AWS Certified Solutions Architect - Professional

AWS Certified Solutions Architect - Professional practice questions, page 28 of 41, with answer review and explanations.

Question 136

A user authenticating with Amazon Cognito will go through a multi-step process to bootstrap their credentials. Amazon Cognito has two different flows for authentication with public providers. Which of the following are the two flows?

  1. Authenticated and non-authenticated
  2. Public and private
  3. Enhanced and basic
  4. Single step and multistep

Question 137

Which of the following is the Amazon Resource Name (ARN) condition operator that can be used within an Identity and Access Management (IAM) policy to check the case-insensitive matching of the ARN?

  1. ArnCheck
  2. ArnMatch
  3. ArnCase
  4. ArnLike

Question 138

An organization is creating a VPC for their application hosting. The organization has created two private subnets in the same AZ and created one subnet in a separate zone. The organization wants to make a HA system with the internal ELB. Which of these statements is true with respect to an internal ELB in this scenario?

  1. ELB can support only one subnet in each availability zone.
  2. ELB does not allow subnet selection; instead it will automatically select all the available subnets of the VPC.
  3. If the user is creating an internal ELB, he should use only private subnets.
  4. ELB can support all the subnets irrespective of their zones.

Question 139

In Amazon ElastiCache, the failure of a single cache node can have an impact on the availability of your application and the load on your back-end database while ElastiCache provisions a replacement for the failed cache node and it get repopulated. Which of the following is a solution to reduce this potential availability impact?

  1. Spread your memory and compute capacity over fewer number of cache nodes, each with smaller capacity.
  2. Spread your memory and compute capacity over a larger number of cache nodes, each with smaller capacity.
  3. Include fewer number of high capacity nodes.
  4. Include a larger number of cache nodes, each with high capacity.

Question 140

MapMySite is setting up a web application in the AWS VPC. The organization has decided to use an AWS RDS instead of using its own DB instance for HA and DR requirements. The organization also wants to secure RDS access. How should the web application be setup with RDS?

  1. Create a VPC with one public and one private subnet. Launch an application instance in the public subnet while RDS is launched in the private subnet.
  2. Setup a public and two private subnets in different AZs within a VPC and create a subnet group. Launch RDS with that subnet group.
  3. Create a network interface and attach two subnets to it. Attach that network interface with RDS while launching a DB instance.
  4. Create two separate VPCs and launch a Web app in one VPC and RDS in a separate VPC and connect them with VPC peering.