Question 1

For AWS CloudFormation, which stack state refuses UpdateStack calls?

Accepted Answer

When a stack is in the UPDATE_ROLLBACK_FAILED state, it cannot be updated until the rollback is completed successfully.

Question 2

When using the AWS CLI for AWS CloudFormation, which of the following commands returns a description of the specified resource in the specified stack?

Accepted Answer

The `describe-stack-resource` command returns a description of the specified resource in the specified stack.

Question 3

AWS ________supports__________ environments as one of the AWS resource types.

Accepted Answer

The answer of AWS ________supports__________ environments as one of the...

Question 4

Identify a benefit of using Auto Scaling for your application.

Accepted Answer

Auto Scaling helps maintain application availability and allows you to automatically add or remove resources according to conditions you define, thus providing better fault tolerance.

Question 5

AWS CloudFormation ______ are special actions you use in your template to assign values to properties that are not available until runtime.

Accepted Answer

Intrinsic functions in AWS CloudFormation templates allow you to assign values to properties that are determined at runtime, such as referencing other resources or getting attribute values.

Question 6

A user has launched an EBS optimized instance with EC2. Which of the below mentioned options is the correct statement?

Accepted Answer

EBS optimized instances provide additional dedicated capacity for EBS IO, ensuring that EBS volumes can deliver consistent performance without being affected by other traffic on the instance.

Question 7

A user has launched a dedicated EBS backed instance with EC2. You are curious where the EBS volume for this instance will be created. Which statement is correct about the EBS volume's creation?

Accepted Answer

EBS volumes are created independently of the EC2 instance's tenancy and are not tied to the same physical hardware as dedicated instances.

Question 8

A user has created a VPC with CIDR 20.0.0.0/16 using the wizard. The user has created a public subnet CIDR (20.0.0.0/24) and VPN only subnets CIDR (20.0.1.0/24) along with the VPN gateway (vgw-123456) to connect to the user's data centre. The user's data centre has CIDR 172.28.0.0/12. The user has also setup a NAT instance (i-123456) to allow traffic to the internet from the VPN subnet. Which of the below mentioned options is not a valid entry for the main route table in this scenario?

Accepted Answer

The main route table should not have a route with the destination of the VPN subnet (20.0.1.0/24) pointing to the NAT instance (i-123456) because the NAT instance is used for internet-bound traffic, not for routing within the VPC.

Question 9

How can you check the operational validity of your AWS CloudFormation template?

Accepted Answer

Creating the stack is the only way to fully test the operational validity of a CloudFormation template, as it ensures all resources can be created and configured as expected.

Question 10

What is a circular dependency in AWS CloudFormation?

Accepted Answer

A circular dependency in AWS CloudFormation occurs when resources are defined in such a way that they depend on each other, forming a loop, which prevents the stack from being created or updated successfully.

Question 11

A user has configured two security groups which allow traffic as given below: 1: SecGrp1: Inbound on port 80 for 0.0.0.0/0 Inbound on port 22 for 0.0.0.0/0 2: SecGrp2: Inbound on port 22 for 10.10.10.1/32 If both the security groups are associated with the same instance, which of the below mentioned statements is true?

Accepted Answer

When multiple security groups are associated with an instance, the rules are aggregated, allowing inbound traffic on any port specified by any of the security groups. Thus, traffic is allowed on port 80 for everyone and on port 22 for everyone.

Question 12

A user has created an AWS AMI. The user wants the AMI to be available only to his friend and not anyone else. How can the user manage this?

Accepted Answer

The user can share the AMI with a specific AWS account ID, which allows only that account to access the AMI.

Question 13

If you have a running instance using an Amazon EBS boot partition, you can call the _______ API to release the compute resources but preserve the data on the boot partition.

Accepted Answer

The "Stop Instances" API call will stop the running instance, releasing the compute resources while preserving the data on the Amazon EBS boot partition.

Question 14

Your supervisor has given you the task of creating an elastic network interface on each of your web servers that connect to a mid-tier network where an application server resides. He also wants this set up as a Dual-homed Instance on Distinct Subnets. Instead of routing network packets through the dual-homed instances, where should each dual-homed instance receive and process requests to fulfil his criteria?

Accepted Answer

The answer of Your supervisor has given you the task...

Question 15

An elastic network interface (ENI) is a virtual network interface that you can attach to an instance in a VPC. An ENI can include one public IP address, which can be auto-assigned to the elastic network interface for eth0 when you launch an instance, but only when you_____.

Accepted Answer

When you create an elastic network interface for eth0, it can include one public IP address that is auto-assigned.

Question 16

Which status represents a failure state in AWS CloudFormation?

Accepted Answer

ROLLBACK_IN_PROGRESS indicates that a stack creation or update has failed, and AWS CloudFormation is attempting to roll back the changes to the previous stable state.

Question 17

In CloudFormation, you cannot create an Amazon RDS DB instance from a snapshot.

Accepted Answer

You can create an Amazon RDS DB instance from a snapshot in CloudFormation by specifying the `DBSnapshotIdentifier` property in the resource properties of the AWS::RDS::DBInstance resource.

Question 18

Which of the following should be followed before connecting to Amazon Virtual Private Cloud (Amazon VPC) using AWS Direct Connect?

Accepted Answer

Before connecting to Amazon VPC using AWS Direct Connect, you need to create a virtual private gateway and attach it to your VPC to establish a connection.

Question 19

After setting an AWS Direct Connect, which of the following cannot be done with an AWS Direct Connect Virtual Interface?

Accepted Answer

The answer of After setting an AWS Direct Connect, which...

Question 20

A user is accessing an EC2 instance on the SSH port for IP 10.20.30.40/32. Which one is a secure way to configure that the instance can be accessed only from this IP?

Accepted Answer

Opening port 22 for IP 10.20.30.40/32 in the security group ensures that only the specific IP address 10.20.30.40 can access the EC2 instance via SSH, providing a secure configuration.

Exam 10: AWS Certified Solutions Architect - Professional (SAP-C01)