AWS-Solution-Architect-Associate Exam - AWS Certified Solutions Architect - Associate

NEW QUESTION 1
AWS CIoudFormation is a service that helps you model and set up your Amazon Web Services resources so that you can spend less time managing those resources and more time focusing on your applications that run in AWS. You create a template that describes all the AWS resources that you want (like Amazon EC2 instances or Amazon RDS DB instances), and AWS CIoudFormation takes care of provisioning and configuring those resources for you. What formatting is required for this template?

• A. JSON-formatted document
• B. CSS-formatted document
• C. XML-formatted document
• D. HTML-formatted document

Answer: A

Explanation: You can write an AWS CIoudFormation template (a JSON-formatted document) in a text editor or pick an existing template. The template describes the resources you want and their settings. For example,
suppose you want to create an Amazon EC2. Your template can declare an instance Amazon EC2 and describe its properties, as shown in the following example:
{
"AWSTemp|ateFormatVersion" : "2010-09-O9",
"Description" : "A simple Amazon EC2 instance", "Resources" : {
"MyEC2Instance" : {
"Type" : "AWS::EC2::Instance", "Properties" : {
"Image|d" : "ami-2f726546", "|nstanceType" : "t1.micro"
}
}
}
}
Reference:
http://docs.aws.amazon.com/AWSCIoudFormation/latest/UserGuide/cfn-whatis-howdoesitwork.html

NEW QUESTION 2
What is the default maximum number of Access Keys per user?

• A. 10
• B. 15
• C. 2
• D. 20

Answer: C

Explanation: The default maximum number of Access Keys per user is 2.
Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/LimitationsOnEntities.htmI

NEW QUESTION 3
Your company previously configured a heavily used, dynamically routed VPN connection between your on-premises data center and AWS. You recently provisioned a DirectConnect connection and would like to start using the new connection. After configuring DirectConnect settings in the AWS Console, which of the following options win provide the most seamless transition for your users?

• A. Delete your existing VPN connection to avoid routing loops configure your DirectConnect router with the appropriate settings and verity network traffic is leveraging DirectConnect.
• B. Configure your DirectConnect router with a higher 8GP priority man your VPN router, verify network traffic is leveraging Directconnect and then delete your existing VPN connection.
• C. Update your VPC route tables to point to the DirectConnect connection configure your DirectConnect router with the appropriate settings verify network traffic is leveraging DirectConnect and then delete the VPN connection.
• D. Configure your DirectConnect router, update your VPC route tables to point to the DirectConnect connection, configure your VPN connection with a higher BGP point
• E. And verify network traffic is leveraging the DirectConnect connection.

Answer: D

NEW QUESTION 4
The one-time payment for Reserved Instances is _ _ refundable if the reservation is cancelled.

• A. always
• B. in some circumstances
• C. never

Answer: C

NEW QUESTION 5
You are setting up some IAM user policies and have also become aware that some services support resource-based permissions, which let you attach policies to the service's resources instead of to IAM users or groups. Which of the below statements is true in regards to resource-level permissions?

• A. All services support resource-level permissions for all actions.
• B. Resource-level permissions are supported by Amazon CIoudFront
• C. All services support resource-level permissions only for some actions.
• D. Some services support resource-level permissions only for some action

Answer: D

Explanation: AWS Identity and Access Management is a web service that enables Amazon Web Services (AWS) customers to manage users and user permissions in AWS. The service is targeted at organizations with multiple users or systems that use AWS products such as Amazon EC2, Amazon RDS, and the AWS Management Console. With IAM, you can centrally manage users, security credentials such as access keys, and permissions that control which AWS resources users can access.
In addition to supporting IAM user policies, some services support resource-based permissions, which let you attach policies to the service's resources instead of to IAM users or groups. Resource-based permissions are supported by Amazon S3, Amazon SNS, and Amazon SQS.
The resource-level permissions service supports IAM policies in which you can specify indMdual resources using Amazon Resource Names (ARNs) in the poIicy's Resource element.
Some services support resource-level permissions only for some actions.
Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/Using_SpecificProducts.html

NEW QUESTION 6
You are using Amazon SES as an email solution but are unsure of what its limitations are. Which statement below is correct in regards to that?

