Amazon-Web-Services SAA-C01 Training Tools 2021

NEW QUESTION 1
Mike is appointed as Cloud Consultant in ABC Inc. It has the following VPCs set-up in the US East Region:
A VPC with CIDR block 10.10.0.0/16, a subnet in that VPC with CIDR block 10.10.1.0/24 A VPC with CIDR block 10.40.0.0/16, a subnet in that VPC with CIDR block 10.40.1.0/24 N. ABC Inc is trying to establish network connection between two subnets, a subnet with CIDR block 10.10.1.0/24 and
another subnet with CIDR block 10.40.1.0/24. Which one of the following solutions should Mike recommend to ABC Inc?

• A. Create 2 Virtual Private Gateways and configure one with each VPC.
• B. Create one EC2 instance in each subnet, assign Elastic IPs to both instances, and configure a set upSite-to-Site VPN connection between both EC2 instances.
• C. Create a VPC Peering connection between both VPCs.
• D. Create 2 Internet Gateways, and attach one to each VP

Answer: C

Explanation:
A VPC peering connection is a networking connection between two VPCs that enables you to route traffic between them using private IP addresses. EC2 instances in either VPC can communicate with each other as if they are within the same network. You can create a VPC peering connection between your own VPCs, or with a VPC in another AWS account within a single region. AWS uses the existing infrastructure of a VPC to create a VPC peering connection; it is neither a gateway nor a VPN connection, and does not rely on a separate piece of physical hardware.

NEW QUESTION 2
While creating the snapshots using the API, which Action should I be using?

• A. MakeSnapShot
• B. FreshSnapshot
• C. DeploySnapshot
• D. CreateSnapshot

Answer: D

Explanation:
http://docs.aws.amazon.com/AWSEC2/latest/CommandLineReference/ApiReference-cmd- CreateSnapshot.html

NEW QUESTION 3
All Amazon EC2 instances are assigned two IP addresses at launch, out of which one can only be reached from within the Amazon EC2 network?

• A. Multiple IP address
• B. Public IP address
• C. Private IP address
• D. Elastic IP Address

Answer: C

NEW QUESTION 4
It is possible to transfer a reserved instance from one Availability Zone to another.

• A. True
• B. False

Answer: A

NEW QUESTION 5
A large real-estate brokerage is exploring the option or adding a cost-effective location based alert to their existing mobile application. The application backend infrastructure currently runs on AWS Users who opt in to this service will receive alerts on their mobile device regarding real-estate otters in proximity to their location. For the alerts to be relevant delivery time needs to be in the low minute count the existing mobile app has 5 million users across the us. Which one of the following architectural suggestions would you make to the customer?

• A. The mobile application will submit its location to a web service endpoint utilizing Elastic Load Balancing and EC2 instances: DynamoDB will be used to store and retrieve relevant otters EC2 instances will communicate with mobile earners/device providers to push alerts back to mobile application.
• B. Use AWS DirectConnect or VPN to establish connectivity with mobile carriers EC2 instances will receive the mobile applications ' location through carrier connection: ROS will be used to store and relevant relevant offers EC2 instances will communicate with mobile carriers to push alerts back to the mobile application
• C. The mobile application will send device location using SQ
• D. EC2 instances will retrieve the relevant others from DynamoDB AWS Mobile Push will be used to send offers to the mobile application
• E. The mobile application will send device location using AWS Mobile Push EC2 instances will retrieve the relevant offers from DynamoDB EC2 instances will communicate with mobilecarriers/device providers to push alerts back to the mobile applicatio

Answer: A

Explanation:
AWS using SQS to store the message from mobile apps,and using AWS Mobile Push to send offers to mobile apps.

NEW QUESTION 6
A block device is a storage device that moves data in sequences. How many types of block devices does Amazon EC2 support?

