AWS - TEST05, AWS - TEST04, AWS TEST03, AWS-2, AWS - 3, AWS - 4, AWS-FIRST
A user is planning to use EBS for his DB requirement. The user already has an EC2 instance running in the VPC private subnet. How can the user attach the EBS volume to a running instance? A. The user must create EBS within the same VPC and then attach it to a running instance. B. The user can create EBS in the same zone as the subnet of instance and attach that EBS to instance. C. It is not possible to attach an EBS to an instance running in VPC until the instance is stopped. D. The user can specify the same subnet while creating EBS and then attach it to a running instance.
B
A user is running a webserver on EC2. The user wants to receive the SMS when the EC2 instance utilization is above the threshold limit. Which AWS services should the user configure in this case? A. AWS CloudWatch + AWS SES. B. AWS CloudWatch + AWS SNS. C. AWS CloudWatch + AWS SQS. D. AWS EC2 + AWS Cloudwatch.
B
A user is uploading archives to Glacier. The user is trying to understand key Glacier resources. Which of the below mentioned options is not a Glacier resource? A. Notification configuration B. Archive ID C. Job D. Archive
B
A user is using an EBS backed instance. Which of the below mentioned statements is true? A. The user will be charged for volume and instance only when the instance is running B. The user will be charged for the volume even if the instance is stopped C. The user will be charged only for the instance running cost D. The user will not be charged for the volume if the instance is stopped
B
A user plans to use RDS as a managed DB platform. Which of the below mentioned features is not supported by RDS? A. Automated backup B. Automated scaling to manage a higher load C. Automated failure detection and recovery D. Automated software patching
B
A user wants to achieve High Availability with PostgreSQL DB. Which of the below mentioned functionalities helps achieve HA? A. Read Replica B. Multi AZ C. Multi region D. PostgreSQL does not support HA
B
AWSTemplateFormatVersion declaration is required for the template to work inside CloudFormation. Choose an answer from the options below A True B False
B
An Amazon S3 bucket, "myawsbucket" is configured with website hosting in Tokyo region,what is the region-specific website endpoint? Choose an answer from the options below A www.myawsbucket.ap-northeast-1.amazonaws.com B myawsbucket.s3-website-ap-northeast-1.amazonaws.com C myawsbucket.amazonaws.com D myawsbucket.tokyo.amazonaws.com
B
An application stores payroll information nightly in DynamoDB for a large number of employees across hundreds of offices. Item attributes consist of individual name, office identifier, and cumulative daily hours. Managers run reports for ranges of names working in their office. One query is. "Return all Items in this office for names starting with A through E". Which table configuration will result in the lowest impact on provisioned throughput for this query? A. Configure the table to have a hash index on the name attribute, and a range index on the office identifier B. Configure the table to have a range index on the name attribute, and a hash index on the office identifier C. Configure a hash index on the name attribute and no range index D. Configure a hash index on the office Identifier attribute and no range index
B
An item stored in a DynamoDB can contain any number of ___ associated to it. Choose the correct answer from the options below A Arguments B Attributes C Items D Parameters
B
An organization has created multiple components of a single application for compartmentalization. Currently all the components are hosted on a single EC2 instance. Due to security reasons the organization wants to implement two separate SSLs for the separate modules although it is already using VPC. How can the organization achieve this with a single instance? A. Create a VPC instance which will have both the ACL and the security group attached to it and have separate rules for each IP address. B. Create a VPC instance which will have multiple network interfaces with multiple elastic IP addresses. C. You have to launch two instances each in a separate subnet and allow VPC peering for a single IP. D. Create a VPC instance which will have multiple subnets attached to it and each will have a separate IP address.
B
An organization has hosted an application on the EC2 instances. There will be multiple users connecting to the instance for setup and configuration of application. The organization is planning to implement certain security best practices. Which of the below mentioned pointers will not help the organization achieve better security arrangement? A. Apply the latest patch of OS and always keep it updated. B. Allow only IAM users to connect with the EC2 instances with their own secret access key. C. Disable the password based login for all the users. All the users should use their own keys to connect with the instance securely. D. Create a procedure to revoke the access rights of the individual user when they are not required to connect to EC2 instance anymore for the purpose of application configuration.
B
An organization has launched two applications: one for blogging and one for ECM on the same AWS Linux EC2 instance running in the AWS VPC. The organization has attached two private IPs (primary and secondary) to the above mentioned instance. The organization wants the instance OS to recognize the secondary IP address. How can the organization configure this? A. Use the ec2-net-utility package which updates routing tables, uses DHCP to refresh the secondary IP and adds the network interface B. Use the ec2-net-utils package which will configure an additional network interface and update the routing table C. Use the ec2-ip-update package which can configure the network interface as well as update the secondary IP with DHCP D. Use the ec2-ip-utility package which can update the routing tables as well as refresh the secondary IP using DHCP
B
Bob is an IAM user who has access to the EC2 services. Admin is an IAM user who has access to all the AWS services including IAM. Can Bob change his password? A. No, the IAM user can never change the password B. Yes, provided Admin has given Bob access to change his password C. Yes, only from AWS CLI D. Yes, only from the AWS console
B
By default, AWS allows you to have ____ DynamoDB tables per account, per region. Choose the correct answer from the options below A 128 B 256 C 224 D 64
B
By default, what event occurs if your CloudFormation receives an error during creation? Choose a correct answer from the options below A DELETE_IN_PROGRESS B ROLLBACK_IN_PROGRESS C DELETE_COMPLETE D CREATION_IN_PROGRESS
B
Company A has an S3 bucket containing premier content that they intend to make available to only paid subscribers of their website. The S3 bucket currently has default permissions of all objects being private to prevent inadvertent exposure of the premier content to non-paying website visitors. How can Company A provide only paid subscribers the ability to download a premier content file in the S3 bucket? A. Apply a bucket policy that grants anonymous users to download the content from the S3 bucket B. Generate a pre-signed object URL for the premier content file when a paid subscriberrequests a download C. Add a bucket policy that requires Multi-Factor Authentication for requests to access the S3 bucket objects D. Enable server side encryption on the S3 bucket for data protection against the non-paying website visitors
B
How can you secure data at rest on an EBS volume? Choose an answer from the options below A Write the data randomly instead of sequentially. B Use an encrypted file system on top of the EBS volume. C Encrypt the volume using the S3 server-side encryption service. D Create an IAM policy that restricts read and write access to the volume. E Attach the volume to an instance using EC2's SSL interface.
