Amazon Amazon Certifications SAP-C01 Questions & Answers

• Question 831:

  A customer has a website which shows all the deals available across the market. The site experiences a load of 5 large EC2 instances generally. However, a week before Thanksgiving vacation they encounter a load of almost 20 large instances. The load during that period varies over the day based on the office timings.

  Which of the below mentioned solutions is cost effective as well as help the website achieve better performance?

  A. Setup to run 10 instances during the pre-vacation period and only scale up during the office time by launching 10 more instances using the AutoScaling schedule.

  B. Keep only 10 instances running and manually launch 10 instances every day during office hours.

  C. During the pre-vacation period setup 20 instances to run continuously.

  D. During the pre-vacation period setup a scenario where the organization has 15 instances running and 5 instances to scale up and down using Auto Scaling based on the network I/O policy.

  Correct Answer: B

  AWS provides an on demand, scalable infrastructure. AWS EC2 allows the user to launch On- Demand instances and the organization should create an AMI of the running instance. When the organization is experiencing varying loads and the time of the load is not known but it is higher than the routine traffic it is recommended that the organization launches a few instances beforehand and then setups AutoScaling with policies which scale up and down as per the EC2 metrics, such as Network I/O or CPU utilization. If the organization keeps all 10 additional instances as a part of the AutoScaling policy sometimes during a sudden higher load it may take time to launch instances and may not give an optimal performance. This is the reason it is recommended that the organization keeps an additional 5 instances running and the next 5 instances scheduled as per the AutoScaling policy for cost effectiveness.

• Question 832:

  What is the default maximum number of VPCs allowed per region?

  A. 5

  B. 10

  C. 100

  D. 15

  Correct Answer: A

  The maximum number of VPCs allowed per region is 5.

  Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Appendix_Limits.html

• Question 833:

  An organization is planning to host a Wordpress blog as well a joomla CMS on a single instance launched with VPC. The organization wants to have separate domains for each application and assign them using Route 53. The organization may have about ten instances each with two applications as mentioned above. While launching the instance, the organization configured two separate network interfaces (primary + ENI) and wanted to have two elastic IPs for that instance. It was suggested to use a public IP from AWS instead of an elastic IP as the number of elastic IPs is restricted.

  What action will you recommend to the organization?

  A. I agree with the suggestion but will prefer that the organization should use separate subnets with each ENI for different public IPs.

  B. I do not agree as it is required to have only an elastic IP since an instance has more than one ENI and AWS does not assign a public IP to an instance with multiple ENIs.

  C. I do not agree as AWS VPC does not attach a public IP to an ENI; so the user has to use only an elastic IP only.

  D. I agree with the suggestion and it is recommended to use a public IP from AWS since the organization is going to use DNS with Route 53.

  Correct Answer: B

  A Virtual Private Cloud (VPC) is a virtual network dedicated to the user's AWS account. It enables the user to launch AWS resources into a virtual network that the user has defined. An Elastic Network Interface (ENI) is a virtual network interface that the user can attach to an instance in a VPC. The user can attach up to two ENIs with a single instance. However, AWS cannot assign a public IP when there are two ENIs attached to a single instance. It is recommended to assign an elastic IP in this scenario. If the organization wants more than 5 EIPs they can request AWS to increase the number.

  Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-eni.html

• Question 834:

  In the context of AWS IAM, identify a true statement about user passwords (login profiles).

  A. They must contain Unicode characters.

  B. They can contain any Basic Latin (ASCII) characters.

  C. They must begin and end with a forward slash (/).

  D. They cannot contain Basic Latin (ASCII) characters.

  Correct Answer: B

  The user passwords (login profiles) of IAM users can contain any Basic Latin (ASCII)characters.

  Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/LimitationsOnEntities.html

• Question 835:

  An organization is planning to extend their data center by connecting their DC with the AWS VPC using the VPN gateway. The organization is setting up a dynamically routed VPN connection.

  Which of the below mentioned answers is not required to setup this configuration?

