Question 1

In Amazon CloudWatch, you can publish your own metrics with the put-metric-data command. When you create a new metric using the put-metric-data command, it can take up to two minutes before you can retrieve statistics on the new metric using the get-metric-statistics command. How long does it take before the new metric appears in the list of metrics retrieved using the list- metrics command?
A) After 2 minutes
B) Up to 15 minutes
C) More than an hour
D) Within a minute

Accepted Answer

It can take up to 15 minutes for a new metric to appear in the list of metrics retrieved using the list-metrics command in Amazon CloudWatch.

Question 2

You have set up a huge amount of network infrastructure in AWS and you now need to think about monitoring all of this. You decide CloudWatch will best fit your needs but you are unsure of the pricing structure and the limitations of CloudWatch. Which of the following statements is TRUE in relation to the limitations of CloudWatch?
A) You get 10 CloudWatch metrics, 10 alarms, 1,000,000 API requests, and 1,000 Amazon SNS email notifications per customer per month for free.
B) You get 100 CloudWatch metrics, 100 alarms, 10,000,000 API requests, and 10,000 Amazon SNS email notifications per customer per month for free.
C) You get 10 CloudWatch metrics, 10 alarms, 1,000 API requests, and 100 Amazon SNS email notifications per customer per month for free.
D) You get 100 CloudWatch metrics, 100 alarms, 1,000,000 API requests, and 1,000 Amazon SNS email notifications per customer per month for free.

Accepted Answer

AWS CloudWatch offers 10 metrics, 10 alarms, 1,000,000 API requests, and 1,000 Amazon SNS email notifications per customer per month for free.

Question 3

After your Lambda function has been running for some time, you need to look at some metrics to ascertain how your function is performing and decide to use the AWS CLI to do this. Which of the following commands must be used to access these metrics using the AWS CLI?
A) mon-list-metrics and mon-get-stats
B) list-metrics and get-metric-statistics
C) ListMetrics and GetMetricStatistics
D) list-metrics and mon-get-stats

Accepted Answer

The correct AWS CLI commands to access CloudWatch metrics are `list-metrics` and `get-metric-statistics`.

Question 4

A company is currently running a production workload on AWS that is very I/O intensive. Its workload consists of a single tier with 10 c4.8xlarge instances, each with 2 TB gp2 volumes. The number of processing jobs has recently increased, and latency has increased as well. The team realizes that they are constrained on the IOPS. For the application to perform efficiently, they need to increase the IOPS by 3,000 for each of the instances. Which of the following designs will meet the performance goal MOST cost effectively?
A) Change the type of Amazon EBS volume from gp2 to io1 and set provisioned IOPS to 9,000.
B) Increase the size of the gp2 volumes in each instance to 3 TB.
C) Create a new Amazon EFS file system and move all the data to this new file system. Mount this file system to all 10 instances.
D) Create a new Amazon S3 bucket and move all the data to this new bucket. Allow each instance to access this S3 bucket and use it for storage.

Accepted Answer

Changing the type of Amazon EBS volume from gp2 to io1 and setting provisioned IOPS to 9,000 will provide the necessary IOPS increase in the most cost-effective manner.

Question 5

A company's data center is connected to the AWS Cloud over a minimally used 10-Gbps AWS Direct Connect connection with a private virtual interface to its virtual private cloud (VPC). The company internet connection is 200 Mbps, and the company has a 150-TB dataset that is created each Friday. The data must be transferred and available in Amazon S3 on Monday morning. Which is the LEAST expensive way to meet the requirements while allowing for data transfer growth?
A) Order two 80-GB AWS Snowball appliances. Offload the data to the appliances and ship them to AWS. AWS will copy the data from the Snowball appliances to Amazon S3.
B) Create a VPC endpoint for Amazon S3. Copy the data to Amazon S3 by using the VPC endpoint, forcing the transfer to use the Direct Connect connection.
C) Create a VPC endpoint for Amazon S3. Set up a reverse proxy farm behind a Classic Load Balancer in the VPC. Copy the data to Amazon S3 using the proxy.
D) Create a public virtual interface on a Direct Connect connection, and copy the data to Amazon S3 over the connection.

