD. Amazon snowball

D

You have been monitoring a sensitive autoscaling group, and you expect it to scale-in as you enter a period of holiday downtime. The auto scaling group is distributed over three AZs ( AZ - A & -B have two instances each, and AZ -C has three instances). All instances have different CPU and Memory utilization, and all instances have been running for a different number of days. All instances come from different versions of a root AMI, and all instances have different numbers of sessions connected. Which instance will be the 1st to shut down?A. The instance with the fewest current sessions will terminate first.B. The instance that has been running longest will terminate first.C. The instance in AZ-C that has been oldest launch configuration will terminate first.D. The instance in AZ-C that has been running the longest will terminate first.E. The instance in AZ-C that has been the least number of sessions will terminate first.

C

What is the maximum VisibilityTimeout of an SQS message in a FIFO queue?A. 14 daysB. 1 dayC. 1 hourD. 12 hours

D

A client who is using EC2 believes that someone other than approved administrators is trying to gain access to her Linux web app instances, and she asks what sort of network access logging can be added to the system. Which of the following might you recommend?A. Set up a traffic logging rule on the network firewall and direct the log to CloudWatch or S3.B. Set up a Flow Log for the group of instances and forward them to CloudWatch.C. Make use of an OS level logging tools such as iptables and log events to CloudWatch or S3.D. Use Event Log filters to trigger alerts that are forwarded to CloudWatch.E. Set up a Flow Log for the group of instances and forward them to S3.

C

Your company likes the idea of storing files on AWS. However, low-latency service of the last few days of files is important to customer service. Which Storage Gateway configuration would you use to achieve both of these ends?A. Gateway-VTLB. Gateway-snapshotC. Gateway-cachedD. Gateway-stored

CGateway-Cached volumes retain a copy of frequently accessed data subsets locally. Cached volumes offer a substantial cost savings on primary storage and minimize the need to scale your storage on-premises.

You have a MySQl database running on an EC2 instance in a private subnet. You can connect via SSH, but you are unable to apply updates to the database server via the NAT instance. What might you do to remedy this problem?A. Ensure that "Source/Destination Checks" is disabled on the NAT instance. B. Ensure that the Security Group allows HTTP traffic.C. Replace the NAT instance.D. Modify the Security Group to allow SSH traffic from anywhere.

A

Your company provides an online image recognition service and uses SQS to decouple system components. Your EC2 instances poll the image queue as often as possible to keep end-to-end throughput as high as possible, but you realize that all this polling is resulting in both a large number of CPU cycles and skyrocketing costs. How can you reduce cost without compromising service?A. Enable long polling by setting the ReceiveMessageWaitTimeSeconds to a number > 0.B. Enable short polling by setting the ReceiveMessageWaitTimeMinutes to a number > 0.C. Enable short polling by setting the ReceiveMessageWaitTimeSeconds to a number > 0.D. Enable long polling by setting the ReceiveMessageWaitTimeMinutes to a number > 0.

A

You are a solutions architect working for a busy media company with offices in Japan and the United States. Your production environment is hosted both in US-EAST-1 and AP-NORTHEAST-1. Your European users have been connecting to the production environment in Japan, and are seeing the site in Japanese rather than in English. You need to ensure that they view the English language version. Which of the routing policies below could help you achieve this?A. Weighted routingB. Simple routingC. GeolocationD. Failover routing

C

Although your application customarily runs at 30% usage, you have identified a recurring usage spike (>90%) between 8pm and midnight daily. What is the most cost effective way to scale your application to meet this increased need?A. Manually deploy Reactive Event-based Scaling each night at 7:45B. Use Proactive Cyclic Scaling to boost your capacity at a fixed intervalC. Deploy additional EC2 instances to meet the demandD. Increase the size of the Resource Group to meet demand

B

You work for a popular media outlet about to release a story that is expected to go viral. During load testing on the website, you discover that there is read contention on the database tier of your application. Your RDS instance consists of a MySQL database on an extra large instance. Which two of the following approaches would be best to further scale this instance to meet the anticipated increase in traffic your viral story will generate?A. Use Elasticache to cache the frequently read, static data.B. Share the MySQL database into multiple copies.C. Provision a larger instance size with provisioned IOPS.D. Add an RDS Multi-AZ for increased read performance.