• A. 2 -instance store volumes and EBS volumes
• B. 5 -General Purpose SSD, Provisioned IOPS SSD, Throughput Optimized HDD, Cold HDD, and Magnetic
• C. 3 -SSD, HDD, and Magnetic
• D. 1 -instance store volumes

Answer: A

Explanation:
A block device is a storage device that moves data in sequences of bytes or bits (blocks). These devices support random access and generally use buffered I/O. Examples include hard disks, CD-ROM drives, and flash drives. A block device can be physically attached to a computer or accessed
remotely as if it were physically attached to the computer. Amazon EC2 supports two types of block devices:
The SSD, HDD and Magnetic choices are all options for the type of storage offered via EBS volumes. They are not types of block devices. http://docs.amazonwebservices.com/AWSEC2/latest/UserGuide/block-device-mappingconcepts. html

NEW QUESTION 7
You have set up an S3 bucket with a number of images in it and you have decided that you want anybody to be able to access these images, even anonymous users. To accomplish this you create a bucket policy. You will need to use an Amazon S3 bucket policy that specifies a ____ in the principal element, which means anyone can access the bucket.

• A. hash tag (#)
• B. anonymous user
• C. wildcard (*)
• D. S3 user

Answer: C

Explanation:
You can use the AWS Policy Generator to create a bucket policy for your Amazon S3 bucket.
You can then use the generated document to set your bucket policy by using the Amazon S3 console, by a number of third-party tools, or via your application.
You use an Amazon S3 bucket policy that specifies a wildcard (*) in the principal element, which means anyone can access the bucket. With anonymous access, anyone (including users without an AWS account) will be able to access the bucket.

NEW QUESTION 8
By default, how many Elastic IP addresses can you have per region for your EC2 instances?

• A. 10
• B. 2
• C. 20
• D. 5

Answer: D

Explanation:
The number of Elastic IP addresses you can have in EC2 per region is 5. http://docs.aws.amazon.com/general/latest/gr/aws_service_limits.html#limits_ec2

NEW QUESTION 9
You can select a specific Availability Zone in which to place your DynamoDB Table

• A. True
• B. False

Answer: B

NEW QUESTION 10
Select the incorrect statement

• A. In Amazon EC2, the private IP addresses only returned to Amazon EC2 when the instance is stopped or terminated
• B. In Amazon VPC, an instance retains its private IP addresses when the instance is stopped.
• C. In Amazon VPC, an instance does NOT retain its private IP addresses when the instance is stopped.
• D. In Amazon EC2, the private IP address is associated exclusively with the instance for its lifetime

Answer: C

Explanation:
A private IP address remains associated with the network interface when the instance is stopped and restarted, and is released when the instance is terminated.

NEW QUESTION 11
A user is storing a large number of objects on AWS S3. The user wants to implement the search functionality among the objects. How can the user achieve this?

• A. Use the indexing feature of S3.
• B. Tag the objects with the metadata to search on that.
• C. Use the query functionality of S3.
• D. Make your own DB system which stores the S3 metadata for the search functionalit

Answer: D

Explanation:
In Amazon Web Services, AWS S3 does not provide any query facility. To retrieve a specific object, the user needs to know the exact bucket / object key. In this case it is recommended to have an own DB system which manages the S3 metadata and key mapping.

NEW QUESTION 12
What does Amazon VPC stand for?

• A. Amazon Virtual Private Cloud
• B. Amazon Variable Power Cluster
• C. Amazon Virtual Private Computer
• D. Amazon Virtual Public Cloud

Answer: A

Explanation:
Amazon VPC stands for Amazon Virtual Private Cloud (Amazon VPC). Amazon VPC lets you provision a logically isolated section of the Amazon Web Services (AWS) cloud where you can launch AWS resources in a virtual network that you define. You have complete control over your virtual
networking environment, including selection of your own IP address range, creation of subnets, and configuration of route tables and network gateways. You can also create a hardware Virtual Private Network (VPN) connection between your corporate datacenter and your VPC and leverage the AWS cloud as an extension of your corporate datacenter.
http://aws.amazon.com/vpc/faqs/#G1

NEW QUESTION 13
You have an EC2 instance which needs to find out both its private IP address and its public IP address. To do this you need to;

• A. Run IPCONFIG (Windows) or IFCONFIG (Linux)
• B. Retrieve the instance Metadata from http://169.254.169.254/latest/meta-data/
• C. Retrieve the instance Userdata from http://169.254.169.254/latest/meta-data/
• D. Use the following command; AWS EC2 displayIP

Answer: B

NEW QUESTION 14
Which of the following are characteristics of a reserved instance? (Choose three.)

