AWS Certified Solutions Architect - Associate (Architecting on AWS) Quiz Questions and Answers

Answer :
  • Set up the notification when the state is Insufficient Data

Explanation :

<p>Amazon CloudWatch alarms watch a single metric over a time period that the user specifies and performs one or more actions based on the value of the metric relative to a given threshold over a number of time periods. The alarm has three states: Alarm, OK and Insufficient data. The Alarm will change to Insufficient Data when any of the three situations arise: when the alarm has just started, when the metric is not available or when enough data is not available for the metric to determine the alarm state. If the user wants to find that RDS is not available, he can setup to receive the notification when the state is in Insufficient data.</p>
Answer :
  • Configure the security group itself as the source and allow traffic on all the protocols and ports

Explanation :

<p>A Virtual Private Cloud (VPC. is a virtual network dedicated to the user&rsquo;s AWS account. AWS provides two features that the user can use to increase security in VPC: security groups and network ACLs. Security groups work at the instance level. If the user is using the default security group, it will have a rule which allows the instances to communicate with other. For a new security group, the user has to specify the rule, add it to define the source as the security group itself, and select all the protocols and ports for that source.</p>
Answer :
  • It will throw a CIDR overlaps error

Explanation :

<p>A Virtual Private Cloud (VPC) is a virtual network dedicated to the user&rsquo;s AWS account. A user can create a subnet with VPC and launch instances inside the subnet. The user can create a subnet with the same size of VPC. However, he cannot create any other subnet since the CIDR of the second subnet will conflict with the first subnet. The user cannot modify the CIDR of a subnet once it is created. Thus, in this case if required, the user has to delete the subnet and create new subnets.</p>
Answer :
  • Configure event notification on the DB security group

Explanation :

<p>Amazon RDS uses the Amazon Simple Notification Service to provide a notification when an Amazon RDSevent occurs. These events can be configured for source categories, such as DB instance, DB securitygroup, DB snapshot and DB parameter group. If the user is subscribed to a Configuration Change categoryfor a DB security group, he will be notified when the DB security group is changed</p>
Answer :
  • Store data in an S3 bucket and enable versioning.

Explanation :

<p><strong>Versioning in S3:</strong></p> <ul> <li>If you delete an object, instead of removing it permanently, Amazon S3 inserts a delete marker, which becomes the current object version. You can always restore the previous version.</li> <li>If you overwrite an object, it results in a new object version in the bucket. You can always restore the previous version.</li> </ul>