AWS Certified Solutions Architect Associate Practice Questions Latest 2023
Amazon Glacier is designed for: (Choose 2 answers)
A. active database
... [Show More] storage.
B. infrequently accessed data.
C. data archives.
D. frequently accessed data.
E. cached session data. Correct Answer: B. infrequently accessed data.
C. data archives.
Your web application front end consists of multiple EC2 instances behind an Elastic Load Balancer. You
configured ELB to perform health checks on these EC2 instances. If an instance fails to pass health
checks, which statement will be true?
A. The instance is replaced automatically by the ELB.
B. The instance gets terminated automatically by the ELB.
C. The ELB stops sending traffic to the instance that failed its health check.
D. The instance gets quarantined by the ELB for root cause analysis. Correct Answer: C. The ELB stops sending traffic to the instance that failed its health check.
You are building a system to distribute confidential training videos to employees. Using CloudFront, what
method could be used to serve content that is stored in S3, but not publicly accessible from S3 directly?
A. Create an Origin Access Identity (OAI) for CloudFront and grant access to the objects in your S3 bucket to that OAI.
B. Add the CloudFront account security group "amazon-cf/amazon-cf-sg" to the appropriate S3 bucket
policy.
C. Create an Identity and Access Management (IAM) User for CloudFront and grant access to the
objects in your S3 bucket to that IAM User.
D. Create a S3 bucket policy that lists the CloudFront distribution ID as the Principal and the target
bucket as the Amazon Resource Name (ARN). Correct Answer: A. Create an Origin Access Identity (OAI) for CloudFront and grant access to the objects in your S3 bucket to that OAI.
Which of the following will occur when an EC2 instance in a VPC with an
associated Elastic IP is stopped and started? (Choose 2 answers)
A. The Elastic IP will be dissociated from the instance
B. All data on instance-store devices will be lost
C. All data on EBS (Elastic Block Store) devices will be lost
D. The ENI (Elastic Network Interface) is detached
E. The underlying host for the instance is changed Correct Answer: B. All data on instance-store devices will be lost
E. The underlying host for the instance is changed
In the basic monitoring package for EC2, Amazon CloudWatch provides the following metrics:
A. web server visible metrics such as number failed transaction requests
B. operating system visible metrics such as memory utilization
C. database visible metrics such as number of connections
D. hypervisor visible metrics such as CPU utilization Correct Answer: D. hypervisor visible metrics such as CPU utilization, disk I/O, network I/O
Which is an operational process performed by AWS for data security?
A. AES-256 encryption of data stored on any shared storage device
B. Decommissioning of storage devices using industry-standard practices
C. Background virus scans of EBS volumes and EBS snapshots
D. Replication of data across multiple AWS Regions
E. Secure wiping of EBS data when an EBS volume is unmounted Correct Answer: B. Decommissioning of storage devices using industry-standard practices
You have been tasked with creating a VPC network topology for your company. The VPC network must support both Internet-facing applications and internally-facing applications accessed only over VPN. Both Internet-facing and internally-facing applications must be able to leverage at least three AZs for high availability. At a minimum, how many subnets must you create within your VPC to accommodate these requirements?
A. 2
B. 3
C. 4
D. 6 Correct Answer: D. 6
You receive a Spot Instance at a bid of $0.05/hr. After 30 minutes, the Spot Price increases to $0.06/hr and your Spot Instance is terminated by AWS. What was the total EC2 compute cost of running your Spot Instance?
A. $0.00
B. $0.02
C. $0.03
D. $0.05
E. $0.06 Correct Answer: A. $0.00
You are developing a highly available web application using stateless web servers. Which services are suitable for storing session state data?
Choose 3 answers
A. Amazon CloudWatch
B. Amazon Relational Database Service (RDS)
C. Elastic Load Balancing
D. Amazon ElastiCache
E. AWS Storage Gateway
F. Amazon DynamoDB Correct Answer: B. Amazon Relational Database Service (RDS)
D. Amazon ElastiCache
F. Amazon DynamoDB
You have a business-critical two-tier web app currently deployed in two AZs in a single region, using Elastic Load Balancing and Auto Scaling. The app depends on synchronous replication (very low latency connectivity) at the database layer. The application needs to remain fully available even if one application AZ goes off-line, and Auto Scaling cannot launch new instances in the remaining Availability Zones. How can the current architecture be enhanced to ensure this?
