AWS SAA Certification Test! Hardest Trivia Quiz

1. What does RRS stand for when talking about S3?

Redundancy Removal System

Relational Rights Storage

Regional Rights Standard

Reduced Redundancy Storage

http://www.aiotestking.com/amazon/what-does-rrs-stand-for-when-talking-about-s3-3/

Explanation

http://www.aiotestking.com/amazon/what-does-rrs-stand-for-when-talking-about-s3-3/

2. While creating the snapshots using the API, which Action should I be using?

MakeSnapShot

FreshSnapshot

DeploySnapshot

CreateSnapshot

http://www.aiotestking.com/amazon/which-action-should-i-be-using-5/

Explanation

http://www.aiotestking.com/amazon/which-action-should-i-be-using-5/

3. What does Amazon ELB stand for?

Elastic Linux Box.

Encrypted Linux Box.

Encrypted Load Balancing.

Elastic Load Balancing.

http://www.aiotestking.com/amazon/what-does-amazon-elb-stand-for-4/

Explanation

http://www.aiotestking.com/amazon/what-does-amazon-elb-stand-for-4/

4. Which is the default region in AWS?

Eu-west-1

Us-east-1

Us-east-2

Ap-southeast-1

http://www.aiotestking.com/amazon/which-is-the-default-region-in-aws-4/

Explanation

http://www.aiotestking.com/amazon/which-is-the-default-region-in-aws-4/

5. After creating a new AWS account, you use the API to request 40 on-demand EC2 instances in a single AZ. After 20 successful requests, subsequent requests failed. What could be a reason for this issue, and how would you resolve it?

You encountered an API throttling situation and should try the failed requests using an exponential decay retry algorithm.

http://www.aiotestking.com/amazon/what-could-be-a-reason-for-this-issue-and-how-would-yo-2/

Explanation

http://www.aiotestking.com/amazon/what-could-be-a-reason-for-this-issue-and-how-would-yo-2/

6. Multi-AZ deployment is supported for Microsoft SQL Server DB Instances.

True

False

http://www.aiotestking.com/amazon/multi-az-deployment-is-supported-for-microsoft-sql-serv-2/

Explanation

http://www.aiotestking.com/amazon/multi-az-deployment-is-supported-for-microsoft-sql-serv-2/

7. How many relational database engines does RDS currently support?

Three: MySQL, Oracle and Microsoft SQL Server.

Just two: MySQL and Oracle.

Six: Amazon Aurora, Oracle, Microsoft SQL Server, PostgreSQL, MySQL and MariaDB.

Just one: MySQL.

http://www.aiotestking.com/amazon/how-many-relational-database-engines-does-rds-currently-3/

Explanation

http://www.aiotestking.com/amazon/how-many-relational-database-engines-does-rds-currently-3/

8. You are a student currently learning about the different AWS services. Your employer asks you to tell him a bit about Amazon’s glacier service. Which of the following best describes the use cases for Glacier?

Infrequently accessed data & data archives

Hosting active databases

Replicating Files across multiple availability zones and regions

Frequently Accessed Data

http://www.aiotestking.com/amazon/which-of-the-following-best-describes-the-use-cases-for/

Explanation

http://www.aiotestking.com/amazon/which-of-the-following-best-describes-the-use-cases-for/

9. A custorner has a requirement to extend their on-premises data center to AWS. The custorner requires a 50-Mbps dedicated and private connection to their VPC. Which AWS product or feature satisfies this requirernent?

Amazon VPC

Elastic IP Addresses

AWS Direct Connect

Amazon VPC virtual private gateway

http://www.aiotestking.com/amazon/which-aws-product-or-feature-satisfies-this-requirernent-2/

Explanation

http://www.aiotestking.com/amazon/which-aws-product-or-feature-satisfies-this-requirernent-2/

10. You must assign each server to at least _____ security group

3

2

4

1

http://www.aiotestking.com/amazon/you-must-assign-each-server-to-at-least-_-security-group-4/

Explanation

http://www.aiotestking.com/amazon/you-must-assign-each-server-to-at-least-_-security-group-4/

11. How can software determine the public and private IP addresses of the EC2 instance that it is running on?

Query the local instance metadata.

Query the local instance userdata.

Query the appropriate Amazon CloudWatch metric.

Use an ipconfig or ifconfig command.

http://www.aiotestking.com/amazon/how-can-software-determine-the-public-and-private-ip-ad-3/

Explanation

http://www.aiotestking.com/amazon/how-can-software-determine-the-public-and-private-ip-ad-3/

12. While creating an Amazon RDS DB, your first task is to set up a DB ______ that controls what IP addresses or EC2 instances have access to your DB Instance.

Security Pool

Secure Zone

Security Token Pool

Security Group

http://www.aiotestking.com/amazon/while-creating-an-amazon-rds-db-your-first-task-is-to-3/

Explanation

http://www.aiotestking.com/amazon/while-creating-an-amazon-rds-db-your-first-task-is-to-3/

13. Is an edge location in AWS the same as a region?

True

False

http://www.aiotestking.com/amazon/is-an-edge-location-in-aws-the-same-as-a-region-2/

Explanation

http://www.aiotestking.com/amazon/is-an-edge-location-in-aws-the-same-as-a-region-2/

14. While creating the snapshots using the command line tools, which command should I be using?

Ec2-deploy-snapshot

Ec2-fresh-snapshot

Ec2-create-snapshot

Ec2-new-snapshot

http://www.aiotestking.com/amazon/which-command-should-i-be-using-4/

Explanation

http://www.aiotestking.com/amazon/which-command-should-i-be-using-4/

15. What is Amazon Glacier?

You mean Amazon “Iceberg”: it’s a low-cost storage service.

A security tool that allows to “freeze” an EBS volume and perform computer forensics on it.

A low-cost storage service that provides secure and durable storage for data archiving and backup.

It’s a security tool that allows to “freeze” an EC2 instance and perform computer forensics on it.

http://www.aiotestking.com/amazon/what-is-amazon-glacier-4/

Explanation

http://www.aiotestking.com/amazon/what-is-amazon-glacier-4/

16. IAM’s Policy Evaluation Logic always starts with a default ____________ for every request, except for those that use the AWS account’s root security credentials b

Permit

Deny

Cancel

http://www.aiotestking.com/amazon/iams-policy-evaluation-logic-always-starts-with-a-defa-3/

Explanation

http://www.aiotestking.com/amazon/iams-policy-evaluation-logic-always-starts-with-a-defa-3/

17. While creating an EC2 snapshot using the API, which Action should I be using?

MakeSnapShot

FreshSnapshot

DeploySnapshot

CreateSnapshot

http://www.aiotestking.com/amazon/which-action-should-i-be-using-6/

Explanation

http://www.aiotestking.com/amazon/which-action-should-i-be-using-6/

18. You can have 1 subnet stretched across multiple availability zones.

True

False

http://www.aiotestking.com/amazon/you-can-have-1-subnet-stretched-across-multiple-availab/

Explanation

http://www.aiotestking.com/amazon/you-can-have-1-subnet-stretched-across-multiple-availab/

19. Amazon RDS automated backups and DB Snapshots are currently supported for only the ______ storage engine

MyISAM

InnoDB

http://www.aiotestking.com/amazon/amazon-rds-automated-backups-and-db-snapshots-are-curre-5/

Explanation

http://www.aiotestking.com/amazon/amazon-rds-automated-backups-and-db-snapshots-are-curre-5/

20. Can I encrypt connections between my application and my DB Instance using SSL?

No

Yes

Only in VPC

Only in certain regions

http://www.aiotestking.com/amazon/can-i-encrypt-connections-between-my-application-and-my-3/

Explanation

http://www.aiotestking.com/amazon/can-i-encrypt-connections-between-my-application-and-my-3/

21. Is there any way to own a direct connection to Amazon Web Services?

You can create an encrypted tunnel to VPC, but you don’t own the connection.

Yes, it’s called Amazon Dedicated Connection.

No, AWS only allows access from the public Internet.

Yes, it’s called Direct Connect.

http://www.aiotestking.com/amazon/is-there-any-way-to-own-a-direct-connection-to-amazon-w-4/

Explanation

http://www.aiotestking.com/amazon/is-there-any-way-to-own-a-direct-connection-to-amazon-w-4/

22. Without _____, you must either create multiple AWS accounts-each with its own billing and subscriptions to AWS products-or your employees must share the security credentials of a single AWS account.

Amazon RDS

Amazon Glacier

Amazon EMR

Amazon IAM

http://www.aiotestking.com/amazon/without-_-you-must-either-create-multiple-aws-acco-3/

Explanation

http://www.aiotestking.com/amazon/without-_-you-must-either-create-multiple-aws-acco-3/

23. How many relational database engines does RDS currently support?

Three: MySQL, Oracle and Microsoft SQL Server.

Just two: MySQL and Oracle.

Six: Amazon Aurora, Oracle, Microsoft SQL Server, PostgreSQL, MySQL and MariaDB.

Just one: MySQL.

http://www.aiotestking.com/amazon/how-many-relational-database-engines-does-rds-currently-4/

Explanation

http://www.aiotestking.com/amazon/how-many-relational-database-engines-does-rds-currently-4/

24. If I want an instance to have a public IP address, which IP address should I use?

Elastic IP Address

Class B IP Address

Class A IP Address

Dynamic IP Address

http://www.aiotestking.com/amazon/which-ip-address-should-i-use-3/

Explanation

http://www.aiotestking.com/amazon/which-ip-address-should-i-use-3/

25. Amazon Glacier is designed for: (Choose 2 answers)

Active database storage.

Infrequently accessed data.

Data archives.

Frequently accessed data.

Cached session data

http://www.aiotestking.com/amazon/amazon-glacier-is-designed-for-choose-2-answers-3/

Explanation

http://www.aiotestking.com/amazon/amazon-glacier-is-designed-for-choose-2-answers-3/

Submit

26. Fill in the blanks: _________ let you categorize your EC2 resources in different ways, for example, by purpose, owner, or environment.

Wildcards

Pointers

27. You have uploaded a file to S3. What HTTP code would indicate that the upload was successful?

HTTP 404

HTTP 501

HTTP 200

HTTP 307

http://www.aiotestking.com/amazon/what-http-code-would-indicate-that-the-upload-was-succe/

Explanation

http://www.aiotestking.com/amazon/what-http-code-would-indicate-that-the-upload-was-succe/

28. A company is deploying a two-tier, highly available web application to AWS. Which service provides durable storage for static content while utilizing lower Overall CPU resources for the web tier?

Amazon EBS volume

Amazon S3

Amazon EC2 instance store

Amazon RDS instance

http://www.aiotestking.com/amazon/which-service-provides-durable-storage-for-static-conte-2/

Explanation

http://www.aiotestking.com/amazon/which-service-provides-durable-storage-for-static-conte-2/

29. You have an application running on an Amazon Elastic Compute Cloud instance, that uploads 5 GB video objects to Amazon Simple Storage Service (S3). Video uploads are taking longer than expected, resulting in poor application performance. Which method will help improve performance of your application?

Enable enhanced networking

Use Amazon S3 multipart upload

Leveraging Amazon CloudFront, use the HTTP POST method to reduce latency.

Use Amazon Elastic Block Store Provisioned IOPs and use an Amazon EBS-optimized instance

http://www.aiotestking.com/amazon/which-method-will-help-improve-performance-of-your-appl/

Explanation

http://www.aiotestking.com/amazon/which-method-will-help-improve-performance-of-your-appl/

30. What does Amazon ElastiCache provide?

A service by this name doesn’t exist. Perhaps you mean Amazon CloudCache.

A virtual server with a huge amount of memory.

A managed In-memory cache service.

