Aws Solutions Architect - Associate (07)

Question 1

You are in the process of creating a Route 53 DNS failover to direct traffic to two EC2 zones. Obviously, if one fails, you would like Route 53 to direct traffic to the other region. Each region has an ELB with some instances being distributed. What is the best way for you to configure the Route 53 health check?

Accepted Answer

D.	Route 53 natively supports ELB with an internal health check. Turn "Evaluate target health" on and "Associate with Health Check" off and R53 will use the ELB's internal health check.

Answer

A.	Route 53 doesn't support ELB with an internal health check.You need to create your own Route 53 health check of the ELB.

Answer

B.	Route 53 natively supports ELB with an internal health check. Turn "Evaluate target health" off and "Associate with Health Check" on and R53 will use the ELB's internal health check.

Answer

C.	Route 53 doesn't support ELB with an internal health check. You need to associate your resource record set for the ELB with your own health check.

Question 2

A user wants to use an EBS-backed Amazon EC2 instance for a temporary job. Based on the input data, the job is most likely to finish within a week. Which of the following steps should be followed to terminate the instance automatically once the job is finished?

Accepted Answer

C.	Configure the CloudWatch alarm on the instance that should perform the termination action once the instance is idle.

Answer

A.	Configure the EC2 instance with a stop instance to terminate it.

Answer

B.	Configure the EC2 instance with ELB to terminate the instance when it remains idle.

Answer

D.	Configure the Auto Scaling schedule activity that terminates the instance after 7 days.

Question 3

Which of the following is true of Amazon EC2 security group?

Accepted Answer

D.	You can modify the rules for a security group at any time.

Answer

A.	You can modify the outbound rules for EC2-Classic.

Answer

B.	You can modify the rules for a security group only if the security group controls the traffic for just one instance.

Answer

C.	You can modify the rules for a security group only when a new instance is created.

Question 4

An Elastic IP address (EIP) is a static IP address designed for dynamic cloud computing. With an EIP, you can mask the failure of an instance or software by rapidly remapping the address to another instance in your account. Your EIP is associated with your AWS account, not a particular EC2 instance, and it remains associated with your account until you choose to explicitly release it. By default how many EIPs is each AWS account limited to on a per region basis?

Accepted Answer

B.	5

Answer

A.	1

Answer

C.	Unlimited

Answer

D.	10

Question 5

In Amazon EC2, partial instance-hours are billed .

Accepted Answer

D.	as full hours

Answer

A.	per second used in the hour

Answer

B.	per minute used

Answer

C.	by combining partial segments into full hours

Question 6

In EC2, what happens to the data in an instance store if an instance reboots (either intentionally or  unintentionally) ?

Accepted Answer

B.	Data persists in the instance store.

Answer

A.	Data is deleted from the instance store for security reasons.

Answer

C.	Data is partially present in the instance store.

Answer

D.	Data in the instance store will be lost.

Question 7

You are setting up a VPC and you need to set up a public subnet within that VPC. Which following requirement must be met for this subnet to be considered a public subnet?

Accepted Answer

B.	Subnet's traffic is routed to an internet gateway.

Answer

A.	Subnet's traffic is not routed to an internet gateway but has its traffic routed to a virtual private gateway.

Answer

C.	Subnet's traffic is not routed to an internet gateway.

Answer

D.	None of these answers can be considered a public subnet.

Question 8

Can you specify the security group that you created for a VPC when you launch an instance in EC2-Classic?

Accepted Answer

B.	No

Answer

A.	No, you can specify the security group created for EC2-Classic when you launch a VPC instance.

Answer

C.	Yes

Answer

D.	No, you can specify the security group created for EC2-Classic to a non-VPC based instance only.

Question 9

While using the EC2 GET requests as URLs, is the URL that serves as the entry point for the web service.

Accepted Answer

B.	endpoint

Answer

A.	token

Answer

C.	action

Answer

D.	None of these

Question 10

You have been asked to build a database warehouse using Amazon Redshift. You know a little about it, including that it is a SQL data warehouse solution, and uses industry standard ODBC and JDBC connections and PostgreSQL drivers. However you are not sure about what sort of storage it uses for database tables. What sort of storage does Amazon Redshift use for database tables?

