AWS Certified Solutions Architect – Associate Questions and Answers (Dumps and Practice Questions)
Question : You are working on an application which is used by a financial marketing company, where equity(stock market) data has been stored in DynamoDB table. You have following fields on
the table DateoFData(When Data received), Security_ID, BiD_Price, Ask_Price etc. You want to store this data and your table should support query, which is based
on both DateofData and SecurityID column. So, you decided to have DateofData as a primary index and SecuirtyId as a Secondary Index. Which of the
following statement is correct?
A. You will be creating Global secondary index on SecurityId and this can only be created when table is created.
B. You will be creating Local secondary index on SecurityId and this can only be created when table is created.
C. You can have at most one Global Secondary Index
D. You can have at most one Local secondary index
1. A,B
2. B,C
3. C,D
4. A,D
5. B,D
Correct Answer : 5
Explanation: Regarding Global Secondary Index:
- You can have many Global Secondary Index
- You can create Global Secondary Index once table is created
Regarding Local Secondary Index
- You can have at most one Local Secondary Index
- You have to create Local Secondary Index, when table is being created.
Question : You are creating an application, which dynamically create and destroy AWS resources. You are using AWS SDK to interact with AWS resources.
Now, you want your application while interacting with the AWS resources (through SDK) should be secured. Which of the given option is best solution for this requirement?
A. Create application which store IAM username and password in a configuration file.
B. Create application which store IAM access keys (both the parts) in a configuration file.
C. You should create a role with the required permissions and launch the EC2 instance by assuming that role. So, any application running on that EC2 instance will have the same permissions.
D. You will also make sure that any communication between application and AWS resources will happen through HTTPS protocol only.
1. A,B
2. B,C
3. C,D
4. A,D
5. B,D
Correct Answer : 2
Explanation: Whenever, you want to access AWS resources through AWS SDK (programmatically) then please note that, you cannot use username
and password of a Principal. You can use access keys of the Principal to interact with AWS resources programmatically.
There is another way, you create a role with the required permission and then launch EC2 instance using that role. Hence, any application launched on
that instance can assume that role.
Question : You are working in a quite a large Financial institution, which have been hosting various applications on AWS Infrastructure. You have a team of three AWS expert and all know the credentials of the root account. One of them resigned from the company, what action other member should take on immediate basis.
A. It is not allowed for that candidate to exit the company premises until root account password changed.
B. You should immediately change the password and enable the MFA login
C. Delete all the AWS accounts and re-create them.
D. Put the restriction on the IP addresses from where root user can login.
E. Delete administrator account on immediate basis.
F. Rotate the keys and change the IAM password for all accounts.
G. Rename all the roles and launch all the EC2 instances again.
1. A,B,C
2. C,D,E
3. D,E,F
4. A,B,E
5. B,D,E,F
Correct Answer : 5
Explanation: If the root user leave the company , you should have done following on immediate basis
• You will immediately change the password and enable the MFA login
• Put the restriction on the IP addresses from where root user can login.
• Delete administrator account on immediate basis.
• Rotate the keys and change the IAM password for all accounts.
Related Questions
Question : Which of the following encryption is used by AWS S at Server side?
1. SSE-S3
2. AES-256
3. Access Mostly Uused Products by 50000+ Subscribers
4. X.509
Question : While setting up the level read replica in RDS , you find the lag between master and nd level replication, why ?
1. 2nd level read replicas configuration is wrong
2. 2nd level read replica's Harware configuration will always be lower grade then master.
3. Access Mostly Uused Products by 50000+ Subscribers
4. Because of additional replication latency introduced as transactions are replicated from the master to the first level
replica and then to the second-level replica.
5. Any of the above could be correct
Question : How would Acmeshell can use S to accomplish this goal?
"As soon as their training video file age reached to 6 month, it should be moved to Glacier storage."
1. Write an AWS command line tool to backup the data and send it to glacier after 6 months
2. Use S3 bucket policies to manage the data
3. Access Mostly Uused Products by 50000+ Subscribers
4. Use bucket Lifecycle policies and set the files to go to glacier storage after 6 months
Question : You are going to create an Amazon Relational Database Services (RDS) for your production applications, and for that you require fast and
consistent I/O performance. is it the right choice to use Provisioned IOPS on RDS instances which are launched under a VPC ?
1. No, Provisioned IOPS are not for RDS
2. Yes, Provisioned IOPS can be used for all RDS instances
3. Access Mostly Uused Products by 50000+ Subscribers
4. Yes, Provisioned IOPS can be used, but with Oracle based instances
Question : When an object is lost under RRS, then which event is triggered ?
1. ReducedRedundancyLostObject
2. NotifyReducedRedundancyLostObject
3. Access Mostly Uused Products by 50000+ Subscribers
4. ReducedRedundancyLostObjectNotification
Question : How do you define the "Activity Worker" within the context of Amazon Simple Workflow Service?
1. It is a code piece or program which decide logic
2. Code piece or program where you can run custom garbage collection within the Workflow
3. Access Mostly Uused Products by 50000+ Subscribers
4. It is an individual task done by the workflow