04 September, 2020

Best Quality Amazon AWS-Certified-Solutions-Architect-Professional Answers Online

Want to know Pass4sure AWS-Certified-Solutions-Architect-Professional Exam practice test features? Want to lear more about Amazon Amazon AWS Certified Solutions Architect Professional certification experience? Study Download Amazon AWS-Certified-Solutions-Architect-Professional answers to Rebirth AWS-Certified-Solutions-Architect-Professional questions at Pass4sure. Gat a success with an absolute guarantee to pass Amazon AWS-Certified-Solutions-Architect-Professional (Amazon AWS Certified Solutions Architect Professional) test on your first attempt.

Amazon AWS-Certified-Solutions-Architect-Professional Free Dumps Questions Online, Read and Test Now.

Page: 1 / 33

Total 398 questions Full Exam Access

Question 1

Your firm has uploaded a large amount of aerial image data to S3 In the past, in your on-premises environment, you used a dedicated group of servers to oaten process this data and used Rabbit MQ - An open source messaging system to get job information to the servers. Once processed the data would go to tape and be shipped offsite. Your manager told you to stay with the current design, and leverage AWS archival storage and messaging services to minimize cost. Which is correct?

Use SQS for passing job messages use Cloud Watch alarms to terminate EC2 worker instances when they become idl

Once data is processed, change the storage class of the S3 objects to Reduced Redundancy Storage.

Setup Auto-Scaled workers triggered by queue depth that use spot instances to process messages in SOS Once data is processed,

Change the storage class of the S3 objects to Reduced Redundancy Storag

Setup Auto-Scaled workers triggered by queue depth that use spot instances to process messages in SOS Once data is processed, change the storage class of the S3 objects to Glacier.

Use SNS to pass job messages use Cloud Watch alarms to terminate spot worker instances when they become idl

Once data is processed, change the storage class of the S3 object to Glacier.

Question 2

Which of the following statements is correct about the number of security groups and rules applicable for an EC2-Classic instance and an EC2-VPC network interface?

In EC2-Classic, you can associate an instance with up to 5 security groups and add up to 50 rules to a security grou

In EC2-VPC, you can associate a network interface with up to 500 security groups and add up to 100 rules to a security group.

In EC2-Classic, you can associate an instance with up to 500 security groups and add up to 50 rules to a security grou

In EC2-VPC, you can associate a network interface with up to 5 security groups and add up to 100 rules to a security group.

In EC2-Classic, you can associate an instance with up to 5 security groups and add up to 100 rules to a security grou

In EC2-VPC, you can associate a network interface with up to 500 security groups and add up to 50 rules to a security group.

In EC2-Classic, you can associate an instance with up to 500 security groups and add up to 100 rules to a security grou

In EC2-VPC, you can associate a network interface with up to 5 security groups and add up to 50 rules to a security group.

Question 3

An organization has created multiple components of a single application for compartmentalization. Currently all the components are hosted on a single EC2 instance. Due to security reasons the organization wants to implement two separate SSLs for the separate modules although it is already using VPC. How can the organization achieve this with a single instance?

You have to launch two instances each in a separate subnet and allow VPC peering for a single IP.

Create a VPC instance which will have multiple network interfaces with multiple elastic IP addresses.

Create a VPC instance which will have both the ACL and the security group attached to it and have separate rules for each IP address.

Create a VPC instance which will have multiple subnets attached to it and each will have a separate IP address.

Question 4

The MySecureData company has five branches across the globe. They want to expand their data centers such that their web server will be in the AWS and each branch would have their own database in the local data center. Based on the user login, the company wants to connect to the data center. How can MySecureData company implement this scenario with the AWS VPC?

Create five VPCs with the public subnet for the app server and setup the VPN gateway for each VPN to connect them indMdually.

Use the AWS VPN CIoudHub to communicate with multiple VPN connections.

Use the AWS CIoudGateway to communicate with multiple VPN connections.

It is not possible to connect different data centers from a single VPC.

Question 5

What is the maximum length for an instance profile name in AWS IAM?