B
If an application is storing hourly log files from thousands of instances from a high traffic web site, which naming scheme would give optimal performance on S3? Choose an answer from the options below A Sequential B HH-DD-MM-YYYY-log_instanceID C YYYY-MM-DD-HH-log_instanceID D instanceID_log-HH-DD-MM-YYYY E instanceID_log-YYYY-MM-DD-HH
B
In DynamoDB, how many tables can an AWS account have per region? Choose the correct answer from the options below. A 126 B 256 C 282 D 255
B
In SQS What does the setting, VisibilityTimeout = 0 have an effect on your message? Choose the correct answer from the options below A Removes the message immediately upon receipt B Makes the message immediately available C Automatically invokes a reprocessing call on your component D None of the above
B
In SQS does long polling cost more than short polling? Choose an answer from the options below A True B False
B
In SWF what are the containers called for segregating application resources. Choose the correct answer from the options below. A Dockers B Domains C Namespaces D Metrics
B
In regard to DynamoDB, which of the following statements is correct? A. An Item should have at least two value sets, a primary key and another attribute. B. An Item can have more than one attributes. C. A primary key should be single-valued. D. An attribute can have one or several other attributes.
B
In regards to Amazon SQS how can you secure the messages in your queues? A. You can't B. Amazon SQS uses either your Access Key ID or an X.509 certificate to authenticate your identity C. Through your IAM access keys D. Don't use root access
B
Regarding Amazon SQS, what happens if there is no activity against a queue for more than 30 consecutive days? A. Your account will be suspended B. The queue may be deleted C. Nothing D. The queue will be deleted
B
Regarding Amazon SWF, the coordination logic in a workflow is contained in a software program called a ____. A. Handler B. Decider C. Cordinator D. Worker
B
S3 Bucket ownership is transferable. Choose a correct answer from the options below A True B False
B
S3 does not generally handle error codes with HTTP responses. Choose the correct answer from the options below A True B False
B
SQS provides a timeout which is a period of time during which Amazon SQS prevents other consuming components from receiving and processing. What is this time period called? A Component Timeout B Visibility Timeout C Processing Timeout D Receiving Timeout
B
The only SNS notification event supported by S3 is S3:ReducedRedundancyLostObject. Choose the correct answer from the options below A True B False
B
To scale up the AWS resources using manual AutoScaling, which of the below mentioned parameters should the user change? A. Maximum capacity B. Desired capacity C. Preferred capacity D. Current capacity
B
What HTTP response code indicates that an AWS REST API call was successful. Choose an answer from the options below A 300 B 200 C 404 D 0 E 201
B
What happens, by default, when one of the resources in a CloudFormation stack cannot be created? A. Previously-created resources are kept but the stack creation terminates. B. Previously-created resources are deleted and the stack creation terminates. C. The stack creation continues, and the final results indicate which steps failed. D. CloudFormation templates are parsed in advance so stack creation is guaranteed to succeed.
B
What is one key difference between an Amazon EBS-backed and an instance-store backed instance? A. Virtual Private Cloud requires EBS backed instances. B. Amazon EBS-backed instances can be stopped and restarted. C. Auto scaling requires using Amazon EBS-backed instances. D. Instance-store backed instances can be stopped and restarted.
B
What is the maximum size of an S3 object? Choose an answer from the options below A 5GB B 5TB C 1TB D 500MB
B
What item operation allows the retrieval of multiple items from a DynamoDB table in a single API call? A. GetItem B. BatchGetItem C. GetMultipleItems D. GetItemRange
B
What item operation allows the retrieval of multiple items from a DynamoDB table in a single API call? Choose an answer from the options below A GetItem B BatchGetItem C GetMultipleItems D GetItemRange
B
What kind of service is provided by AWS DynamoDB? A. Relational Database B. NoSQL Database C. Dynamic Database D. Document Database
B
When using the Ref function in CloudFormation, what do we get back if we pass in the logical ID of an AWS::EC2::Instance object? Choose the correct answer from the options below A The object's creation status B The object's InstanceId C Nothing, the AWS::EC2::Instance is not a valid resource type D All of the attributes associated with that EC2 instance resource
B
Which DynamoDB API call does not consume capacity units? Choose the correct answer from the options below A DeleteItem B UpdateTable C GetItem D UpdateItem
B
Which of the following SNS information item has the following information - " A Universally Unique Identifier, unique for each notification published". Choose the correct answer from the options below A TopicARN B Messageid C Type D Message
B
Which of the following are subject to eventual consistency? Choose the correct answer from the options below A S3 objects in the US-East-1 region B Reads of a DynamoDB table, unless you specify otherwise C All reads of a DynamoDB table D S3 objects in the US-Standard region
B
Which of the following is true about S3 Server-Side Encryption? Choose the correct answer from the options below A You must encrypt the data before transmission B It uses AES-256 C You must decrypt the data after transmission D You are responsible for managing and rotating the encryption keys
B
Which of the following services could be used alone to host a static web site. Choose an answer from the options below A Amazon DynamoDB B Amazon S3 C Amazon SNS D Amazon Cloudfront
B
Which of the following statements about SQS is true? Choose the correct answer from the options below A Messages will be delivered exactly once, and messages will be delivered in First in, First out order. B Messages will be delivered one or more times, and message delivery order is indeterminate. C Messages will be delivered exactly once, and message delivery order is indeterminate. D Messages will be delivered one or more times, and messages will be delivered in First in, First out order.
B
Which statement about DynamoDB is true? Choose a correct answer from the options below A DynamoDB does not support conditional writes. B DynamoDB uses optimistic concurrency control. C DynamoDB is a relational database service. D None of the above
B
You attempt to create a new S3 bucket "Demo-Bucket-1234-US-East-2-Production-Environment-12.25.14" in the US-EAST-2 region and the bucket creation fails. Why? Choose the correct answer from the options below. A The bucket name uses the dash character ("-") B The bucket name uses capital letters. C The length of the bucket name is longer than the limit of 63 characters. D The bucket name uses the period character (".")
B
You define the following S3 bucket policy to grant users access to your bucket, but the S3 bucket policy editor will not allow you to submit it. Why is this policy not working? Choose the correct answer from the options below { "Id": "Policy1441839160967", "Version": "2012-10-17", "Statement": [ { "Sid": "Stmt1441839157568", "Action": [ "s3:ListBucket" ], "Effect": "Allow", "Resource": "arn:AWS:s3:::demo.testbucket.2 " } ] } A This is a NACL B S3 bucket policies require a Principal be defined C The Resource name is incorrect - S3 bucket names cannot contain periods D This is an IAM policy
B
You have an Amazon S3 bucket that you use to store objects. You'd like to encrypt some of the new objects you upload to this bucket. What header do you need to use in order to request server-side encryption when using the REST API? Choose the correct answer from the options below A x-amz-content-sha256 B x-amz-server-side-encryption C Content-MD5 D No header is needed
B
You run an ad-supported photo sharing website using S3 to serve photos to visitors of your site. At some point you find out that other sites have been linking to the photos on your site, causing loss to your business. What is an effective method to mitigate this? Choose an answer from the options below A Store photos on an EBS volume of the web server B Remove public read access and use signed URLs with expiry dates. C Use CloudFront distributions for static content. D Block the IPs of the offending websites in Security Groups.
