AWS-Certified-Solutions-Architect-Professional Free Practice Test

In Amazon EIastiCache, which of the following statements is correct?

1. A. When you launch an EIastiCache cluster into an Amazon VPC private subnet, every cache node is assigned a public IP address within that subnet.
2. B. You cannot use EIastiCache in a VPC that is configured for dedicated instance tenancy.
3. C. If your AWS account supports only the EC2-VPC platform, E|astiCache will never launch your cluster in a VPC.
4. D. EIastiCache is not fully integrated with Amazon Virtual Private Cloud (VPC).

Correct Answer: B
The VPC must allow non-dedicated EC2 instances. You cannot use EIastiCache in a VPC that is configured for dedicated instance tenancy.
Reference: http://docs.aws.amazon.com/AmazonE|astiCache/latest/UserGuide/AmazonVPC.EC.htmI

Your customer is willing to consolidate their log streams (access logs application logs security logs etc.) in one single system. Once consolidated, the customer wants to analyze these logs in real time based on heuristics. From time to time, the customer needs to validate heuristics, which requires going back to data samples extracted from the last 12 hours?
What is the best approach to meet your customer’s requirements?

1. A. Send all the log events to Amazon SQS, setup an Auto Scaling group of EC2 sewers to consume the logs and apply the heuristics.
2. B. Send all the log events to Amazon Kinesis, develop a client process to apply heuristics on the logs
3. C. Configure Amazon CIoudTraiI to receive custom logs, use EMR to apply heuristics the logs
4. D. Setup an Auto Scaling group of EC2 syslogd servers, store the logs on S3, use EMR to apply heuristics on the logs

Correct Answer: B

An administrator is using Amazon CIoudFormation to deploy a three tier web application that consists of a web tier and application tier that will utilize Amazon DynamoDB for storage when creating the CIoudFormation template which of the following would allow the application instance access to the DynamoDB tables without exposing API credentials?

1. A. Create an Identity and Access Management Role that has the required permissions to read and write from the required DynamoDB table and associate the Role to the application instances by referencing an instance profile.
2. B. Use the Parameter section in the Cloud Formation template to nave the user input Access and Secret Keys from an already created IAM user that has me permissions required to read and write from the required DynamoDB table.
3. C. Create an Identity and Access Management Role that has the required permissions to read and write from the required DynamoDB table and reference the Role in the instance profile property of the application instance.
4. D. Create an identity and Access Management user in the CIoudFormation template that has permissions to read and write from the required DynamoDB table, use the GetAtt function to retrieve the Access and secret keys and pass them to the application instance through user-data.

Correct Answer: C

What is a possible reason you would need to edit claims issued in a SAML token?

1. A. The Nameldentifier claim cannot be the same as the username stored in AD.
2. B. Authentication fails consistently.
3. C. The Nameldentifier claim cannot be the same as the claim URI.
4. D. The Nameldentifier claim must be the same as the username stored in A

Correct Answer: A
The two reasons you would need to edit claims issued in a SAML token are: The Nameldentifier claim cannot be the same as the username stored in AD, and The app requires a different set of claim URIs.
Reference:
https://azure.microsoft.com/en-us/documentation/articles/active-directory-samI-cIaims-customization/

Identify an application that polls AWS Data Pipeline for tasks and then performs those tasks.

1. A. A task executor
2. B. A task deployer
3. C. A task runner
4. D. A task optimizer

Correct Answer: C
A task runner is an application that polls AWS Data Pipeline for tasks and then performs those tasks. You can either use Task Runner as provided by AWS Data Pipeline, or create a custom Task Runner application.
Task Runner is a default implementation of a task runner that is provided by AWS Data Pipeline. When Task Runner is installed and configured, it polls AWS Data Pipeline for tasks associated with pipelines that you have activated. When a task is assigned to Task Runner, it performs that task and reports its status back to AWS Data Pipeline. If your workflow requires non-default behavior, you'II need to implement that functionality in a custom task runner.
Reference:
http://docs.aws.amazon.com/datapipeline/latest/DeveIoperGuide/dp-how-remote-taskrunner-client.html