AWS Certified Solutions Architect – Professional SAP-C01 – Question329

Identify a correct statement about the expiration date of the "Letter of Authorization and Connecting Facility Assignment (LOACFA)," which lets you complete the Cross Connect step of setting up your AWS Direct Connect.

A.
If the cross connect is not completed within 90 days, the authority granted by the LOA-CFA expires.
B. If the virtual interface is not created within 72 days, the LOA-CFA becomes outdated.
C. If the cross connect is not completed within a user-defined time, the authority granted by the LOA- CFA expires.
D. If the cross connect is not completed within the specified duration from the appropriate provider, the LOA-CFA expires.

Correct Answer: A

Explanation:

Explanation: An AWS Direct Connect location provides access to AWS in the region it is associated with. You can establish connections with AWS Direct Connect locations in multiple regions, but a connection in one region does not provide connectivity to other regions. Note: If the cross connect is not completed within 90 days, the authority granted by the LOA-CFA expires.
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/Colocatio…

AWS Certified Solutions Architect – Professional SAP-C01 – Question328

After setting an AWS Direct Connect, which of the following cannot be done with an AWS Direct Connect Virtual Interface?

A.
You can exchange traffic between the two ports in the same region connecting to different Virtual Private Gateways (VGWs) if you have more than one virtual interface.
B. You can change the region of your virtual interface.
C. You can delete a virtual interface; if its connection has no other virtual interfaces, you can delete the connection.
D. You can create a hosted virtual interface.

Correct Answer: A

Explanation:

Explanation: You must create a virtual interface to begin using your AWS Direct Connect connection. You can create a public virtual interface to connect to public resources or a private virtual interface to connect to your VPC.
Also, it is possible to configure multiple virtual interfaces on a single AWS Direct Connect connection, and you’ll need one private virtual interface for each VPC to connect to. Each virtual interface needs a VLAN ID, interface IP address, ASN, and BGP key. To use your AWS Direct Connect connection with another AWS account, you can create a hosted virtual interface for that account. These hosted virtual interfaces work the same as standard virtual interfaces and can connect to public resources or a VPC.
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/WorkingWi…

AWS Certified Solutions Architect – Professional SAP-C01 – Question327

An elastic network interface (ENI) is a virtual network interface that you can attach to an instance in a VPC. An ENI can include one public IP address, which can be auto-assigned to the elastic network interface for eth0 when you launch an instance, but only when you_____.

A.
create an elastic network interface for eth1
B. include a MAC address
C. use an existing network interface
D. create an elastic network interface for eth0

Correct Answer: D

Explanation:

Explanation: An elastic network interface (ENI) is defined as a virtual network interface that you can attach to an instance in a VPC and can include one public IP address, which can be auto-assigned to the elastic network interface for eth0 when you launch an instance, but only when you create an elastic network interface for eth0 instead of using an existing network interface.
Reference:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-eni.html

AWS Certified Solutions Architect – Professional SAP-C01 – Question326

You need to develop and run some new applications on AWS and you know that Elastic Beanstalk and CloudFormation can both help as a deployment mechanism for a broad range of AWS resources.
Which of the following is TRUE statements when describing the differences between Elastic Beanstalk and CloudFormation?

A.
AWS Elastic Beanstalk introduces two concepts: The template, a JSON or YAML-format, text- based file
B. Elastic Beanstalk supports AWS CloudFormation application environments as one of the AWS resource types.
C. Elastic Beanstalk automates and simplifies the task of repeatedly and predictably creating groups of related resources that power your applications. CloudFormation does not.
D. You can design and script custom resources in CloudFormation

Correct Answer: D

Explanation:

Explanation: These services are designed to complement each other. AWS Elastic Beanstalk provides an environment to easily deploy and run applications in the cloud. It is integrated with developer tools and provides a one-stop experience for you to manage the lifecycle of your applications. AWS CloudFormation is a convenient provisioning mechanism for a broad range of AWS resources.
It supports the infrastructure needs of many different types of applications such as existing enterprise applications, legacy applications, applications built using a variety of AWS resources and container-based solutions (including those built using AWS Elastic Beanstalk).
AWS CloudFormation supports Elastic Beanstalk application environments as one of the AWS resource types. This allows you, for example, to create and manage an AWS Elastic Beanstalk- hosted application along with an RDS database to store the application data. In addition to RDS instances, any other supported AWS resource can be added to the group as well.
Reference:
https://aws.amazon.com/cloudformation/faqs

AWS Certified Solutions Architect – Professional SAP-C01 – Question325

What is a circular dependency in AWS CloudFormation?