Accepted Answer

The answer of A company's data center is connected to...

Question 6

A user is creating a Provisioned IOPS volume. What is the maximum ratio the user should configure between Provisioned IOPS and the volume size?
A) 30 to 1
B) 50 to 1
C) 10 to 1
D) 20 to 1

Accepted Answer

The answer of A user is creating a Provisioned IOPS...

Question 7

A user has configured an EC2 instance in the US-East-1a zone. The user has enabled detailed monitoring of the instance. The user is trying to get the data from CloudWatch using a CLI. Which of the below mentioned CloudWatch endpoint URLs should the user use?
A) monitoring.us-east-1a.amazonaws.com
B) cloudwatch.us-east-1a.amazonaws.com
C) monitoring.us-east-1.amazonaws.com
D) monitoring.us-east-1-a.amazonaws.com

Accepted Answer

CloudWatch endpoints are region-specific, not availability zone-specific. The correct endpoint for US-East-1 is monitoring.us-east-1.amazonaws.com.

Question 8

You have custom Network File System (NFS) client settings for your Amazon Elastic File System (EFS). It takes up to three seconds for an Amazon Elastic Compute Cloud (EC2) instance to see a write operation performed on a file system from another Amazon EC2 instance. Which of the following actions should you take to solve the custom NFS settings from causing delays in the write operation?
A) Unmount and remount the file system with the noac option to disable attribute caching.
B) Reduce the number of active users that have files open simultaneously on the instances.
C) Verify that the IP address of the specified mount target is valid.
D) Run the write operation from a different user ID on the same Amazon EC2 instance.

Accepted Answer

Disabling attribute caching with the noac option can help reduce delays in write operations by ensuring that changes are immediately visible across all instances.

Question 9

A user is sending a custom metric to CloudWatch. If the call to the CloudWatch APIs has different dimensions, but the same metric name, how will CloudWatch treat all the requests?
A) It will reject the request as there cannot be a separate dimension for a single metric.
B) It will group all the calls into a single call.
C) It will treat each unique combination of dimensions as a separate metric.
D) It will overwrite the previous dimension data with the new dimension data.

Accepted Answer

CloudWatch treats each unique combination of dimensions as a separate metric, allowing for more granular monitoring and analysis.

Question 10

Which of the following rules must be added to a mount target security group to access Amazon Elastic File System (EFS) from an on-premises server?
A) Configure an NFS proxy between Amazon EFS and the on-premises server to route traffic.
B) Set up a Point-To-Point Tunneling Protocol Server (PPTP) to allow secure connection.
C) Permit secure traffic to the Kerberos port 88 from the on-premises server.
D) Allow inbound traffic to the Network File System (NFS) port (2049) from the on-premises server.

Accepted Answer

To access Amazon EFS from an on-premises server, you need to allow inbound traffic to the NFS port (2049) on the mount target security group.

Question 11

A company has an application that runs a web service on Amazon EC2 instances and stores . j p g images in Amazon S3. The web traffic has a predictable baseline, but often demand spikes unpredictably for short periods of time. The application is loosely coupled and stateless. The . j p g images stored in Amazon S3 are accessed frequently for the first 15 to 20 days, they are seldom accessed thereafter but always need to be immediately available. The CIO has asked to find ways to reduce costs. Which of the following options will reduce costs? (Choose two.)
A) Purchase Reserved instances for baseline capacity requirements and use On-Demand instances for the demand spikes.
B) Configure a lifecycle policy to move the . j p g images on Amazon S3 to S3 IA after 30 days.
C) Use On-Demand instances for baseline capacity requirements and use Spot Fleet instances for the demand spikes.
D) Configure a lifecycle policy to move the . j p g images on Amazon S3 to Amazon Glacier after 30 days.
E) Create a script that checks the load on all web servers and terminates unnecessary On-Demand instances.

Accepted Answer

The answer of A company has an application that runs...

