AWS-Certified-Solutions-Architect-Professional Free Practice Test

In AWS, which security aspects are the customer's responsibility? Choose 4 answers

1. A. Security Group and ACL (Access Control List) settings
2. B. Decommissioning storage devices
3. C. Patch management on the EC2 instance's operating system
4. D. Life-cycle management of IAM credentials
5. E. Controlling physical access to compute resources
6. F. Encryption of EBS (Elastic Block Storage) volumes

Correct Answer: ACDF

Which of the following cache engines does Amazon EIastiCache support?

1. A. Amazon EIastiCache supports Memcached and Redis.
2. B. Amazon EIastiCache supports Redis and WinCache.
3. C. Amazon EIastiCache supports Memcached and Hazelcast.
4. D. Amazon EIastiCache supports Memcached onl

Correct Answer: A
The cache engines supported by Amazon EIastiCache are Memcached and Redis.
Reference: http://docs.aws.amazon.com/AmazonEIastiCache/latest/UserGuide/SeIectEngine.html

ExamKiIIer has three separate departments and each department has their own AWS accounts. The HR department has created a file sharing site where all the on roll empIoyees’ data is uploaded. The Admin department uploads data about the employee presence in the office to their DB hosted in the VPC. The Finance department needs to access data from the HR department to know the on roll employees to calculate the salary based on the number of days that an employee is present in the office.
How can ExamKiI|er setup this scenario?

1. A. It is not possible to configure VPC peering since each department has a separate AWS account.
2. B. Setup VPC peering for the VPCs of Admin and Finance.
3. C. Setup VPC peering for the VPCs of Finance and HR as well as between the VPCs of Finance and Admin.
4. D. Setup VPC peering for the VPCs of Admin and HR

Correct Answer: C
A Virtual Private Cloud (VPC) is a virtual network dedicated to the user’s AWS account. It enables the user to launch AWS resources into a virtual network that the user has defined. A VPC peering connection allows the user to route traffic between the peer VPCs using private IP addresses as if they are a part of the same network. This is helpful when one VPC from the same or different AWS account wants to connect with resources of the other VPC.
Reference:
http://docs.aws.amazon.com/AmazonVPC/Iatest/PeeringGuide/peering-configurations-full-access.htmI#t hree-vpcs-full-access

Select the correct set of options. These are the initial settings for the default security group:

1. A. Allow no inbound traffic, Allow all outbound traffic and Allow instances associated with this security group to talk to each other
2. B. Allow all inbound traffic, Allow no outbound traffic and Allow instances associated with this security group to talk to each other
3. C. Allow no inbound traffic, Allow all outbound traffic and Does NOT allow instances associated with this security group to talk to each other
4. D. Allow all inbound traffic, Allow all outbound traffic and Does NOT allow instances associated with this security group to talk to each other

Correct Answer: A

In Amazon EIastiCache, the default cache port is:

1. A. for Memcached 11210 and for Redis 6380.
2. B. for Memcached 11211 and for Redis 6380.
3. C. for Memcached 11210 and for Redis 6379.
4. D. for Memcached 11211 and for Redis 6379.

Correct Answer: D
In Amazon EIastiCache, you can specify a new port number for your cache cluster, which by default is 11211 for Memcached and 6379 for Redis.
Reference: http://docs.aws.amazon.com/AmazonEIastiCache/Iatest/UserGuide/GettingStarted.AuthorizeAccess.htm|