Quiz
a6
Erstelle ein kostenloses Konto, um dieses Quiz zu beenden
Speichere deinen Fortschritt und sieh dir dein Endergebnis an.
oder mit deiner E-Mail registrieren
Schon ein Konto? Anmelden
Fragen in diesem Quiz (100)
1You have launched an Amazon elastic compute cloud (EC2) instance in a VPC with an
attached internet gateway. You assigned a public IP address to the Amazon EC2 instance but cannot
connect from your on-premises client via SSH. Which of the following may be the cause of the
behavior experienced? Choose 2 answers- AAn incorrect security group rule for inbound SSH traffic
- BAn incorrect policy in the AWS IAM service
- CAn incorrect AWS IAM role used in the Amazon EC2 instances
- DAn incorrect routes in the subnet's route table
- EAn incorrect security group rule for outbound SSH traffic
2A client reports that they want see an audit log of any changes made to AWS resources in
their account.
What can the client do to achieve this?- ASet up Amazon Cloudwatch monitors on services they own.
- BEnable AWS CloudTrail logs to be delivered to an Amazon S3 bucket.
- CUse Amazon CloudWatch Events to pars logs.
- DUse AWS OpsWorks to manage their resources.
3Your existing web application requires a persistent key-value store database that must
service 50,000 reads/second. Your company is looking at 10% growth in traffic and data volume
month over month for the next several years. Which service meets these requirements?- AAmazon RDS
- BAmazon DynamoDB
- CAmazon SQS
- DAmazon RedShift
4A Solutions Architect needs to use AWS to implement pilot light disaster recovery for a
three- tier web application hosted in an on-premises datacenter.
Which solution allows rapid provision of a working, fully-scaled production environment?- AContinuously replicate the production database server to Amazon RDS Use AWS CloudFormation
to deploy the application and any additional servers if necessary - BContinuously replicate the production database server to Amazon RDS Create one application load
balancer and register on-premises servers Configure ELB Application Load Balancer to automatically
deploy Amazon EC2 instances for application and additional servers if the on- premises application is
down. - CUse a scheduled Lambda function to replicate the production database to AWS Use Amazon Route
53 health checks to deploy the application automatically to Amazon S3 if production is unhealthy - DUse a scheduled Lambda function to replicate the production database to AWS Register on-
premises servers to an Auto Scaling group and deploy the application and additional servers if
production is unavailable.
- AContinuously replicate the production database server to Amazon RDS Use AWS CloudFormation
5A Solutions Architect is designing the architecture for a web application that will be hosted
on AWS Internet users will access the application using HTTP and HTTPS How should the Architect
design the traffic control requirements?- AUse a network ACL to allow outbound ports for HTTP and HTTPS Deny other traffic for inbound
and outbound. - BUse a network ACL to allow inbound ports for HTTP and HTTPS Deny other traffic for inbound and
outbound - CAllow inbound ports for HTTP and HTTPS In the security group used by the web servers.
- DAllow outbound ports for HTTP and HTTPS in the security group used by the webservers
- AUse a network ACL to allow outbound ports for HTTP and HTTPS Deny other traffic for inbound
6A Solutions Architect plans to migrate NAT Instances to NAT gateway. The Architect has NAT
Instances with scripts to manage high availability. What Is the MOST efficient method to achieve
similar high availability with NAT gateway?- ARemove source/destination check on NAT instances
- BLaunch a NAT gateway in each Availability Zone
- CUse a mix of NAT instances and NAT gateway
- DAdd an ELB Application Load Balancer in front of NAT gateway
7When will you incur costs with an Elastic IP address (EIP)?
- AWhen an EIP is allocated.
- BWhen it is allocated and associated with a running instance.
- CWhen it is allocated and associated with a stopped instance.
- DCosts are incurred regardless of whether the EIP is associated with a running instance.
8Two Auto Scaling applications, Application A and Application B, currently run within a
shared set of subnets.
A Solutions Architect wants to make sure that Application A can make requests to Application B, but
Application B should be denied from making requests to Application A.
Which is the SIMPLEST solution to achieve this policy?- AUsing security groups that reference the security groups of the other application
- BUsing security groups that reference the application server's IP addresses
- CUsing Network Access Control Lists to allow/deny traffic based on application IP addresses
- DMigrating the applications to separate subnets from each other
9A solution architect is designing an application that will encrypt all data in an Amazon
Redshift cluster. Which action will encrypt the data at rest?- APlace the Redshift KMS Default Cluster in a private subnet
- BUse the AWS KMS Default Customer master key
- CEncrypt the Amazon EBS volumes
- DEncrypt the data using SSL/TLS
10A company has an AWS account that contains three VPCs (Dev, Test, and Prod) in the same
region. Test is peered to both Prod and Dev. All VPCs have non-overlapping CIDR blocks. The
company wants to push minor code releases from Dev to Prod to speed up time to market. Which of the following options helps the company accomplish this?- ACreate a new peering connection Between Prod and Dev along with appropriate routes.
- BCreate a new entry to Prod in the Dev route table using the peering connection as the target.
- CAttach a second gateway to Dev. Add a new entry in the Prod route table identifying the gateway
as the target. - DThe VPCs have non-overlapping CIDR blocks in the same account. The route tables contain local routes for all VPCs.
11You are tasked with setting up a Linux bastion host for access to Amazon EC2 instances
running in your VPC.
