Q1. - (Topic 2) 

A user has created a VPC with CIDR 20.0.0.0/16. The user has created public and VPN only subnets along with hardware VPN access to connect to the user’s datacenter. The user wants to make so that all traffic coming to the public subnet follows the organization’s proxy policy. How can the user make this happen? 

A. Setting up a NAT with the proxy protocol and configure that the public subnet receives traffic from NAT 

B. Settin up a proxy policy in the internet gateway connected with the public subnet 

C. It is not possible to setup the proxy policy for a public subnet 

D. Setting the route table and security group of the public subnet which receives traffic from a virtual private gateway 

View Answer

Q2. - (Topic 3) 

A user is trying to create a PIOPS EBS volume with 8 GB size and 200 IOPS. Will AWS create the volume? 

A. Yes, since the ratio between EBS and IOPS is less than 30 

B. No, since the PIOPS and EBS size ratio is less than 30 

C. No, the EBS size is less than 10 GB 

D. Yes, since PIOPS is higher than 100 

View Answer

Q3. - (Topic 3) 

A user has created a mobile application which makes calls to DynamoDB to fetch certain data. The application is using the DynamoDB SDK and root account access/secret access key to connect to DynamoDB from mobile. Which of the below mentioned statements is true with respect to the best practice for security in this scenario? 

A. The user should create a separate IAM user for each mobile application and provide DynamoDB access with it 

B. The user should create an IAM role with DynamoDB and EC2 access. Attach the role with EC2 and route all calls from the mobile through EC2 

C. The application should use an IAM role with web identity federation which validates calls to DynamoDB with identity providers, such as Google, Amazon, and Facebook 

D. Create an IAM Role with DynamoDB access and attach it with the mobile application 

View Answer

Q4. - (Topic 3) 

A user is trying to create an EBS volume with the highest PIOPS supported by EBS. What is the minimum size of EBS required to have the maximum IOPS? 

A. 124 

B. 150 

C. 134 

D. 128 

View Answer

Q5. - (Topic 1) 

You have been asked to automate many routine systems administrator backup and recovery activities. Your current plan is to leverage AWS-managed solutions as much as possible and automate the rest with the AWS CLI and scripts. 

Which task would be best accomplished with a script? 

A. Creating daily EBS snapshots with a monthly rotation of snapshots 

B. Creating daily RDS snapshots with a monthly rotation of snapshots 

C. Automatically detect and stop unused or underutilized EC2 instances 

D. Automatically add Auto Scaled EC2 instances to an Amazon Elastic Load Balancer 

View Answer

Q6. - (Topic 1) 

The majority of your Infrastructure is on premises and you have a small footprint on AWS Your company has decided to roll out a new application that is heavily dependent on low latency connectivity to LOAP for authentication Your security policy requires minimal changes to the company's existing application user management processes. 

What option would you implement to successfully launch this application1? 

A. Create a second, independent LOAP server in AWS for your application to use for authentication 

B. Establish a VPN connection so your applications can authenticate against your existing on-premises LDAP servers 

C. Establish a VPN connection between your data center and AWS create a LDAP replica on AWS and configure your application to use the LDAP replica for authentication 

D. Create a second LDAP domain on AWS establish a VPN connection to establish a trust relationship between your new and existing domains and use the new domain for authentication 

View Answer

Q7. - (Topic 2) 

A root account owner has created an S3 bucket testmycloud. The account owner wants to allow everyone to upload the objects as well as enforce that the person who uploaded the object should manage the permission of those objects. Which is the easiest way to achieve this? 

A. The root account owner should create a bucket policy which allows the IAM users to upload the object 

B. The root account owner should create the bucket policy which allows the other account owners to set the object policy of that bucket 

C. The root account should use ACL with the bucket to allow everyone to upload the object 

D. The root account should create the IAM users and provide them the permission to upload content to the bucket 

View Answer

Q8. - (Topic 2) 

A user has launched 10 instances from the same AMI ID using Auto Scaling. The user is trying to see the 

average CPU utilization across all instances of the last 2 weeks under the CloudWatch console. How can the user achieve this? 

A. View the Auto Scaling CPU metrics 

B. Aggregate the data over the instance AMI ID 

C. The user has to use the CloudWatchanalyser to find the average data across instances 

D. It is not possible to see the average CPU utilization of the same AMI ID since the instance ID is different 

View Answer

Q9. - (Topic 1) 

You have identified network throughput as a bottleneck on your m1.small EC2 instance when uploading data Into Amazon S3 In the same region. 

How do you remedy this situation? 

A. Add an additional ENI 

B. Change to a larger Instance 

C. Use DirectConnect between EC2 and S3 

D. Use EBS PIOPS on the local volume 

View Answer

Q10. - (Topic 3) 

An organization has launched 5 instances: 2 for production and 3 for testing. The organization wants that one particular group of IAM users should only access the test instances and not the production ones. How can the organization set that as a part of the policy? 

A. Launch the test and production instances in separate regions and allow region wise access to the group 

B. Define the IAM policy which allows access based on the instance ID 

C. Create an IAM policy with a condition which allows access to only small instances 

D. Define the tags on the test and production servers and add a condition to the IAM policy which allows access to specific tags 

View Answer