PDF Download
AWS SOLUTIONS ARCHITECT ASSOCIATE TEST
QUESTIONS
Actual Qs and Ans Expert-Verified Explanation
This Exam contains:
-Guarantee passing score -90 Questions and Answers -format set of multiple-choice -Expert-Verified Explanation Question 1: True or False. Reserved instances are available for multi-AZ deployments.
Answer:
True Question 2: For the EBS volumes, which has the following disadvantage : 'Doubles the amount of I/O required from the instance to EBS compared to RAID 0, because you're mirroring all writes to a pair of volumes, limiting how much you can stripe.
- Raid 0
- Raid 1+0 [Raid 10]
- Raid 1
- Raid 5
Answer:
d
Question 3: True or False. When I create a new security group, all outbound traffic is allowed by default.
Answer:
True Question 4: If you want your application to check whether a request generated an error, then you look for an ____ node in the response from the Amazon RDS API
- Incorrect
- Error
- False
- True
Answer:
b
Question 5: What types of RDS databases are currently available
- Aurora, MySQL, MSSQL, Cassandra
- PostGres, Cassandra, MongoDB, Aurora
- Oracle, MSSQL, MySQL, Cassandra
- Oracle, MSSQL, MySQL, Postgres
Answer:
d Question 6: True or False. You can conduct your own vulnerability scans within your own VPC without alerting AWS first.
Answer:
False Question 7: True or False. Automated backups are enabled by default for new DB Instance?
Answer:
True
Question 8: True or False. As the AWS is PCI DSS 1.00 compliant, I can immediately deploy a website to it that takes credit card details. I do not need any kind of delta accreditation from a QSA.
Answer:
False Question 9: True or False. Amazon's Glacier service is a Content Distribution Network which integrates with S3.
Answer:
False Question 10: True or False. The AWS platform is certified PCI DSS 1.0 compliant.
Answer:
True
Question 11: Instance 1 and 2 are running in two different subnets (A and
- of a VPC. Instance 1 is not able to ping instance
- What are 2 possible reasons?
- The routing table of subnet A has no target route to subnet B
- The security group attached to instance 2 does not allow inbound ICMP traffic
- The policy linked to the IAM role on instance 1 is not configured correctly
- The NACL on subnet B doesn't allow outbound ICMP traffic
Answer:
b d Question 12: Which of the following is part of the failover process for a Multi-Availability Zone Amazon Relational Database Service (RDS) instance?
- The failed RDS DB instance reboots.
- The IP of the primary DB instance is switched to the standby DB instance.
- The DNS record for the RDS endpoint is changed from primary to standby.
- A new DB instance is created in the standby availability zone.
Answer:
c
Question 13: What is the underlying Hypervisor for EC2?
- Hyper-V
- ESX
- Xen
- OVM
Answer:
c Question 14: Your company is getting ready to do a major public announcement of a social media site on AWS. The website is running on EC2 instances deployed across multiple Availability Zones with a Multi-AZ RDS MySQL Extra Large DB Instance. The site performs a high number of small reads and writes per second and relies on an eventual consistency model.After comprehensive tests you discover that there is read contention on RDS MySQL. Which are the best approaches to meet these requirements? (Choose 2 answers)
- Deploy ElasticCache in-memory cache running in each availability zone
- Implement sharding to distribute load to multiple RDS MySQL instances
- Increase the RDS MySQL Instance size and Implement provisioned IOPS
- Add an RDS MySQL read replica in each availability zone
Answer:
a d Question 15: If an Amazon EBS volume is an additional partition (ie. not the root volume), can I detach it without stopping the instance?
- Yes, but it may take some time
- No, you still need to stop the instance
Answer:
a