题目 451–500 · 每份 50 题 · 中英对照 · 点选项后按「确认作答」即刻判对错 · 来源：Ditectrev 原创题库（非真题 dump）
A major finance organisation has engaged your company to set up a large data mining application. Using AWS you decide the best service for this is Amazon Elastic MapReduce (EMR) which you know uses Hadoop. Which of the following statements best describes Hadoop?
一家大型金融组织已委托您的公司建立一个大型数据挖掘应用程序。使用 AWS，您决定最好的服务是 Amazon Elastic MapReduce (EMR)，您知道它使用 Hadoop。以下哪项陈述最能描述 Hadoop？
Hadoop is 3rd Party software which can be installed using AMI.
Hadoop 是可以使用 AMI 安装的第 3 方软件。
Hadoop is an open source python web framework.
Hadoop 是一个开源 Python Web 框架。
Hadoop is an open source Java software framework.
Hadoop 是一个开源 Java 软件框架。
Hadoop is an open source javascript framework.
Hadoop 是一个开源 JavaScript 框架。
正确答案 C
A customer has established an AWS Direct Connect connection to AWS. The link is up and routes are being advertised from the customer's end, however the customer is unable to connect from EC2 instances inside its VPC to servers residing in its datacenter. Which of the following options provide a viable solution to remedy this situation? (Choose 2 answers)
客户已与 AWS 建立 AWS Direct Connect 连接。链路已启动，并且正在从客户端通告路由，但是客户无法从其 VPC 内的 EC2 实例连接到驻留在其数据中心的服务器。以下哪一个选项提供了解决这种情况的可行解决方案？ （选择 2 个答案）
Add a route to the route table with an IPsec VPN connection as the target.
将 IPsec VPN 连接作为目标添加到路由表中。
Enable route propagation to the virtual pinnate gateway (VGW).
启用到虚拟羽状网关 (VGW) 的路由传播。
Enable route propagation to the customer gateway (CGW).
启用到客户网关 (CGW) 的路由传播。
Modify the route table of all Instances using the 'route' command.
使用“route”命令修改所有实例的路由表。
Modify the Instances VPC subnet route table by adding a route back to the customer's on-premises environment.
通过添加返回客户本地环境的路由来修改实例 VPC 子网路由表。
正确答案 B, E
While creating a network in the VPC, which of the following is true of a NAT device?
在 VPC 中创建网络时，以下哪项对于 NAT 设备是正确的？
You have to administer the NAT Gateway Service provided by AW
您必须管理 AW 提供的 NAT 网关服务
You can choose to use any of the three kinds of NAT devices offered by AWS for special purposes.
您可以选择使用 AWS 提供的三种 NAT 设备中的任何一种用于特殊用途。
You can use a NAT device to enable instances in a private subnet to connect to the Internet.
您可以使用 NAT 设备使私有子网中的实例能够连接到 Internet。
You are recommended to use AWS NAT instances over NAT gateways, as the instances provide better availability and bandwidth.
建议您通过 NAT 网关使用 AWS NAT 实例，因为这些实例可提供更好的可用性和带宽。
正确答案 B
Which of the following statements is NOT true about using Elastic IP Address (EIP) in EC2-Classic and EC2-VPC platforms?
关于在 EC2-Classic 和 EC2-VPC 平台中使用弹性 IP 地址 (EIP)，以下哪项陈述不正确？
In the EC2-VPC platform, the Elastic IP Address (EIP) does not remain associated with the instance when you stop it.
在 EC2-VPC 平台中，当您停止实例时，弹性 IP 地址 (EIP) 不会保持与实例的关联。
In the EC2-Classic platform, stopping the instance disassociates the Elastic IP Address (EIP) from it.
在 EC2-Classic 平台中，停止实例会解除弹性 IP 地址 (EIP) 与其的关联。
In the EC2-VPC platform, if you have attached a second network interface to an instance, when you disassociate the Elastic IP Address (EIP) from that instance, a new public IP address is not assigned to the instance automatically; you'll have to associate an EIP with it manually.
在 EC2-VPC 平台中，如果您为实例附加了第二个网络接口，当您取消弹性 IP 地址 (EIP) 与该实例的关联时，不会自动为该实例分配新的公有 IP 地址；您必须手动将 EIP 与其关联。
In the EC2-Classic platform, if you disassociate an Elastic IP Address (EIP) from the instance, the instance is automatically assigned a new public IP address within a few minutes.
在 EC2-Classic 平台中，如果您取消弹性 IP 地址 (EIP) 与实例的关联，该实例将在几分钟内自动分配一个新的公共 IP 地址。
正确答案 A
A user has hosted an application on EC2 instances. The EC2 instances are configured with ELB and Auto Scaling. The application server session time out is 2 hours. The user wants to configure connection draining to ensure that all in-flight requests are supported by ELB even though the instance is being deregistered. What time out period should the user specify for connection draining?
用户已在 EC2 实例上托管应用程序。 EC2 实例配置了 ELB 和 Auto Scaling。应用程序服务器会话超时为 2 小时。用户希望配置连接耗尽以确保 ELB 支持所有正在进行的请求，即使实例正在注销也是如此。用户应该为连接耗尽指定多长时间？
1 hour.
1 小时。
30 minutes.
30 分钟。
5 minutes.
5 分钟。
2 hours.
2 小时。
正确答案 A
What does the following command do with respect to the Amazon EC2 security groups? ec2-create-group CreateSecurityGroup
以下命令对 Amazon EC2 安全组有何作用？ ec2-create-group 创建安全组
Groups the user created security groups in to a new group for easy access.
