AWS Certified Solutions Architect
PRACTICE EXAM (100% CORRECT)
ALREADY PASSED |VERIFIED|
Which AWS service helps you track and store logs of API calls made to your AWS account?
AWS CloudTrail
AWS Config
AWS Lambda
AWS Trusted Advisor
AWS CloudTrail records API calls made on yo...
AWS Certified Solutions Architect
PRACTICE EXAM (100% CORRECT)
ALREADY PASSED |VERIFIED|
Which AWS service helps you track and store logs of API calls made to your AWS account?
AWS CloudTrail
AWS Config
AWS Lambda
AWS Trusted Advisor AWS CloudTrail records API calls made on your AWS account and stores the
log files in an S3 bucket.
Which resource type is the core component managed by AWS Key Management Service (KMS)?
Customer Master Key (CMK)
Encryption Context
Data Key
Envelope Encryption Customer Master Keys (CMKs) are the primary resources managed by AWS
KMS.
What AWS Directory Service offering is based on Samba 4 and compatible with Microsoft Active
Directory?
Simple AD
Mini Microsoft AD
AD Connector
Seamless Domain Join Simple AD is powered by Samba 4 and provides Microsoft Active Directory
compatibility.
Which types of security credentials are supported by AWS for user authentication and access?
Key pairs
Multi-Factor Authentication (MFA)
1
,AWS IAM user name and password
All of the above AWS supports all of the listed credentials for security and user access
management.
What does the shared responsibility model in AWS entail?
AWS is responsible for security of the cloud, and customers handle security in the cloud.
Customers are responsible for all security aspects.
AWS handles all security responsibilities.
Customers manage security for the cloud environment. In AWS, customers are responsible for
security within the cloud, while AWS is responsible for the security of the cloud infrastructure.
What is the primary purpose of AWS Signature Version 4 in securing requests?
It ensures the integrity and confidentiality of the data.
It protects against replay attacks.
It verifies the identity of the requestor and secures data in transit. AWS Signature Version 4 both
verifies the requestor's identity, protects data in transit, and guards against potential replay attacks.
In Amazon VPC, which component is responsible for directing network traffic?
Internet Gateway
Network Access Control List (ACL)
Route Table
Security Group The route table in an Amazon VPC determines where the network traffic is
directed by defining routing rules.
What is the supported range for CIDR addressing in Amazon VPC?
From /28 (16 IP addresses) to /16 (65,536 IP addresses)
From /30 (8 IP addresses) to /24 (256 IP addresses)
From /28 (16 IP addresses) to /24 (256 IP addresses)
From /30 (8 IP addresses) to /16 (65,536 IP addresses) Amazon VPC supports a CIDR range from
/28 (16 IPs) to /16 (65,536 IPs).
2
,How many IP addresses does AWS reserve within a subnet for internal networking?
One
Two
Three
Five AWS reserves the first four IP addresses and the last IP address in each subnet for its own
use.
Which automation language is supported by AWS OpsWorks for managing server configurations?
Ansible
Salt Stack
Chef
Slack AWS OpsWorks supports Chef for IT automation, enabling tasks like configuration and
deployment.
How many checks are included in the free version of AWS Trusted Advisor?
5
4
10
12 AWS Trusted Advisor provides four checks to all AWS customers at no cost.
Which AWS service would you use to monitor and manage compliance across AWS resources?
AWS CloudWatch
AWS Config
AWS CloudTrail
AWS IAM AWS Config tracks and manages compliance by providing detailed visibility into AWS
resource configurations.
Which AWS service can help you manage and rotate encryption keys?
AWS Secrets Manager
3
, AWS Key Management Service (KMS)
AWS CloudHSM
AWS Lambda AWS Key Management Service (KMS) is used to manage and rotate encryption keys.
Which AWS Directory Service offering enables you to integrate on-premises Microsoft Active Directory
with AWS resources?
AWS Managed Microsoft AD
Simple AD
AD Connector
Active Directory Domain Services AD Connector enables seamless integration between on-
premises Microsoft Active Directory and AWS resources.
Which type of authentication is supported by AWS IAM in conjunction with Multi-Factor Authentication
(MFA)?
Username and password
Smart card
IAM user name and password
Access key and secret key IAM supports MFA in conjunction with an IAM user name and password
for enhanced security.
What is the primary function of Amazon EC2 Auto Scaling?
To increase or decrease the number of EC2 instances based on demand
To schedule EC2 instance maintenance tasks
To deploy EC2 instances in multiple regions
To monitor EC2 instance health and performance Amazon EC2 Auto Scaling dynamically adjusts
the number of EC2 instances based on the demand for resources.
What is the default security group behavior in Amazon VPC?
It allows inbound and outbound traffic by default.
It allows inbound traffic but restricts outbound traffic.
4
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller StellarGrades. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $9.63. You're not tied to anything after your purchase.