  A. The type of customer gateway, such as Cisco ASA, Juniper J-Series, Juniper SSG, Yamaha.

  B. Elastic IP ranges that the organization wants to advertise over the VPN connection to the VPC.

  C. Internet-routable IP address (static) of the customer gateway's external interface.

  D. Border Gateway Protocol (BGP) Autonomous System Number (ASN) of the customer gateway.

  Correct Answer: B

  The Amazon Virtual Private Cloud (Amazon VPC) allows the user to define a virtual networking environment in a private, isolated section of the Amazon Web Services (AWS) cloud. The user has complete control over the virtual networking environment. The organization wants to extend their network into the cloud and also directly access the internet from their AWS VPC. Thus, the organization should setup a Virtual Private Cloud (VPC) with a public subnet and a private subnet, and a virtual private gateway to enable communication with their data center network over an IPsec VPN tunnel. To setup this configuration the organization needs to use the Amazon VPC with a VPN connection. The organization network administrator must designate a physical appliance as a customer gateway and configure it. The organization would need the below mentioned information to setup this configuration: The type of customer gateway, such as Cisco ASA, Juniper J-Series, Juniper SSG, Yamaha Internetroutable IP address (static) of the customer gateway's external interface Border Gateway Protocol (BGP) Autonomous System Number (ASN) of the customer gateway, if the organization is creating a dynamically routed VPN connection. Internal network IP ranges that the user wants to advertise over the VPN connection to the VPC.

  Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_VPN.html

• Question 836:

  An IAM user is trying to perform an action on an object belonging to some other root account's bucket.

  Which of the below mentioned options will AWS S3 not verify?

  A. The object owner has provided access to the IAM user

  B. Permission provided by the parent of the IAM user on the bucket

  C. Permission provided by the bucket owner to the IAM user

  D. Permission provided by the parent of the IAM user

  Correct Answer: B

  If the IAM user is trying to perform some action on the object belonging to another AWS user's bucket, S3 will verify whether the owner of the IAM user has given sufficient permission to him. It also verifies the policy for the bucket as well as the policy defined by the object owner. Reference: http://docs.aws.amazon.com/AmazonS3/latest/dev/access-control-auth-workflow-object-operation.html

• Question 837:

  You want to use AWS CodeDeploy to deploy an application to Amazon EC2 instances running within an Amazon Virtual Private Cloud (VPC).

  What criterion must be met for this to be possible?

  A. The AWS CodeDeploy agent installed on the Amazon EC2 instances must be able to access only the public AWS CodeDeploy endpoint.

  B. The AWS CodeDeploy agent installed on the Amazon EC2 instances must be able to access only the public Amazon S3 service endpoint.

  C. The AWS CodeDeploy agent installed on the Amazon EC2 instances must be able to access the public AWS CodeDeploy and Amazon S3 service endpoints.

  D. It is not currently possible to use AWS CodeDeploy to deploy an application to Amazon EC2 instances running within an Amazon Virtual Private Cloud (VPC.)

  Correct Answer: C

  You can use AWS CodeDeploy to deploy an application to Amazon EC2 instances running within an

  Amazon Virtual Private Cloud (VPC). However, the AWS CodeDeploy agent installed on the Amazon EC2

  instances must be able to access the public AWS CodeDeploy and Amazon S3 service endpoints.

  Reference:

  http://aws.amazon.com/codedeploy/faqs/

• Question 838:

  By default, Amazon Cognito maintains the last-written version of the data. You can override this behavior and resolve data conflicts programmatically. In addition, push synchronization allows you to use Amazon Cognito to send a silent notification to all devices associated with an identity to notify them that new data is available.

  A. get

  B. post

  C. pull

  D. push

  Correct Answer: D

  Reference: http://aws.amazon.com/cognito/faqs/

• Question 839:

  Which AWS instance address has the following characteristics? :"If you stop an instance, its Elastic IP address is unmapped, and you must remap it when you restart the instance."

  A. Both A and B

  B. None of these

  C. VPC Addresses

  D. EC2 Addresses

  Correct Answer: D

  Stopping an instance EC2-Classic If you stop an instance, its Elastic IP address is disassociated, and you must reassociate the Elastic IP address when you restart the instance. EC2-VPC If you stop an instance, its Elastic IP address remains associated. Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/elastic-ip-addresses-eip.html

• Question 840:

  The ________ service is targeted at organizations with multiple users or systems that use AWS products such as Amazon EC2, Amazon SimpleDB, and the AWS Management Console.

  A. Amazon RDS

  B. AWS Integrity Management

  C. AWS Identity and Access Management

  D. Amazon EMR

  Correct Answer: C

  Reference: https://aws.amazon.com/documentation/iam/?nc1=h_ls