将用户创建的安全组分组到新组中以便于访问。
Creates a new security group for use with your account.
创建一个新的安全组以供您的帐户使用。
Creates a new group inside the security group.
在安全组内创建一个新组。
Creates a new rule inside the security group.
在安全组内创建新规则。
正确答案 B
You are in the process of moving your friend's WordPress site onto AWS to try and save him some money, and you have told him that he should probably also move his domain name. He asks why he can't leave his domain name where it is and just have his infrastructure on AWS. What would be an incorrect response to his question?
您正在将您朋友的 WordPress 网站迁移到 AWS，以尝试为他节省一些钱，并且您已经告诉他，他可能也应该迁移他的域名。他询问为什么不能将域名保留在原来的位置，而将基础设施放在 AWS 上。对他的问题的错误回答是什么？
Route 53 offers low query latency for your end users.
Route 53 为您的最终用户提供低查询延迟。
Route 53 is designed to automatically answer queries from the optimal location depending on network conditions.
Route 53 旨在根据网络条件自动应答来自最佳位置的查询。
The globally distributed nature of AWS's DNS servers helps ensure a consistent ability to route your end users to your application.
AWS DNS 服务器的全球分布式特性有助于确保将最终用户路由到应用程序的能力一致。
Route 53 supports Domain Name System Security Extensions (DNSSEC).
Route 53 支持域名系统安全扩展 (DNSSEC)。
正确答案 D
Which of the following are characteristics of a reserved instance? (Choose 3 answers)
以下哪些是预留实例的特征？ （选择 3 个答案）
It can be migrated across Availability Zones.
它可以跨可用区迁移。
It is specific to an Amazon Machine Image (AMI).
它特定于 Amazon 系统映像 (AMI)。
It can be applied to instances launched by Auto Scaling.
它可以应用于 Auto Scaling 启动的实例。
It is specific to an instance Type.
它特定于实例类型。
It can be used to lower Total Cost of Ownership (TCO) of a system.
它可用于降低系统的总拥有成本 (TCO)。
正确答案 A, D, E
A user has defined an AutoScaling termination policy to first delete the instance with the nearest billing hour. AutoScaling has launched 3 instances in the US-East-1A region and 2 instances in the US-East-1B region. One of the instances in the US-East-1B region is running nearest to the billing hour. Which instance will AutoScaling terminate first while executing the termination action?
用户定义了 AutoScaling 终止策略，首先删除计费时间最近的实例。 AutoScaling 已在 US-East-1A 区域启动了 3 个实例，在 US-East-1B 区域启动了 2 个实例。 US-East-1B 区域中的实例之一正在最接近计费时间运行。执行终止操作时，AutoScaling 将首先终止哪个实例？
Random Instance from US-East-1A.
来自 US-East-1A 的随机实例。
Instance with the nearest billing hour in US-East-1B.
US-East-1B 中计费时间最近的实例。
Instance with the nearest billing hour in US-East-1A.
US-East-1A 中计费时间最近的实例。
Random instance from US-East-1B.
来自 US-East-1B 的随机实例。
正确答案 C
You have an environment that consists of a public subnet using Amazon VPC and 3 instances that are running in this subnet. These three instances can successfully communicate with other hosts on the Internet. You launch a fourth instance in the same subnet, using the same AMI and security group configuration you used for the others, but find that this instance cannot be accessed from the internet. What should you do to enable Internet access?
您的环境由使用 Amazon VPC 的公有子网和在此子网中运行的 3 个实例组成。这三个实例都可以与 Internet 上的其他主机成功通信。您在同一子网中启动第四个实例，使用与其他实例相同的 AMI 和安全组配置，但发现无法从 Internet 访问该实例。您应该怎样做才能访问互联网？
Deploy a NAT instance into the public subnet.
将 NAT 实例部署到公有子网中。
Assign an Elastic IP address to the fourth instance.
为第四个实例分配弹性 IP 地址。
Configure a publically routable IP Address in the host OS of the fourth instance.
在第四个实例的主机操作系统中配置可公开路由的 IP 地址。
Modify the routing table for the public subnet.
修改公有子网的路由表。
正确答案 B
What does the 'Server Side Encryption' option on Amazon S3 provide?
Amazon S3 上的“服务器端加密”选项提供什么？
It provides an encrypted virtual disk in the Cloud.
它在云中提供加密的虚拟磁盘。
It doesn't exist for Amazon S3, but only for Amazon EC2.
对于 Amazon S3 不存在，仅对于 Amazon EC2 存在。
It encrypts the files that you send to Amazon S3, on the server side.
它会在服务器端加密您发送到 Amazon S3 的文件。
It allows to upload fi les using an SSL endpoint, for a secure transfer.
它允许使用 SSL 端点上传文件，以实现安全传输。
正确答案 A
What is a placement group?
什么是安置组？
A collection of Auto Scaling groups in the same region.
同一区域中的 Auto Scaling 组的集合。
A feature that enables EC2 instances to interact with each other via high bandwidth, low latency connections.
该功能使 EC2 实例能够通过高带宽、低延迟连接相互交互。
A collection of authorized CloudFront edge locations for a distribution.
分配的授权 CloudFront 边缘站点的集合。
A collection of Elastic Load Balancers in the same Region or Availability Zone.
