Amazon Amazon Certifications SAP-C01 Questions & Answers

• Question 791:

  Does Amazon RDS API provide actions to modify DB instances inside a VPC and associate them with DB Security Groups?

  A. Yes, Amazon does this but only for MySQL RDS.

  B. Yes

  C. No

  D. Yes, Amazon does this but only for Oracle RDS.

  Correct Answer: B

  You can use the action Modify DB Instance, available in the Amazon RDS API, to pass values for the parameters DB Instance Identifier and DB Security Groups specifying the instance ID and the DB Security Groups you want your instance to be part of.

  Reference: http://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ModifyDBInstance.html

• Question 792:

  An organization is having an application which can start and stop an EC2 instance as per schedule. The organization needs the MAC address of the instance to be registered with its software. The instance is launched in EC2-CLASSIC.

  How can the organization update the MAC registration every time an instance is booted?

  A. The organization should write a boot strapping script which will get the MAC address from the instance metadata and use that script to register with the application.

  B. The organization should provide a MAC address as a part of the user data. Thus, whenever the instance is booted the script assigns the fixed MAC address to that instance.

  C. The instance MAC address never changes. Thus, it is not required to register the MAC address every time.

  D. AWS never provides a MAC address to an instance; instead the instance ID is used for identifying the instance for any software registration.

  Correct Answer: A

  AWS provides an on demand, scalable infrastructure. AWS EC2 allows the user to launch On- Demand instances. AWS does not provide a fixed MAC address to the instances launched in EC2-CLASSIC. If the instance is launched as a part of EC2-VPC, it can have an ENI which can have a fixed MAC. However, with EC2-CLASSIC, every time the instance is started or stopped it will have a new MAC address. To get this MAC, the organization can run a script on boot which can fetch the instance metadata and get the MAC address from that instance metadata. Once the MAC is received, the organization can register that MAC with the software.

  Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/AESDG-chapter-instancedata.html

• Question 793:

  An organization is setting up an application on AWS to have both High Availability (HA) and Disaster Recovery (DR). The organization wants to have both Recovery point objective (RPO) and Recovery time objective (RTO) of 10 minutes.

  Which of the below mentioned service configurations does not help the organization achieve the said RPO and RTO?

  A. Take a snapshot of the data every 10 minutes and copy it to the other region.

  B. Use an elastic IP to assign to a running instance and use Route 53 to map the user's domain with that IP.

  C. Create ELB with multi-region routing to allow automated failover when required.

  D. Use an AMI copy to keep the AMI available in other regions.

  Correct Answer: C

  AWS provides an on demand, scalable infrastructure. AWS EC2 allows the user to launch On- Demand instances and the organization should create an AMI of the running instance. Copy the AMI to another region to enable Disaster Recovery (DR) in case of region failure. The organization should also use EBS for persistent storage and take a snapshot every 10 minutes to meet Recovery time objective (RTO). They should also setup an elastic IP and use it with Route 53 to route requests to the same IP. When one of the instances fails the organization can launch new instances and assign the same EIP to a new instance to achieve High Availability (HA). The ELB works only for a particular region and does not route requests across regions.

  Reference: http://d36cz9buwru1tt.cloudfront.net/AWS_Disaster_Recovery.pdf

• Question 794:

  Which of the following is NOT an advantage of using AWS Direct Connect?

  A. AWS Direct Connect provides users access to public and private resources by using two different connections while maintaining network separation between the public and private environments.

  B. AWS Direct Connect provides a more consistent network experience than Internet-based connections.

  C. AWS Direct Connect makes it easy to establish a dedicated network connection from your premises to AWS.

  D. AWS Direct Connect reduces your network costs.

  Correct Answer: A

  AWS Direct Connect makes it easy to establish a dedicated network connection from your premises to AWS. Using AWS Direct Connect, you can establish private connectivity between AWS and your datacenter, office, or colocation environment, which in many cases can reduce your network costs, increase bandwidth throughput, and provide a more consistent network experience than Internet-based connections. By using industry standard 802.1q VLANs, this dedicated connection can be partitioned into multiple virtual interfaces. This allows you to use the same connection to access public resources such as objects stored in Amazon S3 using public IP address space, and private resources such as Amazon EC2 instances running within an Amazon Virtual Private Cloud (VPC) using private IP space, while maintaining network separation between the public and private environments.

  Reference: http://aws.amazon.com/directconnect/#details

• Question 795:

  True or False: Amazon ElastiCache supports the Redis key-value store.

