Exams > Amazon > AWS Certified Solutions Architect - Professional
AWS Certified Solutions Architect - Professional
Page 20 out of 101 pages Questions 191-200 out of 1009 questions
Question#191

A user has created a VPC with CIDR 20.0.0.0/16. The user has created one subnet with CIDR 20.0.0.0/16 in this VPC. The user is trying to create another subnet with the same VPC for CIDR 20.0.0.1/24.
What will happen in this scenario?

  • A. The VPC will modify the first subnet CIDR automatically to allow the second subnet IP range
  • B. The second subnet will be created
  • C. It will throw a CIDR overlaps error
  • D. It is not possible to create a subnet with the same CIDR as VPC
Discover Answer Hide Answer

C
A Virtual Private Cloud (VPC) is a virtual network dedicated to the user's AWS account. A user can create a subnet with VPC and launch instances inside that subnet. The user can create a subnet with the same size of VPC. However, he cannot create any other subnet since the CIDR of the second subnet will conflict with the first subnet.
Reference:
http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Subnets.html

Question#192

True or False: The Amazon ElastiCache clusters are not available for use in VPC at this time.

  • A. TRUE
  • B. True, but they are available only in the GovCloud.
  • C. True, but they are available only on request
  • D. FALSE
Discover Answer Hide Answer

D
Amazon Elasticache clusters can be run in an Amazon VPC. With Amazon VPC, you can define a virtual network topology and customize the network configuration to closely resemble a traditional network that you might operate in your own datacenter. You can now take advantage of the manageability, availability and scalability benefits of Amazon ElastiCache Clusters in your own isolated network. The same functionality of Amazon ElastiCache, including automatic failure detection, recovery, scaling, auto discovery, Amazon CloudWatch metrics, and software patching, are now available in Amazon VPC.
Reference:
http://aws.amazon.com/about-aws/whats-new/2012/12/20/amazon-elasticache-announces-support-for-amazon-vpc/

Question#193

In Amazon Redshift, how many slices does a dw2.8xlarge node have?

  • A. 16
  • B. 8
  • C. 32
  • D. 2
Discover Answer Hide Answer

C
The disk storage for a compute node in Amazon Redshift is divided into a number of slices, equal to the number of processor cores on the node. For example, each DW1.XL compute node has two slices, and each DW2.8XL compute node has 32 slices.
Reference:
http://docs.aws.amazon.com/redshift/latest/dg/t_Distributing_data.html

Question#194

Identify a true statement about using an IAM role to grant permissions to applications running on Amazon EC2 instances.

  • A. When AWS credentials are rotated; developers have to update only the root Amazon EC2 instance that uses their credentials.
  • B. When AWS credentials are rotated, developers have to update only the Amazon EC2 instance on which the password policy was applied and which uses their credentials.
  • C. When AWS credentials are rotated, you don't have to manage credentials and you don't have to worry about long-term security risks.
  • D. When AWS credentials are rotated, you must manage credentials and you should consider precautions for long-term security risks.
Discover Answer Hide Answer

C
Using IAM roles to grant permissions to applications that run on EC2 instances requires a bit of extra configuration. Because role credentials are temporary and rotated automatically, you don't have to manage credentials, and you don't have to worry about long-term security risks.
Reference:
http://docs.aws.amazon.com/IAM/latest/UserGuide/role-usecase-ec2app.html

Question#195

Out of the striping options available for the EBS volumes, which one has the following disadvantage:
'Doubles the amount of I/O required from the instance to EBS compared to RAID 0, because you're mirroring all writes to a pair of volumes, limiting how much you can stripe.'?

  • A. Raid 1
  • B. Raid 0
  • C. RAID 1+0 (RAID 10)
  • D. Raid 2
Discover Answer Hide Answer

C
RAID 1+0 (RAID 10) doubles the amount of I/O required from the instance to EBS compared to RAID 0, because you're mirroring all writes to a pair of volumes, limiting how much you can stripe.
Reference:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/raid-config.html

Question#196

In the context of IAM roles for Amazon EC2, which of the following NOT true about delegating permission to make API requests?