同一区域或可用区中的 Elastic Load Balancer 的集合。
正确答案 B
You are checking the workload on some of your General Purpose (SSD) and Provisioned IOPS (SSD) volumes and it seems that the I/O latency is higher than you require. You should probably check the [...] to make sure that your application is not trying to drive more IOPS than you have provisioned.
您正在检查某些通用 (SSD) 和预配置 IOPS (SSD) 卷上的工作负载，发现 I/O 延迟似乎高于您的要求。您可能应该检查 [...] 以确保您的应用程序不会尝试驱动比您配置的更多的 IOPS。
amount of IOPS that are available.
可用的 IOPS 量。
acknowledgement from the storage subsystem.
来自存储子系统的确认。
average queue length.
平均队列长度。
time it takes for the I/O operation to complete.
I/O 操作完成所需的时间。
正确答案 C
Within the IAM service a GROUP is regarded as a:
在 IAM 服务中，GROUP 被视为：
A collection of AWS accounts.
AWS 账户的集合。
It's the group of EC2 machines that gain t he permissions specified in the GROUP.
它是获得 GROUP 中指定权限的 EC2 机器组。
There's no GROUP in IAM, but only USERS and RESOURCES.
IAM 中没有组，只有用户和资源。
A collection of users.
用户的集合。
正确答案 D
Doug has created a VPC with CIDR 10.201.0.0/16 in his AWS account. In this VPC he has created a public subnet with CIDR block 10.201.31.0/24. While launching a new EC2 from the console, he is not able to assign the private IP address 10.201.31.6 to this instance. Which is the most likely reason for this issue?
Doug 在他的 AWS 账户中创建了一个 CIDR 10.201.0.0/16 的 VPC。在此 VPC 中，他创建了一个 CIDR 块为 10.201.31.0/24 的公有子网。从控制台启动新的 EC2 时，他无法将私有 IP 地址 10.201.31.6 分配给该实例。此问题最可能的原因是什么？
Private IP address 10.201.31.6 is blocked via ACLs in Amazon infrastructure as a part of platform security.
作为平台安全的一部分，私有 IP 地址 10.201.31.6 通过 Amazon 基础设施中的 ACL 进行阻止。
Private address IP 10.201.31.6 is currently assigned to another interface.
私有地址 IP 10.201.31.6 当前已分配给另一个接口。
Private IP address 10.201.31.6 is not part of the associated subnet's IP address range.
专用 IP 地址 10.201.31.6 不属于关联子网的 IP 地址范围。
Private IP address 10.201.31.6 is reserved by Amazon for IP networking purposes.
私有 IP 地址 10.201.31.6 是 Amazon 保留用于 IP 网络目的的。
正确答案 B
A user is planning to make a mobile game which can be played online or offline and will be hosted on EC2. The user wants to ensure that if someone breaks the highest score or they achieve some milestone they can inform all their colleagues through email. Which of the below mentioned AWS services helps achieve this goal?
用户计划制作一款可以在线或离线玩的移动游戏，并将托管在 EC2 上。用户希望确保如果有人突破最高分或达到某个里程碑，他们可以通过电子邮件通知所有同事。下面提到的哪些 AWS 服务有助于实现此目标？
AWS Simple Workflow Service.
AWS 简单工作流服务。
AWS Simple Email Service.
AWS 简单电子邮件服务。
Amazon Cognito.
Amazon Cognito。
AWS Simple Queue Service.
AWS 简单队列服务。
正确答案 B
Is creating a Read Replica of another Read Replica supported?
是否支持创建另一个只读副本的只读副本？
Only in VPC.
仅在 VPC 中。
Yes.
是的。
Only in certain regions.
仅在某些地区。
No.
不。
正确答案 D
Which of the following is NOT a characteristic of Amazon Elastic Compute Cloud (Amazon EC2)?
以下哪一项不是 Amazon Elastic Compute Cloud (Amazon EC2) 的特征？
It can be used to launch as many or as few virtual servers as you need.
它可用于根据您的需要启动任意数量的虚拟服务器。
It increases the need to forecast traffic by providing dynamic IP addresses for static cloud computing.
它通过为静态云计算提供动态 IP 地址来增加预测流量的需求。
It eliminates your need to invest in hardware up front, so you can develop and deploy applications faster.
它消除了您预先投资硬件的需要，因此您可以更快地开发和部署应用程序。
It offers scalable computing capacity in the Amazon Web Services (AWS) cloud.
它在 Amazon Web Services (AWS) 云中提供可扩展的计算能力。
正确答案 B
A user has launched one EC2 instance in the US East region and one in the US West region. The user has launched an RDS instance in the US East region. How can the user configure access from both the EC2 instances to RDS?
用户在美国东部区域启动了一个 EC2 实例，在美国西部区域启动了一个 EC2 实例。用户已在美国东部地区启动 RDS 实例。用户如何配置从两个 EC2 实例到 RDS 的访问？
It is not possible to access RDS of the US East region from the US West region.
无法从美国西部区域访问美国东部区域的 RDS。
Configure the US West region's security group to allow a request from the US East region's instance and configure the RDS security group's ingress rule for the US East EC2 group.
配置美国西部区域的安全组以允许来自美国东部区域实例的请求，并为美国东部 EC2 组配置 RDS 安全组的入口规则。
Configure the security group of the US East region to allow traffic from the US West region's instance and configure the RDS security group's ingress rule for the US East EC2 group.
配置美国东部区域的安全组以允许来自美国西部区域实例的流量，并为美国东部 EC2 组配置 RDS 安全组的入口规则。
Configure the security group of both instances in the ingress rule of the RDS security group.
