AWS-Solution-Architect-Associate | Amazon AWS-Solution-Architect-Associate Training Tools 2021

NEW QUESTION 1
A user has configured a website and launched it using the Apache web server on port 80. The user is using ELB with the EC2 instances for Load Balancing. What should the user do to ensure that the EC2 instances accept requests only from ELB?

• A. Configure the security group of EC2, which allows access to the ELB source security group


• B. Configure the EC2 instance so that it only listens on the ELB port


• C. Open the port for an ELB static IP in the EC2 security group


• D. Configure the security group of EC2, which allows access only to the ELB listener

Answer: A

Explanation:
When a user is configuring ELB and registering the EC2 instances with it, ELB will create a source security group. If the user wants to allow traffic only from ELB, he should remove all the rules set for the other requests and open the port only for the ELB source security group.
Reference:
http://docs.aws.amazon.com/EIasticLoadBaIancing/latest/DeveIoperGuide/using-elb-security-groups.htmI

NEW QUESTION 2
Which of the following AWS CLI commands is syntactically incorrect?
1. $ aws ec2 describe-instances
2. $ aws ec2 start-instances --instance-ids i-1348636c
3. $ aws sns publish --topic-arn arn:aws:sns:us-east-1:546419318123:OperationsError -message "Script Failure"
4. $ aws sqs receive-message --queue-urI https://queue.amazonaws.com/546419318123/Test

• A. 3


• B. 4


• C. 2


• D. 1

Answer: A

Explanation:
The following CLI command is missing a hyphen before "-message".
aws sns publish --topic-arn arn:aws:sns:us-east-1:546419318123:OperationsError -message "Script Failure"
It has been added below in red
aws sns publish --topic-arn arn:aws:sns:us-east-1:546419318123:OperationsError ---message "Script Failure"
Reference: http://aws.amazon.com/c|i/

NEW QUESTION 3
You require the ability to analyze a large amount of data, which is stored on Amazon 53 using Amazon Elastic Map Reduce. You are using the cc2 8x large Instance type, whose CPUs are mostly idle during processing. Which of the below would be the most cost efficient way to reduce the runtime of the job?

• A. Create more smaller flies on Amazon 53.


• B. Add additional cc2 8x large instances by introducing a task group.


• C. Use smaller instances that have higher aggregate 1/0 performance.


• D. Create fewer, larger fi les on Amazon 53.

Answer: C

NEW QUESTION 4
An organization has a statutory requirement to protect the data at rest for data stored in EBS volumes. Which of the below mentioned options can the organization use to achieve data protection?

• A. Data replication.


• B. Data encryption.


• C. Data snapshot.


• D. All the options listed her

Answer: D

Explanation:
For protecting the Amazon EBS data at REST, the user can use options, such as Data Encryption (Windows / Linux / third party based), Data Replication (AWS internally replicates data for redundancy),
and Data Snapshot (for point in time backup).
Reference: http://media.amazonwebservices.com/AWS_Security_Best_Practices.pdf

NEW QUESTION 5
A 3-tier e-commerce web application is current deployed on-premises and will be migrated to AWS for
greater scalability and elasticity The web server currently shares read-only data using a network distributed file system The app server tier uses a clustering mechanism for discovery and shared session state that depends on I P multicast The database tier uses shared-storage clustering to provide database fail over capability, and uses several read slaves for scaling Data on all sewers and the distributed file system directory is backed up weekly to off-site tapes
Which AWS storage and database architecture meets the requirements of the application?

• A. Web sewers: store read-only data in 53, and copy from 53 to root volume at boot tim


• B. App servers: share state using a combination of DynamoDB and IP unicas


• C. Database: use RDS with multi-AZ deployment and one or more read replica


• D. Backup: web servers, app servers, and database backed up weekly to Glacier using snapshots.


• E. Web sewers: store read-only data in an EC2 NFS server, mount to each web server at boot tim


• F. App servers: share state using a combination of DynamoDB and IP multicas


• G. Database: use RDS with multi-AZ deployment and one or more Read Replica


• H. Backup: web and app servers backed up weekly via AM Is, database backed up via DB snapshots.


