Amazon AWS – SA Exam

Back to Exams Page.

1. There are six instances, three for production and three for testing. However, the project manager wants a particular group of IAM users to only access the test instances but not the production ones. How he can achieve this?

Create an IAM policy with a condition that allows access to only small instances

Launch the test and production instances in separate regions and allow region-wide access to the group

Define the IAM policy that allows access based on the instance ID

Define the tags on the test and production servers and add a condition to the IAM policy that allows access to specific tags

Question 1 of 50

2. There is an ELB with Sticky session enabled. The user wants to manage a cookie by an application, but not by ELB. What will happen when the server instance, which is bound to a cookie, crashes?

ELB will throw an error due to cookie unavailability

The session will be sticky, and ELB will route requests to another server as ELB keeps replicating the Cookie

The response will have a cookie, but stickiness will be deleted

The session will not be sticky until a new cookie is inserted

Question 2 of 50

3. We have configured ELB with SSL using a security policy for secure negotiation between the client and load balancer. Which of the following security policies is supported by ELB?

All the other options

Default Security Policy

Dynamic Security Policy

Predefined Security Policy

Question 3 of 50

4. Identify the statement that is not true with respect to the limitations of IAM.

One IAM user can be a part of a maximum of five groups

One AWS account can have 250 roles

The organization can create 100 groups per AWS account

One AWS account can have a maximum of 5000 IAM users

Question 4 of 50

5. There is an EBS backed EC2 instance in the eu-west-1 region. A team member stopped that instance and started it again after 60 days. However, AWS throws the below error:

‘InsufficientInstanceCapacity’

What is the issue?

AWS does not have sufficient capacity in that availability zone

AWS zone mapping is changed for that user account

There is some issue with the host capacity on which the instance is launched

The user account has reached the maximum EC2 instance limit

Question 5 of 50

6. There is a S3 bucket encrypted by sys admin. Identify the best statement that describes the S3 encryption functionality.

The user must send an AES-128 encrypted key

The user can use the AWS console, SDK, and APIs to encrypt or decrypt the content for server side encryption with the user supplied key

The user can upload his or her own encryption key to the S3 console

The server side encryption with the user supplied key works when versioning is enabled

Question 6 of 50

7. We have enabled termination protection on an EC2 instance and selected the option instance initiated shutdown behavior to terminate. What will happen to the instance If we shut it down?

It will not allow the user to shutdown the instance from the OS

The OS will shut down, but the instance will not be terminated due to protection

It will terminate the instance

It is not possible to set the termination protection when an instance initiated shutdown is set to Terminate

Question 7 of 50

8. We have created an EBS volume of 10 GB and attached it to a running instance. We are now accessing it for the first time. Which of the below options is true for first time EBS access?

If the EBS is mounted, it will ask the user to create a file system

The volume will show a loss of the IOPS performance

The volume will show a size of 8 GB

The volume will be blank

Question 8 of 50

9. We have created a security group for VPC in public subnet. Which statements are true in the creation of the security group?

It will have all the outbound traffic by default

It can connect to the AWS services, such as S3 and RDS, by default

It will, by default, allow traffic to the internet gateway

It will have all the inbound traffic by default

Question 9 of 50

10. We have one subnet with CIDR 20.0.0.0/16 in this VPC. Then, the user tries to create another subnet with the same VPC for CIDR 20.0.0.1/24. What is the best statement here?

It is not possible to create a subnet with the same CIDR as the VPC

The second subnet will be created

The VPC will modify the first subnet CIDR automatically to allow the second subnet IP range

It will throw a CIDR overlaps error

Question 10 of 50

11. A Windows based EC2 instance was created recently, and it has some issues, so we need to check the logs. When we check the instance console output from the AWS console, what will it display?

All the event logs since instance boot

The Windows instance does not support the console output

The last three system events’ log errors

The last 10 system event log errors

Question 11 of 50

12. In a company, there are multiple IAM users, but all these IAM users should have access to AWS IT resources from an internal network not from an outside network. How can that setup can be achieved?

Create an IAM policy with VPC, and allow a secure gateway between the organization and AWS Console

Create an IAM policy with the security group, and use that security group for AWS console login

Create an IAM policy with a condition that denies access when the IP address range is not from the organization

Configure the EC2 instance security group that allows traffic only from the organization’s IP range

Question 12 of 50

13. Harry has three EC2 instances inside the US-East-1a zone. Another user, Jason, launched an EC2 instance in US-East-1a zone. How can the Availability zone be best described here?

