Exams > Amazon > AWS Certified Solutions Architect - Professional
AWS Certified Solutions Architect - Professional
Page 30 out of 101 pages Questions 291-300 out of 1009 questions
Question#291

True or false: In a CloudFormation template, you can reuse the same logical ID several times to reference the resources in other parts of the template.

  • A. True, a logical ID can be used several times to reference the resources in other parts of the template.
  • B. False, a logical ID must be unique within the template.
  • C. False, you can mention a resource only once and you cannot reference it in other parts of a template.
  • D. False, you cannot reference other parts of the template.
Discover Answer Hide Answer

B
In AWS CloudFormation, the logical ID must be alphanumeric (A-Za-z0-9) and unique within the template. You use the logical name to reference the resource in other parts of the template.
Reference:
http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/concept-resources.html

Question#292

True or false: In CloudFormation, you cannot create an Amazon RDS DB instance from a snapshot.

  • A. False, you can specify it in attributes
  • B. False, you can specify it in condition
  • C. False, you can specify it in resource properties
  • D. True
Discover Answer Hide Answer

C
In AWS CloudFormation, resource properties are additional options that you can specify on a resource. For example, you can specify the DB snapshot property for an Amazon RDS DB instance in order to create a DB instance from a snapshot.
Reference:
http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/concept-resources.html

Question#293

How can you check the operational validity of your AWS CloudFormation template?

  • A. To check the operational validity, you need to attempt to create the stack.
  • B. There is no way to check the operational validity of your AWS CloudFormation template.
  • C. To check the operational validity, you need a sandbox or test area for AWS CloudFormation stacks.
  • D. To check the operational validity, you need to use the aws cloudformation validate-template command.
Discover Answer Hide Answer

A
In AWS CloudFormation, to check the operational validity, you need to attempt to create the stack. There is no sandbox or test area for AWS CloudFormation stacks, so you are charged for the resources you create during testing.
Reference:
http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-validate-template.html

Question#294

What is a circular dependency in AWS CloudFormation?

  • A. When Nested Stacks depend on each other.
  • B. When Resources form a Depend On loop.
  • C. When a Template references an earlier version of itself.
  • D. When a Template references a region, which references the original Template.
Discover Answer Hide Answer

B
To resolve a dependency error, add a Depends On attribute to resources that depend on other resources in your template. In some cases, you must explicitly declare dependencies so that AWS CloudFormation can create or delete resources in the correct order. For example, if you create an Elastic IP and a VPC with an Internet gateway in the same stack, the Elastic IP must depend on the Internet gateway attachment. For additional information, see Depends On Attribute.
Reference:
http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/troubleshooting.html#troubleshooting-errors-dependency-error

Question#295

You need to develop and run some new applications on AWS and you know that Elastic Beanstalk and CloudFormation can both help as a deployment mechanism for a broad range of AWS resources.
Which of the following is TRUE statements when describing the differences between Elastic Beanstalk and CloudFormation?

  • A. AWS Elastic Beanstalk introduces two concepts: The template, a JSON or YAML-format, text- based file
  • B. Elastic Beanstalk supports AWS CloudFormation application environments as one of the AWS resource types.
  • C. Elastic Beanstalk automates and simplifies the task of repeatedly and predictably creating groups of related resources that power your applications. CloudFormation does not.
  • D. You can design and script custom resources in CloudFormation
Discover Answer Hide Answer

D
These services are designed to complement each other. AWS Elastic Beanstalk provides an environment to easily deploy and run applications in the cloud. It is integrated with developer tools and provides a one-stop experience for you to manage the lifecycle of your applications. AWS CloudFormation is a convenient provisioning mechanism for a broad range of AWS resources. It supports the infrastructure needs of many different types of applications such as existing enterprise applications, legacy applications, applications built using a variety of AWS resources and container-based solutions (including those built using AWS
Elastic Beanstalk). AWS CloudFormation supports Elastic Beanstalk application environments as one of the AWS resource types. This allows you, for example, to create and manage an AWS Elastic Beanstalk- hosted application along with an RDS database to store the application data. In addition to RDS instances, any other supported AWS resource can be added to the group as well.
Reference:
https://aws.amazon.com/cloudformation/faqs

Question#296

An elastic network interface (ENI) is a virtual network interface that you can attach to an instance in a VPC. An ENI can include one public IP address, which can be auto-assigned to the elastic network interface for eth0 when you launch an instance, but only when you_____.

