AWS CLOUD - ALC - TEST 15 : Question 1 of 50

My Read Replica appears "stuck" after a Multi-AZ failover & is unable to obtain or apply updates from the source DB Instance. What do we do? My Read Replica appears "stuck" after a Multi-AZ failover & is unable to obtain or apply updates from the source DB Instance. What do we do?

1 Mark(s)

We will need to delete the Read Replica & create a new one to replace it.
We will need to disassociate the DB Engine & re-associate it.
The instance should be deployed to Single AZ & then moved to Multi-AZ once again.
We will need to delete the DB Instance & create a new one to replace it.

A web design company currently runs several FTP servers that their 250 customers use to upload & download large graphic files. They wish to move this system to AWS to make it more scalable, but they wish to maintain customer privacy & keep the costs to a minimum. What AWS architecture would you recommend? A web design company currently runs several FTP servers that their 250 customers use to upload & download large graphic files. They wish to move this system to AWS to make it more scalable, but they wish to maintain customer privacy & keep the costs to a minimum. What AWS architecture would you recommend?

1 Mark(s)

Ask their customers to use an S3 client instead of an FTP client. Create a single S3 bucket. Create an IAM user for each customer. Put the IAM Users in a Group that has an IAM policy that permits access to sub-directories within the bucket via use of the ‘username’ Policy variable.
Create a single S3 bucket with Reduced Redundancy Storage turned on and ask their customers to use an S3 client instead of an FTP client. Create a bucket for each customer with a Bucket Policy that permits access only to that one customer.
Create an auto-scaling group of FTP servers with a scaling policy to automatically scale-in when minimum network traffic on the auto-scaling group is below a given threshold. Load a central list of ftp users from S3 as part of the user Data startup script on each Instance.
Create a single S3 bucket with Requester Pays turned on and ask their customers to use an S3 client instead of an FTP client. Create a bucket tor each customer with a Bucket Policy that permits access only to that one customer.

You are responsible for a legacy web application whose server environment is approaching end of life. You would like to migrate this application to AWS as quickly as possible, since the application environment currently has the following limitations: ◦The VM's single 10GB VMDK is almost full. Me Virtual network interface still uses the 10Mbps driver, which leaves your 100Mbps WAN connection completely underutilized. It is currently running on a highly customized Windows VM within a VMware environment. You do not have the installation media. This is a mission critical application with an RTO (Recovery Time Objective) of 8 hours. RPO (Recovery Point Objective) of 1 hour. How could you best migrate this application to AWS while meeting your business continuity requirements? You are responsible for a legacy web application whose server environment is approaching end of life. You would like to migrate this application to AWS as quickly as possible, since the application environment currently has the following limitations: ◦The VM's single 10GB VMDK is almost full. Me Virtual network interface still uses the 10Mbps driver, which leaves your 100Mbps WAN connection completely underutilized. It is currently running on a highly customized Windows VM within a VMware environment. You do not have the installation media. This is a mission critical application with an RTO (Recovery Time Objective) of 8 hours. RPO (Recovery Point Objective) of 1 hour. How could you best migrate this application to AWS while meeting your business continuity requirements?

1 Mark(s)

Use the EC2 VM Import Connector for vCenter to import the VM into EC2.
Use Import/Export to import the VM as an ESS snapshot and attach to EC2.
Use S3 to create a backup of the VM and restore the data into EC2.
Use me ec2-bundle-instance API to Import an Image of the VM into EC2.

Which AWS instance address has the following characteristics? "If you stop an instance, its Elastic IP address is unmapped, and you must remap it when you restart the instance." Which AWS instance address has the following characteristics? "If you stop an instance, its Elastic IP address is unmapped, and you must remap it when you restart the instance."

1 Mark(s)

VPC Addresses
EC2 Addresses
Both A and B
None of these

Amazon SES stand for: Amazon SES stand for:

1 Mark(s)

Simple Elastic Server
Simple Email Service
Software Email Solution
Software Enabled Server

Select the correct set of steps for exposing the snapshot only to specific AWS accounts. Select the correct set of steps for exposing the snapshot only to specific AWS accounts.

