AWS CLOUD - ALC - TEST 11 : Question 1 of 70

You are working on a Government application which mandates that you cannot share the physical host, which type of instances can you use in this case? You are working on a Government application which mandates that you cannot share the physical host, which type of instances can you use in this case?

1 Mark(s)

Reserved instances
Dedicated instances
Spot instances
On demand instances

Which statements about Glacier are true? Which statements about Glacier are true?

1 Mark(s)

User specifies the Glacier archive names
Glacier vault can be locked
Glacier stores data in objects in archives
Glacier can be used as S3 storage class

In order to connect an instance via ssh from your local environment, which of the below is required? In order to connect an instance via ssh from your local environment, which of the below is required?

1 Mark(s)

AMI id or instance Id
Public DNS Name or Elastic IP address
only instance Id is enough
key pair name or security group

Which of the statements are true about GLACIER storage? Which of the statements are true about GLACIER storage?

1 Mark(s)

Once the Object is retrieved from S3 it will automatically get deleted from Glacier
The time it takes Glacier restore jobs to complete depends on which retrieval option you specify viz. Expedited, Standard, or Bulk.
If you retrieve the object stored in Glacier then you first restore a copy using the POST Object restore API.
We can always call GET to retrieve the object stored in Glacier

Which of the below are true about VM Import/Export functionality in aws? Which of the below are true about VM Import/Export functionality in aws?

1 Mark(s)

You can import a VM from your virtualization environment to Amazon EC2 as an EC2 instance.
You can import a VM from your virtualization environment to Amazon EC2 as an Amazon Machine Image (AMI)
You cannot export a VM that was previously imported from your virtualization environment
You cannot import disks as Amazon EBS snapshots

You are using NoSQL database which needs 20K IOPS, what would be the best strategy to achieve this to get best performance? You are using NoSQL database which needs 20K IOPS, what would be the best strategy to achieve this to get best performance?

1 Mark(s)

use Throughput Optimized HDD (st1)
use Cold HDD (sc1)
use instance store
use EBS Provisioned IOPS SSD (io1)

Which of the below operation you cannot perform on Amazon S3 buckets? Which of the below operation you cannot perform on Amazon S3 buckets?

1 Mark(s)

GET
CREATE
UPDATE
DELETE

In which scenarios is it possible that S3 can serve stale data? In which scenarios is it possible that S3 can serve stale data?

1 Mark(s)

GET after PUT of a new Object
LIST after DELETE
GET after overwrite PUT
GET after DELETE

You are a solutions architect working on a Mobile application, the application is running slow and has response time over 5 seconds. After debugging you realized that the fetching of user profile information from the database is taking longer time. This user profile information rarely changes. Which of the below will help you application performance? You are a solutions architect working on a Mobile application, the application is running slow and has response time over 5 seconds. After debugging you realized that the fetching of user profile information from the database is taking longer time. This user profile information rarely changes. Which of the below will help you application performance?

1 Mark(s)

Amazon RDS
Amazon ElasticCache
DynamoDB
CloudWatch
Redshift

You have a web application which has steady traffic most of the time. Only during start of the month for first 5 days the traffic is doubles. For regular days 5 instances are enough, and if we add 10 more instances at the start of the month for first days you are able to manage the load. What would be the most cost effective way to choose the types of instances? You have a web application which has steady traffic most of the time. Only during start of the month for first 5 days the traffic is doubles. For regular days 5 instances are enough, and if we add 10 more instances at the start of the month for first days you are able to manage the load. What would be the most cost effective way to choose the types of instances?

1 Mark(s)

5 dedicated instances and 10 On demand for first 5 days of the month.
5 reserved instances and 10 Spot for first 5 days of the month.
15 reserved instances
5 reserved instances and 10 On demand for first 5 days of the month.

You are building a web application and want to use RDS as database layer, throughout the day you get consistent load and it is high I/O-intensive workload, which storage class will you choose for your RDS? You are building a web application and want to use RDS as database layer, throughout the day you get consistent load and it is high I/O-intensive workload, which storage class will you choose for your RDS?

