Quiz
AWS – Solution Architect Associate Level Certification - Mock Test
Este quiz tem tempo limite, por isso abre no player de sempre.
Perguntas do quiz (94)
1How do you secure company critical data on S3
(choose 4 correct answers)- AYou can use IAM Policies
- BYou can use Bucket Policies
- CYou can use Access Control Lists (ACLs)
- DYou can use the Server Side Encryption (SSE)
- EYou can serve it through CloudFront
2How to secure data on rest in EBS
(choose 1 correct answer)- AEBS automatically encrypts data on it for more security
- BYou can use your own encryption layer on the top
- CUse S3 instead
- DBlock the EC2 to access data to your EBS
3You have a photo selling website where you have a library of photos on S3. You noticed that there are some websites that are showing the link to your S3 photos. How do you restrict sites like these using your S3 photos link?
(choose 1 correct answer)- AUse CloudFront to serve images
- BRestrict access to those websites in the bucket policy
- CUse Glacier to store images
- DRestrict access to those websites in the IAM policy
- ERemove the public URL link from the object in S3
4In which of the following cases should you use SQS – Simple Queue Service?
(choose 2 correct answers)- ADesigning a business application which requires a lot of co-ordination between different tasks
- BVideo encoding application where each video is encoded with a pre-defined number of steps
- CReceiving thousands of notifications from a process and add them to a queue
- DProcess a queue of messages where each message is a task that needs to be completed
5How do you ensure that the data has been saved properly in S3?
(choose 1 correct answer)- AEvery S3 account has a predefined bucket where the logs are stored
- BWhen processing a request to store data, the service will redundantly store your object across multiple facilities before returning SUCCESS.
- CYou can see the HTTP success code in the logs
- DUsing a combination of Content-MD5 checksums
6You are running an application on an EC2 and now you want to add another EC2 for your application that requires a high bandwidth connect with the existing EC2. Where should you launch your EC2 in this case?
(choose 1 correct answer)- AVPC
- BPublic Subnet
- CPrivate Subnet
- DPlacement Group
- EAvailability Zone
7Where should you use SWF – Simple Workflow Service?
(choose 2 correct answers)- ADesigning a business application which requires a lot of co-ordination between different tasks
- BVideo encoding application where each video is encoded with a pre-defined number of steps
- CReceiving thousands of notifications from a process and add them to a queue
- DProcess a queue of messages where each message is a task that needs to be completed
8What services are required for Auto Scaling?
(choose 2 correct answers)- ASNS
- BCloudWatch
- CSQS
- DELB
9Your web application is using Auto Scaling and Elastic Load Balancer.
You want to monitor the application to ensure that it maintain a good quality of service for your customers, defined by the application’s page load time.
What metric in AWS CloudWatch can best be used for this?
(choose one correct answer)
(Origin Number: 71)- ALatency reported by the Elastic Load Balancer(ELB)
- BRequest count reported by ELB
- CAggregate networking for the web tier
- DAggregate CPU Utilisation for the web tier
10Amazon Glacier is designed for
(chose 2 correct answers)- AActive database storage.
- BInfrequently accessed data.
- CData archives.
- DFrequently accessed data.
- ECached session data.
11An instance is launched into the public subnet of a VPC. Which of the following must be done in order for it to be accessible FROM the Internet?
(choose 1 correct answer)- AAttach an Elastic IP to the instance
- BNothing. The instance is accessible from the Internet
- CLaunch a NAT instance and route all traffic to it
- DMake an entry in the route table passing all traffic going outside the VPC to the NAT instance
12In VPCs with private and public subnets, database servers should ideally be launched into?
(choose 1 correct answer)- AThe public subnet
- BThe private subnet
- CEither of them
- DNot recommended, they should ideally be launched outside VPC
13What are the benefits of using ElastiCache for you web application?
(choose 2 correct answers)- AIt reduces the load on your web servers
- BIt reduces the load on your database
- CGives you more availability of cached data when your Multi-AZ RDS is under maintenance
- DGives you faster access to your cache data
14You configured ELB to perform health checks on EC2 instances. If an instance fails to pass health checks, which statement will be true?