Accepted Answer

C.	Columnar data storage

Answer

A.	InnoDB Tables

Answer

B.	NDB data storage

Answer

D.	NDB CLUSTER Storage

Question 11

You are checking the workload on some of your General Purpose (SSD) and Provisioned IOPS (SSD) volumes and it seems that the I/O latency is higher than you require. You should probably check the to make sure that your application is not trying to drive more IOPS than you have provisioned.

Accepted Answer

C.	Average queue length

Answer

A.	Amount of IOPS that are available

Answer

B.	Acknowledgement from the storage subsystem

Answer

D.	Time it takes for the I/O operation to complete

Question 12

Which of the below mentioned options is not available when an instance is launched by Auto Scaling with EC2 Classic?

Accepted Answer

B.	Elastic IP

Answer

A.	Public IP

Answer

C.	Private DNS

Answer

D.	Private IP

Question 13

You have been given a scope to deploy some AWS infrastructure for a large organisation. The requirements are that you will have a lot of EC2 instances but may need to add more when the average utilization of your Amazon EC2 fleet is high and conversely remove them when CPU utilization is low.

Which AWS services would be best to use to accomplish this?

Which AWS services would be best to use to accomplish this?

Accepted Answer

B.	Auto Scaling, Amazon CloudWatch and Elastic Load Balancing.

Answer

A.	Auto Scaling, Amazon CloudWatch and AWS Elastic Beanstalk

Answer

C.	Amazon CloudFront, Amazon CloudWatch and Elastic Load Balancing.

Answer

D.	AWS Elastic Beanstalk , Amazon CloudWatch and Elastic Load Balancing.

Question 14

You are building infrastructure for a data warehousing solution and an extra request has come through that there will be a lot of business reporting queries running all the time and you are not sure if your current DB instance will be able to handle it. What would be the best solution for this?

Accepted Answer

B.	Read Replicas

Answer

A.	DB Parameter Groups

Answer

C.	Multi-AZ DB Instance deployment

Answer

D.	Database Snapshots

Question 15

In DynamoDB, could you use IAM to grant access to Amazon DynamoDB resources and API actions?

Accepted Answer

D.	Yes

Answer

A.	In DynamoDB there is no need to grant access

Answer

B.	Depended to the type of access

Answer

C.	No

Question 16

Much of your company's data does not need to be accessed often, and can take several hours for retrieval time, so it's stored on Amazon Glacier. However someone within your organization has expressed concerns that his data is more sensitive than the other data, and is wondering whether the high level of encryption that he knows is on S3 is also used on the much cheaper Glacier service. Which of the following statements would be most applicable in regards to this concern?

Accepted Answer

C.	Amazon Glacier automatically encrypts the data using AES-256, the same as Amazon S3.

Answer

A.	There is no encryption on Amazon Glacier, that's why it is cheaper.

Answer

B.	Amazon Glacier automatically encrypts the data using AES-128 a lesser encryption method than Amazon S3 but you can change it to AES-256 if you are willing to pay more.

Answer

D.	Amazon Glacier automatically encrypts the data using AES-128 a lesser encryption method than Amazon S3.

Question 17

Your EBS volumes do not seem to be performing as expected and your team leader has requested you look into improving their performance. Which of the following is not a true statement relating to the performance of your EBS volumes?

Accepted Answer

A.	Frequent snapshots provide a higher level of data durability and they will not degrade the performance of your application while the snapshot is in progress.

Answer

B.	General Purpose (SSD) and Provisioned IOPS (SSD) volumes have a throughput limit of 128 MB/s per volume.

Answer

C.	There is a relationship between the maximum performance of your EBS volumes, the amount of I/O you are driving to them, and the amount of time it takes for each transaction to complete.

Answer

D.	There is a 5 to 50 percent reduction in IOPS when you first access each block of data on a newly created or restored EBS volume

Question 18

You've created your first load balancer and have registered your EC2 instances with the load balancer. Elastic Load Balancing routinely performs health checks on all the registered EC2 instances and automatically distributes all incoming requests to the DNS name of your load balancer across your registered, healthy EC2 instances. By default, the load balancer uses the protocol for checking the health of your instances.