1 Mark(s)

Provisioned IOPS
Magnetic
General Purpose (SSD) - GP2
S3 with High IO

What is the most cost efficient way for the below requirements, by law store 200 TB of data for 3 years, data within 1 year is accessed frequently, but data older than 1 year is accessed less frequently? What is the most cost efficient way for the below requirements, by law store 200 TB of data for 3 years, data within 1 year is accessed frequently, but data older than 1 year is accessed less frequently?

1 Mark(s)

Store data in S3 for 1 year, then with lifecycle policies change it to Glacier and then after 3 years delete the Object
Use spot instances
Store the data in EBS volumes attached to micro instance.
Store the data forever in Glacier

You are using Elastic Load Balancer and you have only one load balancer and one ec2 instance running. You have currently 5K active users, now you launch another instance, but immediately when you check the connections are not evenly distributed across the 2 nodes. The new node has less connections and is increasing slowly as new users connect, the old node still has around 5K connections, what could be the reason? You are using Elastic Load Balancer and you have only one load balancer and one ec2 instance running. You have currently 5K active users, now you launch another instance, but immediately when you check the connections are not evenly distributed across the 2 nodes. The new node has less connections and is increasing slowly as new users connect, the old node still has around 5K connections, what could be the reason?

1 Mark(s)

you need to restart the load balancer
you need to restart both the instances
enable CloudWatch
sticky session is enabled

Which of the below statements about cross region replication on S3 are true? Which of the below statements about cross region replication on S3 are true?

1 Mark(s)

You can direct Amazon S3 to use the STANDARD_IA storage class for object replicas.
The source and destination buckets must be versioning-enabled.
You can replicate objects from a source bucket to more than one destination bucket.
The source and destination buckets must be in different AWS regions.

Which of the below statements are true about Amazon ElasticCache? Which of the below statements are true about Amazon ElasticCache?

1 Mark(s)

When you delete an ElastiCache for Redis cluster, your manual snapshots will also be deleted.
Creating a snapshot from a read replica is the best way to backup your data while minimizing performance impact.
You cannot copy snapshots from one region to another
snapshots are available only for ElastiCache for Redis, they are not available for Memcached
While taking a snapshot, you may encounter increased latencies for a brief period at the node.

In your application you publish a message to a Amazon SNS topic every time a new image is uploaded. There are some independent processes which needs to be done such as generate thumbnails, perform image recognition, and store metadata about the image, which is the best way to achieve this? In your application you publish a message to a Amazon SNS topic every time a new image is uploaded. There are some independent processes which needs to be done such as generate thumbnails, perform image recognition, and store metadata about the image, which is the best way to achieve this?

1 Mark(s)

Copy the message to S3 and create multiple SQS Queues
Create multiple SNS topics and then create multiple SQS Queues
Replicate the SNS topic and create multiple SQS Queues
From the SNS topic fanout identical messages to multiple standard SQS queues.

Which of the below statements about IAM role with an EC2 instance are true? Which of the below statements about IAM role with an EC2 instance are true?

1 Mark(s)

You cannot delete an IAM role that is associated with a running EC2 instance
You can use the same IAM role on multiple EC2 instances
You cannot associate an IAM role with an Auto Scaling group
You can only associate one IAM role with an EC2 instance
You can associate an IAM role with an already running EC2 instance
You cannot change the IAM role on a running EC2 instance

Which of the below are true about EBS Volumes? Which of the below are true about EBS Volumes?

1 Mark(s)

CloudWatch Logger agent
EBS Volume can be attached to more than one instance
Only one volume can be attached to a single instance.
You can dynamically grow EBS volumes
EBS volumes persist independently from the running life of an EC2 instance.

Using Bucket Policies we can restrict the access to S3 Objects based on which criteria? Using Bucket Policies we can restrict the access to S3 Objects based on which criteria?