(choose 1 correct answer)- AThe instance is replaced automatically by the ELB.
- BThe instance gets terminated automatically by the ELB.
- CThe ELB stops sending traffic to the instance that failed its health check.
- DThe instance gets quarantined by the ELB for root cause analysis.
15What are the characteristics of DynamoDB?
(choose 3 correct answers)- AIt is used for SQL databases like MsSQL, MySQL, Oracle
- BGives you a fast and predictable performance with seamless scalability
- CIt is a managed service provided by AWS
- DWhen reading data from Amazon DynamoDB, users can specify whether they want the read to be eventually consistent or strongly consistent
- EThere is a limit of stored data or throughput of data
16You have a business critical application that requires it to be highly available with 6 instances always running. What should you do to achieve this?
(choose 3 correct answers)- A2 EC2 in 3 regions with ELB on top
- B3 EC2 in 2 AZ with ELB on top
- CAuto Scaling rule for 6 instances always running
- DAuto scaling rule for 3 instance always running in each zone
- EAuto Scaling Replace the lost capacity in case of zone failure in the other zone
- FAuto Scaling Replace the lost capacity in case of region failure in other region
17What are the characteristics of Elastic Beanstalk?
(choose 2 correct answers)- AYou can use it to replace an instance in the ELB when it fails its health check
- BHelps you quickly deploy and manage applications in the AWS cloud
- CIt creates a template for your EC2 instance
- DYou don’t need to worry about the infrastructure required to run your applications
18How do you achieve single sign on with AWS?
(choose 1 correct answer)- AIt is configurable in the IAM policies for the user
- BBy Using Multi-factor authentication
- CBy Using Active Directory and LDAP integration
- DBy Configuring SAML 2.0
- EIt is currently not possible in AWS
19What is true about VPC?
(choose 3 correct answers)- AYou can have one EC2 in more than 1 VPC
- BThere will always be atleast 1 default VPC
- CA VPC is always across multiple availability zones within a region
- DYou can either have a VPC with public subnet or private subnet
- EYou may use a third party software VPN to create a site to site or remote access VPN connection with your VPC via the Internet Gateway
20You are building a system to distribute confidential training videos to employees. Using CloudFront, what method could be used to serve content that is stored in S3, but not publically accessible from S3 directly?
(choose 1 correct answer)- ACreate an Origin Access Identity (OAI) for CloudFront and grant access to the objects in your S3 bucket to that OAI.
- BAdd the CloudFront account security group “amazon-cf/amazon-cf-sg” to the appropriate S3 bucket policy.
- CCreate an Identity and Access Management (IAM) User for CloudFront and grant access to the objects in your S3 bucket to that IAM User.
- DCreate a S3 bucket policy that lists the CloudFront distribution ID as the Principal and the target bucket as the Amazon Resource Name (ARN).
21An instance is connected to an ENI (Elastic Network Interface) in one subnet. What happens when you attach an ENI of a different subnet to this instance?
(choose 1 correct answer)- AThe instance follows the rules of the older subnet
- BThe instance follows the rules of both the subnets
- CThe instance follows the rules of the newer subnet
- DNot possible cannot be connected to 2 ENIs
22How do you point apex record of your website (example.com) to the public DNS of the Elastic Load Balancer?
(choose 1 correct answer)- AA Record
- BCNAME record
- CAAAA record
- DAlias
- ENS Record
23Which of the following will occur when an EC2 instance in a VPC (Virtual Private Cloud) with an associated Elastic IP is stopped and started?
(choose 2 correct answers)- AThe Elastic IP will be dissociated from the instance
- BAll data on instance-store devices will be lost
- CAll data on EBS (Elastic Block Store) devices will be lost
- DThe ENI (Elastic Network Interface) is detached
- EThe underlying host for the instance may change
24You are running an ERP application on EC2 for your company that runs 24x7 and the load is predictable and constant throughout the year. Which is the most cost-efficient option for the EC2 purchase model in this case?
(choose 1 correct answer)- AOn-Demand
- BReserved
- CDedicated
- DSpot
- EEC2 is not the right choice here
25What are the characteristics of EBS?