Only clients connecting from the corporate external public IP address 72.34.51.100 should have SSH
access to the host. Which option will meet the customer requirement?- ASecurity Group Inbound Rule: Protocol - TCP. Port Range - 22, Source 72.34.51.100/32
- BSecurity Group Inbound Rule: Protocol - UDP, Port Range - 22, Source 72.34.51.100/32
- CNetwork ACL Inbound Rule: Protocol - UDP, Port Range - 22, Source 72.34.51.100/32
- DNetwork ACL Inbound Rule: Protocol - TCP, Port Range-22, Source 72.34.51.100/0
12Which Amazon elastic compute cloud feature can you query from within the instance to
access instance properties?- AInstance user data
- BAmazon Machine Image
- CResource tags
- DInstance metadata
13A company has configured and peered two VPCs : VPC-1 and VPC-2. VPC-1 contains only
private subnets, and VPC-2 contains only public subnets. The company uses a single AWS Direct
Connect connection and private virtual interface to connect their on-premises network with VPC-1.
Which two methods increase the fault tolerance of the connection to VPC-1? Choose 2 answers- AEstablish a hardware VPN over the internet between VPC-2 and then the on-premises network
- BEstablish a hardware VPN over the internet between VPC-1 and then the on-premises network
- CEstablish a new AWS direct connect connection and private virtual interface in the same region as VPC-2
- DEstablish a new AWS direct connect connection and private virtual interface in a different AWS region than VPC-1
- EEstablish a new AWS direct connect connection and private virtual interface in the same AWS
region as VPC-1
14A development team is building an application win front-end and backend application tiers.
Each tier consists of Amazon EC2 instances behind on ELB Classic Load Balancer. The instances run in
Auto Scaling groups across multiple Availability Zones. The network team has allocated the 10.0.0.0/24 address space for this application. Only the front-end load balancer should be exposed to
the Internet. There are concerns about the limited size of the address space and the ability of each
tier to scale.
What should the VPC subnet design be in each Availability Zone?- AOne public subnet for the load balancer tier, one public subnet for the front-end tier, and one private subnet for the backend tier
- BOne shared public subnet for all tiers of the application
- COne public subnet for the load balancer tier and one shared private subnet for the application tiers
- DOne shared private subnet for all tiers of the application
15An organization is currently hosting a large amount of frequently accessed data consisting of
key-value pairs and semi-structured documents in their data center. They are planning to move this
data to AWS.
Which of one of the following services MOST effectively meets their needs?- AAmazon Redshift
- BAmazon RDS
- CAmazon DynamoDB
- DAmazon Aurora
16Which of the following are true regarding AWS Cloud Trail?
Choose 3 answers- ACloudTrail is enabled globally
- BCloudTrail is enabled by default
- CCloudTrail is enabled on a per-region basis
- DCloudTrail is enabled on a per-service basis
- ELogs can be delivered to a single Amazon S3 bucket for aggregation
- FLogs can only be processes and delivered to the region in which they are generated
17A Solutions Architect has a multi-layer application running in Amazon VPC. The application
has an ELB Classic Load Balancer as the front end in a public subnet, and an Amazon EC2-based
reverse proxy that performs content-based routing to two backend Amazon EC2 instances hosted in a
private subnet. The Architect sees tremendous traffic growth and is concerned that the reverse proxy
and current backend setup will be insufficient.
Which actions should the Architect take to achieve a cost-effective solution that ensures the
application automatically scales to meet traffic demand? (Select TWO)- AReplace the Amazon EC2 reverse proxy with an EL8 internal Classic Load Balancer
- BAdd Auto Scaling to the Amazon EC2 backend fleet
- CAdd Auto Scaling to the Amazon EC2 reverse proxy layer
- DUse t2 burstable instance types for the backend fleet
- EReplace both the frontend and reverse proxy layers with an ELB Application Load Balancer
18A Solutions Architect must select the most cost-efficient architecture for a service that
responds to web requests. These web requests are small and query a DynamoDB table. The request
rate ranges from zero to several hundred each second, without any predictable patterns.
What is the MOST cost-efficient architecture for this service?- ANetwork Load Balancer/Amazon EC2
- BApplication Load Balancer/Amazon ECS
- CAPI Gateway/AWS Lambda
- DAWS Elastic Beanstalk/AWS Lambda
19A manufacturing company captures data from machines running at customer sites.
Currently, thousands of machines send data every 5 minutes, and this is expected to grow to
hundreds of thousands of machines in the near future. The data is logged with the intent to be
analyzed in the future as needed.
What is the SIMPLEST method to store this streaming data at scale?- ACreate an Amazon Kinesis Firehouse delivery stream to store the data in Amazon S3.
- BCreate an Auto Scaling group of Amazon EC2 servers behind ELBs to write the data into Amazon
RDS. - CCreate an Amazon SQS queue, and have the machines write to the queue.
- DCreate an Amazon EC2 server farm behind an ELB to store the data in Amazon EBS Cold HDD volumes
20An application uses an Amazon RDS MySQL cluster for the database layer. Database growth
requires periodic resizing of the instance. Currently, administrators check the available disk space
manually once a week.
How can this process be improved?- AUse the largest instance type for the database.
- BUse AWS CloudTrail to monitor storage capacity.
- CUse Amazon CloudWatch to monitor storage capacity.
- DUse Auto Scaling to increase storage size.
21A Solutions Architect is concerned that the current security group rules for a database tier
are too permissive and may permit requests that should be restricted. Below are the current security
group permissions for the database tier:
Protocol: TCP
Port Range: 1433 (MS SQL)
Source: ALL
Currently, the only identified resource that needs to connect to the databases is the application tier
consisting of an Auto Scaling group of EC2 instances.
What changes can be made to this security group that would offer the users LEAST privilege?- AChange the source to -1 to remove source IP addresses previously unseen.
- BChange the source to the VPC CIDR block.
- CChange the source to the application instances IDs.
- DChange the source to the security group ID attached to the application instances.
22You have decided to change the instance type for instances running in your application tier
that is using Auto Scaling. In which area below would you change the instance type definition?- AAuto Scaling tags
- BAuto Scaling policy
- CAuto Scaling group
- DAuto Scaling launch configuration
23A workload in an Amazon VPC consist of a single web-server launched from a custom AMI.