1 Mark(s)

Select public for all the accounts and check mark those accounts with whom you want to expose the snapshots and click save.
Select Private, enter the IDs of those AWS accounts, and click Save.
Select Public, enter the IDs of those AWS accounts, and click Save.
Select Public, mark the IDs of those AWS accounts as private, and click Save.

Your startup wants to implement an order fulfillment process for selling a personalized gadget that needs an average of 3-4 days to produce with some orders taking up to 6 months. You expect 10 orders per day on your first day, 1000 orders per day after 6 months and 10,000 orders after 12 months. Orders coming in are checked for consistency then dispatched to your manufacturing plant for production quality control packaging shipment and payment processing If the product does not meet the quality standards at any stage of the process, employees may force the process to repeat a step. Customers are notified via email about order status and any critical issues with their orders such as payment failure. Your case architecture includes AWS Elastic Beanstalk for your website with an RDS MySQL instance for customer data and orders. How can you implement the order fulfillment process while making sure that the emails are delivered reliably? Your startup wants to implement an order fulfillment process for selling a personalized gadget that needs an average of 3-4 days to produce with some orders taking up to 6 months. You expect 10 orders per day on your first day, 1000 orders per day after 6 months and 10,000 orders after 12 months. Orders coming in are checked for consistency then dispatched to your manufacturing plant for production quality control packaging shipment and payment processing If the product does not meet the quality standards at any stage of the process, employees may force the process to repeat a step. Customers are notified via email about order status and any critical issues with their orders such as payment failure. Your case architecture includes AWS Elastic Beanstalk for your website with an RDS MySQL instance for customer data and orders. How can you implement the order fulfillment process while making sure that the emails are delivered reliably?

1 Mark(s)

Add a business process management application to your Elastic Beanstalk app servers and re-use the ROS database for tracking order status use one of the Elastic Beanstalk instances to send emails to customers.
Use SWF with an Auto Scaling group of activity workers and a decider instance in another Auto Scaling group with min/max=1. Use the decider instance to send emails to customers.
Use SWF with an Auto Scaling group of activity workers and a decider instance in another Auto Scaling group with min/max=1. Use SES to send emails to customers.
Use an SQS queue to manage all process tasks Use an Auto Scaling group of EC2 Instances that poll the tasks and execute them. Use SES to send emails to customers.

Amazon RDS stand for: Amazon RDS stand for:

1 Mark(s)

Regional Data Server.
Relational Database Service.
Nothing.
Regional Database Service.

Which Amazon storage do you think is the best for my database-style applications that frequently encounter many random reads & writes across the dataset? Which Amazon storage do you think is the best for my database-style applications that frequently encounter many random reads & writes across the dataset?

1 Mark(s)

None of these.
Amazon Instance Storage.
Any of these.
Amazon EBS.

Are we able to integrate a multi-factor token service with the AWS Platform? Are we able to integrate a multi-factor token service with the AWS Platform?

1 Mark(s)

Yes, using the AWS multi-factor token devices to authenticate users on the AWS platform.
No, you cannot integrate multi-factor token devices with the AWS platform.
Yes, you can integrate private multi-factor token devices to authenticate users to the AWS platform.

Dynamic DB supports in-place atomic updates. Dynamic DB supports in-place atomic updates.

1 Mark(s)

It is not defined.
Incorrect.
Correct
It does support in-place non-atomic updates.

Your company currently has a 2-tier web application running in an on-premises data center. You have experienced several infrastructure failures in the past two months resulting in significant financial losses. Your CIO is strongly agreeing to move the application to AWS. While working on achieving buy-in from the other company executives, he asks you to develop a disaster recovery plan to help improve business continuity in the short term. He specifies a target Recovery Time Objective (RTO) of 4 hours and a Recovery Point Objective (RPO) of 1 hour or less. He also asks you to implement the solution within 2 weeks. Your database is 200GB in size and you have a 20Mbps Internet connection. How would you do this while minimizing costs? Your company currently has a 2-tier web application running in an on-premises data center. You have experienced several infrastructure failures in the past two months resulting in significant financial losses. Your CIO is strongly agreeing to move the application to AWS. While working on achieving buy-in from the other company executives, he asks you to develop a disaster recovery plan to help improve business continuity in the short term. He specifies a target Recovery Time Objective (RTO) of 4 hours and a Recovery Point Objective (RPO) of 1 hour or less. He also asks you to implement the solution within 2 weeks. Your database is 200GB in size and you have a 20Mbps Internet connection. How would you do this while minimizing costs?