1 Mark(s)

Based on IP address
Time of request
Based on Browser
Objects with specific prefix

Which of the below features can restrict access to S3 Which of the below features can restrict access to S3

1 Mark(s)

S3 Bucket policy
Upload Objects using Pre-Signed URLs
Lifecycle policy for S3 buckets
Amazon S3 ACL on Bucket

Given Object URL http://my.buck.1.s3.amazonaws.com/obj1/test.doc? Given Object URL http://my.buck.1.s3.amazonaws.com/obj1/test.doc?

1 Mark(s)

my.buck.1 is the bucket and obj1/test.doc is the key
obj1/test.doc is the bucket and my.buck.1 is the key
my.buck.1 is the bucket and test.doc is the key
buck is the bucket and obj1/test.doc is the key

What are the possible reasons to configure cross-region replication on a S3 bucket? What are the possible reasons to configure cross-region replication on a S3 bucket?

1 Mark(s)

To backup data
You have compute clusters in two different regions that analyze the same set of objects.
To minimize latency in accessing objects.
Compliance requirements might dictate that you store data at even further distances.

How to protect data from accidental deletion? How to protect data from accidental deletion?

1 Mark(s)

Enable versioning
Use cross region replication
Vault lock
Enable MFA Delete

Which statements are true about Multi-part upload to S3? Which statements are true about Multi-part upload to S3?

1 Mark(s)

you should use multi-part for objects greater than 5 GB in size.
When using multipart uploading, you need to retry uploading only parts that are interrupted during the upload. You dont need to restart uploading your object from the beginning.
When using multipart uploading, in case of interruptions you need to restart uploading your object from the beginning.
in multipart uploading object parts is done in parallel for multi-threaded performance.

Which of the below are valid Resource-Based Permissions? Which of the below are valid Resource-Based Permissions?

1 Mark(s)

Delete Topic SNS topic
Querying an RDS database
installing httpd on linux server
Delete objects from S3 bucket

You launched a windows instance, it is up and running, but when you try to RDP on port 3389 you are not able to logon, what could be the possible reason? RDP is not allowed in aws You launched a windows instance, it is up and running, but when you try to RDP on port 3389 you are not able to logon, what could be the possible reason? RDP is not allowed in aws

1 Mark(s)

RDP is not allowed in aws
Instance is Dedicated instance so you need to enable enhanced networking
Key Pair is not setup properly, you need to delete the key pair and create new one.
You dont have a Security Group rule which allows RDP over 3389 from your IP address

What is the order in which Amazon SQS Standard Queues deliver messages? What is the order in which Amazon SQS Standard Queues deliver messages?

1 Mark(s)

FIFO (First-In-First-Out)
The delivery order is not guaranteed
LIFO (Last-In-First-Out)

Amazon CloudWatch offers which kind of monitoring? Amazon CloudWatch offers which kind of monitoring?

1 Mark(s)

CloudTrail Monitoring
Autoscaling Monitoring
Micro Monitoring
Detailed Monitoring
Basic Monitoring

Which of the below is true about instance store volumes? Which of the below is true about instance store volumes?

1 Mark(s)

You can specify instance store volumes for an instance only when you launch it.
You can detach an instance store volume from one instance and attach it to a different instance.
When you stop or terminate an instance instance store persists.
If an instance reboots data in the instance store persists

What is the IAM policy text format? What is the IAM policy text format?

1 Mark(s)

CSV
JSON
Encrypted
XML

Given Object URL http://bucket1.test.me.s3.amazonaws.com/bucketfolder/bucket.doc What is the Bucket name? Given Object URL http://bucket1.test.me.s3.amazonaws.com/bucketfolder/bucket.doc What is the Bucket name?

1 Mark(s)

bucket.doc
bucketfolder
bucket1.test.me

What problem does IAM roles for EC2 instances solve? What problem does IAM roles for EC2 instances solve?