• I. Web servers: store read-only data in 53, and copy from 53 to root volume at boot tim


• J. App servers: share state using a combination of DynamoDB and IP unicas


• K. Database: use RDS with multi-AZ deployment and one or more Read Replica


• L. Backup: web and app servers backed up weekly viaAM Is, database backed up via DB snapshots.


• M. Web servers: store read-only data in 53, and copy from 53 to root volume at boot tim


• N. App servers: share state using a combination of DynamoDB and IP unicas


• O. Database: use RDS with multi-AZ deploymen


• P. Backup: web and app sewers backed up weekly via ANI Is, database backed up via DB snapshots.

Answer: C

Explanation:
Amazon RDS Multi-AZ deployments provide enhanced availability and durability for Database (DB) Instances, making them a natural fit for production database workloads. When you provision a Multi-AZ DB Instance, Amazon RDS automatically creates a primary DB Instance and synchronously replicates the data to a standby instance in a different Availability Zone (AZ). Each AZ runs on its own physically distinct, independent infrastructure, and is engineered to be highly reliable. In case of an infrastructure failure (for example, instance hardware failure, storage failure, or network disruption), Amazon RDS performs an automatic failover to the standby, so that you can resume database operations as soon as the failover is complete. Since the endpoint for your DB Instance remains the same after a failover, your application can resume database operation without the need for manual administrative intervention.
Benefits
Enhanced Durability
MuIti-AZ deployments for the MySQL, Oracle, and PostgreSQL engines utilize synchronous physical replication to keep data on the standby up-to-date with the primary. MuIti-AZ deployments for the SQL Server engine use synchronous logical replication to achieve the same result, employing SQL
Server-native Mrroring technology. Both approaches safeguard your data in the event of a DB Instance failure or loss of an Availability Zone.
If a storage volume on your primary fails in a Multi-AZ deployment, Amazon RDS automatically initiates a failover to the up-to-date standby. Compare this to a Single-AZ deployment: in case of a Single-AZ database failure, a user-initiated point-in-time-restore operation will be required. This operation can take several hours to complete, and any data updates that occurred after the latest restorable time (typically within the last five minutes) will not be available.
Amazon Aurora employs a highly durable, SSD-backed virtualized storage layer purpose-built for
database workloads. Amazon Aurora automatically replicates your volume six ways, across three Availability Zones. Amazon Aurora storage is fault-tolerant, transparently handling the loss of up to two copies of data without affecting database write availability and up to three copies without affecting read availability. Amazon Aurora storage is also self-healing. Data blocks and disks are continuously scanned for errors and replaced automatically.
Increased Availability
You also benefit from enhanced database availability when running Multi-AZ deployments. If an Availability Zone failure or DB Instance failure occurs, your availability impact is limited to the time automatic failover takes to complete: typically under one minute for Amazon Aurora and one to two minutes for other database engines (see the RDS FAQ for details).
The availability benefits of MuIti-AZ deployments also extend to planned maintenance and backups.
In the case of system upgrades like OS patching or DB Instance scaling, these operations are applied first on the standby, prior to the automatic failover. As a result, your availability impact is, again, only the time required for automatic fail over to complete.
Unlike Single-AZ deployments, 1/0 actMty is not suspended on your primary during backup for MuIti-AZ deployments for the MySOL, Oracle, and PostgreSQL engines, because the backup is taken from the standby. However, note that you may still experience elevated latencies for a few minutes during backups for Mu|ti-AZ deployments.
On instance failure in Amazon Aurora deployments, Amazon RDS uses RDS MuIti-AZ technology to automate failover to one of up to 15 Amazon Aurora Replicas you have created in any of three Availability Zones. If no Amazon Aurora Replicas have been provisioned, in the case of a failure, Amazon RDS will attempt to create a new Amazon Aurora DB instance for you automatically.
No Administrative Intervention
DB Instance failover is fully automatic and requires no administrative intervention. Amazon RDS monitors the health of your primary and standbys, and initiates a failover automatically in response to a variety of failure conditions.
Failover conditions
Amazon RDS detects and automatically recovers from the most common failure scenarios for Multi-AZ deployments so that you can resume database operations as quickly as possible without administrative intervention. Amazon RDS automatically performs a failover in the event of any of the following:
Loss of availability in primary Availability Zone Loss of network connectMty to primary Compute unit failure on primary
Storage failure on primary
Note: When operations such as DB Instance scaling or system upgrades like OS patching are initiated for Multi-AZ deployments, for enhanced availability, they are applied first on the standby prior to an automatic failover. As a result, your availability impact is limited only to the time required for automatic failover to complete. Note that Amazon RDS Multi-AZ deployments do not failover automatically in response to database operations such as long running queries, deadlocks or database corruption errors.

