Amazon AWS – SA Exam Back to Exams Page. 1. There are six instances, three for production and three for testing. However, the project manager wants a particular group of IAM users to only access the test instances but not the production ones. How he can achieve this? Create an IAM policy with a condition that allows access to only small instances Launch the test and production instances in separate regions and allow region-wide access to the group Define the IAM policy that allows access based on the instance ID Define the tags on the test and production servers and add a condition to the IAM policy that allows access to specific tagsQuestion 1 of 50 2. There is an ELB with Sticky session enabled. The user wants to manage a cookie by an application, but not by ELB. What will happen when the server instance, which is bound to a cookie, crashes? ELB will throw an error due to cookie unavailability The session will be sticky, and ELB will route requests to another server as ELB keeps replicating the Cookie The response will have a cookie, but stickiness will be deleted The session will not be sticky until a new cookie is insertedQuestion 2 of 50 3. We have configured ELB with SSL using a security policy for secure negotiation between the client and load balancer. Which of the following security policies is supported by ELB? All the other options Default Security Policy Dynamic Security Policy Predefined Security PolicyQuestion 3 of 50 4. Identify the statement that is not true with respect to the limitations of IAM. One IAM user can be a part of a maximum of five groups One AWS account can have 250 roles The organization can create 100 groups per AWS account One AWS account can have a maximum of 5000 IAM usersQuestion 4 of 50 5. There is an EBS backed EC2 instance in the eu-west-1 region. A team member stopped that instance and started it again after 60 days. However, AWS throws the below error:‘InsufficientInstanceCapacity’What is the issue? AWS does not have sufficient capacity in that availability zone AWS zone mapping is changed for that user account There is some issue with the host capacity on which the instance is launched The user account has reached the maximum EC2 instance limitQuestion 5 of 50 6. There is a S3 bucket encrypted by sys admin. Identify the best statement that describes the S3 encryption functionality. The user must send an AES-128 encrypted key The user can use the AWS console, SDK, and APIs to encrypt or decrypt the content for server side encryption with the user supplied key The user can upload his or her own encryption key to the S3 console The server side encryption with the user supplied key works when versioning is enabledQuestion 6 of 50 7. We have enabled termination protection on an EC2 instance and selected the option instance initiated shutdown behavior to terminate. What will happen to the instance If we shut it down? It will not allow the user to shutdown the instance from the OS The OS will shut down, but the instance will not be terminated due to protection It will terminate the instance It is not possible to set the termination protection when an instance initiated shutdown is set to TerminateQuestion 7 of 50 8. We have created an EBS volume of 10 GB and attached it to a running instance. We are now accessing it for the first time. Which of the below options is true for first time EBS access? If the EBS is mounted, it will ask the user to create a file system The volume will show a loss of the IOPS performance The volume will show a size of 8 GB The volume will be blankQuestion 8 of 50 9. We have created a security group for VPC in public subnet. Which statements are true in the creation of the security group? It will have all the outbound traffic by default It can connect to the AWS services, such as S3 and RDS, by default It will, by default, allow traffic to the internet gateway It will have all the inbound traffic by defaultQuestion 9 of 50 10. We have one subnet with CIDR 20.0.0.0/16 in this VPC. Then, the user tries to create another subnet with the same VPC for CIDR 20.0.0.1/24. What is the best statement here? It is not possible to create a subnet with the same CIDR as the VPC The second subnet will be created The VPC will modify the first subnet CIDR automatically to allow the second subnet IP range It will throw a CIDR overlaps errorQuestion 10 of 50 11. A Windows based EC2 instance was created recently, and it has some issues, so we need to check the logs. When we check the instance console output from the AWS console, what will it display? All the event logs since instance boot The Windows instance does not support the console output The last three system events’ log errors The last 10 system event log errorsQuestion 11 of 50 12. In a company, there are multiple IAM users, but all these IAM users should have access to AWS IT resources from an internal network not from an outside network. How can that setup can be achieved? Create an IAM policy with VPC, and allow a secure gateway between the organization and AWS Console Create an IAM policy with the security group, and use that security group for AWS console login Create an IAM policy with a condition that denies access when the IP address range is not from the organization Configure the EC2 instance security group that allows traffic