在 RDS 安全组的入口规则中配置两个实例的安全组。
正确答案 C
What happens to the I/O operations while you take a database snapshot?
拍摄数据库快照时，I/O 操作会发生什么情况？
I/O operations to the database are suspended for an hour while the backup is in progress.
备份过程中，数据库的 I/O 操作将暂停一小时。
I/O operations to the database are sent to a Replica (if available) for a few minutes while the backup is in progress.
在备份过程中，对数据库的 I/O 操作将被发送到副本（如果可用）几分钟。
I/O operations will be functioning normally.
I/O 操作将正常运行。
I/O operations to the database are suspended for a few minutes while the backup is in progress.
备份过程中，对数据库的 I/O 操作会暂停几分钟。
正确答案 D
When an EC2 EBS-backed (EBS root) instance is stopped, what happens to the data on any ephemeral store volumes?
当 EC2 EBS 支持的（EBS 根）实例停止时，任何临时存储卷上的数据会发生什么情况？
Data is automatically saved in an EBS volume.
数据自动保存在 EBS 卷中。
Data is unavailable until the instance is restarted.
在实例重新启动之前，数据不可用。
Data will be deleted and will no longer be accessible.
数据将被删除并且将无法再访问。
Data is automatically saved as an EBS snapshot.
数据自动保存为 EBS 快照。
正确答案 B
[...] is a durable, block-level storage volume that you can attach to a single, running Amazon EC2 instance.
[...] 是一个持久的块级存储卷，您可以将其附加到单个正在运行的 Amazon EC2 实例。
Amazon S3.
Amazon S3。
Amazon EBS.
Amazon EBS。
None of these.
这些都没有。
All of these.
所有这些。
正确答案 B
A favored client needs you to quickly deploy a database that is a relational database service with minimal administration as he wants to spend the least amount of time administering it. Which database would be the best option?
受青睐的客户需要您以最少的管理快速部署一个关系数据库服务数据库，因为他希望花费最少的时间来管理它。哪个数据库是最佳选择？
Amazon SimpleDB.
亚马逊简单数据库。
Your choice of relational AMIs on Amazon EC2 and EB.
您在 Amazon EC2 和 EB 上选择的关系 AMI。
Amazon RDS.
Amazon RDS。
Amazon Redshift.
Amazon Redshift。
正确答案 C
You have a number of image files to encode. In an Amazon SQS worker queue, you create an Amazon SQS message for each file specifying the command (jpeg-encode) and the location of the file in Amazon S3. Which of the following statements best describes the functionality of Amazon SQS?
您有许多图像文件需要编码。在 Amazon SQS 工作队列中，您为每个文件创建一条 Amazon SQS 消息，指定命令 (jpeg-encode) 以及文件在 Amazon S3 中的位置。以下哪项陈述最准确地描述了 Amazon SQS 的功能？
Amazon SQS is a distributed queuing system that is optimized for horizontal scalability, not for single-threaded sending or receiving speeds.
Amazon SQS 是一个分布式排队系统，针对水平可扩展性进行了优化，而不是针对单线程发送或接收速度。
Amazon SQS is for single-threaded sending or receiving speeds.
Amazon SQS 用于单线程发送或接收速度。
Amazon SQS is a non-distributed queuing system.
Amazon SQS 是一个非分布式排队系统。
Amazon SQS is a distributed queuing system that is optimized for vertical scalability and for single-threaded sending or receiving speeds.
Amazon SQS 是一种分布式排队系统，针对垂直可扩展性和单线程发送或接收速度进行了优化。
正确答案 A
While creating an Amazon RDS DB, your first task is to set up a DB [...] that controls what IP addresses or EC2 instances have access to your DB Instance.
创建 Amazon RDS 数据库时，您的首要任务是设置一个数据库 [...] 来控制哪些 IP 地址或 EC2 实例可以访问您的数据库实例。
Security Pool.
安全池。
Secure Zone.
安全区。
Security Token Pool.
安全令牌池。
Security Group.
安全组。
正确答案 D
After launching an instance that you intend to serve as a NAT (Network Address Translation) device in a public subnet you modify your route tables to have the NAT device be the target of internet bound traffic of your private subnet. When you try and make an outbound connection to the internet from an instance in the private subnet, you are not successful. Which of the following steps could resolve the issue?
启动要在公有子网中充当 NAT（网络地址转换）设备的实例后，您可以修改路由表，使 NAT 设备成为私有子网的 Internet 绑定流量的目标。当您尝试从私有子网中的实例建立到 Internet 的出站连接时，您不会成功。以下哪一个步骤可以解决该问题？
Disabling the Source/Destination Check attribute on the NAT instance.
禁用 NAT 实例上的源/目标检查属性。
Attaching an Elastic IP address to the instance in the private subnet.
将弹性 IP 地址附加到私有子网中的实例。
Attaching a second Elastic Network Interface (EN I) to the NAT instance, and placing it in the private subnet.
将第二个弹性网络接口 (EN I) 连接到 NAT 实例，并将其放置在私有子网中。
Attaching a second Elastic Network Interface (ENI) to the instance in the private subnet, and placing it in the public subnet.
将第二个弹性网络接口 (ENI) 连接到私有子网中的实例，并将其放置在公有子网中。
正确答案 A
Which of the following would you use to list your AWS Import/Export jobs?
您会使用以下哪项来列出您的 AWS Import/Export 作业？
Amazon RDS.
Amazon RDS。
AWS Import/Export Web Service Tool.