B
You're creating a forum DynamoDB database for hosting web forums. Your "thread" table contains the forum name and each "forum name" can have one or more "subjects". What primary key type would you give the thread table in order to allow more than one subject to be tied to the forum primary key name? Choose an answer from the options below A Primary and range B Hash and Range C Hash D Range and Hash
B
Your EC2 component receives a message from a message queue. The message will then become invisible for 30 seconds. What is the ideal API request must be called in order to ensure that the message does not become visible again. A ReceiveMessage B DeleteMessage C VisibilityTimeout D ChangeMessageVisibility
B
Your app is using SQS to create distributed applications. Your messages need to contain more information than the 256KB SQS limit size allowed. How could you solve this problem? Choose a correct answer from the options below A Contact Amazon and request an increase to the message size for your account B Store the information in S3 and attach retrieval information to the message for the application to process C Compress the information inside of SQS messages D Use DynamoDB instead of SQS
B
Your support teams calls you and tells you that the application you developed is giving the error "Your proposed upload exceeds the maximum allowed object size." error message when uploading an object to S3. What is a possible solution for this? Choose an answer from the options below A None, Simple Storage Service objects are limited to 5 GB B Use the multi-part upload API for this object C Use the large object upload API for this object D Contact support to increase your object size limit E Upload to a different region
B
fn:GetAtt is used on a CloudFormation template to: Choose an answer from the options below A Conditionally create stack resources B Return the value of an attribute from a resource on the template C Appends a set of values into a single value which can include resources on the template D Returns the value corresponding to keys into a two-level map declared in the mappings section
B
You have created an Elastic Load Balancer with Duration-Based sticky sessions enabled in front of your six EC2 web application instances in US-West-2. For High Availability, there are three web application instances in Availability Zone 1 and three web application instances in Availability Zone 2. To load test, you set up a software-based load tester in Availability Zone 2 to send traffic to the Elastic Load Balancer, as well as letting several hundred users browse to the ELB's hostname. After a while, you notice that the users' sessions are spread evenly across the EC2 instances in both AZ's, but the software-based load tester's traffic is hitting only the instances in Availability Zone 2. What steps can you take to resolve this problem? Choose the 2 correct answer from the options below A Create a software-based load tester in US-East-1 and test from there B Force the software-based load tester to re-resolve DNS before every request C Use a third party load-testing service to send requests from globally distributed clients D Switch to Application-Controlled sticky sessions
BC
Your supervisor calls you wanting to know why she has not been receiving email notifications for AWS billing alerts. What do you suspect the problem might be and how can you find out? Choose 3 correct answer from the options below A The SNS queue is not AutoScaling properly. Verify by viewing Performance Statistics in SNS. B The SNS Subscription is not configured for Email notifications. Verify by viewing Subscriptions for the appropriate Topic in SNS C Your supervisor has not responded to the confirmation email sent from SNS when you added a subscription for her email address. Verify by viewing Subscriptions for the appropriate Topic in SNS D Billing alerts are not configured. Verify by viewing Billing Alerts in Account Preferences
BCD
A corporate web application is deployed within an Amazon VPC, and is connected to the corporate data center via IPSec VPN. The application must authenticate against the on-premise LDAP server. Once authenticated, logged-in users can only access an S3 keyspace specific to the user. Which two approaches can satisfy the objectives? Choose 2 answers. A. The application authenticates against LDAP. The application then calls the IAM Security Service to login to IAM using the LDAP credentials. The application can use the IAM temporary credentials to access the appropriate S3 bucket. B. The application authenticates against LDAP, and retrieves the name of an IAM role associated with the user. The application then calls the IAM Security Token Service to assume that IAM Role. The application can use the temporary credentials to access the appropriate S3 bucket. C. The application authenticates against IAM Security Token Service using the LDAP credentials. The application uses those temporary AWS security credentials to access the appropriate S3 bucket. D. Develop an identity broker which authenticates against LDAP, and then calls IAM Security Token Service to get IAM federated user credentials. The application calls the identity broker to get IAM federated user credentials with access to the appropriate S3 bucket. E. Develop an identity broker which authenticates against IAM Security Token Service to assume an IAM Role to get temporary AWS security credentials. The application calls the identity broker to get AWS temporary security credentials with access to the appropriate S3 bucket.
BD
You are debugging a problem with a web application that writes to an Amazon DynamoDB. You would like to see the actual data in the DynamoDB table to confirm that the data written was correct. How can you do this? Choose 2 answers from the options below A use the standard DynamoDB "export to CSV" feature B Use the AWS CLI to query the DynamoDB table and data C Use the JSON documents stored in S3 by DynamoDB D Use the AWS console to view the DynamoDB table and data
BD
A user has attached an EBS volume to a running Linux instance as a "/dev/sdf" device. The user is unable to see the attached device when he runs the command "df -h". What is the possible reason for this? A. The volume is not in the same AZ of the instance B. The volume is not formatted C. The volume is not attached as a root device D. The volume is not mounted
C
A user has configured an automated backup between 5 AM ?5:30 AM for the MySQL RDS DB. Will the performance of RDS get frozen momentarily during a backup? A. No B. Yes, only if the instance size is smaller than large size C. Yes, provided it is a single zone implementation D. Yes, always
C
A user has created a snapshot of an EBS volume. Which of the below mentioned usage cases is not possible with respect to a snapshot? A. Mirroring the volume from one AZ to another AZ B. Launch an instance C. Decrease the volume size D. Increase the size of the volume
C
A user has launched an EBS backed Linux instance. How can a user detach the root device and attach it to another instance as a secondary volume? A. Unmount the root volume first and then detach it B. It is not possible to mount the root volume to some other instance C. Stop the first instance and then attach instance's root volume as a new volume to the other instance D. It is not possible to mount the root device as a secondary volume on the other instance
C
A user is creating a snapshot of an EBS volume. Which of the below statements is incorrect in relation to the creation of an EBS snapshot? A. Its incremental B. It can be used to launch a new instance C. It is stored in the same AZ as the volume D. It is a point in time backup of the EBS volume
C
A user is launching an AWS RDS with MySQL. Which of the below mentioned options allows the user to configure the INNODB engine parameters? A. Options group B. Engine parameters C. Parameter groups D. DB parameters
C
A user is launching an instance with EC2. Which of the below mentioned options does the user need to consider before launching an instance? A. Select the region where the instance is being launched. B. Select the instance type. C. All the options listed should be considered. D. Select the OS of the AMI.
