























Study with the several resources on Docsity
Earn points by helping other students or get them with a premium plan
Prepare for your exams
Study with the several resources on Docsity
Earn points to download
Earn points by helping other students or get them with a premium plan
Community
Ask the community for help and clear up your study doubts
Discover the best universities in your country according to Docsity users
Free resources
Download our free guides on studying techniques, anxiety management strategies, and thesis advice from Docsity tutors
AWS Certified Solutions Architect - Associate Credential (SAA-C03) Exam
Typology: Exams
1 / 31
This page cannot be seen from the preview
Don't miss anything!
Here are the multiple-choice questions with rationales and the correct answers indicated: Question 1: You are hosting a MySQL database on the root volume of an EC2 instance. The database is using a large amount of IOPs and you need to increase the IOPs available to it. What should you do? A. Migrate the database to an S3 bucket. B. Migrate the database to Glacier. C. Add 4 additional EBS SSD volumes and create a RAID 10 using these volumes. D. Use Cloud Front to cache the database. Correct Answer: C. Add 4 additional EBS SSD volumes and create a RAID 10 using these volumes. Rationale:
users. It is not a database caching solution and cannot increase the IOPs available to the underlying database storage. Question 2: You have been asked to create VPC for your company. The VPC must support both Internet-facing web applications (ie they need to be publicly accessible) and internal private applications (i.e. they are not publicly accessible and can be accessed only over VPN). The internal private applications must be inside a private subnet. Both the internet-facing and private applications must be able to leverage at least three Availability Zones for high availability. At a minimum, how many subnets must you create within your VPC to achieve this? A. 5 B. 3 C. 4 D. 6 - Correct Answer Rationale:
Rationale:
D. Has had the public subnet check box ticked when setting up this subnet in the VPC console. - - correct ans- - A. In it's routing table it has at least one route that uses an Internet Gateway (IGW). You have been asked to identify a service on AWS that is a durable key value store. Which of the services below meets this definition? A. Mobile Hub B. Kinesis C. Simple Storage Service (S3) D. Elastic File Service (EFS) - - correct ans- - C. Simple Storage Service (S3) You are a security architect working for a large antivirus company. The production environment has recently been moved to AWS and is in a public subnet. You are able to view the production environment over HTTP however when your customers try to update their virus definition files over a custom port, that port is blocked. You log in to the console and you allow traffic in over the custom port. How long will this take to take effect? A. Straight away but to the new instances only. B. Immediately. C. After a few minutes this should take effect. D. Straight away to the new instances, but old instances must be stopped and restarted before the new rules apply. - - correct ans- - B. Immediately. You are a solutions architect working for a biotech company who is pioneering research in immunotherapy. They have developed a new cancer treatment that may be able to cure up to 94% of cancers. They store their research data on S3, however recently an intern accidentally deleted some critical files. You've been asked to prevent this from happening in the future. What options below can prevent this? A. Make sure the interns can only access data on S3 using signed URLs.
and dev so as to not accidentally break the production environment. You launch an exact replica of your production environment using a CloudFormation template that your company uses in production. However CloudFormation fails. You use the exact same CloudFormation template in production, so the failure is something to do with your new AWS account. The CloudFormation template is trying to launch 60 new EC instances in a single AZ. After some research you discover that the problem is; A. For all new AWS accounts there is a soft limit of 20 EC2 instances per region. You should submit the limit increase form and retry the template after your limit has been increased. B. For all new AWS accounts there is a soft limit of 20 EC2 instances per availability zone - - correct ans- - A. For all new AWS accounts there is a soft limit of 20 EC instances per region. You should submit the limit increase form and retry the template after your limit has been increased. You work for a famous bakery who are deploying a hybrid cloud approach. Their legacy IBM AS400 servers will remain on premise within their own datacenter however they will need to be able to communicate to the AWS environment over a site to site VPN connection. What do you need to do to establish the VPN connection? A. Connect to the environment using AWS Direct Connect. B. Assign a public IP address to your Amazon VPC Gateway. C. Create a dedicated NAT and deploy this to the public subnet. D. Update your route table to add a route for the NAT to 0.0.0.0/0. - - correct ans- - B. Assign a public IP address to your Amazon VPC Gateway. You work for a major news network in Europe. They have just released a new app which allows users to report on events as and when they happen using their mobile phone. Users are able to upload pictures from the app and then other users will be able to view these pics. Your organization expects this app to grow very quickly, essentially doubling it's user base every month. The app uses S3 to store the media and you are expecting sudden and large increases in traffic to S3 when a major news event takes place (as people will be uploading content in huge numbers). You need to keep your storage costs to a minimum however and it does not matter if some objects are lost. Which storage media should you use to keep costs as low as possible?