AWS 导入/导出 Web 服务工具。
Amazon S3 REST API.
Amazon S3 REST API。
AWS Elastic Beanstalk.
AWS Elastic Beanstalk。
正确答案 C
Company B is launching a new game app for mobile devices. Users will log into the game using their existing social media account to streamline data capture. Company B would like to directly save player data and scoring information from the mobile app to a DynamoDB table named Score Data. When a user saves their game, the progress data will be stored to the Game State S3 bucket. What is the best approach for storing data to DynamoDB and S3?
B 公司正在推出一款适用于移动设备的新游戏应用程序。用户将使用现有的社交媒体帐户登录游戏以简化数据捕获。 B 公司希望将移动应用程序中的玩家数据和得分信息直接保存到名为 Score Data 的 DynamoDB 表中。当用户保存游戏时，进度数据将存储到 Game State S3 存储桶中。将数据存储到 DynamoDB 和 S3 的最佳方法是什么？
Use an EC2 Instance that is launched with an EC2 role providing access to the Score Data DynamoDB table and the GameState S3 bucket that communicates with the mobile app via web services.
使用通过 EC2 角色启动的 EC2 实例，提供对分数数据 DynamoDB 表和通过 Web 服务与移动应用程序通信的 GameState S3 存储桶的访问。
Use temporary security credentials that assume a role providing access to the Score Data DynamoDB table and the Game State S3 bucket using web identity federation.
使用临时安全凭证来承担通过 Web 身份联合提供对分数数据 DynamoDB 表和游戏状态 S3 存储桶的访问的角色。
Use Login with Amazon allowing users to sign in with an Amazon account providing the mobile app with access to the Score Data DynamoDB table and the Game State S3 bucket.
使用“通过 Amazon 登录”，允许用户使用 Amazon 帐户登录，为移动应用程序提供对分数数据 DynamoDB 表和游戏状态 S3 存储桶的访问权限。
Use an IAM user with access credentials assigned a role providing access to the Score Data DynamoDB table and the Game State S3 bucket for distribution with the mobile app.
使用分配了角色的访问凭证的 IAM 用户，提供对分数数据 DynamoDB 表和游戏状态 S3 存储桶的访问权限，以便通过移动应用程序进行分发。
正确答案 B
If your DB instance runs out of storage space or file system resources, its status will change to [...] and your DB Instance will no longer be available.
如果您的数据库实例耗尽存储空间或文件系统资源，其状态将更改为 [...]，并且您的数据库实例将不再可用。
storage-overflow.
存储溢出。
storage-full.
存储已满。
storage-exceed.
存储超出。
storage-overage.
存储过剩。
正确答案 B
Your application is using an ELB in front of an Auto Scaling group of web/application servers deployed across two AZs and a Multi-AZ RDS Instance for data persistence. The database CPU is often above 80% usage and 90% of I/O operations on the database are reads. To improve performance you recently added a single-node Memcached ElastiCache Cluster to cache frequent DB query results. In the next weeks the overall workload is expected to grow by 30%. Do you need to change anything in the architecture to maintain the high availability of the application with the anticipated additional load? Why?
您的应用程序在跨两个可用区部署的 Web/应用程序服务器 Auto Scaling 组前面使用 ELB 和多可用区 RDS 实例来实现数据持久性。数据库 CPU 使用率经常在 80%以上，数据库上 90%的 I/O 操作都是读取。为了提高性能，您最近添加了单节点 Memcached ElastiCache 集群来缓存频繁的数据库查询结果。未来几周，总体工作量预计将增长 30%。您是否需要更改架构中的任何内容以在预期的额外负载下维持应用程序的高可用性？为什么？
Yes, you should deploy two Memcached ElastiCache Clusters in different AZs because the RDS instance will not be able to handle the load if the cache node fails.
是的，您应该在不同的可用区部署两个 Memcached ElastiCache 集群，因为如果缓存节点发生故障，RDS 实例将无法处理负载。
No, if the cache node fails you can always get the same data from the DB without having any availability impact.
不会，如果缓存节点发生故障，您始终可以从数据库获取相同的数据，而不会影响可用性。
No, if the cache node fails the automated ElastiCache node recovery feature will prevent any availability impact.
不会，如果缓存节点出现故障，自动 ElastiCache 节点恢复功能将防止任何可用性影响。
Yes, you should deploy the Memcached ElastiCache Cluster with two nodes in the same AZ as the RDS DB master instance to handle the load if one cache node fails.
是的，您应该部署 Memcached ElastiCache 集群，其中两个节点与 RDS 数据库主实例位于同一可用区，以便在一个缓存节点出现故障时处理负载。
正确答案 A
How many Elastic IP by default in Amazon Account?
亚马逊账户默认有多少个弹性 IP？
1 Elastic IP.
1 个弹性 IP。
3 Elastic IP.
3 弹性 IP。
5 Elastic IP.
5 弹性 IP。
0 Elastic IP.
0 弹性 IP。
正确答案 D
What would be the best way to retrieve the public IP address of your EC2 instance using the CLI?
使用 CLI 检索 EC2 实例的公共 IP 地址的最佳方法是什么？
Using tags.
使用标签。
Using traceroute.
使用跟踪路由。
Using ipconfig.
使用 ipconfig。
Using instance metadata.
使用实例元数据。
正确答案 D
A company is building a two-tier web application to serve dynamic transaction-based content. The data tier is leveraging an Online Transactional Processing (OLTP) database. What services should you leverage to enable an elastic and scalable web tier?
