Amazon AWS-Solution-Architect-Associate Braindumps 2021

NEW QUESTION 1
When creation of an EBS snapshot is initiated, but not completed, the EBS volume:

• A. Can be used while the snapshot is in progress.
• B. Cannot be detached or attached to an EC2 instance until the snapshot completes
• C. Can be used in read-only mode while the snapshot is in progress.
• D. Cannot be used until the snapshot complete

Answer: D

NEW QUESTION 2
To specify a resource in a policy statement, in Amazon EC2, can you use its Amazon Resource Name (ARN)?

• A. Yes, you can.
• B. No, you can't because EC2 is not related to ARN.
• C. No, you can't because you can't specify a particular Amazon EC2 resource in an IAM policy.
• D. Yes, you can but only for the resources that are not affected by the actio

Answer: A

Explanation: Some Amazon EC2 API actions allow you to include specific resources in your policy that can be created or modified by the action. To specify a resource in the statement, you need to use its Amazon Resource Name (ARN).
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-ug.pdf

NEW QUESTION 3
How can the domain's zone apex, for example, "myzoneapexdomain.com", be pointed towards an Elastic Load Balancer?

• A. By using an Amazon Route 53 Alias record
• B. By using an AAAA record
• C. By using an Amazon Route 53 CNAME record
• D. By using an A record

Answer: A

NEW QUESTION 4
Amazon EBS provides the ability to create backups of any Amazon EC2 volume into what is known as

• A. snapshots
• B. images
• C. instance backups
• D. mirrors

Answer: A

Explanation: Amazon allows you to make backups of the data stored in your EBS volumes through snapshots that can later be used to create a new EBS volume.
Reference: http://docs.amazonwebservices.com/AWSEC2/latest/UserGuide/Storage.htmI

NEW QUESTION 5
You need to create a management network using network interfaces for a virtual private cloud (VPC) network. Which of the following statements is incorrect pertaining to Best Practices for Configuring Network Interfaces.

• A. You can detach secondary (ethN) network interfaces when the instance is running or stoppe
• B. However, you can't detach the primary (eth0) interface.
• C. Launching an instance with multiple network interfaces automatically configures interfaces, private IP addresses, and route tables on the operating system of the instance.
• D. You can attach a network interface in one subnet to an instance in another subnet in the same VPC, however, both the network interface and the instance must reside in the same Availability Zone.
• E. Attaching another network interface to an instance is a valid method to increase or double the network bandwidth to or from the dual-homed instance

Answer: D

Explanation: Best Practices for Configuring Network Interfaces
You can attach a network interface to an instance when it's running (hot attach), when it's stopped (warm attach), or when the instance is being launched (cold attach).
You can detach secondary (ethN) network interfaces when the instance is running or stopped. However, you can't detach the primary (eth0) interface.
You can attach a network interface in one subnet to an instance in another subnet in the same VPC, however, both the network interface and the instance must reside in the same Availability Zone.
When launching an instance from the CLI or API, you can specify the network interfaces to attach to the instance for both the primary (eth0) and additional network interfaces.
Launching an instance with multiple network interfaces automatically configures interfaces, private IP addresses, and route tables on the operating system of the instance.
A warm or hot attach of an additional network interface may require you to manually bring up the second interface, configure the private IP address, and modify the route table accordingly. (Instances running Amazon Linux automatically recognize the warm or hot attach and configure themselves.)
Attaching another network interface to an instance is not a method to increase or double the network bandwidth to or from the dual-homed instance.
Reference:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-eni.htmI#use-network-and-security-applia nces-in-your-vpc

NEW QUESTION 6
Can the string value of 'Key' be prefixed with laws'?

• A. No
• B. Only for EC2 not 53
• C. Yes
• D. Only for 53 not EC

Answer: A

NEW QUESTION 7
An Elastic IP address (EIP) is a static IP address designed for dynamic cloud computing. With an EIP, you can mask the failure of an instance or software by rapidly remapping the address to another instance in your account. Your EIP is associated with your AWS account, not a particular EC2 instance, and it remains associated with your account until you choose to explicitly release it. By default how many EIPs is each AWS account limited to on a per region basis?

• A. 1
• B. 5
• C. Unlimited
• D. 10

Answer: B

Explanation: By default, all AWS accounts are limited to 5 Elastic IP addresses per region for each AWS account, because public (IPv4) Internet addresses are a scarce public resource. AWS strongly encourages you to use an EIP primarily for load balancing use cases, and use DNS hostnames for all other inter-node communication.
If you feel your architecture warrants additional EIPs, you would need to complete the Amazon EC2 Elastic IP Address Request Form and give reasons as to your need for additional addresses. Reference:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/elastic-ip-addresses-eip.htmI#using-instance-ad dressing-limit

NEW QUESTION 8
While creating an Amazon RDS DB, your first task is to set up a DB that controls which IP address or EC2 instance can access your DB Instance.

• A. security token pool
• B. security token
• C. security pool
• D. security group

Answer: D

Explanation: While creating an Amazon RDS DB, your first task is to set up a DB Security Group that controls what IP addresses or EC2 instances have access to your DB Instance.
Reference: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_WorkingWithSecurityGroups.html

NEW QUESTION 9
You can use _ and _ to help secure the instances in your VPC,

• A. security groups and multi-factor authentication
• B. security groups and 2-Factor authentication
• C. security groups and biometric authentication
• D. security groups and network ACLs

Answer: D

NEW QUESTION 10
After setting up several database instances in Amazon Relational Database Service (Amazon RDS) you decide that you need to track the performance and health of your databases. How can you do this?