A. S3 - Infrequently Accessed Storage. B. S3 - Reduced Redundancy Storage (RRS). C. Glacier. D. S3 - Provisioned IOPS. - - correct ans- - B. S3 - Reduced Redundancy Storage (RRS). You have developed a new web application in us-west-2 that requires six Amazon Elastic Compute Cloud (EC2) instances running at all times. You have three availability zones available in that region (us-west-2a, us-west-2b, and us-west-2c). You need 100 percent fault tolerance if any single Availability Zone in us-west-2 becomes unavailable. How would you do this, each answer has 2 answers, select the answer with BOTH correct answers. A. Answer 1 - Us-west-2a with two EC2 instances, us-west-2b with two EC2 instances, and us-west-2c with two EC2 instances. Answer 2 - Us-west-2a with six EC2 instances, us-west-2b with six EC2 instances, and us-west-2c with no EC2 instances B. Answer 1 - Us-west-2a with six EC2 instances, us-west-2b with six EC2 instances, and us-west-2c with no EC2 instances. Answer 2 - Us-west-2a with three EC instances, us-west-2b with three EC2 instances, and us-west-2c with three EC instances. C. - - correct ans- - B. Answer 1 - Us-west-2a with six EC2 instances, us-west-2b with six EC2 instances, and us-west-2c with no EC2 instances. Answer 2 - Us-west-2a with three EC2 instances, us-west-2b with three EC2 instances, and us-west-2c with three EC2 instances. You need to add a route to your routing table in order to allow connections to the internet from your subnet. What route should you add? A. Destination: 192.168.1.258/0 --> Target: your Internet gateway B. Destination: 0.0.0.0/33 --> Target: your virtual private gateway C. Destination: 0.0.0.0/0 --> Target: 0.0.0.0/ D. Destination: 10.0.0.0/32 --> Target: your virtual private gateway
Measure of how fast we can read and write to a device (i.e. fast sports car) - - correct ans- - IOPS Measure of how much data can be moved at a time (i.e. Dump truck). - - correct ans- - Throughput What does the Consistency Model ACID stand for? - - correct ans- - Atomic, Consistent, Isolated, Durable What does the Consistency Model BASE stand for? - - correct ans- - Basically available, soft state, eventually consistent Once you initiate a Glacier Vault lock, you have ____ hrs to _________ the vault lock or ______ the lock. - - correct ans- - 24, complete, abort What are some use cases for Instance Stores? - - correct ans- - caches, buffers, work areas Why might you use an instance store volume over an EBS volume? - - correct ans- - Instance store may provide better performance because it is directly attached vs EBS volume access resides over the network. Each subsequent EBS Snapshot is ____________. Meaning it only records the changes you've made since the previous snapshot which saves storage space. - - correct ans- - incremental. An EFS can be mounted from on-premise ONLY if using ________ __________. - - correct ans- - Direct Connect What is the alternative to using a direct connect to mount on premise to EFS? - - correct ans- - EFS File Sync Agent
What are the 4 types of Storage Gateway and describe each? - - correct ans- - File Gateway - store objects in S3 via NFS/SMB Volume Gateway Stored Mode - Async replication to S Volume Gateway Cached mode - Primary data stored in S3, frequently accessed data cached on-prem Tape Gateway - use with existing backup software A secure, fully managed file collaboration service that can integrate with AD for SSO. It contains web, mobile, and native clients and is HIPAA, PCI, DSS, and ISO compliant. - - correct ans- - Amazon WorkDocs Read Replicas support ___________ synchronization, which means data may be lagging behind slightly on some of your read nodes. - - correct ans- - Asynchronous Multi-AZ supports __________ synchronization, which means data will be up-to-date with your master node. - - correct ans- - Synchronous True/False: In the catastrophic