AWS CD-A | Practice Quiz 01

Question 1 of 30

1. Question

You require the ability to analyze a customer’s clickstream data on a website so they can do a behavioral analysis. Your customer needs to know what sequence of pages and ads their customer clicked on. This data will be used in real time to modify the page layouts as customers click through the site to increase stickiness and advertising click-through. Which option meets the requirements for captioning and analyzing this data?

Push web clicks by session to Amazon Kinesis and analyze behavior using Kinesis workers
Write click events directly to Amazon Redshift and then analyze with SQL
Publish web clicks by session to an Amazon SQS queue men periodically drain these events to Amazon RDS and analyze with SQL
Log clicks in weblogs by URL store to Amazon S3, and then analyze with Elastic MapReduce

Question 2 of 30

2. Question

All Amazon EC2 instances are assigned two IP addresses at launch, out of which one can only be reached from within the Amazon EC2 network?

Private IP address
Public IP address
Multiple IP address
Elastic IP Address

Question 3 of 30

3. Question

What is the Reduced Redundancy option in Amazon S3?

Load Balancing Service
Real-time Analysis
Less redundancy for a lower cost.
Virtual Servers in Cloud

Question 4 of 30

4. Question

Please select all relational database engines RDS currently support(Select 3 answers)

PostgreSQL
Amazon Aurora
MariaDB
MongoDB
Cassandra
SQLite

Question 5 of 30

5. Question

You need to configure an Amazon S3 bucket to serve static assets for your public-facing web application. Which methods ensure that all objects uploaded to the bucket are set to public read? Choose 2 answers

Set permissions on the object to public read during upload
Configure the bucket policy to set all objects to public read
Configure the bucket ACL to set all objects to public read
Use AWS Identity and Access Management roles to set the bucket to public read
Amazon S3 objects default to public read, so no action is needed

Question 6 of 30

6. Question

Which services allow the customer to retain full administrative privileges of the underlying EC2 instances? Choose 2 answers

Amazon Elastic Map Reduce
Amazon ElastiCache
Amazon Relational Database Service
Amazon DynamoDB
AWS Elastic Beanstalk

Question 7 of 30

7. Question

You manually launch a NAT AMI in a public subnet. The network is properly configured. Security groups and network access control lists are property configured. Instances in a private subnet can access the NAT. The NAT can access the Internet. However, private instances cannot access the Internet. What additional step is required to allow access from the private instances?

Enable Source/Destination Check on the NAT instance
Enable Source/Destination Check on the private Instances.
Disable Source/Destination Check on the private instances.
Disable Source/Destination Check on the NAT instance.

Question 8 of 30

8. Question

A t2.medium EC2 instance type must be launched with what type of Amazon Machine Image (AMI)?

An Amazon EBS-backed Paravirtual AMI
An Instance store Paravirtual AMI
An Instance store Hardware Virtual Machine AMI
An Amazon EBS-backed Hardware Virtual Machine AMI

Question 9 of 30

9. Question

A customer has a single 3-TB volume on-premises that is used to hold a large repository of images and print layout files. This repository is growing at 500 GB a year and must be presented as a single logical volume. The customer is becoming increasingly constrained with their local storage capacity and wants an off-site backup of this data, while maintaining low-latency access to their frequently accessed data. Which AWS Storage Gateway configuration meets the customer requirements?

Gateway-Cached volumes with snapshots scheduled to Amazon S3
Gateway-Virtual Tape Library with snapshots to Amazon Glacier
Gateway-Stored volumes with snapshots scheduled to Amazon S3
Gateway-Virtual Tape Library with snapshots to Amazon S3

Question 10 of 30

10. Question

In the Amazon cloud watch, which metric should I be checking to ensure that your DB Instance has enough free storage space?