A. Deploy in two regions using Weighted Round Robin (WRR), with Auto Scaling minimums set for 50 percent peak load per Region.
B. Deploy in two regions using Weighted Round Robin (WRR), with Auto Scaling minimums set for 100 percent peak load per region.
C. Deploy in three Availability Zones, with Auto Scaling minimum set to handle 50 percent peak load per zone.
D. Deploy in three Availability Zones, with Auto Scaling minimum set to handle 33 percent peak load per zone. Correct Answer: C. Deploy in three Availability Zones, with Auto Scaling minimum set to handle 50 percent peak load per zone.
You are deploying an application on EC2 that must call AWS APIs. What method of securely passing credentials to the application should you use?
A. Use AWS Identity and Access Management roles for EC2 instances.
B. Pass API credentials to the instance using instance userdata.
C. Embed the API credentials into your JAR files.
D. Store API credentials as an object in Amazon Simple Storage Service. Correct Answer: A. Use AWS Identity and Access Management roles for EC2 instances.
Which route must be added to your routing table in order to allow connections to the Internet from your subnet?
A. Destination: 0.0.0.0/0 --> Target: your Internet gateway
B. Destination: 192.168.1.257/0 --> Target: your Internet gateway
C. Destination: 0.0.0.0/33 --> Target: your virtual private gateway
D. Destination: 0.0.0.0/0 --> Target: 0.0.0.0/24
E. Destination: 10.0.0.0/32 --> Target: your virtual private gateway Correct Answer: A. Destination: 0.0.0.0/0 --> Target: your Internet gateway
A customer's nightly EMR job processes a single 2-TB data file stored on Amazon Simple Storage Service (S3). The EMR job runs on two On-Demand core nodes and three On-Demand task nodes. Which of the following may help reduce the EMR job completion time?
Choose 2 answers
A. Use three Spot Instances rather than three On-Demand instances for the task nodes.
B. Change the input split size in the MapReduce job configuration.
C. Use a bootstrap action to present the S3 bucket as a local filesystem.
D. Launch the core nodes and task nodes within an Amazon Virtual Cloud.
E. Adjust the number of simultaneous mapper tasks.
F. Enable termination protection for the job flow. Correct Answer: B. Change the input split size in the MapReduce job configuration.
E. Adjust the number of simultaneous mapper tasks.
You have an VPC with a public subnet. Three EC2 instances currently running inside the subnet can successfully communicate with other hosts on the internet. You launch a fourth instance in the same subnet, using the same AMI and security group configuration you used for the others, but find that this instance cannot be accessed from the Internet. What should you do to enable Internet access?
A. Deploy a NAT instance into the public subnet.
B. Modify the routing table for the public subnet.
C. Assign an elastic IP address to the fourth instance.
D. Configure a publicly routable IP address in the host OS of the fourth instance. Correct Answer: C. Assign an elastic IP address to the fourth instance.
Which of the following requires a custom CloudWatch metric to monitor?
A. Memory use
B. CPU use
C. Disk read operations
D. Network in
E. Estimated charges Correct Answer: A. Memory use
Which of the following is a durable key-value store?
A. Amazon Simple Storage Service
B. Amazon Simple Workflow Service
C. Amazon Simple Queue Service
D. Amazon Simple Notification Service Correct Answer: A. Amazon Simple Storage Service
After creating a new AWS account, you use the API to request 40 on-demand EC2 instances in a single AZ. After 20 successful requests, subsequent requests failed. What could be a reason for this issue, and how would you resolve it?
A. You encountered a soft limit of 20 instances per region. Submit the limit increase form and retry the failed requests once approved.
B. AWS allows you to provision no more than 20 instances per Availability Zone. Select a different Availability Zone and retry the failed request.
C. You need to use Amazon Virtual Private Cloud (VPC) in order to provision more than 20 instances in a single Availability Zone. Simply terminate the resources already provisioned and re-launch them all in a VPC.
D. You encountered an API throttling situation and should try the failed requests using an exponential decay retry algorithm. Correct Answer: A. You encountered a soft limit of 20 instances per region. Submit the limit increase form and retry the failed requests once approved.