Session state is stored in database. How should the Solutions Architect modify this workload to be
both highly available and scalable?- ACreate a launch configuration with a desired capacity of two web servers across multiple
Availability Zones. Create an Auto Scaling group with the AMI ID of the web server image. Use
Amazon Route S3 latency-based routing to balance traffic across the Auto Scaling group. - BCreate a launch configuration with the AMI ID of the web server image. Create an Auto Scaling
group using the newly-created launch configuration, and a desired capacity of two web servers across
multiple regions. Use an Application Load Balancer (ALB) to balance traffic across the Auto Scaling
group - CCreate a launch configuration with the AMI ID of the web server image. Create an Auto Scaling
group using the newly-created launch configuration, and a desired capacity of two web servers across
multiple Availability Zones. Use an ALB to balance traffic across the Auto Scaling group - DCreate a launch configuration with the AMI ID of the web server image. Create an Auto Scaling
group using the newly-created launch configuration, and a desired capacity of two web servers across
multiple Availability Zones. Use Route 53 weighted routing to balance traffic across the Auto Scaling
group
- ACreate a launch configuration with a desired capacity of two web servers across multiple
24A customer needs to capture all client connection information from their load balancer
every five minutes. The company wants to use data for analyzing traffic patterns and troubleshooting
their applications. Which of the following options meets the customer requirements?- AEnable access logs on the load balancer
- BEnable AWS CloudTrail for the load balancer
- CEnable Amazon CloudWatch metrics on the load balancer
- DInstall the Amazon CloudWatch Logs agent on the load balancer
25How frequently does the Amazon CloudWatch Logs agent send data by default?
- AA. Every five seconds
- BEvery minute
- CEvery five seconds and is configurable by the user
- DEvery minute and is configurable by the user
26A Solutions Architect is designing a Lambda function that calls an API to list all running
Amazon RDS instances.
How should the request be authorized?- ACreate an IAM access and secret key, and store it in the Lambda function.
- BCreate an IAM role to the Lambda function with permissions to list all Amazon RDS instances.
- CCreate an IAM role to Amazon RDS with permissions to list all Amazon RDS instances.
- DCreate an IAM access and secret key, and store it in an encrypted RDS database.
27A customer has a legacy application with a large amount of data. The files accessed by the
application are approximately 10 GB each, but are rarely accessed. However, when files are accessed,
they are retrieved sequentially. The customer is migrating the application to AWS and would like to
use Amazon EC2 and Amazon EBS.
What is the LEAST expensive EBS volume type for this use case?- ACold HDD (sc1)
- BProvisioned IOPS SSD (io1)
- CGeneral Purpose SSD (gp2)
- DThroughput Optimized HDD (st1)
28Which of the following are use cases for Amazon DynamoDB? Choose 3 answers
- AStoring BLOB data
- BManaging web sessions
- CStoring JSON documents
- DStoring metadata for Amazon S3 objects
- ERunning relational joins and complex updates
- FStoring large amounts of infrequently accessed data
29Which of the following items are required to allow an application deployed on an EC2
instance to write data to a DynamoDB table? Assume that to security keys are allowed to be stored
on the EC2 instance.- ALaunch an EC2 instance with the IAM user included in the launch configuration
- BCreate an IAM user that allows write access to the DynamoDB table
- CAdd an IAM user to a running EC2 instance
- DCreate an IAM role that allows write access to the DynamoDB table
- EAdd an IAM role to a running EC2 instance
- FLaunch an EC2 instance with the IAM role included in the launch configuration
30After launching an instance that you intend to serve as a NAT (Network Address Translation)
device in a public subnet you modify your route tables to have the NAT device be the target of
internet bound traffic of your private subnet. When you try and make an outbound connection to the
internet from an instance in the private subnet, you are not successful. Which of the following steps
could resolve the issue?- AAttaching a second Elastic network interface to the instance in the private subnet, and placing it in
the public subnet - BAttaching an Elastic IP address to the instance in the private subnet
- CDisabling the Source/Destination check attribute on the NAT instance
- DAttaching a second Elastic Network interface to the NAT instance, and placing it in the private
- AAttaching a second Elastic network interface to the instance in the private subnet, and placing it in
31A news organization plans to migrate their 20 TB video archive to AWS. The files are rarely
accessed, but when they are a request is made in advance and a 3- to 5-hour retrieval time frame is
acceptable However, when there is a breaking news story, the editors require access to archived
footage within minutes.
Which storage solution meets the needs of this organization while providing the LOWEST cost of
storage?- AStore the archive in Amazon S3 Reduced Redundancy Storage.
- BStore the archive in Amazon Glacier and use standard retrieval for all content
- CStore the archive in Amazon Glacier and pay the additional charge for expedited retrieval when needed
- DStore the archive in Amazon S3 with a lifecycle policy to move this to S3 Infrequent Access after 30 days.
32A Solution Architect is designing a new social media application. The application must
provide a secure method for uploading profile photos. Each user should be able to upload a profile photo into a shared storage location for one week after their profile is created.
Which approach will meet all of these requirements?- AUse Amazon Kinesis with AWS CloudTrail for auditing the specific times when profile photos are uploaded.
- BUse Amazon EBS volumes with IAM policies restricting user access to specific time periods
- CUse Amazon S3 with the default private access policy and generate pre-signed URLs each time a new site profile is created
- DUse Amazon CloudFront with AWS CloudTrail for auditing the specific times when profile photos
are uploaded.
33A Solution Architect works for an insurance company that has a large number of patient
health records. Each record will be used once when assessing a patient and will need to be securely stored for seven years to meet regulations. In rare cases the Solution Architect may need to retrieve a patient record in five hours.
Which type of AWS storage would deliver the most cost-effective solution?- AAmazon S3 Reduced Redundancy Storage
- BAmazon S3
- CAmazon Glacier
- DAmazon S3 Infrequent Access
34A Solutions Architect has a three-tier web application that serves customers worldwide.
