Question 1

A user has created a VPC with public and private subnets using the VPC wizard. Which of the below mentioned statements is true in this scenario?

Accepted Answer

When a VPC is created with public and private subnets using the VPC wizard, it updates the main route table to be used with the private subnet and creates a custom route table for the public subnet.

Question 2

Which of the following is NOT true of the DynamoDB Console?

Accepted Answer

Local secondary indexes must be created at the same time as the table; they cannot be added to existing tables through the DynamoDB Console.

Question 3

An organization is setting up a highly scalable application using Elastic Beanstalk. The organization is using ELB and RDS with VPC. The organization has public and private subnets within the cloud. Which of the below mentioned configurations will not work in this scenario?

Accepted Answer

EC2 instances in a private subnet should not have a public IP assigned to them for security reasons. They should be accessed via a bastion host or through a load balancer.

Question 4

A user has created a VPC with CIDR 20.0.0.0/16 using the VPC wizard. The user has created public and VPN only subnets along with hardware VPN access to connect to the user's data center. The user has not yet launched any instance as well as modified or deleted any setup. He wants to delete this VPC from the console. Will the console allow the user to delete the VPC?

Accepted Answer

The user can detach the virtual private gateway and then use the VPC console to delete the VPC.

Question 5

An organization is setting up a web application with the JEE stack. The application uses the JBoss app server and MySQL DB. The application has a logging module which logs all the activities whenever a business function of the JEE application is called. The logging activity takes some time due to the large size of the log file. If the application wants to setup a scalable infrastructure which of the below mentioned options will help achieve this setup?

Accepted Answer

Using SQS to make logging asynchronous allows the application to continue processing without waiting for the logging to complete, improving scalability and performance.

Question 6

Identify a true statement about the statement ID (Sid) in IAM.

Accepted Answer

The answer of Identify a true statement about the statement...

Question 7

Which statement is NOT true about accessing remote AWS region in the US by your AWS Direct Connect which is located in the US?

Accepted Answer

Data transfer out of a remote region is billed at the remote region's data transfer rate, not at the location of your AWS Direct Connect.

Question 8

You want to use Amazon Redshift and you are planning to deploy dw1.8xlarge nodes. What is the minimum amount of nodes that you need to deploy with this kind of configuration?

Accepted Answer

The minimum number of dw1.8xlarge nodes required for an Amazon Redshift cluster is 2.

Question 9

Over which of the following Ethernet standards does AWS Direct Connect link your internal network to an AWS Direct Connect location?

Accepted Answer

AWS Direct Connect uses single mode fiber-optic cable to link your internal network to an AWS Direct Connect location.

Question 10

For Amazon EC2 issues, while troubleshooting AWS CloudFormation, you need to view the cloud-init and cfn logs for more information. Identify a directory to which these logs are published.

Accepted Answer

The cloud-init and cfn logs are typically found in the /var/log/ directory on an EC2 instance.

Question 11

An organization is trying to setup a VPC with Auto Scaling. Which configuration steps below is not required to setup AWS VPC with Auto Scaling?

Accepted Answer

The answer of An organization is trying to setup a...

Question 12

Which EC2 functionality allows the user to place the Cluster Compute instances in clusters?

Accepted Answer

Cluster placement group allows users to place EC2 instances close together in a low-latency group within a single Availability Zone.

Question 13

You have a website which requires international presence and consequently you have set it up as follows. It is hosted on 30 EC2 instances. It is on in 15 regions around the globe. Each region has 2 instances. All the instances are a public hosted zone. Which of the following is the best way to configure your site to maintain availability with minimum downtime if one of the 15 regions was to lose network connectivity for an extended period? (Choose 2 answers)

Accepted Answer

A) Latency Based Routing helps direct users to the region with the lowest latency, improving performance and availability. B) Failover routing policy ensures that if a region becomes unavailable, traffic is redirected to a healthy region, minimizing downtime.

Question 14

Someone has recommended a new client to you and you know he is into online gaming and you are almost certain he will want to set up an online gaming site which will require a database service that provides fast and predictable performance with seamless scalability. Which of the following AWS databases would be best suited to an online gaming site?

Accepted Answer

Amazon DynamoDB is a fully managed NoSQL database service that provides fast and predictable performance with seamless scalability, making it ideal for online gaming sites that require quick data access and high throughput.

Question 15

In Amazon ElastiCache, the default cache port is:

Accepted Answer

The default port for Memcached is 11211 and for Redis is 6379 in Amazon ElastiCache.

Question 16

You need to develop and run some new applications on AWS and you know that Elastic Beanstalk and CloudFormation can both help as a deployment mechanism for a broad range of AWS resources. Which of the following is TRUE statements when describing the differences between Elastic Beanstalk and CloudFormation?

Accepted Answer

CloudFormation allows you to design and script custom resources, providing more flexibility and control over the infrastructure setup compared to Elastic Beanstalk.

Question 17

An organization is planning to host a Wordpress blog as well as joomla CMS on a single instance launched with VPC. The organization wants to create separate domains for each application using Route 53. The organization may have about ten instances each with these two applications. While launching each instance, the organization configured two separate network interfaces (primary + secondary ENI) with their own Elastic IPs to the instance. The suggestion was to use a public IP from AWS instead of an Elastic IP as the number of elastic IPs allocation per region is restricted in the account. What action will you recommend to the organization?

Accepted Answer

AWS does not assign a public IP to an instance with multiple ENIs, so the organization must use Elastic IPs and can request a limit increase if needed.

Question 18

True or false: In a CloudFormation template, you can reuse the same logical ID several times to reference the resources in other parts of the template.

Accepted Answer

In a CloudFormation template, each resource must have a unique logical ID. This ID is used to reference the resource in other parts of the template.

Question 19

While assigning a tag to an instance, which of the below mentioned options is not a valid tag key/value pair?

Accepted Answer

The answer of While assigning a tag to an instance,...

Question 20

Identify a correct statement about the expiration date of the "Letter of Authorization and Connecting Facility Assignment (LOA-CFA)," which lets you complete the Cross Connect step of setting up your AWS Direct Connect.

Accepted Answer

The LOA-CFA typically expires if the cross connect is not completed within 90 days, as this is a standard timeframe set by AWS for the completion of the cross connect step.

Exam 10: AWS Certified Solutions Architect - Professional (SAP-C01)