Amazon Glacier is designed for:
Choose 2 answers
A. Frequently accessed data
B. Active database storage
C. Data archives
D. Infrequently accessed data
E. Cached session data Correct Answer: C. Data archives
D. Infrequently accessed data
You have an application running in us-west-2 that requires six EC2 instances running at all times. With three AZs available in that region (us-west-2a, us-west-2b, and us-west-2c), which of the following deployments provides 100 percent fault tolerance if any single AZ in us-west-2 becomes unavailable?
Choose 2 answers
A. Us-west-2a with two EC2 instances, us-west-2b with two EC2 instances, and us-west-2c with two EC2 instances
B. Us-west-2a with three EC2 instances, us-west-2b with three EC2 instances, and us-west-2c with no EC2 instances
C. Us-west-2a with four EC2 instances, us-west-2b with two EC2 instances, and us-west-2c with two EC2 instances
D. Us-west-2a with six EC2 instances, us-west-2b with six EC2 instances, and us-west-2c with no EC2 instances
E. Us-west-2a with three EC2 instances, us-west-2b with three EC2 instances, and us-west-2c with three EC2 instances Correct Answer: D. Us-west-2a with six EC2 instances, us-west-2b with six EC2 instances, and us-west-2c with no EC2 instances
E. Us-west-2a with three EC2 instances, us-west-2b with three EC2 instances, and us-west-2c with three EC2 instances
What action is required to establish a VPC VPN connection between an on-premises data center and an Amazon VPC virtual private gateway?
A. Modify the main route table to allow traffic to a network address translation instance.
B. Use a dedicated network address translation instance in the public subnet.
C. Assign a static Internet-routable IP address to an Amazon VPC customer gateway.
D. Establish a dedicated networking connection using AWS Direct Connect. Correct Answer: D. Establish a dedicated networking connection using AWS Direct Connect.
How can software determine the public and private IP addresses of the EC2 instance that it is running on?
A. Query the local instance metadata.
B. Query the local instance userdata.
C. Query the appropriate Amazon CloudWatch metric.
D. Use an ipconfig or ifconfig command. Correct Answer: A. Query the local instance metadata.
A startup company hired you to help them build a mobile application, that will ultimately store billions of images and videos in S3. The company is lean on funding, and wants to minimize operational costs, however, they have an aggressive marketing plan, and expect to double their current installation base every six months. Due to the nature of their business, they are expecting sudden and large increases in traffic to and from S3, and need to ensure that it can handle the performance needs of their application. What other information must you gather from this customer in order to determine whether S3 is the right option?
A. You must know how many customers the company has today, because this is critical in understanding what their customer base will be in two years.
B. You must find out the total number of requests per second at peak usage.
C. You must know the size of the individual objects being written to S3, in order to properly design the key namespace.
D. In order to build the key namespace correctly, you must understand the total amount of storage needs for each S3 bucket. Correct Answer: B. You must find out the total number of requests per second at peak usage.
You have an EC2 security group with several running EC2 instances. You change the security group rules to allow inbound traffic on a new port and protocol, and launch several new instances in the same security group. The new rules apply:
A. Immediately to all instances in the security group.
B. Immediately to the new instances only.
C. Immediately to the new instances, but old instances must be stopped and restarted before the new rules apply.
D. To all instances, but it may take several minutes for old instances to see the changes. Correct Answer: A. Immediately to all instances in the security group.
A VPC public subnet is one that:
A. Has at least one route in its associated routing table that uses an Internet Gateway (IGW).
B. Includes a route in its associated routing table via a Network Address Translation (NAT) instance.
C. Has a Network Access Control List (NACL) permitting outbound traffic to 0.0.0.0/0.
D. Has the Public Subnet option selected in its configuration. Correct Answer: A. Has at least one route in its associated routing table that uses an Internet Gateway (IGW).
In reviewing the Auto Scaling events for your application you notice that your application is scaling up and down multiple times in the same hour. What design choice could you make to optimize for cost while preserving elasticity?