An Amazon EC2 instance with the Memcached software already pre-installed.

http://www.aiotestking.com/amazon/what-does-amazon-elasticache-provide-4/

Explanation

http://www.aiotestking.com/amazon/what-does-amazon-elasticache-provide-4/

31. You are appointed as your company’s Chief Security Officer and you want to be able to track all changes made to your AWS environment, by all users and at all times, in all regions. What AWS service should you use to achieve this?

CloudAudit

CloudWatch

CloudTrail

CloudDetective

http://www.aiotestking.com/amazon/what-aws-service-should-you-use-to-achieve-this-2/

Explanation

http://www.aiotestking.com/amazon/what-aws-service-should-you-use-to-achieve-this-2/

32. Amazon S3 buckets in the US Standard region do not provide eventual consistency.

True

False

http://www.aiotestking.com/amazon/amazon-s3-buckets-in-the-us-standard-region-do-not-prov/

Explanation

http://www.aiotestking.com/amazon/amazon-s3-buckets-in-the-us-standard-region-do-not-prov/

33. While performing the volume status checks, if the status is insufficient-data, what does it mean?

The checks may still be in progress on the volume

The check has passed

The check has failed

http://www.aiotestking.com/amazon/what-does-it-mean-5/

Explanation

http://www.aiotestking.com/amazon/what-does-it-mean-5/

34. The _____ service is targeted at organizations with multiple users or systems that use AWS products such as Amazon EC2, Amazon SimpleDB, and the AWS Management Console.

Amazon RDS

AWS Integrity Management

AWS Identity and Access Management

Amazon EMR

http://www.aiotestking.com/amazon/the-_-service-is-targeted-at-organizations-with-mul-3/

Explanation

http://www.aiotestking.com/amazon/the-_-service-is-targeted-at-organizations-with-mul-3/

35. Every user you create in the IAM system starts with ___________.

Full permissions

No permissions

Partial permissions

http://www.aiotestking.com/amazon/every-user-you-create-in-the-iam-system-starts-with-_-6/

Explanation

http://www.aiotestking.com/amazon/every-user-you-create-in-the-iam-system-starts-with-_-6/

36. A company is hosting EC2 instances which focuses on work-loads are on non-production and non-priority batch loads. Also these processes can be interrupted at any time. What is the best pricing model which can be used for EC2 instances in ülis case?

Reserved Instances

On-Demand Instances

Spot Instances

Regular Instances

http://www.aiotestking.com/amazon/what-is-the-best-pricing-model-which-can-be-used-for-ec-2/

Explanation

http://www.aiotestking.com/amazon/what-is-the-best-pricing-model-which-can-be-used-for-ec-2/

37. Every user you create in the IAM system starts with _________.

Partial permissions

Full permissions

No permissions

http://www.aiotestking.com/amazon/every-user-you-create-in-the-iam-system-starts-with-_-5/

Explanation

http://www.aiotestking.com/amazon/every-user-you-create-in-the-iam-system-starts-with-_-5/

38. You have an EC2 instance which needs to find out both its private IP address and its public IP address. To do this you need to;

Run IPCONFIG (Windows) or IFCONFIG (Linux)

Retrieve the instance Metadata from http://169.254.169.254/latest/meta-data/

Retrieve the instance Userdata from http://169.254.169.254/latest/meta-data/

Use the following command; AWS EC2 displayIP

http://www.aiotestking.com/amazon/you-need-to-4/

Explanation

http://www.aiotestking.com/amazon/you-need-to-4/

39. You working in the media industry and you have created a web application where users will be able to upload photos they create to your website. This web application must be able to call the S3 API in order to be able to function. Where should you store your API credentials whilst maintaining the maximum level of security.

Save the API credentials to your php files.

Save your API credentials in a public Github repository.

Pass API credentials to the instance using instance userdata.

http://www.aiotestking.com/amazon/where-should-you-store-your-api-credentials-whilst-main/

Explanation

http://www.aiotestking.com/amazon/where-should-you-store-your-api-credentials-whilst-main/

40. What does Amazon SES stand for?

Simple Elastic Server

Simple Email Service

Software Email Solution

Software Enabled Server

http://www.aiotestking.com/amazon/what-does-amazon-ses-stand-for-3/

Explanation

http://www.aiotestking.com/amazon/what-does-amazon-ses-stand-for-3/

41. You run an ad-supported photo sharing website using S3 to serve photos to visitors of your site. At some point you find out that other sites have been linking to the photos on your site, causing loss to your business. What is an effective method to mitigate this?

Remove public read access and use signed URLs with expiry dates.

Use CloudFront distributions for static content.

Block the IPs of the offending websites in Security Groups.

Store photos on an EBS volume of the web server.

http://www.aiotestking.com/amazon/what-is-an-effective-method-to-mitigate-this-6/

Explanation

http://www.aiotestking.com/amazon/what-is-an-effective-method-to-mitigate-this-6/

42. What does Amazon RDS stand for?

Regional Data Server.

Relational Database Service.

Nothing.

Regional Database Service.

http://www.aiotestking.com/amazon/what-does-amazon-rds-stand-for-4/

Explanation

http://www.aiotestking.com/amazon/what-does-amazon-rds-stand-for-4/

43. You can use _ and _ to help secure the instances in your VPC,

Security groups and multi-factor authentication

Security groups and 2-Factor authentication

Security groups and biometric authentication

Security groups and network ACLs

http://www.aiotestking.com/amazon/you-can-use-_-and-_-to-help-secure-the-instance-3/

Explanation

http://www.aiotestking.com/amazon/you-can-use-_-and-_-to-help-secure-the-instance-3/

44. What does Amazon S3 stand for?

Simple Storage Solution.

Storage Storage Storage (triple redundancy Storage).

Storage Server Solution.

Simple Storage Service.

http://www.aiotestking.com/amazon/what-does-amazon-s3-stand-for-3/

Explanation

http://www.aiotestking.com/amazon/what-does-amazon-s3-stand-for-3/

45. What is the default per account limit of Elastic IPs?

1

3

5

http://www.aiotestking.com/amazon/what-is-the-default-per-account-limit-of-elastic-ips-2/

Explanation

http://www.aiotestking.com/amazon/what-is-the-default-per-account-limit-of-elastic-ips-2/

46. Amazon S3 buckets in all other regions (other than US Standard) do not provide eventual consistency for overwrite PUTS and DELETES.

True

False

http://www.aiotestking.com/amazon/amazon-s3-buckets-in-all-other-regions-other-than-us-s-3/

Explanation

http://www.aiotestking.com/amazon/amazon-s3-buckets-in-all-other-regions-other-than-us-s-3/

47. You are a security architect working for a large antivirus company. The production environment has recently been moved to AWS and is in a public subnet. You are able to view the production environment over HTTP however when your customers try to update their virus definition files over a custom port, that port is blocked. You log in to the console and you allow traffic in over the custom port. How long will this take to take effect?

Straight away but to the new instances only.

Immediately.

After a few minutes this should take effect.

Straight away to the new instances, but old instances must be stopped and restarted before the new rules apply.

http://www.aiotestking.com/amazon/how-long-will-this-take-to-take-effect-2/

Explanation

http://www.aiotestking.com/amazon/how-long-will-this-take-to-take-effect-2/

48. Can I attach more than one policy to a particular entity?

Yes always

Only if within GovCloud

No

Only if within VPC

http://www.aiotestking.com/amazon/can-i-attach-more-than-one-policy-to-a-particular-entity-4/

Explanation

http://www.aiotestking.com/amazon/can-i-attach-more-than-one-policy-to-a-particular-entity-4/

49. Does AWS allow for the use of Multi Factor Authentication tokens?

Yes, with both hardware or virtual MFA devices

Yes, but only virtual MFA devices.

Yes, but only physical (hardware) MFA devices.

No

http://www.aiotestking.com/amazon/does-aws-allow-for-the-use-of-multi-factor-authenticati/

Explanation

http://www.aiotestking.com/amazon/does-aws-allow-for-the-use-of-multi-factor-authenticati/

50. Amazon RDS automated backups and DB Snapshots are currently supported for only the __________ storage engine

InnoDB

MyISAM

http://www.aiotestking.com/amazon/amazon-rds-automated-backups-and-db-snapshots-are-curre-4/

Explanation

http://www.aiotestking.com/amazon/amazon-rds-automated-backups-and-db-snapshots-are-curre-4/

51. You work for a market analysis firm who are designing a new environment. They will ingest large amounts of market data via Kinesis and then analyze this data using Elastic Map Reduce. The data is then imported in to a high performance NoSQL Cassandra database which will run on EC2 and then be accessed by traders from around the world. The database volume itself will sit on 2 EBS volumes that will be grouped into a RAID 0 volume. They are expecting very high demand during peak times, with an IOPS performance level of approximately 15,000. Which EBS volume should you recommend?

Magnetic

General Purpose SSD

Provisioned IOPS (PIOPS)

Turbo IOPS (TIOPS)

http://www.aiotestking.com/amazon/which-ebs-volume-should-you-recommend-2/

Explanation

http://www.aiotestking.com/amazon/which-ebs-volume-should-you-recommend-2/

52. You are designing a site for a new start up which generates cartoon images for people automatically. Customers will log on to the site, upload an image which is stored in S3. The application then passes a job to AWS SQS and a fleet of EC2 instances poll the queue to receive new processing jobs. These EC2 instances will then turn the picture in to a cartoon and will then need to store the processed job somewhere. Users will typically download the image once (immediately), and then never download the image again. What is the most commercially feasible method to store the processed images?

Rather than use S3, store the images inside a BLOB on RDS with Multi-AZ configured for redundancy.

Store the images on S3 RRS, and create a lifecycle policy to delete the image after 24 hours.

Store the images on glacier instead of S3.

Use elastic block storage volumes to store the images.

http://www.aiotestking.com/amazon/what-is-the-most-commercially-feasible-method-to-store-2/

Explanation

http://www.aiotestking.com/amazon/what-is-the-most-commercially-feasible-method-to-store-2/

53. If you have chosen Multi-AZ deployment, in the event of a planned or unplanned outage of your primary DB Instance, Amazon RDS automatically switches to the standby replica. The automatic failover mechanism simply changes the ______ record of the main DB Instance to point to the standby DB Instance.

DNAME

CNAME

TXT

MX

http://www.aiotestking.com/amazon/the-automatic-failover-mechanism-simply-changes-the-_-3/

Explanation

http://www.aiotestking.com/amazon/the-automatic-failover-mechanism-simply-changes-the-_-3/

54. Can I test my DB Instance against a new version before upgrading?

No

Yes

Only in VPC

http://www.aiotestking.com/amazon/can-i-test-my-db-instance-against-a-new-version-before-4/

Explanation

http://www.aiotestking.com/amazon/can-i-test-my-db-instance-against-a-new-version-before-4/

55. When you use the AWS Management Console to delete an IAM user, IAM also deletes any signing certificates and any access keys belonging to the user.

FALSE

This is configurable

TRUE

http://www.aiotestking.com/amazon/when-you-use-the-aws-management-console-to-delete-an-ia-3/

Explanation

http://www.aiotestking.com/amazon/when-you-use-the-aws-management-console-to-delete-an-ia-3/

56. Security groups act like a firewall at the instance level, whereas ____________ are an additional layer of security that act at the subnet level.

DB Security Groups

VPC Security Groups

Network ACLs

http://www.aiotestking.com/amazon/security-groups-act-like-a-firewall-at-the-instance-lev-3/

Explanation

http://www.aiotestking.com/amazon/security-groups-act-like-a-firewall-at-the-instance-lev-3/

57. How can an EBS volume which is currently attached to an EC2 instance in one Availability Zone to another?

Detach the volume and attach to an EC2 instance in another AZ.

Create a new volume in the other AZ and speciW the current volume as the source.