(choose 3 correct answers)- AYou can attach one EBS volume to multiple EC2 instance
- BData in EBS is stored across multiple AZ for redundancy
- CMaximum size of an EBS can be 1 TB
- DYou can have provisioned IOPS with your EBS volumes
- EEBS behaves like raw unformatted block device
26You notice that you are not able to access your EC2 linux instance using SSH. What should you check first?
(choose 1 correct answer)- AMake sure that the patches are up to date on the instance
- BMake sure the port 22 are open on the subnet for incoming traffic
- CMake sure the port 22 are open on the subnet for outgoing traffic
- DMake sure the port 22 are open on the security group for incoming traffic
- EMake sure the port 22 are open on the security group for outgoing traffic
27What is true about AMI?
(choose 4 correct answers)- AYou can share your AMI with other AWS account owners
- BYou can create an instance store-backed AMI
- CYou can create an EBS-backed AMI
- DFor Instance stored-backed AMIs, the root volume is stored in S3
- EFor EBS stored-backed AMIs, the root volume is stored in S3
28What is true about RDS?
(choose 3 correct answers)- AYou can create multiple read replica for ready heavy applications
- BYou can have a read replica of a read replica
- CDaily backups are automatically taken
- DYou can enable Multi-AZ option to have automatic failover in a different region
- EYou can have provisioned IOPS for your RDS database
29What are the characteristics of IAM?
(choose 2 correct answers)- ABy Default all the services are enabled for a new IAM user
- BBy Default all the services are disabled for a new IAM user
- CYou can create multiple access ID and secret keys for 1 IAM user
30What are the characteristics of VPC subnets?
(choose 2 correct answers)- Anetwork traffic entering and exiting each subnet can be allowed or denied via network Access Control Lists (ACLs)
- BA subnet can be across multiple availability zones
- CA subnet can be across multiple regions
- DDefault subnets are assigned a /20 netblocks
- EDefault subnets are assigned a /16 netblocks
31You have created 4 weighted resource record sets with weights 1, 2, 3 and 4. the 3rd record set is selected by Route53?
(choose 1 correct answer)- A1/7th of the time
- B3/10th of the time
- C3/7th of the time
- D1/4th of the time
32Which of the following can be used as an origin server in CloudFront?
(Choose 3 correct answers)- AA webserver running on EC2
- BA webserver running in your own datacenter
- CA RDS instance
- DAn Amazon S3 bucket
- EA Glacier storage
33In CloudFront what happens when content is NOT present at an edge location and a request is made to it?
(choose 1 correct answer)- AOption 1 An Error 404 not found is returned
- BCloudFront delivers the content directly from the origin server and stores it in the cache of the edge location
- CThe request is kept on hold till content is delivered to the edge location
- DThe request is routed to the next closest edge location
34Which of the following is true with respect to serving private content through CloudFront?
(choose 3 correct answers)- ASigned URLs can be created to access objects from CloudFront edge locations
- BDirect access to S3 URLs can be removed therefore allowing access only through CloudFront URLs
- CMark the S3 bucket private and allow access to CloudFront by means of Roles
- DMark the S3 bucket private and and create an Origin Access Identity to access the objects
35You have written a CloudFormation template that creates 1 elastic load balancer fronting 2 EC2 instances. Which section of the template should you edit so that the DNS of the load balancer is returned upon creation of the stack?
(choose 1 correct answers)- AResources
- BParameters
- COutputs
- DMappings
36You are doing a large data analysis which requires high computing power and many instances to be launched simultaneously and then to be retired after the analysis. If the instance is retired during the analysis, the program automatically shifts the analysis to the other instance. Which is the most cost-efficient option for launching the EC2 in this case?
(choose 1 correct answer)- AOn-Demand
- BReserved
- CDedicated
- DSpot
- EEC2 is not the right choice here
37What is true about penetration testing in AWS?
(choose 2 correct answers)- AYou can do the penetration on your individual EC2 instance only
- BA prior permission is required from AWS for penetration testing
- CYou cannot do the penetration testing at all
- DYou can ask AWS support to do the penetration testing
- EAWS will automatically conduct penetration testing from time to time
38What are the benefits of Multi-AZ RDS deployments?
