09 July, 2021

What Pinpoint AWS-Solution-Architect-Associate Study Guide Is

Examcollection AWS-Solution-Architect-Associate Questions are updated and all AWS-Solution-Architect-Associate answers are verified by experts. Once you have completely prepared with our AWS-Solution-Architect-Associate exam prep kits you will be ready for the real AWS-Solution-Architect-Associate exam without a problem. We have Replace Amazon AWS-Solution-Architect-Associate dumps study guide. PASSED AWS-Solution-Architect-Associate First attempt! Here What I Did.

Online AWS-Solution-Architect-Associate free questions and answers of New Version:

Page: 1 / 123

Total 1487 questions Full Exam Access

Question 1

Your company policies require encryption of sensitive data at rest. You are considering the possible options for protecting data while storing it at rest on an EBS data volume, attached to an EC2 instance. Which of these options would allow you to encrypt your data at rest? (Choose 3 answers)

Implement third party volume encryption tools

Do nothing as EBS volumes are encrypted by default

Encrypt data inside your applications before storing it on EBS

Encrypt data using native data encryption drivers at the file system level

Implement SSL/TLS for all services running on the server

Question 2

You want to establish a dedicated network connection from your premises to AWS in order to save money by transferring data directly to AWS rather than through your internet service provider. You are sure there must be some other benefits beyond cost savings. Which of the following would not be considered a benefit if you were to establish such a connection?

Elasticity

Compatibility with all AWS services.

Private connectMty to your Amazon VPC.

Everything listed is a benefi

Question 3

You need to configure an Amazon 53 bucket to serve static assets for your public-facing web application. Which methods ensure that all objects uploaded to the bucket are set to public read? Choose 2 answers

Set permissions on the object to public read during upload.

Configure the bucket ACL to set all objects to public read.

Configure the bucket policy to set all objects to public read.

Use AWS Identity and Access Management roles to set the bucket to public read.

Amazon 53 objects default to public read, so no action is neede

Question 4

Using Amazon IAM, can I give permission based on organizational groups?

Yes but only in certain cases

Yes always

Question 5

Select the incorrect statement

In Amazon EC2, the private IP addresses only returned to Amazon EC2 when the instance is stopped or terminated

In Amazon VPC, an instance retains its private IP addresses when the instance is stopped.

In Amazon VPC, an instance does NOT retain its private IP addresses when the instance is stopped.

In Amazon EC2, the private IP address is associated exclusive ly with the instance for its lifetime

Question 6

Regarding the attaching of ENI to an instance, what does 'warm attach' refer to?

Attaching an ENI to an instance when it is stopped.

This QUESTION doesn't make sense.

Attaching an ENI to an instance when it is running

Attaching an ENI to an instance during the launch process

Question 7

What is the durability of 53 RRS?

99.99%

99.95%

99.995%

99.999999999%

Question 8

What is Amazon Glacier?

You mean Amazon "Iceberg": it's a low-cost storage service.

A security tool that allows to "freeze" an EBS volume and perform computer forensics on it.

A low-cost storage service that provides secure and durable storage for data archMng and backup.

It's a security tool that allows to "freeze" an EC2 instance and perform computer forensics on i

Question 9

What are the two permission types used by AWS'?

Resource-based and Product-based

Product-based and Service-based

Service-based

User-based and Resource-based

Question 10

While controlling access to Amazon EC2 resources, which of the following acts as a firewall that controls the traffic allowed to reach one or more instances?

A security group

An instance type

A storage cluster

An object

Question 11

A company has configured and peered two VPCs: VPC-1 and VPC-2. VPC-1 contains only private subnets, and VPC-2 contains only public subnets. The company uses a single AWS Direct Connect connection and private virtual interface to connect their on-premises network with VPC-1. Which two methods increases the fault tolerance of the connection to VPC-1 ? Choose 2 answers

Establish a hardware VPN over the internet between VPC-2 and the on-premises network.

Establish a hardware VPN overt he internet between VPC-1 and the on-premises network.

Establish a new AWS Direct Connect connection and private virtual interface in the same region as VPC-2.

Establish a new AWS Direct Connect connection and private virtual interface in a different AWS region than VPC-1.

