Amazon AWS-Solution-Architect-Associate Exam Questions 2021

NEW QUESTION 1
A group can contain many users. Can a user belong to multiple groups?

• A. Yes always
• B. No
• C. Yes but only if they are using two factor authentication
• D. Yes but only in VPC

Answer: A

NEW QUESTION 2
is a fast, filexible, fully managed push messaging service.

• A. Amazon SNS
• B. Amazon SES
• C. Amazon SQS
• D. Amazon FPS

Answer: A

Explanation: Amazon Simple Notification Service (Amazon SNS) is a fast, filexible, fully managed push messaging service. Amazon SNS makes it simple and cost-effective to push to mobile devices such as iPhone, iPad, Android, Kindle Fire, and internet connected smart devices, as well as pushing to other distributed services.
Reference: http://aws.amazon.com/sns/?nc1=h_I2_as

NEW QUESTION 3
Your firm has uploaded a large amount of aerial image data to 53 In the past, in your on-premises environment, you used a dedicated group of servers to oaten process this data and used Rabbit MOAn open source messaging system to get job information to the servers. Once processed the data would go to tape and be shipped offsite. Your manager told you to stay with the current design, and leverage AWS archival storage and messaging services to minimize cost. Which is correct?

• A. Use SOS for passing job messages use Cloud Watch alarms to terminate EC2 worker instances when they become idl
• B. Once data is processed, change the storage class of the 53 objects to Reduced Redundancy Storage.
• C. Setup Auto-Scaled workers triggered by queue depth that use spot instances to process messages in SOS Once data is processed,
• D. Change the storage class of the 53 objects to Reduced Redundancy Storag
• E. Setup Auto-Scaled workers triggered by queue depth that use spot instances to process messages in SOS Once data is processed, change the storage class of the 53 objects to Glacier.
• F. Use SNS to pass job messages use Cloud Watch alarms to terminate spot worker instances when they become idl
• G. Once data is processed, change the storage class of the 53 object to Glacier.

Answer: D

NEW QUESTION 4
Multi-AZ deployment _ supported for Microsoft SQL Server DB Instances.

• A. is not currently
• B. is as of 2013
• C. is planned to be in 2014
• D. will never be

Answer: A

NEW QUESTION 5
What is the maximum response time for a Business level Premium Support case?

• A. 120 seconds
• B. 1 hour
• C. 10 minutes
• D. 12 hours

Answer: B

NEW QUESTION 6
In Amazon AWS, which of the following statements is true of key pairs?

• A. Key pairs are used only for Amazon SDKs.
• B. Key pairs are used only for Amazon EC2 and Amazon CIoudFront.
• C. Key pairs are used only for Elastic Load Balancing and AWS IAM.
• D. Key pairs are used for all Amazon service

Answer: B

Explanation: Key pairs consist of a public and private key, where you use the private key to create a digital signature, and then AWS uses the corresponding public key to validate the signature. Key pairs are used only for Amazon EC2 and Amazon CIoudFront.
Reference: http://docs.aws.amazon.com/generaI/latest/gr/aws-sec-cred-types.html

NEW QUESTION 7
Security groups act like a firewall at the instance level, whereas _ are an additional layer of security that act at the subnet level.

• A. DB Security Groups
• B. VPC Security Groups
• C. network ACLs

Answer: C

NEW QUESTION 8
A customer has established an AWS Direct Connect connection to AWS. The link is up and routes are being advertised from the customer's end, however the customer is unable to connect from EC2 instances inside its VPC to servers residing in its datacenter.
Which of the following options provide a viable solution to remedy this situation? (Choose 2 answers)

• A. Add a route to the route table with an IPsec VPN connection as the target.
• B. Enable route propagation to the virtual pinnate gateway (VGW).
• C. Enable route propagation to the customer gateway (CGW).
• D. Modify the route table of all Instances using the 'route' command.
• E. Modify the Instances VPC subnet route table by adding a route back to the customer's on-premises environment.

Answer: AC

NEW QUESTION 9
What happens to data on an ephemeral volume of an EBS-backed EC2 instance if it is terminated or if it fails?

• A. Data is automatically copied to another volume.
• B. The volume snapshot is saved in S3.
• C. Data persists.
• D. Data is delete

Answer: D

Explanation: Any data on the instance store volumes persists as long as the instance is running, but this data is deleted when the instance is terminated or if it fails (such as if an underlying drive has issues). After an instance store-backed instance fails or terminates, it cannot be restored.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/RootDeviceStorage.htmI

NEW QUESTION 10
After deploying a new website for a client on AWS, he asks if you can set it up so that if it fails it can be automatically redirected to a backup website that he has stored on a dedicated server elsewhere. You are wondering whether Amazon Route 53 can do this. Which statement below is correct in regards to Amazon Route 53?