Analysis reveals that product images take more time to load than expected.
Which action will improve the image load time?- AStore product images on Amazon EBS-optimized storage volumes
- BStore product images in an Amazon S3 bucket
- CUse an Amazon CloudFront distribution for product images
- DUse an Auto Scaling group to add instances for product images
35A Solutions Architect is designing a solution to store a large quantity of event data in
Amazon S3. The Architect anticipates that the workload will consistently exceed 100 requests each second.
What should the Architect do in Amazon S3 to optimize performance?- ARandomize a key name prefix.
- BStore the event data in separate buckets.
- CRandomize the key name suffix.
- DUse Amazon S3 Transfer Acceleration.
36A Solutions Architect is designing a customer order processing application that will likely
have high usage spikes.
What should the Architect do to ensure that customer orders are not lost before being written to an Amazon RDS database? (Choose two.)- AUse Amazon CloudFront to deliver the application front end.
- BUse Elastic Load Balancing with a round-robin routing algorithm.
- CHave the orders written into an Amazon SQS queue.
- DScale the number of processing nodes based on pending order volume.
- EHave a standby Amazon RDS instance in a separate Availability Zone.
37A Solution Architect is designing a three-tier web application. The Architect wants to restrict
access to the database tier to accept traffic from the application servers only. However, these application servers are in an Auto Scaling group and may vary in quantity.
How should the Architect configure the database servers to meet the requirements?- AConfigure the database security group to allow database traffic from the application server IP
addresses. - BConfigure the database security group to allow database traffic from the application server
security group. - CConfigure the database subnet network ACL to deny all inbound non-database traffic from the applicationtier subnet.
- DConfigure the database subnet network ACL to allow inbound database traffic from the
application-tier subnet.
- AConfigure the database security group to allow database traffic from the application server IP
38A customer is hosting their company website on a cluster of web servers that are behind a
public-facing load balancer. The customer also uses Amazon Route S3 to manage their public DNS.
How should the customer configure the DNS zone apex record to point to the load balancer?- ACreate a CNAME record pointing to the load balancer DNS name
- BCreate a CNAME record aliased to the load balancer DNS name
- CCreate an A record pointing to the IP address of the load balancer
- DCreate an A record aliased to the load balancer DNS name
39A company has a legacy application using a proprietary file system and plans to migrate the
application to AWS.
Which storage service should the company use?- AAmazon DynamoDB
- BAmazon S3
- CAmazon EBS
- DAmazon EFS
40A Solutions Architect was tasked with reviewing several templates that build VPCs and
ensuring that they meet specific security requirements. After reviewing the templates, the Architect
realizes that all of the templates are missing important security best practices.
What should the Architect do to implement security best practices in an efficient manner?- AUse VPC peering to enforce network consistency
- BRestrict users from deploying an AWS CloudFormation template
- CProvide the teams a nested AWS CloudFormation template that builds the VPC correctly
- DCreate AWS Identity and Access Management (IAM) policies that enforce the corporate VPC architecture standards
41A company has reproducible data that they want to store on Amazon Web Services. The
company may want to retrieve the data on a frequent basis. Which Amazon web services storage
option allows the customer to optimize storage costs and still achieve high availability for their data?- AAmazon S3 Reduced Redundancy Storage
- BAmazon EBS Magnetic Volume
- CAmazon Glacier
- DAmazon S3 Standard Storage
42A company needs to deploy services to an AWS region which they not previously used. The
company currently has an AWS identity and Access Management (IAM) role for their Amazon EC2
instances, which permits the instance to have access to Amazon DynamoDB. The company wants
their EC2 instances in the new region to have the same privileges. How should the company achieve
this?- ACreate a new IAM role and associated policies within the new region
- BAssign the existing IAM role to the Amazon EC2 instances in the new region
- CCopy the IAM role and associated policies to the new region and attach it to the instances
- DCreate the Amazon Machine Image of the instance and copy it to the desired region using the AMI Copy feature
43A Solutions Architect is designing a workload that requires capacity reservation al all limes
using many r4
2xlarge instances. The workload will run 24/7 for the next two years and uses Amazon Linux What Is
the MOST cost-effective way to obtain this required compute capacity?- ARegional Standard Reserved instances
- BSpot Fleet
- CRegional Convertible Reserved Instances
- DStandard Reserved Instances
44You try to connect via SSH to a newly created Amazon EC2 instance and get one of the error
messages:
"Network error: Connection timed out" or "Error connecting to [instance], reason: -> Connection
timed out connect," You have confirmed that the network and security group rules are configured
correctly and the instance is passing status checks. What steps should you take to identify the source
of the behavior? Choose 2 answers- AVerify that your IAM user policy has permission to launch Amazon EC2 instances
- BVerify that you are connecting with the appropriate user name for your AMI
- CVerify that the Amazon EC2 instance was launched with the proper IAM role
- DVerify that your federation trust to AWS has been established
- EVerify that the private key file corresponds to the Amazon EC2 key pair assigned at launch
45A legacy build management application stores artifacts in an NFS shared filesystem accessed
by 400 servers.
The company is migrating its infrastructure to AWS.
Which storage service should be used for build management?- AAmazon S3
- BAmazon EFS
- CAmazon EBS
- DAmazon EC2 Instance Storage
46Which auto scaling features allow you to scale ahead of expected increases in load? Choose
2 answers- ACooldown period
- BMetric-based scaling
- CHealth check grace period
- DScheduled scaling
- ELifecycle hooks
- FDesired capacity
47Your organization is looking for a solution that can help the business with streaming data.
