AWS-Certified-Solutions-Architect-Professional Free Practice Test

How many g2.2xIarge on-demand instances can a user run in one region without taking any limit increase approval from AWS?

1. A. 20
2. B. 2
3. C. 5
4. D. 10

Correct Answer: C
Generally AWS EC2 allows running 20 on-demand instances and 100 spot instances at a time. This limit can be increased by requesting at https://aws.amazon.com/contact-us/ec2-request. Excluding certain types of instances, the limit is lower than mentioned above. For g2.2xIarge, the user can run only 5
on-demand instance at a time.
Reference: http://docs.aws.amazon.com/generaI/latest/gr/aws_service_|imits.htmI#Iimits_ec2

The MySecureData company has five branches across the globe. They want to expand their data centers such that their web server will be in the AWS and each branch would have their own database in the local data center. Based on the user login, the company wants to connect to the data center. How can MySecureData company implement this scenario with the AWS VPC?

1. A. Create five VPCs with the public subnet for the app server and setup the VPN gateway for each VPN to connect them indMdually.
2. B. Use the AWS VPN CIoudHub to communicate with multiple VPN connections.
3. C. Use the AWS CIoudGateway to communicate with multiple VPN connections.
4. D. It is not possible to connect different data centers from a single VPC.

Correct Answer: B
A Virtual Private Cloud (VPC) is a virtual network dedicated to the user’s AWS account. The user can create subnets as per the requirement within a VPC. If the user wants to connect VPC from his own data centre, he can setup a public and VPN only subnet which uses hardware VPN access to connect with his data centre. If the organization has multiple VPN connections, he can provide secure communication between sites using the AWS VPN CIoudHub.
The VPN CIoudHub operates on a simple hub-and-spoke model that the user can use with or without a VPC. This design is suitable for customers with multiple branch offices and existing internet connections who would like to implement a convenient, potentially low-cost hub-and-spoke model for primary or backup connectMty between remote offices.
Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPN_CIoudHub.htmI

You are responsible for a legacy web application whose server environment is approaching end of life You would like to migrate this application to AWS as quickly as possible, since the application environment currently has the following limitations:
The VM's single 10GB VNIDK is almost full; Nle virtual network interface still uses the 10IV|bps driver, which leaves your 100Mbps WAN connection completely underutilized;
It is currently running on a highly customized. Windows VM within a VMware environment; You do not have me installation media;
This is a mission critical application with an RTO (Recovery Time Objective) of 8 hours. RPO (Recovery Point Objective) of 1 hour. How could you best migrate this application to AWS while meeting your business continuity requirements?

1. A. Use the EC2 VM Import Connector for vCenter to import the VNI into EC2.
2. B. Use Import/Export to import the VNI as an ESS snapshot and attach to EC2.
3. C. Use S3 to create a backup of the VM and restore the data into EC2.
4. D. Use me ec2-bundle-instance API to Import an Image of the VNI into EC2

Correct Answer: A

A user is configuring MySQL RDS with PIOPS. What should be the minimum size of DB storage provided by the user?

1. A. 1 TB
2. B. 50 GB
3. C. 5 GB
4. D. 100 GB

Correct Answer: D
If the user is trying to enable PIOPS with MySQL RDS, the minimum size of storage should be 100 GB. Reference: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_PIOPS.html

In IAM, which of the following is true of temporary security credentials?

1. A. Once you issue temporary security credentials, they cannot be revoked.
2. B. None of these are correct.
3. C. Once you issue temporary security credentials, they can be revoked only when the virtual MFA device is used.
4. D. Once you issue temporary security credentials, they can be revoke

Correct Answer: A
Temporary credentials in IAM are valid throughout their defined duration of time and hence can't be revoked. However, because permissions are evaluated each time an AWS request is made using the credentials, you can achieve the effect of revoking the credentials by changing the permissions for the
credentials even after they have been issued. Reference:
http://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentiaIs_temp_controI-access_disable-perms.h tml