Choose 2 answers
A. Modify the Auto Scaling policy to use scheduled scaling actions
B. Modify the Auto Scaling group termination policy to terminate the oldest instance first.
C. Modify the Auto Scaling group cool-down timers.
D. Modify the Amazon CloudWatch alarm period that triggers your Auto Scaling scale down policy.
E. Modify the Auto Scaling group termination policy to terminate the newest instance first. Correct Answer: C. Modify the Auto Scaling group cool-down timers.
D. Modify the Amazon CloudWatch alarm period that triggers your Auto Scaling scale down policy.
What combination of the following options will protect S3 objects from both accidental deletion and accidental overwriting?
A. Enable S3 versioning on the bucket.
B. Access S3 data using only signed URLs.
C. Disable S3 delete using an IAM bucket policy.
D. Enable S3 Reduced Redundancy Storage.
E. Enable multi-factor authentication (MFA) protected access. Correct Answer: A. Enable S3 versioning on the bucket.
What does Amazon S3 stand for?
A. Simple Storage Solution.
B. Storage Storage Storage (triple redundancy Storage).
C. Storage Server Solution.
D. Simple Storage Service. Correct Answer: A. Simple Storage Solution.
You must assign each server to at least _____ security group
A. 3
B. 2
C. 4
D. 1 Correct Answer: D. 1
Before I delete an EBS volume, what can I do if I want to recreate the volume later?
A. Create a copy of the EBS volume (not a snapshot)
B. Store a snapshot of the volume
C. Download the content to an EC2 instance
D. Back up the data in to a physical disk Correct Answer: B. Store a snapshot of the volume
Select the most correct answer: The device name /dev/sda1 (within Amazon EC2 ) is _____
A. Possible for EBS volumes
B. Reserved for the root device
C. Recommended for EBS volumes
D. Recommended for instance store volumes Correct Answer: B. Reserved for the root device
If I want an instance to have a public IP address, which IP address should I use?
A. Elastic IP Address
B. Class B IP Address
C. Class A IP Address
D. Dynamic IP Address Correct Answer: A. Elastic IP Address
What does RRS stand for when talking about S3?
A. Redundancy Removal System
B. Relational Rights Storage
C. Regional Rights Standard
D. Reduced Redundancy Storage Correct Answer: D. Reduced Redundancy Storage
All Amazon EC2 instances are assigned two IP addresses at launch. Which one can only be reached from within the Amazon EC2 network?
A. Multiple IP address
B. Public IP address
C. Private IP address
D. Elastic IP Address Correct Answer: C. Private IP address
What does Amazon SWF stand for?
A. Simple Web Flow
B. Simple Work Flow
C. Simple Wireless Forms
D. Simple Web Form Correct Answer: B. Simple Work Flow
What is the Reduced Redundancy option in Amazon S3?
A. Less redundancy for a lower cost.
B. It doesn't exist in Amazon S3, but in Amazon EBS.
C. It allows you to destroy any copy of your files outside a specific jurisdiction.
D. It doesn't exist at all Correct Answer: A. Less redundancy for a lower cost.
Fill in the blanks: Resources that are created in AWS are identified by a unique identifier called an _____.
A. Amazon Resource Number
B. Amazon Resource Name tag
C. Amazon Resource Name
D. Amazon Reesource Namespace Correct Answer: C. Amazon Resource Name
What does the command 'ec2-run-instances ami-e3a5408a -n 20 -g appserver' do?
A. Start twenty instances as members of appserver group.
B. Creates 20 rules in the security group named appserver
C. Terminate twenty instances as members of appserver group.
D. Start 20 security groups Correct Answer: A. Start twenty instances as members of appserver group.
While creating an Amazon RDS DB, your first task is to set up a DB ______ that controls what IP addresses or EC2 instances have access to your DB Instance.
A. Security Pool
B. Secure Zone
C. Security Token Pool
D. Security Group Correct Answer: D. Security Group
When you run a DB Instance as a Multi-AZ deployment, the _____ serves database writes and reads
A. secondary
B. backup
C. stand by
D. primary Correct Answer: D. primary
Every user you create in the IAM system starts with ______.
A. partial permissions
B. full permissions
C. no permissions Correct Answer: C. no permissions
What does Amazon EC2 provide?
A. Virtual servers in the Cloud.
B. A platform to run code (Java, PHP, Python), paying on an hourly basis.
C. Computer Clusters in the Cloud.
D. Physical servers, remotely managed by the customer. Correct Answer: A. Virtual servers in the Cloud.
Amazon SWF is designed to help users do what?
