ExamGecko
Home Home / Amazon / SAP-C01

Amazon SAP-C01 Practice Test - Questions Answers, Page 9

Question list
Search
Search

List of questions

Search

Related questions











A solutions architect is implementing federated access to AWS for users of the company’s mobile application. Due to regulatory and security requirements, the application must use a custom-built solution for authenticating users and must use IAM roles for authorization.

Which of the following actions would enable authentication and authorization and satisfy the requirements? (Choose two.)

A.
Use a custom-built SAML-compatible solution for authentication and AWS SSO for authorization.
A.
Use a custom-built SAML-compatible solution for authentication and AWS SSO for authorization.
Answers
B.
Create a custom-built LDAP connector using Amazon API Gateway and AWS Lambda for authentication. Store authorization tokens in Amazon DynamoDB, and validate authorization requests using another Lambda function that reads the credentials from DynamoDB.
B.
Create a custom-built LDAP connector using Amazon API Gateway and AWS Lambda for authentication. Store authorization tokens in Amazon DynamoDB, and validate authorization requests using another Lambda function that reads the credentials from DynamoDB.
Answers
C.
Use a custom-built OpenID Connect-compatible solution with AWS SSO for authentication and authorization.
C.
Use a custom-built OpenID Connect-compatible solution with AWS SSO for authentication and authorization.
Answers
D.
Use a custom-built SAML-compatible solution that uses LDAP for authentication and uses a SAML assertion to perform authorization to the IAM identity provider.
D.
Use a custom-built SAML-compatible solution that uses LDAP for authentication and uses a SAML assertion to perform authorization to the IAM identity provider.
Answers
E.
Use a custom-built OpenID Connect-compatible solution for authentication and use Amazon Cognito for authorization.
E.
Use a custom-built OpenID Connect-compatible solution for authentication and use Amazon Cognito for authorization.
Answers
Suggested answer: A, C

An organization is hosting a scalable web application using AWS. The organization has configured ELB and Auto Scaling to make the application scalable. Which of the below mentioned statements is not required to be followed for ELB when the application is planning to host a web application on VPC?

A.
The ELB and all the instances should be in the same subnet.
A.
The ELB and all the instances should be in the same subnet.
Answers
B.
Configure the security group rules and network ACLs to allow traffic to be routed between the subnets in the VPC.
B.
Configure the security group rules and network ACLs to allow traffic to be routed between the subnets in the VPC.
Answers
C.
The internet facing ELB should have a route table associated with the internet gateway.
C.
The internet facing ELB should have a route table associated with the internet gateway.
Answers
D.
The internet facing ELB should be only in a public subnet.
D.
The internet facing ELB should be only in a public subnet.
Answers
Suggested answer: A

Explanation:

Amazon Virtual Private Cloud (Amazon VPC) allows the user to define a virtual networking environment in a private, isolated section of the Amazon Web Services (AWS) cloud. The user has complete control over the virtual networking environment.

Within this virtual private cloud, the user can launch AWS resources, such as an ELB, and EC2 instances. There are two ELBs available with VPC: internet facing and internal (private) ELB. For the internet facing ELB it is required that the ELB should be in a public subnet. After the user creates the public subnet, he should ensure to associate the route table of the public subnet with the internet gateway to enable the load balancer in the subnet to connect with the internet. The ELB and instances can be in a separate subnet. However, to allow communication between the instance and the ELB the user must configure the security group rules and network ACLs to allow traffic to be routed between the subnets in his VPC.

Reference: http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/CreateVPCForELB.html

A web-startup runs its very successful social news application on Amazon EC2 with an Elastic Load Balancer, an Auto- Scaling group of Java/Tomcat application-servers, and DynamoDB as data store. The main web-application best runs on m2 x large instances since it is highly memory- bound Each new deployment requires semi-automated creation and testing of a new AMI for the application servers which takes quite a while ana is therefore only done once per week. Recently, a new chat feature has been implemented in nodejs and wails to be integrated in the architecture. First tests show that the new component is CPU bound Because the company has some experience with using Chef, they decided to streamline the deployment process and use AWS Ops Works as an application life cycle tool to simplify management of the application and reduce the deployment cycles. What configuration in AWS Ops Works is necessary to integrate the new chat module in the most cost-efficient and flexible way?

A.
Create one AWS OpsWorks stack, create one AWS Ops Works layer, create one custom recipe
A.
Create one AWS OpsWorks stack, create one AWS Ops Works layer, create one custom recipe
Answers
B.
Create one AWS OpsWorks stack create two AWS Ops Works layers, create one custom recipe
B.
Create one AWS OpsWorks stack create two AWS Ops Works layers, create one custom recipe
Answers
C.
Create two AWS OpsWorks stacks create two AWS Ops Works layers, create one custom recipe
C.
Create two AWS OpsWorks stacks create two AWS Ops Works layers, create one custom recipe
Answers
D.
Create two AWS OpsWorks stacks create two AWS Ops Works layers, create two custom recipe
D.
Create two AWS OpsWorks stacks create two AWS Ops Works layers, create two custom recipe
Answers
Suggested answer: B

You have recently joined a startup company building sensors to measure street noise and air quality in urban areas. The company has been running a pilot deployment of around 100 sensors for 3 months each sensor uploads 1KB of sensor data every minute to a backend hosted on AWS.