C
A user is planning to host a web server as well as an app server on a single EC2 instance which is a part of the public subnet of a VPC. How can the user setup to have two separate public IPs and separate security groups for both the application as well as the web server? A. Launch a VPC instance with two network interfaces. Assign a separate security group to each and AWS will assign a separate public IP to them. B. Launch VPC with two separate subnets and make the instance a part of both the subnets. C. Launch a VPC instance with two network interfaces. Assign a separate security group and elastic IP to them. D. Launch a VPC with ELB such that it redirects requests to separate VPC instances of the public subnet.
C
A user is trying to configure access with S3. Which of the following options is not possible to provide access to the S3 bucket / object? A. Define the policy for the IAM user B. Define the ACL for the object C. Define the policy for the object D. Define the policy for the bucket
C
A user is trying to create a list of IAM users with the AWS console. When the IAM users are created which of the below mentioned credentials will be enabled by default for the user? A. IAM access key and secret access key B. IAM X.509 certificates C. Nothing. Everything is disabled by default D. IAM passwords
C
After launching an instance that you intend to serve as a NAT (Network Address Translation) device in a public subnet you modify your route tables to have the NAT device be the target of internet bound traffic of your private subnet. When you try and make an outbound connection to the Internet from an instance in the private subnet, you are not successful. Which of the following steps could resolve the issue? A. Attaching a second Elastic Network interface (ENI) to the NAT instance, and placing it in the private subnet B. Attaching a second Elastic Network Interface (ENI) to the instance in the private subnet, and placing it in the public subnet C. Disabling the Source/Destination Check attribute on the NAT instance D. Attaching an Elastic IP address to the instance in the private subnet
C
EC2 instances are launched from Amazon Machine images (AMIS). A given public AMI can: A. be used to launch EC2 Instances in any AWS region. B. only be used to launch EC2 instances in the same country as the AMI is stored. C. only be used to launch EC2 instances in the same AWS region as the AMI is stored. D. only be used to launch EC2 instances in the same AWS availability zone as the AMI is stored.
C
For best performance when retrieving data from a table, what "type" of API call should you perform? Choose the correct answer from the options below. A Filtered B Scan C Query D Query then Scan
C
For how long can a SWF workflow task or task execution can live up to? Choose the correct answer from the options below. A 14 days B 24 hours C 1 year D 3 days
C
How does Amazon SQS allow multiple readers to access the same message queue without losing messages or processing them many times? A. By identifying a user by his unique id B. By using unique cryptography C. Amazon SQS queue has a configurable visibility timeout D. Multiple readers can't access the same message queue
C
How long can you keep your Amazon SQS messages in Amazon SQS queues? A. From 120 secs up to 4 weeks B. From 10 secs up to 7 days C. From 60 secs up to 2 weeks D. From 30 secs up to 1 week
C
In DynamoDB, a secondary index is a data structure that contains a subset of attributes from a table, along with an alternate key to support ____ operations. A. None of the above B. Both C. Query D. Scan
C
In regard to AWS CloudFormation, what is a stack? A. The set of AWS templates that are created and managed as a template B. The set of AWS resources that are created and managed as a template C. The set of AWS resources that are created and managed as a single unit D. The set of AWS templates that are created and managed as a single unit
C
In regard to DynamoDB, can I modify the index once it is created? A. Yes, if it is a primary hash key index B. Yes, if it is a Global secondary index C. No D. Yes, if it is a local secondary index
C
In relation to Amazon Simple Workflow Service (Amazon SWF),what is an "Activity Worker"? A. An individual task undertaken by a workflow B. The automation of a business process C. A piece of software that implements tasks D. All answers listed are correct
C
PassLeader has three AWS accounts. They have created separate IAM users within each account. PassLeader wants a single IAM console URL such as https://passleader.signin.aws.amazon.com/console/ for all account users. How can this be achieved? A. Merge all the accounts with consolidated billing B. Create the same account alias with each account ID C. It is not possible to have the same IAM account login URL for separate AWS accounts D. Create the S3 bucket with an alias name and use the redirect rule to forward requests to various accounts
C
Regarding Amazon SQS, are there restrictions on the names of Amazon SQS queues? A. No B. Yes. Queue names must be unique within an AWS account and you cannot use hyphens (-) and underscores (_) C. Yes. Queue names are limited to 80 characters and queue names must be unique within an AWS account D. Yes. Queue names are limited to 80 characters but queue names do not need to be unique within an AWS account
C
Resources that are created in AWS are identified by a unique identifier which is known as what option given below A Amazon Resource Number B Amazon Resource Nametag C Amazon Resource Name D Amazon Resource Namespace
C
Since S3 object are stored lexicographically, by introducing "randomness" to your S3 names it helps S3 storage distribute the I/O load across more than one partition. Given the following examples, how could you add a hashed prefix to the naming convention to increase I/O performance? Choose the correct answer from the options below A bucket/8761-2010-26-05-15-00-00/8761/myfolder234234/photo1.jpg B 8761bucket/2010-26-05-15-00-00/myfolder234234/photo1.jpg C bucket/8761-2010-26-05-15-00-00/myfolder234234/photo1.jpg D bucket/2010-26-05-15-00-00/bucket/myfolder234234/photo1.jpg
C
The AWS console for DynamoDB enables you to do all the following operations, except: A. Set up alarms to monitor your table's capacity usage. B. Create, update, and delete tables. C. Import Data from other databases or from files. D. View your table's top monitoring metrics on real-time graphs from CloudWatch.
C
When you use the AWS Elastic Beanstalk console to deploy a new application you'll need to upload a source bundle and it should ____. A. Consist of a single .zip file B. Consist of a single .war file C. Consist of a single .zip file or .war file D. Consist of a folder with all files
C
Which API call would you use to query an item by it's primary hash key? Choose the correct answer from the options below A PutItem B Scan C GetItem D query
C
Which EC2 API call would you use to retrieve a list of Amazon Machine Images (AMIs)? A. DescnbeInstances B. DescribeAMls C. DescribeImages D. GetAMls E. You cannot retrieve a list of AMIs as there are over 10,000 AMIs
C
Which OS does the current version of AWS Elastic Beanstalk use? A. Amazon Linux AMI, Windows Server 2003 R2 AMI or the Windows Server 2008 R2 AMI B. Amazon Linux AMI only C. Amazon Linux AMI or the Windows Server 2008 R2 AMI D. Windows Server 2008 R2 AMI only
C
Which header received at the EC2 instance identifies the port used by the client while requesting ELB? A. X-Forwarded-Proto B. X-Requested-Proto C. X-Forwarded-Port D. X-Requested-Port
C
Which of the below mentioned options is a must to have an element as a part of the IAM policy? A. Condition B. ID C. Statement D. Version
C
Which of the following device names is recommended for an EBS volume that can be attached to an Amazon EC2 Instance running Windows? A. xvd[a-e] B. /mnt/sd[b-e] C. xvd[f-p] D. /dev/sda1
C
Which of the following is a default limit in S3? Choose the correct answer from the options below A Objects have no size limitation B Objects can have a maximum size of 5 GB C Accounts can have a maximum of 100 buckets D Buckets can have a maximum size of 5 TB
C
Which of the following is a highly available, scalable deployment model for a web service. Choose an answer from the options below A A fixed number of web servers split across multiple AWS regions B A fixed number of web servers split across two or more AWS AZ's C An autoscaling group of web servers in two or more AWS AZ's D A fixed number of web servers in one AZ
C
Which of the following items are required to allow an application deployed on an EC2 instance to write data to a DynamoDB table? Assume that no security Keys are allowed to be stored on the EC2 instance. Choose an answer from options below: A Create an IAM user that allows write access to the DynamoDB table. B Launch an EC2 instance with the IAM user included in the launch configuration. C Create an IAM role that allows write access to the DynamoDB table and attach to the instance. D Create an IAM user and allow programmatic access.
