AWS-Solution-Architect-Associate Amazon Exam Questions and Free Practice Test

Question 85

When you run a DB Instance as a Multi-AZ deployment, the " _ " serves database writes and reads

A. secondary

B. backup

C. stand by

D. primary

Correct Answer:D

Question 86

A web company is looking to implement an external payment service into their highly available application deployed in a VPC Their application EC2 instances are behind a public lacing ELB Auto scaling is used to add additional instances as traffic increases under normal load the application runs 2 instances in the
Auto Scaling group but at peak it can scale 3x in size. The application instances need to communicate with the payment service over the Internet which requires whitelisting of all public IP addresses used to communicate with it. A maximum of 4 whitelisting IP addresses are allowed at a time and can be added through an API.
How should they architect their solution?

A. Route payment requests through two NAT instances setup for High Availability and whitelist the Elastic IP addresses attached to the MAT instances.

B. Whitelist the VPC Internet Gateway Public IP and route payment requests through the Internet Gateway.

C. Whitelist the ELB IP addresses and route payment requests from the Application servers through the ELB.

D. Automatically assign public IP addresses to the application instances in the Auto Scaling group and run a script on boot that adds each instances public IP address to the payment validation whitelist API.

Correct Answer:D

Question 87

For which of the following use cases are Simple Workflow Service (SWF) and Amazon EC2 an appropriate solution? Choose 2 answers

A. Using as an endpoint to collect thousands of data points per hourfrom a distributed fileet of sensors

B. Managing a multi-step and multi-decision checkout process of an e-commerce website

C. Orchestrating the execution of distributed and auditable business processes

D. Using as an SNS (Simple Notification Service) endpoint to trigger execution of video transcoding jobs

E. Using as a distributed session store for your web application

Correct Answer:AB

Question 88

In AWS CIoudHSM, in addition to the AWS recommendation that you use two or more HSM appliances in a high-availability configuration to prevent the loss of keys and data, you can also perform a remote backup/restore of a Luna SA partition if you have purchased a:

A. Luna Restore HSNI.

B. Luna Backup HSM.

C. Luna HSNI.

D. Luna SA HSM.

Correct Answer:B
In AWS CIoudHSM, you can perform a remote backup/restore of a Luna SA partition if you have purchased a Luna Backup HSM.
Reference: http://docs.aws.amazon.com/cloudhsm/latest/userguide/cloud-hsm-backup-restore.html

Question 89

You have an EC2 Security Group with several running EC2 instances. You change the Security Group rules to allow inbound traffic on a new port and protocol, and launch several new instances in the same Security Group. The new rules apply:

A. Immediately to all instances in the security group.

B. Immediately to the new instances only.

C. Immediately to the new instances, but old instances must be stopped and restarted before the new rules apply.

D. To all instances, but it may take several minutes for old instances to see the change

Correct Answer:A

Question 90

A customer needs corporate IT governance and cost oversight of all AWS resources consumed by its dMsions. The dMsions want to maintain administrative control of the discrete AWS resources they consume and keep those resources separate from the resources of other dMsions. Which of the following options, when used together will support the autonomy/control of dMsions while enabling corporate IT to maintain governance and cost oversight? Choose 2 answers

A. Use AWS Consolidated Billing and disable AWS root account access for the child accounts.

B. Enable IAM cross-account access for all corporate IT administrators in each child account.

C. Create separate VPCs for each dMsion within the corporate IT AWS account.

D. Use AWS Consolidated Billing to link the dMsions' accounts to a parent corporate account.

E. Write all child AWS CIoudTraiI and Amazon CIoudWatch logs to each child account's Amazon 53 'Log'bucke

Correct Answer:DE

START AWS-Solution-Architect-Associate EXAM