AWS-Solution-Architect-Associate Amazon Exam Questions and Free Practice Test

Question 91

A web company is looking to implement an intrusion detection and prevention system into their deployed VPC. This platform should have the ability to scale to thousands of instances running inside of the VPC, How should they architect t heir solution to achieve these goals?

A. Configure an instance with monitoring software and the elastic network interface (ENI) set to promiscuous mode packet sniffing to see an traffic across the VPC,

B. Create a second VPC and route all traffic from the primary application VPC through the second VPC where the scalable virtualized IDS/IPS platform resides.

C. Configure servers running in the VPC using the host-based 'route' commands to send all traffic through the platform to a scalable virtualized IDS/IPS.

D. Configure each host with an agent that collects all network traffic and sends that traffic to the IDS/IPS platform for inspection.

Correct Answer:C

Question 92

Does Amazon RDS for SQL Server currently support importing data into the msdb database'?

A. No

B. Yes

Correct Answer:A

Question 93

AWS Identity and Access Management is a web service that enables Amazon Web Services (AWS) customers to manage users and user permissions in AWS. In addition to supporting IAM user policies, some services support resource-based permissions. Which of the following services are supported by
resource-based permissions?

A. Amazon SNS, and Amazon SQS and AWS Direct Connect.

B. Amazon S3 and Amazon SQS and Amazon EIastiCache.

C. Amazon S3, Amazon SNS, Amazon SQS, Amazon Glacier and Amazon EBS.

D. Amazon Glacier, Amazon SNS, and Amazon CIoudWatch

Correct Answer:C
In addition to supporting IAM user policies, some services support resource-based permissions, which let you attach policies to the service's resources instead of to IAM users or groups. Resource-based permissions are supported by Amazon S3, Amazon SNS, Amazon SQS, Amazon Glacier and Amazon EBS.
Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/Using_SpecificProducts.htm|

Question 94

Amazon EC2 has no Amazon Resource Names (ARNs) because you can't specify a particular Amazon EC2 resource in an IAM policy.

A. TRUE

B. FALSE

Correct Answer:A

Question 95

Making your snapshot public shares all snapshot data with everyone. Can the snapshots with AWS Market place product codes be made public?

A. No

B. Yes

Correct Answer:B

Question 96

What happens to the 1/0 operations while you take a database snapshot?

A. 1/0 operations to the database are suspended for a few minutes while the backup is in progress.

B. 1/0 operations to the database are sent to a Replica (if available) for a few minutes while the backup is in progress.

C. 1/0 operations will be functioning normally

D. 1/0 operations to the database are suspended for an hour while the backup is in progress

Correct Answer:A

START AWS-Solution-Architect-Associate EXAM