• A. Subscribe to Amazon RDS events to be notified when changes occur with a DB instance, DB snapshot, DB parameter group, or DB security group.
• B. Use the free Amazon CIoudWatch service to monitor the performance and health of a DB instance.
• C. All of the items listed will track the performance and health of a database.
• D. View, download, or watch database log files using the Amazon RDS console or Amazon RDS API
• E. You can also query some database log files that are loaded into database tables.

Answer: C

Explanation: Amazon Relational Database Service (Amazon RDS) is a web service that makes it easier to set up, operate, and scale a relational database in the cloud. It provides cost-efficient, resizeable capacity for an industry-standard relational database and manages common database administration tasks.
There are several ways you can track the performance and health of a database or a DB instance. You can:
Use the free Amazon CIoudWatch service to monitor the performance and health of a DB instance. Subscribe to Amazon RDS events to be notified when changes occur with a DB instance, DB snapshot, DB parameter group, or DB security group.
View, download, or watch database log files using the Amazon RDS console or Amazon RDS APIs. You can also query some database log files that are loaded into database tables.
Use the AWS CIoudTraiI service to record AWS calls made by your AWS account. The calls are recorded in log files and stored in an Amazon S3 bucket.
Reference: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Monitoring.htmI

NEW QUESTION 11
A scope has been handed to you to set up a super fast gaming server and you decide that you will use Amazon DynamoDB as your database. For efficient access to data in a table, Amazon DynamoDB creates and maintains indexes for the primary key attributes. A secondary index is a data structure that contains a subset of attributes from a table, along with an alternate key to support Query operations. How many types of secondary indexes does DynamoDB support?

• A. 2
• B. 16
• C. 4
• D. As many as you nee

Answer: A

Explanation: DynamoDB supports two types of secondary indexes:
Local secondary index — an index that has the same hash key as the table, but a different range key. A local secondary index is "IocaI" in the sense that every partition of a local secondary index is scoped to a table partition that has the same hash key.
Global secondary index — an index with a hash and range key that can be different from those on the table. A global secondary index is considered "gIobaI" because queries on the index can span all of the data in a table, across all partitions.
Reference: http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/Secondarylndexes.html

NEW QUESTION 12
You have a web application running on six Amazon EC2 instances, consuming about 45% of resources on each instance. You are using auto-scaling to make sure that six instances are running at all times.
The number of requests this application processes is consistent and does not experience spikes. The application is critical to your business and you want high availability at all times. You want the load to be distributed evenly between all instances. You also want to use the same Amazon Machine Image (AMI) for all instances. Which of the following architectural choices should you make?

• A. Deploy 6 EC2 instances in one availability zone and use Amazon Elastic Load Balancer.
• B. Deploy 3 EC2 instances in one region and 3 in another region and use Amazon Elastic Load Balancer.
• C. Deploy 3 EC2 instances in one availability zone and 3 in another availability zone and use Amazon Elastic Load Balancer.
• D. Deploy 2 EC2 instances in three regions and use Amazon Elastic Load Balance

Answer: C

Explanation: Reference: https://media.amazonwebservices.com/pdf/AWS_Security_Whitepaper.pdf (page 8)

NEW QUESTION 13
Can I control if and when MySQL based RDS Instance is upgraded to new supported versions?

• A. No
• B. Only in VPC
• C. Yes

Answer: C

NEW QUESTION 14
What does Amazon ELB stand for?

• A. Elastic Linux Box.
• B. Encrypted Linux Box.
• C. Encrypted Load Balancing.
• D. Elastic Load Balancin

Answer: D

NEW QUESTION 15
Doug has created a VPC with CIDR 10.201.0.0/16 in his AWS account. In this VPC he has created a public subnet with CIDR block 10.201.31.0/24. While launching a new EC2 from the console, he is not able to assign the private IP address 10.201.31.6 to this instance. Which is the most likely reason for this issue?

• A. Private IP address 10.201.31.6 is blocked via ACLs in Amazon infrastructure as a part of platform security.
• B. Private address IP 10.201.31.6 is currently assigned to another interface.
• C. Private IP address 10.201.31.6 is not part of the associated subnet's IP address range.
• D. Private IP address 10.201.31.6 is reserved by Amazon for IP networking purpose

Answer: B

Explanation: In Amazon VPC, you can assign any Private IP address to your instance as long as it is: Part of the associated subnet's IP address range
Not reserved by Amazon for IP networking purposes Not currently assigned to another interface Reference: http://aws.amazon.com/vpc/faqs/

NEW QUESTION 16
When does the billing of an Amazon EC2 system begin?

• A. It starts when the Status column for your distribution changes from Creating to Deployed.
• B. It starts as soon as you click the create instance option on the main EC2 console.
• C. It starts when your instance reaches 720 instance hours.
• D. It starts when Amazon EC2 initiates the boot sequence of an AM instanc

Answer: D

Explanation: Billing commences when Amazon EC2 initiates the boot sequence of an AM instance. Billing ends when the instance terminates, which could occur through a web services command, by running "shutdown -h", or through instance failure. When you stop an instance, Amazon shuts it down but doesn/Et charge hourly usage for a stopped instance, or data transfer fees, but charges for the storage for any Amazon EBS volumes.
Reference: http://aws.amazon.com/ec2/faqs/