During the pilot, you measured a peak or 10 IOPS on the database, and you stored an average of 3GB of sensor data per month in the database. The current deployment consists of a load-balanced auto scaled Ingestion layer using EC2 instances and a PostgreSQL RDS database with 500GB standard storage. The pilot is considered a success and your CEO has managed to get the attention or some potential investors. The business plan requires a deployment of at least 100K sensors which needs to be supported by the backend. You also need to store sensor data for at least two years to be able to compare year over year Improvements.

To secure funding, you have to make sure that the platform meets these requirements and leaves room for further scaling. Which setup win meet the requirements?

A.
Add an SQS queue to the ingestion layer to buffer writes to the RDS instance
A.
Add an SQS queue to the ingestion layer to buffer writes to the RDS instance
Answers
B.
Ingest data into a DynamoDB table and move old data to a Redshift cluster
B.
Ingest data into a DynamoDB table and move old data to a Redshift cluster
Answers
C.
Replace the RDS instance with a 6 node Redshift cluster with 96TB of storage
C.
Replace the RDS instance with a 6 node Redshift cluster with 96TB of storage
Answers
D.
Keep the current architecture but upgrade RDS storage to 3TB and 10K provisioned IOPS
D.
Keep the current architecture but upgrade RDS storage to 3TB and 10K provisioned IOPS
Answers
Suggested answer: C

Explanation:

The POC solution is being scaled up by 1000, which means it will require 72TB of Storage to retain 24 months’ worth of data. This rules out RDS as a possible DB solution which leaves you with Redshift. I believe DynamoDB is a more cost effective and scales better for ingest rather than using EC2 in an auto scaling group. Also, this example solution from AWS is somewhat similar for reference.

You have subscribed to the AWS Business and Enterprise support plan.

Your business has a backlog of problems, and you need about 20 of your IAM users to open technical support cases. How many users can open technical support cases under the AWS Business and Enterprise support plan?

A.
5 users
A.
5 users
Answers
B.
10 users
B.
10 users
Answers
C.
Unlimited
C.
Unlimited
Answers
D.
1 user
D.
1 user
Answers
Suggested answer: C

Explanation:

In the context of AWS support, the Business and Enterprise support plans allow an unlimited number of users to open technical support cases (supported by AWS Identity and Access Management (IAM)).

Reference: https://aws.amazon.com/premiumsupport/faqs/

What RAID method is used on the Cloud Block Storage back-end to implement a very high level of reliability and performance?

A.
RAID 1 (Mirror)
A.
RAID 1 (Mirror)
Answers
B.
RAID 5 (Blocks striped, distributed parity)
B.
RAID 5 (Blocks striped, distributed parity)
Answers
C.
RAID 10 (Blocks mirrored and striped)
C.
RAID 10 (Blocks mirrored and striped)
Answers
D.
RAID 2 (Bit level striping)
D.
RAID 2 (Bit level striping)
Answers
Suggested answer: C

Explanation:

Cloud Block Storage back-end storage volumes employs the RAID 10 method to provide a very high level of reliability and performance.

Reference: http://www.rackspace.com/knowledge_center/product-faq/cloud-block-storage

A user is planning to launch multiple EC2 instance same as current running instance.

Which of the below mentioned parameters is not copied by Amazon EC2 in the launch wizard when the user has selected the option "Launch more like this"?

A.
Termination protection
A.
Termination protection
Answers
B.
Tenancy setting
B.
Tenancy setting
Answers
C.
Storage
C.
Storage
Answers
D.
Shutdown behavior
D.
Shutdown behavior
Answers
Suggested answer: C

Explanation:

The Amazon EC2 console provides a "Launch more like this" wizard option that enables the user to use a current instance as a template for launching other instances. This option automatically populates the Amazon EC2 launch wizard with certain configuration details from the selected instance.

The following configuration details are copied from the selected instance into the launch wizard: AMI ID Instance type Availability Zone, or the VPC and subnet in which the selected instance is located Public IPv4 address. If the selected instance currently has a public IPv4 address, the new instance receives a public IPv4 address - regardless of the selected instance's default public IPv4 address setting. For more information about public IPv4 addresses, see Public IPv4 Addresses and External DNS Hostnames. Placement group, if applicable

IAM role associated with the instance, if applicable Shutdown behavior setting (stop or terminate) Termination protection setting (true or false) CloudWatch monitoring (enabled or disabled) Amazon EBS-optimization setting (true or false) Tenancy setting, if launching into a VPC (shared or dedicated) Kernel ID and RAM disk ID, if applicable User data, if specified Tags associated with the instance, if applicable Security groups associated with the instance The following configuration details are not copied from your selected instance; instead, the wizard applies their default settings or behavior:

(VPC only) Number of network interfaces: The default is one network interface, which is the primary network interface (eth0). Storage: The default storage configuration is determined by the AMI and the instance type.

Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/launching-instance.html

A gaming company created a game leaderboard by using a Multi-AZ deployment of an Amazon RDS database. The number of users is growing, and the queries to get individual player rankings are getting slower over time. The company expects a surge in users for an upcoming version and wants to optimize the design for scalability and performance. Which solution will meet these requirements?

A.
Migrate the database to Amazon DynamoDB. Store the leaderboard data in two different tables. Use Apache HiveQL JOIN statements to build the leaderboard.
A.
Migrate the database to Amazon DynamoDB. Store the leaderboard data in two different tables. Use Apache HiveQL JOIN statements to build the leaderboard.
Answers
B.
Keep the leaderboard data in the RDS DB instance. Provision a Multi-AZ deployment of an Amazon ElastiCache for Redis cluster.
B.
Keep the leaderboard data in the RDS DB instance. Provision a Multi-AZ deployment of an Amazon ElastiCache for Redis cluster.
Answers
C.
Stream the leaderboard data by using Amazon Kinesis Data Firehose with an Amazon S3 bucket as the destination. Query the S3 bucket by using Amazon Athena for the leaderboard.
C.
Stream the leaderboard data by using Amazon Kinesis Data Firehose with an Amazon S3 bucket as the destination. Query the S3 bucket by using Amazon Athena for the leaderboard.
Answers
D.
Add a read-only replica to the RDS DB instance. Add an RDS Proxy database proxy.
D.
Add a read-only replica to the RDS DB instance. Add an RDS Proxy database proxy.
Answers
Suggested answer: D

Explanation:

Reference: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/rds-proxy.html

An IoT company has rolled out a fleet of sensors for monitoring temperatures in remote locations. Each device connects to AWS IoT Core and sends a message 30 seconds, updating an Amazon DynamoDB table. A System Administrator users AWS IoT to verify the devices are still sending messages to AWS IoT Core: the database is not updating. What should a Solutions Architect check to determine why the database is not being updated?

A.
Verify the AWS IoT Device Shadow service is subscribed to the appropriate topic and is executing the AWS Lambda function.
A.
Verify the AWS IoT Device Shadow service is subscribed to the appropriate topic and is executing the AWS Lambda function.
Answers
B.
Verify that AWS IoT monitoring shows that the appropriate AWS IoT rules are being executed, and that the AWS IoT rules are enabled with the correct rule actions.
B.
Verify that AWS IoT monitoring shows that the appropriate AWS IoT rules are being executed, and that the AWS IoT rules are enabled with the correct rule actions.
Answers
C.
Check the AWS IoT Fleet indexing service and verify that the thing group has the appropriate IAM role to update DynamoDB.
C.
Check the AWS IoT Fleet indexing service and verify that the thing group has the appropriate IAM role to update DynamoDB.
Answers
D.
Verify that AWS IoT things are using MQTT instead of MQTT over WebSocket, then check that the provisioning has the appropriate policy attached.
D.
Verify that AWS IoT things are using MQTT instead of MQTT over WebSocket, then check that the provisioning has the appropriate policy attached.
Answers
Suggested answer: D

A large company runs workloads in VPCs that are deployed across hundreds of AWS accounts. Each VPC consists of public subnets and private subnets that span across multiple Availability Zones. NAT gateways are deployed in the public subnets and allow outbound connectivity to the internet from the private subnets.

A solutions architect is working on a hub-and-spoke design. All private subnets in the spoke VPCs must route traffic to the internet through an egress VPC. The solutions architect already has deployed a NAT gateway in an egress VPC in a central AWS account.

Which set of additional steps should the solutions architect take to meet these requirements?

A.
Create peering connections between the egress VPC and the spoke VPCs. Configure the required routing to allow access to the internet.
A.
Create peering connections between the egress VPC and the spoke VPCs. Configure the required routing to allow access to the internet.
Answers
B.
Create a transit gateway, and share it with the existing AWS accounts. Attach existing VPCs to the transit gateway. Configure the required routing to allow access to the internet.
B.
Create a transit gateway, and share it with the existing AWS accounts. Attach existing VPCs to the transit gateway. Configure the required routing to allow access to the internet.
Answers
C.
Create a transit gateway in every account. Attach the NAT gateway to the transit gateways. Configure the required routing to allow access to the internet.
C.
Create a transit gateway in every account. Attach the NAT gateway to the transit gateways. Configure the required routing to allow access to the internet.
Answers
D.
Create an AWS PrivateLink connection between the egress VPC and the spoke VPCs. Configure the required routing to allow access to the internet.
D.
Create an AWS PrivateLink connection between the egress VPC and the spoke VPCs. Configure the required routing to allow access to the internet.
Answers
Suggested answer: B

Explanation:

Reference: https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html

Total 906 questions
Go to page: of 91