  • A. create an elastic network interface for eth1
  • B. include a MAC address
  • C. use an existing network interface
  • D. create an elastic network interface for eth0
Discover Answer Hide Answer

D
An elastic network interface (ENI) is defined as a virtual network interface that you can attach to an instance in a VPC and can include one public IP address, which can be auto-assigned to the elastic network interface for eth0 when you launch an instance, but only when you create an elastic network interface for eth0 instead of using an existing network interface.
Reference:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-eni.html

Question#297

After setting an AWS Direct Connect, which of the following cannot be done with an AWS Direct Connect Virtual Interface?

  • A. You can exchange traffic between the two ports in the same region connecting to different Virtual Private Gateways (VGWs) if you have more than one virtual interface.
  • B. You can change the region of your virtual interface.
  • C. You can delete a virtual interface; if its connection has no other virtual interfaces, you can delete the connection.
  • D. You can create a hosted virtual interface.
Discover Answer Hide Answer

A
You must create a virtual interface to begin using your AWS Direct Connect connection. You can create a public virtual interface to connect to public resources or a private virtual interface to connect to your VPC. Also, it is possible to configure multiple virtual interfaces on a single AWS Direct Connect connection, and you'll need one private virtual interface for each VPC to connect to. Each virtual interface needs a VLAN ID, interface IP address, ASN, and BGP key. To use your AWS
Direct Connect connection with another AWS account, you can create a hosted virtual interface for that account. These hosted virtual interfaces work the same as standard virtual interfaces and can connect to public resources or a VPC.
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/WorkingWithVirtualInterfaces.html

Question#298

Identify a correct statement about the expiration date of the "Letter of Authorization and Connecting Facility Assignment (LOA-CFA)," which lets you complete the
Cross Connect step of setting up your AWS Direct Connect.

  • A. If the cross connect is not completed within 90 days, the authority granted by the LOA-CFA expires.
  • B. If the virtual interface is not created within 72 days, the LOA-CFA becomes outdated.
  • C. If the cross connect is not completed within a user-defined time, the authority granted by the LOA- CFA expires.
  • D. If the cross connect is not completed within the specified duration from the appropriate provider, the LOA-CFA expires.
Discover Answer Hide Answer

A
An AWS Direct Connect location provides access to AWS in the region it is associated with. You can establish connections with AWS Direct Connect locations in multiple regions, but a connection in one region does not provide connectivity to other regions. Note: If the cross connect is not completed within 90 days, the authority granted by the LOA-CFA expires.
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/Colocation.html

Question#299

Which of the following is the final step that should be completed to start using AWS Direct Connect?

  • A. Creating your Virtual Interface
  • B. Configuring your router
  • C. Completing the Cross Connect
  • D. Verifying your Virtual Interface
Discover Answer Hide Answer

D
You can get started using AWS Direct Connect by completing the following steps. Step 1: Sign Up for Amazon Web Services Step 2: Submit AWS Direct Connect
Connection Request Step 3: Complete the Cross Connect (optional) Step 4: Configure Redundant Connections with AWS Direct Connect Step 5: Create a Virtual
Interface Step 6: Download Router Configuration Step 7: Verify Your Virtual Interface
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/getstarted.html#connected

Question#300

A user has created a VPC with CIDR 20.0.0.0/16. The user has created one subnet with CIDR 20.0.0.0/16 by mistake. The user is trying to create another subnet of CIDR 20.0.1.0/24.
How can the user create the second subnet?

  • A. The user can modify the first subnet CIDR with AWS CLI
  • B. The user can modify the first subnet CIDR from the console
  • C. There is no need to update the subnet as VPC automatically adjusts the CIDR of the first subnet based on the second subnet's CIDR
  • D. It is not possible to create a second subnet with overlapping IP CIDR without deleting the first subnet.
Discover Answer Hide Answer

D
A Virtual Private Cloud (VPC) is a virtual network dedicated to the user's AWS account. A user can create a subnet with VPC and launch instances inside the subnet. The user can create a subnet with the same size of VPC. However, he cannot create any other subnet since the CIDR of the second subnet will conflict with the first subnet. The user cannot modify the CIDR of a subnet once it is created. Thus, in this case if required, the user has to delete the subnet and create new subnets.
Reference:
http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Subnets.html

chevron rightPrevious Nextchevron right