Create a snapshot of the volume and then create a volume from the snapshot in the other AZ

Create a new volume in the AZ and do a disk copy of contents from one volume to another.

http://www.aiotestking.com/amazon/which-is-currently-attached-to-an-ec2-instance-in-one-a-2/

Explanation

http://www.aiotestking.com/amazon/which-is-currently-attached-to-an-ec2-instance-in-one-a-2/

58. You require the ability to analyze a customer’s clickstream data on a website so they can do behavioral analysis. Your customer needs to know what sequence of pages and ads their customer clicked on. This data will be used in real time to modify the page layouts as customers click through the site to increase stickiness and advertising click-through. Which option meets the requirements for captioning and analyzing this data?

Log clicks in weblogs by URL store to Amazon S3, and then analyze with Elastic MapReduce

Push web clicks by session to Amazon Kinesis and analyze behavior using Kinesis workers

Write click events directly to Amazon Redshift and then analyze with SQL

http://www.aiotestking.com/amazon/which-option-meets-the-requirements-for-captioning-and-3/

Explanation

http://www.aiotestking.com/amazon/which-option-meets-the-requirements-for-captioning-and-3/

59. You are deploying an application on EC2 that must call AWS APIs. What method of securely passing credentials to the application should you use?

Use AWS Identity and Access Management roles for EC2 instances.

Pass API credentials to the instance using instance userdata.

Embed the API credentials into your JAR files.

Store API credentials as an object in Amazon Simple Storage Service.

http://www.aiotestking.com/amazon/what-method-of-securely-passing-credentials-to-the-appl-2/

Explanation

http://www.aiotestking.com/amazon/what-method-of-securely-passing-credentials-to-the-appl-2/

60. Can you create IAM security credentials for existing users?

Yes, existing users can have security credentials associated with their account.

No, IAM requires that all users who have credentials set up are not existing users

No, security credentials are created within GROUPS, and then users are associated to GROUPS at a later time.

Yes, but only IAM credentials, not ordinary security credentials.

http://www.aiotestking.com/amazon/can-you-create-iam-security-credentials-for-existing-users-3/

Explanation

http://www.aiotestking.com/amazon/can-you-create-iam-security-credentials-for-existing-users-3/

61. The Amazon EC2 web service can be accessed using the _____ web services messaging protocol. This interface is described by a Web Services Description Language (WSDL) document.

SOAP

DCOM

CORBA

XML-RPC

http://www.aiotestking.com/amazon/this-interface-is-described-by-a-web-services-descripti-3/

Explanation

http://www.aiotestking.com/amazon/this-interface-is-described-by-a-web-services-descripti-3/

62. Can we attach an EBS volume to more than one EC2 instance at the same time?

No

Yes.

Only EC2-optimized EBS volumes.

Only in read mode.

http://www.aiotestking.com/amazon/can-we-attach-an-ebs-volume-to-more-than-one-ec2-instan-4/

Explanation

http://www.aiotestking.com/amazon/can-we-attach-an-ebs-volume-to-more-than-one-ec2-instan-4/

63. If you’re unable to connect via SSH to your EC2 instance, which of the following should you check and possibly correct to restore connectivity?

Adjust Security Group to permit egress traffic over TCP port 443 from your IP.

Configure the IAM role to permit changes to security group settings.

Modify the instance security group to allow ingress of ICMP packets from your IP.

Adjust the instance’s Security Group to permit ingress traffic over port 22 from your IP.

Apply the most recently released Operating System security patches.

http://www.aiotestking.com/amazon/which-of-the-following-should-you-check-and-possibly-co-2/

Explanation

http://www.aiotestking.com/amazon/which-of-the-following-should-you-check-and-possibly-co-2/

64. Changes to the backup window take effect ______.

From the next billing cycle

After 30 minutes

Immediately

After 24 hours

http://www.aiotestking.com/amazon/changes-to-the-backup-window-take-effect-4/

Explanation

http://www.aiotestking.com/amazon/changes-to-the-backup-window-take-effect-4/

65. You have a video transcoding application running on Amazon EC2. Each instance polls a queue to find out which video should be transcoded, and then runs a transcoding process. If this process is interrupted, the video will be transcoded by another instance based on the queuing system. You have a large backlog of videos which need to be transcoded and would like to reduce this backlog by adding more instances. You will need these instances only until the backlog is reduced. Which type of Amazon EC2 instances should you use to reduce the backlog in the most cost efficient way?

Reserved instances

Spot instances

Dedicated instances

On-demand instances

http://www.aiotestking.com/amazon/which-type-of-amazon-ec2-instances-should-you-use-to-re-3/

Explanation

http://www.aiotestking.com/amazon/which-type-of-amazon-ec2-instances-should-you-use-to-re-3/

66. Amazon’s Redshift uses which block size for its columnar storage?

2KB

8KB

16KB

32KB

1024KB / 1MB

http://www.aiotestking.com/amazon/which-block-size-for-its-columnar-storage-2/

Explanation

http://www.aiotestking.com/amazon/which-block-size-for-its-columnar-storage-2/

67. Your application provides data transformation services. Files containing data to be transformed are first uploaded to Amazon S3 and then transformed by a fleet of spot EC2 instances. Files submitted by your premium customers must be transformed with the highest priority. How should you implement such a system?

Use Route 53 latency based-routing to send high priority tasks to the closest transformation instances.

Use a single SQS queue. Each message contains the priority level. Transformation instances poll highpriority messages first.

http://www.aiotestking.com/amazon/how-should-you-implement-such-a-system-4/

Explanation

http://www.aiotestking.com/amazon/how-should-you-implement-such-a-system-4/

68. REST or Query requests are HTTP or HTTPS requests that use an HTTP verb (such as GET or POST) and a parameter named Action or Operation that specifies the API you are calling.

FALSE

TRUE

http://www.aiotestking.com/amazon/rest-or-query-requests-are-http-or-https-requests-that-3/

Explanation

http://www.aiotestking.com/amazon/rest-or-query-requests-are-http-or-https-requests-that-3/

69. Which Amazon Storage behaves like raw, unformatted, external block devices that you can attach to your instances?

None of these.

Amazon Instance Storage

Amazon EBS

All of these

http://www.aiotestking.com/amazon/which-amazon-storage-behaves-like-raw-unformatted-ext-3/

Explanation

http://www.aiotestking.com/amazon/which-amazon-storage-behaves-like-raw-unformatted-ext-3/

70. If an Amazon EBS volume is the root device of an instance, can I detach it without stopping the instance?

Yes but only if Windows instance

No

Yes

Yes but only if a Linux instance

http://www.aiotestking.com/amazon/if-an-amazon-ebs-volume-is-the-root-device-of-an-instan-3/

Explanation

http://www.aiotestking.com/amazon/if-an-amazon-ebs-volume-is-the-root-device-of-an-instan-3/

71. Which of the following requires a custom CloudWatch metric to monitor?

Memory Utilization of an EC2 instance

CPU Utilization of an EC2 instance

Disk usage activity of an EC2 instance

Data transfer of an EC2 instance

http://www.aiotestking.com/amazon/which-of-the-following-requires-a-custom-cloudwatch-met-5/

Explanation

http://www.aiotestking.com/amazon/which-of-the-following-requires-a-custom-cloudwatch-met-5/

72. Fill in the blanks: _____ is a durable, block-level storage volume that you can attach to a single, running Amazon EC2 instance.

Amazon S3

Amazon EBS

None of these

All of these

http://www.aiotestking.com/amazon/fill-in-the-blanks-_-is-a-durable-block-level-sto-2/

Explanation

http://www.aiotestking.com/amazon/fill-in-the-blanks-_-is-a-durable-block-level-sto-2/

73. While signing in REST/ Query requests, for additional security, you should transmit your requests using Secure Sockets Layer (SSL) by using _________

HTTP

Internet Protocol Security(IPsec)

TLS (Transport Layer Security)

HTTPS

http://www.aiotestking.com/amazon/while-signing-in-rest-query-requests-for-additional-s-2/

Explanation

http://www.aiotestking.com/amazon/while-signing-in-rest-query-requests-for-additional-s-2/

74. Which service enables AWS customers to manage users and permissions in AWS?

AWS Access Control Service (ACS)

AWS Identity and Access Management (IAM)

AWS Identity Manager (AIM)

AWS Security Groups

http://www.aiotestking.com/amazon/which-service-enables-aws-customers-to-manage-users-and-4/

Explanation

http://www.aiotestking.com/amazon/which-service-enables-aws-customers-to-manage-users-and-4/

75. You are building an automated transcription service in which Amazon EC2 worker instances process an uploaded audio file and generate a text file. You must store both of these files in the same durable storage until the text file is retrieved. You do not know what the storage capacity requirements are. Which storage option is both cost-efficient and scalable?

Multiple Amazon EBS volume with snapshots

A single Amazon Glacier vault

A single Amazon S3 bucket

Multiple instance stores

http://www.aiotestking.com/amazon/which-storage-option-is-both-cost-efficient-and-scalable-3/

Explanation

http://www.aiotestking.com/amazon/which-storage-option-is-both-cost-efficient-and-scalable-3/

76. What are the four levels of AWS Premium Support?

Basic, Developer, Business, Enterprise

Basic, Startup, Business, Enterprise

Free, Bronze, Silver, Gold

All support is free

http://www.aiotestking.com/amazon/what-are-the-four-levels-of-aws-premium-support-4/

Explanation

http://www.aiotestking.com/amazon/what-are-the-four-levels-of-aws-premium-support-4/

77. When you resize the Amazon RDS DB instance, Amazon RDS will perform the upgrade during the next maintenance window. If you want the upgrade to be performed now, rather than waiting for the maintenance window, specify the _____ option.

ApplyNow

ApplySoon

ApplyThis

ApplyImmediately

http://www.aiotestking.com/amazon/if-you-want-the-upgrade-to-be-performed-now-rather-tha-4/

Explanation

http://www.aiotestking.com/amazon/if-you-want-the-upgrade-to-be-performed-now-rather-tha-4/

78. Fill in the blanks: Resources that are created in AWS are identified by a unique identifier called an __________

Amazon Resource Number

Amazon Resource Nametag

Amazon Resource Name

Amazon Resource Namespace

http://www.aiotestking.com/amazon/fill-in-the-blanks-resources-that-are-created-in-aws-a-3/

Explanation

http://www.aiotestking.com/amazon/fill-in-the-blanks-resources-that-are-created-in-aws-a-3/

79. When you run a DB Instance as a Multi-AZ deployment, the “_____” serves database writes and reads

Secondary

Backup

Stand by

Primary

http://www.aiotestking.com/amazon/when-you-run-a-db-instance-as-a-multi-az-deployment-th-3/

Explanation

http://www.aiotestking.com/amazon/when-you-run-a-db-instance-as-a-multi-az-deployment-th-3/

80. Typically, you want your application to check whether a request generated an error before you spend any time processing results. The easiest way to find out if an error occurred is to look for an __________ node in the response from the Amazon RDS API.

Incorrect

Error

FALSE

http://www.aiotestking.com/amazon/the-easiest-way-to-find-out-if-an-error-occurred-is-to-4/

Explanation

http://www.aiotestking.com/amazon/the-easiest-way-to-find-out-if-an-error-occurred-is-to-4/

81. Is there a limit to the number of groups you can have?

Yes for all users

Yes for all users except root

No

Yes unless special permission granted

http://www.aiotestking.com/amazon/is-there-a-limit-to-the-number-of-groups-you-can-have-6/

Explanation

http://www.aiotestking.com/amazon/is-there-a-limit-to-the-number-of-groups-you-can-have-6/

82. Which set of Amazon S3 features helps to prevent and recover from accidental data loss?

Object lifecycle and service access logging

Object versioning and Multi-factor authentication

Access controls and server-side encryption

Website hosting and Amazon S3 policies

http://www.aiotestking.com/amazon/which-set-of-amazon-s3-features-helps-to-prevent-and-re-2/

Explanation

http://www.aiotestking.com/amazon/which-set-of-amazon-s3-features-helps-to-prevent-and-re-2/

83. Location of Instances are ____________

Regional

Based on Availability Zone

Global

http://www.aiotestking.com/amazon/location-of-instances-are-4/

Explanation

http://www.aiotestking.com/amazon/location-of-instances-are-4/

84. A group can contain many users. Can a user belong to multiple groups?

Yes always

No

Yes but only if they are using two factor authentication

Yes but only in VPC

http://www.aiotestking.com/amazon/can-a-user-belong-to-multiple-groups-4/

Explanation

http://www.aiotestking.com/amazon/can-a-user-belong-to-multiple-groups-4/

85. Which of the following is a durable key-value store?

Amazon Simple Storage Service

Amazon Simple Workflow Service

Amazon Simple Queue Service

Amazon Simple Notification Service

http://www.aiotestking.com/amazon/which-of-the-following-is-a-durable-key-value-store-2/

Explanation

http://www.aiotestking.com/amazon/which-of-the-following-is-a-durable-key-value-store-2/

86. What does Amazon EC2 provide?

Virtual servers in the Cloud.

