AWS Certified Solutions Architect - Professional

AWS Certified Solutions Architect - Professional practice questions, page 26 of 41, with answer review and explanations.

Question 126

An organization is setting a website on the AWS VPC. The organization has blocked a few IPs to avoid a D-DOS attack. How can the organization configure that a request from the above mentioned IPs does not access the application instances?

  1. Create an IAM policy for VPC which has a condition to disallow traffic from that IP address.
  2. Configure a security group at the subnet level which denies traffic from the selected IP.
  3. Configure the security group with the EC2 instance which denies access from that IP address.
  4. Configure an ACL at the subnet which denies the traffic from that IP address.

Question 127

An organization has 4 people in the IT operations team who are responsible to manage the AWS infrastructure. The organization wants to setup that each user will have access to launch and manage an instance in a zone which the other user cannot modify. Which of the below mentioned options is the best solution to set this up?

  1. Create four AWS accounts and give each user access to a separate account.
  2. Create an IAM user and allow them permission to launch an instance of a different sizes only.
  3. Create four IAM users and four VPCs and allow each IAM user to have access to separate VPCs.
  4. Create a VPC with four subnets and allow access to each subnet for the individual IAM user.

Question 128

An organization is planning to host an application on the AWS VPC. The organization wants dedicated instances. However, an AWS consultant advised the organization not to use dedicated instances with VPC as the design has a few limitations. Which of the below mentioned statements is not a limitation of dedicated instances with VPC?

  1. All instances launched with this VPC will always be dedicated instances and the user cannot use a default tenancy model for them.
  2. It does not support the AWS RDS with a dedicated tenancy VPC.
  3. The user cannot use Reserved Instances with a dedicated tenancy model.
  4. The EBS volume will not be on the same tenant hardware as the EC2 instance though the user has configured dedicated tenancy.

Question 129

In which step of using AWS Direct Connect should the user determine the required port speed?

  1. Complete the Cross Connect
  2. Verify Your Virtual Interface
  3. Download Router Configuration
  4. Submit AWS Direct Connect Connection Request

Question 130

In Amazon IAM, what is the maximum length for a role name?

  1. 128 characters
  2. 512 characters
  3. 64 characters
  4. 256 characters