• A. New Amazon SES users who have received production access can send up to 1,000 emails per 24-hour period, at a maximum rate of 10 emails per second.
• B. Every Amazon SES sender has a the same set of sending limits
• C. Sending limits are based on messages rather than on recipients
• D. Every Amazon SES sender has a unique set of sending limits

Answer: D

Explanation: Amazon Simple Email Service (Amazon SES) is a highly scalable and cost-effective email-sending
service for businesses and developers. Amazon SES eliminates the complexity and expense of building an in-house email solution or licensing, installing, and operating a third-party email service for this type of email communication.
Every Amazon SES sender has a unique set of sending limits, which are calculated by Amazon SES on an ongoing basis:
Sending quota — the maximum number of emails you can send in a 24-hour period. Maximum send rate — the maximum number of emails you can send per second.
New Amazon SES users who have received production access can send up to 10,000 emails per 24-hour period, at a maximum rate of 5 emails per second. Amazon SES automatically adjusts these limits upward, as long as you send high-quality email. If your existing quota is not adequate for your needs and the system has not automatically increased your quota, you can submit an SES Sending Quota Increase case at any time.
Sending limits are based on recipients ratherthan on messages. You can check your sending limits at any time by using the Amazon SES console.
Note that if your email is detected to be of poor or QUESTION able quality (e.g., high complaint rates, high bounce rates, spam, or abusive content), Amazon SES might temporarily or permanently reduce your permitted send volume, or take other action as AWS deems appropriate.
Reference: https://aws.amazon.com/ses/faqs/

NEW QUESTION 7
You need to set up a complex network infrastructure for your organization that will be reasonably easy to deploy, replicate, control, and track changes on. Which AWS service would be best to use to help you accomplish this?

• A. AWS Import/Export
• B. AWS CIoudFormation
• C. Amazon Route 53
• D. Amazon CIoudWatch

Answer: B

Explanation: AWS CIoudFormation is a service that helps you model and set up your Amazon Web Services resources so that you can spend less time managing those resources and more time focusing on your applications that run in AWS. You create a template that describes all the AWS resources that you want (like Amazon EC2 instances or Amazon RDS DB instances), and AWS CIoudFormation takes care of provisioning and configuring those resources for you. You don't need to indMdually create and configure AWS resources
and figure out what's dependent on what. AWS CIoudFormation handles all of that.
Reference: http://docs.aws.amazon.com/AWSCIoudFormation/latest/UserGuide/WeIcome.htmI

NEW QUESTION 8
You decide that you need to create a number of Auto Scaling groups to try and save some money as you have noticed that at certain times most of your EC2 instances are not being used. By default, what is the maximum number of Auto Scaling groups that AWS will allow you to create?

• A. 12
• B. Unlimited
• C. 20
• D. 2

Answer: C

Explanation: Auto Scaling is an AWS service that allows you to increase or decrease the number of EC2 instances within your appIication's architecture. With Auto Scaling, you create collections of EC2 instances, called Auto Scaling groups. You can create these groups from scratch, or from existing EC2 instances that are already in production.
Reference: http://docs.aws.amazon.com/general/latest/gr/aws_service_|imits.htm|#Iimits_autoscaIing

NEW QUESTION 9
What is the Reduced Redundancy option in Amazon 53?

• A. Less redundancy for a lower cost.
• B. It doesn't exist in Amazon 53, but in Amazon EBS.
• C. It allows you to destroy any copy of your files outside a specific jurisdiction.
• D. It doesn't exist at all

Answer: A

NEW QUESTION 10
You are trying to launch an EC2 instance, however the instance seems to go into a terminated status immediately. What would probably not be a reason that this is happening?

