Q1. - (Topic 2) 

An organization has created 50 IAM users. The organization has introduced a new policy which will change the access of an IAM user. How can the organization implement this effectively so that there is no need to apply the policy at the individual user level? 

A. Use the IAM groups and add users as per their role to different groups and apply policy to group 

B. The user can create a policy and apply it to multiple users in a single go with the AWS CLI 

C. Add each user to the IAM role as per their organization role to achieve effective policy setup 

D. Use the IAM role and implement access at the role level 

View Answer

Q2. - (Topic 3) 

A user has created a VPC with CIDR 20.0.0.0/16 using the wizard. The user has created public and VPN only subnets along with hardware VPN access to connect to the user’s data centre. The user has not yet launched any instance as well as modified or deleted any setup. He wants to delete this VPC from the console. Will the console allow the user to delete the VPC? 

A. Yes, the console will delete all the setups and also delete the virtual private gateway B. No, the console will ask the user to manually detach the virtual private gateway first and then allow deleting the VPC 

C. Yes, the console will delete all the setups and detach the virtual private gateway 

D. No, since the NAT instance is running 

View Answer

Q3. - (Topic 3) 

An organization has setup multiple IAM users. The organization wants that each IAM user accesses the IAM console only within the organization and not from outside. How can it achieve this? 

A. Create an IAM policy with the security group and use that security group for AWS console login 

B. Create an IAM policy with a condition which denies access when the IP address range is not from the organization 

C. Configure the EC2 instance security group which allows traffic only from the organization’s IP range 

D. Create an IAM policy with VPC and allow a secure gateway between the organization and AWS Console 

View Answer

Q4. - (Topic 2) 

An organization is planning to use AWS for their production roll out. The organization wants to implement 

automation for deployment such that it will automatically create a LAMP stack, download the latest PHP 

installable from S3 and setup the ELB. Which of the below mentioned AWS services meets the quirement for making an orderly deployment of the software? 

A. AWS Elastic Beanstalk 

B. AWS Cloudfront 

C. AWS Cloudformation 

D. AWS DevOps 

View Answer

Q5. - (Topic 1) 

You have a web-style application with a stateless but CPU and memory-intensive web tier running on a cc2 8xlarge EC2 instance inside of a VPC The instance when under load is having problems returning requests within the SLA as defined by your business The application maintains its state in a DynamoDB table, but the data tier is properly provisioned and responses are consistently fast. 

How can you best resolve the issue of the application responses not meeting your SLA? 

A. Add another cc2 8xlarge application instance, and put both behind an Elastic Load Balancer 

B. Move the cc2 8xlarge to the same Availability Zone as the DynamoDB table 

C. Cache the database responses in ElastiCache for more rapid access 

D. Move the database from DynamoDB to RDS MySQL in scale-out read-replica configuration 

View Answer

Q6. - (Topic 1) 

Which of the following requires a custom CloudWatch metric to monitor? 

A. Data transfer of an EC2 instance 

B. Disk usage activity of an EC2 instance 

C. Memory Utilization of an EC2 instance 

D. CPU Utilization of an EC2 instance 

View Answer

Q7. - (Topic 3) 

A user has launched an EC2 instance. The instance got terminated as soon as it was launched. Which of the below mentioned options is not a possible reason for this? 

A. The user account has reached the maximum EC2 instance limit 

B. The snapshot is corrupt 

C. The AMI is missing. It is the required part 

D. The user account has reached the maximum volume limit 

View Answer

Q8. - (Topic 3) 

A sysadmin has created the below mentioned policy on an S3 bucket named cloudacademy. What does this policy define? 

"Statement": [{ 

"Sid": "Stmt1388811069831", 

"Effect": "Allow", 

"Principal": { "AWS": "*"}, 

"Action": [ "s3:GetObjectAcl", "s3:ListBucket"], 

"Resource": [ "arn:aws:s3:::cloudacademy] 

}] 

A. It will make the cloudacademy bucket as well as all its objects as public 

B. It will allow everyone to view the ACL of the bucket 

C. It will give an error as no object is defined as part of the policy while the action defines the rule about the object 

D. It will make the cloudacademy bucket as public 

View Answer

Q9. - (Topic 3) 

A user is configuring a CloudWatch alarm on RDS to receive a notification when the CPU utilization of RDS is higher than 50%. The user has setup an alarm when there is some inactivity on RDS, such as RDS unavailability. How can the user configure this? 

A. Setup the notification when the CPU is more than 75% on RDS 

B. Setup the notification when the state is Insufficient Data 

C. Setup the notification when the CPU utilization is less than 10% 

D. It is not possible to setup the alarm on RDS 

View Answer

Q10. - (Topic 3) 

A sysadmin has created the below mentioned policy on an S3 bucket named cloudacademy. The bucket has both AWS.jpg and index.html objects. What does this policy define? 

"Statement": [{ 

"Sid": "Stmt1388811069831", 

"Effect": "Allow", 

"Principal": { "AWS": "*"}, 

"Action": [ "s3:GetObjectAcl", "s3:ListBucket", "s3:GetObject"], 

"Resource": [ "arn:aws:s3:::cloudacademy/*.jpg] 

}] 

A. It will make all the objects as well as the bucket public 

B. It will throw an error for the wrong action and does not allow to save the policy 

C. It will make the AWS.jpg object as public 

D. It will make the AWS.jpg as well as the cloudacademy bucket as public 

View Answer