A

Following advice from your consultant, you have configured your VPC to use Dedicated hosting tenancy. A subsequent change to your application has rendered the performance gains from dedicated tenancy superfluous, and you would now like to recoup some of these greater costs. How do you revert to Default hosting tenancy?A. Create AMIs of all your instances and use them to create new instances using Default hosting.B. Stop each instance and change the hosting attribute and restart.C. Create AMIs of all your instance. Create a new VPC with Default as the hosting tenancy attribute, and use them to create new instances using Default tenancy.D. Change the hosting attribute and then restart the instance.

C

You are developing a web application, and you are maintaining separate sets of resources for your alpha, beta, and release environments. Each version runs on Amazon EC2 with an EBS volume. You use Elastic Load Balancing to manage traffic and Amazon Route 53 to manage your domain. What's the best way to check the health and status of all three groups of services simultaneously?A. Access CloudTrail audits for each set or resources.B. Maintain an open console for each set of resources.C. Create a resource group containing each set of resources and view all three environments from a single, group dashboard.D. Use CloudWatch to proactively monitor each environment.

C

C

How is the Public IP address managed in an instance session via the instance GUI/RDP or Terminal/SSH session?A. The Public IP address can be managed via the instance Metadata at http://169.254.169.254/latest/meta-data/local-ipv4.B. The Public IP address can be managed via the instance Metadata at http://169.254.169.254/latest/meta-data/public-ipv4.C. The Public IP address is not managed on the instance: it is, instead, an alias applied as a network address translation of the Private IP address.D. For security reasons, the Public IP address is a hidden value.

C

You have been engaged by a company to design and lead a migration to an AWS environment. The team is concerned about the capabilities of the new environment, especially when it comes to avoiding bottlenecks. The design calls for about 20 instances (C3.2xLarge) pulling jobs/messages from SQS. Network traffic per instance is estimated to be around 500 Mbps at the beginning and end of each job. Which network configuration should you plan on deploying?A. Deploy as a Placement Group as the aggregated burst traffic could be around 10 Gbps.B. Activate EBS-Optimization on the instance to maximize network throughput.C. Use a 2nd Network Interface to separate the SQS traffic for the storage traffic.D. Spread the Instances over multiple AZs to minimize the traffic concentration and maximize the fault tolerance.E. Choose a different instance type that better matched the traffic demand.

D

You are a consultant planning to deploy DynamoDB across three AZs. Your lead DBA is concerned about data consistency. Which of the following do you advise the lead DBA to do?A. To ask the development team to implement a checksum algorithm to confirm that the data is consistent across all the AZs.B. To ask the development team to code for strongly consistent reads. As the consultant, you will advise the CTO of the increased cost. C. To ask the development team to code a Lambda function to check data consistency after each write.D. To ask the development team to code to check for a successful completion code (200) at the completion of every write.E. To ask the development team to code an maintenance task to run on a schedule to check consistency.

B

You manage a Ruby on Rails application that lives on a cluster of EC2 instances. Your website occasionally experiences brief, strong, and entirely unpredictable spikes in traffic that overwhelm your EC2 instances' resources and freeze the application. As a result, you're losing recently submitted requests from end users. You use Auto Scaling to deploy additional resources to handle the load during spikes, but the new instances don't spin-up fast enough to prevent the existing application servers from freezing. Which of the following will provide the most cost-effective solution in preventing the loss of recently submitted requests?A. Ask AWS support to pre-warm the Elastic Load Balancer.B. Use Amazon SQS to decouple the application components and keep the requests in queue until the extra Auto-Scaling instances are available.C. Increase the size of your existing EC2 instances.D. Keep a large EC2 instance on standby.

B

You're building out a single-region application in us-west-2. However, disaster recovery is a strong consideration, and you need to build the application so that if us-west-2 becomes unavailable, you can fail-over to us-west-1. Your application relies exclusively on pre-built AMI's. In order to share those AMI's with the region you're using as a backup, which process would you follow?A. Create a new instance in us-west-1, making certain the instance in the failover region shares a security group with the instance in the default region.B. Copy the AMI from us-west-2, manually apply launch permissions, user-defined tags, and Amazon S3 bucket permissions of the default AMI to the new instance, and launch the instance.C. Copy the AMI from us-west-2 to us-west-1 and launch as-is.D. Nothing: AMIs are specific to an account, and they can be used anywhere.

B

You are planning to develop a log analysis software that processes large amount of log files. Workload reads entire file for analysis. Log files are safely stored in S3 and your application downloads batches of log files periodically to process them. What type of EC2 storage would use?A. Use storage optimized instance with SSD based instance storage.B. Use storage optimized instance with HDD based instance storage.C. Use any storage optimized instance.

BSince files are read in whole, HDD based storage would offer very high sequential read throughput