• A. The AMI is missing a required part.
• B. The snapshot is corrupt.
• C. You need to create storage in EBS first.
• D. You've reached your volume limi

Answer: C

Explanation: Amazon EC2 provides a virtual computing environments, known as an instance.
After you launch an instance, AWS recommends that you check its status to confirm that it goes from the pending status to the running status, the not terminated status.
The following are a few reasons why an Amazon EBS-backed instance might immediately terminate: You've reached your volume limit.
The AM is missing a required part. The snapshot is corrupt. Reference:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_|nstanceStraightToTerminated.html

NEW QUESTION 11
Amazon EBS provides the ability to create backups of any Amazon EC2 volume into what is known as

• A. snapshots
• B. images
• C. instance backups
• D. mirrors

Answer: A

Explanation: Amazon allows you to make backups of the data stored in your EBS volumes through snapshots that can later be used to create a new EBS volume.
Reference: http://docs.amazonwebservices.com/AWSEC2/latest/UserGuide/Storage.htmI

NEW QUESTION 12
If I have multiple Read Replicas for my master DB Instance and I promote one of them, what happens to the rest of the Read Replicas?

• A. The remaining Read Replicas will still replicate from the older master DB Instance
• B. The remaining Read Replicas will be deleted
• C. The remaining Read Replicas will be combined to one read replica

Answer: A

NEW QUESTION 13
You have been given a scope to set up an AWS Media Sharing Framework for a new start up photo
sharing company similar to flickr. The first thing that comes to mind about this is that it will obviously need a huge amount of persistent data storage for this framework. Which of the following storage options would be appropriate for persistent storage?

• A. Amazon Glacier or Amazon S3
• B. Amazon Glacier or AWS Import/Export
• C. AWS Import/Export or Amazon C|oudFront
• D. Amazon EBS volumes or Amazon S3

Answer: D

Explanation: Persistent storage-If you need persistent virtual disk storage similar to a physical disk drive for files or other data that must persist longer than the lifetime of a single Amazon EC2 instance, Amazon EBS volumes or Amazon S3 are more appropriate.
Reference: http://media.amazonwebservices.com/AWS_Storage_Options.pdf

NEW QUESTION 14
Which DNS name can only be resolved within Amazon EC2?

• A. Internal DNS name
• B. External DNS name
• C. Global DNS name
• D. Private DNS name

Answer: A

NEW QUESTION 15
In Amazon EC2, how many Elastic IP addresses can you have by default?

• A. 10
• B. 2
• C. 5
• D. 20

Answer: C

Explanation: The number of Elastic IP addresses you can have in EC2 is 5.
Reference: http://docs.aws.amazon.com/generaI/latest/gr/aws_service_Iimits.htmI#|imits_ec2

NEW QUESTION 16
True or False: Automated backups are enabled by default for a new DB Instance.

• A. TRUE
• B. FALSE

Answer: A

NEW QUESTION 17
What happens to data on an ephemeral volume of an EBS-backed EC2 instance if it is terminated or if it fails?

• A. Data is automatically copied to another volume.
• B. The volume snapshot is saved in S3.
• C. Data persists.
• D. Data is delete

Answer: D

Explanation: Any data on the instance store volumes persists as long as the instance is running, but this data is deleted when the instance is terminated or if it fails (such as if an underlying drive has issues). After an instance store-backed instance fails or terminates, it cannot be restored.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/RootDeviceStorage.htmI

NEW QUESTION 18
If I want an instance to have a public IP address, which IP address should I use'?

• A. Elastic I P Address
• B. Class B IP Address
• C. Class A IP Address
• D. Dynamic IP Address

Answer: A

NEW QUESTION 19
Making your snapshot public shares all snapshot data with everyone. Can the snapshots with AWS Market place product codes be made public?

• A. No
• B. Yes

Answer: B