AWS-Certified-Solutions-Architect-Professional Free Practice Test

Select the correct statement about Amazon EIastiCache.

1. A. It makes it easy to set up, manage, and scale a distributed in-memory cache environment in the cloud.
2. B. It allows you to quickly deploy your cache environment only if you install software.
3. C. It does not integrate with other Amazon Web Services.
4. D. It cannot run in the Amazon Virtual Private Cloud (Amazon VPC) environmen

Correct Answer: A
EIastiCache is a web service that makes it easy to set up, manage, and scale a distributed in-memory cache environment in the cloud. It provides a high-performance, scalable, and cost-effective caching solution, while removing the complexity associated with deploying and managing a distributed cache environment. With EIastiCache, you can quickly deploy your cache environment, without having to provision hardware or install software.
Reference: http://docs.aws.amazon.com/AmazonE|astiCache/latest/UserGuide/Whatls.html

With Amazon Elastic MapReduce (Amazon EMR) you can analyze and process vast amounts of data. The cluster is managed using an open-source framework called Hadoop.
You have set up an application to run Hadoop jobs. The application reads data from DynamoDB and generates a temporary file of 100 TBs.
The whole process runs for 30 minutes and the output of the job is stored to S3. Which of the below mentioned options is the most cost effective solution in this case?

1. A. Use Spot Instances to run Hadoop jobs and configure them with EBS volumes for persistent data storage.
2. B. Use Spot Instances to run Hadoop jobs and configure them with ephermal storage for output file storage.
3. C. Use an on demand instance to run Hadoop jobs and configure them with EBS volumes for persistent storage.
4. D. Use an on demand instance to run Hadoop jobs and configure them with ephemeral storage for output file storage.

Correct Answer: B
AWS EC2 Spot Instances allow the user to quote his own price for the EC2 computing capacity. The user can simply bid on the spare Amazon EC2 instances and run them whenever his bid exceeds the current Spot Price. The Spot Instance pricing model complements the On-Demand and Reserved Instance
pricing models, providing potentially the most cost-effective option for obtaining compute capacity, depending on the application. The only challenge with a Spot Instance is data persistence as the instance can be terminated whenever the spot price exceeds the bid price.
In the current scenario a Hadoop job is a temporary job and does not run for a longer period. It fetches data from a persistent DynamoDB. Thus, even if the instance gets terminated there will be no data loss and the job can be re-run. As the output files are large temporary files, it will be useful to store data on ephermal storage for cost savings.
Reference: http://aws.amazon.com/ec2/purchasing-options/spot-instances/

In the context of AWS Cloud Hardware Security ModuIe(HSM), does your application need to reside in the same VPC as the CIoudHSM instance?

1. A. No, but the sewer or instance on which your application and the HSNI client is running must have network (IP) reachability to the HSNI.
2. B. Yes, always
3. C. No, but they must reside in the same Availability Zone.
4. D. No, but it should reside in same Availability Zone as the DB instanc

Correct Answer: A
Your application does not need to reside in the same VPC as the CIoudHSM instance.
However, the server or instance on which your application and the HSM client is running must have network (IP) reachability to the HSM. You can establish network connectMty in a variety of ways, including operating your application in the same VPC, with VPC peering, with a VPN connection, or with Direct Connect.
Reference: https://aws.amazon.com/cIoudhsm/faqs/

Is there any way to own a direct connection to Amazon Web Services?

1. A. No, AWS only allows access from the public Internet.
2. B. No, you can create an encrypted tunnel to VPC, but you cannot own the connection.
3. C. Yes, you can via Amazon Dedicated Connection.
4. D. Yes, you can via AWS Direct Connec

Correct Answer: D
AWS Direct Connect links your internal network to an AWS Direct Connect location over a standard 1 gigabit or 10 gigabit Ethernet fiber-optic cable. One end of the cable is connected to your router, the other to an AWS Direct Connect router. With this connection in place, you can create virtual interfaces directly to the AWS cloud (for example, to Amazon Elastic Compute Cloud (Amazon EC2) and Amazon Simple Storage Service (Amazon S3)) and to Amazon Virtual Private Cloud (Amazon VPC), bypassing Internet service providers in your network path.
Reference: http://docs.aws.amazon.com/directconnect/latest/UserGuide/Welcome.html

An enterprise wants to use a third-party SaaS application. The SaaS application needs to have access to issue several API commands to discover Amazon EC2 resources running within the enterprise's account The enterprise has internal security policies that require any outside access to their environment must conform to the principles of least prMlege and there must be controls in place to ensure that the credentials used by the SaaS vendor cannot be used by any other third party. Which of the following would meet all of these conditions?

1. A. From the AWS Management Console, navigate to the Security Credentials page and retrieve the access and secret key for your account.
2. B. Create an IAM user within the enterprise account assign a user policy to the IAM user that allows only the actions required by the SaaS application create a new access and secret key for the user and provide these credentials to the SaaS provider.
3. C. Create an IAM role for cross-account access allows the SaaS provider's account to assume the role and assign it a policy that allows only the actions required by the SaaS application.
4. D. Create an IAM role for EC2 instances, assign it a policy that allows only the actions required tor the Saas application to work, provide the role ARN to the SaaS provider to use when launching their application instances.

Correct Answer: C