AWS Solution Architect - Associate - Details

Levels:

1) Compute and Database View
2) IAM & Security View
3) S3 Storage View
4) Cloudfront View
5) Advanced Storage View
6) Serverless View
7) CloudWatch View
8) Security Management View

Questions:

132 questions

🇬🇧		🇬🇧

How many IP addresses are reserved in a CIDR in a subnet?

Between NAT Gteway and VPC endpoint, which is more cost effective?

VPC Endpoint

EC2 instances placed within an AZ is more cost-effective, but less available then EC2 instances placed across two AZ. True or False?

True

What is the maximum CIDR blocks we can create per VPC?

What is the maximum size per CIDR in a VPC?

Minimum size per CIDR in a VPC is 28. True or False?

True

Your VPC CIDR should not overlap with other networks. True or False?

True

How many internet gateways can be attached per VPC?

How do you allow EC2 instances in the private subnet to access internet?

NAT Instances (outdated) or NAT Gateway

Source/Destination check must be disabled for NAT Instance. True or False?

True

How do you make a private Instance get only outbound Internet connectivity?

In the route table, create a route from 0.0.0.0/0 to NAT Instance

Is it correct to place a NAT Instance on a private subnet?

NAT Gateway is resilient within a single AZ only. True or False?

True

To use private hosted zones, you must set the following Amazon VPC settings to true: enableDnsHostnames, enableDnsSupport. True or False?

True

Default NACL allows everything inbound and outbound. True or False?

True

Newly created NACL will block everything. True or False?

True

Non-overlapping CIDR is a key requirement for VPC Peering. True or False?

True

VPC Peering can work cross-region and cross-account. True or False?

True

VPC Peering will work wihtout updating route table in both VPCs that are getting peered. True or False?

False

To connect to AWS services using a private network, will you use VPC Endpoint ot NAT Gateway?

VPC Endpoint

Lead times are often more than a month to establish Direct Connection. True or False?

True

How do you secure Direct Connect?

AWS Direct Connect + VPN

Egress only Internet Gateway works only for IPV6. True or False?

True

All IPV6 addresses are public. True or False?

True

Connectivity through AWS VPN CloudHub goes over public internet. True or False?

True

To connect multiple VPCs to talk to each other, what service will you use?

Transit Gateway

The only service in AWS that supports IP MultiCast?

Transit Gateway

Direct connect location that are co-located in the same AWS region results in lower cost for egress network. True or False?

True

Cloudfront to Internet is slightly cheaper than S3 and also provides caching capability. True or False?

True

Even if you use IPV6, IPV4 cannot be disabled for your VPC and subnets. True or False?

True

Public IP of EC2 instance will remain the same after stop and start. True or False?

False

In placement group Partition, instances in a partition do not share racks with the instances in other partitions. True or Flase?

True

If you want an extremely low latency placement group (at the risk of availability), which placement strategy will you choose?

Cluster

For critical applications, you will choose 'Spread' placement group. True or False?

True

Elastic Network Interfaces (ENI) are bound to an Availability Zone (AZ). True or False?

True

Elastic Block Storage (EBS) can be thought of as a network USB stick. True or False?

True

EBS Volumes are NOT locked to an availability zone. True or False?

False

Delete on Terminate is attribute is by default turned ON for root EBS Volume. True or False?

True

EC2 instance and EBS Volume must be in the same Availability Zone to be attached to each other. True or False?

True

EBS Snapshot is available within a region and not specific to an AZ. True or False?

True

AMIs are built for a region but can be copied across regions. True or False?

True

If you need a high performance hardware disk on EC2, what would you use?

EC2 Instance store

EC2 Instance store loses data once stopped. I.e. it is ephemeral. True or False?

True

For applications that need more than 16000 IOPS, which EBS Volume type will you choose?

Provisioned IOPS SSD

If you need more than 32000 IOPS, you will need to choose EC2 Nitro Provisioned IOPS SSD. True or False?

True

Which EBS Family supports EBS Multi-attach functionality?

Io1/io2

To encrypt an unencrypted volume, create a snapshot and copy the snapshot into an encrypted one. True or False?

True

RAID 0 - Increase performance at the risk of losing data. True or False?

True

RAID 1 - Fault tolerance. write same data to multiple volumes. True or False?

True

EFS works with EC2 instances across multiple availability zones. True or False?

True

In spot fleet, if you want to terminate instances permanently, you must first cancel spot request and then terminate the associated instance. True or False?

True

For availability and long workloads, which spot fleet strategy will you choose?

Diversified

Which spot fleet strategy offers the possibility of fewer interruptions?