Establish a new AWS Direct Connect connection and private virtual interface in the same AWS region as VPC-1

Question 12

An organization has a statutory requirement to protect the data at rest for data stored in EBS volumes. Which of the below mentioned options can the organization use to achieve data protection?

Data replication.

Data encryption.

Data snapshot.

All the options listed her

Question 13

A user wants to increase the durability and availability of the EBS volume. Which of the below mentioned actions should he perform?

Take regular snapshots.

Create an AMI.

Create EBS with higher capacity.

Access EBS regularl

Question 14

When you run a DB Instance as a Multi-AZ deployment, the " _ " serves database writes and reads

secondary

backup

stand by

primary

Question 15

You are checking the workload on some of your General Purpose (SSD) and Provisioned IOPS (SSD) volumes and it seems that the I/O latency is higher than you require. You should probably check the to make sure that your application is not trying to drive more IOPS than you have
provisioned.

Amount of IOPS that are available

Acknowledgement from the storage subsystem

Average queue length

Time it takes for the I/O operation to complete

Question 16

An online gaming site asked you if you can deploy a database that is a fast, highly scalable NoSQL database service in AWS for a new site that he wants to build. Which database should you recommend?

Amazon DynamoDB

Amazon RDS

Amazon Redshift

Amazon SimpIeDB

Question 17

After setting up a Virtual Private Cloud (VPC) network, a more experienced cloud engineer suggests that to achieve low network latency and high network throughput you should look into setting up a placement group. You know nothing about this, but begin to do some research about it and are especially curious about its limitations. Which of the below statements is wrong in describing the limitations of a placement group?

Although launching multiple instance types into a placement group is possible, this reduces the likelihood that the required capacity will be available for your launch to succeed.

A placement group can span multiple Availability Zones.

You can't move an existing instance into a placement group.

A placement group can span peered VPCs

My answer: -

Reference answer: B

Reference analysis:

A placement group is a logical grouping of instances within a single Availability Zone. Using placement groups enables applications to participate in a low-latency, 10 Gbps network. Placement groups are recommended for applications that benefit from low network latency, high network throughput, or both. To provide the lowest latency, and the highest packet-per-second network performance for your placement group, choose an instance type that supports enhanced networking.
Placement groups have the following limitations:
The name you specify for a placement group a name must be unique within your AWS account. A placement group can't span multiple Availability Zones.
Although launching multiple instance types into a placement group is possible, this reduces the likelihood that the required capacity will be available for your launch to succeed. We recommend using the same instance type for all instances in a placement group.
You can't merge placement groups. Instead, you must terminate the instances in one placement group, and then relaunch those instances into the other placement group.
A placement group can span peered VPCs; however, you will not get full-bisection bandwidth between instances in peered VPCs. For more information about VPC peering connections, see VPC Peering in the Amazon VPC User Guide.
You can't move an existing instance into a placement group. You can create an AM from your existing instance, and then launch a new instance from the AMI into a placement group.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/placement-groups.html

Question 18

A user is hosting a website in the US West-1 region. The website has the highest client base from the Asia-Pacific (Singapore / Japan) region. The application is accessing data from S3 before serving it to client. Which of the below mentioned regions gives a better performance for S3 objects?

Japan

Singapore

US East

US West-1

Question 19

You are setting up your first Amazon Virtual Private Cloud (Amazon VPC) so you decide to use the VPC wizard in the AWS console to help make it easier for you. Which of the following statements is correct regarding instances that you launch into a default subnet via the VPC wizard?

Instances that you launch into a default subnet receive a public IP address and 10 private IP addresses.

Instances that you launch into a default subnet receive both a public IP address and a private IP address.

Instances that you launch into a default subnet don't receive any ip addresses and you need to define them manually.

Instances that you launch into a default subnet receive a public IP address and 5 private IP addresse

Question 20

What does a "Domain" refer to in Amazon SWF?

A security group in which only tasks inside can communicate with each other

A special type of worker

A collection of related Workflows

The DNS record for the Amazon SWF service

Question 21

What would be the best way to retrieve the public IP address of your EC2 instance using the CLI?

Using tags

Using traceroute

Using ipconfig

Using instance metadata

Page: 1 / 123

Total 1487 questions Full Exam Access