AWS Solutions Architecture Associate Practice Questions Part 3

My Read Replica appears “stuck” after a Multi-AZ failover and is unable to obtain or apply updates from the source DB instance. What do I do?

Does AWS allow for the use of Multi Factor Authentication tokens?

Which AWS services that you can access to underlying host?
Multiple choice

If I have multiple Read Replicas for my master DB Instance and I promote one of them, what happens to the rest of the Read Replicas?

When working with Amazon RDS, by default AWS is responsible for implementing which two management-related activities? (Pick 2 correct answers)

You maintain an application on AWS to provide development and test platforms for your developers. Currently both environments consist of an m1.small EC2 instance. Your developers notice performance degradation as they increase network load in the test environment?
How would you mitigate these performance issues in the test environment?

Per the AWS Acceptable Use Policy, penetration testing of EC2 instances :

You have been tasked with identifying an appropriate storage solution for a NoSQL database that requires random I/O reads of greater than 100,000 4kB IOPS
Which EC2 option will meet this requirement?

Instance A and Instance B are running in two different subnets A and B of a VPC. Instance A is not able to ping instance B.
What are two possible reasons for this? (Pick 2 correct answers)

Your web site is hosted on 10 EC2 instances in 5 regions around the globe with 2 instances per region.
How could you configure your site to maintain site availability with minimum downtime if one of the 5 regions was to lose network connectivity for an extended period of time?

You run a stateless web application with the following components: Elastic Load Balancer (ELB), 3 Web/Application servers on EC2, and 1 MySQL RDS database with 5000 Provisioned IOPS. Average response time for users is increasing. Looking at CloudWatch, you observer 95% CPU usage on the Web/Application servers and 20% CPU usage on the database. The average number of database disk operations varies between 2000 and 2500.
Which two options could improve response times? (Pick 2 correct answer)

Which features can be used to restrict access to data in S3? (Pick 2 correct answers)

You need to establish a backup and archiving strategy for your company using AWS. Documents should be immediately accessible for 3 months and available for 5 years for compliance reasons.

Which AWS service fulfills these requirements in the most cost effective way?

Amazon Glacier is designed for: (Choose 2 answers)

Your web application front end consists of multiple EC2 instances behind an Elastic Load Balancer. You configured ELB to perform health checks on these EC2 instances. If an instance fails to pass health checks, which statement will be true?

You are building a system to distribute confidential training videos to employees. Using CloudFront, what method could be used to serve content that is stored in S3, but not publically accessible from S3 directly?

Which of the following will occur when an EC2 instance in a VPC (Virtual Private Cloud) with an associated Elastic IP is stopped and started? (Choose 2 answers)

In the basic monitoring package for EC2, Amazon CloudWatch provides the following metrics:

Which is an operational process performed by AWS for data security?

Which of the following statements about SQS is true?

You are architecting a highly-scalable and reliable web application which will have a huge amount of content .You have decided to use Cloudfront as you know it will speed up distribution of your static and dynamic web content and know that Amazon CloudFront integrates with Amazon CloudWatch metrics so that you can monitor your web application. Because you live in Sydney you have chosen the the Asia Pacific (Sydney) region in the AWS console. However you have set up this up but no CloudFront metrics seem to be appearing in the CloudWatch console. What is the most likely reason from the possible choices below for this?

A lot of your companies data is stored on Amazon Glacier as most of your data is not accessed often and for which retrieval times of several hours are suitable. However someone within your organisation has expressed concerns that his data is even more sensitive than all of your other data and is wondering whether the high level of encryption that he knows is on S3 is also used on Glacier as it is a much cheaper service. Which of the following statements would be most applicable in regards to this concern?

You have multiple VPN connections and want to provide secure communication between sites using the AWS VPN CloudHub. Which statement is the most accurate in describing what you must do to set this up correctly?

You have started to use AWS Elastic Beanstalk to quickly deploy and manage applications in the AWS cloud. Again you start to wonder if you are being charged for this service? What is AWS’s billing policy for AWS Elastic Beanstalk?

You are setting up some IAM user policies and have also become aware that some services support resource-based permissions, which let you attach policies to the service’s resources instead of to IAM users or groups. Which of the below statements is true in regards to resource-level permissions?

An application hosted at the EC2 instance receives an HTTP request from ELB. The same request has an X-Forwarded-For header, which has three IP addresses. Which systems IP will be a part of this header?

You need to import several hundred megabytes of data from a local Oracle database to an Amazon RDS DB instance. What does AWS recommend to use to accomplish this?

You have just discovered that you can upload your objects to Amazon S3 using Multipart Upload API. You start to test it out and but are unsure of the benefits that it would provide. Which of the following is not a benefit of using multipart uploads?

How do you secure company critical data on S3  ? (choose 4 correct answers)

How to secure data on rest in EBS ?