Accepted Answer

B.	HTTP

Answer

A.	HTTPS

Answer

C.	ICMP

Answer

D.	IPv6

Question 19

A major finance organisation has engaged your company to set up a large data mining
 application. Using AWS you decide the best service for this is Amazon Elastic MapReduce(EMR) which you know uses Hadoop. Which of the following statements best describes Hadoop?

Accepted Answer

C.	Hadoop is an open source Java software framework

Answer

A.	Hadoop is 3rd Party software which can be installed using AMI

Answer

B.	Hadoop is an open source python web framework

Answer

D.	Hadoop is an open source javascript framework

Question 20

In Amazon EC2 Container Service, are other container types supported?

Accepted Answer

C.	No, Docker is the only container platform supported by EC2 Container Service presently.

Answer

A.	Yes, EC2 Container Service supports any container service you need.

Answer

B.	Yes, EC2 Container Service also supports Microsoft container service.

Answer

D.	Yes, EC2 Container Service supports Microsoft container service and Openstack.

Question 21

A Solutions Architect is designing the architecture for a web application that will be hosted on AWS. Internet users will access the application using HTTP and HTTPS.

How should the Architect design the traffic control requirements?

Accepted Answer

C.	Allow inbound ports for HTTP and HTTPS in the security group used by the web servers.

Answer

A.	Use a network ACL to allow outbound ports for HTTP and HTTPS. Deny other traffic for inbound and outbound.

Answer

B.	Use a network ACL to allow inbound ports for HTTP and HTTPS. Deny other traffic for inbound and outbound.

Answer

D.	Allow outbound ports for HTTP and HTTPS in the security group used by the web servers.

Question 22

A company is launching a new static website on Amazon S3 and Amazon CloudFront. The company wants to ensure that all web requests go through only CloudFront. How can a Solutions Architect meet this requirement?

Accepted Answer

C.	Create a CloudFront origin access identity (OAI), then update the S3 bucket policy to allow the OAI read access.

Answer

A.	Configure the S3 bucket policy to allow only CloudFront IP addresses to read objects.

Answer

B.	Create IAM users in a group that has read access to the S3 bucket. Configure CloudFront to pass credentials to the S3 bucket.

Answer

D.	Convert the S3 bucket to an EC2 instance, then give CloudFront access to the instance by using security groups.

Question 23

An online retailer has a series of flash sales occurring every Friday. Sales traffic will increase during the sales only and the platform will handle the increased load. The platform is a three-tier application. The web tier runs on Amazon EC2 instances behind an Application Load Balancer. Amazon CloudFront is used to reduce web server load, but many requests for dynamic content must go to the web servers.

What should be done to the web tier to reduce costs without impacting performance or reliability?

What should be done to the web tier to reduce costs without impacting performance or reliability?

Accepted Answer

B.	Purchase scheduled Reserved Instances.

Answer

A.	Use T-series instances.

Answer

C.	Implement Amazon ElastiCache.

Answer

D.	Use Spot Instances.

Question 24

A company's new web application running on Amazon EC2 across multiple Availability Zones (AZs) will be heavily accessed during regular business hours. After business hours, usage will be minimal. What fleet-scaling approach should be used to size the EC2 fleet to handle the traffic demands?

Accepted Answer

C.	Scheduled scaling.

Answer

A.	Manual scaling across all AZs.

Answer

B.	Provisioning for peak traffic.

Answer

D.	Programmatic termination of all instances in one AZ during off-peak hours.

Question 25

An application provides a feature that allows users to securely download private and personal files. The web server is currently overwhelmed with serving files for download. A Solutions Architect must find a more effective solution to reduce web server load and costs, and must allow users to download only their own files.

Which solution meets all requirements?

Which solution meets all requirements?

Accepted Answer

A.	Store the files securely on Amazon S3 and have the application generate an Amazon S3 pre- signed URL for the user to download.

Answer

B.	Store the files in an encrypted Amazon EBS volume, and use a separate set of servers to serve the downloads.

Answer

C.	Have the application encrypt the files and store them in the local Amazon EC2 Instance Store prior to serving them up for download.

