[Jan 10, 2024] Get New AWS-Solutions-Architect-Associate Certification Practice Test Questions Exam Dumps
Real AWS-Solutions-Architect-Associate Exam Dumps Questions Valid AWS-Solutions-Architect-Associate Dumps PDF
NEW QUESTION # 251
You want to mount an Amazon EFS file system on an Amazon EC2 instance using DNS names. Which of the following generic form of a mount target's DNS name must you use to mount the file system?
- A. efs-system-id.availability-zone.file-aws-region.amazonaws.com
- B. availability-zone.file-system-id.efs.aws-region.amazonaws.com
- C. $file-system-id.$availability-zone.$efs.aws-region.$amazonaws.com
- D. #aws-region.#availability-zone.#file-system-id.#efs.#amazonaws.com
Answer: B
Explanation:
An Amazon EFS file system can be mounted on an Amazon EC2 instance using DNS names. This can be done with either a DNS name for the file system or a DNS name for the mount target. To construct the mount target's DNS name, use the following generic form:
availability-zone.file-system-id.efs.aws-region.amazonaws.com
Reference:
http://docs.aws.amazon.com/efs/latest/ug/mounting-fs.html#mounting-fs-install-nfsclient
NEW QUESTION # 252
You have deployed a three-tier web application in a VPC with a CIOR block of 10 0 0 0/28 You initially deploy two web servers, two application servers, two database servers and one NAT instance tor a total of seven EC2 instances The web. Application and database servers are deployed across two availability zones (AZs). You also deploy an ELB in front of the two web servers, and use Route53 for DNS Web (raffle gradually increases in the first few days following the deployment, so you attempt to double the number of instances in each tier of the application to handle the new load unfortunately some of these new instances fail to launch.
Which of the following could De the root caused? (Choose 2 answers)
- A. AWS reserves the first and the last private IP address in each subnet's CIDR block so you do not have enough addresses left to launch all of the new EC2 instances.
- B. AWS reserves one IP address In each subnet's CIDR block for Route53 so you do not have enough addresses left to launch all of the new EC2 instances.
- C. The Internet Gateway (IGW) of your VPC has scaled-up adding more instances to handle the traffic spike, reducing the number of available private IP addresses for new instance launches.
- D. The ELB has scaled-up. Adding more instances to handle the traffic reducing the number of available private IP addresses for new instance launches.
- E. AWS reserves the first tour and the last IP address in each subnet's CIDR block so you do not have enough addresses left to launch all of the new EC2 instances.
Answer: A,D
NEW QUESTION # 253
A solutions architect is designing the architecture for a company website that is composed of static content.
The company's target customers are located in the United States Which architecture should the solutions architect recommend to MINIMIZE cost?
- A. Store the website files on Amazon S3 in the us-east-2 Region. Use an Amazon CloudFront distribution with the price class configured to maximize the use of edge ....
- B. Store the website files on Amazon S3 in the us-east-2 Region and the eu-west-1 Region. Use an Amazon CloudFront distribution with an Amazon Route 53 latency .......to the closest Region to the user.
- C. Store the website files on Amazon S3 in the us-east-2 Region. Use an Amazon CloudFront distribution with the price class configured to limit the edge locations in .....
- D. Store the website files on Amazon S3 in the us-east-2 Region and the eu-west-1 Region. Use an Amazon CloudFront geolocation routing policy to route requests to.....
Answer: B
NEW QUESTION # 254
Which of following IAM policy elements lets you specify an exception to a list of actions?
- A. ExceptionAction
- B. NotAction
- C. NotException
- D. Exception
Answer: B
Explanation:
The NotAction element lets you specify an exception to a list of actions.
Reference:
http://docs.aws.amazon.com/IAM/latest/UserGuide/AccessPolicyLanguage_ElementDescriptions.html
NEW QUESTION # 255
The AWS CloudHSM service defines a resource known as a high-availability (HA) ________________, which is a virtual partition that represents a group of partitions, typically distributed between several physical HSMs for high-availability.
- A. functional group
- B. proxy group
- C. partition group
- D. relational group
Answer: C
Explanation:
The AWS CloudHSM service defines a resource known as a high-availability (HA) partition group, which is a virtual partition that represents a group of partitions, typically distributed between several physical HSMs for high-availability.
Reference: http://docs.aws.amazon.com/cloudhsm/latest/userguide/configuring-ha.html
NEW QUESTION # 256
A sys admin is maintaining an application on AWS. The application is installed on EC2 and user has configured ELB and Auto Scaling. Considering future load increase, the user is planning to launch new servers proactively so that they get registered with ELB.