C
Which one of the following statements is NOT an advantage of DyanamoDB being built on Solid State Drives? A. serve high-scale request workloads B. low request pricing C. high I/O performance of WebApp on EC2 instance D. low-latency response times
C
Why will the following CloudFormation template fail to deploy a stack? Choose the correct answer from the options below { "AWSTemplateFormatVersion" : "2010-09-09", "Parameters" : { "VPCId" : { "Type": "String", "Description" : "Enter current VPC Id" }, "SubnetId : { "Type": "String", "Description" : "Enter a subnet Id" } }, "Outputs" : { "InstanceId" : { "Value" : { "Ref" : "MyInstance" }, "Description" : "Instance Id" } } } A CloudFormation templates do not use a "Parameters" section B A "Conditions" section is mandatory but is not included C A "Resources" section is mandatory but is not included D A template description is mandatory but is not included
C
You have been given a scope to deploy some AWS infrastructure for a large organisation. The requirements are that you will have a lot of EC2 instances but may need to add more when the average utilization of your Amazon EC2 fleet is high and conversely remove them when CPU utilization is low. Which AWS services would be best to use to accomplish this? A. Amazon CloudFront, Amazon CloudWatch and Elastic Load Balancing. B. Auto Scaling, Amazon CloudWatch and AWS CloudTrail. C. Auto Scaling, Amazon CloudWatch and Elastic Load Balancing. D. Auto Scaling, Amazon CloudWatch and AWS Elastic Beanstalk.
C
You have items in your table that are 12KB in size and you want to have 10 strongly consistent reads per second. How many read capacity units would you need to provision? Choose a correct answer from the options below A 300 B 10 C 30 D 1
C
You want 5 strongly consistent 1KB writes per second. How many units of throughput capacity do you need to provision? Choose the correct answer from the options below A 10 B 9 C 5 D 4
C
You want to have multiple versions of your application running at the same time, with all versions launched via AWS Elastic Beanstalk. Is this possible? A. No. However if you have 2 AWS accounts this can be done B. No. AWS Elastic Beanstalk is not designed to support multiple running environments C. Yes. AWS Elastic Beanstalk is designed to support a number of multiple running environments D. Yes. However AWS Elastic Beanstalk is designed to support only 2 multiple running environments
C
Your "forums" table has a primary key of "id". Using DynamoDB, you're able to query the data based on the id primary key. You need to be able to query the forums table by userId. What would you add to the table during table creation time? Choose a correct answer from the options below A Create a second table that contains all the information by userId. B Create a hash and range primary key. C Create a secondary index. D None of the above
C
Your Manager wants to have a facility to have templates from EC2 instances launched in any region without much effort. When it comes to Amazon Machine images (AMIS) which of the below statements are true when it comes to a given public AMI. Choose an answer from the options below A be used to launch EC2 Instances in any AWS region. B only be used to launch EC2 instances in the same country as the AMI is stored. C only be used to launch EC2 instances in the same AWS region as the AMI is stored. D only be used to launch EC2 instances in the same AWS availability zone as the AMI is stored
C
Your supervisor has asked you to build a simple file synchronization service for your department. He doesn't want to spend too much money and he wants to be notified of any changes to files by email. What do you think would be the best Amazon service to use for the email solution? A. Amazon CloudSearch B. Amazon Elastic Transcoder C. Amazon SES D. Amazon AppStream
C
Which of the following AWS Services are offered at no cost? Choose 2 correct answer from the options below A Simple Storage Service B Elastic Load Balancing C Auto Scaling D Amazon VPC
CD
A root AWS account owner has created three IAM users: Bob, John and Michael. Michael is the IAM administrator. Bob and John are not the superpower users, but users with some pre-defined policies. John does not have access to modify his password. Thus, he asks Bob to change his password. How can Bob change John's password? A. This statement is false. It should be Michael who changes the password for John B. It is not possible that John cannot modify his password C. Provided Bob is the manager of John D. Provided Michael has added Bob to a group, which has permissions to modify the IAM passwords
D
A taxi company uses a mobile GPS application to track the location of each of their 60 cabs. The application records the taxi's location to a DynamoDB table every 6 seconds. Each transmission is just under 1 KB, and throughput is spread evenly within that minute. How many units of write capacity should you specify for this table? Choose a correct answer from the options below A 6 B 60 C 600 D 10
D
A user has an S3 object in the US Standard region with the content "color=red". The user updates the object with the content as "color="white". If the user tries to read the value 1 minute after it was uploaded, what will S3 return? A. It will return "color=white" B. It will return "color=red" C. It will return an error saying that the object was not found D. It may return either "color=red" or "color=white" i.e. any of the value
D
A user has configured a bucket S3 to host a static website. What difference will there be when static website hosting is enabled? A. It will help the user identify this bucket as the website root to map with the domain B. It will create a new version of the bucket C. It will not make any difference, but will help the user to configure the error page D. It will provide the region specific website endpoint
D
A user has created a new EBS volume from an existing snapshot. The user mounts the volume on the instance to which it is attached. Which of the below mentioned options is a required step before the user can mount the volume? A. Run a cyclic check on the device for data consistency B. Create the file system of the volume C. Resize the volume as per the original snapshot size D. No step is required. The user can directly mount the device
D
A user has created a queue named "myqueue" with SQS. There are four messages published to queue which are not received by the consumer yet. If the user tries to delete the queue, what will happen? A. A user can never delete a queue manually. AWS deletes it after 30 days of inactivity on queue B. It will initiate the delete but wait for four days before deleting until all messages are deleted automatically C. It will ask user to delete the messages first D. It will delete the queue
D
A user has developed an application which is required to send the data to a NoSQL database. The user wants to decouple the data sending such that the application keeps processing and sending data but does not wait for an acknowledgement of DB. Which of the below mentioned applications helps in this scenario? A. AWS Simple Notification Service B. AWS Simple Workflow C. AWS Simple Query Service D. AWS Simple Queue Service
D
A user has enabled automated backup for an RDS instance. What is the longest duration for which the user can retain the automated backup? A. 25 days B. 15 days C. 45 days D. 35 days
D
A user has enabled serverside encryption with S3. The user downloads the encrypted object from S3. How can the user decrypt it? A. S3 does not support server side encryption B. S3 provides a server side key to decrypt the object C. The user needs to decrypt the object using their own private key D. S3 manages encryption and decryption automatically
D
A user has hosted a website on AWS and uses ELB to load balance the multiple instances. The user application does not have any cookie management. How can the user bind the session of the requestor with a particular instance? A. Bind the IP address with a sticky cookie B. Create a cookie at the application level to set at ELB C. Use session synchronization with ELB D. Let ELB generate a cookie for a specified duration
D
A user has launched a MySQL RDS. The user wants to plan for the DR and automate the snapshot. Which of the below mentioned functionality offers this option with RDS? A. Copy snapshot B. Automated synchronization C. Snapshot D. Automated backup
D