A platform to run code (Java, PHP, Python), paying on an hourly basis.

Computer Clusters in the Cloud.

Physical servers, remotely managed by the customer.

http://www.aiotestking.com/amazon/what-does-amazon-ec2-provide-4/

Explanation

http://www.aiotestking.com/amazon/what-does-amazon-ec2-provide-4/

87. If I scale the storage capacity provisioned to my DB Instance by mid of a billing month, how will I be charged?

You will be charged for the highest storage capacity you have used

On a proration basis

You will be charged for the lowest storage capacity you have used

http://www.aiotestking.com/amazon/how-will-i-be-charged-3/

Explanation

http://www.aiotestking.com/amazon/how-will-i-be-charged-3/

88. To help you manage your Amazon EC2 instances, images, and other Amazon EC2 resources, you can assign your own metadata to each resource in the form of____________

Special filters

Functions

89. After an Amazon VPC instance is launched, can I change the VPC security groups it belongs to?

No. You cannot.

Yes. You can.

Only if you are the root user

Only if the tag “VPC_Change_Group” is true

http://www.aiotestking.com/amazon/after-an-amazon-vpc-instance-is-launched-can-i-change-4/

Explanation

http://www.aiotestking.com/amazon/after-an-amazon-vpc-instance-is-launched-can-i-change-4/

90. You need to add a route to your routing table in order to allow connections to the internet from your subnet. What route should you add?

Destination: 192.168.1.258/0 –> Target: your Internet gateway

Destination: 0.0.0.0/33 –> Target: your virtual private gateway

Destination: 0.0.0.0/0 –> Target: 0.0.0.0/24

Destination: 10.0.0.0/32 –> Target: your virtual private gateway

Destination: 0.0.0.0/0 –> Target: your Internet gateway

http://www.aiotestking.com/amazon/what-route-should-you-add-2/

Explanation

http://www.aiotestking.com/amazon/what-route-should-you-add-2/

91. Which Amazon service can I use to define a virtual network that closely resembles a traditional data center?

Amazon VPC

Amazon ServiceBus

Amazon EMR

Amazon RDS

http://www.aiotestking.com/amazon/which-amazon-service-can-i-use-to-define-a-virtual-netw-3/

Explanation

http://www.aiotestking.com/amazon/which-amazon-service-can-i-use-to-define-a-virtual-netw-3/

92. Select the correct set of options. These are the initial settings for the default security group:

http://www.aiotestking.com/amazon/these-are-the-initial-settings-for-the-default-security-4/

Explanation

http://www.aiotestking.com/amazon/these-are-the-initial-settings-for-the-default-security-4/

93. You are working with a customer who is using Chef configuration management in their data center. Which service is designed to let the customer leverage existing Chef recipes in AWS?

Amazon Simple Workflow Service

AWS Elastic Beanstalk

AWS CloudFormation

AWS OpsWorks

http://www.aiotestking.com/amazon/which-service-is-designed-to-let-the-customer-leverage-2/

Explanation

http://www.aiotestking.com/amazon/which-service-is-designed-to-let-the-customer-leverage-2/

94. When it comes to API credentials, what is the best practise recommended by AWS?

Create a role which has the necessary and can be assumed by the EC2 instance.

Use the API credentials from an EC2 instance.

Use the API credentials from a bastion host.

Use the API credentials from a NAT Instance.

http://www.aiotestking.com/amazon/what-is-the-best-practise-recommended-by-aws-2/

Explanation

http://www.aiotestking.com/amazon/what-is-the-best-practise-recommended-by-aws-2/

95. What does Amazon SWF stand for?

Simple Web Flow

Simple Work Flow

Simple Wireless Forms

Simple Web Form

http://www.aiotestking.com/amazon/what-does-amazon-swf-stand-for-4/

Explanation

http://www.aiotestking.com/amazon/what-does-amazon-swf-stand-for-4/

96. What is the charge for the data transfer incurred in replicating data between your primary and standby?

Same as the standard data transfer charge

Double the standard data transfer charge

No charge. It is free

Half of the standard data transfer charge

http://www.aiotestking.com/amazon/what-is-the-charge-for-the-data-transfer-incurred-in-re-4/

Explanation

http://www.aiotestking.com/amazon/what-is-the-charge-for-the-data-transfer-incurred-in-re-4/

97. Can an EBS volume be attached to more than one EC2 instance at the same time?

No

Yes.

Only EC2-optimized EBS volumes.

Only in read mode.

http://www.aiotestking.com/amazon/can-an-ebs-volume-be-attached-to-more-than-one-ec2-inst-2/

Explanation

http://www.aiotestking.com/amazon/can-an-ebs-volume-be-attached-to-more-than-one-ec2-inst-2/

98. What is the maximum write throughput I can provision per table for a single DynamoDB table?

5,000 us east, 1,000 all other regions

100,000 us east, 10, 000 all other regions

There is no limit

http://www.aiotestking.com/amazon/what-is-the-maximum-write-throughput-i-can-provision-pe/

Explanation

http://www.aiotestking.com/amazon/what-is-the-maximum-write-throughput-i-can-provision-pe/

99. What is a Security Group?

None of these.

A list of users that can access Amazon EC2 instances.

An Access Control List (ACL) for AWS resources.

It acts as a virtual firewall that controls the traffic for one or more instances.

http://www.aiotestking.com/amazon/what-is-a-security-group-6/

Explanation

http://www.aiotestking.com/amazon/what-is-a-security-group-6/

100. You are a solutions architect working for a biotech company who is pioneering research in immunotherapy. They have developed a new cancer treatment that may be able to cure up to 94% of cancers. They store their research data on S3, however recently an intern accidentally deleted some critical files. You’ve been asked to prevent this from happening in the future. What options below can prevent this?

Make sure the interns can only access data on S3 using signed URLs.

Enable S3 versioning on the bucket & enable Enable Multifactor Authentication (MFA) on the bucket.

Use S3 Infrequently Accessed storage to store the data on.

Create an IAM bucket policy that disables deletes.

http://www.aiotestking.com/amazon/what-options-below-can-prevent-this-2/

Explanation

http://www.aiotestking.com/amazon/what-options-below-can-prevent-this-2/

101. With which AWS orchestration service can you implement Chef recipes?

CloudFormation

Elastic Beanstalk

Opsworks

Lambda

http://www.aiotestking.com/amazon/which-aws-orchestration-service-can-you-implement-chef/

Explanation

http://www.aiotestking.com/amazon/which-aws-orchestration-service-can-you-implement-chef/

102. When should I choose Provisioned IOPS over Standard RDS storage?

If you have batch-oriented workloads

If you use production online transaction processing (OLTP) workloads.

If you have workloads that are not sensitive to consistent performance

http://www.aiotestking.com/amazon/when-should-i-choose-provisioned-iops-over-standard-rds-4/

Explanation

http://www.aiotestking.com/amazon/when-should-i-choose-provisioned-iops-over-standard-rds-4/

103. A US-based company is expanding their web presence into Europe. The company wants to extend their AWS infrastructure from Northern Virginia (us-east-1) into the Dublin (eu-west-1) region. Which of the following options would enable an equivalent experience for users on both continents?

Use a public-facing load balancer per region to load-balance web traffic, and enable HTTP health checks.

Use a public-facing load balancer per region to load-balance web traffic, and enable sticky sessions.

Use Amazon Route 53, and apply a geolocation routing policy to distribute traffic across both regions.

Use Amazon Route 53, and apply a weighted routing policy to distribute traffic across both regions.

http://www.aiotestking.com/amazon/which-of-the-following-options-would-enable-an-equivale-2/

Explanation

http://www.aiotestking.com/amazon/which-of-the-following-options-would-enable-an-equivale-2/

104. What is the command line instruction for running the remote desktop client in Windows?

Desk.cpl

Mstsc

http://www.aiotestking.com/amazon/what-is-the-command-line-instruction-for-running-the-re-3/

Explanation

http://www.aiotestking.com/amazon/what-is-the-command-line-instruction-for-running-the-re-3/

105. A company has an AWS account that contains three VPCs (Dev, Test, and Prod) in the same region. Test is peered to both Prod and Dev. All VPCs have non-overlapping CIDR blocks. The company wants to push minor code releases from Dev to Prod to speed up time to market. Which of the following options helps the company accomplish this?

Create a new peering connection Between Prod and Dev along with appropriate routes.

Create a new entry to Prod in the Dev route table using the peering connection as the target.

The VPCs have non-overlapping CIDR blocks in the same account. The route tables contain local routes for all VPCs.

http://www.aiotestking.com/amazon/which-of-the-following-options-helps-the-company-accomp/

Explanation

http://www.aiotestking.com/amazon/which-of-the-following-options-helps-the-company-accomp/

106. Which of the following requires a custom CloudWatch metric to monitor?

Memory use

CPU use

Disk read operations

Network in

Estimated charges

http://www.aiotestking.com/amazon/which-of-the-following-requires-a-custom-cloudwatch-met-6/

Explanation

http://www.aiotestking.com/amazon/which-of-the-following-requires-a-custom-cloudwatch-met-6/

107. Which route must be added to your routing table in order to allow connections to the Internet from your subnet?

Destination: 0.0.0.0/0 –> Target: your Internet gateway

Destination: 192.168.1.257/0 –> Target: your Internet gatewayC. Destination: 0.0.0.0/33 –> Target: your virtual private gateway

Destination: 0.0.0.0/0 –> Target: 0.0.0.0/24

Destination: 10.0.0.0/32 –> Target: your virtual private gateway

http://www.aiotestking.com/amazon/which-route-must-be-added-to-your-routing-table-in-orde-2/

Explanation

http://www.aiotestking.com/amazon/which-route-must-be-added-to-your-routing-table-in-orde-2/

108. You have a high performance compute application and you need to minimize network latency between EC2 instances as much as possible. What can you do to achieve this?

Use Elastic Load Balancing to load balance traffic between availability zones

Create a CloudFront distribution and to cache objects from an S3 bucket at Edge Locations.

Create a placement group within an Availability Zone and place the EC2 instances within that placement group.

http://www.aiotestking.com/amazon/what-can-you-do-to-achieve-this-2/

Explanation

http://www.aiotestking.com/amazon/what-can-you-do-to-achieve-this-2/

109. Using SAML (Security Assertion Markup Language 2.0) you can give your federated users single sign-on (SSO) access to the AWS Management Console.

True

False

http://www.aiotestking.com/amazon/using-saml-security-assertion-markup-language-20-you/

Explanation

http://www.aiotestking.com/amazon/using-saml-security-assertion-markup-language-20-you/

110. To retrieve instance metadata or userdata you will need to use the following IP Address;

Http://127.0.0.1

Http://192.168.0.254

Http://10.0.0.1

Http://169.254.169.254

http://www.aiotestking.com/amazon/to-retrieve-instance-metadata-or-userdata-you-will-need-2/

Explanation

http://www.aiotestking.com/amazon/to-retrieve-instance-metadata-or-userdata-you-will-need-2/

111. Within the IAM service a GROUP is regarded as a:

A collection of AWS accounts

It’s the group of EC2 machines that gain the permissions specified in the GROUP.

