AWS CSA-A | Practice Quiz 02

Question 1 of 30

1. Question

How can you secure data at rest on an EBS volume?

Create an IAM policy that restricts read and write access to the volume.
Attach the volume to an instance using EC2’s SSL interface.
Use an encrypted file system on top of the EBS volume.
Encrypt the volume using the S3 server-side encryption service.

Question 2 of 30

2. Question

What is the type of monitoring data (for Amazon EBS volumes) which is available automatically in 5-minute periods at no charge called?

Primary
Detailed
Basic
Licensed

Question 3 of 30

3. Question

EC2 instances are launched from Amazon Machine images (AMIS). A given public AMI can:

only be used to launch EC2 instances in the same AWS availability zone as the AMI is stored
only be used to launch EC2 instances in the same country as the AMI is stored
be used to launch EC2 Instances in any AWS region
only be used to launch EC2 instances in the same AWS region as the AMI is stored.

Question 4 of 30

4. Question

Which statements about DynamoDB are true? Choose 2 answers

DynamoDB uses a pessimistic locking model
DynamoDB restricts item access during writes
DynamoDB uses optimistic concurrency control
DynamoDB restricts item access during reads
DynamoDB uses conditional writes for consistency

Question 5 of 30

5. Question

What happens, by default, when one of the resources in a CloudFormation stack cannot be created?

Previously-created resources are deleted and the stack creation terminates.
CloudFormation templates are parsed in advance so stack creation is guaranteed to succeed.
The stack creation continues, and the final results indicate which steps failed.
Previously-created resources are kept but the stack creation terminates.

Question 6 of 30

6. Question

What is the maximum number of S3 Buckets available per AWS account?

100 per IAM user
100 per region
200 per region
100 per account

Question 7 of 30

7. Question

Which of the following statements about SQS is true?

Messages will be delivered exactly once and messages will be delivered in Last in, First out order
Messages will be delivered exactly once and message delivery order is indeterminate
Messages will be delivered exactly once and messages will be delivered in First in, First out order
Messages will be delivered one or more times and message delivery order is indeterminate

Question 8 of 30

8. Question

Which of the following statements about SWF are true? Choose 3 answers

SWF triggers SNS notifications on task assignment
SWF uses deciders and workers to complete tasks
SWF requires at least 1 EC2 instance per domain
SWF tasks are assigned once and never duplicated
SWF workflow executions can last up to a year
SWF requires an S3 bucket for workflow storage

Question 9 of 30

9. Question

Which of the following are valid SNS delivery transports? Choose 3 answers

SOAP
SQS
Email
UDP
SMS

Question 10 of 30

10. Question

How is Amazon SNS different from Amazon SQS? choose 2 answers

Amazon SQS is a message queue service used by distributed applications to exchange messages through a push model, and can be used to decouple sending and receiving components
Amazon SNS allows applications to send time-critical messages to multiple subscribers through a “pull” mechanism
Amazon SNS allows applications to send time-critical messages to multiple subscribers through a “push” mechanism
Amazon SQS is a message queue service used by distributed applications to exchange messages through a polling model, and can be used to decouple sending and receiving components
Amazon SQS provides flexibility for distributed components of applications to send and receive messages with requiring each component to be concurrently available.

Question 11 of 30

11. Question

How can software determine the public and private IP addresses of the Amazon EC2 instance that it is running on?

Use ipconfig or hostconfig command.
Query the local instance metadata
Query the appropriate Amazon CloudWatch metric.
Query the local instance userdata

Question 12 of 30

12. Question

Which of the following services are included at no additional cost with the use of the AWS platform? Choose 2 answers

Simple Workflow Service
Elastic Load Balancing
Elastic Compute Cloud
Auto Scaling
CloudFormation
Simple Storage Service

Question 13 of 30

13. Question

Which of the following are correct statements with policy evaluation logic in AWS Identity and Access Management? Choose 2 answers

An explicit allow overrides default deny.
By default, all requests are denied
By default, all request are allowed
An explicit allow overrides an explicit deny Load Balancer
An explicit deny does not override an explicit allow

Question 14 of 30

14. Question

Regarding the attaching of ENI to an instance, what does ‘hot attach’ refer to?

Attaching an ENI to an instance when it is starting
Attaching an ENI to an instance when it is stopped.
Attaching an ENI to an instance when it is running
Attaching an ENI to an instance during the launch process

Question 15 of 30

15. Question

You have written an application that uses the Elastic Load Balancing service to spread traffic to several web servers Your users complain that they are sometimes forced to login again in the middle of using your application, after they have already togged in. This is not behaviour you have designed. What is a possible solution to prevent this happening?

Use instance memory to save session state.
Use instance storage to save session state.
Use ElastiCache to save session state.
Use EBS to save session state
Use Glacier to save session slate.

Question 16 of 30

16. Question

If a message is retrieved from a queue in Amazon SQS, how long is the message inaccessible to other users by default?

60 Seconds
45 Seconds
2 hours
30 Seconds

Question 17 of 30

17. Question

Company A has an S3 bucket containing premier content that they intend to make available to only paid subscribers of their website. The S3 bucket currently has default permissions of all objects being private to prevent inadvertent exposure of the premier content to non-paying website visitors. How can Company A provide only paid subscribers the ability to download a premier content file in the S3 bucket?