only from the organization’s IP rangeQuestion 12 of 50 13. Harry has three EC2 instances inside the US-East-1a zone. Another user, Jason, launched an EC2 instance in US-East-1a zone. How can the Availability zone be best described here? All George’s and Ray’s instances can communicate over a private IP without any cost George’s and Ray’s instances will be running in the same data center All George’s and Ray’s instances can communicate over a private IP with a minimal cost George’s and Ray’s US-East-1a region can have different availability zonesQuestion 13 of 50 14. There are two EBS backed EC2 instances launched in the US-East-1a region. How can we change the zone of one EC2 instance? Stop one of the instances and change the availability zone The zone can only be modified using the AWS CLI From the AWS EC2 console, select the Actions – > Change zones and specify new zone Create an AMI of the running instance and launch the instance in a separate AZQuestion 14 of 50 15. We have a VPC with a subnet and security group. An EC2 instance has been attached to the subnet with a public IP. The internet gateway is also there, but the user is still unable to access the EC2 instance. What is the reason? The internet gateway is not configured with the route table The internet gateway is not configured with the security group The private IP is not present The outbound traffic on the security group is disabledQuestion 15 of 50 16. For Auto Scaling, the minimum capacity is 2, and the desired capacity is 2. However, the user terminated the existing instance with the below command:as-terminate-instance-in-auto-scaling-group –decrement-desired-capacityWhat is the possible outcome? The instance is terminated, and the desired capacity is updated to 1 The instance is terminated, and the desired capacity and minimum size are updated to 1 The instance is terminated, and a new instance is not launched An error is thrownQuestion 16 of 50 17. Define reserved instances in AWS. High-performance RDS instance Virtual machine with provisioned EBS IOPS rate Low cost EC2 instance that could be shut down anytime Upfront fee and lowered hourly rate for one or three yearsQuestion 17 of 50 18. For an application, Auto Scaling has been implemented. The application owner wants to understand the Auto Scaling health check process. If the instance is unhealthy, Auto Scaling launches an instance and terminates the unhealthy instance. What is the correct order of execution? Auto Scaling launches and terminates the instances simultaneously Auto Scaling launches a new instance first and then terminates the unhealthy instance Auto Scaling terminates the instance first and then launches a new instance Auto Scaling performs the launch and terminate processes in a random orderQuestion 18 of 50 19. In a project, there are two EBS backed EC2 instances in the US-East-1a region. However, the team member is trying to change the EC2 instance zone without shutdown. Which option best suits this situation? The zone can only be modified using the AWS CLI From the AWS EC2 console, select the Actions – > Change zones and specify the new zone It is not possible to change the zone of an instance after it is launched Stop one of the instances and change the availability zoneQuestion 19 of 50 20. There are three instances configured with ELB. By using which AWS service can we achieve High Availability as well as redundancy with ELB? AWS Mechanical Turk AWS EMR Route 53 Auto ScalingQuestion 20 of 50 21. What happens if the primary RDS instance in MultiAZ deployment fails? RDS data is lost. The adminstrator has to restore it from a snapshot AWS switches the endpoint to a secondary RDS instance. No additional actions from users are needed The software changes settings to use a secondary RDS instance AWS automatically recovers the RDS instance from a snapshotQuestion 21 of 50 22. A team member created an Auto Scaling group using CLI. How do we enable CloudWatch detailed monitoring for that group? Enable detail monitoring from the AWS console By default, detailed monitoring is enabled for Auto Scaling Auto Scaling does not support detailed monitoring When the user sets an alarm on the Auto Scaling group, it automatically enables detail monitoringQuestion 22 of 50 23. Starry shared an EC2 AMI created in eu-west-1 region from her account to Stephen. After that, Starry copied the same AMI to eu-central-1 region. Can Stephen access the AMI in eu-central-1 region? No, a copy AMI does not copy the permission It is not possible to share the AMI with a specific account Yes, since a copy AMI copies all the permissions attached to the AMI Yes, since a copy AMI copies all private account sharing permissionsQuestion 23 of 50 24. provides a relational database in the cloud that is easy to set up, operate, and scale. Relational Database Service MySQL Cloud Relational Database Cloud DynamoDB Question 24 of 50 25. For a project, there is an EC2 instance launched in a subnet within VPC. However, team member forgot to provide an IP address for the instance. Which statement best suits this situation? The instance will always have a public DNS attached to the instance by default The instance will never launch if the public IP is not assigned The user can directly attach an elastic IP to the instance The user would need to create