1 Mark(s)

Create an EBS backed private AMI which includes a fresh install of your application. Setup a script in your data center to backup the local database every 1 hour and to encrypt and copy the resulting file to an S3 bucket using multi-part upload.
Install your application on a compute-optimized EC2 instance capable of supporting the application’s average load synchronously replicate transactions from your on-premises database to a database instance in AWS across a secure Direct Connect connection.
Deploy your application on EC2 instances within an Auto Scaling group across multiple availability zones asynchronously replicate transactions from your on-premises database to a database instance in AWS across a secure VPN connection.
Create an EBS backed private AMI that includes a fresh install of your application. Develop a Cloud Formation template which includes your Mil and the required EC2. Auto-Scaling and ELB resources to support deploying the application across Availability Zones. Asynchronously replicate transactions from your on-premises database to a database instance in AWS across a secure VPN connection.

Is MX Records supported with Route 53? Is MX Records supported with Route 53?

1 Mark(s)

Supported.
It supports CNAME records, but not MX records.
Not supported.
Only Primary MX records. Secondary MX records are not supported.

In the context of MySQL, version numbers are organized as MySQL version = X.Y.Z. What does X.Y means here? In the context of MySQL, version numbers are organized as MySQL version = X.Y.Z. What does X.Y means here?

1 Mark(s)

release level
minor version
version number
major version

Can we own a direct connection to Amazon Web Services (AWS)? Can we own a direct connection to Amazon Web Services (AWS)?

1 Mark(s)

You can create an encrypted tunnel to VPC, but you do not own the connection.
Yes, it’s called Amazon Dedicated Connection.
No, AWS only allows access from the public Internet.
Yes, it is called AWS Direct Connect.

You can use …………. & ……………. to help secure the instances in your VPC. You can use …………. & ……………. to help secure the instances in your VPC.

1 Mark(s)

security groups & multi-factor authentication
security groups & biometric authentication
security groups & 2-Factor authentication
security groups & network ACLs

Is there a limitation to the number of groups you can have? Is there a limitation to the number of groups you can have?

1 Mark(s)

Yes, for all users except root.
No.
Yes, unless special permission granted.
Yes, for all users.

Does Amazon RDS for SQL Server currently support importing data into the msdb database? Does Amazon RDS for SQL Server currently support importing data into the msdb database?

1 Mark(s)

Not Supported
Supported

Can we decrease the storage size of a DB Instance? Can we decrease the storage size of a DB Instance?

1 Mark(s)

Depends on the RDMS used
Yes
No

An International company has deployed a multi-tier web application that relies on DynamoDB in a single region. For regulatory reasons, they need a disaster recovery capability in a separate region with a Recovery Time Objective of 2 hours and a Recovery Point Objective of 24 hours. They should synchronize their data on a regular basis and be able to provision the web application rapidly using CloudFormation. The objective is to minimize changes to the existing web application, control the throughput of DynamoDB used for the synchronization of data and synchronize only the modified elements. Which design would you choose to meet these requirements? An International company has deployed a multi-tier web application that relies on DynamoDB in a single region. For regulatory reasons, they need a disaster recovery capability in a separate region with a Recovery Time Objective of 2 hours and a Recovery Point Objective of 24 hours. They should synchronize their data on a regular basis and be able to provision the web application rapidly using CloudFormation. The objective is to minimize changes to the existing web application, control the throughput of DynamoDB used for the synchronization of data and synchronize only the modified elements. Which design would you choose to meet these requirements?

1 Mark(s)

Use AWS data Pipeline to schedule a DynamoDB cross region copy once a day. Create a Lastupdated’ attribute in your DynamoDB table that would represent the timestamp of the last update and use it as a filter.
Use EMR and write a custom script to retrieve data from DynamoDB in the current region using a SCAN operation and push it to DynamoDB in the second region.
Use AWS data Pipeline to schedule an export of the DynamoDB table to S3 in the current region once a day then schedule another task immediately after it that will import data from S3 to DynamoDB in the other region.
Send also each Ante into an SQS queue in me second region; use an auto-scaling group behind the SQS queue to replay the write in the second region.