Answer

D.	Create an Amazon CloudFront distribution to distribute and cache the files.

Question 26

An application calls a service run by a vendor. The vendor charges based on the number of calls. The finance department needs to know the number of calls that are made to the service to validate the billing statements.

How can a Solutions Architect design a system to durably store the number of calls without requiring changes to the application?

How can a Solutions Architect design a system to durably store the number of calls without requiring changes to the application?

Accepted Answer

C.	Publish a custom Amazon CloudWatch metric that counts calls to the service.

Answer

A.	Call the service through an internet gateway.

Answer

B.	Decouple the application from the service with an Amazon SQS queue.

Answer

D.	Call the service through a VPC peering connection.

Question 27

An application runs in a VPC on Amazon EC2 instances behind an Application Load Balancer. Traffic to the Amazon EC2 instances must be limited to traffic from the Application Load Balancer.

Based on these requirements, the security group configuration should only allow traffic from:

Accepted Answer

D.	the VPC CIDR

Answer

A.	the public IPs of the Application Load Balancer nodes.

Answer

B.	the IP range of the Application Load Balancer subnets.

Answer

C.	the security group attached to the Application Load Balancer.

Question 28

A Solutions Architect is reviewing an application that writes data to an Amazon DynamoDB table on a daily basis. Random table reads occur many times per second. The company needs to allow thousands of low-latency reads and avoid any negative impact to the rest of the application.

What should the Solutions Architect do to meet the company's goals?

What should the Solutions Architect do to meet the company's goals?

Accepted Answer

B.	Increase DynamoDB write capacity units.

Answer

A.	Use DynamoDB Accelerator to cache reads.

Answer

C.	Add Amazon SQS to decouple requests.

Answer

D.	Implement Amazon Kinesis to decouple requests.

Question 29

An environment has an Auto Scaling group across two Availability Zones referred to as AZ-a and AZ-b and a default termination policy. AZ-a has four Amazon EC2 instances, and AZ-b has three EC2 instances. None of the instances is protected from a scale-in.

How will Auto Scaling proceed if there is a scale-in event?

How will Auto Scaling proceed if there is a scale-in event?

Accepted Answer

C.	Auto Scaling selects the Availability Zone with four EC2 instances and then continues to evaluate.

Answer

A.	Auto Scaling selects an instance to terminate randomly.

Answer

B.	Auto Scaling terminates the instance with the oldest launch configuration of all instances.

Answer

D.	Auto Scaling terminates the instance with the closest next billing hour of all instances.

Question 30

A Solutions Architect is designing a new web application on Amazon EC2. The system must make application-specific metrics, such as application security events, available to the SysOps teams.

How should the Solutions Architect enable this in the design?

Accepted Answer

C.	Install the Amazon CloudWatch Logs agent on the application instances. Design the application to store events in application log files.

Answer

A.	Install AWS SDK on the application instances. Design the application to use the AWS SDK to log events directly to an Amazon S3 bucket.

Answer

B.	Install the Amazon Inspector agent on the application instances. Design the application to store events in application log files.

Answer

D.	Install AWS SDK on the application instances. Design the application to use AWS SDK to log sensitive events directly to AWS CloudTrail.

Question 31

A Solutions Architect needs to convert potential single points of failure to a highly-available configuration. The current architecture contains Amazon EC2 instances with databases running in one Availability Zone. Web-tier resources have not been given public addresses, but still require Internet access.

Which solution should the Architect use to maintain high availability?

Which solution should the Architect use to maintain high availability?

Accepted Answer

B.	Use ELB Classic Load Balancer with the web tier. Deploy EC2 instances in two Availability Zones and enable Multi-AZ RDS. Deploy NAT gateways in both Availability Zones.

Answer

A.	Use ELB Classic Load Balancer with the web tier. Deploy EC2 instances in two Availability Zones and enable Multi-AZ RDS. Deploy a NAT gateway in one Availability Zone.

Answer

C.	Use ELB Classic Load Balancer with the database tier. Deploy Amazon EC2 instances in two Availability Zones and enable Multi-AZ RDS. Deploy NAT gateways in both Availability Zones.

Answer

D.	Use ELB Classic Load Balancer with the database tier. Deploy Amazon EC2 instances in two Availability Zones and enable Multi-AZ RDS. Deploy a NAT gateway in one Availability Zone.