(choose 2 correct answers)- AYou get a read-replica
- BMore availability during the maintenance window
- CAutomatic failover in case of one data center failure
- DMore IOPS available for data throughput
- EYou get more privileges to manage your database
39What kind of data should not be stored in S3?
(choose 3 correct answers)- AImages and videos
- BStatic files for your websites
- CYour website database
- DNotifications from a computer program
- EStatic Files that are accessed once in many years
40What are the characteristics of a reserved instance?
(choose 3 correct answers)- AIt can be applied across regions
- BIt saves you significant money over on-demand instance
- CYou can shut down the reserved instance any time you want and the hourly charge wont incur for the shutdown hours
- DIf your AMI changes the Reserved instance is still valid if it’s the same instance type
- EYou pay a fixed amount of money irrespective of the number of hours you used the instance for
41What are the characteristics of CloudFormation?
(choose 2 correct answers)- AYou can use it to replace an instance in the ELB when it fails its health check
- BHelps you quickly deploy and manage applications in the AWS cloud
- CIt creates a template for your EC2 instance
- DYou don’t need to worry about the infrastructure required to run your applications
42To protect S3 data from accidental deletion and overwriting you should
(choose 1 correct answer)- ADisable S3 delete using an IAM bucket policy
- BAccess S3 data only using signed URLs
- CEnable S3 reduced redundancy storage
- DEnable S3 versioning on the bucket
- EEnable MFA protected access
43Which one is an operational process performed by AWS for data security?
(choose 1 correct answer)- AAES 256 bit encryption of data stored on any shared storage device
- BDecommissioning of storage device using industry-standard practices
- CBackground virus scans of EBS volumes and EBS snapshots
- DReplication of data across multiple geographic regions
- ESecure wiping of EBS volumes when they are un-mounted
44Which metrics could CloudWatch monitor?
(choose 2 correct answers)- AHypervisor visible metrics such as CPU utilization
- BOperating system visible metrics such as memory utilization
- CNetwork Utilization (Read-write)
- DWeb server visible metrics such as number failed transaction requests
- EDatabase visible metrics such as number of connections
45How should you launch instance if you need a pre-defined IP?
(choose 1 correct answer)- ALaunch it in a VPC
- BLaunch it under an ELB
- CPre-assign an IP using CloudFormation script
- DLaunch it in a Placement Group
46In which case do you have full authority of the underlying instance?
(choose 2 correct answers)- AEC2
- BRDS
- CDynamoDB
- DEMR (Elastic Map Reduce)
47What is true about EBS?
(choose 3 correct answers)- AThe snapshots are stored in S3
- BThe snapshots are just stored as another EBS volume
- CSnapshots are incremental in nature and only
- DYou can share the snapshot with other AWS accounts
- ESnapshots are automatically encrypted
48What is the difference between a security group in VPC and a network ACL in VPC?
(choose 3 correct answers)- ASecurity group restricts access to a Subnet while ACL restricts traffic to EC2
- BSecurity group restricts access to EC2 while ACL restricts traffic to a subnet
- CSecurity group can work outside the VPC also while ACL only works within a VPC
- DNetwork ACL performs stateless filtering and Security group provides stateful filtering
- ESecurity group can only set Allow rule, while ACL can set Deny rule also
49For an EC2 instance launched in a private subnet in VPC, which of the following are the options for it to be able to connect to the internet (assume security groups have proper ports open)?
(choose 1 correct answer)- ASimply attach an Elastic IP
- BIf there is also a public subnet in the same VPC, an ENI can be attached to the instance with the ip address range of the public subnet
- CIf there is a public subnet in the same VPC with a NAT instance attached to internet gateway, then a route can be configured from the instance to the NAT
- DThere is no way for an instance in private subnet to talk to the internet
50What happens to data when an EC2 instance terminates?
(choose 3 correct answers)- AFor EBS backed AMI, the EBS volume with operation system on it is preserved
- BFor EBS backed AMI, any volume attached other than the OS volume is preserved
- CAll the snapshots of the EBS volume with operating system is preserved
- DFor S3 backed AMI, all the data in the local (ephemeral) hard drive is deleted
- EFor Instance store-backed EC2 the data is lost when the instance is rebooted
51Which of the following Auto scaling cannot do?