• A. It can be migrated across Availability Zones
• B. It is specific to an Amazon Machine Image (AMI)
• C. It can be applied to instances launched by Auto Scaling
• D. It is specific to an instance Type
• E. It can be used to lower Total Cost of Ownership (TCO) of a system

Answer: ACE

Explanation:
You can use Auto Scaling or other AWS services to launch the On-Demand instances that use your Reserved Instance benefits. For information about launching On-Demand instances, see Launch Your Instance. For information about launching instances using Auto Scaling, see the Auto Scaling User Guide. http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/concepts-on-demand-reservedinstances. html https://forums.aws.amazon.com/thread.jspa?threadID=56501

NEW QUESTION 15
What does the AWS Storage Gateway provide?

• A. It provides data security features by enabling an encrypted data storage on Amazon S3.
• B. It provides an encrypted SSL endpoint for backups in the cloud.
• C. It provides seamless integration with data security features between your on-premises ITenvironment and the Amazon Web Services (AWS) storage infrastructure.
• D. It provides a backup solution to on-premises Cloud storag

Answer: C

Explanation:
AWS Storage Gateway connects an on-premises software appliance with cloud-based storage to provide seamless integration with data security features between your on-premises IT environment and the Amazon Web Services (AWS) storage infrastructure. http://docs.aws.amazon.com/storagegateway/latest/userguide/WhatIsStorageGateway.html

NEW QUESTION 16
Can you encrypt EBS volumes?

• A. Yes, you can enable encryption when you create a new EBS volume using the AWS Management Console, API, or CLI.
• B. No, you should use a third-party software to perform raw block-level encryption of an EBS volume.
• C. Yes, but you must use a third-party API for encrypting data before it's loaded on EBS.
• D. Yes, you can encrypt with the special "ebs_encrypt" command through Amazon API

Answer: A

Explanation:
With Amazon EBS encryption, you can now create an encrypted EBS volume and attach it to a supported instance type. Data on the volume, disk I/O, and snapshots created from the volume are then all encrypted. The encryption occurs on the servers that host the EC2 instances, providing encryption of data as it moves between EC2 instances and EBS storage. EBS encryption is based on the industry standard AES-256 cryptographic algorithm.
To get started, simply enable encryption when you create a new EBS volume using the AWS Management Console, API, or CLI. Amazon EBS encryption is available for all the latest EC2 instances in all commercially available AWS regions.

NEW QUESTION 17
Multi-AZ deployment _____ supported for Microsoft SQL Server DB Instances.

• A. is not currently
• B. is as of 2013
• C. is planned to be in 2014
• D. will never be

Answer: C

NEW QUESTION 18
How are the EBS snapshots saved on Amazon S3?

• A. Exponentially
• B. Incrementally
• C. EBS snapshots are not stored in the Amazon S3
• D. Decrementally

Answer: B

NEW QUESTION 19
In IAM, a policy has to include the information about who (user) is allowed to access the resource, known as the _____.

• A. permission
• B. role
• C. license
• D. principal

Answer: D

Explanation:
To specify resource-based permissions, you can attach a policy to the resource, such as an Amazon SNS topic, an Amazon S3 bucket, or an Amazon Glacier vault. In that case, the policy has to include information about who is allowed to access the resource, known as the principal. (For user-based policies, the principal is the IAM user that the policy is attached to, or the user who gets the policy from a group.)
http://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html

NEW QUESTION 20
How can I change the security group membership for interfaces owned by other AWS, such as Elastic Load Balancing?

• A. By using the service specific console or APICLI commands
• B. None of these
• C. Using Amazon EC2 API/CLI
• D. using all these methods

Answer: A

Explanation:
http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/elb-security-groups.html

NEW QUESTION 21
Security groups in VPC operate at the _____.

• A. data transport layer level
• B. subnet level
• C. instance level
• D. gateway level

Answer: C

Explanation:
You can secure your VPC instances using only security groups. When you launch an instance in a VPC, you can associate one or more security groups that you've created. The security groups act as a
firewall for associated Amazon EC2 instances, controlling both inbound and outbound traffic at the instance level.
http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Security.html

NEW QUESTION 22
Your company previously configured a heavily used, dynamically routed VPN connection between your on-premises data center and AWS. You recently provisioned a DirectConnect connection and would like to start using the new connection. After configuring DirectConnect settings in the AWS Console, which of the following options win provide the most seamless transition for your users?