A. Design graphical user interface interactions
B. Manage user identification and authorization
C. Store Web content
D. Coordinate synchronous and asynchronous tasks which are distributed and fault tolerant. Correct Answer: D. Coordinate synchronous and asynchronous tasks which are distributed and fault tolerant.
Can I control if and when MySQL based RDS Instance is upgraded to new supported versions?
A. No
B. Only in VPC
C. Yes Correct Answer: C. Yes
If I modify a DB Instance or the DB parameter group associated with the instance, should I reboot the instance for the changes to take effect?
A. No
B. Yes Correct Answer: B. Yes
When you view the block device mapping for your instance, you can see only the EBS volumes, not the instance store volumes.
A. Depends on the instance type
B. FALSE
C. Depends on whether you use API call
D. TRUE Correct Answer: D. TRUE
By default, EBS volumes that are created and attached to an instance at launch are deleted when that instance is terminated. You can modify this behavior by changing the value of the flag _____ to false when you launch the instance.
A. DeleteOnTermination
B. RemoveOnDeletion
C. RemoveOnTermination
D. TerminateOnDeletion Correct Answer: A. DeleteOnTermination
What are the initial settings of an user created security group?
A. Allow all inbound traffic and Allow no outbound traffic
B. Allow no inbound traffic and Allow no outbound traffic
C. Allow no inbound traffic and Allow all outbound traffic
D. Allow all inbound traffic and Allow all outbound traffic Correct Answer: C. Allow no inbound traffic and Allow all outbound traffic
Will my standby RDS instance be in the same Region as my primary?
A. Only for Oracle RDS types
B. Yes
C. Only if configured at launch
D. No Correct Answer: B. Yes
What does Amazon Elastic Beanstalk provide?
A. A scalable storage appliance on top of Amazon Web Services.
B. An application container on top of Amazon Web Services.
C. A service by this name doesn't exist.
D. A scalable cluster of EC2 instances. Correct Answer: B. An application container on top of Amazon Web Services.
When using IAM to control access to your RDS resources, the key names that can be used are case sensitive. For example, aws:CurrentTime is NOT equivalent to AWS:currenttime.
A. TRUE
B. FALSE Correct Answer: A. TRUE
What will be the status of the snapshot until the snapshot is complete.
A. running
B. working
C. progressing
D. pending Correct Answer: D. pending
Can an EBS volume be attached to more than one EC2 instance at the same time?
A. No
B. Yes.
C. Only EC2-optimized EBS volumes.
D. Only in read mode. Correct Answer: A. No
Automated backups are enabled by default for a new DB Instance.
A. TRUE
B. FALSE Correct Answer: A. TRUE
What does the AWS Storage Gateway provide?
A. Integration of on-premises IT environments with Cloud Storage.
B. A direct encrypted connection to Amazon S3.
C. A backup solution that provides an on-premises Cloud storage.
D. It provides an encrypted SSL endpoint for backups in the Cloud. Correct Answer: A. Integration of on-premises IT environments with Cloud Storage.
Amazon RDS automated backups and DB Snapshots are currently supported for only the ______ storage engine
A. InnoDB
B. MyISAM Correct Answer: A. InnoDB
How many relational database engines does RDS currently support?
A. Six: Amazon Aurora, Oracle, Microsoft SQL Server, PostgreSQL, MySQL and MariaDB
B. Just two: MySQL and Oracle.
C. Five: MySQL, PostgreSQL, MongoDB, Cassandra and SQLite.
D. Just one: MySQL. Correct Answer: A. Six: Amazon Aurora, Oracle, Microsoft SQL Server, PostgreSQL, MySQL and MariaDB
Fill in the blanks: The base URI for all requests for instance metadata is _____
A. http://254.169.169.254/latest/
B. http://169.169.254.254/latest/
C. http://127.0.0.1/latest/
D. http://169.254.169.254/latest/ Correct Answer: D. http://169.254.169.254/latest/
While creating the snapshots using the the command line tools, which command should I be using?