NEW QUESTION 6
Can resource record sets in a hosted zone have a different domain suffix (for example, www.bIog. acme.com and www.acme.ca)?

• A. Yes, it can have for a maximum of three different TLDs.


• B. Yes


• C. Yes, it can have depending on the TLD.


• D. No

Answer: D

Explanation:
The resource record sets contained in a hosted zone must share the same suffix. For example, the exampIe.com hosted zone can contain resource record sets for www.exampIe.com and wvvw.aws.exampIe.com subdomains, but it cannot contain resource record sets for a www.exampIe.ca subdomain.
Reference: http://docs.aws.amazon.com/Route53/Iatest/DeveIoperGuide/AboutHostedZones.html

NEW QUESTION 7
Any person or application that interacts with AWS requires security credentials. AWS uses these credentials to identify who is making the call and whether to allow the requested access. You have just set up a VPC network for a client and you are now thinking about the best way to secure this network. You set up a security group called vpcsecuritygroup. Which following statement is true in respect to the initial settings that will be applied to this security group if you choose to use the default settings for this group?

• A. Allow all inbound traffic and allow no outbound traffic.


• B. Allow no inbound traffic and allow all outbound traffic.


• C. Allow inbound traffic on port 80 only and allow all outbound traffic.


• D. Allow all inbound traffic and allow all outbound traffi

Answer: B

Explanation:
Amazon VPC provides advanced security features such as security groups and network access control lists to enable inbound and outbound filtering at the instance level and subnet level.
AWS assigns each security group a unique ID in the form sg-xxxxxxxx. The following are the initial settings for a security group that you create:
Allow no inbound traffic Allow all outbound traffic
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-network-security.html

NEW QUESTION 8
A Provisioned IOPS volume must be at |east_ GB in size

• A. 1


• B. 50


• C. 20


• D. 10

Answer: D

NEW QUESTION 9
A user has created an ELB with the availability zone US-East-1A. The user wants to add more zones to ELB to achieve High Availability. How can the user add more zones to the existing ELB?

• A. The user should stop the ELB and add zones and instances as required


• B. The only option is to launch instances in different zones and add to ELB


• C. It is not possible to add more zones to the existing ELB


• D. The user can add zones on the fly from the AWS console

Answer: D

Explanation:
The user has created an Elastic Load Balancer with the availability zone and wants to add more zones to the existing ELB. The user can do so in two ways:
From the console or CLI, add new zones to ELB;
Launch instances in a separate AZ and add instances to the existing ELB. Reference:
http://docs.aws.amazon.com/EIasticLoadBaIancing/latest/DeveIoperGuide/enable-disable-az.html

NEW QUESTION 10
Which of the following are use cases for Amazon DynamoDB? Choose 3 answers

• A. Storing BLOB data.


• B. Managing web sessions.


• C. Storing JSON documents.


• D. Storing metadata for Amazon 53 objects.


• E. Running relational joins and complex updates.


• F. Storing large amounts of infrequently accessed dat

Answer: CEF

NEW QUESTION 11
What is the charge for the data transfer incurred in replicating data between your primary and standby?

• A. No charg


• B. It is free.


• C. Double the standard data transfer charge


• D. Same as the standard data transfer charge


• E. Half of the standard data transfer charge

Answer: C

NEW QUESTION 12
Which of the following features ensures even distribution of traffic to Amazon EC2 instances in multiple Availability Zones registered with a load balancer?