Several services will require access to read and process the same stream concurrently. What AWS service meets the business requirements?- AAmazon Kinesis Firehose
- BAmazon CloudFront
- CAmazon SQS
- DAmazon Kinesis Streams
48You have a web application running on six Amazon EC2 instances, consuming about 45% of
resources on each instance. You are using auto-scaling to make sure that six instances are running at all times. The number of requests this. Which of the following architectural choices should you make?- ADeploy 3 EC2 instances in one availability zone and 3 in another availability zone and use Amazon Elastic Load Balancer
- BDeploy 3 EC2 instances In one region and 3 other region and use Amazon Elastic Load Balancer
- CDeploy 2 EC2 instances in three regions and use Amazon Elastic Load Balancer
- DDeploy 6 EC2 instances in one availability zone and use Amazon Elastic Load Balancer
49You have an Amazon EC2 instance with data stored in an Amazon elastic block store (EBS)
volume. You want to make the data available in another region. Which of the following methods
should be used for making the data in the Amazon EBS volume available to the newly launched Amazon EC2 instance?- ADetach the Amazon EBS volume and attach it to the newly launched Amazon EC2 instance
- BSnapshot the Amazon EBS volume and copy it to the other region. Create a new Amazon EBS
volume from the snapshot, and attach it to the newly launched Amazon EC2 instance - CCopy the Amazon EBS volume to the other region, create a new Amazon EBS volume from that, and then attach it to newly launched Amazon EC2 instance
- DUse AWS Import/Export to copy the Amazon EBS volume to the other region and attach it to newly launched instance
50You have an application running in multiple Availability Zones, to confirm this application
can continue to operate at full capacity without performance degradation or downtime. In the event of an Availability Zone failure. You must:- AUse Spot instances to guarantee supplemental capacity
- BUse Auto Scaling to launch instances in other Availability Zones to replace lost capacity
- CUse dedicated instances in all Availability Zones
- DHave enough running EC2 instances in other Availability Zones
51A Solution Architect is designing a solution for a dynamic website, "example.com," that is
deployed in two regions: Tokyo, Japan and Sydney, Australia. The Architect wants to ensure that
users located in Australia are directed to the website deployed in the Sydney region and users
located in Japan are directed to the website in the Tokyo region when they browse to
"example.com." Which service should the Architect use to achieve this goal with the LEAST administrative effort?- AAmazon CloudFront with geolocation routing
- BAmazon Route 53
- CApplication Load Balancer
- DNetwork Load Balancer deployed across multiple regions
52A Solutions Architect is designing an Amazon VPC. Applications in the VPC must have private
connectivity to Amazon DynamoDB in the same AWS Region. The design should route DynamoDB traffic through:- AVPC peering connection
- BNAT gateway
- CVPC endpoint
- DAWS Direct Connect
53A company has a legal requirement to store point-in-time copies of its Amazon RDS
PostgreSQL database instance in facilities that are at least 200 miles apart.
Use of which of the following provides the easiest way to comply with this requirement?- ACross-region read replica
- BMultiple Availability Zone snapshot copy
- CMultiple Availability Zone read replica
- DCross-region snapshot copy
54A customer owns a MySQL database that is accessed by various clients who expect, at most
100 ms latency on requests. Once a record is stored in the database, it is rarely changed Clients only
access one record at a time.
Database access has been increasing exponentially due to increased client demand. The resultant
load will soon exceed the capacity of the most expensive hardware available for purchase. The
customer wants to migrate to AWS, and is willing to change database systems.
Which service would alleviate the database load issue and offer virtually unlimited scalability for the
future?- AAmazon RDS
- BAmazon DynamoDB
- CAmazon Redshift
- DAWS Data Pipeline
55Your company has set up an application in eu-west1 with a disaster recovery site in eu-
central-1. You want to be notified of any AWS API activity in regions other than these two.
How can you monitor AWS API activity in other regions?- ACreate a CloudWatch alarm for CloudTrail events
- BCreate a CloudWatch alarm for SSH key usage
- CCreate a CloudWatch alarm for Trusted Advisor
- DCreate a CloudWatch alarm for VPC flow logs
56A Solutions Architect is designing network architecture for an application that has
compliance requirements.
The application will be hosted on Amazon EC2 instances in a private subnet and will be using Amazon
S3 for storing data. The compliance requirements mandate that the data cannot traverse the public
Internet.
What is the MOST secure way to satisfy this requirement?- AUse a NAT Instance.
- BUse a NAT Gateway.
- CUse a VPC endpoint.
- DUse a Virtual Private Gateway.
57When creation of an EBS snapshot is initiated, but not completed, the EBS volume:
- ACan be used while the snapshot is in progress
- BCannot be used until the snapshot completes
- CCan be used in read-only mode while the snapshot is in progress
- DCannot be detached or attached to an EC2 instance until the snapshot completes
58Which of the following are true regarding encrypted amazon elastic block store (EBS)
volumes? Choose 2 answers- AAvailable to all instance types
- BExisting volumes can be encrypted
- CSupported on all Amazon EBS volume types
- DSnapshots are automatically encrypted
- EShared volumes can be encrypted
59A Solution Architect must design a monitoring solution that gives the Security team visual
access to all Amazon S3 bucket-level API operations.
What should the Solution Architect use to provide this information?- AAWS CloudTrail logging for management events
- BAmazon CloudWatch Logs
- CAWS CloudTrail logging for data events
- DS3 Server Access logging
60A Solution Architect must design a monitoring solution that gives the Security team visual access to all Amazon S3 bucket-level API operations.
What should the Solution Architect use to provide this information?- AAWS CloudTrail logging for management events
- BAmazon CloudWatch Logs
- CAWS CloudTrail logging for data events
- DS3 Server Access logging
61A Solutions Architect is designing an application that stores objects encrypted in an Amazon
S3 bucket. The company's security requirements state that the encryption key is stored by the
organization. Which methods meet this requirement? (Select TWO.)- AUse S3 server-side encryption with customer-provided keys.
- BUse S3 client-side encryption.