1 Mark(s)

IAM roles for EC2 instances simplifies management and deployment of user password to EC2 instances.
IAM roles for EC2 instances simplifies management and deployment of applications to EC2 instances.
Using IAM Roles we dont need to do SSH to the instance
IAM roles for EC2 instances simplifies management and deployment of AWS access keys to EC2 instances.

By default, how many max IAM roles can a user create? By default, how many max IAM roles can a user create?

1 Mark(s)

There is no limit
1,000
0
1

You need to store image thumbnails which can be easily reproduced, these need to be immediately available. What would be the most cost efficient way of storing them? You need to store image thumbnails which can be easily reproduced, these need to be immediately available. What would be the most cost efficient way of storing them?

1 Mark(s)

S3 - RRS
Glacier
S3 Standard
S3 Standard - IA

Amazon ElasticCache supports which of the cache engines? Amazon ElasticCache supports which of the cache engines?

1 Mark(s)

Guava and CouchBase
Guava and CouchBase
Solr and CouchBase
Memcached and Redis

Which of the below statements are true about Buckets? Which of the below statements are true about Buckets?

1 Mark(s)

Bucket name cannot have numbers
S3 bucket names are globally unique, regardless of the AWS Region in which you create the bucket
For a Bucket, region where it will be stored is randomly selected.
Every Amazon S3 object is always contained inside a bucket

Which of the below features can restrict access to S3 Which of the below features can restrict access to S3

1 Mark(s)

Upload Objects using Pre-Signed URLs
Lifecycle policy for S3 buckets
Amazon S3 ACL on Bucket
S3 Bucket policy

You have image processing application which is up with 5 reserved instances, this application uses Amazon Kinesis which is a Queue, then your instances process items from the queue. Sometimes the processing can fail and its ok to start the processing again. Recently you observed the number of items in the Queue has gone up and you would like to add some additional instances to make processing faster. Which would be most cost effective way of handling such a load? You have image processing application which is up with 5 reserved instances, this application uses Amazon Kinesis which is a Queue, then your instances process items from the queue. Sometimes the processing can fail and its ok to start the processing again. Recently you observed the number of items in the Queue has gone up and you would like to add some additional instances to make processing faster. Which would be most cost effective way of handling such a load?

1 Mark(s)

use 5 reserved and 5 dedicated instances
use 5 more reserved instances
use spot instances when the queue builds up
use dedicated instances instead of reserved instances

You requested for a Spot instance at 10:02 and got an instance at 10:10, but then at 10:40 it was terminated by Amazon because the Spot price exceeds your specified price, how much will you be charged? You requested for a Spot instance at 10:02 and got an instance at 10:10, but then at 10:40 it was terminated by Amazon because the Spot price exceeds your specified price, how much will you be charged?

1 Mark(s)

you will not be charged for the partial hour
you will be charged for half hour
you will be charged for the hour
you will be charged for the hour, and you will get credits for 30 mins

Which of the below are true about restoring EBS Volume from a Snapshot Which of the below are true about restoring EBS Volume from a Snapshot

1 Mark(s)

EBS Volumes can be restored from EFS
The data on EBS Volume is available immediately
You can restore EBS Volumes using their name
EBS volumes that are restored from encrypted snapshots are automatically encrypted.

You need to setup your application across multiple regions, you have setup IAM in one region, what do you need to do to have same IAM setup in other regions? You need to setup your application across multiple regions, you have setup IAM in one region, what do you need to do to have same IAM setup in other regions?

1 Mark(s)

Clone only the users
Clone policies and roles, users are global
No nothing for IAM setup
Enable the IAM sync flag so that multiple regions can sync IAM

Before you send data to S3 it needs to be encrypted, which S3 encryption solution should you use? Before you send data to S3 it needs to be encrypted, which S3 encryption solution should you use?

1 Mark(s)

Client-side encryption with customer managed keys
SSE-C
SSE-KMS
SSE-S3

Which of the following are valid IAM policy document elements? Which of the following are valid IAM policy document elements?

