Quiz
Untitled
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (34)
1What are the DHCP option attributes used to assign private DNS servers to your VPC?
- ADNS Resolution and Domain Name
- BHostnames and Internet Domain
- CDomain Servers and Domain Name
- DDomain Name Servers and Domain Name
2What are two features of CloudWatch operation?
- ACloudWatch does not support custom metrics
- BCloudWatch permissions are granted per feature and not AWS resource
- CCollect and monitor operating system and application-generated log files
- DAWS services automatically create logs for CloudWatch
- ECloudTrail generates logs automatically when AWS account is activated
3You have an application that collects monitoring data from 10,000 sensors (IoT) deployed in the USA. The datapoints are comprised of video events for home security and environment status alerts. The application will be deployed to AWS with EC2 instances as data collectors. What AWS storage service is preferred for storing video files from sensors?
- ARedShift
- BRDS
- CS3
- DDynamoDB
4What storage type enables permanent attachment of volumes to EC2 instances?
- AS3
- BRDS
- CTDS
- DEBS
- EInstance Store
5What are two advantages of selecting default tenancy option for your VPC when creating it?
- APerformance and stability
- BSome AWS do not work with a dedicated tenancy VPC
- CTenant can launch instances within VPC as default or dedicated instances
- DInstance launch is faster
6What two statements correctly describe Amazon Virtual Private Gateway?
- AAssign to private subnets only
- BAssign to public subnets only
- CSingle virtual private gateway per VPC
- DMultiple virtual private gateways per VPC
- ESingle virtual private gateway per region
7What are two features that correctly describe Availability Zone (AZ) architecture?
- AMultiple regions per AZ
- BInterconnected with private WAN links
- CMultiple AZ per region
- DInterconnected with public WAN links
- EData is auto-replicated between zones in different regions
- FDirect Connect supports Layer 2 connectivity to region
8What AWS services encrypt data at rest by default?
- AS3
- BAWS Storage Gateway
- CEBS
- DGlacier
- ERDS
9What two attributes are only associated with CloudFront private content?
- AAmazon S3 URL
- BSigned cookies
- CWeb distribution
- DSigned URL
- EObject
10What two statements correctly describe how to add or modify IAM roles to a running EC2 instance
- AAttach an IAM role to an existing EC2 instance from the EC2 console
- BReplace an IAM role attached to an existing EC2 instance from the EC2 console
- CAttach an IAM role to the user account and relaunch the EC2 instance
- DAdd the EC2 instance to a group where the role is a member
11What are the minimum components required to enable a web-based application with public web servers and a private database tier?
- AInternet gateway
- BAssign EIP addressing to database instances on private subnet
- CVirtual private gateway
- DAssign database instances to private subnet and private IP addressing
- EAssign EIP and private IP addressing to web servers on public subnet
12What two statements accurately describe Amazon VPC architecture?
- AElastic Load Balancer (ELB) cannot span multiple availability zones
- BVPC does not support DMVPN connection
- CVPC subnet cannot span multiple availability zones
- DVPC cannot span multiple regions
- EFlow logs are not supported within a VPC
13What feature enables CloudWatch to manage capacity dynamically for EC2 instances?
- AReplication lag
- BAuto-scaling
- CElastic Load Balancer
- DVertical scaling
14What authentication method provides Federated Single Sign-On (SSO) for cloud applications?
- AADS (Amazon Directory Service)
- BISE (Identity Services Engine)
- CRADIUS
- DTACACS (Terminal Access Controller Access-Control System)
- ESAML
15What method detects when to replace an EC2 instance that is assigned to an Auto-Scaling group?
- AHealth Check
- BLoad Balancing Algorithm
- CEC2 Health Check
- DNot Currently Supported
- EDynamic Path Detection
- FAuto-Scaling
16What two resource tags are supported for an EC2 instance?
- AVPC endpoint
- BEIP
- CNetwork Interface
- DSecurity Group
- EFlow Log
17How is a volume selected (identified) when making an EBS Snapshot?
- AAccount ID
- BVolume ID
- CTag
- DARN
18What two features provide an encrypted (VPN) connection from a VPC to an enterprise data center?