- CUse S3 server-side encryption with Amazon S3 managed keys
- DUse S3 server-side encryption with AWS KMS managed keys.
- EUse S3 server-side encryption with the company's own keys imported into AWS KMS
62An Administrator is hosting on application on a single Amazon EC2 instance, which users can
access by the public hostname. The administrator is adding a second instance, but does not want users to have to decide between many public hostnames.
Which AWS service will decouple the users from specific Amazon EC2 instances?- AAmazon SQS
- BAuto Scaling group
- CAmazon EC2 security group
- DAmazon ELB
63A customer is complaining that requests made to theirload balancer are closing
prematurely. The customer also mentions that the issue only happens when waiting for the multi-week report to be generated. Which option will resolve the customer's issue?- AAdjust the timeout on health check settings
- BIncrease the idle timeout on registered instances
- CDisable connection draining on the load balancer
- DEnable stickiness on the load balancer
64How can you secure data at rest on an EBS volume?
- ACreate an IAM policy that restricts read and write access to the volume
- BUse an encrypted file system on top of the EBS volume
- CWrite the data randomly instead of sequentially
- DEncrypt the volume using the S3 server-side encryption service
- EAttach the volume to an insurance using EC2 SSL interface
65A website keeps a record of user actions using a globally unique identifier (GUID) retrieve
from Amazon Aurora in place of the user name within the audit record security protocols state that
the GUID state that the GUID content must not leave the company's VPN.
As the web traffic has increase, the number of web servers and azure read replicas has also increased
to keep up with the user record for the GUID.
What should be done to reduce the number of read replicas required while improving performance?- AKeep the user name and GUID in memory on the web server instance so that the association can be remade on demand Remove the record after 30 minutes
- BDeploy a Amazon ElastiCache for Redis server into the infrastructure and store the user name and GUID there Retrieve the GUID from ElastiCache when required
- CEncrypt the GUID using Base64 and store it in the users session cookie Decrypt the GUID when an audit record is needed
- DChange the GUID to an MD5 hash of the user name, so that the value can be calculated on demand without referring to the database
66A company is launching an application that it expects to be very popular. The company
needs a database that can scale with the rest of the application. The schema will change frequently.
The application cannot afford any downtime for database changes.
Which AWS service allows the company to achieve these objectives?- AAmazon Redshift
- BAmazon DynamoDB
- CAmazon RDS MySQL
- DAmazon Aurora
67Your company runs an application that generates several thousand 1-GB reports a month.
Approximately 10% of these reports will be accessed once during the first 3 days and must be available on demand. After 30 days, reports are no longer accessed as a part of normal business processes but must be retained for compliance reasons.
Which architecture would meet these requirements with the lowest cost?- AUpload the reports to Amazon S3 Standard - Infrequent Access storage class. Set a lifecycle
configuration on the bucket to transition the reports to Amazon Glacier after 30 days. - BUpload the reports to Amazon Glacier. When reports are requested, copy them to Amazon S3
Standard storage class for access. Delete the copied reports after they have been viewed. - CUpload the reports to Amazon S3 Standard storage class. Set a lifecycle configuration on the bucket to transition the reports to Amazon Glacier after 30 days.
- DUpload the reports to Amazon S3 Standard - Infrequent Access storage class. When reports are
requested, copy them to Amazon S3 Standard storage class for access. Delete the copied reports after they have been viewed.
- AUpload the reports to Amazon S3 Standard - Infrequent Access storage class. Set a lifecycle
68When using the following AWS services, which should be implemented in multiple
Availability Zones for high availability solutions? Choose 2 answers- AAmazon Simple Storage Service
- BAmazon Elastic Load Balancing
- CAmazon Elastic Compute Cloud
- DAmazon Simple Notification Service
69Your Amazon VPC has a pubic subnet with a route that sends all internet traffic to the
internet gateway. An Amazon EC2 instance in the Public subnet has an assigned private IP address.
The instance belongs to a security group set to allow all outbound traffic. The instance cannot access the internet. Why could the internet be unreachable from this instance?- AThe instance "source/destination check" property must be enabled
- BThe instance security group must allow all inbound traffic
- CThe instance does not have a public IP address
- DThe internet gateway security group must allow all outbound traffic
70An application tier currently hosts two web services on the same set of instances, listening
on different ports.
Which AWS service should a Solutions Architect use to route traffic to the service based on the incoming request path?- AAWS Application Load Balancer
- BAmazon CloudFront
- CAmazon Route 53
- DAWS Classic Load Balancer
71A company is developing several critical long-running applications hosted on Docker.
How should a Solutions Architect design a solution to meet the scalability and orchestration requirements on AWS?- AUse Amazon ECS and Service Auto Scaling.
- BUse Spot Instances for orchestration and for scaling containers on existing Amazon EC2 Instances.
- CUse AWS OpsWorks to launch containers in new Amazon EC2 instances.
- DUse Auto scaling groups to launch containers on existing Amazon EC2 instances.
72A media company must store 10 TB of audio recordings. Retrieval happens infrequently and requestors agree on an 8-hour turnaround time.
What is the MOST cost-effective solution to store the files?- AAmazon S3 Standard - Infrequent Access (Standard - IA)
- BEBS Throughput Optimized HDD (st1)
- CEBS Cold HDD (sc1)
- DAmazon Glacier
73A Solutions Architect is designing a solution for a media company that will stream large
amounts of data from an Amazon EC2 instance. The data streams are typically large and sequential, and must be able to support up to 500 MB/s.
Which storage type will meet the performance requirements of this application?- AEBS Provisioned IOPS SSD
- BEBS General Purpose SSD
- CEBS Cold HDD
- DEBS Throughput Optimized HDD
74A bank is writing new software that is heavily dependent upon database transactions for write consistency. The application will also occasionally generate reports on data m the database,
and will do joins across multiple tables. The database must automatically scale as the amount of data
grows.