All George’s and Ray’s instances can communicate over a private IP without any cost

George’s and Ray’s instances will be running in the same data center

All George’s and Ray’s instances can communicate over a private IP with a minimal cost

George’s and Ray’s US-East-1a region can have different availability zones

Question 13 of 50

14. There are two EBS backed EC2 instances launched in the US-East-1a region. How can we change the zone of one EC2 instance?

Stop one of the instances and change the availability zone

The zone can only be modified using the AWS CLI

From the AWS EC2 console, select the Actions – > Change zones and specify new zone

Create an AMI of the running instance and launch the instance in a separate AZ

Question 14 of 50

15. We have a VPC with a subnet and security group. An EC2 instance has been attached to the subnet with a public IP. The internet gateway is also there, but the user is still unable to access the EC2 instance. What is the reason?

The internet gateway is not configured with the route table

The internet gateway is not configured with the security group

The private IP is not present

The outbound traffic on the security group is disabled

Question 15 of 50

16. For Auto Scaling, the minimum capacity is 2, and the desired capacity is 2. However, the user terminated the existing instance with the below command:

as-terminate-instance-in-auto-scaling-group –decrement-desired-capacity

What is the possible outcome?

The instance is terminated, and the desired capacity is updated to 1

The instance is terminated, and the desired capacity and minimum size are updated to 1

The instance is terminated, and a new instance is not launched

An error is thrown

Question 16 of 50

17. Define reserved instances in AWS.

High-performance RDS instance

Virtual machine with provisioned EBS IOPS rate

Low cost EC2 instance that could be shut down anytime

Upfront fee and lowered hourly rate for one or three years

Question 17 of 50

18. For an application, Auto Scaling has been implemented. The application owner wants to understand the Auto Scaling health check process. If the instance is unhealthy, Auto Scaling launches an instance and terminates the unhealthy instance. What is the correct order of execution?

Auto Scaling launches and terminates the instances simultaneously

Auto Scaling launches a new instance first and then terminates the unhealthy instance

Auto Scaling terminates the instance first and then launches a new instance

Auto Scaling performs the launch and terminate processes in a random order

Question 18 of 50

19. In a project, there are two EBS backed EC2 instances in the US-East-1a region. However, the team member is trying to change the EC2 instance zone without shutdown. Which option best suits this situation?

The zone can only be modified using the AWS CLI

From the AWS EC2 console, select the Actions – > Change zones and specify the new zone

It is not possible to change the zone of an instance after it is launched

Stop one of the instances and change the availability zone

Question 19 of 50

20. There are three instances configured with ELB. By using which AWS service can we achieve High Availability as well as redundancy with ELB?

AWS Mechanical Turk

AWS EMR

Route 53

Auto Scaling

Question 20 of 50

21. What happens if the primary RDS instance in MultiAZ deployment fails?

RDS data is lost. The adminstrator has to restore it from a snapshot

AWS switches the endpoint to a secondary RDS instance. No additional actions from users are needed

The software changes settings to use a secondary RDS instance

AWS automatically recovers the RDS instance from a snapshot

Question 21 of 50

22. A team member created an Auto Scaling group using CLI. How do we enable CloudWatch detailed monitoring for that group?

Enable detail monitoring from the AWS console

By default, detailed monitoring is enabled for Auto Scaling

Auto Scaling does not support detailed monitoring

When the user sets an alarm on the Auto Scaling group, it automatically enables detail monitoring

Question 22 of 50

23. Starry shared an EC2 AMI created in eu-west-1 region from her account to Stephen. After that, Starry copied the same AMI to eu-central-1 region. Can Stephen access the AMI in eu-central-1 region?

No, a copy AMI does not copy the permission

It is not possible to share the AMI with a specific account

Yes, since a copy AMI copies all the permissions attached to the AMI

Yes, since a copy AMI copies all private account sharing permissions

Question 23 of 50

24. provides a relational database in the cloud that is easy to set up, operate, and scale.

Relational Database Service
MySQL Cloud
Relational Database Cloud
DynamoDB

Question 24 of 50

25. For a project, there is an EC2 instance launched in a subnet within VPC. However, team member forgot to provide an IP address for the instance. Which statement best suits this situation?