Question 32

An organization hosts 10 microservices, each in an Auto Scaling group behind individual Classic Load Balancers. Each EC2 instance is running at optimal load.

Which of the following actions would allow the organization to reduce costs without impacting performance?

Accepted Answer

B.	Change instance types in the Auto Scaling group launch configuration.

Answer

A.	Reduce the number of EC2 instances behind each Classic Load Balancer.

Answer

C.	Change the maximum size but leave the desired capacity of the Auto Scaling groups.

Answer

D.	Replace the Classic Load Balancers with a single Application Load Balancer.

Question 33

A Solutions Architect is designing a ride-sharing application. The application needs consistent and single- digit millisecond latency. In addition, the application must integrate with a highly scalable and fully managed database service to track GPS coordinates and user data for all rides.

Which database service should the Solutions Architect use to meet these performance requirements?

Which database service should the Solutions Architect use to meet these performance requirements?

Accepted Answer

C.	Amazon DynamoDB

Answer

A.	Amazon RDS

Answer

B.	Amazon Redshift

Answer

D.	Amazon Aurora

Question 34

An application has components running in a public subnet and a private subnet. The components within the private subnet must connect to the internet to receive updates.

How should this be accomplished without moving the components into a public subnet?

Accepted Answer

A.	Add an internet gateway to the private subnet and update the private subnet route table.

Answer

B.	Add a NAT gateway to the public subnet and update the public subnet route table.

Answer

C.	Add an internet gateway to the VPC and update the private subnet route table.

Answer

D.	Add a NAT gateway to the public subnet and update the private subnet route table.

Question 35

A Solutions Architect is designing a multicontainer-based web application. Parts of the web application, / orders and /sale-event, must scale independently while maintaining a single Fully Qualified Domain Name.

Which AWS services will help the Architect build this platform? (Select TWO.)

Which AWS services will help the Architect build this platform? (Select TWO.)

Accepted Answer

A.	Amazon ELB Application Load Balancer

Answer

B.	Amazon ELB Classic Load Balancer

Answer

C.	Amazon EC2 Container Service

Answer

D.	Amazon DynamoDB

Answer

E.	Amazon SQS

Question 36

A company will host a static website within an Amazon S3 bucket. The website will serve millions of users globally, and the company wants to minimize data transfer costs.

What should the Solutions Architect do to ensure costs are kept to a minimum?

Accepted Answer

C.	Create an Amazon CloudFront distribution, with the S3 bucket as the origin server.

Answer

A.	Implement an AWS Auto Scaling group for the website to ensure it grows with use.

Answer

B.	Use cross-region replication to copy the website to an additional S3 bucket in a different region.

Answer

D.	Move the website to large compute-optimized Amazon EC2 instances.

Question 37

A company has a web application that makes requests to a backend API service. The API service is behind an Elastic Load Balancer running on Amazon EC2 instances.

Most backend API service endpoint calls finish very quickly, but one endpoint that makes calls to create objects in an external service takes a long time to complete. These long-running calls are causing client timeouts and increasing overall system latency.

What should be done to minimize the system throughput impact of the slow-running endpoint?

Accepted Answer

D.	Use Amazon ElastiCache for Redis to cache responses from the external service.

Answer

A.	Change the EC2 instance size to increase memory and compute capacity.

Answer

B.	Use Amazon SQS to offload the long-running requests for asynchronous processing by seprate workers.

Answer

C.	Increase the load balancer idle timeount to allow the long-running requests to complete.

Question 38

A company will run different data analytics jobs on large petabyte-scale datasets, using standard SQL and existing business intelligence tools. The data is mostly structured, but part of the data is unstructured and resides in Amazon S3.

What technology should be used to support this use case?

What technology should be used to support this use case?

Accepted Answer

B.	Amazon Redshift with Amazon Redshift Spectrum.

Answer

A.	An Amazon Aurora database cluster with 15 replicas distributed across Availability Zones.

Answer

C.	Amazon DynamoDB with Amazon DynamoDB Accelerator (DAX).

Answer

D.	Amazon ElastiCache for Redis with cluster mode enabled.

Question 39

A Solutions Architect is investigating purchasing options for a batch processing application on Amazon EC2. The batch job downloads an image from an Amazon S3 bucket, adds copyright information, and uploads it back to Amazon S3. It normally takes 5 to 10 hours to process all the files uploaded each week. The application has built-in capabilities to process files in parallel, recover from the instance failures, and continue the processing from where it left off.