(choose 3 correct answers)- AStart up EC2 instances when CPU utilization is above threshold
- BRelease EC2 instances when CPU utilization is below threshold
- CIncrease the instance size when utilization is above threshold
- DAdd more Relational Database Service (RDS) read replicas when utilization is above threshold
- EReboots an instance if the health check is failed for that instance
52What is true for S3 buckets?
(choose 3 correct answers)- ABucket namespace is shared and is global among all AWS users.
- BBucket names can contain alpha numeric characters
- CBucket are associated with a region, and all data in a bucket resides in that region
- DBuckets can be transferred from one account to another through API
- EYou can have unlimited number of buckets in each AWS account
53Does S3 provides read-after-write consistency?
(choose 1 correct answer)- AYes, not for all regions
- BYes, for all regions
- CNo, it does not provide read-after-write consistency
- DYou can provision this by making the right API calls
54Choose the correct statement
(choose 3 correct answers)- AYou can have unlimited number of objects in S3 bucket
- BAn S3 object can be of unlimited size
- CData stored in S3 is encrypted
- DYou can use Reduced Redundancy storage for lower cost option
- EYou can serve your static website from S3
55In CloudFront what happens when content is NOT present at an edge location and a request is made to it?
(choose 1 correct answer)- AAn Error 404 not found is returned
- BCloudFront delivers the content directly from the origin server and stores it in the cache of the edge location
- CThe request is kept on hold till content is delivered to the edge location
- DThe request is routed to the next closest edge location
56Which if the services could spread across Multi-AZ?
(choose 2 correct answers)- AEC2
- BELB
- CRDS
- DDynamoDB
- EEBS
57How do you mount a new EBS to an EC2?
(choose 3 correct answers)- AUsing AWS management console
- BUsing AWS API tools
- CUsing AWS command line interface
- DBy doing an RDP to the instance
- EBy doing an SSH to the instance
58Which of the following will provide the maximum IOPS for your EC2?
(choose 1 correct answer)- AInstance based SSD storage
- BEBS with SSD storage
- CEBS with provisioned IOPS
- DStripe data across Multiple EBS volumes with Raid 5
- EStripe data across Multiple EBS volumes with Raid 0
59Choose the right statements about EC2 instance
(choose 2 correct answers)- AThe instance based storage is automatically saved in S3
- BYou can use the instance based storage for your root volume
- CYou can attach multiple Elastic IPs to a single EC2
- DThe public DNS of the EC2 remains intact when you shut down the EC2 and start it again
- EData on the instance based storage remains intact when you reboot the instance
60What is the best way of taking a fast snapshot without losing the consistency?
(choose 1 correct answer)- AStop the EC2, issue a snapshot command, switch on the EC2
- BStop the EC2, issue a snapshot command, wait to complete the snapshot, remount EBS
- CJust issue the snapshot command
- DUn-mount EBS, issue snapshot command, remount
- EUn-mount EBS, take snapshot, wait to complete the snapshot, remount EBS
61What is the maximum size of a single S3 object?
- AThere is no such limit
- B5 TB
- C5 GB
- D100 GB
62Which of the following benefits does adding Multi-AZ deployment in RDS provide?
(choose multiple if more than one is true)- AMulti-AZ deployed database can tolerate an Availability Zone failure
- BDecrease latencies if app servers accessing database are in multiple availability zones
- CMake database access times faster for all app servers
- DMake database more available during maintenance tasks
63When an ELB is setup, what is the best way to route a website’s traffic to it?
- AResolve the ELB name to an ip address and point the website to that ip address
- BThere is no direct way to do so, Route53 has to be used
- CGenerate a CNAME record for the website pointing to the DNS name of the ELB
64You want to use Route53 to direct your www sub-domain to an Elastic Load Balancer fronting your web servers. What kind of record set should you create?
- AA record
- BAAAA record
- CNS record
- DCNAME record
65You have created a Route 53 latency record set from your domain to a machine in Singapore and a similar record to a machine in Oregon. When a user located in India visits your domain he will be routed to:
- ASingapore
- BOregon
- CDepends on the load on each machine
- DBoth, because 2 requests are made, 1 to each machine
66If I want an instance to have a public IP address, which IP address should I use?