A. ec2-deploy-snapshot
B. ec2-fresh-snapshot
C. ec2-create-snapshot
D. ec2-new-snapshot Correct Answer: C. ec2-create-snapshot
Typically, you want your application to check whether a request generated an error before you spend any time processing results. The easiest way to find out if an error occurred is to look for an ______ node in the response from the Amazon RDS API.
A. Incorrect
B. Error
C. FALSE Correct Answer: B. Error
What are the two permission types used by AWS?
A. Resource-based and Product-based
B. Product-based and Service-based
C. Service-based
D. User-based and Resource-based Correct Answer: D. User-based and Resource-based
In Amazon CloudWatch, which metric should I be checking to ensure that your DB Instance has enough free storage space?
A. FreeStorage
B. FreeStorageSpace
C. FreeStorageVolume
D. FreeDBStorageSpace Correct Answer: B. FreeStorageSpace
Amazon RDS DB snapshots and automated backups are stored in
A. Amazon S3
B. Amazon ECS Volume
C. Amazon RDS
D. Amazon EMR Correct Answer: A. Amazon S3
What is the maximum key length of a tag?
A. 512 Unicode characters
B. 64 Unicode characters
C. 256 Unicode characters
D. 128 Unicode characters Correct Answer: D. 128 Unicode characters
Security Groups can't _____.
A. be nested more than 3 levels
B. be nested at all
C. be nested more than 4 levels
D. be nested more than 2 levels Correct Answer: B. be nested at all
You must increase storage size in increments of at least _____ %
A. 40
B. 20
C. 50
D. 10 Correct Answer: D. 10
Changes to the backup window take effect ______.
A. from the next billing cycle
B. after 30 minutes
C. immediately
D. after 24 hours Correct Answer: C. immediately
Using Amazon CloudWatch's Free Tier, what is the frequency of metric updates which you receive?
A. 5 minutes
B. 500 milliseconds.
C. 30 seconds
D. 1 minute Correct Answer: A. 5 minutes
Which is the default region in AWS?
A. eu-west-1
B. us-east-1
C. us-east-2
D. ap-southeast-1 Correct Answer: B. us-east-1
What are the Amazon EC2 API tools?
A. They don't exist. The Amazon EC2 AMI tools, instead, are used to manage permissions.
B. Command-line tools to the Amazon EC2 web service.
C. They are a set of graphical tools to manage EC2 instances.
D. They don't exist. The Amazon API tools are a client interface to Amazon Web Services. Correct Answer: B. Command-line tools to the Amazon EC2 web service.
What are the two types of licensing options available for using Amazon RDS for Oracle?
A. BYOL and Enterprise License
B. BYOL and License Included
C. Enterprise License and License Included
D. Role based License and License Included Correct Answer: B. BYOL and License Included
What does a "Domain" refer to in Amazon SWF?
A. A security group in which only tasks inside can communicate with each other
B. A special type of worker
C. A collection of related Workflows
D. The DNS record for the Amazon SWF service Correct Answer: C. A collection of related Workflows
EBS Snapshots occur _____
A. Asynchronously
B. Synchronously
C. Weekly Correct Answer: A. Asynchronously
Disabling automated backups disables the point-in-time recovery feature.
A. True
B. False Correct Answer: A. True
Out of the striping options available for the EBS volumes, which one has the following disadvantage : 'Doubles the amount of I/O required from the instance to EBS compared to RAID 0, because you're mirroring all writes to a pair of volumes, limiting how much you can stripe.' ?
A. Raid 5
B. Raid 6
C. Raid 1
D. Raid 2 Correct Answer: C. Raid 1
Is creating a Read Replica of another Read Replica supported?
A. Only in certain regions
B. Only with MSSQL based RDS
C. Only for Oracle RDS types
D. No Correct Answer: D. No
Can Amazon S3 uploads resume on failure or do they need to restart?
A. Restart from beginning
B. You can resume them, if you flag the "resume on failure" option before uploading.
C. Resume on failure
D. Depends on the file size Correct Answer: C. Resume on failure
Which of the following cannot be used in EC2 to control who has access to specific EC2 instances?
A. Security Groups
B. IAM System
C. SSH keys
D. Windows passwords Correct Answer: B. IAM System
Fill in the blanks : _____ let you categorize your EC2 resources in different ways, for example, by purpose, owner, or environment.