Which AWS service should be used to run the database?- AAmazon S3
- BAmazon Aurora
- CAmazon DynamoDB
- DAmazon Redshift
75When an EC2 EBSbackend (EBS root) instance is stopped. What happens to the data on any Ephemeral store volumes?
- AData is automatically saved in an EBS volume
- BData will be deleted and will no longer be accessible
- CData is unavailable until the instance is restarted
- DData is automatically saved as an EBS snapshot
76A colleague asked for your advice about how to easily deploy, monitor, and scale a three-
tier LAMP (Linux, Apache, MySQL, PHP) application on AWS. Your colleague has time and staffing constraints and wants to deploy and manage the application with minimal effort.
What AWS service would you suggest?- AData Pipeline
- BElastic Beanstalk
- CCloudFormation
- DCodeDeploy
77A Solutions Architect is building an application that into Amazon RDS. One table in particular is read heavy and minimal latency is critical.
What of the following would provide the highest level of performance?- AUse Amazon DynamoDB Accelerator
- BUse Amazon RDS read replicas
- CUse Amazon CloudFront
- DUse Amazon ElastiCache
78A Solutions Architect is designing a new application that needs to access data in a different AWS account located within the same region. The data must not be accessed over the Internet.
Which solution will meet these requirements with the LOWEST cost?- AAdd rules to the security groups in each account.
- BEstablish a VPC Peering connection between accounts.
- CConfigure Direct Connect in each account.
- DAdd a NAT Gateway to the data account.
79A stray Amazon EC2 r3.8xlarge instance is running in your AWS account. Before terminating
it, you want to find the owner to confirm that it is not needed.
Where can you find the identity that launched this instance?- ACloudTrail logs
- BVPC flow logs
- CELB access logs
- DOperating system logs
80Which tool analyzes account resources and provides a detailed inventory of changes over time?
- AAWS Config
- BAWS CloudFormation
- CAmazon CloudWatch
- DAWS Service Catalog
81An application on an Amazon EC2 instance routinely stops responding to requests and
requires a reboot to recover. The application logs are already exported into Amazon CloudWatch,
and you notice that the problem consistently follows the appearance of a specific message in the log.
The application team is working to address the bug, but has not provided a date for the fix. What workaround can you implement to automate recovery of the instance until the fix is deployed?- ACreate an Amazon CloudWatch alarm on instance memory usage; based on that alarm, trigger an Amazon CloudWatch action to reboot the instance
- BCreate an Amazon CloudWatch alarm on an Amazon CloudWatch Logs filter for that message;
based on that alarm trigger an Amazon CloudWatch action to reboot the instance - CCreate an AWS CloudTrail alarm to detect the deadlock; based on that alarm, trigger an Amazon SNS message to the Operations team
- DCreate an AWS CloudTrail alarm on low CPU; based on that alarm, trigger an Amazon SNS message to the Operations team
82A workload is an Amazon VPC consists of an Elastic Load Balancer that distributes incoming
requests across a fleet of six Amazon EC2 instances. Each EC2 instance stores and retrieves data from an Amazon DynamoDB table.
Which of the following provisions will ensure that this workload is highly available?- AProvision DynamoDB tables across a minimum of two Availability Zones
- BProvision the EC2 instances evenly across a minimum of two Availability Zones
- CProvision the EC2 instances evenly across a minimum of two Availability Zones in a single region
- DProvision the Elastic Load Balancer to distribute connections across multiple Availability Zones
83 A company has instances in private subnets that require outbound access to the internet.
This requires:- AAssigning a public IP address to the instance
- BUpdating the route table associated with the subnet to point internet traffic through a NAT gateway
- CUpdating the security group associated with the subnet to allow ingress on 0.0.0.0/0
- DRouting traffic from the instance through a VPC endpoint that has internet access
84A Solution Architect is creating a multi-tier architecture for an application that includes a
public-facing web tier . Security requirements state that the Amazon EC2 instances running in the
application tier must not be accessibility directly from the internet.
requirements state that the Amazon EC2 instances running in the application tier must not be
accessible directly from the internet What should be done to accomplish this?- ACreate a multi-VPC peering mesh with network access rules limiting communications to specific
ports Implement an internet gateway on each VPC for external connectivity. - BPlace all instances in a single Amazon VPC with AWS WAF" as the web front-end communication
conduit Configure a NAT gateway for external communications. - CUse VPC peering to peer with on-premises hardware Direct enterprise traffic through the VPC peer connection to the instances hosted in the private VPC.
- DDeploy the web and application instances in a private subnet. Provision an Application Load Balancer in the public Install an internet gateway and use security groups to control communications between the layers.
- ACreate a multi-VPC peering mesh with network access rules limiting communications to specific
85A company has a web application running in a Docker container that connects to a MYSQL
server in an on-premises data center. The deployment and maintenance of this application are
becoming time-consuming and slowing down new feature releases. The company wants to migrate
the application to AWS and use services that helps facilitate infrastructure management and deployment.
Which architectures should the company on AWS? (Select Two)- AAmazon ECS for the web application, and an Amazon RDS for MySQL for the database
- BAWS Elastic Beanstalk Docker Multi-container either for the web application or database
- CAWS Elastic Beanstalk Docker Single Container for the web application, and an Amazon RDS for MySQL for the database
- DAWS CloudFormation with Lambda Custom Resources without VPC for the web application, and an Amazon RDS for MySQL database
- EAWS CloudFormation with Lambda Custom Resources running in a VPC for the web application, and an Amazon RDS for MySQL database
86A Solution Architect is reviewing an application that writes data to an Amazon DynamicDB
table on a daily base Random table reads occur many times per second.
The company needs to allow thousands of low-latency reads and avoid any negative impact to the rest of the application.
