AWS-Solution-Architect-Associate Amazon Exam Questions and Free Practice Test

Question 13

Amazon RDS automated backups and DB Snapshots are currently supported for only the _ _ storage engine

A. InnoDB

B. MyISAM

Correct Answer:A

Question 14

You receive a bill from AWS but are confused because you see you are incurring different costs for the exact same storage size in different regions on Amazon S3. You ask AWS why this is so. What response would you expect to receive from AWS?

A. We charge less in different time zones.

B. We charge less where our costs are less.

C. This will balance out next bill.

D. It must be a mistak

Correct Answer:B
Amazon S3 is storage for the internet. |t’s a simple storage service that offers software developers a highly-scalable, reliable, and low-latency data storage infrastructure at very low costs.
AWS charges less where their costs are less.
For example, their costs are lower in the US Standard Region than in the US West (Northern California) Region.
Reference: https://aws.amazon.com/s3/faqs/

Question 15

Which of the following are characteristics of a reserved instance? Choose 3 answers

A. It can be migrated across Availability Zones

B. It is specific to an Amazon Machine Image (AMI)

C. It can be applied to instances launched by Auto Scaling

D. It is specific to an instance Type

E. It can be used to lower Total Cost of Ownership (TCO) of a system

Correct Answer:CDE

Question 16

Do you need to shutdown your EC2 instance when you create a snapshot of EBS volumes that serve as root devices?

A. No, you only need to shutdown an instance before deleting it.

B. Yes

C. No, the snapshot would turn off your instance automatically.

D. No

Correct Answer:B
Yes, to create a snapshot for Amazon EBS volumes that serve as root devices, you should stop the instance before taking the snapshot.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-creating-snapshot.html

Question 17

You need to set up security for your VPC and you know that Amazon VPC provides two features that you can use to increase security for your VPC: security groups and network access control lists (ACLs). You have already looked into security groups and you are now trying to understand ACLs. Which statement below is incorrect in relation to ACLs?

A. Supports allow rules and deny rules.

B. Is stateful: Return traffic is automatically allowed, regardless of any rules.

C. Processes rules in number order when deciding whether to allow traffic.

D. Operates at the subnet level (second layer of defense).

Correct Answer:B
Amazon VPC provides two features that you can use to increase security for your VPC:
Security groups—Act as a firewall for associated Amazon EC2 instances, controlling both inbound and outbound traffic at the instance level
Network access control lists (ACLs)—Act as a firewall for associated subnets, controlling both inbound and outbound traffic at the subnet level
Security groups are stateful: (Return traffic is automatically allowed, regardless of any rules) Network ACLs are stateless: (Return traffic must be explicitly allowed by rules)
Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Security.html

Question 18

An AWS customer runs a public blogging website. The site users upload two million blog entries a month. The average blog entry size is 200 KB. The access rate to blog entries drops to negligible 6 months after publication and users rarely access a blog entry 1 year after publication. Additionally, blog entries have a high update rate during the first 3 months following publication, this drops to no updates after 6 months. The customer wants to use CIoudFront to improve his user's load times.
Which of the following recommendations would you make to the customer?

A. Duplicate entries into two different buckets and create two separate CIoudFront distributions where 53 access is restricted only to Cloud Front identity

B. Create a CIoudFront distribution with "US" Europe price class for US/ Europe users and a different CIoudFront distribution with AI I Edge Locations' for the remaining users.

C. Create a CIoudFront distribution with 53 access restricted only to the CIoudFront identity and partition the blog entry's location in 53 according to the month it was uploaded to be used with CIoudFront behaviors.

D. Create a CIoudFronI distribution with Restrict Viewer Access Forward Query string set to true and minimum TTL of 0.

Correct Answer:C

START AWS-Solution-Architect-Associate EXAM