AWS Associate Exam

JavaScript isn't enabled in your browser, so this file can't be opened. Enable and reload.

AWS Associate Exam - Quiz 1

1. A company is storing an access key (access key ID and secret access key) in a text file on a customAMI. The company uses the access key to access DynamoDB tables from instances created from theAMI. The security team has mandated a more secure solution Which solution will meet the security team’s mandate?

1 point

Put the access key in an S3 bucket, and retrieve the access key on boot from the instance

Pass the access key to the instances through instance user data.

Obtain the access key from a key server launched in a private subnet.

Create an IAM role with permissions to access the table, and launch all instances with the new role.

Clear selection

2) A company is developing a highly available web application using stateless web servers. Whichservices are suitable for storing session state data? (Select TWO.)

1 point

CloudWatch

DynamoDB

Elastic Load Balancing

ElastiCache

Storage Gateway

3) Company salespeople upload their sales figures daily. A Solutions Architect needs a durable storagesolution for these documents that also protects against users accidentally deleting importantdocuments.Which action will protect against unintended user actions?

1 point

Store data in an EBS volume and create snapshots once a week.

Store data in an S3 bucket and enable versioning.

Store data in two S3 buckets in different AWS regions.

Store data on EC2 instance storage.

Clear selection

4) An application requires a highly available relational database with an initial storage capacity of 8 TB.The database will grow by 8 GB every day. To support expected traffic, at least eight read replicas willbe required to handle database reads.Which option will meet these requirements?

1 point

DynamoDB

Amazon S3

Amazon Aurora

Amazon Redshift

Clear selection

5) A Solutions Architect is designing a critical business application with a relational database that runson an EC2 instance. It requires a single EBS volume that can support up to 16,000 IOPS.Which Amazon EBS volume type can meet the performance requirements of this application?

1 point

EBS Provisioned IOPS SSD

EBS Throughput Optimized HDD

EBS General Purpose SSD

EBS Cold HDD

Clear selection

6) A web application allows customers to upload orders to an S3 bucket. The resulting Amazon S3events trigger a Lambda function that inserts a message to an SQS queue. A single EC2 instancereads messages from the queue, processes them, and stores them in an DynamoDB table partitionedby unique order ID. Next month traffic is expected to increase by a factor of 10 and a SolutionsArchitect is reviewing the architecture for possible scaling problems.Which component is MOST likely to need re-architecting to be able to scale to accommodate the newtraffic?

1 point

Lambda function

SQS queue

EC2 instance

DynamoDB table

Clear selection

7) An application saves the logs to an S3 bucket. A user wants to keep the logs for one month fortroubleshooting purposes, and then purge the logs.What feature will enable this?

1 point

Adding a bucket policy on the S3 bucket.

Configuring lifecycle configuration rules on the S3 bucket.

Creating an IAM policy for the S3 bucket.

Enabling CORS on the S3 bucket.

Clear selection

8) An application running on EC2 instances processes sensitive information stored on Amazon S3. Theinformation is accessed over the Internet. The security team is concerned that the Internetconnectivity to Amazon S3 is a security risk.Which solution will resolve the security concern?

1 point

Access the data through an Internet Gateway.

Access the data through a VPN connection.

Access the data through a NAT Gateway.

Access the data through a VPC endpoint for Amazon S3.

Clear selection

9) An organization is building an Amazon Redshift cluster in their shared services VPC. The cluster willhost sensitive data.How can the organization control which networks can access the cluster?

1 point

Run the cluster in a different VPC and connect through VPC peering

Create a database user inside the Amazon Redshift cluster only for users on the network

Define a cluster security group for the cluster that allows access from the allowed networks.

Only allow access to networks that connect with the shared services network via VPN.

Clear selection

A Solutions Architect is designing an online shopping application running in a VPC on EC2 instancesbehind an ELB Application Load Balancer. The instances run in an Auto Scaling group acrossmultiple Availability Zones. The application tier must read and write data to a customer manageddatabase cluster. There should be no access to the database from the Internet, but the cluster mustbe able to obtain software patches from the Internet.Which VPC design meets these requirements?

1 point

Public subnets for both the application tier and the database cluster

Public subnets for the application tier, and private subnets for the database cluster

Public subnets for the application tier and NAT Gateway, and private subnets for the database cluster

Public subnets for the application tier, and private subnets for the database cluster and NAT Gateway

Clear selection

Submit

Clear form

Forms

This content is neither created nor endorsed by Google.