512 characters

128 characters

1024 characters

64 characters

Question 6

A corporate web application is deployed within an Amazon Virtual Private Cloud (VPC) and is connected to the corporate data center via an IPSec VPN. The application must authenticate against the
on-premises LDAP server. After authentication, each logged-in user can only access an Amazon Simple Storage Space (S3) keyspace specific to that user.
Which two approaches can satisfy these objectives? (Choose 2 answers)

Develop an identity broker that authenticates against IAM security Token service to assume a IAM role in order to get temporary AWS security credentials The application calls the identity broker to get AWS temporary security credentials with access to the appropriate S3 bucket.

The application authenticates against LDAP and retrieves the name of an IAM role associated with the use

The application then calls the IAM Security Token Service to assume that IAM rol

The application can use the temporary credentials to access the appropriate S3 bucket.

Develop an identity broker that authenticates against LDAP and then calls IAM Security Token Service to get IAM federated user credential

The application calls the identity broker to get IAM federated user credentials with access to the appropriate S3 bucket.

The application authenticates against LDAP the application then calls the AWS identity and AccessManagement (IAM) Security service to log in to IAM using the LDAP credentials the application can use the IAM temporary credentials to access the appropriate S3 bucket.

The application authenticates against IAM Security Token Service using the LDAP credentials the application uses those temporary AWS security credentials to access the appropriate S3 bucket.

Question 7

You create a VPN connection, and your VPN device supports Border Gateway Protocol (BGP). Which of the following should be specified to configure the VPN connection?

Classless routing

Classfull routing

Dynamic routing

Static routing

Question 8

You are responsible for a legacy web application whose server environment is approaching end of life You would like to migrate this application to AWS as quickly as possible, since the application environment currently has the following limitations:
The VM's single 10GB VNIDK is almost full; Nle virtual network interface still uses the 10IV|bps driver, which leaves your 100Mbps WAN connection completely underutilized;
It is currently running on a highly customized. Windows VM within a VMware environment; You do not have me installation media;
This is a mission critical application with an RTO (Recovery Time Objective) of 8 hours. RPO (Recovery Point Objective) of 1 hour. How could you best migrate this application to AWS while meeting your business continuity requirements?

Use the EC2 VM Import Connector for vCenter to import the VNI into EC2.

Use Import/Export to import the VNI as an ESS snapshot and attach to EC2.

Use S3 to create a backup of the VM and restore the data into EC2.

Use me ec2-bundle-instance API to Import an Image of the VNI into EC2

Question 9

A company is running a batch analysis every hour on their main transactional DB, running on an RDS MySQL instance, to populate their central Data Warehouse running on Redshift. During the execution of the batch, their transactional applications are very slow. When the batch completes they need to update the top management dashboard with the new data. The dashboard is produced by another system running on-premises that is currently started when a manually-sent email notifies that an update is required. The on-premises system cannot be modified because is managed by another team.
How would you optimize this scenario to solve performance issues and automate the process as much as possible?

Replace RDS with Redshift for the batch analysis and SNS to notify the on-premises system to update the dashboard

Replace RDS with Redshift for the oaten analysis and SQS to send a message to the on-premises system to update the dashboard

Create an RDS Read Replica for the batch analysis and SNS to notify me on-premises system to update the dashboard

Create an RDS Read Replica for the batch analysis and SQS to send a message to the on-premises system to update the dashboard.

Question 10

Which of the following are characteristics of Amazon VPC subnets? Choose 2 answers

Each subnet spans at least 2 Availability Zones to provide a high-availability environment.

Each subnet maps to a single Availability Zone.

CIDR block mask of /25 is the smallest range supported.

By default, all subnets can route between each other, whether they are private or public.

Instances in a private subnet can communicate with the Internet only if they have an Elastic I

Question 11

In Amazon EIastiCache, which of the following statements is correct?

When you launch an EIastiCache cluster into an Amazon VPC private subnet, every cache node is assigned a public IP address within that subnet.

You cannot use EIastiCache in a VPC that is configured for dedicated instance tenancy.

If your AWS account supports only the EC2-VPC platform, E|astiCache will never launch your cluster in a VPC.