There’s no GROUP in IAM, but only USERS and RESOURCES.

A collection of users.

http://www.aiotestking.com/amazon/within-the-iam-service-a-group-is-regarded-as-a-5/

Explanation

http://www.aiotestking.com/amazon/within-the-iam-service-a-group-is-regarded-as-a-5/

112. What does the “Server Side Encryption” option on Amazon S3 provide?

It provides an encrypted virtual disk in the Cloud.

It doesn’t exist for Amazon S3, but only for Amazon EC2.

It encrypts the files that you send to Amazon S3, on the server side.

It allows to upload files using an SSL endpoint, for a secure transfer.

http://www.aiotestking.com/amazon/what-does-the-ampquotserver-side-encryptionampquot-3/

Explanation

http://www.aiotestking.com/amazon/what-does-the-ampquotserver-side-encryptionampquot-3/

113. Can I detach the primary (eth0) network interface when the instance is running or stopped?

Yes, You can.

No. You cannot

Depends on the state of the interface at the time

http://www.aiotestking.com/amazon/when-the-instance-is-running-or-stopped-4/

Explanation

http://www.aiotestking.com/amazon/when-the-instance-is-running-or-stopped-4/

114. Can I initiate a "forced failover" for my MySQL Multi-AZ DB Instance deployment?

Only in certain regions

Only in VPC

Yes

No

If your DB instance is a Multi-AZ deployment, you can force a failover from one availability zone to another when you select the Reboot option. When you force a failover of your DB instance, Amazon RDS automatically switches to a standby replica in another Availability Zone and updates the DNS record for the DB instance to point to the standby DB instance. As a result, you will need to clean up and re-establish any existing connections to your DB instance. Reboot with failover is beneficial when you want to simulate a failure of a DB instance for testing, or restore operations to the original AZ after a failover occurs.
Source: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_RebootInstance.html

http://www.aiotestking.com/amazon/can-i-initiate-a-ampquotforced-failoverampquot-fo-5/

Explanation

If your DB instance is a Multi-AZ deployment, you can force a failover from one availability zone to another when you select the Reboot option. When you force a failover of your DB instance, Amazon RDS automatically switches to a standby replica in another Availability Zone and updates the DNS record for the DB instance to point to the standby DB instance. As a result, you will need to clean up and re-establish any existing connections to your DB instance. Reboot with failover is beneficial when you want to simulate a failure of a DB instance for testing, or restore operations to the original AZ after a failover occurs.
Source: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_RebootInstance.html

http://www.aiotestking.com/amazon/can-i-initiate-a-ampquotforced-failoverampquot-fo-5/

115. Are you able to integrate a multi-factor token service with the AWS Platform?

Yes, you can integrate private multi-factor token devices to authenticate users to the AWS platform.

No, you cannot integrate multi-factor token devices with the AWS platform.

Yes, using the AWS multi-factor token devices to authenticate users on the AWS platform.

http://www.aiotestking.com/amazon/are-you-able-to-integrate-a-multi-factor-token-service-4/

Explanation

http://www.aiotestking.com/amazon/are-you-able-to-integrate-a-multi-factor-token-service-4/

116. By default, what happens to ENIs that are automatically created and attached to EC2 instances when the attached instance terminates?

Remain as is

Terminate

Hibernate

Pause

http://www.aiotestking.com/amazon/what-happens-to-enis-that-are-automatically-created-and/

Explanation

http://www.aiotestking.com/amazon/what-happens-to-enis-that-are-automatically-created-and/

117. What is the maximum write throughput I can provision for a single Dynamic DB table?

1,000 write capacity units

100,000 write capacity units

Dynamic DB is designed to scale without limits, but if you go beyond 10,000 you have to contact AWS first.

10,000 write capacity units

http://www.aiotestking.com/amazon/what-is-the-maximum-write-throughput-i-can-provision-fo-4/

Explanation

http://www.aiotestking.com/amazon/what-is-the-maximum-write-throughput-i-can-provision-fo-4/

118. You have an EC2 Security Group with several running EC2 instances. You change the Security Group rules to allow inbound traffic on a new port and protocol, and launch several new instances in the same Security Group. The new rules apply:

Immediately to all instances in the security group.

Immediately to the new instances only.

Immediately to the new instances, but old instances must be stopped and restarted before the new rules apply.

To all instances, but it may take several minutes for old instances to see the changes.

http://www.aiotestking.com/amazon/the-new-rules-apply-4/

Explanation

http://www.aiotestking.com/amazon/the-new-rules-apply-4/

119. You have been asked to identify a service on AWS that is a durable key value store. Which of the services below meets this definition?

Mobile Hub

Kinesis

Simple Storage Service (S3)

Elastic File Service (EFS)

http://www.aiotestking.com/amazon/which-of-the-services-below-meets-this-definition-2/

Explanation

http://www.aiotestking.com/amazon/which-of-the-services-below-meets-this-definition-2/

120. You have decided to change the instance type for instances running in your application tier that is using Auto Scaling. In which area below would you change the instance type definition?

Auto Scaling policy

Auto Scaling group

Auto Scaling tags

Auto Scaling launch configuration

http://www.aiotestking.com/amazon/which-area-below-would-you-change-the-instance-type-def-3/

Explanation

http://www.aiotestking.com/amazon/which-area-below-would-you-change-the-instance-type-def-3/

121. If I want to run a database in an Amazon instance, which is the most recommended Amazon storage option?

Amazon Instance Storage

Amazon EBS

You can’t run a database inside an Amazon instance.

Amazon S3

http://www.aiotestking.com/amazon/which-is-the-most-recommended-amazon-storage-option-4/

Explanation

http://www.aiotestking.com/amazon/which-is-the-most-recommended-amazon-storage-option-4/

122. When you put objects in Amazon S3, what is the indication that an object was successfully stored?

A HTTP 200 result code and MD5 checksum, taken together, indicate that the operation was successful.

Amazon S3 is engineered for 99.999999999% durability. Therefore there is no need to confirm that data was inserted.

A success code is inserted into the S3 object metadata.

http://www.aiotestking.com/amazon/what-is-the-indication-that-an-object-was-successfully-4/

Explanation

http://www.aiotestking.com/amazon/what-is-the-indication-that-an-object-was-successfully-4/

123. What is the Reduced Redundancy option in Amazon S3?

Less redundancy for a lower cost.

It doesn’t exist in Amazon S3, but in Amazon EBS.

It allows you to destroy any copy of your files outside a specific jurisdiction.

It doesn’t exist at all

http://www.aiotestking.com/amazon/what-is-the-reduced-redundancy-option-in-amazon-s3-4/

Explanation

http://www.aiotestking.com/amazon/what-is-the-reduced-redundancy-option-in-amazon-s3-4/

124. Amazon SWF is designed to help users…

Design graphical user interface interactions

Manage user identification and authorization

Store Web content

Coordinate synchronous and asynchronous tasks which are distributed and fault tolerant.

http://www.aiotestking.com/amazon/amazon-swf-is-designed-to-help-users-3/

Explanation

http://www.aiotestking.com/amazon/amazon-swf-is-designed-to-help-users-3/

125. While performing volume status checks using volume status checks, if the status is insufficient-data, what does it mean?

Checks may still be in progress on the volume

Check has passed

Check has failed

There is no such status

http://www.aiotestking.com/amazon/what-does-it-mean-6/

Explanation

http://www.aiotestking.com/amazon/what-does-it-mean-6/

126. True or False: When using IAM to control access to your RDS resources, the key names that can be used are case sensitive. For example, aws:CurrentTime is NOT equivalent to AWS:currenttime.

TRUE

FALSE

http://www.aiotestking.com/amazon/for-example-awscurrenttime-is-not-equivalent-to-awsc-2/

Explanation

http://www.aiotestking.com/amazon/for-example-awscurrenttime-is-not-equivalent-to-awsc-2/

127. Amazon RDS DB snapshots and automated backups are stored in

Amazon S3

Amazon ECS Volume

Amazon RDS

Amazon EMR

http://www.aiotestking.com/amazon/amazon-rds-db-snapshots-and-automated-backups-are-stored-in-4/

Explanation

http://www.aiotestking.com/amazon/amazon-rds-db-snapshots-and-automated-backups-are-stored-in-4/

128. What are the Amazon EC2 API tools?

They don’t exist. The Amazon EC2 AMI tools, instead, are used to manage permissions.

Command-line tools to the Amazon EC2 web service.

They are a set of graphical tools to manage EC2 instances.

They don’t exist. The Amazon API tools are a client interface to Amazon Web Services.

http://www.aiotestking.com/amazon/what-are-the-amazon-ec2-api-tools-3/

Explanation

http://www.aiotestking.com/amazon/what-are-the-amazon-ec2-api-tools-3/

129. Disabling automated backups ______ disable the point-in-time recovery.

If configured to can

Will never

Will

http://www.aiotestking.com/amazon/disabling-automated-backups-disable-the-point-in-2/

Explanation

http://www.aiotestking.com/amazon/disabling-automated-backups-disable-the-point-in-2/

130. You are hosting a MySQL database on the root volume of an EC2 instance. The database is using a large amount of IOPs and you need to increase the IOPs available to it. What should you do?

Migrate the database to an S3 bucket.

Migrate the database to Glacier.

Add 4 additional EBS SSD volumes and create a RAID 10 using these volumes.

Use CloudFront to cache the database.

http://www.aiotestking.com/amazon/you-need-to-increase-the-iops-available-to-it/

Explanation

http://www.aiotestking.com/amazon/you-need-to-increase-the-iops-available-to-it/

131. You work in the genomics industry and you process large amounts of genomic data using a nightly Elastic Map Reduce (EMR) job. This job processes a single 3 Tb file which is stored on S3. The EMR job runs on 3 ondemand core nodes and four on-demand task nodes. The EMR job is now taking longer than anticipated and you have been asked to advise how to reduced the completion time?

Use four Spot Instances for the task nodes rather than four On-Demand instances.

Enable termination protection for the job flow.

http://www.aiotestking.com/amazon/how-to-reduced-the-completion-time-2/

Explanation

http://www.aiotestking.com/amazon/how-to-reduced-the-completion-time-2/

132. Using Amazon IAM, can I give permission based on organizational groups?

Yes but only in certain cases

No

Yes always

http://www.aiotestking.com/amazon/using-amazon-iam-can-i-give-permission-based-on-organi-3/

Explanation

http://www.aiotestking.com/amazon/using-amazon-iam-can-i-give-permission-based-on-organi-3/

133. Does AWS Direct Connect allow you access to all Availabilities Zones within a Region?

Depends on the type of connection

No

Yes

http://www.aiotestking.com/amazon/does-aws-direct-connect-allow-you-access-to-all-availab-3/

Explanation

http://www.aiotestking.com/amazon/does-aws-direct-connect-allow-you-access-to-all-availab-3/

134. Are Reserved Instances available for Multi-AZ Deployments?

Only for Cluster Compute instances

Yes for all instance types

Only for M3 instance types

No

http://www.aiotestking.com/amazon/are-reserved-instances-available-for-multi-az-deployments-4/

Explanation

http://www.aiotestking.com/amazon/are-reserved-instances-available-for-multi-az-deployments-4/

135. Do the Amazon EBS volumes persist independently from the running life of an Amazon EC2 instance?

Only if instructed to when created

Yes

No

http://www.aiotestking.com/amazon/do-the-amazon-ebs-volumes-persist-independently-from-th-4/

Explanation

http://www.aiotestking.com/amazon/do-the-amazon-ebs-volumes-persist-independently-from-th-4/

136. If I want my instance to run on a single-tenant hardware, which value do I have to set the instance’s tenancy attribute to?

