AWS Certified Solutions Architect - Professional

AWS Certified Solutions Architect - Professional practice questions, page 39 of 41, with answer review and explanations.

Question 191

You have been given the task to define multiple AWS Data Pipeline schedules for different activities in the same pipeline. Which of the following would successfully accomplish this task?

  1. Creating multiple pipeline definition files
  2. Defining multiple pipeline definitions in your schedule objects file and associating the desired schedule to the correct activity via its schedule field
  3. Defining multiple schedule objects in your pipeline definition file and associating the desired schedule to the correct activity via its schedule field
  4. Defining multiple schedule objects in the schedule field

Question 192

In a VPC, can you modify a set of DHCP options after you create them?

  1. Yes, you can modify a set of DHCP options within 48 hours after creation and there are no VPCs associated with them.
  2. Yes, you can modify a set of DHCP options any time after you create them.
  3. No, you can't modify a set of DHCP options after you create them.
  4. Yes, you can modify a set of DHCP options within 24 hours after creation.

Question 193

A bucket owner has allowed another account's IAM users to upload or access objects in his bucket. The IAM user of Account A is trying to access an object created by the IAM user of account B. What will happen in this scenario?

  1. It is not possible to give permission to multiple IAM users
  2. AWS S3 will verify proper rights given by the owner of Account A, the bucket owner as well as by the IAM user B to the object
  3. The bucket policy may not be created as S3 will give error due to conflict of Access Rights
  4. It is not possible that the IAM user of one account accesses objects of the other IAM user

Question 194

Which statement is NOT true about a stack which has been created in a Virtual Private Cloud (VPC) in AWS OpsWorks?

  1. Subnets whose instances cannot communicate with the Internet are referred to as public subnets.
  2. Subnets whose instances can communicate only with other instances in the VPC and cannot communicate directly with the Internet are referred to as private subnets.
  3. All instances in the stack should have access to any package repositories that your operating system depends on, such as the Amazon Linux or Ubuntu Linux repositories.
  4. Your app and custom cookbook repositories should be accessible for all instances in the stack.

Question 195

An organization has hosted an application on the EC2 instances. There will be multiple users connecting to the instance for setup and configuration of application. The organization is planning to implement certain security best practices. Which of the below mentioned pointers will not help the organization achieve better security arrangement?

  1. Allow only IAM users to connect with the EC2 instances with their own secret access key.
  2. Create a procedure to revoke the access rights of the individual user when they are not required to connect to EC2 instance anymore for the purpose of application configuration.
  3. Apply the latest patch of OS and always keep it updated.
  4. Disable the password based login for all the users. All the users should use their own keys to connect with the instance securely.