Apply a bucket policy that grants anonymous users to download the content from the S3 bucket
Generate a pre-signed object URL for the premier content file when a paid subscriber requests a download
Add a bucket policy that requires Multi-Factor Authentication for requests to access the S3 bucket objects
Enable server-side encryption on the S3 bucket for data protection against the non-paying website visitors

Question 18 of 30

18. Question

A company has an AWS account that contains three VPCs (Dev, Test, and Prod) in the same region. Test is peered to both Prod and Dev. All VPCs have non overlapping CIDR blocks. The company wants to push minor code releases from Dev to Prod to speedup time to market. Which of the following options helps the company accomplish this?

The VPCs have non-overlapping CIDR blocks in the same account. The route tables contain local routes for all VPCs.
Create a new peering connection Between Prod and Dev along with appropriate routes.
Attach a second gateway to Dev. Add a new entry in the Prod route table identifying the gateway as the target.
Create a new entry to Prod in the Dev route table using the peering connection as the target.

Question 19 of 30

19. Question

Which of the following are true regarding AWS CloudTrail? Choose 3 answers

CloudTrail is enabled on a per-region basis
CloudTrail is enabled globally
CloudTrail is enabled by default
CloudTrail is enabled on a per-service basis
Logs can be delivered to a single Amazon S3 bucket for aggregation
Logs can only be processed and delivered to the region in which they are generated
CloudTrail is enabled for all available services within a region

Question 20 of 30

20. Question

Which of the following approaches provides the lowest cost for Amazon Elastic Block Store snapshots while giving you the ability to fully restore data?

Maintain two snapshots: the original snapshot and the latest incremental snapshot.
Maintain a volume snapshot; subsequent snapshots will overwrite one another
Maintain the most current snapshot, archive the original and incremental to Amazon Glacier.
Maintain a single snapshot the latest snapshot is both Incremental and complete.

Question 21 of 30

21. Question

Which of the following statements are true about Amazon Route 53 resource records? Choose 2 answers

An Alias record can map one DNS name to another Amazon Route 53 DNS name.
A CNAME record can be created for your zone apex.
TTL can be set for an Alias record in Amazon Route 53.
An Amazon Route 53 Alias record can point to any DNS record hosted anywhere.
Use SSL to encrypt the data while in transit to Amazon S3.
An Amazon Route 53 CNAME record can point to any DNS record hosted anywhere.

Question 22 of 30

22. Question

A company is deploying a new two-tier web application in AWS. The company has limited staff and requires high availability, and the application requires complex queries and table joins. Which configuration provides the solution for the company’s requirements?

MySQL Installed on two Amazon EC2 Instances in a single Availability Zone
Amazon RDS for MySQL with Multi-AZ
Amazon DynamoDB
Amazon ElastiCache

Question 23 of 30

23. Question

When will you incur costs with an Elastic IP address (EIP)?

Costs are incurred regardless of whether the EIP is associated with a running instance
When it is allocated and associated with a running instance
When an EIP is allocated
When it is allocated and associated with a stopped instance

Question 24 of 30

24. Question

You are deploying an application to collect votes for a very popular television show. Millions of users will submit votes using mobile devices. The votes must be collected into a durable, scalable, and highly available data store for real-time public tabulation. Which service should you use?

Amazon DynamoDB
Amazon Kinesis
Amazon Redshift
Amazon Simple Queue Service

Question 25 of 30

25. Question

A customer is hosting their company website on a cluster of web servers that are behind a public-facing load balancer. The customer also uses Amazon Route 53 to manage their public DNS. How should the customer configure the DNS zone apex record to point to the load balancer?

Create an A record aliased to the load balancer DNS name
Create a CNAME record pointing to the load balancer DNS name.
Create an A record pointing to the IP address of the load balancer
Create a CNAME record aliased to the load balancer DNS name.

Question 26 of 30

26. Question

Which of the following services natively encrypts data at rest within an AWS region? Choose 2 answers

Amazon CloudFront
AWS Storage Gateway
Amazon Glacier
Amazon DynamoDB
Amazon Simple Queue Service

Question 27 of 30

27. Question

________________ , also known as master-slave deployments, are a good option for applications with a high read to write ratio. In this architecture, a single master database is responsible for handling all writes. The writes are then replicated to the slaves which are designated to handle just reads.

Vertical Scaling Up
Scale Storage
Read Replicas
Scale Compute

Question 28 of 30

28. Question

If I want to run a database in an Amazon instance, which is the most recommended Amazon storage option?

Amazon Instance Storage
Amazon EBS
Amazon S3
Amazon Glacier

Question 29 of 30

29. Question

You have an environment that consists of a public subnet using Amazon VPC and 3 instances that are running in this subnet. These three instances can successfully communicate with other hosts on the Internet. You launch a fourth instance in the same subnet, using the same AMI and security group configuration you used for the others, but find that this instance cannot be accessed from the Internet. What should you do to enable internet access?

Deploy a NAT instance into the public subnet.
Modify the routing table for the public subnet
Assign an Elastic IP address to the fourth instance.
Configure a publically routable IP Address In the host OS of the fourth instance.

Question 30 of 30

30. Question

What is RDS Automatic Host Replacement?

Multi-AZ deployments provide enhanced availability and durability for database instances, making them a natural fit for production database workloads
Backup your database and transaction logs and store both for a user-specified retention period
Synchronously replicates your data to a standby instance in a different Availability Zone (AZ).
Automatically replace the compute instance powering your deployment in the event of a hardware failure.

AWS CSA-A | Practice Quiz 02