• A. Amazon Route 53 can't help detect an outag
• B. You need to use another service.
• C. Amazon Route 53 can help detect an outage of your website and redirect your end users to alternate locations.
• D. Amazon Route 53 can help detect an outage of your website but can't redirect your end users to alternate locations.
• E. Amazon Route 53 can't help detect an outage of your website, but can redirect your end users to alternate locations.

Answer: B

Explanation: With DNS Failover, Amazon Route 53 can help detect an outage of your website and redirect your end users to alternate locations where your application is operating properly.
Reference:
http://aws.amazon.com/about-aws/whats-new/2013/02/11/announcing-dns-faiIover-for-route-53/

NEW QUESTION 11
You are very concerned about security on your network because you have multiple programmers testing APIs and SDKs and you have no idea what is happening. You think C|oudTrai| may help but are not sure what it does. Which of the following statements best describes the AWS service CIoudTraiI?

• A. With AWS CIoudTraiI you can get a history of AWS API calls and related events for your account.
• B. With AWS CIoudTraiI you can get a history of IAM users for your account.
• C. With AWS CIoudTraiI you can get a history of S3 Iogfiles for your account.
• D. With AWS CIoudTraiI you can get a history of CIoudFormation JSON scripts used for your accoun

Answer: A

Explanation: With AWS CIoudTraiI, you can get a history of AWS API calls for your account, including API calls made via the AWS IV|anagement Console, the AWS SDKs, the command line tools, and higher-level AWS services. You can also identify which users and accounts called AWS APIs for services that support CIoudTraiI, the source IP address the calls were made from, and when the calls occurred.
You can identify which users and accounts called AWS for services that support CIoudTraiI, the source IP address the calls were made from, and when the calls occurred. You can integrate CIoudTraiI into applications using the API, automate trail creation for your organization, check the status of your trails, and control how administrators turn CIoudTraiI logging on and off.
Reference: http://docs.aws.amazon.com/awscloudtrail/latest/userguide/what_is_cIoud_traiI_top_IeveI.html

NEW QUESTION 12
What happens to the 1/0 operations while you take a database snapshot?

• A. 1/0 operations to the database are suspended for a few minutes while the backup is in progress.
• B. 1/0 operations to the database are sent to a Replica (if available) for a few minutes while the backup is in progress.
• C. 1/0 operations will be functioning normally
• D. 1/0 operations to the database are suspended for an hour while the backup is in progress

Answer: A

NEW QUESTION 13
Which of the following instance types are available as Amazon EBS-backed only? Choose 2 answers

• A. General purpose T2
• B. General purpose M3
• C. Compute-optimized C4
• D. Compute-optimized C3
• E. Storage-optimized 12

Answer: DE

NEW QUESTION 14
You log in to IAM on your AWS console and notice the following message. "Delete your root access keys." Why do you think IAM is requesting this?

• A. Because the root access keys will expire as soon as you log out.
• B. Because the root access keys expire after 1 week.
• C. Because the root access keys are the same for all users.
• D. Because they provide unrestricted access to your AWS resource

Answer: D

Explanation: In AWS an access key is required in order to sign requests that you make using the command-line interface (CLI), using the AWS SDKs, or using direct API calls. Anyone who has the access key for your root account has unrestricted access to all the resources in your account, including billing information. One of the best ways to protect your account is to not have an access key for your root account. We recommend that unless you must have a root access key (this is very rare), that you do not generate one. Instead, AWS best practice is to create one or more AWS Identity and Access Management (IAM) users, give them the necessary permissions, and use IAM users for everyday interaction with AWS.
Reference:
http://docs.aws.amazon.com/general/latest/gr/aws-access-keys-best-practices.htmI#root-password

NEW QUESTION 15
Which features can be used to restrict access to data in 53? Choose 2 answers

• A. Set an 53 ACL on the bucket or the object.
• B. Create a Cloud Front distribution for the bucket.
• C. Set an 53 bucket policy.
• D. Enable IAM Identity Federation
• E. Use 53 Virtua I Hosting

Answer: CD

Explanation: Reference:
http://docs.aws.amazon.com/AmazonCioudFront/latest/DeveIoperGuide/private-contentrestricting-access
-to-s3.html

NEW QUESTION 16
Which of the following are characteristics of a reserved instance? Choose 3 answers

• A. It can be migrated across Availability Zones
• B. It is specific to an Amazon Machine Image (AMI)
• C. It can be applied to instances launched by Auto Scaling
• D. It is specific to an instance Type
• E. It can be used to lower Total Cost of Ownership (TCO) of a system

Answer: CDE