AWS-Certified-Solutions-Architect-Professional Free Practice Test

You have deployed a three-tier web application in a VPC with a CIDR block of 10.0.0.0/28 You initially deploy two web servers, two application sewers, two database sewers and one NAT instance tor a total of seven EC2 instances The web. Application and database sewers are deployed across two availability zones (AZs). You also deploy an ELB in front of the two web servers, and use Route53 for DNS Web (raffile gradually increases in the first few days following the deployment, so you attempt to double the number of instances in each tier of the application to handle the new load unfortunately some of these new instances fail to launch.
Which of the following could be the root caused? (Choose 2 answers)

1. A. AWS reserves the first and the last private IP address in each subnet's CIDR block so you do not have enough addresses left to launch all of the new EC2 instances
2. B. The Internet Gateway (IGW) of your VPC has scaled-up, adding more instances to handle the traffic spike, reducing the number of available private IP addresses for new instance launches
3. C. The ELB has scaled-up, adding more instances to handle the traffic spike, reducing the number of available private IP addresses for new instance launches
4. D. AWS reserves one IP address in each subnet's CIDR block for Route53 so you do not have enough addresses left to launch all of the new EC2 instances
5. E. AWS reserves the first four and the last IP address in each subnet's CIDR block so you do not have enough addresses left to launch all of the new EC2 instances

Correct Answer: CE

A customer has established an AWS Direct Connect connection to AWS. The link is up and routes are being advertised from the customer's end, however the customer is unable to connect from EC2 instances inside its VPC to servers residing in its datacenter.
Which of the following options provide a viable solution to remedy this situation? (Choose 2 answers)

1. A. Add a route to the route table with an IPsec VPN connection as the target.
2. B. Enable route propagation to the virtual pinnate gateway (VGW).
3. C. Enable route propagation to the customer gateway (CGW).
4. D. Modify the route table of all Instances using the 'route' command.
5. E. Modify the Instances VPC subnet route table by adding a route back to the customer's on-premises environment.

Correct Answer: AC

You have been asked to design the storage layer for an application. The application requires disk performance of at least 100,000 IOPS. In addition, the storage layer must be able to survive the loss of an indMdual disk, EC2 instance, or Availability Zone without any data loss. The volume you provide must have a capacity of at least 3 TB. Which of the following designs will meet these objectives?

1. A. Instantiate a c3.8x|arge instance in us-east-1. Provision 4x1TB EBS volumes, attach them to the instance, and configure them as a single RAID 5 volum
2. B. Ensure that EBS snapshots are performed every 15 minutes.
3. C. Instantiate a c3.8xIarge instance in us-east-1. Provision 3xITB EBS volumes, attach them to the Instance, and configure them as a single RAID 0 volum
4. D. Ensure that EBS snapshots are performed every 15 minutes.
5. E. Instantiate an i2.8xIarge instance in us-east-1
6. F. Create a RAID 0 volume using the four 800GB SSD ephemeral disks provided with the instanc
7. G. Provision 3x1TB EBS volumes, attach them to the instance, and configure them as a second RAID 0 volum
8. H. Configure synchronous, block-level replication from the ephemeral-backed volume to the EBS-backed volume.
9. I. Instantiate a c3.8xIarge instance in us-east-1. Provision an AWS Storage Gateway and configure it for 3 TB of storage and 100,000 IOP
10. J. Attach the volume to the instance.
11. K. Instantiate an i2.8xIarge instance in us-east-1
12. L. Create a RAID 0 volume using the four 800GB SSD ephemeral disks provided with the instanc
13. M. Configure synchronous, blocklevel replication to an identically configured instance in us-east-1b.

Correct Answer: C

Your company currently has a 2-tier web application running in an on-premises data center. You have experienced several infrastructure failures in the past two months resulting in significant financial losses. Your CIO is strongly agreeing to move the application to AWS. While working on achieving buy-in from the other company executives, he asks you to develop a disaster recovery plan to help improve Business continuity in the short term. He specifies a target Recovery Time Objective (RTO) of 4 hours and a Recovery Point Objective (RPO) of 1 hour or less. He also asks you to implement the solution within 2 weeks. Your database is 200GB in size and you have a 20Mbps Internet connection. How would you do this while minimizing costs?

1. A. Create an EBS backed private AMI which includes a fresh install of your applicatio
2. B. Develop a Cloud Formation template which includes your AMI and the required EC2, AutoScaIing, and ELB resources to support deploying the application across Multiple- Availability-Zone
3. C. Asynchronously replicate transactions from your on-premises database to a database instance in AWS across a secure VPN connection.
4. D. Deploy your application on EC2 instances within an Auto Scaling group across multiple availability zone
5. E. Asynchronously replicate transactions from your on-premises database to a database instance in AWS across a secure VPN connection.
6. F. Create an EBS backed private AMI which includes a fresh install of your applicatio
7. G. Setup a script in your data center to backup the local database every 1 hour and to encrypt and copy the resulting file to an S3 bucket using multi-part upload.
8. H. Install your application on a compute-optimized EC2 instance capable of supporting the appIication's average loa
9. I. Synchronously replicate transactions from your on-premises database to a database instance in AWS across a secure Direct Connect connection.

Correct Answer: A

IAM Secure And Scalable is an organization which provides scalable and secure SAAS to its clients. They are planning to host a web server and App server on AWS VPC as separate tiers. The organization wants to implement the scalability by configuring Auto Scaling and load balancer with their app servers (middle tier) too. Which of the below mentioned options suits their requirements?

1. A. Since ELB is internet facing, it is recommended to setup HAProxy as the Load balancer within the VPC.
2. B. Create an Internet facing ELB with VPC and configure all the App servers with it.
3. C. The user should make ELB with EC2-CLASSIC and enable SSH with it for security.
4. D. Create an Internal Load balancer with VPC and register all the App sewers with i

Correct Answer: D
The Amazon Virtual Private Cloud (Amazon VPC) allows the user to define a virtual networking environment in a private, isolated section of the Amazon Web Services (AWS) cloud. The user has complete control over the virtual networking environment. Within this virtual private cloud, the user can launch AWS resources, such as an ELB, and EC2 instances.
There are two ELBs available with VPC: internet facing and internal (private) ELB. For internal servers, such as App sewers the organization can create an internal load balancer in their VPC and then place back-end application instances behind the internal load balancer. The internal load balancer will route
requests to the back-end application instances, which are also using private IP addresses and only accept requests from the internal load balancer.
Reference:
http://docs.aws.amazon.com/EIasticLoadBalancing/latest/DeveIoperGuide/vpc-IoadbaIancer-types.html