Amazon EC2 has no Amazon Resource Names (ARNs) because you cannot specify a particular Amazon EC2 resource in an IAM policy. Amazon EC2 has no Amazon Resource Names (ARNs) because you cannot specify a particular Amazon EC2 resource in an IAM policy.

1 Mark(s)

Correct
InCorrect

The DNS name that can only be resolved within Amazon EC2 is: The DNS name that can only be resolved within Amazon EC2 is:

1 Mark(s)

Internal DNS name
External DNS name
Global DNS name
Private DNS name

Because of the extensibility limitations of striped storage attached to Windows Server, Amazon RDS does not currently support increasing storage on a …………….. DB Instance. Because of the extensibility limitations of striped storage attached to Windows Server, Amazon RDS does not currently support increasing storage on a …………….. DB Instance.

1 Mark(s)

SQL Server
MySQL
Oracle

We are implementing AWS Direct Connect. We intend to use AWS public service end points such as Amazon S3 across the AWS Direct Connect link. We want other Internet traffic to use our existing link to an Internet Service Provider. What is the correct way to configure AWS Direct connect for access to services such as Amazon S3? We are implementing AWS Direct Connect. We intend to use AWS public service end points such as Amazon S3 across the AWS Direct Connect link. We want other Internet traffic to use our existing link to an Internet Service Provider. What is the correct way to configure AWS Direct connect for access to services such as Amazon S3?

1 Mark(s)

Configure a public Interface on your AWS Direct Connect link. Configure a static route via your AWS Direct Connect link that points to Amazon S3. Advertise a default route to AWS using BGP.
Create a private interface on your AWS Direct Connect link. Configure a static route via your AWS Direct connect link that points to Amazon S3. Configure specific routes to your network in your VPC.
Create a public interface on your AWS Direct Connect link. Redistribute BGP routes into your existing routing infrastructure advertise specific routes for your network to AWS.
Create a private interface on your AWS Direct connect link. Redistribute BGP routes into your existing routing infrastructure and advertise a default route to AWS.

You would like to create a mirror image of your production environment in another region for disaster recovery purposes. Which of the following AWS resources do not need to be recreated in the second region? You would like to create a mirror image of your production environment in another region for disaster recovery purposes. Which of the following AWS resources do not need to be recreated in the second region?

1 Mark(s)

Route 53 Record Sets
Elastic IP Addresses (EIP)
EC2 Key Pairs
Launch configurations
Security Groups

………. is a durable, block-level storage volume that you can attach to a single, running Amazon EC2 instance. ………. is a durable, block-level storage volume that you can attach to a single, running Amazon EC2 instance.

1 Mark(s)

Amazon S3
Amazon EBS
None of these
All of these

Can we own a direct connection to Amazon Web Services (AWS)? Can we own a direct connection to Amazon Web Services (AWS)?

1 Mark(s)

You can create an encrypted tunnel to VPC, but you do not own the connection.
Yes, it’s called Amazon Dedicated Connection.
No, AWS only allows access from the public Internet.
Yes, it is called AWS Direct Connect.

The maximum key length of a tag is: The maximum key length of a tag is:

1 Mark(s)

512 Unicode characters
64 Unicode characters
256 Unicode characters
128 Unicode characters

You have deployed a web application targeting a global audience across multiple AWS Regions under the domain name.example.com. You decide to use Route 53 Latency-Based Routing to serve web requests to users from the region closest to the user. To provide business continuity in the event of server downtime, you configure weighted record sets associated with two web servers in separate Availability Zones per region. Running a DR test you notice that when you disable all web servers in one of the regions Route 53 does not automatically direct all users to the other region. What could be happening? You have deployed a web application targeting a global audience across multiple AWS Regions under the domain name.example.com. You decide to use Route 53 Latency-Based Routing to serve web requests to users from the region closest to the user. To provide business continuity in the event of server downtime, you configure weighted record sets associated with two web servers in separate Availability Zones per region. Running a DR test you notice that when you disable all web servers in one of the regions Route 53 does not automatically direct all users to the other region. What could be happening?

1 Mark(s)

Latency resource record sets cannot be used in combination with weighted resource record sets.
You did not setup an http health check for one or more of the weighted resource record sets associated with the disabled web servers.
The value of the weight associated with the latency alias resource record set in the region with the disabled servers is higher than the weight for the other region.
One of the two working web servers in the other region did not pass its HTTP health check.

