AWS Certified Solutions Architect - Professional

AWS Certified Solutions Architect - Professional practice questions, page 37 of 41, with answer review and explanations.

Question 181

ABC has three separate departments and each department has their own AWS accounts. The HR department has created a file sharing site where all the on roll employees' data is uploaded. The Admin department uploads data about the employee presence in the office to their DB hosted in the VPC. The Finance department needs to access data from the HR department to know the on roll employees to calculate the salary based on the number of days that an employee is present in the office. How can ABC setup this scenario?

  1. It is not possible to configure VPC peering since each department has a separate AWS account.
  2. Setup VPC peering for the VPCs of Admin and Finance.
  3. Setup VPC peering for the VPCs of Finance and HR as well as between the VPCs of Finance and Admin.
  4. Setup VPC peering for the VPCs of Admin and HR

Question 182

An organization is undergoing a security audit. The auditor wants to view the AWS VPC configurations as the organization has hosted all the applications in the AWS VPC. The auditor is from a remote place and wants to have access to AWS to view all the VPC records. How can the organization meet the expectations of the auditor without compromising on the security of their AWS infrastructure?

  1. The organization should not accept the request as sharing the credentials means compromising on security.
  2. Create an IAM role which will have read only access to all EC2 services including VPC and assign that role to the auditor.
  3. Create an IAM user who will have read only access to the AWS VPC and share those credentials with the auditor.
  4. The organization should create an IAM user with VPC full access but set a condition that will not allow to modify anything if the request is from any IP other than the organization's data center.

Question 183

What is the maximum length for an instance profile name in AWS IAM?

  1. 512 characters
  2. 128 characters
  3. 1024 characters
  4. 64 characters

Question 184

Cognito Sync is an AWS service that you can use to synchronize user profile data across mobile devices without requiring your own backend. When the device is online, you can synchronize data. If you also set up push sync, what does it allow you to do?

  1. Notify other devices that a user profile is available across multiple devices
  2. Synchronize user profile data with less latency
  3. Notify other devices immediately that an update is available
  4. Synchronize online data faster

Question 185

An organization is planning to create a secure scalable application with AWS VPC and ELB. The organization has two instances already running and each instance has an ENI attached to it in addition to a primary network interface. The primary network interface and additional ENI both have an elastic IP attached to it. If those instances are registered with ELB and the organization wants ELB to send data to a particular EIP of the instance, how can they achieve this?

  1. The organization should ensure that the IP which is required to receive the ELB traffic is attached to a primary network interface.
  2. It is not possible to attach an instance with two ENIs with ELB as it will give an IP conflict error.
  3. The organization should ensure that the IP which is required to receive the ELB traffic is attached to an additional ENI.
  4. It is not possible to send data to a particular IP as ELB will send to any one EIP.