Master the aws solution architect associate exam dumps AWS Certified Solutions Architect - Associate content and be ready for exam day success quickly with this Pass4sure aws solution architect associate dumps actual exam. We guarantee it!We make it a reality and give you real aws solution architect associate questions questions in our Amazon aws solution architect associate exam dumps braindumps.Latest 100% VALID Amazon aws solution architect associate exam dumps Exam Questions Dumps at below page. You can use our Amazon aws solution architect associate certification braindumps and pass your exam.


♥♥ 2021 NEW RECOMMEND ♥♥

Free VCE & PDF File for Amazon AWS-Solution-Architect-Associate Real Exam (Full Version!)

★ Pass on Your First TRY ★ 100% Money Back Guarantee ★ Realistic Practice Exam Questions

Free Instant Download NEW AWS-Solution-Architect-Associate Exam Dumps (PDF & VCE):
Available on: http://www.surepassexam.com/AWS-Solution-Architect-Associate-exam-dumps.html

Q71. Can I control if and when MySQL based RDS Instance is upgraded to new supported versions?

A. No

B. Only in VPC

C. Yes 

Answer: C


Q72. You need to set up security for your VPC and you know that Amazon VPC provides two features that you can use to increase security for your VPC: Security groups and network access control lists (ACLs). You start to look into security groups first. Which statement below is incorrect in relation to security groups?

A. Are stateful: Return traffic is automatically allowed, regardless of any rules.

B. Evaluate all rules before deciding whether to allow traffic.

C. Support allow rules and deny rules.

D. Operate at the instance level (first layer of defense). 

Answer: C

Explanation:

Amazon VPC provides two features that you can use to increase security for your VPC:

Security groups—Act as a firewall for associated Amazon EC2 instances, controlling both inbound and outbound traffic at the instance level and supports allow rules only.

Network access control lists (ACLs)—Act as a firewall for associated subnets, controlling both inbound and outbound traffic at the subnet level and supports allow rules and deny rules.

Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Security.html


Q73. After setting up some EC2 instances you now need to set up a monitoring solution to keep track of these instances and to send you an email when the CPU hits a certain threshold. Which statement below best describes what thresholds you can set to trigger a CIoudWatch Alarm?

A. Set a target value and choose whether the alarm will trigger when the value is greater than (>), greater than or equal to (>=), less than (<), or less than or equal to (<=) that value.

B. Thresholds need to be set in IAM not CIoudWatch

C. Only default thresholds can be set you can't choose your own thresholds.

D. Set a target value and choose whether the alarm will trigger when the value hits this threshold 

Answer: A

Explanation:

Amazon CIoudWatch is a monitoring service for AWS cloud resources and the applications you run on AWS. You can use Amazon CIoudWatch to collect and track metrics, collect and monitor log files, and set

alarms.

When you create an alarm, you first choose the Amazon CIoudWatch metric you want it to monitor. Next, you choose the evaluation period (e.g., five minutes or one hour) and a statistical value to measure (e.g., Average or Maximum).

To set a threshold, set a target value and choose whether the alarm will trigger when the value is greater than (>), greater than or equal to (>=), less than (<), or less than or equal to (<=) that value.

Reference: http://aws.amazon.com/cIoudwatch/faqs/


Q74. In AWS CIoudHSM, in addition to the AWS recommendation that you use two or more HSM appliances in a high-availability configuration to prevent the loss of keys and data, you can also perform a remote backup/restore of a Luna SA partition if you have purchased a:

A. Luna Restore HSNI.

B. Luna Backup HSM.

C. Luna HSNI.

D. Luna SA HSM.

Answer: B 

Explanation:

In AWS CIoudHSM, you can perform a remote backup/restore of a Luna SA partition if you have purchased a Luna Backup HSM.

Reference:  http://docs.aws.amazon.com/cloudhsm/latest/userguide/cloud-hsm-backup-restore.html


Q75. To specify a resource in a policy statement, in Amazon EC2, can you use its Amazon Resource Name (ARN)?

A. Yes, you can.

B. No, you can't because EC2 is not related to ARN.

C. No, you can't because you can't specify a particular Amazon EC2 resource in an IAM policy.

D. Yes, you can but only for the resources that are not affected by the action. 

Answer: A

Explanation:

Some Amazon EC2 API actions allow you to include specific resources in your policy that can be created or modified by the action. To specify a resource in the statement, you need to use its Amazon Resource Name (ARN).

Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-ug.pdf


Q76. How can you apply more than 100 rules to an Amazon EC2-Classic?

A. By adding more security groups

B. You need to create a default security group specifying your required rules if you need to use more than 100 rules per security group.

C. By default the Amazon EC2 security groups support 500 rules.

D. You can't add more than 100 rules to security groups for an Amazon EC2 instance. 

Answer: D

Explanation:

In EC2-Classic, you can associate an instance with up to 500 security groups and add up to 100 rules to a security group.

Reference:  http://docs.amazonwebservices.com/AWSEC2/latest/UserGuide/using-network-security.htmI


Q77. All Amazon EC2 instances are assigned two IP addresses at launch, out of which one can only be reached from within the Amazon EC2 network?

A. Multiple IP address

B. Public IP address

C. Private IP address

D. Elastic I P Address 

Answer: C


Q78. True or False: Without IAM, you cannot control the tasks a particular user or system can do and what AWS resources they might use.

A. FALSE

B. TRUE

Answer: A


Q79. Fill in the blanks: The base URI for all requests for instance metadata is _ _ 

A. http://254.169.169.254/Iatest/

B. http://169.169.254.254/|atesU 

C. http://127.0.0.1/|atest/

D. http://I69.254.169.254/|atest/

Answer: D


Q80. An edge location refers to which Amazon Web Service?

A. An edge location is refered to the network configured within a Zone or Region

B. An edge location is an AWS Region

C. An edge location is the location of the data center used for Amazon CIoudFront.

D. An edge location is a Zone within an AWS Region 

Answer: C

Explanation:

Amazon CIoudFront is a content distribution network. A content delivery network or content distribution network (CDN) is a large distributed system of sewers deployed in multiple data centers across the world. The location of the data center used for CDN is called edge location.

Amazon CIoudFront can cache static content at each edge location. This means that your popular static content (e.g., your site’s logo, navigational images, cascading style sheets, JavaScript code, etc.) will be available at a nearby edge location for the browsers to download with low latency and improved performance for viewers. Caching popular static content with Amazon CIoudFront also helps you offload requests for such files from your origin sever — CIoudFront serves the cached copy when available and only makes a request to your origin server if the edge location receMng the browser’s request does not have a copy of the file.

Reference: http://aws.amazon.com/c|oudfront/