Amazon ELB stand for: Amazon ELB stand for:

1 Mark(s)

Elastic Linux Box.
Encrypted Linux Box.
Encrypted Load Balancing.
Elastic Load Balancing.

Your company previously configured a heavily used, dynamically routed VPN connection between your on-premises data center & AWS. You recently provisioned a DirectConnect connection & would like to start using the new connection. After configuring DirectConnect settings in the AWS Console, which of the following options would provide the most seamless transition for your users? Your company previously configured a heavily used, dynamically routed VPN connection between your on-premises data center & AWS. You recently provisioned a DirectConnect connection & would like to start using the new connection. After configuring DirectConnect settings in the AWS Console, which of the following options would provide the most seamless transition for your users?

1 Mark(s)

Delete your existing VPN connection to avoid routing loops, configure your DirectConnect router with the appropriate settings and verify network traffic is leveraging DirectConnect.
Configure your DirectConnect router with a higher 8GP priority man your VPN router, verify network traffic is leveraging Directconnect and then delete your existing VPN connection.
Update your VPC route tables to point to the DirectConnect connection, configure your DirectConnect router with the appropriate settings, verify network traffic is leveraging.
Configure your DirectConnect router, update your VPC route tables to point to the DirectConnect connection, configure your VPN connection with a higher BGP point, and verify network traffic is leveraging the DirectConnect connection.

A web company is looking to implement an external payment service into their highly available application deployed in a VPC. Their application EC2 instances are behind a public facing ELB. Auto scaling is used to add additional instances as traffic increases under normal load, the application runs 2 instances in the Auto Scaling group but at peak it can scale 3x in size. The application instances need to communicate with the payment service over the Internet which requires whitelisting of all public IP addresses used to communicate with it. A maximum of 4 whitelisting IP addresses are allowed at a time and can be added through an API. How should they architect their solution? A web company is looking to implement an external payment service into their highly available application deployed in a VPC. Their application EC2 instances are behind a public facing ELB. Auto scaling is used to add additional instances as traffic increases under normal load, the application runs 2 instances in the Auto Scaling group but at peak it can scale 3x in size. The application instances need to communicate with the payment service over the Internet which requires whitelisting of all public IP addresses used to communicate with it. A maximum of 4 whitelisting IP addresses are allowed at a time and can be added through an API. How should they architect their solution?

1 Mark(s)

Route payment requests through two NAT instances setup for High Availability and whitelist the Elastic IP addresses attached to the NAT instances.
Whitelist the VPC Internet Gateway Public IP and route payment requests through the Internet Gateway.
Whitelist the ELB IP addresses and route payment requests from the Application servers through the ELB.
Automatically assign public IP addresses to the application instances in the Auto Scaling group and run a script on boot that adds each instances public IP address to the payment validation whitelist API.

You are designing the network infrastructure for an application server in Amazon VPC. Users will access all the application instances from the Internet as well as from an on-premises network. The on-premises network is connected to your VPC over an AWS Direct Connect link. How would you design routing to meet the above requirements? You are designing the network infrastructure for an application server in Amazon VPC. Users will access all the application instances from the Internet as well as from an on-premises network. The on-premises network is connected to your VPC over an AWS Direct Connect link. How would you design routing to meet the above requirements?

1 Mark(s)

Configure a single routing Table with a default route via the Internet gateway. Propagate a default route via BGP on the AWS Direct Connect customer router. Associate the routing table with all VPC subnets.
Configure a single routing table with a default route via the internet gateway. Propagate specific routes for the on-premises networks via BGP on the AWS Direct Connect customer router. Associate the routing table with all VPC subnets.
Configure a single routing table with two default routes: one to the internet via an Internet gateway the other to the on-premises network via the VPN gateway use this routing table across all subnets in your VPC.
Configure two routing tables one that has a default route via the Internet gateway and another that has a default route via the VPN gateway. Associate both routing tables with each VPC subnet.

Groups cannot ………… Groups cannot …………

1 Mark(s)

be nested more than 3 levels.
be nested at all.
be nested more than 4 levels.
be nested more than 2 levels.