一家公司正在构建一个两层 Web 应用程序来提供基于动态事务的内容。数据层利用在线事务处理（OLTP）数据库。您应该利用哪些服务来实现弹性且可扩展的 Web 层？
Elastic Load Balancing, Amazon EC2, and Auto Scaling.
弹性负载平衡、Amazon EC2 和自动扩展。
Elastic Load Balancing, Amazon RDS with Multi-AZ, and Amazon S3.
弹性负载均衡、具有多可用区的 Amazon RDS 和 Amazon S3。
Amazon RDS with Multi-AZ and Auto Scaling.
Amazon RDS 具有多可用区和自动缩放功能。
Amazon EC2, Amazon DynamoDB, and Amazon S3.
Amazon EC2、Amazon DynamoDB 和 Amazon S3。
正确答案 A
You are designing a connectivity solution between on-premises infrastructure and Amazon VPC. Your servers on-premises will be communicating with your VPC instances. You will be establishing IPSec tunnels over the internet. You will be using VPN gateways and terminating the IPsec tunnels on AWS supported customer gateways. Which of the following objectives would you achieve by implementing an IPSec tunnel as outlined above? (Choose 4 answers)
您正在设计本地基础设施和 Amazon VPC 之间的连接解决方案。您的本地服务器将与您的 VPC 实例进行通信。您将通过互联网建立 IPSec 隧道。您将使用 VPN 网关并终止 AWS Supported 客户网关上的 IPsec 隧道。通过实施如上所述的 IPSec 隧道，您可以实现以下哪些目标？ （选择 4 个答案）
End-to-end protection of data in transit.
传输中数据的端到端保护。
End-to-end Identity authentication.
端到端身份认证。
Data encryption across the Internet.
互联网上的数据加密。
Protection of data in transit over the Internet.
保护通过互联网传输的数据。
Peer identity authentication between VPN gateway and customer gateway.
VPN 网关与客户网关之间的对等身份认证。
Data integrity protection across the Internet.
互联网上的数据完整性保护。
正确答案 C, D, E, F
You have been storing massive amounts of data on Amazon Glacier for the past 2 years and now start to wonder if there are any limitations on this. What is the correct answer to your question?
过去 2 年里，您一直在 Amazon Glacier 上存储大量数据，现在开始怀疑这是否有任何限制。您的问题的正确答案是什么？
The total volume of data is limited but the number of archives you can store are unlimited.
数据总量是有限的，但您可以存储的档案数量是无限的。
The total volume of data is unlimited but the number of archives you can store are limited.
数据总量是无限的，但可以存储的档案数量是有限的。
The total volume of data and number of archives you can store are unlimited.
您可以存储的数据总量和档案数量是无限的。
The total volume of data is limited and the number of archives you can store are limited.
数据总量是有限的，您可以存储的档案数量也是有限的。
正确答案 C
How are the EBS snapshots saved on Amazon S3?
Amazon S3 上的 EBS 快照如何保存？
Exponentially.
呈指数级增长。
Incrementally.
逐渐地。
EBS snapshots are not stored in the Amazon S3.
EBS 快照不存储在 Amazon S3 中。
Decrementally.
递减。
正确答案 B
An online gaming site asked you if you can deploy a database that is a fast, highly scalable NoSQL database service in AWS for a new site that he wants to build. Which database should you recommend?
一个在线游戏网站询问您是否可以为他想要构建的新网站部署一个数据库，该数据库是 AWS 中快速、高度可扩展的 NoSQL 数据库服务。您应该推荐哪个数据库？
Amazon DynamoDB.
Amazon DynamoDB。
Amazon RDS.
Amazon RDS。
Amazon Redshift.
Amazon Redshift。
Amazon SimpleDB.
亚马逊简单数据库。
正确答案 A
You have three Amazon EC2 instances with Elastic IP addresses in the US East (Virginia) region, and you want to distribute requests across all three IPs evenly for users for whom US East (Virginia) is the appropriate region. How many EC2 instances would be sufficient to distribute requests in other regions?
您在美国东部（弗吉尼亚）区域拥有三个具有弹性 IP 地址的 Amazon EC2 实例，并且您希望为美国东部（弗吉尼亚）作为适当区域的用户在所有三个 IP 之间均匀分配请求。多少个 EC2 实例足以在其他区域分发请求？
3.
3.
9.
9.
2.
2.
1.
1.
正确答案 D
You are the new IT architect in a company that operates a mobile sleep tracking application. When activated at night, the mobile app is sending collected data points of 1 kilobyte every 5 minutes to your backend. The backend takes care of authenticating the user and writing the data points into an Amazon DynamoDB table. Every morning, you scan the table to extract and aggregate last night's data on a per user basis, and store the results in Amazon S3. Users are notified via Amazon SNS mobile push notifications that new data is available, which is parsed and visualized by the mobile app. Currently you have around 100k users who are mostly based out of North America. You have been tasked to optimize the architecture of the backend system to lower cost. What would you recommend? (Choose 2 answers)
您是一家运营移动睡眠跟踪应用程序的公司的新 IT 架构师。在夜间激活时，移动应用程序每 5 分钟将收集的 1 KB 数据点发送到您的后端。后端负责对用户进行身份验证并将数据点写入 Amazon DynamoDB 表中。每天早上，您扫描表以按用户提取和聚合昨晚的数据，并将结果存储在 Amazon S3 中。通过 Amazon SNS 移动推送通知用户收到新数据可用的通知，这些数据由移动应用程序解析和可视化。目前，您拥有大约 10 万用户，其中大部分来自北美。您的任务是优化后端系统的架构以降低成本。你会推荐什么？ （选择 2 个答案）
Create a new Amazon DynamoDB table each day and drop the one for the previous day after its data is on Amazon S3.
