AWS-Solution-Architect-Associate Amazon Exam Questions and Free Practice Test

Question 43

You're trying to delete an SSL certificate from the IAM certificate store, and you're getting the message "Certificate: is being used by CIoudFront." Which of the following statements is probably the reason why you are getting this error?

A. Before you can delete an SSL certificate, you need to either rotate SSL certificates or revert from using a custom SSL certificate to using the default CIoudFront certificate.

B. You can't delete SSL certificates . You need to request it from AWS.

C. Before you can delete an SSL certificate, you need to set up the appropriate access level in IAM

D. Before you can delete an SSL certificate you need to set up https on your serve

Correct Answer:A
CIoudFront is a web service that speeds up distribution of your static and dynamic web content, for example, .htmI, .css, .php, and image files, to end users.
Every CIoudFront web distribution must be associated either with the default CIoudFront certificate or with a custom SSL certificate. Before you can delete an SSL certificate, you need to either rotate SSL certificates (replace the current custom SSL certificate with another custom SSL certificate) or revert from using a custom SSL certificate to using the default CIoudFront certificate.
Reference: http://docs.aws.amazon.com/AmazonCIoudFront/latest/Deve|operGuide/Troubleshooting.htm|

Question 44

Select the correct statement: Within Amazon EC2, when using Linux instances, the device name
/dev/sda1 is .

A. reserved for EBS volumes

B. recommended for EBS volumes

C. recommended for instance store volumes

D. reserved for the root device

Correct Answer:D
Within Amazon EC2, when using a Linux instance, the device name /dev/sda1 is reserved for the root device.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/device_naming.htmI

Question 45

After setting up an EC2 security group with a cluster of 20 EC2 instances, you find an error in the security group settings. You quickly make changes to the security group settings. When will the changes to the settings be effective?

A. The settings will be effective immediately for all the instances in the security group.

B. The settings will be effective only when all the instances are restarted.

C. The settings will be effective for all the instances only after 30 minutes.

D. The settings will be effective only for the new instances added to the security grou

Correct Answer:A
Amazon Redshift applies changes to a cluster security group immediately. So if you have associated the cluster security group with a cluster, inbound cluster access rules in the updated cluster security group apply immediately.
Reference: http://docs.aws.amazon.com/redshift/latest/mgmt/working-with-security-groups.htm|

Question 46

Are you able to integrate a multi-factor token service with the AWS Platform?

A. Yes, using the AWS multi-factor token devices to authenticate users on the AWS platform.

B. No, you cannot integrate multi-factor token devices with the AWS platform.

C. Yes, you can integrate private multi-factor token devices to authenticate users to the AWS platfor

Correct Answer:A

Question 47

Which of the following would you use to list your AWS Import/Exportjobs?

A. Amazon RDS

B. AWS Import/Export Web Service Tool

C. Amazon S3 REST API

D. AWS Elastic Beanstalk

Correct Answer:C
You can list AWS Import/Export jobs with the ListJobs command using the command line client or REST API.
Reference: http://docs.aws.amazon.com/AWSImportExport/latest/DG/ListingYourJobs.html

Question 48

You are tasked with setting up a Linux bastion host for access to Amazon EC2 instances running in your VPC. Only clients connecting from the corporate external public IP address 72.34.51.100 should have SSH access to the host. Which option will meet the customer requirement?

A. Security Group Inbound Rule: Protocol - TC

B. Port Range- 22, Source 72.34.51. 100/32

C. Security Group Inbound Rule: Protocol - UDP, Port Range- 22, Source 72.34.51.100/32

D. Network ACL Inbound Rule: Protocol - UDP, Port Range- 22, Source 72.34.51.100/32

E. Network ACL Inbound Rule: Protocol - TCP, Port Range-22, Source 72.34.51.100/0

Correct Answer:A

START AWS-Solution-Architect-Associate EXAM