- AElastic IP Address
- BClass B IP Address
- CClass A IP Address
- DDynamic IP Address
67What does RRS stand for when talking about S3?
- ARedundancy Removal System
- BRelational Rights Storage
- CRegional Rights Standard
- DReduced Redundancy Storage
68What does the AWS Storage Gateway provide?
- AIt allows to integrate on-premises IT environments with cloud storage.
- BA direct encrypted connection to Amazon S3.
- CIt's a backup solution that provides an on-premises cloud storage.
- DIt provides an encrypted SSL endpoint for backups in the cloud.
69How many relational database engines does RDS currently support?
- AThree: MySQL, Oracle and Microsoft SQL Server.
- BJust two: MySQL and Oracle.
- CFive: MySQL, PostgreSQL, MongoDB, Cassandra and SQLite.
- DJust one: MySQL.
70What are the two permission types used by AWS?
- AResource-based and Product-based
- BProduct-based and Service-based
- CService-based
- DUser-based and Resource-based
71Which of the following requires a custom cloudwatch metric to monitoring?
- ADisk usage activity of the ephemeral volumes of an Amazon EC2 instance
- BCPU Utilisation of an Amazon Elastic Compute Cloud (EC2) instance
- CDisk usage activity of an Elastic Block Store volume attached to an Amazon EC2 instance
- DDisk full percentage of an Elastic Block Store volume
72You run a two-tiered application with the following components: an Elastic Load Balancer (ELB), three web/application server on Amazon Elastic Compute Cloud (EC2), and one MySQL RDS database. With growing load, database query take longer and longer and slow down the overall response time for user requests.
What of the following options could speed up performance ? choose 3- ACreate an RDS read-replica and redirect half of the database read request to it
- BCache database queries in Amazon Elastic Cloud
- CSetup RDS in Multi-AZ mode.
- DShard the database and distribute loads between shards.
- EUse AWS CloudFront to cache database queries.
73As an application has increased in popularity, reports of performance issues have grown. the current configuration initiates scaling actions based on avg CPU utilization; however during reports of slowness, CloudWatch graphs have shown that average CPU remains steady at 40 percent. This is well below the alarm threshold of 60 percent. Your developers have discovered that, due to the unique design of the application, performance degradation occurs on an instance when it is processing more than 200 threads.
What is the best way to ensure that your application scales to match the demands?- ALaunch two to six additional instances outside of the AutoScaling group to handle the additional load.
- BPopulate the custom CloudWatch metric for concurrent session and initiate scaling action based on that metric instead of CPU use.
- CEmpirically determine the expected CPU use for 200 concurrent sessions and adjust the CloudWatch alarm threshold to be that CPU use.
- DAdd a script to each instance to detect the number of concurrent sessions. If the number of sessions remains over 200 for 5 minutes, have the instance increased the desired capacity of the AutoScaling group by one.
74Your company build the mobile application that has already been downloaded several hundreds and thousands of times.
Which authentication solution would enables mobile client to access picture stored on aws s3 bucket and provide you with the height flexibility to rotate credentials?- AIdentify federation based on AWS security token service(STS) using an aws IAM policy for the respective s3 bucket
- BIAM user per registered client with an IAM policy granted aws s3 access to the respective bucket
75EBS can always tolerate an Availability Zone failure?
- ANo, all EBS volume is stored in a single Availability Zone
- BYes, EBS volume has multiple copies so it should be fine
- CDepends on how it is setup
- DDepends on the Region where EBS volume is initiated
76You receive a spot instance at a bit of $0.05/hr. After 30 minutes, the spot price increase to $0.06/hr and your spot instances is terminated by AWS. What was the total EC2 compute cost of running your spot instance?
- A$0.00
- B$0.02
- C$0.03
- D$0.04
- E$0.05
77You have an Amazon Elastic Cloud Compute (EC2) security group with several running EC2 instances. You change the security group rules to allow inbound traffic on a new port and protocol, and launch several new instance in the same security group. The new rule apply:-
- AImmediately to the new instances only
- BImmediately to the new instances only, but old instance must be stopped and restarted before before the new rule apply.