FreeStorage
FreeStorageSpace
FreeStorageVolume
FreeDBStorageSpace

Question 11 of 30

11. Question

You have an EC2 Security Group with several running EC2 instances. You change the Security Group rules to allow inbound traffic on a new port and protocol, and launch several new instances in the same Security Group. The new rules apply:

To all instances, but it may take several minutes for old instances to see the changes.
Immediately to all instances in the security group.
Immediately to the new instances only.
Immediately to the new instances, but old instances must be stopped and restarted before the new rules apply.

Question 12 of 30

12. Question

A company is building a two-tier web application to serve dynamic transaction-based content. The data tier is leveraging an Online Transactional Processing(OLTP)database. What services should you leverage to enable an elastic and scalable web tier?

Amazon EC2, Amazon Dynamo DB, and Amazon S3
Amazon RDS with Multi-AZ and Auto Scaling
Elastic Load Balancing, Amazon EC2, and Auto Scaling
Elastic Load Balancing, Amazon EC2, and Amazon RDS

Question 13 of 30

13. Question

When creation of an EBS snapshot is initiated, but not completed, the EBS volume:

Can be used in read-only mode while the snapshot is in progress
Cannot be detached or attached to an EC2 instance until the snapshot completes
Can be used but there should be a delay in IO operations
Can be used while the snapshot is in progress

Question 14 of 30

14. Question

Your customer is willing to consolidate their log streams (access logs, application logs, security logs etc.) in one single system. Once consolidated, the customer wants to analyse these logs in real time based on heuristics. From time to time, the customer needs to validate heuristics, which requires going back to data samples extracted from the last 12 hours? What is the best approach to meet your customer’s requirements?

Configure Amazon Cloud Trail to receive custom logs, use EMR to apply heuristics the logs
Setup an Auto Scaling group of EC2 syslogd servers, store the logs on S3 use EMR to apply heuristics on the logs
Send all the log events to Amazon SQS. Setup an Auto Scaling group of EC2 servers to consume the logs and apply the heuristics.
Send all the log events to Amazon Kinesis develop a client process to apply heuristics on the logs

Question 15 of 30

15. Question

While performing the volume status checks, if the status is insufficient-data, what does it mean?

the check has failed
the check has passed
the checks may still be in progress on the volume
the checks is not yet started

Question 16 of 30

16. Question

You have an application running on an EC2 Instance which will allow users to download flies from a private S3 bucket using a pre-assigned URL. Before generating the URL the application should verify the existence of the file in S3. How should the application use AWS credentials to access the S3 bucket securely?

Create an IAM role for EC2 that allows list access to objects in the S3 bucket. Launch the instance with the role, and retrieve the role’s credentials from the EC2 Instance metadata
Use the AWS account access Keys the application retrieves the credentials from the source code of the application.
Create a IAM user for the application with permissions that allow list access to the S3 bucket launch the instance as the IAM user and retrieve the IAM user’s credentials from the EC2 instance user data.
Create an IAM user for the application with permissions that allow list access to the S3 bucket. The application retrieves the IAM user credentials from a temporary directory with permissions that allow read access only to the application user.

Question 17 of 30

17. Question

Which method can be used to prevent an IP address block from accessing public objects in an S3 bucket?

Create an ACL and apply it to all objects in the bucket
Create a bucket policy and apply it to the bucket
Create a NACL and attach it to the VPC of the bucket
Modify the IAM policies of any users that would access the bucket

Question 18 of 30

18. Question

A user is planning to use AWS services for his web application. If the user is trying to set up his own billing management system for AWS, how can he configure it?

Enable the AWS CloudWatch alarm which will provide APIs to download the alarm data
It is not possible for the user to create his own billing management service with AWS
Set up programmatic billing access. Download and parse the bill as per the requirement
Use AWS billing APIs to download the usage report of each service from the AWS billing console

Question 19 of 30

19. Question

A user has setup an EBS backed instance and attached 2 EBS volumes to it. The user has setup a CloudWatch alarm on each volume for the disk data. The user has stopped the EC2 instance and detached the EBS volumes. What will be the status of the alarms on the EBS volume?

