AWS ASA ADVANCED EXAM QUESTIONS WITH COMPLETE ANSWERS.

AWS ASA ADVANCED EXAM QUESTIONS WITH COMPLETE ANSWERS. You quickly created an ELB and it turns out your users are complaining about the fact that sometimes, the servers just don't work. You realize that indeed, your servers do crash from time to time. How to protect your users from seeing these crashes? a. Enable Stickiness b. Enable Health Checks c. Enable SSL Termination - CORRECT ANSWER b. Enable Health Checks Health checks ensure your ELB won't send traffic to unhealthy (crashed) instances ap-northeast-1a is a... - CORRECT ANSWER Availability Zone (Anything that ends with a letter is an AZ) Availability Zones are... - CORRECT ANSWER in isolated data centers. (this helps guarantee that multi AZ won't all fail at once (due to a meteorological disaster for example).) All of these are IAM components except... a. users b. organizations c. roles d. policies e. groups - CORRECT ANSWER b. organizations IAM Users are defined on a per-region basis (T/F) - CORRECT ANSWER False IAM is a global service (encompasses all regions) An IAM user can belong to multiple groups (T/F) - CORRECT ANSWER True You are getting started with AWS and your manager wants things to remain simple yet secure. He wants the management of engineers to be easy, and not re-invent the wheel every time someone joins your company. What will you do? - CORRECT ANSWER I'll create multiple IAM users and groups, assign policies to the groups. New users will be added to the groups. You should share your IAM credentials with colleagues if they quickly need access to help you (T/F) - CORRECT ANSWER False Never share your IAM credentials. If your colleagues need access to AWS they'll need their own account You pay for an EC2 instance compute component. a. only when its in "running" state b. if its "running" or "stopped" state - CORRECT ANSWER a. only when its in "running" state You are getting a permission error exception when trying to SSH into your Linux Instance a. The security group is misconfigured b. the key is missing permissions chmod 0400 c. the Linux instance is misconfigured - CORRECT ANSWER b. the key is missing permissions chmod 0400 You are getting a network timeout when trying to SSH into your EC2 instance a. your security groups are misconfigured b. your key is missing permissions c. the Linux instance is misconfigured - CORRECT ANSWER a. your security groups are misconfigured Any timeout errors (not just in SSH but also HTTP for example) means a misconfiguration of your security groups When a security group is created, what is the default behavior? a. Allow all traffic inbound and allow all traffic outbound b. Allow all traffic inbound and deny all traffic outbound c. Deny all traffic inbound and allow all traffic outbound d. Deny all traffic inbound and deny all traffic outbound - CORRECT ANSWER c. Deny all traffic inbound and allow all traffic outbound