How can the user add these instances with Auto Scaling?
- A. Launch an instance manually and register it with ELB on the fly
- B. Increase the maximum limit of the Auto Scaling group
- C. Decrease the minimum limit of the Auto Scaling group
- D. Increase the desired capacity of the Auto Scaling group
Answer: D
Explanation:
Explanation/Reference:
Explanation:
A user can increase the desired capacity of the Auto Scaling group and Auto Scaling will launch a new instance as per the new capacity. The newly launched instances will be registered with ELB if Auto Scaling group is configured with ELB. If the user decreases the minimum size the instances will be removed from Auto Scaling. Increasing the maximum size will not add instances but only set the maximum instance cap.
http://docs.aws.amazon.com/AutoScaling/latest/DeveloperGuide/as-manual-scaling.html
NEW QUESTION # 257
A company is launching a new application that will be hosted on Amazon EC2 instances. A solutions architect needs to design a solution that does not allow public IPv4 access that originates from the internet. However, the solution must allow the EC2 instances to make outbound IPv4 internet requests.
The initial design proposal shows that the EC2 instances would be located in two private subnets across two Availability Zones. The entire architecture must be highly available.
How should the solutions architect change the architecture to meet these requirements?
- A. Deploy an egress-only internet gateway in public subnets in both Availability Zones. Create and configure one route table for each private subnet.
- B. Deploy a NAT gateway in public subnets in both Availability Zones. Create and configure one route table for each private subnet.
- C. Deploy a NAT gateway in public subnets in both Availability Zones. Create and configure a shared route table for the private subnets.
- D. Deploy an internet gateway in public subnets in both Availability Zones. Create and configure a shared route table for the private subnets.
Answer: C
NEW QUESTION # 258
A company is running an application on Amazon EC2 instances hosted in a private subnet of a VPC . The EC2 instances are configured in an Auto Scaling group behind an Elastic Load Balancer (ELB) The EC2 instances use a NAT gateway for outbound internet access However the EC2 instances are not able to connect to the public internet to download software updates What are the possible root causes of this issue? (Select TWO )
- A. The EC2 instances are not associated with an Elastic IP address
- B. The route tables in the VPC are configured incorrectly
- C. The outbound rules on the security group attached to the EC2 Instances are configured incorrectly.
- D. The ELB is not configured with a proper health check
- E. The security group attached to the NAT gateway is configured incorrectly
Answer: B,C
NEW QUESTION # 259
A monolithic application was recently migrated to AWS and is now running on a single Amazon EC2 instance. Due to application limitations, it is not possible to use automatic scaling to scale out the application.
The chief technology officer (CTO) wants an automated solution to restore the EC2 instance in the unlikely event the underlying hardware fails.
What would allow for automatic recovery of the EC2 instance as quickly as possible?
- A. Configure an Amazon EventBridge event to trigger an AWS Lambda function once an hour that checks the health of the EC2 instance and triggers instance recovery if the EC2 instance is unhealthy.
- B. Configure AWS CloudTrail to monitor the health of the EC2 instance, and if it becomes impaired, triggered instance recovery.
- C. Configure an Amazon CloudWatch alarm to trigger an SNS message that alerts the CTO when the EC2 instance is impaired.
- D. Configure an Amazon CloudWatch alarm that triggers the recovery of the EC2 instance if it becomes impaired.
Answer: A
NEW QUESTION # 260
What is a placement group in Amazon EC2?
- A. It is the AWS region where you run the EC2 instance of your web content.
- B. It is a group used to span multiple Availability Zones.
- C. It the edge location of your web content.
- D. It is a group of EC2 instances within a single Availability Zone.
Answer: D
Explanation:
A placement group is a logical grouping of instances within a single Availability Zone.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/placement-groups.html
NEW QUESTION # 261
Amazon RDS creates an SSL certificate and installs the certificate on the DB Instance when Amazon RDS provisions the instance. These certificates are signed by a certificate authority. The _____ is stored athttps://rds.amazonaws.com/doc/rds-ssl-ca-cert.pem.
- A. protected key
- B. public key
- C. private key
- D. foreign key
Answer: B
NEW QUESTION # 262
Amazon RDS automated backups and DB Snapshots are currently supported for only the __ _ storage engine
- A. MyISAM
- B. lnnoDB
Answer: B
NEW QUESTION # 263
Which is the default region in AWS?
- A. us-east-2
- B. ap-southeast-1
- C. eu-west-1
- D. us-east-1
Answer: D
NEW QUESTION # 264
Amazon RDS supports SOAP only through __________.