Question 12

A Solutions Architect is designing the storage layer for a recently purchased application. The application will be running on Amazon EC2 instances and has the following layers and requirements: Data layer: A POSIX file system shared across many systems. Service layer: Static file content that requires block storage with more than 100k IOPS. Which combination of AWS services will meet these needs? (Choose two.)
A) Data layer - Amazon S3
B) Data layer - Amazon EC2 Ephemeral Storage
C) Data layer - Amazon EFS
D) Service layer - Amazon EBS volumes with Provisioned IOPS
E) Service layer - Amazon EC2 Ephemeral Storage

Accepted Answer

Amazon EFS provides a POSIX-compliant file system that can be shared across multiple systems, suitable for the data layer. Amazon EBS volumes with Provisioned IOPS can provide the required block storage with more than 100k IOPS for the service layer.

Question 13

Amazon Elastic File System (EFS) provides information about the space used for an object by using the space _ used attribute of the Network File System Version 4.1 (NFSv4.1). The attribute includes the object's current metered data size and not the metadata size. Which of the following utilities will you use to measure the amount of disk that is used of a file?
A) blkid utility
B) du utility
C) sfdisk utility
D) pydf utility

Accepted Answer

The 'du' utility is used to estimate file space usage, which includes the amount of disk space used by files and directories.

Question 14

A company runs a legacy system on a single m4.2xlarge Amazon EC2 instance with Amazon EBS2 storage. The EC2 instance runs both the web server and a self-managed Oracle database. A snapshot is made of the EBS volume every 12 hours, and an AMI was created from the fully configured EC2 instance. A recent event that terminated the EC2 instance led to several hours of downtime. The application was successfully launched from the AMI, but the age of the EBS snapshot and the repair of the database resulted in the loss of 8 hours of data. The system was also down for 4 hours while the Systems Operators manually performed these processes. What architectural changes will minimize downtime and reduce the chance of lost data?
A) Create an Amazon CloudWatch alarm to automatically recover the instance. Create a script that will check and repair the database upon reboot. Subscribe the Operations team to the Amazon SNS message generated by the CloudWatch alarm.
B) Run the application on m4.xlarge EC2 instances behind an Elastic Load Balancer/Application Load Balancer. Run the EC2 instances in an Auto Scaling group across multiple Availability Zones with a minimum instance count of two. Migrate the database to an Amazon RDS Oracle Multi-AZ DB instance.
C) Run the application on m4.2xlarge EC2 instances behind an Elastic Load Balancer/Application Load Balancer. Run the EC2 instances in an Auto Scaling group access multiple Availability Zones with a minimum instance count of one. Migrate the database to an Amazon RDS Oracle Multi-AZ DB instance.
D) Increase the web server instance count to two m4.xlarge instances and use Amazon Route 53 round-robin load balancing to spread the load. Enable Route 53 health checks on the web servers. Migrate the database to an Amazon RDS Oracle Multi-AZ DB instance.

Accepted Answer

The answer of A company runs a legacy system on...

Question 15

A Solutions Architect is working with a company that operates a standard three-tier web application in AWS. The web and application tiers run on Amazon EC2 and the database tier runs on Amazon RDS. The company is redesigning the web and application tiers to use Amazon API Gateway and AWS Lambda, and the company intends to deploy the new application within 6 months. The IT Manager has asked the Solutions Architect to reduce costs in the interim. Which solution will be MOST cost effective while maintaining reliability?
A) Use Spot Instances for the web tier, On-Demand Instances for the application tier, and Reserved Instances for the database tier.
B) Use On-Demand Instances for the web and application tiers, and Reserved Instances for the database tier.
C) Use Spot Instances for the web and application tiers, and Reserved Instances for the database tier.
D) Use Reserved Instances for the web, application, and database tiers.

Accepted Answer

The answer of A Solutions Architect is working with a...

Question 16

A user has enabled detailed CloudWatch monitoring with the AWS Simple Notification Service. Which of the below mentioned statements helps the user understand detailed monitoring better?
A) SNS cannot provide data every minute
B) SNS will send data every minute after configuration
C) There is no need to enable since SNS provides data every minute
D) AWS CloudWatch does not support monitoring for SNS

Accepted Answer

The answer of A user has enabled detailed CloudWatch monitoring...

