How is AWS readily distinguished from other vendors in …

Hey Guys, got some 2017 Aug/16 New Updated AWS-Certified-Solutions-Architect-Professional Exam Questions and Answers Share!

QUESTION
You’ve been brought in as solutions architect to assist an enterprise customer with their migration
of an e-commerce platform to Amazon Virtual Private Cloud (VPC).
The previous architect has already deployed a 3-tier VPC.
The configuration is as follows:
VPC: vpc-2f8bc447
IGW: igw-2d8bc445
NACL: ad-208bc448
Subnets and Route Tables:
Web servers: subnet-258bc44d
Application servers: subnet-248bc44c
Database servers: subnet-9189c6f9
Route Tables:
rtb-218bc449
rtb-238bc44b
Associations:
subnet-258bc44d : rtb-218bc449
subnet-248bc44c : rtb-238bc44b
subnet-9189c6f9 : rtb-238bc44b
You are now ready to begin deploying EC2 instances into the VPC. Web servers must have direct
access to the Internet. Application and database servers cannot have direct access to the
Internet. Which configuration below will allow you the ability to remotely administer your
application and database servers, as well as allow these servers to retrieve updates from the
Internet?
A. Create a bastion and NAT instance in subnet-258bc44d, and add a route from rtb-238bc44b to
the NAT instance.
B. Add a route from rtb-238bc44b to igw-2d8bc445 and add a bastion and NAT instance within
subnet-248bc44c.
C. Create a bastion and NAT instance in subnet-248bc44c, and add a route from rtb-238bc44b to
subnet-258bc44d.
D. Create a bastion and NAT instance in subnet-258bc44d, add a route from rtb-238bc44b to
Igw-2d8bc445, and a new NACL that allows access between subnet-258bc44d and subnet-
248bc44c.
Answer: A

QUESTION
You are designing the network infrastructure for an application server in Amazon VPC. Users will
access all the application instances from the Internet, as well as from an on-premises network.
The on-premises network is connected to your VPC over an AWS Direct Connect link.
How would you design routing to meet the above requirements?
A. Configure a single routing table with a default route via the Internet gateway.
Propagate a default route via BGP on the AWS Direct Connect customer router.
Associate the routing table with all VPC subnets.
B. Configure a single routing table with a default route via the Internet gateway.
Propagate specific routes for the on-premises networks via BGP on the AWS Direct Connect
customer router.
Associate the routing table with all VPC subnets.
C. Configure two routing tables: one that has a default route via the Internet gateway, and another
that has a default route via the VPN gateway.
Associate both routing tables with each VPC subnet.
D. Configure a single routing table with two default routes: one to the Internet via an Internet
gateway, the other to the on-premises network via the VPN gateway.
Use this routing table across all subnets in your VPC.
Answer: B

QUESTION
Within the IAM service a GROUP is regarded as a:
A. A collection of AWS accounts
B. It’s the group of EC2 machines that gain the permissions specified in the GROUP.
C. There’s no GROUP in IAM, but only USERS and RESOURCES.
D. A collection of users.
Answer: D

QUESTION
Amazon EC2 provides a repository of public data sets that can be seamlessly integrated into
AWS cloud-based applications.
What is the monthly charge for using the public data sets?
A. A 1 time charge of 10$ for all the datasets.
B. 1$ per dataset per month
C. 10$ per month for all the datasets
D. There is no charge for using the public data sets
Answer: D

QUESTION
In the Amazon RDS Oracle DB engine, the Database Diagnostic Pack and the Database Tuning
Pack are only available with ______________
A. Oracle Standard Edition
B. Oracle Express Edition
C. Oracle Enterprise Edition
D. None of these
Answer: C

QUESTION
You have deployed a web application, targeting a global audience across multiple AWS Regions
under the domain name example.com.
You decide to use Route53 Latency-Based Routing to serve web requests to users from the
region closest to the user. To provide business continuity in the event of server downtime you
configure weighted record sets associated with two web servers in separate Availability Zones
per region. During a DR test you notice that when you disable all web servers in one of the
regions Route53 does not automatically direct all users to the other region.
What could be happening? Choose 2 answers
A. You did not set “Evaluate Target Health” to ‘Yes” on the latency alias resource record set
associated with example.com in the region where you disabled the servers
B. The value of the weight associated with the latency alias resource record set in the region with
the disabled servers is higher than the weight for the other region
C. One of the two working web servers in the other region did not pass its HTTP health check
D. Latency resource record sets cannot be used in combination with weighted resource record sets
E. You did not setup an HTTP health check for one or more of the weighted resource record sets
associated with the disabled web servers
Answer: AE

QUESTION
An international company has deployed a multi-tier web application that relies on DynamoDB in a
single region. For regulatory reasons they need disaster recovery capability in a separate region
with a Recovery Time Objective of 2 hours and a Recovery Point Objective of 24 hours. They
should synchronize their data on a regular basis and be able to provision the web application
rapidly using CloudFormation.
The objective is to minimize changes to the existing web application, control the throughput of
DynamoDB used for the synchronization of data, and synchronize only the modified elements.
Which design would you choose to meet these requirements?
A. Use AWS Data Pipeline to schedule a DynamoDB cross region copy once a day, create a
“LastUpdated” attribute in your DynamoDB table that would represent the timestamp of the last
update and use it as a filter
B. Use AWS Data Pipeline to schedule an export of the DynamoDB table to S3 in the current region
once a day, then schedule another task Immediately after it that will import data from S3 to
DynamoDB in the other region
C. Use EMR and write a custom script to retrieve data from DynamoDB in the current region using a
SCAN operation and push it to DynamoDB in the second region
D. Send also each write into an SQS queue in the second region, use an auto-scaling group behind
the SQS queue to replay the write in the second region
Answer: B