EIastiCache is not fully integrated with Amazon Virtual Private Cloud (VPC).

Question 12

Your company is in the process of developing a next generation pet collar that collects biometric information to assist families with promoting healthy lifestyles for their pets Each collar will push 30kb of biometric data In JSON format every 2 seconds to a collection platform that will process and analyze the data providing health trending information back to the pet owners and veterinarians via a web portal Nlanagement has tasked you to architect the collection platform ensuring the following requirements are met.
Provide the ability for real-time analytics of the inbound biometric data Ensure processing of the biometric data is highly durable. Elastic and parallel The results of the analytic processing should be persisted for data mining
Which architecture outlined below win meet the initial requirements for the collection platform?

Utilize S3 to collect the inbound sensor data analyze the data from S3 with a daily scheduled Data Pipeline and save the results to a Redshift Cluster.

Utilize Amazon Kinesis to collect the inbound sensor data, analyze the data with Kinesis clients and save the results to a Redshift cluster using EMR.

Utilize SQS to collect the inbound sensor data analyze the data from SQS with Amazon Kinesis and save the results to a Microsoft SQL Server RDS instance.

Utilize EMR to collect the inbound sensor data, analyze the data from EUR with Amazon Kinesis and save me results to DynamoDB.

Question 13

How can an EBS volume that is currently attached to an EC2 instance be migrated from one Availability Zone to another?

Detach the volume and attach it to another EC2 instance in the other AZ.

Simply create a new volume in the other AZ and specify the original volume as the source.

Create a snapshot of the volume, and create a new volume from the snapshot in the other AZ.

Detach the volume, then use the ec2-migrate-voiume command to move it to another AZ.

Question 14

Your company plans to host a large donation website on Amazon Web Sewices (AWS). You anticipate a large and undetermined amount of traffic that will create many database writes. To be certain that you do not drop any writes to a database hosted on AWS. Which sewice should you use?

Amazon RDS with provisioned IOPS up to the anticipated peak write throughput.

Amazon Simple Queue Service (SQS) for capturing the writes and draining the queue to write to the database.

Amazon EIastiCache to store the writes until the writes are committed to the database.

Amazon DynamoDB with provisioned write throughput up to the anticipated peak write throughpu

Question 15

A customer is deploying an SSL enabled web application to AWS and would like to implement a separation of roles between the EC2 service administrators that are entitled to login to instances as well as making API calls and the security officers who will maintain and have exclusive access to the appIication’s X.509 certificate that contains the private key.

Upload the certificate on an S3 bucket owned by the security officers and accessible only by EC2 Role of the web servers.

Configure the web servers to retrieve the certificate upon boot from an CIoudHSM is managed by the security officers.

Configure system permissions on the web servers to restrict access to the certificate only to the authority security officers

Configure IAM policies authorizing access to the certificate store only to the security officers and terminate SSL on an ELB.

Question 16

A user has created a VPC with public and private subnets using the VPC wizard. The VPC has CIDR 20.0.0.0/16. The private subnet uses CIDR 20.0.0.0/24 . The NAT instance ID is i-a12345. Which of the below mentioned entries are required in the main route table attached with the private subnet to allow instances to connect with the internet?

Destination: 20.0.0.0/0 and Target: 80

Destination: 20.0.0.0/0 and Target: i-a12345

Destination: 20.0.0.0/24 and Target: i-a12345

Destination: 0.0.0.0/0 and Target: i-a12345

Question 17

IAM users do not have permission to create Temporary Security Credentials for federated users and roles by default. In contrast, IAM users can call without the need of any special permissions

GetSessionName

GetFederationToken

GetSessionToken

GetFederationName

Question 18

One of your AWS Data Pipeline actMties has failed consequently and has entered a hard failure state after retrying thrice. You want to try it again. Is it possible to increase the number of automatic retries to more than thrice?

Yes, you can increase the number of automatic retries to 6.

Yes, you can increase the number of automatic retries to indefinite number.

No, you cannot increase the number of automatic retries.

Yes, you can increase the number of automatic retries to 10.