What is the MOST cost-effective purchasing option the Solutions Architect can recommed?

What is the MOST cost-effective purchasing option the Solutions Architect can recommed?

Accepted Answer

B.	Scheduled Reserved Instances

Answer

A.	Standard Reserved Instances.

Answer

C.	Spot Instances

Answer

D.	On-Demand Instances

Question 40

A team has developed a new web application in an AWS Region that has three Availability Zones: AZ-a, AZ-b, and AZ-c. This application must be fault tolerant and needs at least six Amazon EC2 instances running at all times. The application must tolerate the loss of connectivity to any single Availability Zone so that the application can continue to run.

Which configurations will meet these requirements? (Select TWO.)

Which configurations will meet these requirements? (Select TWO.)

Accepted Answer

B.	AZ-a with four EC2 instances, AZ-b with two EC2 instances, and AZ-c with two EC2 instances.

Answer

A.	AZ-a with six EC2 instances, AZ-b with six EC2 instances, and AZ-c with no EC2 instances.

Answer

C.	AZ-a with two EC2 instances, AZ-b with two EC2 instances, and AZ-c with two EC2 instances.

Answer

D.	AZ-a with three EC2 instances, AZ-b with three EC2 instances, and AZ-c with no EC2 instances.

Answer

E.	AZ-a with three EC2 instances, AZ-b with three EC2 instances, and AZ-c with three EC2 instances.

Question 41

A retail company runs hourly flash sales and has a performance issue on its Amazon RDS for PostgreSQL database. The Database Administrators have identified that the issue with performance happens when finance and marketing employees refresh sales dashboards that are used for reporting real-time sales data.

What should be done to resolve the issue without impacting performance?

What should be done to resolve the issue without impacting performance?

Accepted Answer

A.	Create a Read Replica of the RDS PostgreSQL database and point the dashboards at the Read Replica.

Answer

B.	Move data from the RDS PostgreSQL database to Amazon Redshift nightly and point the dashboards at Amazon Redshift.

Answer

C.	Monitor the database with Amazon CloudWatch and increase the instance size, as necessary. Make no changes to the dashboards.

Answer

D.	Take an hourly snapshot of the RDS PostgreSQL database, and load the hourly snapshots to another database to which the dashboards are pointed.

Question 42

A Solutions Architect is designing a high-performance computing job that runs on Amazon EC2 instances in private subnets. To allow the application to download patches, the infrastructure must be altered to allow the instances to access external endpoints. Any changes to the infrastructure must involve minimal ongoing systems management effort.

What will allow the EC2 instances to access the endpoint while meeting these requirements?

What will allow the EC2 instances to access the endpoint while meeting these requirements?

Accepted Answer

A.	NAT gateway

Answer

B.	Elastic IP address

Answer

C.	AWS Direct Connect

Answer

D.	Virtual private gateway

Question 43

An application runs on Amazon EC2 instances in multiple Availability Zones (AZs) behind an Application Load Balancer. The load balancer is in public subnets; the EC2 instances are in private subnets and must not be accessible from the internet. The EC2 instances must call external services on the internet. If one AZ becomes unavailable, the remaining EC2 instances must still be able to call the external services.

How should these requirements be met?

How should these requirements be met?

Accepted Answer

D.	Create a NAT gateway in each AZ. Update the route tables for each private subnet to direct internet- bound traffic to the NAT gateway.

Answer

A.	Create a NAT gateway attached to the VPC. Add a route to the gateway to each private subnet route table.

Answer

B.	Configure an internet gateway. Add a route to the gateway to each private subnet route table.

Answer

C.	Create a NAT instance in the private subnet of each AZ. Update the route tables for each private subnet to direct internet-bound traffic to the NAT instance.

Aws Solutions Architect - Associate (07)

Questions in this quiz (43)

Information

Feedback

What do you think of the new look?