AWS-Certified-Solutions-Architect-Professional Free Practice Test

When using Numeric Conditions within IAM, short versions of the available comparators can be used instead of the more verbose versions. Which of the following is the short version of the Numeric Condition "NumericLessThanEquaIs"?

1. A. numlteq
2. B. numlteql
3. C. numltequals
4. D. numeql

Correct Answer: A
When using Numeric Conditions within IAM, short versions of the available comparators can be used instead of the more verbose versions. For instance, numlteq is the short version of NumericLessThanEquaIs.
Reference: http://awsdocs.s3.amazonaws.com/SQS/2011-10-01/sqs-dg-2011-10-01.pdf

What types of identities do Amazon Cognito identity pools support?

1. A. They support both authenticated and unauthenticated identities.
2. B. They support only unauthenticated identities.
3. C. They support neither authenticated nor unauthenticated identities.
4. D. They support only authenticated identitie

Correct Answer: A
Amazon Cognito identity pools support both authenticated and unauthenticated identities. Authenticated identities belong to users who are authenticated by a public login provider or your own backend authentication process. Unauthenticated identities typically belong to guest users. Reference: http://docs.aws.amazon.com/cognito/devguide/identity/identity-poo|s/

In AWS IAM, which of the following predefined policy condition keys checks how long ago (in seconds) the MFA-validated security credentials making the request were issued using multi-factor authentication
(MFA)?

1. A. aws:MuItiFactorAuthAge
2. B. aws:Mu|tiFactorAuthLast
3. C. aws:MFAAge
4. D. aws:MuItiFactorAuthPrevious

Correct Answer: A
aws:MuItiFactorAuthAge is one of the predefined keys provided by AWS that can be included within a Condition element of an IAM policy. The key allows to check how long ago (in seconds) the
MFA-validated security credentials making the request were issued using Multi-Factor Authentication (MFA).
Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/AccessPoIicyLanguage_EIementDescriptions.htmI

The Statement element, of an AWS IAM policy, contains an array of indMdual statements. Each indMdual statement is a(n) block enclosed in braces { }.

1. A. XML
2. B. JavaScript
3. C. JSON
4. D. AJAX

Correct Answer: C
The Statement element, of an IAM policy, contains an array of indMdual statements. Each indMdual statement is a JSON block enclosed in braces { }.
Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/AccessPoIicyLanguage_EIementDescriptions.html

An organization is having a VPC for the HR department, and another VPC for the Admin department. The HR department requires access to all the instances running in the Admin VPC while the Admin department requires access to all the resources in the HR department. How can the organization setup
this scenario?

1. A. Setup VPC peering between the VPCs of Admin and HR.
2. B. Setup ACL with both VPCs which will allow traffic from the CIDR of the other VPC.
3. C. Setup the security group with each VPC which allows traffic from the CIDR of another VPC.
4. D. It is not possible to connect resources of one VPC from another VPC.

Correct Answer: A
A Virtual Private Cloud (VPC) is a virtual network dedicated to the user’s AWS account. It enables the user to launch AWS resources into a virtual network that the user has defined. A VPC peering connection allows the user to route traffic between the peer VPCs using private IP addresses as if they are a part of the same network.
This is helpful when one VPC from the same or different AWS account wants to connect with resources of the other VPC.
Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/vpc-peering.htmI