A user has set an IAM policy where it allows all requests if a request from IP 10.10.10.1/32. Another policy allows all the requests between 5 PM to 7 PM. What will happen when a user is requesting access from IP 10.10.10.1/32 at 6 PM? A. IAM will throw an error for policy conflict B. It is not possible to set a policy based on the time or IP C. It will deny access D. It will allow access
D
A user is enabling logging on a particular bucket. Which of the below mentioned options may be best suitable to allow access to the log bucket? A. Create an IAM policy and allow log access B. It is not possible to enable logging on the S3 bucket C. Create an IAM Role which has access to the log bucket D. Provide ACL for the logging group
D
A user is planning to make a mobile game which can be played online or offline and will be hosted on EC2. The user wants to ensure that if someone breaks the highest score or they achieve some milestone they can inform all their colleagues through email. Which of the below mentioned AWS services helps achieve this goal? A. AWS Simple Workflow Service. B. AWS Simple Queue Service. C. Amazon Cognito. D. AWS Simple Email Service.
D
A user is trying to find the state of an S3 bucket with respect to versioning. Which of the below mentioned states AWS will not return when queried? A. versioning-enabled B. versioning-suspended C. unversioned D. versioned
D
AWS Elastic Beanstalk stores your application files and optionally server log files in ____. A. Amazon Storage Gateway B. Amazon Glacier C. Amazon EC2 D. Amazon S3
D
AWS Elastic Beanstalk will change the health status of a web server environment tier to gray color when: A. AWS Elastic Beanstalk detects other problems with the environment that are known to make the application unavailable. B. Your application hasn't responded to the application health check URL within the last one hour. C. Your application hasn't responded to the application health check URL within the last five minutes. D. Your application's health status is unknown because status is reported when the application is not in the ready state.
D
AWS Elastic Load Balancer supports SSL termination. A. True. For specific availability zones only B. False C. True. For specific regions only D. True. For all regions
D
After launching an instance that you intend to serve as a NAT (Network Address Translation) device in a public subnet you modify your route tables to have the NAT device be the target of internet bound traffic of your private subnet. When you try and make an outbound connection to the Internet from an instance in the private subnet, you are not successful. Which of the following steps could resolve the issue? Choose an answer from the options below A Attaching a second Elastic Network interface (ENI) to the NAT instance, and placing it in the private subnet B Attaching an Elastic IP address to the instance in the private subnet C Attaching a second Elastic Network Interface (ENI) to the instance in the private subnet, and placing it in the public subnet D Disabling the Source/Destination Check attribute on the NAT instance
D
An organization has enabled a strict password policy for its IAM users. The organization is taking help from the IAM console to set the password policy. Which of the below mentioned rules cannot be specified by the user as a part of the policy? A. Allow at least one lower case letter B. Allow at least one number C. Allow at least one non-alphanumeric character D. Do not allow the user to use the password from the last three passwords
D
An organization is hosting an application as part of the free usage tier. The organization wants to create IAM users for each of its 150 employees and they may access AWS as part of free usage tier. What will you advise the organization? A. The IAM is not available as a part of the free usage tier B. Create IAM roles and give access based on role since it will not cost the user C. Do not create more than 100 users as it will cost the organization D. Create IAM users for each employee as it does not cost
D
An organization is setting up their website on AWS. The organization is working on various security measures to be performed on the AWS EC2 instances. Which of the below mentioned security mechanisms will not help the organization to avoid future data leaks and identify security weaknesses? PrepAway - Latest Free Exam Questions & Answers A. Perform SQL injection for application testing. B. Run penetration testing on AWS with prior approval from Amazon. C. Perform a hardening test on the AWS instance. D. Perform a Code Check for any memory leaks.
D
Answer - D AWS CloudFormation provides several built-in functions that help you manage your stacks. Use intrinsic functions in your templates to assign values to properties that are not available until runtime. The website is then available at the region-specific website endpoint of the bucket: .s3-website-.amazonaws.com Hence Option A and B are wrong. Also you need to use the Ref function and not the GetAtt function hence Option C is wrong. For more information CloudFormation intrinsic functions on the please visit the below link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-function-reference.html Question 37: Incorrect You are creating several DynamoDB tables for a new project. While doing so, you receive the error message, "LimitExceededException." You are well below the maximum number of tables per account and there is no read or write activity on the tables yet. Why have you received this error? Choose a correct answer from the options below A You attempted to create GSI at the time of table creation. B You attempted to create local indexes at the same time you created the tables C You failed to pre-warm the tables D You attempted to create more than one table with a secondary index at a time
D
Company A has recently launched an online commerce site for bicycles on AWS. They have a "Product" DynamoDB table that stores details for each bicycle, such as, manufacturer, color, price, quantity and size to display in the online store. Due to customer demand, they want to include an image for each bicycle along with the existing details. Which approach below provides the least impact to provisioned throughput on the "Product" table? Choose an answer from the options below A Create an "Images" DynamoDB table to store the Image with a foreign key constraint to the "Product" table B Add an image data type to the "Product" table to store the images in binary format C Serialize the image and store it in multiple DynamoDB tables D Store the images in Amazon S3 and add an S3 URL pointer to the "Product" table item for each image
D
Company C has recently launched an online commerce site for bicycles on AWS. They have a "Product" DynamoDB table that stores details for each bicycle, such as, manufacturer, color, price, quantity and size to display in the online store. Due to customer demand, they want to include an image for each bicycle along with the existing details. Which approach below provides the least impact to provisioned throughput on the "Product" table? A. Serialize the image and store it in multiple DynamoDB tables B. Create an "Images" DynamoDB table to store the Image with a foreign key constraint to the "Product" table C. Add an image data type to the "Product" table to store the images in binary format D. Store the images in Amazon S3 and add an S3 URL pointer to the "Product" table item for each image
D
Company D is running their corporate website on Amazon S3 accessed from http//www.companyd.com. Their marketing team has published new web fonts to a separate S3 bucket accessed by the S3 endpoint: https://s3-uswest1.amazonaws.com/cdfonts. While testing the new web fonts, Company D recognized the web fonts are being blocked by the browser. What should Company D do to prevent the web fonts from being blocked by the browser? A. Enable versioning on the cdfonts bucket for each web font B. Create a policy on the cdfonts bucket to enable access to everyone C. Add the Content-MD5 header to the request for webfonts in the cdfonts bucket from the website D. Configure the cdfonts bucket to allow cross-origin requests by creating a CORS configuration
D
Does Amazon DynamoDB support both increment and decrement atomic operations? A. No, neither increment nor decrement operations. B. Only increment, since decrement are inherently impossible with DynamoDB's data model. C. Only decrement, since increment are inherently impossible with DynamoDB's data model. D. Yes, both increment and decrement operations.