an internet gateway and then attach an elastic IP to the instance to connect from the internetQuestion 25 of 50 26. Is it possible to change the EC2 instance type? Yes, while it’s in a stop state Yes, anytime Yes, but you first need to create an AMI No, you have only what you started withQuestion 26 of 50 27. To understand the sticky session algorithm of ELB, place the steps in the right order, assuming the cookie is present.The cookie is found in the requestELB inserts the cookie in the responseELB chooses the instance based on the load balancing algorithmCheck the cookie in the service requestThe cookie is found in the request Check the cookie in the service request ELB inserts the cookie in the response ELB chooses the instance based on the load balancing algorithm Question 27 of 50 28. Identify the process that is not performed by Auto Scaling. Schedule Actions Reboot Instance Replace Unhealthy Availability Zone BalancingQuestion 28 of 50 29. We have launched an EC2 Windows instance from an instance store backed AMI. How can we convert the AMI to an EBS backed AMI? Attach an EBS volume to the instance and unbundle all the AMI bundled data inside the EBS It is not possible to convert an instance store backed AMI to an EBS backed AMI Attach an EBS volume and use the copy command to copy all the ephermal content to the EBS Volume A Windows based instance store backed AMI cannot be converted to an EBS backed AMIQuestion 29 of 50 30. We have an ELB with an HTTPS listener, but there is not any security policy that can help to negotiate SSL between the client and ELB. In this situation what will ELB do? By defaul,t ELB will select the latest version of the policy ELB creation will fail without a security policy By default, ELB will select the first version of the security policy It is not required to have a security policy since SSL is already installedQuestion 30 of 50 31. For a project there are multiple EC2 instances for production and testing. How can we get separate costs for the production and testing? The user should use Cost Distribution Metadata and AWS detailed billing The user should download the EC2 services activity report because it has the instance ID wise data It is not possible to get the AWS cost usage data of single region instances separately The user should use Cost Allocation Tags and AWS billing reportsQuestion 31 of 50 32. For a project, the team lead has created an Auto Scaling group. However, the group failed to launch a single instance for more than 24 hours. What is the reason behind this? Auto Scaling will start an instance in a separate region Auto Scaling will keep trying to launch the instance for 72 hours Auto Scaling will suspend the scaling process The Auto Scaling group will be terminated automaticallyQuestion 32 of 50 33. We have an EC2 instance launched in a public subnet with VPC. Now, we need to delete the subnet. What will be the outcome of this action? It will delete the subnet as well as terminate the instances. It will delete the subnet and make the EC2 instance a part of the default subnet. The subnet can never be deleted independently; the user has to delete the VPC first. It will not allow the user to delete the subnet until the instances are terminated.Question 33 of 50 34. is the Amazon Web Service that provides scalable storage in the cloud. Cloud Storage Service Amazon Simple Storage Simple Storage Service Super Storage Service Question 34 of 50 35. There is a VPC with a public subnet. We have terminated all the instances that are part of the subnet. Which statement best suits this situation? The user cannot delete the VPC since the subnet is not deleted When the user launches a new instance, the instance cannot use the same subnet All network interfaces attached to the instances will be deleted The subnet with which the instances were launched will be deletedQuestion 35 of 50 36. There are two subnets in VPC: One is public and the other is private. We have to install some applications for the instances in the private subnet. How can we connect instances in the private subnet to the internet? Use the internet gateway with a private IP Allow outbound traffic in the security group for port 80 to allow internet updates The private subnet can never connect to the internet Use NAT with an elastic IPQuestion 36 of 50 37. Users are unable to connect running EC2 instance using SSH. The error was ‘connection time out error.’ Which of the below mentioned options is not a possible reason for rejection? The private key used to launch the instance is not correct The security group is not configured properly The instance CPU is heavily loaded The access key to connect to the instance is wrongQuestion 37 of 50 38. There is an application hosted on the EC2 instance, and it is running behind ELB. The application owner wants to ensure that the end user request will always go to the EC2 instance where the user session has been created. How can we achieve this? Enable ELB cookie setup Enable ELB connection draining Enable ELB sticky session Enable ELB cross zone load balancingQuestion 38 of 50 39. There is an Auto Scaling with ELB. However, because of some manual error, one of the instances was rebooted and Auto Scaling health check failed. In this situation, Auto Scaling tries to start new a instance and