1 Mark(s)

Resource
ARN
instance id
Effect
Action

Which of the below are valid IAM Permissions types? Which of the below are valid IAM Permissions types?

1 Mark(s)

Resource-Based Permissions
Identity-Based (IAM) Permissions
IP-Based Permissions
User-Based Permissions

Your company stores documents on S3, only for first 10 days they are frequently read, after that there are hardly any read operations. but if required the data should be available in minutes. Also the data is critical, in order to reduce cost and meet the above requirements what would be your strategy? Your company stores documents on S3, only for first 10 days they are frequently read, after that there are hardly any read operations. but if required the data should be available in minutes. Also the data is critical, in order to reduce cost and meet the above requirements what would be your strategy?

1 Mark(s)

Keep data is S3
Migrate data to S3 Standard IA after 10 days
Migrate to Glacier after 10 days
Migrate to S3 - RRS after 10 days

Which all statements are true about S Which all statements are true about S

1 Mark(s)

S3 uses REST APIs
All objects have a global unique URL
when creating bucket we need to specify limit of bucket
By default objects can be read/downloaded by anybody

Which of the below are mandatory params for launching an instance? Which of the below are mandatory params for launching an instance?

1 Mark(s)

AMI
Admin password
EC2 instance type
Instance ID

In case of a read intensive web application based on S3, how can you improve performance and make sure the web app is scales well at even 1000 GETS per second? In case of a read intensive web application based on S3, how can you improve performance and make sure the web app is scales well at even 1000 GETS per second?

1 Mark(s)

By doing Cross region replication
Enable logging
hash prefix the key names
Enable versioning

Which are must configuration for Website Hosting on S3 Which are must configuration for Website Hosting on S3

1 Mark(s)

Configure bucket for HTTP
Make the objects that you want to serve publicly readable.
Enable Website Hosting on bucket & Configure Index Document Support
Make all files text readable

How can you track requests to your Amazon S3 bucket How can you track requests to your Amazon S3 bucket

1 Mark(s)

Enable CloudWatch logs
Enable versioning and only then enable access logs
Enable Amazon S3 server access logs
Enable cross region replication

Which of the below is true about Elastic IP address? Which of the below is true about Elastic IP address?

1 Mark(s)

A disassociated Elastic IP address is automatically released immediately.
You can disassociate an Elastic IP address from a resource, and reassociate it with a different resource.
You will be charged for the Elastic IP address only when it is associated with a running instance, if it is not associated with any instance its free
Elastic IP address is same as instance id

Which all are suitable use cases for S3? Which all are suitable use cases for S3?

1 Mark(s)

storing static web content
installing operating system
primary storage of database
storing logs for analytic

How does S3 achieve high durability? How does S3 achieve high durability?

1 Mark(s)

Cross region replication
You get high durability only if Versioning is enabled
Amazon takes data backup on tapes
Data replication within region

You need consistently lower inter-instance latencies which of the below configurations will help achieve lower inter-instance latencies? You need consistently lower inter-instance latencies which of the below configurations will help achieve lower inter-instance latencies?

1 Mark(s)

use dedicated instances
use instances with 10 Gigabit network connectivity
use routers
use placement groups
enable enhanced networking

What is IAM used for? What is IAM used for?

1 Mark(s)

You can use IAM to securely control individual and group access to your AWS resources
Using IAM you can monitor logs
You can create and manage user identities using IAM
Using IAM you can auto scale your application
Using IAM you can grant permissions for users outside of AWS
You can grant permissions for IAM users to access your resources using IAM.

Which all statements about S3 are true? Which all statements about S3 are true?

1 Mark(s)

In S3 Objects contain both data and metadata
S3 stores data in fixed size blocks
S3 Objects are stored in buckets
In S3 Object key can contain only numbers

There are some sensitive documents which you want only authenticated users to be able to access, also if they do not access within a day then the links should become invalid, how can you achieve this? There are some sensitive documents which you want only authenticated users to be able to access, also if they do not access within a day then the links should become invalid, how can you achieve this?