每天创建一个新的 Amazon DynamoDB 表，并在其数据位于 Amazon S3 上后删除前一天的表。
Have the mobile app access Amazon DynamoDB directly instead of JSON files stored on Amazon S3.
让移动应用程序直接访问 Amazon DynamoDB，而不是存储在 Amazon S3 上的 JSON 文件。
Introduce an Amazon SQS queue to buffer writes to the Amazon DynamoDB table and reduce provisioned write throughput.
引入 Amazon SQS 队列来缓冲对 Amazon DynamoDB 表的写入并减少预配置的写入吞吐量。
Introduce Amazon Elasticache to cache reads from the Amazon DynamoDB table and reduce provisioned read throughput.
引入 Amazon ElastiCache 来缓存 Amazon DynamoDB 表的读取并减少预配置的读取吞吐量。
Write data directly into an Amazon Redshift cluster replacing both Amazon DynamoDB and Amazon S3.
将数据直接写入 Amazon Redshift 集群，替换 Amazon DynamoDB 和 Amazon S3。
正确答案 A, C
You are implementing a URL whitelisting system for a company that wants to restrict outbound HTTPS connections to specific domains from their EC2-hosted applications. You deploy a single EC2 instance running proxy software and configure it to accept traffic from all subnets and EC2 instances in the VPC. You configure the proxy to only pass through traffic to domains that you define in its whitelist configuration. You have a nightly maintenance window of 10 minutes where all instances fetch new software updates. Each update is about 200MB in size and there are 500 instances in the VPC that routinely fetch updates. After a few days you notice that some machines are failing to successfully download some, but not all of their updates within the maintenance window. The download URLs used for these updates are correctly listed in the proxy's whitelist configuration and you are able to access them manually using a web browser on the instances. What might be happening? (Choose 2 answers)
您正在为一家公司实施 URL 白名单系统，该公司希望限制从其 EC2 托管应用程序到特定域的出站 HTTPS 连接。您部署一个运行代理软件的 EC2 实例，并将其配置为接受来自 VPC 中所有子网和 EC2 实例的流量。您将代理配置为仅将流量传递到您在其白名单配置中定义的域。您有一个 10 分钟的夜间维护窗口，所有实例都会获取新的软件更新。每个更新的大小约为 200MB，VPC 中有 500 个实例定期获取更新。几天后，您注意到某些计算机无法在维护时段内成功下载部分更新，但并非全部更新。用于这些更新的下载 URL 已正确列在代理的白名单配置中，您可以使用实例上的 Web 浏览器手动访问它们。可能会发生什么？ （选择 2 个答案）
You are running the proxy on an undersized EC2 instance type so network throughput is not sufficient for all instances to download their updates in time.
您在规模较小的 EC2 实例类型上运行代理，因此网络吞吐量不足以让所有实例及时下载其更新。
You are running the proxy on a sufficiently-sized EC2 instance in a private subnet and its network throughput is being throttled by a NAT running on an undersized EC2 instance.
您在私有子网中的足够大小的 EC2 实例上运行代理，并且其网络吞吐量受到在较小的 EC2 实例上运行的 NAT 的限制。
The route table for the subnets containing the affected EC2 instances is not configured to direct network traffic for the software update locations to the proxy.
包含受影响的 EC2 实例的子网的路由表未配置为将软件更新位置的网络流量定向到代理。
You have not allocated enough storage to the EC2 instance running the proxy so the network buffer is filling up, causing some requests to fail.
您没有为运行代理的 EC2 实例分配足够的存储空间，因此网络缓冲区已满，导致某些请求失败。
You are running the proxy in a public subnet but have not allocated enough EIPs to support the needed network throughput through the Internet Gateway (IGW).
您正在公共子网中运行代理，但尚未分配足够的 EIP 来支持通过 Internet 网关 (IGW) 所需的网络吞吐量。
正确答案 A, B
You are playing around with setting up stacks using JSON templates in CloudFormation to try and understand them a little better. You have set up about 5 or 6 but now start to wonder if you are being charged for these stacks. What is AWS's billing policy regarding stack resources?
您正在尝试使用 CloudFormation 中的 JSON 模板设置堆栈，以尝试更好地理解它们。您已经设置了大约 5 或 6 个堆栈，但现在开始怀疑是否需要为这些堆栈付费。 AWS 关于堆栈资源的计费政策是什么？
You are not charged for the stack resources if they are not taking any traffic.
如果堆栈资源不占用任何流量，则您无需支付任何费用。
You are charged for the stack resources for the time they were operating (even if you deleted the stack right away).
您需要为堆栈资源的运行时间付费（即使您立即删除了堆栈）。
You are charged for the stack resources for the time they were operating (but not if you deleted the stack within 60 minutes).
您需要为堆栈资源的运行时间付费（但如果您在 60 分钟内删除堆栈则无需付费）。
You are charged for the stack resources for the time they were operating (but not if you deleted the stack within 30 minutes).
您需要为堆栈资源的运行时间付费（但如果您在 30 分钟内删除堆栈则无需付费）。
正确答案 B
What does Amazon Cloud Formation provide?
亚马逊云形成提供什么？
The ability to setup Autoscaling for Amazon EC2 instances.