Capacity-optimized

For short time workloads, what's the most effective spot fleet strategy?

Lowest-price

Load Balancers provide high availability across zones. True or False?

True

Elastic Load Balancers can scale but not instantaneously. True or False?

True

Which load balancer must be used to forward the requests without any header modification?

Network Load Balancer

Which Load balancer supports forwarding to two different ports of the same instance?

Application Load Balancer

Both maintaining the number of instances in an Auto Scaling group and automatic scaling are the core functionality of the Amazon EC2 Auto Scaling service. True or False?

True

With Application Load Balancer (ALB), is EC2 instance wants to look at client IP, which header it has to look at?

X-Forwarded-For

Server Name Indication (SNI) works only on ALB and NLB and not on CLB. True or False?

True

Auto Scaling Group (ASG) tries to balance the number of instances across AZ by default. True or False?

True

ASG lifecycle hooks allow you to perform actions before In-Service and before Terminated. True or False?

True

Which option allows to provision both On-Demand and Spot instances (or a mix)? Launch Templates or Launch Configuration?

Launch Template

The capacity of your ASG cannot go over the maximum capacity you have allocated during scale out events. True or False?

True

Network Load Balancers expose a public static IP, whereas an Application or Classic Load Balancer exposes a static DNS (URL). True or False?

True

What is the frequency (in minutes) with which Transaction Logs are backed up in RDS?

5 minutes

For RDS Read replicas within the same region, you don't pay fees for cross AZ network. True or False?

True

Multi AZ Disaster recovery is synchronous. True or False?

True

Will you treat Multi AZ disaster recovery for scaling?

Can read replicas be setup as Multi AZ for Disaster recovery?

Yes

With RDS, when the master is not encrypted, read replica cannot be replicated. True or False?

True

IAM based authentication can be used to login to MySQL and PostgreSQL RDS. True or False?

True

Aurora supports self-healing with Peer-to-Peer replication. True or False?

True

With Aurora, Read replicas support cross-region replication. True or False?

True

With Aurora reader endpoint, load balancing happens at connection level and not statement level. True or False?

True

You only need to allow your on-premises users to log in to AWS applications and services with their Active Directory credentials. What would you use?

AD Connector

You need a low-scale, low-cost directory with basic Active Directory compatibility that supports Samba 4–compatible applications. What would you use?

Simple AD

You develop high-scale SaaS applications and need a scalable directory to manage and authenticate your subscribers and that works with social media identities. What service do you need?

Amazon Cognito

When you assume a role, you give up your original permissions and take the permissions assigned to the role. True or False?

True

With resource based policy, the principal does not need to give up permissions. True or False?

True

If there is an explicit deny, the decision will be deny even if there's another allow policy. True or False?

True

IAM roles and resource-based policies delegate access across accounts only within a single partition. True or False?

True

A policy is composed of Service, Actions (Allow/Deny), Resources and Conditions. True or False?

True

The principal_block element is required in resource-based policies (for example, in Amazon S3 bucket policies) and in trust policies for IAM roles. It must not be included in identity-based policies. True or False?

True

The Principal element in a role trust policy refers to an IAM user. Later you delete and recreate the user. Now, the trust relationship is broken (since the Principal ID is changed). True or False?

True

What can you specify as Principal in a resource based policy?

Account, User, Role, or Federated user

An implicit deny in a permissions boundary does not limit the permissions granted by a resource-based policy. True or False?

True

An explicit deny in a permissions boundary DOES LIMIT the permissions granted by a resource-based policy. True or False?

True

In IAM policies, implicit deny happens when there is no explicit allow. True or False?

True

Buckets are defined at region level even though bucket name is global. True or False?

True

What's the key in s3://my-bucket/my_file.txt?

My_file.txt

Suspending versioning does not delete previous versions. True or False?

True

Name the method to encrypt S3 objects using keys handled and managed by AWS?

SSE-S3

Name the method to encrypt S3 objects using Amazon KMS keys?

SSE-KMS

Name the client library to encrypt objects before uploading to S3 (for client side encryption)?

Amazon S3 Encryption Client

You can block public access for a bucket through "Block public access to buckets" setting. True or False?

True

You want to grant access to a S3 object for a limited time to a user. What option would you choose for this?

Pre-signed URLs.

To host a static website, "Host a static website" option must be enabled within S3 bucket. True or False?

True

Bucket policies are evaluated before "default encryption". True or False?

True

AWS Solution Architect - Associate

Practice Known Questions

Exams

Learn New Questions

AWS Solution Architect - Associate - Leaderboard