D
Explain what the following resource in a CloudFormation template does. Choose the best possible answer. "SNSTopic" : { "Type" : "AWS::SNS::Topic", "Properties" : { "Subscription" : [{ "Protocol" : "sqs", "Endpoint" : { "Fn::GetAtt" : [ "SQSQueue", "Arn" ] } } ] } A Creates an SNS topic which allows SQS subscription endpoints to be added as a parameter on the template B Creates an SNS topic that allow SQS subscription endpoints C Creates an SNS topic and then invokes the call to create an SQS queue with a logical resource name of SQSQueue D Creates an SNS topic and adds a subscription ARN endpoint for the SQS resource created under the logical name SQSQueue
D
How can software determine the public and private IP addresses of the Amazon EC2 instance that it is running on? A. Query the appropriate Amazon CloudWatch metric. B. Use ipconfig or ifconfig command. C. Query the local instance userdata. D. Query the local instance metadata.
D
How long are the messages kept on an SQS queue by default? A. If a message is not read, it is never deleted B. 2 weeks C. 1 day D. 4 days
D
How much Cloudformation does cost per hour? Choose the correct answer from the options below A 0.05$ B 0.10$ C 0.15$ D There is no cost
D
In DynamoDB, the default table size is: A. 5 GB B. 1 GB C. 10 GB D. There is no table size
D
In DynamoDB, what type of HTTP response codes indicate that a problem was found with the client request sent to the service? A. 5xx HTTP response code B. 200 HTTP response code C. 306 HTTP response code D. 4xx HTTP response code
D
In DynamoDB, what type of HTTP response codes indicate that a problem was found with the client request sent to the service? Choose an answer from the options below A 5xx HTTP response code B 200 HTTP response code C 306 HTTP response code D 4xx HTTP response code
D
In regard to DynamoDB, for which one of the following parameters does Amazon not charge you? A. Cost per provisioned write units B. Cost per provisioned read units C. Storage cost D. I/O usage within the same Region
D
In regards to Amazon SQS how many times will you receive each message? A. At least twice B. Exactly once C. As many times as you want D. At least once
D
In relation to Amazon SQS, how can you ensure that messages are delivered in order? A. Increase the size of your queue B. Send them with a timestamp C. Give each message a unique id D. AWS cannot guarantee that you will receive messages in the exact order you sent them
D
Of the 6 available sections on a CloudFormation template (Template Description Declaration, Template Format Version Declaration, Parameters, Resources, Mappings, Outputs), which is the only one required for a CloudFormation template to be accepted? Choose an answer from the options below A Parameters B Template Declaration C Mappings D Resources
D
One unit of read capacity is ____ in size? Choose the correct answer from the options below A 5 KB B 3 KB C 2 KB D 4 KB
D
The user has configured AutoScaling based on the dynamic policy. Which of the following is not the right command to specify a change in capacity as a part of the policy? A. "adjustment=-50" (type is PercentChangeInCapacity) B. "adjustment=3" (type is ExactCapacity) C. "adjustment=-1" (type is ChangeInCapacity) D. "adjustment=-8" (type is ExactCapacity)
D
True or False: AWS CloudFormation allows you to create Microsoft Windows stacks. A. False, AWS CloudFormation does not support Microsoft Windows. B. False, Amazon doesn't support Microsoft Windows. C. False, you cannot create Windows stacks. D. True.
D
What happens if your application performs more reads or writes than your provisioned capacity? A. Nothing. B. requests above your provisioned capacity will be performed but you will receive 400 error codes. C. requests above your provisioned capacity will be performed but you will receive 200 error codes. D. requests above your provisioned capacity will be throttled and you will receive 400 error codes.
D
What happens, by default, when one of the resources in a CloudFormation stack cannot be created? Choose an answer from the options below A The stack creation continues, and the final results indicate which steps failed. B CloudFormation templates are parsed in advance so stack creation is guaranteed to succeed. CPreviously-created resources are kept but the stack creation terminates. D Previously-created resources are deleted and the stack creation terminates.
D
What is the format of structured notification messages sent by Amazon SNS? A. An XML object containing MessageId, UnsubscribeURL, Subject, Message and other values B. An JSON object containing MessageId, DuplicateFlag, Message and other values C. An XML object containing MessageId, DuplicateFlag, Message and other values D. An JSON object containing MessageId, unsubscribeURL, Subject, Message and other values
D
What is the format of structured notification messages sent by Amazon SNS? Choose an answer from the options below A An XML object containing MessageId, UnsubscribeURL, Subject, Message and other values B A JSON object containing MessageId, DuplicateFlag, Message and other values C An XML object containing MessageId, DuplicateFlag, Message and other values D A JSON object containing MessageId, unsubscribeURL, Subject, Message and other values
D
What options are available to a customer who wants to perform penetration testing of his EC2 web servers? Choose an answer from the options below A Penetration testing is never allowed B AWS automatically performs penetration testing C A customer can perform penetration testing at any time D A customer should request permission from AWS before performing perform penetration testing
D
What type of block cipher does Amazon S3 offer for server side encryption? Choose an answer from the options below A RC5 B Blowfish C Triple DES D Advanced Encryption Standard
D
What would you set in your CloudFormation template to fire up different instance sizes based off of environment type? i.e. (If this is for prod, use m1.large instead of t1.micro) Choose a correct answer from the options below A Outputs B Resources C Mappings D Conditions
D
When uploading an object, what request header can be explicitly specified in a request to Amazon S3 to encrypt object data when saved on the server side? A. x-amz-storage-class B. Content-MD5 C. x-amz-security-token D. x-amz-server-side-encryption
D
Which API call would you use to attach an EBS volume to an EC2 instance? Choose a correct answer from the options below A AttachInstanceVolume B AttachVolumeInstance C AttachEBSVolume D AttachVolume
D
Which Amazon service is not used by Elastic Beanstalk? A. Amazon S3 B. Amazon ELB C. Auto scaling D. Amazon EMR
D
Which EC2 API call would you use to retrieve a list of Amazon Machine Images (AMIs)? Choose an answer from the options below A DescribeInstances B You cannot retrieve a list of AMIs as there are over 10,000 AMIs C GetAMls D DescribeImages E DescribeAMls
D
Which object encryption options are available with Amazon S3. Choose an answer from the options below A Server side encryption using Amazon keys B Client side encryption using customer keys C Server side encryption using customer keys D All of the above.