能够为 Amazon EC2 实例设置自动缩放。
None of these.
这些都没有。
A templated resource creation for Amazon Web Services.
Amazon Web Services 的模板化资源创建。
A template to map network resources for Amazon Web Services.
用于映射 Amazon Web Services 网络资源的模板。
正确答案 D
You are signed in as root user on your account but there is an Amazon S3 bucket under your account that you cannot access. What is a possible reason for this?
您以根用户身份登录您的账户，但您的账户下有一个您无法访问的 Amazon S3 存储桶。这可能的原因是什么？
An IAM user assigned a bucket policy to an Amazon S3 bucket and didn't specify the root user as a principal
IAM 用户将存储桶策略分配给 Amazon S3 存储桶，但未将根用户指定为委托人
The S3 bucket is full.
S3 存储桶已满。
The S3 bucket has reached the maximum number of objects allowed.
S3 存储桶已达到允许的最大对象数。
You are in the wrong Availability Zone.
您位于错误的可用区。
正确答案 A
When creation of an EBS snapshot is initiated, but not completed, the EBS volume?
当 EBS 快照的创建开始但未完成时，EBS 卷？
Can be used while the snapshot is in progress.
可以在快照正在进行时使用。
Cannot be detached or attached to an EC2 instance until the snapshot completes.
在快照完成之前，无法分离或附加到 EC2 实例。
Can be used in read-only mode while the snapshot is in progress.
快照正在进行时可以在只读模式下使用。
Cannot be used until the snapshot completes.
在快照完成之前无法使用。
正确答案 D
What does Amazon SES stand for?
Amazon SES 代表什么？
Simple Elastic Server.
简单的弹性服务器。
Simple Email Service.
简单的电子邮件服务。
Software Email Solution.
软件电子邮件解决方案。
Software Enabled Server.
软件支持的服务器。
正确答案 B
You receive a bill from AWS but are confused because you see you are incurring different costs for the exact same storage size in different regions on Amazon S3. You ask AWS why this is so. What response would you expect to receive from AWS?
您收到来自 AWS 的账单，但感到困惑，因为您发现 Amazon S3 上不同区域的完全相同的存储大小产生了不同的成本。你问 AWS 为什么会这样。您希望从 AWS 收到什么回应？
We charge less in different time zones.
我们在不同时区的收费较低。
We charge less where our costs are less.
我们的成本越低，我们的收费就越低。
This will balance out next bill.
这将平衡下一个账单。
It must be a mistake.
这一定是一个错误。
正确答案 B
Disabling automated backups [...] disable the point-in-time recovery.
禁用自动备份[...]会禁用时间点恢复。
if configured to can.
如果配置为可以。
will never.
永远不会。
will.
将要。
正确答案 C
A user has launched a large EBS backed EC2 instance in the US-East-1a region. The user wants to achieve Disaster Recovery (DR) for that instance by creating another small instance in Europe. How can the user achieve DR?
用户在 US-East-1a 区域启动了一个大型 EBS 支持的 EC2 实例。用户希望通过在欧洲创建另一个小型实例来实现该实例的灾难恢复 (DR)。用户如何实现容灾？
Copy the instance from the US East region to the EU region.
将实例从美国东部区域复制到欧盟区域。
Use the 'Launch more like this' option to copy the instance from one region to another.
使用“启动更多这样的”选项将实例从一个区域复制到另一个区域。
Copy the running instance using the 'Instance Copy' command to the EU region.
使用“实例复制”命令将正在运行的实例复制到欧盟区域。
Create an AMI of the instance and copy the AMI to the EU region. Then launch the instance from the EU AMI.
创建实例的 AMI 并将 AMI 复制到 EU 区域。然后从 EU AMI 启动实例。
正确答案 D
How many relational database engines does RDS currently support?
RDS 目前支持多少种关系数据库引擎？
Three: MySQL, Oracle and Microsoft SQL Server.
三：MySQL、Oracle 和 Microsoft SQL Server。
Just two: MySQL and Oracle.
只有两个：MySQL 和 Oracle。
Five: MySQL, PostgreSQL, MongoDB, Cassandra and SQLite.
五：MySQL、PostgreSQL、MongoDB、Cassandra 和 SQLite。
Eight: Amazon Aurora PostgreSQL-Compatible Edition, Amazon Aurora MySQL-Compatible Edition, RDS for PostgreSQL, RDS for MySQL, RDS for MariaDB, RDS for SQL Server, RDS for Oracle, and RDS for Db2.
八：Amazon Aurora PostgreSQL 兼容版、Amazon Aurora MySQL 兼容版、RDS for PostgreSQL、RDS for MySQL、RDS for MariaDB、RDS for SQL Server、RDS for Oracle、RDS for Db2。
正确答案 D
Are you able to integrate a multi-factor token service with the AWS Platform?
您能否将多因素令牌服务与 AWS 平台集成？
Yes, you can integrate private multi-factor token devices to authenticate users to the AWS platform.
是的，您可以集成私有多因素令牌设备来对 AWS 平台的用户进行身份验证。
No, you cannot integrate multi-factor token devices with the AWS platform.
不可以，您无法将多因素令牌设备与 AWS 平台集成。
Yes, using the AWS multi-factor token devices to authenticate users on the AWS platform.
是的，使用 AWS 多重令牌设备对 AWS 平台上的用户进行身份验证。
正确答案 C
| 已作答 | 0 |
| 答对 | 0 |
| 答错 | 0 |
| 未作答 | 0 |
| 用时 | — |