• A. Elastic Load Balancing request routing


• B. An Amazon Route 53 weighted routing policy


• C. Elastic Load Balancing cross-zone load balancing


• D. An Amazon Route 53 latency routing pol icy

Answer: A

Explanation:
Reference: http://aws.amazon.com/eIasticIoadba|ancing/

NEW QUESTION 13
Can I use Provisioned IOPS with VPC?

• A. Only Oracle based RDS


• B. No


• C. Only with MSSQL based RDS


• D. Yes for all RDS instances

Answer: D

NEW QUESTION 14
A user is planning a highly available application deployment with EC2. Which of the below mentioned options will not help to achieve HA?

• A. Elastic IP address


• B. PIOPS


• C. AMI


• D. Availability Zones

Answer: B

Explanation:
In Amazon Web Service, the user can achieve HA by deploying instances in multiple zones. The elastic IP helps the user achieve HA when one of the instances is down but still keeps the same URL. The AM helps launching the new instance. The PIOPS is for the performance of EBS and does not help for HA. Reference: http://media.amazonwebservices.com/AWS_Web_Hosting_Best_Practices.pdf

NEW QUESTION 15
Which Amazon storage do you think is the best for my database-style applications that frequently encounter many random reads and writes across the dataset?

• A. None of these.


• B. Amazon Instance Storage


• C. Any of these


• D. Amazon EBS

Answer: D

NEW QUESTION 16
Because of the extensibility limitations of striped storage attached to Windows Server, Amazon RDS does not currently support increasing storage on a _ DB Instance.

• A. SQL Server


• B. MySQL


• C. Oracle

Answer: A

NEW QUESTION 17
You receive the following request from a client to quickly deploy a static website for them, specifically on AWS. The requirements are low-cost, reliable, online storage, and a reliable and cost-effective way to route customers to the website, as well as a way to deliver content with low latency and high data transfer speeds so that visitors to his website don't experience unnecessary delays. What do you think would be the minimum AWS services that could fulfill the cIient's request?

• A. Amazon Route 53, Amazon CIoudFront and Amazon VPC.


• B. Amazon S3, Amazon Route 53 and Amazon RDS


• C. Amazon S3, Amazon Route 53 and Amazon CIoudFront


• D. Amazon S3 and Amazon Route 53.

Answer: C

Explanation:
You can easily and inexpensively use AWS to host a website that uses client-side technologies (such as HTML, CSS, and JavaScript) and does not require server-side technologies (such as PHP and ASP.NET). This type of site is called a static website, and is used to display content that does not change frequently. Before you create and deploy a static website, you must plan your architecture to ensure that it meets your requirements. Amazon S3, Amazon Route 53, and Amazon CIoudFront would be required in this instance.
Reference: http://docs.aws.amazon.com/gettingstarted/latest/swh/website-hosting-intro.html

NEW QUESTION 18
What is the time period with which metric data is sent to CIoudWatch when detailed monitoring is enabled on an Amazon EC2 instance?

• A. 15 minutes


• B. 5 minutes


• C. 1 minute


• D. 45 seconds

Answer: C

Explanation:
By default, Amazon EC2 metric data is automatically sent to CIoudWatch in 5-minute periods. However, you can, enable detailed monitoring on an Amazon EC2 instance, which sends data to CIoudWatch in
1-minute periods
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-cloudwatch.htmI

NEW QUESTION 19
A US-based company is expanding their web presence into Europe. The company wants to extend their AWS infrastructure from Northern Virginia (us-east-1) into the Dublin (eu-west-1) region. Which of the following options would enable an equivalent experience for users on both continents?

• A. Use a public-facing load balancer per region to load-balance web traffic, and enable HTIP health checks.


• B. Use a public-facing load balancer per region to load-balance web traffic, and enable sticky sessions.


• C. Use Amazon Route 53, and apply a geolocation routing policy to distribute traffic across both regions.


• D. Use Amazon Route 53, and apply a weighted routing policy to distribute traffic across both region

Answer: D

Explanation:
Reference: http://docs.aws.amazon.com/Route53/latest/DeveIoperGuide/routing-policy.html

NEW QUESTION 20
What is the data model of DynamoDB?