A. wildcards
B. pointers
C. tags
D. special filters Correct Answer: C. tags
How can I change the security group membership for interfaces owned by other AWS, such as Elastic Load Balancing?
A. By using the service specific console or API\CLI commands
B. None of these
C. Using Amazon EC2 API/CLI
D. Using all these methods Correct Answer: A. By using the service specific console or API\CLI commands
What is the maximum write throughput I can provision per table for a single DynamoDB table?
A. 5,000 us east, 1,000 all other regions
B. 100,000 us east, 10, 000 all other regions
C. Designed to scale without limits, but if you go beyond 40,000 us east/10,000 all other regions you have to contact AWS first.
D. There is no limit Correct Answer: C. Designed to scale without limits, but if you go beyond 40,000 us east/10,000 all other regions you have to contact AWS first.
What does the ec2-revoke command do with respect to the Amazon EC2 security groups?
A. Removes one or more security groups from a rule.
B. Removes one or more security groups from an Amazon EC2 instance.
C. Removes one or more rules from a security group.
D. Removes a security group from an account. Correct Answer: C. Removes one or more rules from a security group.
Can a 'user' be associated with multiple AWS accounts?
A. No
B. Yes Correct Answer: A. No
True or False: Manually created DB Snapshots are deleted after the DB Instance is deleted.
A. TRUE
B. FALSE Correct Answer: B. FALSE
What is Amazon Glacier?
A. There is no such thing
B. A security tool that allows "freezing" an EBS volume to perform computer forensics on it.
C. A low-cost storage service that provides secure and durable storage for data archiving and backup.
D. A security tool that allows "freezing" an EC2 instance to perform computer forensics on it. Correct Answer: C. A low-cost storage service that provides secure and durable storage for data archiving and backup.
What is the durability of S3 RRS?
A. 99.99%
B. 99.95%
C. 99.995%
D. 99.999999999% Correct Answer: A. 99.99%
What does specifying the mapping /dev/sdc=none do when launching an EC2 instance?
A. Prevents /dev/sdc from creating the instance.
B. Prevents /dev/sdc from deleting the instance.
C. Set the value of /dev/sdc to 'zero'.
D. Prevents /dev/sdc from attaching to the instance. Correct Answer: D. Prevents /dev/sdc from attaching to the instance.
Is Federated Storage Engine currently supported by Amazon RDS for MySQL?
A. Only for Oracle RDS instances
B. No
C. Yes
D. Only in VPC Correct Answer: B. No
What is the maximum groups an IAM user be a member of?
A. 20
B. 5
C. 10
D. 15 Correct Answer: C. 10
True or False: When you perform a restore operation to a point in time or from a DB Snapshot, a new DB Instance is created with a new endpoint.
A. FALSE
B. TRUE Correct Answer: B. TRUE
A/An _____ acts as a firewall that controls the traffic allowed to reach one or more instances.
A. security group
B. ACL
C. IAM
D. Private IP Addresses Correct Answer: A. security group
Will my standby RDS instance be in the same Availability Zone as my primary?
A. Only for Oracle RDS types
B. Yes
C. Only if configured at launch
D. No Correct Answer: D. No
While launching an RDS DB instance, on which page I can select the Availability Zone?
A. Review
B. DB Instance Details
C. Management Options
D. Additional Configuration Correct Answer: D. Additional Configuration
What does the ec2-create-group command do with respect to the Amazon EC2 security groups?
A. Groups the user created security groups in to a new group for easy access.
B. Creates a new security group for use with your account.
C. Creates a new group inside the security group.
D. Creates a new rule inside the security group. Correct Answer: B. Creates a new security group for use with your account.
In the Launch Db Instance Wizard, where can I select the backup and maintenance options?
A. DB Instance Details
B. Review
C. Management Options
D. Engine Selection Correct Answer: C. Management Options
You are charged for the IOPS and storage whether or not you use them in a given month?
A. FALSE
B. TRUE Correct Answer: B. TRUE
IAM provides several policy templates you can use to automatically assign permissions to the groups you create. The _____ policy template gives the Admins group permission to access all account resources, except your AWS account information.
A. Read Only Access
B. Power User Access
C. AWS CloudFormation Read Only Access
D. Administrator Access Correct Answer: D. Administrator Access [Show Less]