  • A. You cannot create an IAM role.
  • B. You can have the application retrieve a set of temporary credentials and use them.
  • C. You can specify the role when you launch your instances.
  • D. You can define which accounts or AWS services can assume the role.
Discover Answer Hide Answer

A
Amazon designed IAM roles so that your applications can securely make API requests from your instances, without requiring you to manage the security credentials that the applications use.
Instead of creating and distributing your AWS credentials, you can delegate permission to make API requests using IAM roles as follows: Create an IAM role.
Define which accounts or AWS services can assume the role. Define which API actions and resources the application can use after assuming the role. Specify the role when you launch your instances. Have the application retrieve a set of temporary credentials and use them.
Reference:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html

Question#197

In the context of Amazon ElastiCache CLI, which of the following commands can you use to view all ElastiCache instance events for the past 24 hours?

  • A. elasticache-events --duration 24
  • B. elasticache-events --duration 1440
  • C. elasticache-describe-events --duration 24
  • D. elasticache describe-events --source-type cache-cluster --duration 1440
Discover Answer Hide Answer

D
In Amazon ElastiCache, the code "aws elasticache describe-events --source-type cache-cluster -- duration 1440" is used to list the cache-cluster events for the past 24 hours (1440 minutes).
Reference:
http://docs.aws.amazon.com/AmazonElastiCache/latest/UserGuide/ECEvents.Viewing.html

Question#198

In Amazon Cognito what is a silent push notification?

  • A. It is a push message that is received by your application on a user's device that will not be seen by the user.
  • B. It is a push message that is received by your application on a user's device that will return the user's geolocation.
  • C. It is a push message that is received by your application on a user's device that will not be heard by the user.
  • D. It is a push message that is received by your application on a user's device that will return the user's authentication credentials.
Discover Answer Hide Answer

A
Amazon Cognito uses the Amazon Simple Notification Service (SNS) to send silent push notifications to devices. A silent push notification is a push message that is received by your application on a user's device that will not be seen by the user.
Reference:
http://aws.amazon.com/cognito/faqs/

Question#199

When using Numeric Conditions within IAM, short versions of the available comparators can be used instead of the more verbose versions.
Which of the following is the short version of the Numeric Condition "NumericLessThanEquals"?

  • A. numlteq
  • B. numlteql
  • C. numltequals
  • D. numeql
Discover Answer Hide Answer

A
When using Numeric Conditions within IAM, short versions of the available comparators can be used instead of the more verbose versions. For instance, numIteq is the short version of NumericLessThanEquals.
Reference:
http://awsdocs.s3.amazonaws.com/SQS/2011-10-01/sqs-dg-2011-10-01.pdf

Question#200

AWS has launched T2 instances which come with CPU usage credit. An organization has a requirement which keeps an instance running for 24 hours. However, the organization has high usage only during 11 AM to 12 PM. The organization is planning to use a T2 small instance for this purpose.
If the organization already has multiple instances running since Jan 2012, which of the below mentioned options should the organization implement while launching a T2 instance?

  • A. The organization must migrate to the EC2-VPC platform first before launching a T2 instance.
  • B. While launching a T2 instance the organization must create a new AWS account as this account does not have the EC2-VPC platform.
  • C. Create a VPC and launch a T2 instance as part of one of the subnets of that VPC.
  • D. While launching a T2 instance the organization must select EC2-VPC as the platform.
Discover Answer Hide Answer

C
A Virtual Private Cloud (VPC) is a virtual network dedicated to the user's AWS account. The user can create subnets as per the requirement within a VPC. The
AWS account provides two platforms:
EC2-CLASSIC and EC2-VPC, depending on when the user has created his AWS account and which regions he is using. If the user has created the AWS account after 2013-12-04, it supports only EC2-VPC. In this scenario, since the account is before the required date the supported platform will be EC2-CLASSIC. It is required that the organization creates a VPC as the T2 instances can be launched only as a part of VPC.
Reference:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html

chevron rightPrevious Nextchevron right