
NO.1 In the context of IAM roles for Amazon EC2, which of the following NOT true about delegating
permission to make API requests?
A. You can define which accounts or AWS services can assume the role.
B. You cannot create an IAM role.
C. You can specify the role when you launch your instances.
D. You can have the application retrieve a set of temporary credentials and use them.
Answer: B
Explanation:
Amazon designed IAM roles so that your applications can securely make API requests from your
instances, without requiring you to manage the security credentials that the applications use.
Instead of creating and distributing your AWS credentials, you can delegate permission to make API
requests using IAM roles as follows: Create an IAM role. Define which accounts or AWS services can
assume the role. Define which API actions and resources the application can use after assuming the
role. Specify the role when you launch your instances. Have the application retrieve a set of
temporary credentials and use them.
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html
NO.2 AWS _______ supports __________ environments as one of the AWS resource types.
A. CloudFormation; CloudFormation application
B. CloudFormation; Elastic Beanstalk application
C. Elastic Beanstalk ; CloudFormation application
D. Elastic Beanstalk; Elastic Beanstalk application
Answer: B
Explanation:
AWS CloudFormation and AWS Elastic Beanstalk services are designed to complement each other.
AWS CloudFormation supports Elastic Beanstalk application environments as one of the AWS
resource types.
http://aws.amazon.com/cloudformation/faqs/
NO.3 An organization is hosting a scalable web application using AWS. The organization has
configured internet facing ELB and Auto Scaling to make the application scalable. Which of the below
mentioned statements is required to be followed when the application is planning to host a web
application on VPC?
A. The ELB must be in a public subnet of the VPC to face the internet traffic.
B. The ELB must not be in any subnet; instead it should face the internet directly.
C. The ELB can be in a public or a private subnet but should have the ENI which is attached to an
elastic IP.
D. The ELB can be in a public or a private subnet but must have routing tables attached to divert the
internet traffic to it.
Answer: A
Explanation:
The Amazon Virtual Private Cloud (Amazon VPC) allows the user to define a virtual networking
environment in a private, isolated section of the Amazon Web Services (AWS) cloud. The user has
complete control over the virtual networking environment. Within this virtual private cloud, the user
IT Certification Guaranteed, The Easy Way!
2
Instant Download - Best Exam Practice Material - 100% Money Back Guarantee!
Get Latest & Valid Amazon Exam's Question and Answers from Testpdf.net. 2
http://www.testpdf.net/aws-solutions-architect-professional.html