  A. True, ElastiCache supports the Redis key-value store, but with limited functionalities.

  B. False, ElastiCache does not support the Redis key-value store.

  C. True, ElastiCache supports the Redis key-value store.

  D. False, ElastiCache supports the Redis key-value store only if you are in a VPC environment.

  Correct Answer: C

  This is true. ElastiCache supports two open-source in-memory caching engines: 1. Memcached - a widely adopted memory object caching system. ElastiCache is protocol compliant with Memcached, so popular tools that you use today with existing Memcached environments will work seamlessly with the service. 2. Redis - a popular open-source in-memory key-value store that supports data structures such as sorted sets and lists. ElastiCache supports Master / Slave replication and Multi-AZ which can be used to achieve cross AZ redundancy. Reference: https://aws.amazon.com/elasticache/

• Question 796:

  IAM Secure and Scalable is an organization which provides scalable and secure SAAS to its clients. They are planning to host a web server and App server on AWS VPC as separate tiers. The organization wants to implement the scalability by configuring Auto Scaling and load balancer with their app servers (middle tier) too.

  Which of the below mentioned options suits their requirements?

  A. Since ELB is internet facing, it is recommended to setup HAProxy as the Load balancer within the VPC.

  B. Create an Internet facing ELB with VPC and configure all the App servers with it.

  C. The user should make ELB with EC2-CLASSIC and enable SSH with it for security.

  D. Create an Internal Load balancer with VPC and register all the App servers with it.

  Correct Answer: D

  The Amazon Virtual Private Cloud (Amazon VPC) allows the user to define a virtual networking environment in a private, isolated section of the Amazon Web Services (AWS) cloud. The user has complete control over the virtual networking environment. Within this virtual private cloud, the user can launch AWS resources, such as an ELB, and EC2 instances. There are two ELBs available with VPC: internet facing and internal (private) ELB. For internal servers, such as App servers the organization can create an internal load balancer in their VPC and then place back-end application instances behind the internal load balancer. The internal load balancer will route requests to the back-end application instances, which are also using private IP addresses and only accept requests from the internal load balancer.

  Reference: http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/vpc-loadbalancertypes.html

• Question 797:

  You want to define permissions for a role in an IAM policy. Which of the following configuration formats should you use?

  A. An XML document written in the IAM Policy Language

  B. An XML document written in a language of your choice

  C. A JSON document written in the IAM Policy Language

  D. JSON document written in a language of your choice

  Correct Answer: C

  You define the permissions for a role in an IAM policy. An IAM policy is a JSON document written in the IAM Policy Language.

  Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html

• Question 798:

  Regarding Amazon SNS, you can send notification messages to mobile devices through any of the following supported push notification services, EXCEPT:

  A. Microsoft Windows Mobile Messaging (MWMM)

  B. Google Cloud Messaging for Android (GCM)

  C. Amazon Device Messaging (ADM)

  D. Apple Push Notification Service (APNS)

  Correct Answer: A

  In Amazon SNS, you have the ability to send notification messages directly to apps on mobile devices.

  Notification messages sent to a mobile endpoint can appear in the mobile app as message alerts, badge

  updates, or even sound alerts.

  Microsoft Windows Mobile Messaging (MWMM) doesn't exist and is not supported by Amazon SNS.

  Reference:

  http://docs.aws.amazon.com/sns/latest/dg/SNSMobilePush.html

• Question 799:

  How many cg1.4xlarge on-demand instances can a user run in one region without taking any limit increase approval from AWS?

  A. 20

  B. 2

  C. 5

  D. 10

  Correct Answer: B

  Generally, AWS EC2 allows running 20 on-demand instances and 100 spot instances at a time. This limit can be increased by requesting at https://aws.amazon.com/contact-us/ec2-request. Excluding certain types of instances, the limit is lower than mentioned above. For cg1.4xlarge, the user can run only 2 on-demand instances at a time.

  Reference: http://docs.aws.amazon.com/general/latest/gr/aws_service_limits.html#limits_ec2

• Question 800:

  How much memory does the cr1.8xlarge instance type provide?

  A. 224 GB

  B. 124 GB

  C. 184 GB

  D. 244 GB

  Correct Answer: D

  The CR1 instances are part of the memory optimized instances. They offer lowest cost per GB RAM among all the AWS instance families. CR1 instances are part of the new generation of memory optimized instances, which can offer up to 244 GB RAM and run on faster CPUs (Intel Xeon E5-2670 with NUMA support) in comparison to the M2 instances of the same family. They support cluster networking for bandwidth intensive applications. cr1.8xlarge is one of the largest instance types of the CR1 family, which can offer 244 GB RAM.

  Reference: http://aws.amazon.com/ec2/instance-types/