- CTo all instances, but it may take several minutes for old install to see the changes.
- DImmediately to all instances in the security group
78You are developing a highly available web application using stateless web servers. Which services are suitable for storing session state data?
(choose 3).- AAmazon DynamoDB
- BAmazon ElastiCache
- CElastic Load Balancing
- DAWS storage Gateway
- EAmazon Relational Database service (RDS)
- FAmazon CloudWatch
79What combination of the following options will protect Amazon Simple Storage Services (S3) objects from both accidental deletion and accidental overwriting?
(Choose two)- AEnable S3 versioning on bucket
- BAccess S3 data using only signed URL.
- CDisable S3 delete using an IAM bucket policy.
- DEnable S3 Reduced Redundancy storage
- EEnable multi-factor authentication(MFA) protected access.
80You have been tasked with creating a VPC network topology for your company. The VPC network must support both internet-facing application and internally-facing application accessed only over VPN. Both internet-facing and internally-facing application must be able to leverage at least three AZs for high availability. At a minimum, how many subnets must you create within your VPC to accommodate these requirement?
- A2
- B3
- C4
- D6
81You have an Amazon Virtual Private Cloud with a public subnet. Three Amazon Elastic Compute Cloud (EC2) instances currently running inside the subnet can successfully communicate with other hosts on the internet. You launch a fourth instance in the same subnet, using the same amazon machine image (AMI) and security group configuration, you used for others, but find that this instance cannot be accessed from the internet. What should you do to enable internet access?
- ADeploy a NAT instance into the public subnet.
- BModify the routing table for the public subnet.
- CConfigure a publically routable IP address in the host OS of the fourth instance.
- DAssign an elastic ip address to the fourth instance.
82You have a business-critical two-tier web app currently deployed in two availability zones in a single region, using Elastic, Load Balancing and AutoScaling. The app depends on synchronous replication(very low latency connectivity) at the data layer. The application need to remain fully available even if one application availability zone goes off-line, and auto scaling cannot launch new instances in the remaining availability zones, How can the current architecture be enhanced to ensure this?
- ADeploy in three availability zone, with auto scaling minimum set to handel 33 percent peak load per zone.
- BDeploy in two region using Weighted Round Robin(WRR), with Auto Scaling minimums set for 50 percent peak load per Region.
- CDeploy in two region using Weighted Round Robin(WRR), with Auto Scaling minimums set for 100 percent peak load per region.
- DDeploy in three availability Zones, with auto scaling minimum set to handle 50 percent peak load per zone.
83Which of the following requires a custom CloudWatch metric to monitor?
- AMemory use
- BCPU use
- CDisk read operations
- DNetwork in
- EEstimated charges
84How can software determine the public and private ip addresses of the aws EC2 instance that it is running on?
- AQuery the appropriate AWS cloudwatch metric
- BUse an ipconfig or ifconfig command
- CQuery the local instance metadata
- DQuery the local instance userdata
85What action is required to establish an Amazon VPC VPN connection between an on-premises data center and Amazon VPC Virtual Private Gateway?
- AEstablished a dedicated network connection using AWS Direct Connect
- BModify the main route table to allow traffic to a network address translation instance.
- CUse a dedicated network address translation instance in the public subnet
- DAssign a static internet-routable ip address to Amazon VPC Customer Gateway
86Which of the following is a durable key-value store?
- AAmazon Simple Notification Service
- BAmazon Simple Queue Service
- CAmazon Simple WorkFlow Service
- DAmazon Simple Storage Service
87Which route must be added to your routing table in order to allow connections to the internet from your subnet?
- ADestination:0.0.0.0/0 → Target:your internet gateway
- BDestination:192.168.1.257/0 → Target:your internet gateway
- CDestination:0.0.0.0/33 → Target:your virtual private gateway
- DDestination:0.0.0.0/0 → Target:0.0.0.0/24
- EDestination:0.0.0.0/32 → Target:your virtual private gateway
88After creating a new aws account, you use the api to request 40 on-demand AWS EC2 instances in a single availability zone. After 20 successful requests, subsequent request failed. what could be a reason for this issue, and how would you resolve it?