- A. HTTPS
- B. HTTP or HTTPS
- C. HTTP
- D. TCP/IP
Answer: A
NEW QUESTION # 265
A Solutions Architect is designing a high-performance computing job that runs on Amazon EC2 instances in private subnets. To allow the application to download patches, the infrastructure must be altered to allow the instances to access external endpoints. Any changes to the infrastructure must involve minimal ongoing systems management effort.
What will allow the EC2 instances to access the endpoint while meeting these requirements?
- A. NAT gateway
- B. AWS Direct Connect
- C. Virtual private gateway
- D. Elastic IP address
Answer: A
NEW QUESTION # 266
You need to create a load balancer in a VPC network that you are building. You can make your load balancer internal (private) or internet-facing (public). When you make your load balancer internal, a DNS name will be created, and it will contain the private IP address of the load balancer. An internal load balancer is not exposed to the internet. When you make your load balancer internet-facing, a DNS name will be created with the public IP address. If you want the Internet-facing load balancer to be connected to the Internet, where must this load balancer reside?
- A. The load balancer must reside in a subnet that is not connected to the internet.
- B. The load balancer must not reside in a subnet that is connected to the internet.
- C. The load balancer must reside in a subnet that is connected to the internet using the internet gateway.
- D. The load balancer must be completely outside of your VPC.
Answer: C
Explanation:
When you create an internal Elastic Load Balancer in a VPC, you need to select private subnets that are in the same Availability Zone as your instances. If the VPC Elastic Load Balancer is to be public facing, you need to create the Elastic Load Balancer in a public subnet. A subnet is a public subnet if it is attached to an Internet Gateway (IGW) with a defined route to that gateway. Selecting more than one public subnet increases the availability of your Elastic Load Balancer.
NB - Elastic Load Balancers in EC2-Classic are always Internet-facing load balancers.
Reference:
http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/elb-internet-facing-load-balan cers.html
NEW QUESTION # 267
Every user you create in the lAM system starts with ___ _
- A. No permissions
- B. Full permissions
- C. Partial permissions
Answer: A
NEW QUESTION # 268
An application is scanning an Amazon DynamoDB table that was created with default settings.
The application occasionally reads stale data when it queries the table.
How can this issue be corrected?
- A. Enable AutoScaling on the DynamoDB table.
- B. Update the application to use strongly consistent reads.
- C. Increase the provisioned read capacity of the table.
- D. Re-create the DynamoDB table with eventual consistency disabled.
Answer: B
Explanation:
https://www.javacodegeeks.com/2017/10/amazon-dynamodb-tutorial.html
NEW QUESTION # 269
A company hosts its static website content from an Amazon S3 bucket in the us-east-1 Region Content is made available through an Amazon CloudFront origin pointing to that bucket Cross-Region replication is set up to create a second copy of the bucket in the ap-southeast-1 Region Management wants a solution that provides greater availability for the website Which combination of actions should a solutions architect take to increase availability'? (Select TWO.
- A. Set up a CloudFront origin group with the us-east-1 bucket as the primary and the ap-southeast-1 bucket as the secondary
- B. Configure failover routing in Amazon Route 53
- C. Create a record in Amazon Route 53 pointing to the replica bucket
- D. Add both buckets to the CloudFront origin
- E. Create an additional CloudFront origin pointing to the ap-southeast-1 bucket
Answer: A,B
NEW QUESTION # 270
You need to migrate a large amount of data into the cloud that you have stored on a hard disk and you decide that the best way to accomplish this is with AWS Import/Export and you mail the hard disk to AWS.
Which of the following statements is incorrect in regards to AWS Import/Export?
- A. It can Import to Amazon EBS
- B. It can Import to Amazon Glacier
- C. It can export from Amazon Glacier.
- D. It can export from Amazon S3
Answer: C
Explanation:
AWS Import/Export supports:
Import to Amazon S3
Export from Amazon S3
Import to Amazon EBS
Import to Amazon Glacier
AWS Import/Export does not currently support export from Amazon EBS or Amazon Glacier.
Reference: https://docs.aws.amazon.com/AWSImportExport/latest/DG/whatisdisk.html
NEW QUESTION # 271
True or False: Automated backups are enabled by default for a new DB Instance.
- A. FALSE
- B. TRUE
Answer: B
NEW QUESTION # 272
......
AWS-Solutions-Architect-Associate Exam Dumps - PDF Questions and Testing Engine: https://www.free4dump.com/AWS-Solutions-Architect-Associate-braindumps-torrent.html
Latest AWS-Solutions-Architect-Associate Exam Dumps for Pass Guaranteed: https://drive.google.com/open?id=1W1wHmFxOsPmaZu4ytryFeEmRfH55O-l5