Question 19

If a single condition within an IAM policy includes multiple values for one key, it will be evaluated using a logical .

NAND

NOR

AND

Question 20

True or False: In Amazon EIastiCache replication groups of Redis, for performance tuning reasons, you can change the roles of the cache nodes within the replication group, with the primary and one of the replicas exchanging roles.

True, however, you get lower performance.

FALSE

TRUE

False, you must recreate the replication group to improve performance tunin

Question 21

You need a persistent and durable storage to trace call actMty of an IVR (Interactive Voice Response) system. Call duration is mostly in the 2-3 minutes timeframe. Each traced call can be either active or terminated. An external application needs to know each minute the list of currently active calls. Usually there are a few calls/second, but once per month there is a periodic peak up to 1000 calls/second for a few hours. The system is open 24/7 and any downtime should be avoided. Historical data is periodically archived to files. Cost saving is a priority for this project.
What database implementation would better fit this scenario, keeping costs as low as possible?

Use DynamoDB with a "CaIIs" table and a Global Secondary Index on a "State" attribute that can equal to "active" or "terminated". In this way the Global Secondary Index can be used for all items in the table.

Use RDS Multi-AZ with a "CALLS" table and an indexed "STATE" field that can be equal to "ACT|VE"or \'TERMINATED". In this way the SQL query is optimized by the use of the Index.

Use RDS Nlulti-AZ with two tables, one for "ACT|VE_CALLS" and one for "TERMINATED_CALLS". In this way the "ACTIVE_CALLS" table is always small and effective to access.

Use DynamoDB with a "CaIIs" table and a Global Secondary Index on a "Is Active" attribute that is present for active calls onl

In this way the Global Secondary Index is sparse and more effective.

Question 22

Which of the following is NOT an advantage of using AWS Direct Connect?

AWS Direct Connect provides users access to public and private resources by using two different connections while maintaining network separation between the public and private environments.

AWS Direct Connect provides a more consistent network experience than Internet-based connections.

AWS Direct Connect makes it easy to establish a dedicated network connection from your premises to AWS.

AWS Direct Connect reduces your network cost

Question 23

Your system recently experienced down time during the troubleshooting process. You found that a new administrator mistakenly terminated several production EC2 instances.
Which of the following strategies will help prevent a similar situation in the future? The administrator still must be able to:
launch, start stop, and terminate development resources. launch and start production instances.

Create an IAM user, which is not allowed to terminate instances by leveraging production EC2 termination protection.

Leverage resource based tagging, along with an IAM user which can prevent specific users from terminating production, EC2 resources.

Leverage EC2 termination protection and multi-factor authentication, which together require users to authenticate before terminating EC2 instances

Create an IAM user and apply an IAM role which prevents users from terminating production EC2 instances.

Question 24

Refer to the architecture diagram above of a batch processing solution using Simple Queue Service (SQS) to set up a message queue between EC2 instances which are used as batch processors Cloud Watch monitors the number of Job requests (queued messages) and an Auto Scaling group adds or deletes batch sewers automatically based on parameters set in Cloud Watch alarms. You can use this architecture to implement which of the following features in a cost effective and efficient manner?

Reduce the overall lime for executing jobs through parallel processing by allowing a busy EC2 instance that receives a message to pass it to the next instance in a daisy-chain setup.

Implement fault tolerance against EC2 instance failure since messages would remain in SQS and worn can continue with recovery of EC2 instances implement fault tolerance against SQS failure by backing up messages to S3.

Implement message passing between EC2 instances within a batch by exchanging messages throughSQS.

Coordinate number of EC2 instances with number of job requests automatically thus Improving cost effectiveness.

Handle high priority jobs before lower priority jobs by assigning a priority metadata field to SQS messages.