- AInternet gateway
- BAmazon RDS
- CVirtual private gateway
- DCSR 1000V router
- ENAT gateway
19What are two advantages of cross-region replication of an S3 bucket?
- ACost
- BSecurity Compliance
- CScalability
- DBeanstalk support
- EMinimize latency
20What consistency model is the default used by DynamoDB?
- AStrongly consistent
- BEventually consistent
- CNo default model
- DCasual consistency
- ESequential consistency
21What features are required to prevent users from bypassing AWS CloudFront security?
- ABastion host
- BSigned URL
- CIP Whitelist
- DSigned cookies
- EOrigin Access Identity (OAI)
22What are the advantages of a NAT gateway over a NAT instance?
- ANAT gateway requires a single EC2 instance
- BNAT gateway is scalable
- CNAT gateway translates faster
- DNAT gateways is a managed service
- ENAT gateway is Linux-based
23What two fault-tolerant features does Amazon RDS support?
- ACopy snapshot to a different region
- BCreate read replica to a different region
- CCopy unencrypted read-replica only
- DCopy read/write replica and snapshot
24What two features describe an Application Load Balancer (ALB)?
- ADynamic Port Mapping
- BSSL Listener
- CLayer 7 Load Balancer
- DBackend Server Authentication
- EMulti-Region Forwarding
25You have configured a seurity group to allow ICMP, SSH, and RDP inbound and assigned the security group to all instances in a subnet. There is no access to any Linux-based or Windows-based instances and you cannot Ping any instances. The network ACL for the subnet is configured to allow all inbound traffic to the subnet. What is the most probable cause?
- AOn-premises firewall rules
- BSecurity group and network ACL outbound rules
- CNetwork ACL outbound rules
- DSecurity group outbound rules
- EBastion host required
26You have been asked to setup a VPC endpoint connection between VPC and S3 buckets for storing backups and snapshots. What AWS components are currently required when configuring a VPC endpoint?
- AInternet gateway
- BNAT instance
- CElastic IP
- DPrivate IP Address
27What three attributes are used to define a lunch configuration template for an Auto-Scaling group?
- AInstance type
- BPrivate IP Address
- CElastic IP
- DSecurity Group
- EAMI
28You have enabled Amazon RDS database services in VPC1 for an application that has public web servers in VPC2. How do you connect the web servers to the RDS database instance so they can communicate considering the VPC's are in the same region?
- AVPC endpoints
- BVPN gateway
- CPath-based routing
- DVPC peering
- EAWS Network Load Balancer
29What two methods are recommended by AWS for protecting EBS data at rest?
- AReplication
- BSnapshots
- CEncryption
- DVPN
30What security problem is solved by using Cross-Origin Resource Sharing (CORS)?
- AEnable HTTP requests from within scripts to a different domain
- BEnable sharing of web-based files between different buckets
- CProvide security for third party objects within AWS
- DPermits sharing objects between AWS services
31What two features are enabled with S3 services?
- AStore objects of any size
- BDynamic web content
- CSupports provisioned IOPS
- DStore virtually unlimited amounts of data
- EBucket names are globally unique
32What is the purpose of a local route within a VPC route table?
- ALocal route is derived from the default VPC CIDR block 10.0.0.0/16
- BCommunicate between instances within the same subnet or different subnets
- CUsed to communicate between instances within the same subnet
- DDefault route for communicating between private and public subnets
- EOnly installed in the main route table
33What feature is supported when attaching or detaching an EBS volume from an EC2 instance?
- AEBS volume can be attached and detached to an EC2 instance in the same region
- BEBS volume can be attached and detached to an EC2 instance that is cross-origin
- CEBS volume can only be copied and attached to an EC2 instance that is cross-region
- DEBS volume can only be attached and detached to an EC2 instance in the same Availability Zone
34What Amazon AWS service supports real-time processing of data stream from multiple consumers and replay of records?
- ADynamoDB
- BEMR
- CKinesis data streams
- DSQS
- ERedShift
Information
- Description
- AWS-SAA-CO2 AWS Certified Solutions Architect Associate Quiz on Untitled, created by Avyay Kuchibotla on 05/05/2023.
- Author
- Avyay Kuchibotla
- Language
- English
- Views
- 0
- Tags
- Rating
- No ratings yet Rate this quiz