You have a photo selling website where you have a library of photos on S3. You noticed that there are some websites that are showing the link to your S3 photos. How do you restrict sites like these using your S3 photos link ?

How do you ensure that the data has been saved properly in S3 ?

In which of the following cases should you use SQS – Simple
Queue Service (chose 2 correct answers)

How do you ensure that the data has been saved properly in S3 ?
(chose 1 correct answers)

You are running an application on an EC2 and now you want to
add another EC2 for your application that requires a high bandwidth
connect with the existing EC2. Where should you launch your EC2 in
this case ? (chose 1 correct answers)

Where should you use SWF – Simple Workflow Service ? (chose 2 correct answers)

What services are required for Auto Scaling  ? (chose 2 correct answers)

Which of the following AWS services facilitate the implementation of loosely coupled architectures? (choose 2) 

Your web service has a performance SLA to respond to requests in < 1 second. Under normal and heavy operations. distributing requests over four instances meets this SLA. What architecture ensures high availability and fault-tolerant operation of your service if an AZ becomes unreachable ?

A cell phone company is running dynamic-content television commercials for a contest. They want their website to handle traffic spikes that come after a commercial airs. The website is interactive, offering personalized content to each visitor based on location. purchase history. and the current commercial airing. Which architecture will configure Auto Scaling to scale out to respond to spikes of demand. while minimizing costs during quiet periods?

For an application running in ap-northeast-1 with three Availability Zones ( ap-northeast-la , ap-northeast-1b , and ap-northeast-1c ) . which instance deployment provides high availability for the application that normally requires nine running Amazon EC2 instances but can run on a minimum of 65% capacity while Auto Scaling launches replacement instances in the remaining Availability Zones?

Which of the following are characteristics of the Auto Scaling service on AWS? (choose 3)

An Amazon EC2 instance is launched. and an Elastic IP address (EIP) is associated with the instance. How can an application running on the Amazon EC2 instance determine the instance’s new public DNS name?

What happens to an Amazon RDS multi-AZ deployment if the primary DB instance fails? (choose 3)

To maximize I/O throughput and consistency on an Amazon EC2 instance running a database on several Amazon EBS volumes. you should deploy using: (choose 2)

Your AWS Account Administrator left your company today The Administrator had access to the Master account and a personal IAM Administrator account. With these accounts he generated other IAM accounts and keys. Which of the following should you do today to protect your AWS infrastructure? (Choose 3)

You have deployed an instance in a subnet in your VPC. What steps below will allow access to Amazon

Your company has confidential information that, according to security policies, must be stored in an encrypted format Which of the following services provide an encryption feature? (Choose 3)

Which of the following actions can be controlled with IAM policies? (Choose 3)

You have a publicly facing web application where users self-register to sign up for an account. The account shares static objects with authenticated users of your application You want to store this content on Amazon S3 and make it available only to properly authorized users over the web. What is the most cost-effective and performant method for achieving this?

You have an existing VPC with the default routing table. and several Linux instances running a single subnet. You launch a Windows instance from an Amazon-provided AMI in the same subnet. using the same security group. The Windows instance is running. but you cannot connect to it via RDP. However, you can connect to the Linux instances via SSH, and from there can successfully ping the Windows instance. What is the likely problem?

You have just discovered that you can upload your objects to Amazon S3 using Multipart Upload API. You start to test it out and but are unsure of the benefits that it would provide. Which of the following is not a benefit of using multipart uploads?

One of the criteria for a new deployment is that the customer wants to use AWS Storage Gateway. However you are not sure whether you should use gateway-cached volumes or gateway-stored volumes or even what the differences are. Which statement below best describes those differences?

A user is assigning an elastic IP to an instance when the instance is booted. The user is running AWS CLI inside instance to assign the IP. The AWS CLI requires the AWS credentials to execute the action. Which of the below mentioned options is a possible solution to achieve the above task without compromising on the AWS credentials security?

You need to set up security for your VPC and you know that Amazon VPC provides two features that you can use to increase security for your VPC. Security groups and Network access control lists (ACLs). You start to look into Security groups first. Which statement below is incorrect in relation to Security groups?

After setting up a data streaming service for a media corporation they are complaining about their data limits being exceeded so you begin to investigate. What happens if the capacity limits of an Amazon Kinesis stream are exceeded while the data producer puts data into the stream?

As AWS grows most of of your clients main concerns seem to be about security especially when all of their competitors seem to be using AWS also. Consequently one of your clients asks you if one of your competitors EC2 instances are on the same physical host would that make it easier for them to hack into your data. Which of the following statements would be the best choice to put your clients mind at rest?

You configured ELB to perform health checks on EC2 instances. If
an instance fails to pass health checks, which statement will be true?
(chose 1 correct answers)

What are the characteristics of Dynamo DB ? (chose 3 correct answers)

You have a business critical application that requires it to be
highly available with 6 instances always running. What should you do
to achieve this ? (chose 3 correct answers)