event of a region failure, you can promote a Read Replica to a standalone DB and then enable Multi-AZ from there. - - correct ans- - True DynamoDB feature which allows you to maintain ACID compliance to make coordinate all-or-nothing changes to multiple items both within and across tables. - - correct ans- - DynamoDB Transactions (DynamoDB) When you want a fast query of attributes outside the primary key (without having to do table scan), what index type would you use? - - correct ans- - GSI (Global Secondary Index) (DynamoDB) When you already know the partition key and want to quickly query on some other attribute, what index type would you use? - - correct ans- - LSI (Local Secondary Index)
What data store would you use if your relationships between your data objects is a major portion of your data's value? - - correct ans- - Neptune What data store would you use if you require fast temporary stores for data which may be highly volatile? - - correct ans- - Elasticache Name same features of Memcached - - correct ans- --Simplicity
True/False: Snowball might not be the ideal solution if your data can be transferred over the internet in less than one week. - - correct ans- - True SaaS model in which the storage of tenant data is fully isolated from any other tenant data. - - correct ans- - Silo Model SaaS model in which all of the tenant's data is moved into a single database, while allowing some degree of variation and separation for each tenant. - - correct ans- - Bridge Model SaaS model in which tenants share all of the systems storage constructs. - - correct ans- - Pool Model Which caching engine currently supports encryption at rest (3.2.6 and 4.0.10 and later) -
Layer 4 protocol which is used by network devices to exchange information. - - correct ans- - ICMP Short-lived, transport protocol ports used in IP-communications. These ports live above the well-known IP ports and have NACL and Security Group limitations. These ports are required to allow the server to communicate back to the client. - - correct ans- - Ephemeral Ports IPsec VPN connection over your existing internet. Quick and usually simple way to establish a secure tunneled connection to a VPC. - - correct ans- - AWS Managed VPN Dedicated network connection over private links straight into AWS. Useful for customers that require a "big pipe" into AWS. - - correct ans- - AWS Direct Connect IPsec VPN connection over private lines. Useful for customers who want added security of having an encrypted tunnel over direct connect. - - correct ans- - AWS Direct Connect
Elastic network interface (ENI) with a private IP which uses DNS entries to redirect traffic. - - correct ans- - Interface Endpoint Gateway that is a target for a specific route which uses prefix lists in a route table to redirect traffic. - - correct ans- - Gateway Endpoint What are the only two AWS services you can connect to with a Gateway Endpoint? - - correct ans- - S DynamoDB Popular routing protocol for the internet which propagates information about the network to allow for dynamic routing. Allows the assignment of weights with the higher weight being the preferred path. - - correct ans- - Border Gateway Protocol (BGP) Horizontally scaled, redundant and highly available component that allows communication between a VPC and the internet. - - correct ans- - Internet Gateway Provides outbound internet access for IPV6 addressed instances and prevents inbound access to those IPV6 instances. - - correct ans- - Egress Only IGW EC2 instance from a special AWS Linux AMI that translates traffic from many private IP instances to a single public IP and back. - - correct ans- - NAT Instance Fully managed NAT service that replaces the need for NAT instance on EC2. - - correct ans- - NAT Gateway What is a Pro of Clustered Placement Groups? - - correct ans- - Get most out of enhanced networking instances