The instance will always have a public DNS attached to the instance by default

The instance will never launch if the public IP is not assigned

The user can directly attach an elastic IP to the instance

The user would need to create an internet gateway and then attach an elastic IP to the instance to connect from the internet

Question 25 of 50

26. Is it possible to change the EC2 instance type?

Yes, while it’s in a stop state

Yes, anytime

Yes, but you first need to create an AMI

No, you have only what you started with

Question 26 of 50

27. To understand the sticky session algorithm of ELB, place the steps in the right order, assuming the cookie is present.

The cookie is found in the request

ELB inserts the cookie in the response

ELB chooses the instance based on the load balancing algorithm

Check the cookie in the service request

The cookie is found in the request
Check the cookie in the service request
ELB inserts the cookie in the response
ELB chooses the instance based on the load balancing algorithm

Question 27 of 50

28. Identify the process that is not performed by Auto Scaling.

Schedule Actions

Reboot Instance

Replace Unhealthy

Availability Zone Balancing

Question 28 of 50

29. We have launched an EC2 Windows instance from an instance store backed AMI. How can we convert the AMI to an EBS backed AMI?

Attach an EBS volume to the instance and unbundle all the AMI bundled data inside the EBS

It is not possible to convert an instance store backed AMI to an EBS backed AMI

Attach an EBS volume and use the copy command to copy all the ephermal content to the EBS Volume

A Windows based instance store backed AMI cannot be converted to an EBS backed AMI

Question 29 of 50

30. We have an ELB with an HTTPS listener, but there is not any security policy that can help to negotiate SSL between the client and ELB. In this situation what will ELB do?

By defaul,t ELB will select the latest version of the policy

ELB creation will fail without a security policy

By default, ELB will select the first version of the security policy

It is not required to have a security policy since SSL is already installed

Question 30 of 50

31. For a project there are multiple EC2 instances for production and testing. How can we get separate costs for the production and testing?

The user should use Cost Distribution Metadata and AWS detailed billing

The user should download the EC2 services activity report because it has the instance ID wise data

It is not possible to get the AWS cost usage data of single region instances separately

The user should use Cost Allocation Tags and AWS billing reports

Question 31 of 50

32. For a project, the team lead has created an Auto Scaling group. However, the group failed to launch a single instance for more than 24 hours. What is the reason behind this?

Auto Scaling will start an instance in a separate region

Auto Scaling will keep trying to launch the instance for 72 hours

Auto Scaling will suspend the scaling process

The Auto Scaling group will be terminated automatically

Question 32 of 50

33. We have an EC2 instance launched in a public subnet with VPC. Now, we need to delete the subnet. What will be the outcome of this action?

It will delete the subnet as well as terminate the instances.

It will delete the subnet and make the EC2 instance a part of the default subnet.

The subnet can never be deleted independently; the user has to delete the VPC first.

It will not allow the user to delete the subnet until the instances are terminated.

Question 33 of 50

34. is the Amazon Web Service that provides scalable storage in the cloud.

Cloud Storage Service
Amazon Simple Storage
Simple Storage Service
Super Storage Service

Question 34 of 50

35. There is a VPC with a public subnet. We have terminated all the instances that are part of the subnet. Which statement best suits this situation?

The user cannot delete the VPC since the subnet is not deleted

When the user launches a new instance, the instance cannot use the same subnet

All network interfaces attached to the instances will be deleted

The subnet with which the instances were launched will be deleted

Question 35 of 50

36. There are two subnets in VPC: One is public and the other is private. We have to install some applications for the instances in the private subnet. How can we connect instances in the private subnet to the internet?

Use the internet gateway with a private IP

Allow outbound traffic in the security group for port 80 to allow internet updates

The private subnet can never connect to the internet

Use NAT with an elastic IP

Question 36 of 50

37. Users are unable to connect running EC2 instance using SSH. The error was ‘connection time out error.’ Which of the below mentioned options is not a possible reason for rejection?

The private key used to launch the instance is not correct

The security group is not configured properly

The instance CPU is heavily loaded

The access key to connect to the instance is wrong

Question 37 of 50

38. There is an application hosted on the EC2 instance, and it is running behind ELB. The application owner wants to ensure that the end user request will always go to the EC2 instance where the user session has been created. How can we achieve this?

Enable ELB cookie setup

Enable ELB connection draining

Enable ELB sticky session

Enable ELB cross zone load balancing

Question 38 of 50

39. There is an Auto Scaling with ELB. However, because of some manual error, one of the instances was rebooted and Auto Scaling health check failed. In this situation, Auto Scaling tries to start new a instance and terminate the old instance. How can we stop the termination of the instance?