terminate the old instance. How can we stop the termination of the instance? Manually add that instance to the Auto Scaling group after reboot to avoid replacement It is not possible to change the status once it is marked for replacement Update the Auto Scaling group to ignore the instance reboot event Change the health of the instance to healthy using the Auto Scaling commandsQuestion 39 of 50 40. Identify the options that are not advantages of Multi AZ feature of RDS. When the user changes the DB instance’s server type Availability zone outage A manual failover of the DB instance using Reboot with failover option Region outageQuestion 40 of 50 41. There is an EBS volume. We need to backup the volume and also implement security for that snapshot.In which way can the user create data encryption with a snapshot? While creating a snapshot, select the snapshot with encryption By default, the snapshot is encrypted by AWS Use encrypted EBS volumes so that the snapshot will be encrypted by AWS Enable server side encryption for the snapshot using S3Question 41 of 50 42. For a project, five hours uptime or running time of the instance is sufficient. How can we reduce the cost of the instance? The user should not use RI; instead, only go with on-demand pricing The user should use the AWS medium utilized RI The user should use the AWS high utilized RI The user should use the AWS low utilized RIQuestion 42 of 50 43. We have an ELB with Auto Scaling. Which of the below options from ELB helps the user to stop sending new requests traffic from the load balancer to the EC2 instance when the instance is being deregistered while continuing in-flight requests? ELB connection draining ELB deregistration check ELB auto registration Off ELB sticky sessionQuestion 43 of 50 44. An EBS backed EC2 instance is currently running. Identify the difference while performing the restart or stop/start options on that instance. Every restart or start/stop will be charged as a separate hour Every restart is charged by AWS as a separate hour, while multiple start/stop actions during a single hour will be counted as a single hour A restart will not be charged for an extra hour, while every stop/start will be charged as a separate hour Restart will be charged extra only once, while every stop/start will be charged as a separate hourQuestion 44 of 50 45. An EC2 instance launched from an instance store backed AMI. If we restart the instance, what will happen to the internal data? All the data will be erased, but the ephermal storage will stay connected The data is preserved It is not possible to restart an instance launched from an instance store backed AMI All data will be erased, and the ephermal storage is releasedQuestion 45 of 50 46. We have a S3 bucket with name ‘cloudtest’ created by root owner and given permission to everyone to upload the objects. The root owner wants to manage the permission of those objects by the person who uploaded. Which is the easiest way to achieve this? The root account owner should create the bucket policy that allows the other account owners to set the object policy of that bucket The root account should use ACL with the bucket to allow everyone to upload the object The root account owner should create a bucket policy that allows the IAM users to upload the object The root account should create the IAM users and provide them with the permission to upload content to the bucketQuestion 46 of 50 47. For a project purpose, the user is trying to launch an EC2 instance, but those instances are terminated as soon as they launch. What is the reason? The snapshot is corrupt The user account has reached the maximum volume limit The user account has reached the maximum EC2 instance limit The AMI is missing. It is requiredQuestion 47 of 50 48. A team member is trying to connect to a running EC2 instance using SSH, but he gets an ‘Unprotected Private Key File error’. What is the reason for this error? The user has provided the wrong user name for the OS login The ppk file used for SSH is read only The public key file has the wrong permission The private key file has the wrong file permissionQuestion 48 of 50 49. There is one application that should be scaled up at 6 am and scale down by 7 pm using Auto Scaling. How can the user implement this? The user should set up scheduled actions to scale up or down at a specific time The user should set up a batch process that launches the EC2 instance at a specific time The user should increase the desired capacity at 8 AM and decrease it by 7 PM manually The user should set up the scaling policy to scale up and down based on the CloudWatch alarmsQuestion 49 of 50 50. For a project purpose, an EC2 instance has been launched. However, because of some issues, the instance has been terminated. Where we can find the reason for termination? It is not possible to find the details after the instance is terminated The user can get information from the AWS console by checking the instance description under the Instance Status Change reason label The user can get information from the AWS console by checking the instance description under the State transition reason label The user can get information from the AWS console by checking the instance description under the Instance Termination reason labelQuestion 50 of 50 Loading…