Get real exam questions for AWS-Solution-Architect-Associate AWS Certified Solutions Architect - Associate. 100% Free.
Q1. You need to set up security for your VPC and you know that Amazon VPC provides two features that you can use to increase security for your VPC: security groups and network access control lists (ACLs). You have already looked into security groups and you are now trying to understand ACLs. Which statement below is incorrect in relation to ACLs?A. Supports allow rules and deny rules.B. Is statef
Q1. Which of the following statements is true of creating a launch configuration using an EC2 instance?A. The launch configuration can be created only using the Query APIs.B. Auto Scaling automatically creates a launch configuration directly from an EC2 instance.C. A user should manually create a launch configuration before creating an Auto Scaling group.D. The launch configuration should be crea
Q1. Your supervisor has asked you to build a simple file synchronization service for your department. He doesn't want to spend too much money and he wants to be notified of any changes to files by email. What do you think would be the best Amazon service to use for the email solution?A. Amazon SESB. Amazon CIoudSearchC. Amazon SWFD. Amazon AppStream View AnswerAnswer: AExplanation:File chan
Q1. Much of your company's data does not need to be accessed often, and can take several hours for retrieval time, so it's stored on Amazon Glacier. However someone within your organization has expressed concerns that his data is more sensitive than the other data, and is wondering whether the highlevel of encryption that he knows is on S3 is also used on the much cheaper Glacier servic
Q1. True or False: Manually created DB Snapshots are deleted after the DB Instance is deleted.A. TRUEB. FALSEView AnswerAnswer: AQ2. The one-time payment for Reserved Instances is _ _ refundable if the reservation is cancelled.A. alwaysB. in some circumstancesC. never View AnswerAnswer: CQ3. You are responsible for a legacy web application whose server environment is approaching end of life
Q1. What is the minimum charge for the data transferred between Amazon RDS and Amazon EC2 Instances in the same Availability Zone?A. USD 0.10 per GBB. No charge. It is free.C. USD 0.02 per GBD. USD 0.01 per GBView AnswerAnswer: BQ2. Fill in the blanks: _ let you categorize your EC2 resources in different ways, for example, by purpose, owner, or environment.A. wildcardsB. pointersC. TagsD. speci
Q1. Can resource record sets in a hosted zone have a different domain suffix (for example, www.bIog. acme.com and www.acme.ca)?A. Yes, it can have for a maximum of three different TLDs.B. YesC. Yes, it can have depending on the TLD.D. NoView AnswerAnswer: D Explanation:The resource record sets contained in a hosted zone must share the same suffix. For example, the exampIe.com hosted zone can co
Q1. Your manager has just given you access to multiple VPN connections that someone else has recently set up between all your company's offices. She needs you to make sure that the communication between the VPNs is secure. Which of the following services would be best for providing a low-cost hub-and-spoke model for primary or backup connectMty between these remote offices?A. Amazon C|oudFron
Q1. Refer to the architecture diagram above of a batch processing solution using Simple Queue Service (SQS) to set up a message queue between EC2 instances which are used as batch processors Cloud Watch monitors the number of Job requests (queued messages) and an Auto Scaling group adds or deletesbatch sewers automatically based on parameters set in Cloud Watch alarms. You can use this architectu
Q1. IAM provides several policy templates you can use to automatically assign permissions to the groups you create. The _ policy template gives the Admins group permission to access all account resources,except your AWS account informationA. Read Only AccessB. Power User AccessC. AWS Cloud Formation Read Only AccessD. Administrator AccessView AnswerAnswer: DQ2. Does AWS CIoudFormation support A
Q1. You require the ability to analyze a large amount of data, which is stored on Amazon 53 using Amazon Elastic Map Reduce. You are using the cc2 8x large Instance type, whose CPUs are mostly idle during processing. Which of the below would be the most cost efficient way to reduce the runtime of the job?A. Create more smaller flies on Amazon 53.B. Add additional cc2 8x large instances by introdu
Q1. You have been given a scope to set up an AWS Media Sharing Framework for a new start up photosharing company similar to flickr. The first thing that comes to mind about this is that it will obviously need a huge amount of persistent data storage for this framework. Which of the following storage options would be appropriate for persistent storage?A. Amazon Glacier or Amazon S3B. Amazon Glacie
Q1. A benefits enrollment company is hosting a 3-tier web application running in a VPC on AWS which includes a NAT (Network Address Translation) instance in the public Web tier. There is enough provisioned capacity for the expected workload tor the new fiscal year benefit enrollment period plus some extra overhead Enrollment proceeds nicely for two days and then the web tier becomes unresponsive,
Q1. By default, when an EBS volume is attached to a Windows instance, it may show up as any drive letter on the instance. You can change the settings of the _ Senrice to set the drive letters of the EBS volumes per your specifications.A. EBS Config SenriceB. AMI Config SenriceC. Ec2 Config SenriceD. Ec2-AMI Config Senrice View AnswerAnswer: CQ2. You are developing a new mobile application and
Q1. You are building a system to distribute confidential documents to employees. Using CIoudFront, what method could be used to serve content that is stored in S3, but not publically accessible from S3 directly?A. Add the CIoudFront account security group "amazon-cf/amazon-cf-sg" to the appropriate S3 bucket policy.B. Create a S3 bucket policy that lists the C|oudFront distribution ID as the Prin
Q1. You can seamlessly join an EC2 instance to your directory domain. What connectMty do you need to be able to connect remotely to this instance?A. You must have IP connectMty to the instance from the network you are connecting from.B. You must have the correct encryption keys to connect to the instance remotely.C. You must have enough bandwidth to connect to the instance.D. You must use MFA aut
Q1. You are planning and configuring some EBS volumes for an application. In order to get the most performance out of your EBS volumes, you should attach them to an instance with enough to support your volumes.A. RedundancyB. StorageC. BandwidthD. Memory View AnswerAnswer: CExplanation:When you plan and configure EBS volumes for your application, it is important to consider the configuration of
Q1. You have been doing a lot of testing of your VPC Network by deliberately failing EC2 instances to test whether instances are failing over properly. Your customer who will be paying the AWS bill for all this asks you if he being charged for all these instances. You try to explain to him how the billing works on EC2 instances to the best of your knowledge. What would be an appropriate response
Q1. SQL Sewer _ store log ins and passwords in the master database.A. can be configured to but by default does notB. doesn'tC. does View AnswerAnswer: CQ2. In the 'DetaiIed' monitoring data available for your Amazon EBS volumes, Provisioned IOPS volumes automatically send _ minute metrics to Amazon CIoudWatch.A. 3B. 1C. 5D. 2View AnswerAnswer: BQ3. A client of yours has a huge am
Q1. A user is launching an EC2 instance in the US East region. Which of the below mentioned options is recommended by AWS with respect to the selection of the availability zone?A. Always select the AZ while launching an instanceB. Always select the US-East-1-a zone for HAC. Do not select the AZ; instead let AWS select the AZD. The user can never select the availability zone while launching an ins