Dedicated

Isolated

One

Reserved

http://www.aiotestking.com/amazon/which-value-do-i-have-to-set-the-instances-tenancy-att-2/

Explanation

http://www.aiotestking.com/amazon/which-value-do-i-have-to-set-the-instances-tenancy-att-2/

137. The SQL Server _____ feature is an efficient means of copying data from a source database to your DB Instance. It writes the data that you specify to a data file, such as an ASCII file.

Bulk copy

Group copy

Dual copy

Mass copy

http://www.aiotestking.com/amazon/it-writes-the-data-that-you-specify-to-a-data-file-suc-3/

Explanation

http://www.aiotestking.com/amazon/it-writes-the-data-that-you-specify-to-a-data-file-suc-3/

138. Disabling automated backups disables the point-in-time recovery feature.

True

False

http://www.aiotestking.com/amazon/disabling-automated-backups-disables-the-point-in-time/

Explanation

http://www.aiotestking.com/amazon/disabling-automated-backups-disables-the-point-in-time/

139. A __________ is a document that provides a formal statement of one or more permissions.

Policy

Permission

Role

Resource

http://www.aiotestking.com/amazon/a-is-a-document-that-provides-a-formal-state-2/

Explanation

http://www.aiotestking.com/amazon/a-is-a-document-that-provides-a-formal-state-2/

140. What are the initial settings of an user created security group?

Allow all inbound traffic and Allow no outbound traffic

Allow no inbound traffic and Allow no outbound traffic

Allow no inbound traffic and Allow all outbound traffic

Allow all inbound traffic and Allow all outbound traffic

http://www.aiotestking.com/amazon/what-are-the-initial-settings-of-an-user-created-securi-3/

Explanation

http://www.aiotestking.com/amazon/what-are-the-initial-settings-of-an-user-created-securi-3/

141. What does Amazon Elastic Beanstalk provide?

A scalable storage appliance on top of Amazon Web Services.

An application container on top of Amazon Web Services.

A service by this name doesn’t exist.

A scalable cluster of EC2 instances.

http://www.aiotestking.com/amazon/what-does-amazon-elastic-beanstalk-provide-6/

Explanation

http://www.aiotestking.com/amazon/what-does-amazon-elastic-beanstalk-provide-6/

142. True or False: Automated backups are enabled by default for a new DB Instance.

TRUE

FALSE

http://www.aiotestking.com/amazon/true-or-false-automated-backups-are-enabled-by-default-2/

Explanation

http://www.aiotestking.com/amazon/true-or-false-automated-backups-are-enabled-by-default-2/

143. Amazon EC2 provides a repository of public data sets that can be seamlessly integrated into AWS cloud-based applications.What is the monthly charge for using the public data sets?

A 1 time charge of 10$ for all the datasets.

1$ per dataset per month

10$ per month for all the datasets

There is no charge for using the public data sets

” Public Datasets on AWS provides a centralized repository of public datasets that can be seamlessly integrated into AWS cloud-based applications. AWS is hosting the public datasets at no charge for the community, and like all AWS services, users pay only for the compute and storage they use for their own applications. Learn more about Public Datasets on AWS “

http://www.aiotestking.com/amazon/what-is-the-monthly-charge-for-using-the-public-data-sets-5/

Explanation

” Public Datasets on AWS provides a centralized repository of public datasets that can be seamlessly integrated into AWS cloud-based applications. AWS is hosting the public datasets at no charge for the community, and like all AWS services, users pay only for the compute and storage they use for their own applications. Learn more about Public Datasets on AWS “

http://www.aiotestking.com/amazon/what-is-the-monthly-charge-for-using-the-public-data-sets-5/

144. Which of the following is not a valid configuration type for AWS Storage gateway.

Gateway-accessed volumes

Gateway-cached volumes

Gateway-stored volumes

Gateway-Virtual Tape Library

http://www.aiotestking.com/amazon/which-of-the-following-is-not-a-valid-configuration-typ-2/

Explanation

http://www.aiotestking.com/amazon/which-of-the-following-is-not-a-valid-configuration-typ-2/

145. A __________ is the concept of allowing (or disallowing) an entity such as a user, group, or role some type of access to one or more resources.

User

AWS Account

Resource

Permission

http://www.aiotestking.com/amazon/a-is-the-concept-of-allowing-or-disallowing-2/

Explanation

http://www.aiotestking.com/amazon/a-is-the-concept-of-allowing-or-disallowing-2/

146. You run a website which hosts videos and you have two types of members, premium fee paying members and free members. All videos uploaded by both your premium members and free members are processed by a fleet of EC2 instances which will poll SQS as videos are uploaded. However you need to ensure that your premium fee paying members videos have a higher priority than your free members. How do you design SQS?

SQS would not be suitable for this scenario. It would be much better to use SNS to encode the videos.

http://www.aiotestking.com/amazon/how-do-you-design-sqs-2/

Explanation

http://www.aiotestking.com/amazon/how-do-you-design-sqs-2/

147. To view information about an Amazon EBS volume, open the Amazon EC2 console at https:// console.aws.amazon.com/ec2/, click __________ in the Navigation pane.

EBS

Describe

Details

Volumes

http://www.aiotestking.com/amazon/to-view-information-about-an-amazon-ebs-volume-open-th-3/

Explanation

http://www.aiotestking.com/amazon/to-view-information-about-an-amazon-ebs-volume-open-th-3/

148. A company is building software on AWS that requires access to various AWS services. Which configuration should be used to ensure mat AWS credentials (i.e., Access Key ID/Secret Access Key combination) are not compromised?

Enable Multi-Factor Authentication for your AWS root account.

Assign an IAM role to the Amazon EC2 instance.

Store the AWS Access Key ID/Secret Access Key combination in software comments.

Assign an IAM user to the Amazon EC2 Instance.

http://www.aiotestking.com/amazon/which-configuration-should-be-used-to-ensure-mat-aws-cr-2/

Explanation

http://www.aiotestking.com/amazon/which-configuration-should-be-used-to-ensure-mat-aws-cr-2/

149. Can I use Provisioned IOPS with VPC?

Only Oracle based RDS

No

Only with MSSQL based RDS

Yes for all RDS instances

http://www.aiotestking.com/amazon/can-i-use-provisioned-iops-with-vpc-4/

Explanation

http://www.aiotestking.com/amazon/can-i-use-provisioned-iops-with-vpc-4/

150. How are the EBS snapshots saved on Amazon S3?

Exponentially

Incrementally

EBS snapshots are not stored in the Amazon S3

Decrementally

http://www.aiotestking.com/amazon/how-are-the-ebs-snapshots-saved-on-amazon-s3-4/

Explanation

http://www.aiotestking.com/amazon/how-are-the-ebs-snapshots-saved-on-amazon-s3-4/

151. You are deploying an application to track GPS coordinates of delivery trucks in the United States. Coordinates are transmitted from each delivery truck once every three seconds. You need to design an architecture that will enable real-time processing of these coordinates from multiple consumers. Which service should you use to implement data ingestion?

Amazon Kinesis

AWS Data Pipeline

Amazon AppStream

Amazon Simple Queue Service

http://www.aiotestking.com/amazon/which-service-should-you-use-to-implement-data-ingestion-2/

Explanation

http://www.aiotestking.com/amazon/which-service-should-you-use-to-implement-data-ingestion-2/

152. Which Amazon Elastic Compute Cloud feature can you query from within the instance to access instance properties?

Instance user data

Resource tags

Instance metadata

Amazon Machine Image

http://www.aiotestking.com/amazon/which-amazon-elastic-compute-cloud-feature-can-you-quer-3/

Explanation

http://www.aiotestking.com/amazon/which-amazon-elastic-compute-cloud-feature-can-you-quer-3/

153. Is the encryption of connections between my application and my DB Instance using SSL for the MySQL server engines available?

Yes

Only in VPC

Only in certain regions

No

http://www.aiotestking.com/amazon/is-the-encryption-of-connections-between-my-application-3/

Explanation

http://www.aiotestking.com/amazon/is-the-encryption-of-connections-between-my-application-3/

154. You can modify the backup retention period; valid values are 0 (for no backup retention) to a maximum of ___________ days.

45

35

15

5

http://www.aiotestking.com/amazon/you-can-modify-the-backup-retention-period-valid-value-2/

Explanation

http://www.aiotestking.com/amazon/you-can-modify-the-backup-retention-period-valid-value-2/

155. In the Amazon RDS Oracle DB engine, the Database Diagnostic Pack and the Database Tuning Pack are only available with ______________

Oracle Standard Edition

Oracle Express Edition

Oracle Enterprise Edition

None of these

http://www.aiotestking.com/amazon/in-the-amazon-rds-oracle-db-engine-the-database-diagno-3/

Explanation

http://www.aiotestking.com/amazon/in-the-amazon-rds-oracle-db-engine-the-database-diagno-3/

156. Can I initiate a “forced failover” for my Oracle Multi-AZ DB Instance deployment?

Yes

Only in certain regions

Only in VPC

No

http://www.aiotestking.com/amazon/can-i-initiate-a-ampquotforced-failoverampquot-fo-6/

Explanation

http://www.aiotestking.com/amazon/can-i-initiate-a-ampquotforced-failoverampquot-fo-6/

157. What does the following command do with respect to the Amazon EC2 security groups? ec2-create-group CreateSecurityGroup

Groups the user created security groups in to a new group for easy access.

Creates a new security group for use with your account.

Creates a new group inside the security group.

Creates a new rule inside the security group.

http://www.aiotestking.com/amazon/what-does-the-following-command-do-with-respect-to-the-4/

Explanation

http://www.aiotestking.com/amazon/what-does-the-following-command-do-with-respect-to-the-4/

158. You work for a toy company that has a busy online store. As you are approaching christmas you find that your store is getting more and more traffic. You ensure that the web tier of your store is behind an Auto Scaling group, however you notice that the web tier is frequently scaling, sometimes multiple times in an hour, only to scale back after peak usage. You need to prevent this so that Auto Scaling does not scale as rapidly, just to scale back again. What option would help you to achieve this?

Configure Auto Scaling to terminate your oldest instances first, then adjust your CloudWatch alarm.

Configure Auto Scaling to terminate your newest instances first, then adjust your CloudWatch alarm.

Change your Auto Scaling so that it only scales at scheduled times.

http://www.aiotestking.com/amazon/what-option-would-help-you-to-achieve-this-2/

Explanation

http://www.aiotestking.com/amazon/what-option-would-help-you-to-achieve-this-2/

159. In the context of MySQL, version numbers are organized as MySQL version = X.Y.Z. What does X denote here?

Release level

Minor version

Version number

Major version

http://www.aiotestking.com/amazon/what-does-x-denote-here-3/

Explanation

http://www.aiotestking.com/amazon/what-does-x-denote-here-3/

160. EBS Snapshots occur _____

Asynchronously

Synchronously

Weekly

http://www.aiotestking.com/amazon/ebs-snapshots-occur-_-3/

Explanation

http://www.aiotestking.com/amazon/ebs-snapshots-occur-_-3/

161. A/An _____ acts as a firewall that controls the traffic allowed to reach one or more instances.

Security group

ACL

IAM

Private IP Addresses

http://www.aiotestking.com/amazon/aan-_-acts-as-a-firewall-that-controls-the-traffic-2/

Explanation

http://www.aiotestking.com/amazon/aan-_-acts-as-a-firewall-that-controls-the-traffic-2/

162. Amazon S3 provides;

Unlimited File Size for Objects

Unlimited Storage

A great place to run a No SQL database from

The ability to act as a web server for dynamic content (i.e. can query a database)

http://www.aiotestking.com/amazon/amazon-s3-provides-2/

Explanation

http://www.aiotestking.com/amazon/amazon-s3-provides-2/

163. You run an automobile reselling company that has a popular online store on AWS. The application sits behind an Auto Scaling group and requires new instances of the Auto Scaling group to identify their public and private IP addresses. How can you achieve this?