• A. Delete your existing VPN connection to avoid routing loops configure your DirectConnect router with the appropriate settings and verity network traffic is leveraging DirectConnect.
• B. Configure your DirectConnect router with a higher 8GP priority man your VPN router, verify network traffic is leveraging Directconnect and then delete your existing VPN connection.
• C. Update your VPC route tables to point to the DirectConnect connection configure your DirectConnect router with the appropriate settings verify network traffic is leveraging DirectConnect and then delete the VPN connection.
• D. Configure your DirectConnect router, update your VPC route tables to point to the DirectConnect connection, configure your VPN connection with a higher BGP point
• E. And verify network traffic is leveraging the DirectConnect connection.

Answer: C

Explanation:
Q. Can I use AWS Direct Connect and a VPN Connection to the same VPC simultaneously?
Yes. However, only in fail-over scenarios. The Direct Connect path will always be preferred, when established, regardless of AS path prepending.
https://aws.amazon.com/directconnect/faqs/

NEW QUESTION 23
Is it possible to get a history of all EC2 API calls made on your account for security analysis and operational troubleshooting purposes?

• A. Yes, by default, the history of your API calls is logged.
• B. Yes, you should turn on the CloudTrail in the AWS console.
• C. No, you can only get a history of VPC API calls.
• D. No, you cannot store history of EC2 API calls on Amazo

Answer: B

Explanation:
To get a history of all EC2 API calls (including VPC and EBS) made on your account, you simply turn on CloudTrail in the AWS Management Console.

NEW QUESTION 24
A major client who has been spending a lot of money on his internet service provider asks you to set up an AWS Direct Connection to try and save him some money. You know he needs high-speed connectivity. Which connection port speeds are available on AWS Direct Connect?

• A. 500Mbps and 1Gbps
• B. 1Gbps and 10Gbps
• C. 100Mbps and 1Gbps
• D. 1Gbps

Answer: B

Explanation:
AWS Direct Connect is a network service that provides an alternative to using the internet to utilize AWS cloud services.
Using AWS Direct Connect, data that would have previously been transported over the Internet can now be delivered through a private network connection between AWS and your datacenter or corporate network.
1Gbps and 10Gbps ports are available. Speeds of 50Mbps, 100Mbps, 200Mbps, 300Mbps, 400Mbps, and 500Mbps can be ordered from any APN partners supporting AWS Direct Connect.

NEW QUESTION 25
A customer’s security team requires the logging of all network access attempts to Amazon EC2 instances in their production VPC on AWS.
Which configuration will meet the security team’s requirement?

• A. Enable CloudTrail for the production VPC.
• B. Enable VPC Flow Logs for the production VPC.
• C. Enable both CloudTrail and VPC Flow Logs for the production VPC.
• D. Enable both CloudTrail and VPC Flow Logs for the AWS account.

Answer: B

NEW QUESTION 26
An organization hosts an app on EC2 instances which multiple developers need access to in order to perform updates.
The organization plans to implement some security best practices related to instance access. Which one of the following recommendations will not help improve its security in this way?

• A. Create a procedure to revoke the access rights of the individual user when they are not required to connect to EC2 instance anymore for the purpose of application configuration.
• B. Create an IAM policy allowing only IAM users to connect to the EC2 instances with their own SSH key.
• C. Apply the latest patch of OS and always keep it updated.
• D. Disable the password based login for all the user
• E. All the users should use their own keys to connect with the instance securely.

Answer: B

Explanation:
Since AWS is a public cloud any application hosted on EC2 is prone to hacker attacks. It becomes extremely important for a user to setup a proper security mechanism on the EC2 instances. A few of the security measures are listed below:
work on the EC2 instance is completed. Lock down unnecessary ports.
Audit any proprietary applications that the user may be running on the EC2 instance. Provide temporary escalated privileges, such as sudo for users who need to perform occasional privileged tasks IAM is useful when users are required to work with AWS resources and actions, such as launching an instance. It is not useful in this case because it does not manage who can connect via RDP or SSH with an instance.
http://aws.amazon.com/articles/1233/

NEW QUESTION 27
......