Insufficient Data
Alarm
OK
The EBS cannot be detached until all the alarms are removed

Question 20 of 30

20. Question

You have been asked to propose a multi-region deployment of a web-facing application where a controlled portion of your traffic is being processed by an alternate region. Which configuration would achieve that goal?

Route53 record sets with latency based routing policy
Route53 record sets with weighted routing policy
Auto Scaling with scheduled scaling actions set
Elastic Load Balancing with health checks enabled

Question 21 of 30

21. Question

A user has setup Auto Scaling with ELB on the EC2 instances. The user wants to configure that whenever the CPU utilization is below 10%, Auto Scaling should remove one instance. How can the user configure this?

Use CloudWatch to monitor the data and Auto Scaling to remove the instances using scheduled actions
The user can get an email using SNS when the CPU utilization is less than 10%. The user can use the desired capacity of Auto Scaling to remove the instance
Configure CloudWatch to send a notification to the Auto Scaling group when the CPU Utilization is less than 10% and configure the Auto Scaling policy to remove the instance
Configure CloudWatch to send a notification to Auto Scaling Launch configuration when the CPU utilization is less than 10% and configure the Auto Scaling policy to remove the instance

Question 22 of 30

22. Question

A user has created a public subnet with VPC and launched an EC2 instance within it. The user is trying to delete the subnet. What will happen in this scenario?

It will delete the subnet and make the EC2 instance as a part of the default subnet
It will not allow the user to delete the subnet until the instances are terminated
It will delete the subnet as well as terminate the instances
The subnet can never be deleted independently, but the user has to delete the VPC first

Question 23 of 30

23. Question

A user is trying to connect to a running EC2 instance using SSH. However, the user gets a Host key not found error. Which of the below mentioned options is a possible reason for rejection?

The access key to connect to the instance is wrong
The user has provided the wrong user name for the OS login
The security group is not configured properly
The instance CPU is heavily loaded

Question 24 of 30

24. Question

What does the following command do with respect to the Amazon EC2 security groups?
ec2-create-group my-security-group -d “My security group”

Creates a sub-group inside the parent security group "my-security-group"
Command adds a rule for SSH to a security group
Creates a security group named "my-security-group" with your account
Creates a rule inside security group"my-security-group" with your account

Question 25 of 30

25. Question

While import a disk into an EBS using the API, which Action should I be using?

ImportSnapshot
CreateSnapshot
CopySnapshot
DescribeSnapshot

Question 26 of 30

26. Question

It is advised that you watch the Amazon CloudWatch _____ metric(available via the AWS Management Console or Amazon Cloud Watch APIs) carefully and recreate the Read Replica should it fall behind due to replication errors

Read Lag
Read Replica
ReplicaLag
Write Lag

Question 27 of 30

27. Question

What happens if a user tries to access a service that has not yet been integrated with IAM?

The service returns an “Access denied” error
AWS allows to access the service with limited permission
AWS allows to access the service with full permission
The service returns an “IAM not integrated” error

Question 28 of 30

28. Question

Can I move a Reserved Instance from one Region to another?

Yes, But you need to get approval from AWS Support
Yes, But you don't need consult AWS.
No, Each Reserved Instance is associated with a specific Region

Question 29 of 30

29. Question

What are characteristics of Amazon S3? Choose 2 answers

S3 should be used to host a relational database.
S3 allows you to store unlimited amounts of data.
S3 allows you to store objects of virtually unlimited size.
S3 offers Provisioned IOPS.
Objects are directly accessible via a URL.

Question 30 of 30

30. Question

Per the AWS Acceptable Use Policy, penetration testing of EC2 instances:

Are expressly prohibited under all circumstances.
May be performed by AWS, and will be performed by AWS upon customer request.
May be performed by the customer on their own instances with prior authorization from AWS.
May be performed by AWS, and is periodically performed by AWS.
May be performed by the customer on their own instances, only if performed from EC2 instances

AWS CD-A | Practice Quiz 01