Question 25

A web-startup runs its very successful social news application on Amazon EC2 with an Elastic Load Balancer, an Auto-Scaling group of Java/Tomcat application-servers, and DynamoDB as data store. The main web-application best runs on m2 x large instances since it is highly memory- bound Each new deployment requires semi-automated creation and testing of a new AMI for the application servers which takes quite a while ana is therefore only done once per week.
Recently, a new chat feature has been implemented in nodejs and wails to be integrated in the architecture. First tests show that the new component is CPU bound Because the company has some experience with using Chef, they decided to streamline the deployment process and use AWS Ops Works as an application life cycle tool to simplify management of the application and reduce the deployment cycles.
What configuration in AWS Ops Works is necessary to integrate the new chat module in the most cost-efficient and filexible way?

Create one AWS OpsWorks stack, create one AWS Ops Works layer, create one custom recipe

Create one AWS OpsWorks stack create two AWS Ops Works layers, create one custom recipe

Create two AWS OpsWorks stacks create two AWS Ops Works layers, create one custom recipe

Create two AWS OpsWorks stacks create two AWS Ops Works layers, create two custom recipe

Question 27

Your startup wants to implement an order fulfillment process for selling a personalized gadget that needs an average of 3-4 days to produce with some orders taking up to 6 months you expect 10 orders per day on your first day. 1000 orders per day after 6 months and 10,000 orders after 12 months.
Orders coming in are checked for consistency men dispatched to your manufacturing plant for production quality control packaging shipment and payment processing If the product does not meet the quality standards at any stage of the process employees may force the process to repeat a step Customers are notified via email about order status and any critical issues with their orders such as payment failure.
Your case architecture includes AWS Elastic Beanstalk for your website with an RDS MySQL instance for customer data and orders.
How can you implement the order fulfillment process while making sure that the emails are delivered reliably?

Add a business process management application to your Elastic Beanstalk app sewers and re-use the ROS database for tracking order status use one of the Elastic Beanstalk instances to send emails to customers.

Use SWF with an Auto Scaling group of actMty workers and a decider instance in another Auto Scaling group with min/max=1 Use the decider instance to send emails to customers.

Use SWF with an Auto Scaling group of actMty workers and a decider instance in another Auto Scaling group with min/max=1 use SES to send emails to customers.

Use an SQS queue to manage all process tasks Use an Auto Scaling group of EC2 Instances that poll the tasks and execute the

Use SES to send emails to customers.

Question 28

Your company has recently extended its datacenter into a VPC on AVVS to add burst computing capacity as needed Members of your Network Operations Center need to be able to go to the AWS Management Console and administer Amazon EC2 instances as necessary You don't want to create new IAM users for each NOC member and make those users sign in again to the AWS Management Console Which option below will meet the needs for your NOC members?

Use OAuth 2 0 to retrieve temporary AWS security credentials to enable your NOC members to sign in to the AWS Management Console.

Use web Identity Federation to retrieve AWS temporary security credentials to enable your NOC members to sign in to the AWS IV|anagement Console.

Use your on-premises SAML 2.0-compliant identity provider (IDP) to grant the NOC members federated access to the AWS Management Console via the AWS single sign-on (SSO) endpoint.

Use your on-premises SAML 2.0-compliam identity provider (IDP) to retrieve temporary security credentials to enable NOC members to sign in to the AWS Management Console.

Question 29

An organization is having a VPC for the HR department, and another VPC for the Admin department. The HR department requires access to all the instances running in the Admin VPC while the Admin department requires access to all the resources in the HR department. How can the organization setup
this scenario?

Setup VPC peering between the VPCs of Admin and HR.

Setup ACL with both VPCs which will allow traffic from the CIDR of the other VPC.

Setup the security group with each VPC which allows traffic from the CIDR of another VPC.

It is not possible to connect resources of one VPC from another VPC.

Question 30

An organization is setting up RDS for their applications. The organization wants to secure RDS access with VPC. Which of the following options is not required while designing the RDS with VPC?

The organization must create a subnet group with public and private subnet

Both the subnets can be in the same or separate AZ.

The organization should keep minimum of one IP address in each subnet reserved for RDS failover.

If the organization is connecting RDS from the internet it must enable the VPC attributes DNS hostnames and DNS resolution.

The organization must create a subnet group with VPC using more than one subnet which are a part of separate AZs.

Page: 1 / 33

Total 398 questions Full Exam Access