1 Mark(s)

Use static web hosting
Generate Pre-signed URLs for a day
IAM Policies to restrict the access
Use logging to track usage

Which of the following are best practices to secure AWS accounts? Which of the following are best practices to secure AWS accounts?

1 Mark(s)

use login CAPTCHA
Use MFA
use policy to grant access only from corporate network
use password policy
disable all ssh login

Which of the following are valid IAM Security features? Which of the following are valid IAM Security features?

1 Mark(s)

Cloudtrial
CloudWatch
Identities (Users, Groups, and Roles)
Resource-based Policies

Which are suitable use cases for Glacier? Which are suitable use cases for Glacier?

1 Mark(s)

Primary storage for Database
real time data
Data which is rarely accessed
To mount operating system

Which of the below should be executed by the user data? Which of the below should be executed by the user data?

1 Mark(s)

EBS Volume snapshot
installation of necessary web server, php, and mysql packages
start httpd service and turned on via chkconfig
The distribution software packages update

You are a solutions architect, your application needs to cache data in sorted order, also there are geospatial indexes. Which of the below are best suited for this? You are a solutions architect, your application needs to cache data in sorted order, also there are geospatial indexes. Which of the below are best suited for this?

1 Mark(s)

Amazon Redshift
Amazon EBS
Amazon ElasticCache using Memcached
Amazon ElasticCache using Redis

DNS servers uses which port? DNS servers uses which port?

1 Mark(s)

161
22
8080
53

IAM is supported only in which region? IAM is supported only in which region?

1 Mark(s)

US West(Oregon)
US East(Ohio)
EU (London)
Global

Which of the following about S3 cross region replication is true? Which of the following about S3 cross region replication is true?

1 Mark(s)

Only customer actions are replicated. Actions performed by lifecycle configuration are not replicated.
S3 does not retroactively replicate objects that existed before you added replication configuration.
S3 does not replicate object tags, if any
Obects created with server-side encryption using either customer-provided (SSE-C) or AWS KMS–managed encryption (SSE-KMS) keys are not replicated.

You have a backend application which requires 1000 IOPS during regular hours, but at the end of the day there is ETL job which runs for 1 hour, it needs 2500 IOPS, to meet this use case which would be the most cost efficient EBS Volume? You have a backend application which requires 1000 IOPS during regular hours, but at the end of the day there is ETL job which runs for 1 hour, it needs 2500 IOPS, to meet this use case which would be the most cost efficient EBS Volume?

1 Mark(s)

Cold HDD (sc1)
EBS General Purpose SSD (gp2)
Throughput Optimized HDD (st1)
S3
EBS Provisioned IOPS SSD (io1)

You have a long running m3.large linux reserved instance in us-west-1a, which of the below modifications are allowed on this instance? You have a long running m3.large linux reserved instance in us-west-1a, which of the below modifications are allowed on this instance?

1 Mark(s)

Modify instance type to m3.xlarge
Modify instance type to t1.micro
Modify Availability Zone to us-west-1b
Modify instance type to m1.large

You launched a new Linux instance with Elastic IP address, how can you connect to this instance from your location machine using ssh? You launched a new Linux instance with Elastic IP address, how can you connect to this instance from your location machine using ssh?

1 Mark(s)

you can directly ssh onto the box
using instance id and Elastic IP address
using the pem file and Elastic IP address
using the password

Which of the below are benefits of Enhanced networking? Which of the below are benefits of Enhanced networking?

1 Mark(s)

elastic load balancing
auto scaling
higher bandwidth
higher packet per second (PPS) performance
lower inter-instance latencies

Which of the below are true about EBS Volumes? Which of the below are true about EBS Volumes?

1 Mark(s)

Snapshots of encrypted EBS volumes are automatically encrypted.
The volume does not need be attached to a running instance in order to take a snapshot.
EBS Volumes snapshots are stored on Amazon S3
The EBS volume snapshots are always private, they cannot be public