By using Ipconfig for windows or Ifconfig for Linux.

By using a cloud watch metric.

Using a Curl or Get Command to get the latest meta-data from http://169.254.169.254/latest/meta-data/

Using a Curl or Get Command to get the latest user-data from http://169.254.169.254/latest/user-data/

http://www.aiotestking.com/amazon/how-can-you-achieve-this-2/

Explanation

http://www.aiotestking.com/amazon/how-can-you-achieve-this-2/

164. Your web application front end consists of multiple EC2 instances behind an Elastic Load Balancer. You configured ELB to perform health checks on these EC2 instances, if an instance fails to pass health checks, which statement will be true?

The instance gets terminated automatically by the ELB

The instance gets quarantined by the ELB for root cause analysis.

The instance is replaced automatically by the ELB

The ELB stops sending traffic to the instance that failed its health check.

http://www.aiotestking.com/amazon/which-statement-will-be-true-4/

Explanation

http://www.aiotestking.com/amazon/which-statement-will-be-true-4/

165. What is an isolated database environment running in the cloud (Amazon RDS) called?

DB Instance

DB Server

DB Unit

DB Volume

http://www.aiotestking.com/amazon/what-is-an-isolated-database-environment-running-in-the-3/

Explanation

http://www.aiotestking.com/amazon/what-is-an-isolated-database-environment-running-in-the-3/

166. Which of the following notification endpoints or clients are supported by Amazon Simple Notification Service? (Choose two.)

Email

CloudFront distribution

File Transfer Protocol

Short Message Service

Simple Network Management Protocol

http://www.aiotestking.com/amazon/which-of-the-following-notification-endpoints-or-client-2/

Explanation

http://www.aiotestking.com/amazon/which-of-the-following-notification-endpoints-or-client-2/

Submit

167. By default what are ENIs that are automatically created and attached to instances using the EC2 console set to do when the attached instance terminates?

Remain as is

Terminate

Hibernate

Pause

http://www.aiotestking.com/amazon/what-are-enis-that-are-automatically-created-and-attach-3/

Explanation

http://www.aiotestking.com/amazon/what-are-enis-that-are-automatically-created-and-attach-3/

168. Before I delete an EBS volume, what can I do if I want to recreate the volume later?

Create a copy of the EBS volume (not a snapshot)

Store a snapshot of the volume

Download the content to an EC2 instance

Back up the data in to a physical disk

http://www.aiotestking.com/amazon/what-can-i-do-if-i-want-to-recreate-the-volume-later-3/

Explanation

http://www.aiotestking.com/amazon/what-can-i-do-if-i-want-to-recreate-the-volume-later-3/

169. Fill in the blanks: The base URI for all requests for instance metadata is ___________

Http://254.169.169.254/latest/

Http://169.169.254.254/latest/

Http://127.0.0.1/latest/

Http://169.254.169.254/latest/

http://www.aiotestking.com/amazon/fill-in-the-blanks-the-base-uri-for-all-requests-for-i-3/

Explanation

http://www.aiotestking.com/amazon/fill-in-the-blanks-the-base-uri-for-all-requests-for-i-3/

170. Groups can’t _____.

Be nested more than 3 levels

Be nested at all

Be nested more than 4 levels

Be nested more than 2 levels

http://www.aiotestking.com/amazon/groups-cant-_-3/

Explanation

http://www.aiotestking.com/amazon/groups-cant-_-3/

171. You can add multiple volumes to an EC2 instance and then create your own RAID 5/RAID 10/RAID 0 configurations using those volumes.

True

False

http://www.aiotestking.com/amazon/you-can-add-multiple-volumes-to-an-ec2-instance-and-the/

Explanation

http://www.aiotestking.com/amazon/you-can-add-multiple-volumes-to-an-ec2-instance-and-the/

172. True or False: When you perform a restore operation to a point in time or from a DB Snapshot, a new DB Instance is created with a new endpoint.

FALSE

TRUE

http://www.aiotestking.com/amazon/true-or-false-when-you-perform-a-restore-operation-to-3/

Explanation

http://www.aiotestking.com/amazon/true-or-false-when-you-perform-a-restore-operation-to-3/

173. Amazon S3 doesn’t automatically give a user who creates _____ permission to perform other actions on that bucket or object.

A file

A bucket or object

A bucket or file

A object or file

http://www.aiotestking.com/amazon/amazon-s3-doesnt-automatically-give-a-user-who-creates-3/

Explanation

http://www.aiotestking.com/amazon/amazon-s3-doesnt-automatically-give-a-user-who-creates-3/

174. What is the maximum response time for a Business level Premium Support case?

30 minutes

1 hour

12 hours

10 minutes

http://www.aiotestking.com/amazon/what-is-the-maximum-response-time-for-a-business-level-6/

Explanation

http://www.aiotestking.com/amazon/what-is-the-maximum-response-time-for-a-business-level-6/

175. Can we attach an EBS volume to more than one EC2 instance at the same time?

Yes.

No

Only EC2-optimized EBS volumes.

Only in read mode.

http://www.aiotestking.com/amazon/can-we-attach-an-ebs-volume-to-more-than-one-ec2-instan-5/

Explanation

http://www.aiotestking.com/amazon/can-we-attach-an-ebs-volume-to-more-than-one-ec2-instan-5/

176. The one-time payment for Reserved Instances is __________ refundable if the reservation is cancelled.

Always

In some circumstances

Never

http://www.aiotestking.com/amazon/the-one-time-payment-for-reserved-instances-is-2/

Explanation

http://www.aiotestking.com/amazon/the-one-time-payment-for-reserved-instances-is-2/

177. My Read Replica appears “stuck” after a Multi-AZ failover and is unable to obtain or apply updates from the source DB Instance. What do I do?

You will need to delete the Read Replica and create a new one to replace it.

You will need to disassociate the DB Engine and re associate it.

The instance should be deployed to Single AZ and then moved to Multi- AZ once again

You will need to delete the DB Instance and create a new one to replace it.

http://www.aiotestking.com/amazon/what-do-i-do-4/

Explanation

http://www.aiotestking.com/amazon/what-do-i-do-4/

178. Which Amazon storage do you think is the best for my database-style applications that frequently encounter many random reads and writes across the dataset?

None of these.

Amazon Instance Storage

Any of these

Amazon EBS

http://www.aiotestking.com/amazon/which-amazon-storage-do-you-think-is-the-best-for-my-da-3/

Explanation

http://www.aiotestking.com/amazon/which-amazon-storage-do-you-think-is-the-best-for-my-da-3/

179. ____________ embodies the "share-nothing" architecture and essentially involves breaking a large database into several smaller databases. Common ways to split a database include:1. splitting tables that are not joined in the same query onto different hosts OR2. duplicating a table across multiple hosts and then using a hashing algorithm to determine which host receives a given update.

Sharding

Failure recovery

Federation

DDL operations

http://www.aiotestking.com/amazon/common-ways-to-split-a-database-include-1-splitting-ta-3/

Explanation

http://www.aiotestking.com/amazon/common-ways-to-split-a-database-include-1-splitting-ta-3/

180. What is the name of licensing model in which I can use your existing Oracle Database licenses to run Oracle deployments on Amazon RDS?

Bring Your Own License

Role Bases License

Enterprise License

License Included

http://www.aiotestking.com/amazon/what-is-the-name-of-licensing-model-in-which-i-can-use-4/

Explanation

http://www.aiotestking.com/amazon/what-is-the-name-of-licensing-model-in-which-i-can-use-4/

181. You must increase storage size in increments of at least _____ %

40

20

50

10

http://www.aiotestking.com/amazon/you-must-increase-storage-size-in-increments-of-at-leas-3/

Explanation

http://www.aiotestking.com/amazon/you-must-increase-storage-size-in-increments-of-at-leas-3/

182. You have been asked to create VPC for your company. The VPC must support both Internet-facing web applications (ie they need to be publicly accessible) and internal private applications (i.e. they are not publicly accessible and can be accessed only over VPN). The internal private applications must be inside a private subnet. Both the internet-facing and private applications must be able to leverage at least three Availability Zones for high availability. At a minimum, how many subnets must you create within your VPC to achieve this?

5

3

4

6

http://www.aiotestking.com/amazon/how-many-subnets-must-you-create-within-your-vpc-to-ach/

Explanation

http://www.aiotestking.com/amazon/how-many-subnets-must-you-create-within-your-vpc-to-ach/

183. You work for a major news network in Europe. They have just released a new app which allows users to report on events as and when they happen using their mobile phone. Users are able to upload pictures from the app and then other users will be able to view these pics. Your organization expects this app to grow very quickly, essentially doubling it’s user base every month. The app uses S3 to store the media and you are expectingsudden and large increases in traffic to S3 when a major news event takes place (as people will be uploading content in huge numbers). You need to keep your storage costs to a minimum however and it does not matter if some objects are lost. Which storage media should you use to keep costs as low as possible?

S3 – Infrequently Accessed Storage.

S3 – Reduced Redundancy Storage (RRS).

Glacier.

S3 – Provisioned IOPS.

http://www.aiotestking.com/amazon/which-storage-media-should-you-use-to-keep-costs-as-low-2/

Explanation

http://www.aiotestking.com/amazon/which-storage-media-should-you-use-to-keep-costs-as-low-2/

184. In order to enable encryption at rest using EC2 and Elastic Block Store you need to

Configure encryption when creating the EBS volume

Configure encryption using the appropriate Operating Systems file system

Configure encryption using X.509 certificates

Mount the EBS volume in to S3 and then encrypt the bucket using a bucket policy.

http://www.aiotestking.com/amazon/you-need-to-3/

Explanation

http://www.aiotestking.com/amazon/you-need-to-3/

185. In the ‘Detailed’ monitoring data available for your Amazon EBS volumes, Provisioned IOPS volumes automatically send _____ minute metrics to Amazon CloudWatch.

3

1

5

2

http://www.aiotestking.com/amazon/in-the-detailed-monitoring-data-available-for-your-am-4/

Explanation

http://www.aiotestking.com/amazon/in-the-detailed-monitoring-data-available-for-your-am-4/

186. What can I access by visiting the URL: https://status.aws.amazon.com/?

Amazon Cloud Watch

Status of the Amazon RDS DB

AWS Service Health Dashboard

AWS Cloud Monitor

http://www.aiotestking.com/amazon/what-can-i-access-by-visiting-the-url-httpstatusaw-3/

Explanation

http://www.aiotestking.com/amazon/what-can-i-access-by-visiting-the-url-httpstatusaw-3/

187. Is creating a Read Replica of another Read Replica supported?

Only in certain regions

Only with MSSQL based RDS

Only for Oracle RDS types

No

http://www.aiotestking.com/amazon/is-creating-a-read-replica-of-another-read-replica-supp-5/

Explanation

http://www.aiotestking.com/amazon/is-creating-a-read-replica-of-another-read-replica-supp-5/

188. Amazon Web Services offer 3 different levels of support, which of the below are valid support levels.

Corporate, Business, Developer

Enterprise, Business, Developer

Enterprise, Business, Free Tier

Enterprise, Company, Free Tier

http://www.aiotestking.com/amazon/amazon-web-services-offer-3-different-levels-of-support-2/

Explanation

http://www.aiotestking.com/amazon/amazon-web-services-offer-3-different-levels-of-support-2/

189. What are the two permission types used by AWS?

Resource-based and Product-based

Product-based and Service-based

Service-based

User-based and Resource-based

http://www.aiotestking.com/amazon/what-are-the-two-permission-types-used-by-aws-4/

Explanation

http://www.aiotestking.com/amazon/what-are-the-two-permission-types-used-by-aws-4/

190. You are tasked with setting up a Linux bastion host for access to Amazon EC2 instances running in your VPC. Only clients connecting from the corporate external public IP address 72.34.51.100 should have SSH access to the host. Which option will meet the customer requirement?