Manually add that instance to the Auto Scaling group after reboot to avoid replacement

It is not possible to change the status once it is marked for replacement

Update the Auto Scaling group to ignore the instance reboot event

Change the health of the instance to healthy using the Auto Scaling commands

Question 39 of 50

40. Identify the options that are not advantages of Multi AZ feature of RDS.

When the user changes the DB instance’s server type

Availability zone outage

A manual failover of the DB instance using Reboot with failover option

Region outage

Question 40 of 50

41. There is an EBS volume. We need to backup the volume and also implement security for that snapshot.

In which way can the user create data encryption with a snapshot?

While creating a snapshot, select the snapshot with encryption

By default, the snapshot is encrypted by AWS

Use encrypted EBS volumes so that the snapshot will be encrypted by AWS

Enable server side encryption for the snapshot using S3

Question 41 of 50

42. For a project, five hours uptime or running time of the instance is sufficient. How can we reduce the cost of the instance?

The user should not use RI; instead, only go with on-demand pricing

The user should use the AWS medium utilized RI

The user should use the AWS high utilized RI

The user should use the AWS low utilized RI

Question 42 of 50

43. We have an ELB with Auto Scaling. Which of the below options from ELB helps the user to stop sending new requests traffic from the load balancer to the EC2 instance when the instance is being deregistered while continuing in-flight requests?

ELB connection draining

ELB deregistration check

ELB auto registration Off

ELB sticky session

Question 43 of 50

44. An EBS backed EC2 instance is currently running. Identify the difference while performing the restart or stop/start options on that instance.

Every restart or start/stop will be charged as a separate hour

Every restart is charged by AWS as a separate hour, while multiple start/stop actions during a single hour will be counted as a single hour

A restart will not be charged for an extra hour, while every stop/start will be charged as a separate hour

Restart will be charged extra only once, while every stop/start will be charged as a separate hour

Question 44 of 50

45. An EC2 instance launched from an instance store backed AMI. If we restart the instance, what will happen to the internal data?

All the data will be erased, but the ephermal storage will stay connected

The data is preserved

It is not possible to restart an instance launched from an instance store backed AMI

All data will be erased, and the ephermal storage is released

Question 45 of 50

46. We have a S3 bucket with name ‘cloudtest’ created by root owner and given permission to everyone to upload the objects. The root owner wants to manage the permission of those objects by the person who uploaded. Which is the easiest way to achieve this?

The root account owner should create the bucket policy that allows the other account owners to set the object policy of that bucket

The root account should use ACL with the bucket to allow everyone to upload the object

The root account owner should create a bucket policy that allows the IAM users to upload the object

The root account should create the IAM users and provide them with the permission to upload content to the bucket

Question 46 of 50

47. For a project purpose, the user is trying to launch an EC2 instance, but those instances are terminated as soon as they launch. What is the reason?

The snapshot is corrupt

The user account has reached the maximum volume limit

The user account has reached the maximum EC2 instance limit

The AMI is missing. It is required

Question 47 of 50

48. A team member is trying to connect to a running EC2 instance using SSH, but he gets an ‘Unprotected Private Key File error’. What is the reason for this error?

The user has provided the wrong user name for the OS login

The ppk file used for SSH is read only

The public key file has the wrong permission

The private key file has the wrong file permission

Question 48 of 50

49. There is one application that should be scaled up at 6 am and scale down by 7 pm using Auto Scaling. How can the user implement this?

The user should set up scheduled actions to scale up or down at a specific time

The user should set up a batch process that launches the EC2 instance at a specific time

The user should increase the desired capacity at 8 AM and decrease it by 7 PM manually

The user should set up the scaling policy to scale up and down based on the CloudWatch alarms

Question 49 of 50

50. For a project purpose, an EC2 instance has been launched. However, because of some issues, the instance has been terminated. Where we can find the reason for termination?

It is not possible to find the details after the instance is terminated

The user can get information from the AWS console by checking the instance description under the Instance Status Change reason label

The user can get information from the AWS console by checking the instance description under the State transition reason label

The user can get information from the AWS console by checking the instance description under the Instance Termination reason label

Question 50 of 50

Amazon AWS – SA Exam

About Us

Most Popular

Members

Newsletter

Secure Site