Can we initiate a "forced failover" for MySQL Multi-AZ DB Instance deployment? Can we initiate a "forced failover" for MySQL Multi-AZ DB Instance deployment?

1 Mark(s)

Only in certain regions
Only in VPC
Yes
No

Amazon S3 does not automatically give a user who creates ……….. permission to perform other actions on that bucket or object. Amazon S3 does not automatically give a user who creates ……….. permission to perform other actions on that bucket or object.

1 Mark(s)

a file
a bucket or object
a bucket or file
a object or file

If we want my instance to run on a single-tenant hardware, which value do we have to set the instance’s tenancy attribute to? If we want my instance to run on a single-tenant hardware, which value do we have to set the instance’s tenancy attribute to?

1 Mark(s)

Dedicated
Isolated
One
Reserved

Is the SQL Server Audit feature supported in the Amazon RDS SQL Server engine? Is the SQL Server Audit feature supported in the Amazon RDS SQL Server engine?

1 Mark(s)

Not supported
Supported

Is it possible to access the EBS snapshots? Is it possible to access the EBS snapshots?

1 Mark(s)

Yes, through the Amazon S3 APIs.
Yes, through the Amazon EC2 APIs.
No, EBS snapshots cannot be accessed; they can only be used to create a new EBS volume.
EBS doesn’t provide snapshots.

If your DB instance runs out of storage space or file system resources, the status will change to ……………… & your DB Instance will no longer be available. If your DB instance runs out of storage space or file system resources, the status will change to ……………… & your DB Instance will no longer be available.

1 Mark(s)

storage-overflow
storage-full
storage-exceed
storage-overage

Please select the most correct answer regarding the persistence of the Amazon Instance Store. Please select the most correct answer regarding the persistence of the Amazon Instance Store.

1 Mark(s)

The data on an instance store volume persists only during the life of the associated Amazon EC2 instance.
The data on an instance store volume is lost when the security group rule of the associated instance is changed.
The data on an instance store volume persists even after associated Amazon EC2 instance is deleted.

A group can contain many users. Can a user belong to multiple groups? A group can contain many users. Can a user belong to multiple groups?

1 Mark(s)

Yes, always
No
Yes, but only if they are using two factor authentication
Yes, but only in VPC

Security groups act like a firewall at the instance level, whereas ………………. are an additional layer of security that act at the subnet level. Security groups act like a firewall at the instance level, whereas ………………. are an additional layer of security that act at the subnet level.

1 Mark(s)

DB Security Groups
VPC Security Groups
Network ACLs

Multi-AZ deployment is supported for SQL Server DB Instances. Multi-AZ deployment is supported for SQL Server DB Instances.

1 Mark(s)

COrrect
Incorrect

Is there a method in the IAM system that can allow or reject access to a specific instance? Is there a method in the IAM system that can allow or reject access to a specific instance?

1 Mark(s)

Only for VPC based instances.
Yes.
No.

Can the string value of ‘Key’ be prefixed with :aws? Can the string value of ‘Key’ be prefixed with :aws?

1 Mark(s)

No
Only for EC2 not S3
Yes
Only for S3 not EC2

Is the encryption of connections between my application & my DB Instance using SSL for the MySQL server engines available? Is the encryption of connections between my application & my DB Instance using SSL for the MySQL server engines available?

1 Mark(s)

Yes
Only in VPC
Only in certain regions
No

It is advised that you watch the Amazon CloudWatch ……………….. metric (available via the AWS Management Console or Amazon Cloud Watch APIs) carefully & recreate the Read Replica should it fall behind due to replication errors. It is advised that you watch the Amazon CloudWatch ……………….. metric (available via the AWS Management Console or Amazon Cloud Watch APIs) carefully & recreate the Read Replica should it fall behind due to replication errors.

1 Mark(s)

Write Lag
Read Replica
Replica Lag
Single Replica

By default what are ENIs that are automatically created & attached to instances using the EC2 console set to do when the attached instance terminates? By default what are ENIs that are automatically created & attached to instances using the EC2 console set to do when the attached instance terminates?

1 Mark(s)

Remain as is
Terminate
Hibernate
Pause

Common points of failures like generators & cooling equipment are shared across Availability Zones. Common points of failures like generators & cooling equipment are shared across Availability Zones.

1 Mark(s)

Correct
Incorrect