- AYou encountered a soft limit of 20 instances per region.submit the limit increase form and retry the failed requests once approved.
- BAWS allows you to provision no more than 20 instances per availability zone.select a different availability zone and retry the failed request.
- CYou need to use amazon VPC in order to provision more than 20 instances in a single availability zone. simply terminate the resources already provisioned and re-launch them all in a VPC.
- DYou encountered an api throttling situation and should try the failed request using an exponential decay retry algorithm.
89In reviewing the auto scaling events for your application you notice that your application is scaling up and down multiple times in the same hour. What design choice could you make to optimize for cost while preserving elasticity? choose 2
- AModify the auto scaling group termination policy to terminate the oldest instance first.
- BModify the auto scaling to use scheduled scaling actions
- CModify the auto scaling group termination policy to terminate the newest instance first.
- DModify the amazon cloudwatch alarm period that trigger yours auto scaling scale down policy.
- EModify the auto scaling group cool-down timers.
90A customer's nightly EMR job processes a single 2-TB data file stored on S3. The amazon EMR job runs on two on-demand core nodes and three on-demand task nodes. Which of the following may help reduce the EMR job completion time? choose 2
- AUse three spot instances rather than three on-demand instances for the task nodes.
- BChange the input split size in the mapreduce job configuration.
- CUse a bootstrap action to present the s3 bucket as a local filesystem.
- DLaunch the core nodes and task nodes within an amazon virtual cloud.
- EAdjust the number of simultaneous mapper tasks.
- FEnable termination protection for the job flow
91You have an application running in us-west-2 that requires 6 amazon elastic compute cloud instances running at all times. With 3 availability of zones available in that region(us-west-2a,us-west-2b,us-west-2c), which of the following development provide 100% fault tolerance if any single availability zone in us-west-2 becomes unavailable? choose 2
- Aus-west-2a with 2 EC2 instances, us-west-2b with 2 EC2 instance, us-west-2c with 2 EC2 instance
- Bus-west-2a with 3 EC2 instances, us-west-2b with 3 EC2 instance, us-west-2c with no EC2 instance
- Cus-west-2a with 4 EC2 instances, us-west-2b with 2 EC2 instance, us-west-2c with 2 EC2 instance
- Dus-west-2a with 6 EC2 instances, us-west-2b with 6 EC2 instance, us-west-2c with no EC2 instance
- Eus-west-2a with 3 EC2 instances, us-west-2b with 3 EC2 instance, us-west-2c with 3 EC2 instance
92A VPC public subnet is one that:
- AHas at least 1 route in its associate routing table that uses an internet gateway(IGW)
- BInclude a route in its associated routing table via a NAT.
- CHas network Access control list (NACL) permitting outbound traffic to 0.0.0.0/0
- DHas the public subnet options selected in its configuration
93You are deploying a an application on EC2 that must call aws APIs. what method of securely passing credential to the application should you use?
- AStore API credentials as an object in Amazon S3
- BUse AWS Identity and Access Management roles for EC2 instance
- CPass API credentials to the instance using instance user data
- DEmbed the API credential into your jar file
94A Startup company hired you to help them build a mobile application, that will ultimately store billions of images and videos in Amazon Simple Storage double their current installation base every six months, Due to the nature of their business, they are expecting sudden and large increase in traffic to and from s3, and need to ensure that it can handle the performance need of their applications. What other information must you gather from this customer in order to determine whether s3 is the right option?
- AYou must know how many customers the company has today, because this critical in understanding what their customer base will be in two years.
- BUou must find out total number of requests per second at peak usage.
- CUou must know the size individual objects being written to S3, in order to properly design the key namespace.
- DIn order to build the key namespace correctly, you must understand the total amount of storage needs for each S3 bucket.
Informações
- Descrição
- Origin From: http://www.cloudsolutionsbook.com/amazon-cloud-solutions/june-20th-2015 Mock up 94 Questions – 80 Minutes Mark the right answers – do not use the right column
- Autor
- stephon
- Idioma
- English
- Visualizações
- 9.534
- Etiquetas
- Avaliação
- 4,2 de 5 · 13 avaliações Avalie este quiz