• A. Since DynamoDB is schema-less, there is no data model.


• B. "Items", with Keys and one or more Attribute; and "Attribute", with Name and Value.


• C. "TabIe", a collection of Items; "Items", with Keys and one or more Attribute; and "Attribute", with Name and Value.


• D. "Database", which is a set of "TabIes", which is a set of "Items", which is a set of "Attributes".

Answer: C

Explanation:
The data model of DynamoDB is: "TabIe", a collection of Items;
"Items", with Keys and one or more Attribute; "Attribute", with Name and Value.
Reference: http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/DataModeI.html

NEW QUESTION 21
After you recommend Amazon Redshift to a client as an alternative solution to paying data warehouses to analyze his data, your client asks you to explain why you are recommending Redshift. Which of the following would be a reasonable response to his request?

• A. It has high performance at scale as data and query complexity grows.


• B. It prevents reporting and analytic processing from interfering with the performance of OLTP workloads.


• C. You don't have the administrative burden of running your own data warehouse and dealing with setup, durability, monitoring, scaling, and patching.


• D. All answers listed are a reasonable response to his QUESTION

Answer: D

Explanation:
Amazon Redshift delivers fast query performance by using columnar storage technology to improve I/O efficiency and parallelizing queries across multiple nodes. Redshift uses standard PostgreSQL JDBC and ODBC drivers, allowing you to use a wide range of familiar SQL clients. Data load speed scales linearly with cluster size, with integrations to Amazon S3, Amazon DynamoDB, Amazon Elastic MapReduce,
Amazon Kinesis or any SSH-enabled host.
AWS recommends Amazon Redshift for customers who have a combination of needs, such as: High performance at scale as data and query complexity grows
Desire to prevent reporting and analytic processing from interfering with the performance of OLTP workloads
Large volumes of structured data to persist and query using standard SQL and existing BI tools Desire to the administrative burden of running one's own data warehouse and dealing with setup, durability, monitoring, scaling and patching
Reference: https://aws.amazon.com/running_databases/#redshift_anchor

NEW QUESTION 22
If I have multiple Read Replicas for my master DB Instance and I promote one of them, what happens to the rest of the Read Replicas?

• A. The remaining Read Replicas will still replicate from the older master DB Instance


• B. The remaining Read Replicas will be deleted


• C. The remaining Read Replicas will be combined to one read replica

Answer: A

NEW QUESTION 23
Does Dynamic DB support in-place atomic updates?

• A. It is not defined


• B. No


• C. Yes


• D. It does support in-place non-atomic updates

Answer: C

NEW QUESTION 24
A company is deploying a new two-tier web application in AWS. The company has limited staff and requires high availability, and the application requires complex queries and table joins. Which configuration provides the solution for the company's requirements?

• A. MySQL Installed on two Amazon EC2 Instances in a single Availability Zone


• B. Amazon RDS for MySQL with Multi-AZ


• C. Amazon EIastiCache


• D. Amazon DynamoDB

Answer: D

Explanation:
Reference: http://www.aIithingsdistributed.com/2013/03/dyna mod b-one-year-Iater.htmI

NEW QUESTION 25
Refer to the architecture diagram above of a batch processing solution using Simple Queue Service (SQS) to set up a message queue between EC2 instances which are used as batch processors Cloud Watch monitors the number of Job requests (queued messages) and an Auto Scaling group adds or deletes
batch sewers automatically based on parameters set in Cloud Watch alarms. You can use this architecture to implement which of the following features in a cost effective and efficient manner?

• A. Reduce the overall lime for executing jobs through parallel processing by allowing a busy EC2 instance that receives a message to pass it to the next instance in a daisy-chain setup.


• B. Implement fault tolerance against EC2 instance failure since messages would remain in SQS and worn can continue with recovery of EC2 instances implement fault tolerance against SQS failure by backing up messages to 53.


• C. Implement message passing between EC2 instances within a batch by exchanging messages through SQS.


• D. Coordinate number of EC2 instances with number of job requests automatically thus Improving cost effectiveness.


• E. Handle high priority jobs before lower priority jobs by assigning a priority metadata fie Id to SQS messages.

