AWS-Certified-Solutions-Architect-Professional Free Practice Test

You want to use AWS CodeDepIoy to deploy an application to Amazon EC2 instances running within an Amazon Virtual Private Cloud (VPC). What criterion must be met for this to be possible?

1. A. The AWS CodeDepIoy agent installed on the Amazon EC2 instances must be able to access only the public AWS CodeDepIoy endpoint.
2. B. The AWS CodeDepIoy agent installed on the Amazon EC2 instances must be able to access only the public Amazon S3 service endpoint.
3. C. The AWS CodeDepIoy agent installed on the Amazon EC2 instances must be able to access the public AWS CodeDepIoy and Amazon S3 service endpoints.
4. D. It is not currently possible to use AWS CodeDepIoy to deploy an application to Amazon EC2 instances running within an Amazon Virtual Private Cloud (VPC.)

Correct Answer: C
You can use AWS CodeDepIoy to deploy an application to Amazon EC2 instances running within an Amazon Virtual Private Cloud (VPC). However, the AWS CodeDepIoy agent installed on the Amazon EC2 instances must be able to access the public AWS CodeDepIoy and Amazon S3 service endpoints. Reference: http://aws.amazon.com/codedepIoy/faqs/

A read only news reporting site with a combined web and application tier and a database tier that receives large and unpredictable traffic demands must be able to respond to these traffic fluctuations automatically. What AWS services should be used meet these requirements?

1. A. Stateless instances for the web and application tier synchronized using EIastiCache Memcached in an autoscaimg group monitored with CIoudWatch and RDS with read replicas.
2. B. Stateful instances for the web and application tier in an autoscaling group monitored with CIoudWatch and RDS with read replicas.
3. C. Stateful instances for the web and application tier in an autoscaling group monitored with CIoudWatc
4. D. And multi-AZ RDS.
5. E. Stateless instances for the web and application tier synchronized using EIastiCache Memcached in an autoscaling group monitored with CIoudWatch and multi-AZ RDS.

Correct Answer: A

Identify a true statement about the statement ID (Sid) in IAM.

1. A. You cannot expose the Sid in the IAM API.
2. B. You cannot use a Sid value as a sub-ID for a policy document's ID for services provided by SQS and SNS.
3. C. You can expose the Sid in the IAM API.
4. D. You cannot assign a Sid value to each statement in a statement arra

Correct Answer: A
The Sid(statement ID) is an optional identifier that you provide for the policy statement. You can assign a Sid a value to each statement in a statement array. In IAM, the Sid is not exposed in the IAM API. You can't retrieve a particular statement based on this ID.
Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/reference_poIicies_eIements.htmI#Sid

Refer to the architecture diagram above of a batch processing solution using Simple Queue Service (SQS) to set up a message queue between EC2 instances which are used as batch processors Cloud Watch monitors the number of Job requests (queued messages) and an Auto Scaling group adds or deletes batch sewers automatically based on parameters set in Cloud Watch alarms. You can use this architecture to implement which of the following features in a cost effective and efficient manner?

1. A. Reduce the overall lime for executing jobs through parallel processing by allowing a busy EC2 instance that receives a message to pass it to the next instance in a daisy-chain setup.
2. B. Implement fault tolerance against EC2 instance failure since messages would remain in SQS and worn can continue with recovery of EC2 instances implement fault tolerance against SQS failure by backing up messages to S3.
3. C. Implement message passing between EC2 instances within a batch by exchanging messages throughSQS.
4. D. Coordinate number of EC2 instances with number of job requests automatically thus Improving cost effectiveness.
5. E. Handle high priority jobs before lower priority jobs by assigning a priority metadata field to SQS messages.

Correct Answer: D

An organization has created 5 IAM users. The organization wants to give them the same login ID but different passwords. How can the organization achieve this?

1. A. The organization should create each user in a separate region so that they have their own URL to login
2. B. The organization should create a separate login ID but give the IAM users the same alias so that each one can login with their alias
3. C. It is not possible to have the same login ID for multiple IAM users of the same account
4. D. The organization should create various groups and add each user with the same login ID to different group
5. E. The user can login with their own group ID

Correct Answer: C
AWS Identity and Access Management is a web service which allows organizations to manage users and user permissions for various AWS services. Whenever the organization is creating an IAM user, there should be a unique ID for each user. It is not possible to have the same login ID for multiple users. The names of users, groups, roles, instance profiles must be alphanumeric, including the following common characters: plus (+), equal (=), comma (,), period (.), at (@), and dash (-).
Reference: http://docs.aws.amazon.com/IAM/Iatest/UserGuide/Using_SettingUpUser.htmI