What should the Solution Architect do to meets the company's' goals?- AUse DynamoDB Accelerator to cache reads.
- BIncrease DynamoDB write capacity units.
- CAdd Amazon SQS to decouple requests.
- DImplement Amazon Kinesis to decouple request
87You've been tasked with choosing a datastore to persist GPS coordinates for a new app. The
service needs consistent, single-digit-millisecond latency at any scale. Which AWS service meets your requirements?- AAmazon S3
- BAmazon Redshift
- CAmazon RDS
- DAmazon DynamoDB
88An organization is deploying Amazon ElastiCache for Redis and requires password
protection to improve their data security posture.
Which solution should a Solutions Architect recommend?- ARedis Auth
- BAWS Single Sign-On
- CIAM database authentication
- DVPC security group for Redis
89You are configuring your company's application to use Auto Scaling and need to move user
state information.
Which of the following AWS services provides a shared data store with durability and low latency?- AAmazon Simple Storage Service
- BAmazon DynamoDB
- CAmazon EC2 instance storage
- DAWS ElasticCAche Memcached
90An application consists of microservices. The microservices need to communicate
asynchronously and the solution must ensure that each message is consumed only once.
Which service should be used?- AAmazon Kinesis
- BAmazon SNS
- CAmazon SQS
- DAWS STS
91A company has a workflow that sends video files from their onpremise system to AWS for Trans coding. They use EC2 worker instances that pull Trans coding jobs from SQS an appropriate service for this scenario?
- ASQS synchronously provides transcoding output
- BSQS guarantees the order of the messages
- CSQS checks the health of the worker instances
- DSQS helps to facilitate horizontal scaling of encoding tasks
92Which AWS Services are valid origins for an Amazon CloudFront distribution?
Choose 2 answers- AAmazon RDS
- BAmazon Glacier
- CELB Classic Load Balancer
- DAmazon DynamoDB
- EAmazon S3
93You run an adsupported photo sharing website using S3 to serve photos to visitors of your
site. At some point you find out that other sites have been linking to the photos on your site, Causing
loss to your business. What is an effective method to mitigate this?- AUse CloudFront distributions for static content
- BStore photos on an EBS volume of the web server
- CBlock the IPs of the offering websites in Security Groups
- DRemove public read access and use signed URLs with expiry dates
94A popular e-commerce application runs on AWS. The application encounters performance
issues. The database is unable to handle the amount of queries and load during peak times. The database is running on the RDS Aurora engine on the largest instance size available.
What should an administrator do to improve performance?- AConvert the database to Amazon Redshift.
- BCreate a CloudFront distribution.
- CConvert the database to use EBS Provisioned IOPS.
- DCreate one or more read replicas.
95A data analytics startup company asks a Solutions Architect to recommend an AWS data
store option for indexed data.
The data processing engine will generate and input more than 64 TB of processed data every day.
with item sizes reaching up to 300 KB The startup is flexible with data storage models and is more
interested in a database that requires minimal effort to scale with a growing dataset size.
Which AWS data store service should the Architect recommend?- AAmazon RDS
- BAmazon Redshift
- CAmazon DynamoDB
- DAmazon S3
96A company needs to deploy virtual desktops to its customers in a virtual private cloud,
leveraging existing security controls. Which set of AWS services and features will meet the company's requirements?- AVirtual private network connection, AWS Directory services, and Classic Link
- BVirtual private network connection, AWS Directory services, and Amazon Workspaces
- CAWS Directory service, Amazon Workspaces, and AWS Identity and Access Management
- DAmazon Elastic Compute Cloud, and AWS identity and access management
97An application uses an Amazon SQS queue as a transport mechanism to deliver data to a
group of EC2 instances for processing. The application owner wants to add a mechanism to archive
the incoming data without modifying application code on the EC2 instances.
How can this application be re-architected to archive the data without modifying the processing instances?- ATrigger a Lambda function by using Amazon CloudWatch Events to retrieve messages from the SQS queue and archive to Amazon S3.
- BUse an Amazon SNS topic to fan out the data to the SQS queue in addition to a Lambda function that records the data to an S3 bucket.
- CSet up an Amazon Kinesis Data Stream so that multiple instances can receive data. Add a separate EC2 instance that is configured to archive all data it receives.
- DWrite the data to an S3 bucket, and use an SQS queue for S3 event notifications to tell the instances where to retrieve the data.
98A Solutions Architect is designing a photo application on AWS. Every time a user uploads a photo to Amazon S3, the Architect must insert a new item to a DynamoDB table.
Which AWS-managed service is the BEST fit to insert the item?- ALambda@Edge
- BAWS Lambda
- CAmazon API Gateway
- DAmazon EC2 instances
99How can a user track memory usage in an EC2 instance?
- ACall Amazon CloudWatch to retrieve the memory usage metric data that exists for the EC2 Instance
- BAssign an 1AM role to the EC2 instance with an 1AM policy granting access to the desired metric.
- CUse an instance type that supports memory usage reporting to a metric by default
- DPlace en agent on the EC2 instance to push memory usage to an Amazon CloudWatch custom metric.
100You have just created an Amazon Relational Database Service (RDS) PostgreSQL instances in Amazon VPC and are unable to connect. Which of the following may be causing connection issues to your Amazon RDS endpoint? Choose 3 answers
- AIncorrect rules in VPC security groups
- BIncorrect rules in DB security groups
- CAmazon RDS endpoint port restrictions on the local firewall
- DAn incorrect configuration in the Options Group
- EAn incorrect Amazon RDS DB instance type
- FThe Amazon RDS instance is not yet in a running state
Informationen
- Beschreibung
- aw Quiz am a6, erstellt von Antonio M am 25/07/2019.
- Autor
- Antonio M
- Sprache
- Español
- Aufrufe
- 0
- Schlagwörter
- Bewertung
- Noch keine Bewertungen Bewerte dieses Quiz