Question 17

A user is creating a snapshot of an EBS volume. Which of the below statements is incorrect in relation to the creation of an EBS snapshot?
A) Its incremental
B) It is a point in time backup of the EBS volume
C) It can be used to create an AMI
D) It is stored in the same AZ as the volume

Accepted Answer

EBS snapshots are stored in Amazon S3, which is a regional service, not tied to a specific Availability Zone.

Question 18

Your Application is not highly available, and your on-premises server cannot access the mount target because the Availability Zone (AZ) in which the mount target exists is unavailable. Which of the following actions is recommended?
A) The application must implement the checkpoint logic and recreate the mount target.
B) The application must implement the shutdown logic and delete the mount target in the AZ.
C) The application must implement the delete logic and connect to a different mount target in the same AZ.
D) The application must implement the restart logic and connect to a mount target in a different AZ.

Accepted Answer

If the AZ where the mount target exists is unavailable, you should connect to a mount target in a different AZ to ensure high availability.

Question 19

A user has created a launch configuration for Auto Scaling where CloudWatch detailed monitoring is disabled. The user wants to now enable detailed monitoring. How can the user achieve this?
A) Update the Launch config with CLI to set InstanceMonitoringDisabled = false
B) The user should change the Auto Scaling group from the AWS console to enable detailed monitoring
C) Create a new Launch Config with detail monitoring enabled and update the Auto Scaling group
D) Update the Launch config with CLI to set InstanceMonitoring.Enabled = true

Accepted Answer

Launch configurations are immutable, meaning they cannot be modified after creation. To enable detailed monitoring, the user must create a new launch configuration with detailed monitoring enabled and then update the Auto Scaling group to use the new launch configuration.

Question 20

A hybrid network architecture must be used during a company's multi-year data center migration from multiple private data centers to AWS. The current data centers are linked together with private fiber. Due to unique legacy applications, NAT cannot be used. During the migration period, many applications will need access to other applications in both the data centers and AWS. Which option offers a hybrid network architecture that is secure and highly available, that allows for high bandwidth and a multi-region deployment post-migration?
A) Use AWS Direct Connect to each data center from different ISPs, and configure routing to failover to the other data center's Direct Connect if one fails. Ensure that no VPC CIDR blocks overlap one another or the on-premises network.
B) Use multiple hardware VPN connections to AWS from the on-premises data center. Route different subnet traffic through different VPN connections. Ensure that no VPC CIDR blocks overlap one another or the on-premises network.
C) Use a software VPN with clustering both in AWS and the on-premises data center, and route traffic through the cluster. Ensure that no VPC CIDR blocks overlap one another or the on-premises network.
D) Use AWS Direct Connect and a VPN as backup, and configure both to use the same virtual private gateway and BGP. Ensure that no VPC CIDR blocks overlap one another or the on-premises network.

Accepted Answer

The answer of A hybrid network architecture must be used...

Exam 10: AWS Certified Solutions Architect - Professional (SAP-C01)

After your Lambda function has been running for some time, you need to look at some metrics to ascertain how your function is performing and decide to use the AWS CLI to do this. Which of the following commands must be used to access these metrics using the AWS CLI?

A user is creating a Provisioned IOPS volume. What is the maximum ratio the user should configure between Provisioned IOPS and the volume size?

A user has configured an EC2 instance in the US-East-1a zone. The user has enabled detailed monitoring of the instance. The user is trying to get the data from CloudWatch using a CLI. Which of the below mentioned CloudWatch endpoint URLs should the user use?

A user is sending a custom metric to CloudWatch. If the call to the CloudWatch APIs has different dimensions, but the same metric name, how will CloudWatch treat all the requests?

Which of the following rules must be added to a mount target security group to access Amazon Elastic File System (EFS) from an on-premises server?

A user has enabled detailed CloudWatch monitoring with the AWS Simple Notification Service. Which of the below mentioned statements helps the user understand detailed monitoring better?

A user is creating a snapshot of an EBS volume. Which of the below statements is incorrect in relation to the creation of an EBS snapshot?

Your Application is not highly available, and your on-premises server cannot access the mount target because the Availability Zone (AZ) in which the mount target exists is unavailable. Which of the following actions is recommended?

A user has created a launch configuration for Auto Scaling where CloudWatch detailed monitoring is disabled. The user wants to now enable detailed monitoring. How can the user achieve this?