SOA-C01 Free Practice Test

A user is planning to setup infrastructure on AWS for the Christmas sales. The user is planning to use Auto Scaling based on the schedule for proactive scaling. What advise would you give to the user?

1. A. It is good to schedule now because if the user forgets later on it will not scale up
2. B. The scaling should be setup only one week before Christmas
3. C. Wait till end of November before scheduling the activity
4. D. It is not advisable to use scheduled based scaling

Correct Answer: C
Auto Scaling based on a schedule allows the user to scale the application in response to predictable load changes. The user can specify any date in the future to scale up or down during that period. As per Auto Scaling the user can schedule an action for up to a month in the future. Thus, it is recommended to wait until end of November before scheduling for Christmas.

A user has configured the Auto Scaling group with the minimum capacity as 3 and the maximum capacity as 5. When the user configures the AS group, how many instances will Auto Scaling launch?

1. A. 3
2. B. 5
3. C. 2

Correct Answer: A
The default launch is going to configure 3 instances. It will only go to 5 under certain conditions. It won??t launch initially 5 instances. This question doesn??t give enough information to answer fully.

An Organization has been backing up their database backup to Amazon S3. A lifecycle rule has been created to transition these backups to Amazon Glacier storage class. The application development now to restore a backup.
Which step can an Administrator take to restore the backup to Amazon S3 storage?

1. A. Create a new lifecycle rule to restore the backup from GLACIER storage class to Amazon S3 storage.
2. B. Use the Amazon Glacier console to restore the backup from CLACIER storage class to Amazon S3 storage.
3. C. Modify the existing lifecycle rule to restore the backup GKACIER storage class to Amazon S3 storage.
4. D. Use the Amazon S3 console to restore the backup from CLACIER storage class to Amazon storage.

Correct Answer: D
Restoring an Archived S3 Object
This topic explains how to use the Amazon S3 console to restore an object that has been archived to Glacier.
To restore archived S3 objects
Sign in to the AWS Management Console and open the Amazon S3 console at https://console.aws.amazon.com/s3/.
In the Bucket name list, choose the name of the bucket that contains the objects that you want to restore.

In the Name list, select the objects that you want to restore, choose Actions, and then choose Restore from Glacier.

In the Initiate restore dialog box, type the number of days that you want your archived data to be
accessible.
Choose one of the following retrieval options from the Retrieval options menu. Choose Bulk retrieval or Standard retrieval, and then choose Restore.
Choose Expedited retrieval.

If you have provisioned capacity, choose Restore to start a provisioned retrieval. If you have provisioned capacity, all of your expedited retrievals are served by your provisioned capacity. For more information about provisioned capacity, see Provisioned Capacity.
If you don't have provisioned capacity and you don't want to buy it, choose Restore.
If you don't have provisioned capacity, but you want to buy it, choose Add capacity unit, and then choose Buy. When you get the Purchase succeeded message, choose Restore to start provisioned retrieval.

A user has configured a VPC with a new subnet. The user has created a security group. The user wants to configure that instances of the same subnet communicate with each other. How can the user configure this with the security group?

1. A. There is no need for a security group modification as all the instances can communicate with each other inside the same subnet
2. B. Configure the subnet as the source in the security group and allow traffic on all the protocols and ports
3. C. Configure the security group itself as the source and allow traffic on all the protocols and ports
4. D. The user has to use VPC peering to configure this

Correct Answer: C
A Virtual Private Cloud (VPC. is a virtual network dedicated to the user??s AWS account. AWS provides two features that the user can use to increase security in VPC: security groups and network ACLs. Security groups work at the instance level. If the user is using the default security group it will have a rule which allows the instances to communicate with other. For a new security group the user has to specify the rule, add it to define the source as the security group itself, and select all the protocols and ports for that source.

An organization has launched 5 instances: 2 for production and 3 for testing. The organization wants that one particular group of IAM users should only access the test instances and not the production ones. How can the organization set that as a part of the policy?

1. A. Launch the test and production instances in separate regions and allow region wise access to the group
2. B. Define the IAM policy which allows access based on the instance ID
3. C. Create an IAM policy with a condition which allows access to only small instances
4. D. Define the tags on the test and production servers and add a condition to the IAM policy which allows access to specific tags

Correct Answer: D
AWS Identity and Access Management is a web service which allows organizations to manage users and user permissions for various AWS services. The user can add conditions as a part of the IAM policies. The condition can be set on AWS Tags, Time, and Client IP as well as on various parameters. If the organization wants the user to access only specific instances he should define proper tags and add to the IAM policy condition. The sample policy is shown below.
"Statement": [
{
"Action": "ec2:*",
"Effect": "Allow",
"Resource": "*", "Condition": { "StringEquals": {
"ec2:ResourceTag/InstanceType": "Production"
}
}
}
]