Answer: D

Explanation:
Reference:
There are cases where a large number of batch jobs may need processing, and where the jobs may need to be re-prioritized.
For example, one such case is one where there are differences between different levels of services for unpaid users versus subscriber users (such as the time until publication) in services enabling, for example, presentation fi les to be uploaded for publication from a web browser. When the user uploads a presentation file, the conversion processes, for example, for publication are performed as batch
processes on the system side, and the file is published after the conversion. Is it then necessary to be able to assign the level of priority to the batch processes for each type of subscriber.
Explanation of the Cloud Solution/Pattern
A queue is used in controlling batch jobs. The queue need only be provided with priority numbers. Job requests are controlled by the queue, and the job requests in the queue are processed by a batch server. In Cloud computing, a highly reliable queue is provided as a service, which you can use to
structure a highly reliable batch system with ease. You may prepare multiple queues depending on priority levels, with job requests put into the queues depending on their priority levels, to apply prioritization to batch processes. The performance (number) of batch servers corresponding to a queue must be in accordance with the priority level thereof.
Implementation
In AWS, the queue service is the Simple Queue Service (SQS). MuItipIe SQS queues may be prepared to prepare queues for indMdual priority levels (with a priority queue and a secondary queue).
Moreover, you may also use the message Delayed Send function to delay process execution. Use SQS to prepare multiple queues for the indMdual priority levels.
Place those processes to be executed immediately (job requests) in the high priority queue. Prepare numbers of batch servers, for processing the job requests of the queues, depending on the priority levels.
Queues have a message "Delayed Send" function. You can use this to delay the time for starting a process.
Configuration
Benefits
You can increase or decrease the number of servers for processing jobs to change automatically the processing speeds of the priority queues and secondary queues.
You can handle performance and service requirements through merely increasing or decreasing the number of EC2 instances used in job processing.
Even if an EC2 were to fail, the messages (jobs) would remain in the queue service, enabling processing to be continued immediately upon recovery of the EC2 instance, producing a system that is robust to failure.
Cautions
Depending on the balance between the number of EC2 instances for performing the processes and the number of messages that are queued, there may be cases where processing in the secondary queue may be completed first, so you need to monitor the processing speeds in the primary queue and the secondary queue.

NEW QUESTION 26
Please select the most correct answer regarding the persistence of the Amazon Instance Store

• A. The data on an instance store volume persists only during the life of the associated Amazon EC2 instance


• B. The data on an instance store volume is lost when the security group rule of the associated instance is changed.


• C. The data on an instance store volume persists even after associated Amazon EC2 instance is deleted

Answer: B

NEW QUESTION 27
Which of the following are characteristics of a reserved instance? Choose 3 answers

• A. It can be migrated across Availability Zones


• B. It is specific to an Amazon Machine Image (AMI)


• C. It can be applied to instances launched by Auto Scaling


• D. It is specific to an instance Type


• E. It can be used to lower Total Cost of Ownership (TCO) of a system

Answer: CDE

NEW QUESTION 28
Regarding the attaching of ENI to an instance, what does 'warm attach' refer to?

• A. Attaching an ENI to an instance when it is stopped.


• B. This QUESTION doesn't make sense.


• C. Attaching an ENI to an instance when it is running


• D. Attaching an ENI to an instance during the launch process

Answer: A

NEW QUESTION 29
You are working with a customer who has 10 TB of archival data that they want to migrate to Amazon Glacier. The customer has a 1-Mbps connection to the Internet. Which service or feature provides the fastest method of getting the data into Amazon Glacier?

• A. Amazon Glacier multipart upload


• B. AWS Storage Gateway


• C. VM Import/Export


• D. AWS Import/Export

Answer: A

Explanation:
http://docs.aws.amazon.com/amazonglacier/latest/dev/uploading-archive-mpu.html

NEW QUESTION 30
What is the name of licensing model in which I can use your existing Oracle Database licenses to run Oracle deployments on Amazon RDS?

• A. Bring Your Own License


• B. Role Bases License


• C. Enterprise License


• D. License Included

Answer: A

NEW QUESTION 31
......