Exams > Amazon > AWS Certified Solutions Architect - Professional
AWS Certified Solutions Architect - Professional
Page 7 out of 101 pages Questions 61-70 out of 1009 questions
Question#61

What is the maximum write throughput I can provision for a single Dynamic DB table?

  • A. 1,000 write capacity units
  • B. 100,000 write capacity units
  • C. Dynamic DB is designed to scale without limits, but if you go beyond 10,000 you have to contact AWS first.
  • D. 10,000 write capacity units
Discover Answer Hide Answer

C
Reference:
https://aws.amazon.com/dynamodb/faqs/

Question#62

What is the name of licensing model in which I can use your existing Oracle Database licenses to run Oracle deployments on Amazon RDS?

  • A. Bring Your Own License
  • B. Role Bases License
  • C. Enterprise License
  • D. License Included
Discover Answer Hide Answer

A
Reference:
https://aws.amazon.com/oracle/

Question#63

When you resize the Amazon RDS DB instance, Amazon RDS will perform the upgrade during the next maintenance window. If you want the upgrade to be performed now, rather than waiting for the maintenance window, specify the option.

  • A. ApplyNow
  • B. ApplySoon
  • C. ApplyThis
  • D. ApplyImmediately
Discover Answer Hide Answer

D
Reference:
http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.DBInstance.Modifying.html

Question#64

If I write the below command, what does it do?
ec2-run ami-e3a5408a -n 20 -g appserver

  • A. Start twenty instances as members of appserver group.
  • B. Creates 20 rules in the security group named appserver
  • C. Terminate twenty instances as members of appserver group.
  • D. Start 20 security groups
Discover Answer Hide Answer

A

Question#65

The ________ service is targeted at organizations with multiple users or systems that use AWS products such as Amazon EC2, Amazon SimpleDB, and the AWS
Management Console.

  • A. Amazon RDS
  • B. AWS Integrity Management
  • C. AWS Identity and Access Management
  • D. Amazon EMR
Discover Answer Hide Answer

C
Reference:
https://aws.amazon.com/documentation/iam/?nc1=h_ls

Question#66

Which AWS instance address has the following characteristics? :"If you stop an instance, its Elastic IP address is unmapped, and you must remap it when you restart the instance."

  • A. Both A and B
  • B. None of these
  • C. VPC Addresses
  • D. EC2 Addresses
Discover Answer Hide Answer

D
Stopping an instance -

EC2-Classic -
If you stop an instance, its Elastic IP address is disassociated, and you must reassociate the Elastic IP address when you restart the instance.

EC2-VPC -
If you stop an instance, its Elastic IP address remains associated.
Reference:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/elastic-ip-addresses-eip.html

Question#67

By default, Amazon Cognito maintains the last-written version of the data. You can override this behavior and resolve data conflicts programmatically.
In addition, push synchronization allows you to use Amazon Cognito to send a silent notification to all devices associated with an identity to notify them that new data is available.

  • A. get
  • B. post
  • C. pull
  • D. push
Discover Answer Hide Answer

D
Reference:
http://aws.amazon.com/cognito/faqs/

Question#68

You want to use AWS CodeDeploy to deploy an application to Amazon EC2 instances running within an Amazon Virtual Private Cloud (VPC).
What criterion must be met for this to be possible?

  • A. The AWS CodeDeploy agent installed on the Amazon EC2 instances must be able to access only the public AWS CodeDeploy endpoint.
  • B. The AWS CodeDeploy agent installed on the Amazon EC2 instances must be able to access only the public Amazon S3 service endpoint.
  • C. The AWS CodeDeploy agent installed on the Amazon EC2 instances must be able to access the public AWS CodeDeploy and Amazon S3 service endpoints.
  • D. It is not currently possible to use AWS CodeDeploy to deploy an application to Amazon EC2 instances running within an Amazon Virtual Private Cloud (VPC.)
Discover Answer Hide Answer

C
You can use AWS CodeDeploy to deploy an application to Amazon EC2 instances running within an Amazon Virtual Private Cloud (VPC).
However, the AWS CodeDeploy agent installed on the Amazon EC2 instances must be able to access the public AWS CodeDeploy and Amazon S3 service endpoints.
Reference:
http://aws.amazon.com/codedeploy/faqs/

Question#69

An IAM user is trying to perform an action on an object belonging to some other root account's bucket.
Which of the below mentioned options will AWS S3 not verify?

  • A. The object owner has provided access to the IAM user
  • B. Permission provided by the parent of the IAM user on the bucket
  • C. Permission provided by the bucket owner to the IAM user
  • D. Permission provided by the parent of the IAM user
Discover Answer Hide Answer

B
If the IAM user is trying to perform some action on the object belonging to another AWS user's bucket, S3 will verify whether the owner of the IAM user has given sufficient permission to him. It also verifies the policy for the bucket as well as the policy defined by the object owner.
Reference:
http://docs.aws.amazon.com/AmazonS3/latest/dev/access-control-auth-workflow-object-operation.html

Question#70

An organization is planning to extend their data center by connecting their DC with the AWS VPC using the VPN gateway. The organization is setting up a dynamically routed VPN connection.
Which of the below mentioned answers is not required to setup this configuration?

  • A. The type of customer gateway, such as Cisco ASA, Juniper J-Series, Juniper SSG, Yamaha.
  • B. Elastic IP ranges that the organization wants to advertise over the VPN connection to the VPC.
  • C. Internet-routable IP address (static) of the customer gateway's external interface.
  • D. Border Gateway Protocol (BGP) Autonomous System Number (ASN) of the customer gateway.
Discover Answer Hide Answer

B
The Amazon Virtual Private Cloud (Amazon VPC) allows the user to define a virtual networking environment in a private, isolated section of the Amazon Web
Services (AWS) cloud. The user has complete control over the virtual networking environment. The organization wants to extend their network into the cloud and also directly access the internet from their AWS VPC. Thus, the organization should setup a Virtual Private Cloud (VPC) with a public subnet and a private subnet, and a virtual private gateway to enable communication with their data center network over an IPsec VPN tunnel. To setup this configuration the organization needs to use the Amazon VPC with a VPN connection. The organization network administrator must designate a physical appliance as a customer gateway and configure it. The organization would need the below mentioned information to setup this configuration:
The type of customer gateway, such as Cisco ASA, Juniper J-Series, Juniper SSG, Yamaha Internet-routable IP address (static) of the customer gateway's external interface Border Gateway Protocol (BGP) Autonomous System Number (ASN) of the customer gateway, if the organization is creating a dynamically routed VPN connection. Internal network IP ranges that the user wants to advertise over the VPN connection to the VPC.
Reference:
http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_VPN.html

chevron rightPrevious Nextchevron right