A.
When Nested Stacks depend on each other.
B. When Resources form a Depend On loop.
C. When a Template references an earlier version of itself.
D. When a Template references a region, which references the original Template.

Correct Answer: B

Explanation:

Explanation: To resolve a dependency error, add a Depends On attribute to resources that depend on other resources in your template. In some cases, you must explicitly declare dependencies so that AWS CloudFormation can create or delete resources in the correct order. For example, if you create an Elastic IP and a VPC with an Internet gateway in the same stack, the Elastic IP must depend on the Internet gateway attachment. For additional information, see Depends On Attribute.
Reference:
http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/troub…

AWS Certified Solutions Architect – Professional SAP-C01 – Question324

How can you check the operational validity of your AWS CloudFormation template?

A.
To check the operational validity, you need to attempt to create the stack.
B. There is no way to check the operational validity of your AWS CloudFormation template.
C. To check the operational validity, you need a sandbox or test area for AWS CloudFormation stacks.
D. To check the operational validity, you need to use the aws cloudformation validate-template command.

Correct Answer: A

Explanation:

Explanation: In AWS CloudFormation, to check the operational validity, you need to attempt to create the stack. There is no sandbox or test area for AWS CloudFormation stacks, so you are charged for the resources you create during testing.
Reference:
http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using…

AWS Certified Solutions Architect – Professional SAP-C01 – Question323

True or false: In CloudFormation, you cannot create an Amazon RDS DB instance from a snapshot.

A.
False, you can specify it in attributes
B. False, you can specify it in condition
C. False, you can specify it in resource properties
D. True

Correct Answer: C

Explanation:

Explanation: In AWS CloudFormation, resource properties are additional options that you can specify on a resource. For example, you can specify the DB snapshot property for an Amazon RDS DB instance in order to create a DB instance from a snapshot.
Reference:
http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/conce…

AWS Certified Solutions Architect – Professional SAP-C01 – Question322

True or false: In a CloudFormation template, you can reuse the same logical ID several times to reference the resources in other parts of the template.

A.
True, a logical ID can be used several times to reference the resources in other parts of the template.
B. False, a logical ID must be unique within the template.
C. False, you can mention a resource only once and you cannot reference it in other parts of a template.
D. False, you cannot reference other parts of the template.

Correct Answer: B

Explanation:

Explanation: In AWS CloudFormation, the logical ID must be alphanumeric (A-Za-z0-9) and unique within the template. You use the logical name to reference the resource in other parts of the template.
Reference:
http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/conce…

AWS Certified Solutions Architect – Professional SAP-C01 – Question321

For Amazon EC2 issues, while troubleshooting AWS CloudFormation, you need to view the cloud-init and cfn logs for more information. Identify a directory to which these logs are published.

A.
/var/opt/log/ec2
B. /var/log/lastlog
C. /var/log/
D. /var/log/ec2

Correct Answer: C

Explanation:

Explanation: When you use AWS CloudFormation, you might encounter issues when you create, update, or delete AWS CloudFormation stacks. For Amazon EC2 issues, view the cloud-init and cfn logs. These logs are published on the Amazon EC2 instance in the /var/log/ directory.
These logs capture processes and command outputs while AWS CloudFormation is setting up your instance. For Windows, view the EC2Configure service and cfn logs in %ProgramFiles%AmazonEC2ConfigService and C:cfnlog.
You can also configure your AWS CloudFormation template so that the logs are published to Amazon CloudWatch, which displays logs in the AWS Management Console so you don’t have to connect to your Amazon EC2 instance.
Reference:
http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/troub…

AWS Certified Solutions Architect – Professional SAP-C01 – Question320

AWS CloudFormation ______ are special actions you use in your template to assign values to properties that are not available until runtime.

A.
intrinsic functions
B. properties declarations
C. output functions
D. conditions declarations

Correct Answer: A

Explanation:

Explanation: AWS CloudFormation intrinsic functions are special actions you use in your template to assign values to properties not available until runtime. Each function is declared with a name enclosed in quotation marks (“”), a single colon, and its parameters.
Reference:
http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intri…