Security Group Inbound Rule: Protocol – TCP. Port Range – 22, Source 72.34.51.100/32

Security Group Inbound Rule: Protocol – UDP, Port Range – 22, Source 72.34.51.100/32

Network ACL Inbound Rule: Protocol – UDP, Port Range – 22, Source 72.34.51.100/32

Network ACL Inbound Rule: Protocol – TCP, Port Range-22, Source 72.34.51.100/0

http://www.aiotestking.com/amazon/which-option-will-meet-the-customer-requirement-4/

Explanation

http://www.aiotestking.com/amazon/which-option-will-meet-the-customer-requirement-4/

191. After creating a new IAM user which of the following must be done before they can successfully make API calls?

Add a password to the user.

Enable Multi-Factor Authentication for the user.

Assign a Password Policy to the user.

Create a set of Access Keys for the user.

http://www.aiotestking.com/amazon/which-of-the-following-must-be-done-before-they-can-suc-3/

Explanation

http://www.aiotestking.com/amazon/which-of-the-following-must-be-done-before-they-can-suc-3/

192. You have an application running on an EC2 Instance which will allow users to download flies from a private S3 bucket using a pre-assigned URL. Before generating the URL the application should verify the existence of the file in S3. How should the application use AWS credentials to access the S3 bucket securely?

Use the AWS account access Keys the application retrieves the credentials from the source code of the application.

http://www.aiotestking.com/amazon/how-should-the-application-use-aws-credentials-to-acces-4/

Explanation

http://www.aiotestking.com/amazon/how-should-the-application-use-aws-credentials-to-acces-4/

193. What is the maximum response time for a Business level Premium Support case?

120 seconds

1 hour

10 minutes

12 hours

http://www.aiotestking.com/amazon/what-is-the-maximum-response-time-for-a-business-level-4/

Explanation

http://www.aiotestking.com/amazon/what-is-the-maximum-response-time-for-a-business-level-4/

194. Which of the services below do you get root access to?

Elasticache & Elastic MapReduce

RDS & DynamoDB

EC2 & Elastic MapReduce

Elasticache & DynamoDB

http://www.aiotestking.com/amazon/which-of-the-services-below-do-you-get-root-access-to/

Explanation

http://www.aiotestking.com/amazon/which-of-the-services-below-do-you-get-root-access-to/

195. You are working with a customer who has 10 TB of archival data that they want to migrate to Amazon Glacier. The customer has a 1-Mbps connection to the Internet. Which service or feature provides the fastest method of getting the data into Amazon Glacier?

Amazon Glacier multipart upload

AWS Storage Gateway

VM Import/Export

AWS Import/Export

http://www.aiotestking.com/amazon/which-service-or-feature-provides-the-fastest-method-of-2/

Explanation

http://www.aiotestking.com/amazon/which-service-or-feature-provides-the-fastest-method-of-2/

196. A customer is leveraging Amazon Simple Storage Service in eu-west-1 to store static content for a web-based property. The customer is storing objects using the Standard Storage class. Where are the customers objects replicated?

A single facility in eu-west-1 and a single facility in eu-central-1

A single facility in eu-west-1 and a single facility in us-east-1

Multiple facilities in eu-west-1

A single facility in eu-west-1

http://www.aiotestking.com/amazon/where-are-the-customers-objects-replicated-4/

Explanation

http://www.aiotestking.com/amazon/where-are-the-customers-objects-replicated-4/

197. The new DB Instance that is created when you promote a Read Replica retains the backup window period.

TRUE

FALSE

http://www.aiotestking.com/amazon/the-new-db-instance-that-is-created-when-you-promote-a-3/

Explanation

http://www.aiotestking.com/amazon/the-new-db-instance-that-is-created-when-you-promote-a-3/

198. Are you able to integrate a multi-factor token service with the AWS Platform?

No, you cannot integrate multi-factor token devices with the AWS platform.

Yes, you can integrate private multi-factor token devices to authenticate users to the AWS platform.

Yes, using the AWS multi-factor token devices to authenticate users on the AWS platform.

http://www.aiotestking.com/amazon/are-you-able-to-integrate-a-multi-factor-token-service-5/

Explanation

http://www.aiotestking.com/amazon/are-you-able-to-integrate-a-multi-factor-token-service-5/

199. Using Amazon IAM, I can give permissions based on organizational groups?

True

False

http://www.aiotestking.com/amazon/using-amazon-iam-i-can-give-permissions-based-on-organ-2/

Explanation

http://www.aiotestking.com/amazon/using-amazon-iam-i-can-give-permissions-based-on-organ-2/

200. Is there a limit to how many groups a user can be in?

Yes for all users

Yes for all users except root

No

Yes unless special permission granted

http://www.aiotestking.com/amazon/how-many-groups-a-user-can-be-in-4/

Explanation

http://www.aiotestking.com/amazon/how-many-groups-a-user-can-be-in-4/

AWS SAA Certification Test! Hardest Trivia Quiz

1. What does RRS stand for when talking about S3?

2.

What first name or nickname would you like us to use?

2. While creating the snapshots using the API, which Action should I be using?

3. What does Amazon ELB stand for?

4. Which is the default region in AWS?

5. After creating a new AWS account, you use the API to request 40 on-demand EC2 instances in a single AZ. After 20 successful requests, subsequent requests failed. What could be a reason for this issue, and how would you resolve it?

6. Multi-AZ deployment is supported for Microsoft SQL Server DB Instances.

7. How many relational database engines does RDS currently support?

8. You are a student currently learning about the different AWS services. Your employer asks you to tell him a bit about Amazon’s glacier service. Which of the following best describes the use cases for Glacier?

9. A custorner has a requirement to extend their on-premises data center to AWS. The custorner requires a 50-Mbps dedicated and private connection to their VPC. Which AWS product or feature satisfies this requirernent?

10. You must assign each server to at least _____ security group

11. How can software determine the public and private IP addresses of the EC2 instance that it is running on?

12. While creating an Amazon RDS DB, your first task is to set up a DB ______ that controls what IP addresses or EC2 instances have access to your DB Instance.

13. Is an edge location in AWS the same as a region?

14. While creating the snapshots using the command line tools, which command should I be using?

15. What is Amazon Glacier?

16. IAM’s Policy Evaluation Logic always starts with a default ____________ for every request, except for those that use the AWS account’s root security credentials b

17. While creating an EC2 snapshot using the API, which Action should I be using?

18. You can have 1 subnet stretched across multiple availability zones.

19. Amazon RDS automated backups and DB Snapshots are currently supported for only the ______ storage engine

20. Can I encrypt connections between my application and my DB Instance using SSL?

21. Is there any way to own a direct connection to Amazon Web Services?

22. Without _____, you must either create multiple AWS accounts-each with its own billing and subscriptions to AWS products-or your employees must share the security credentials of a single AWS account.

23. How many relational database engines does RDS currently support?

24. If I want an instance to have a public IP address, which IP address should I use?

25. Amazon Glacier is designed for: (Choose 2 answers)

26. Fill in the blanks: _________ let you categorize your EC2 resources in different ways, for example, by purpose, owner, or environment.

27. You have uploaded a file to S3. What HTTP code would indicate that the upload was successful?

28. A company is deploying a two-tier, highly available web application to AWS. Which service provides durable storage for static content while utilizing lower Overall CPU resources for the web tier?

30. What does Amazon ElastiCache provide?

31. You are appointed as your company’s Chief Security Officer and you want to be able to track all changes made to your AWS environment, by all users and at all times, in all regions. What AWS service should you use to achieve this?

32. Amazon S3 buckets in the US Standard region do not provide eventual consistency.

33. While performing the volume status checks, if the status is insufficient-data, what does it mean?

34. The _____ service is targeted at organizations with multiple users or systems that use AWS products such as Amazon EC2, Amazon SimpleDB, and the AWS Management Console.

35. Every user you create in the IAM system starts with ___________.

36. A company is hosting EC2 instances which focuses on work-loads are on non-production and non-priority batch loads. Also these processes can be interrupted at any time. What is the best pricing model which can be used for EC2 instances in ülis case?

37. Every user you create in the IAM system starts with _________.

38. You have an EC2 instance which needs to find out both its private IP address and its public IP address. To do this you need to;

40. What does Amazon SES stand for?

41. You run an ad-supported photo sharing website using S3 to serve photos to visitors of your site. At some point you find out that other sites have been linking to the photos on your site, causing loss to your business. What is an effective method to mitigate this?

42. What does Amazon RDS stand for?

43. You can use _____ and _____ to help secure the instances in your VPC,

44. What does Amazon S3 stand for?

45. What is the default per account limit of Elastic IPs?

46. Amazon S3 buckets in all other regions (other than US Standard) do not provide eventual consistency for overwrite PUTS and DELETES.

48. Can I attach more than one policy to a particular entity?

49. Does AWS allow for the use of Multi Factor Authentication tokens?

50. Amazon RDS automated backups and DB Snapshots are currently supported for only the __________ storage engine

54. Can I test my DB Instance against a new version before upgrading?

55. When you use the AWS Management Console to delete an IAM user, IAM also deletes any signing certificates and any access keys belonging to the user.

56. Security groups act like a firewall at the instance level, whereas ____________ are an additional layer of security that act at the subnet level.

57. How can an EBS volume which is currently attached to an EC2 instance in one Availability Zone to another?

59. You are deploying an application on EC2 that must call AWS APIs. What method of securely passing credentials to the application should you use?

60. Can you create IAM security credentials for existing users?

61. The Amazon EC2 web service can be accessed using the _____ web services messaging protocol. This interface is described by a Web Services Description Language (WSDL) document.

62. Can we attach an EBS volume to more than one EC2 instance at the same time?

63. If you’re unable to connect via SSH to your EC2 instance, which of the following should you check and possibly correct to restore connectivity?

64. Changes to the backup window take effect ______.

66. Amazon’s Redshift uses which block size for its columnar storage?

68. REST or Query requests are HTTP or HTTPS requests that use an HTTP verb (such as GET or POST) and a parameter named Action or Operation that specifies the API you are calling.

69. Which Amazon Storage behaves like raw, unformatted, external block devices that you can attach to your instances?

70. If an Amazon EBS volume is the root device of an instance, can I detach it without stopping the instance?

71. Which of the following requires a custom CloudWatch metric to monitor?

72. Fill in the blanks: _____ is a durable, block-level storage volume that you can attach to a single, running Amazon EC2 instance.

73. While signing in REST/ Query requests, for additional security, you should transmit your requests using Secure Sockets Layer (SSL) by using _________

74. Which service enables AWS customers to manage users and permissions in AWS?

76. What are the four levels of AWS Premium Support?

77. When you resize the Amazon RDS DB instance, Amazon RDS will perform the upgrade during the next maintenance window. If you want the upgrade to be performed now, rather than waiting for the maintenance window, specify the _____ option.

78. Fill in the blanks: Resources that are created in AWS are identified by a unique identifier called an __________

79. When you run a DB Instance as a Multi-AZ deployment, the “_____” serves database writes and reads

80. Typically, you want your application to check whether a request generated an error before you spend any time processing results. The easiest way to find out if an error occurred is to look for an __________ node in the response from the Amazon RDS API.

81. Is there a limit to the number of groups you can have?

82. Which set of Amazon S3 features helps to prevent and recover from accidental data loss?

83. Location of Instances are ____________

84. A group can contain many users. Can a user belong to multiple groups?

85. Which of the following is a durable key-value store?

86. What does Amazon EC2 provide?

87. If I scale the storage capacity provisioned to my DB Instance by mid of a billing month, how will I be charged?

43. You can use _ and _ to help secure the instances in your VPC,