D
Which of the below mentioned commands allows the user to share the AMI with his peers using the AWS EC2 CLI? A. ec2-share-image-public B. ec2-share-image-account C. ec2-share-image D. ec2-modify-image-attribute
D
Which of the below mentioned options can be a good use case for storing content in AWS RRS? A. Storing mission critical data Files B. Storing infrequently used log files C. Storing a video file which is not reproducible D. Storing image thumbnails
D
Which of the below mentioned options is not a best practice to securely manage the AWS access credentials? A. Enable MFA for privileged users B. Create individual IAM users C. Keep rotating your secure access credentials at regular intervals D. Create strong access key and secret access key and attach to the root account
D
Which of the following AWS services can be used to record logs of all AWS API calls. Choose an answer from the options below A AWS IAM B Amazon Cloudwatch C Amazon EC2 D AWS CloudTrail
D
Which of the following statements about SQS is true? A. Messages will be delivered exactly once and messages will be delivered in First in, First out order B. Messages will be delivered exactly once and message delivery order is indeterminate C. Messages will be delivered one or more times and messages will be delivered in First in, First out order D. Messages will be delivered one or more times and message delivery order is indeterminate
D
Which of the following types of servers would this CloudFormation template be most appropriate for? Choose a correct answer from the options below { "AWSTemplateFormatVersion" : "2010-09-09", "Description" : "My CloudFormation Template", "Resources" : { "MyInstance" : { "Type" : "AWS::EC2::Instance", "Properties" : { "InstanceType" : "t2.micro", "ImageId" : "ami-030f4133", "NetworkInterfaces" : [{ "AssociatePublicIpAddress" : "true", "DeviceIndex" : "0", "DeleteOnTermination" : "true", "SubnetId" : "subnet-0c2c0855", "GroupSet" : ["sg-53a4e434"] } ] } } } } A Domain Controller B Log collection server C Database server D Bastion host
D
Which one of the following S3 error code does not have a corresponding HTTP 404 Status code? Choose a correct answer from the options below A NoSuchBucket B NoSuchUpload C NoSuchVersion D MissingSecurityHeader
D
Which one of the following operations is NOT a DynamoDB operation? A. BatchWriteItem B. DescribeTable C. BatchGetItem D. BatchDeleteItem
D
While working with the S3 API you receive the error message: 404 Not Found. What is the most likely cause for this error? Choose a correct answer from the options below A AccessDenied B BucketAlreadyExists C NoSuchService D NoSuchBucket
D
You are creating a CloudFormation template in the Singapore region which will create an S3 website bucket. You have created a parameter "demo" which is used to store the name of your S3 bucket, and you are hoping to create output from your template which will list the URL of the S3 website. Which of the following Join statements will provide the URL of your S3 website? Choose a correct answer from the options below A "Fn::Join" : ["", ["http://",{"Ref":"demo"},".s3",".amazonaws.com"]] B "Fn::Join" : ["", ["http://",{"GetAtt":"demo"},".s3-bucket-","Singapore-1",".amazon.com"]] C "Fn::Join" : ["", ["http://",{"GetAtt":"demo"},".s3-website-","ap-southeast-1",".amazonaws.com"]] D "Fn::Join" : ["", ["http://",{"Ref":"demo"},".s3-website-",{"Ref":"AWS::Region"},".amazonaws.com"]]
D
You are providing AWS consulting services for a company developing a new mobile application that will be leveraging Amazon SNS Mobile Push for push notifications. In order to send direct notification messages to individual devices each device registration identifier or token needs to be registered with SNS; however the developers are not sure of the best way to do this. You advise them to: A. Bulk upload the device tokens contained in a CSV file via the AWS Management Console. B. Let the push notification service (e.g. Amazon Device Messaging) handle the registration. C. Implement a token vending service to handle the registration. D. Call the CreatePlatformEndPoint API function to register multiple device tokens.
D
You have an environment that consists of a public subnet using Amazon VPC and 3 instances that are running in this subnet. These three instances can successfully communicate with other hosts on the Internet. You launch a fourth instance in the same subnet, using the same AMI and security group configuration you used for the others, but find that this instance cannot be accessed from the Internet. What should you do to enable internet access? A. Deploy a NAT instance into the public subnet. B. Modify the routing table for the public subnet. C. Configure a publically routable IP Address In the host OS of the fourth instance. D. Assign an Elastic IP address to the fourth instance.
D
You have an environment that consists of a public subnet using Amazon VPC and 3 instances that are running in this subnet. These three instances can successfully communicate with other hosts on the Internet. You launch a fourth instance in the same subnet, using the same AMI and security group configuration you used for the others, but find that this instance cannot be accessed from the Internet. What should you do to enable internet access? Choose an answer from the options below A Deploy a NAT instance into the public subnet. B Modify the routing table for the public subnet C Configure a publically routable IP Address In the host OS of the fourth instance. D Assign an Elastic IP address to the fourth instance.
D
You have written an application that uses the Elastic Load Balancing service to spread traffic to several web servers Your users complain that they are sometimes forced to login again in the middle of using your application, after they have already togged in. This is not behavior you have designed. What is a possible solution to prevent this happening? A. Use instance memory to save session state. B. Use instance storage to save session state. C. Use EBS to save session state. D. Use ElastiCache to save session state. E. Use Glacier to save session slate.
D
You have written an application that uses the Elastic Load Balancing service to spread traffic to several web servers Your users complain that they are sometimes forced to login again in the middle of using your application, after they have already logged in. This is not behavior you have designed. What is a possible solution to prevent this happening? Choose an answer from the options below A Use instance memory to save session state. B Use instance storage to save session state. C Use EBS to save session state D Use ElastiCache to save session state. E Use Glacier to save session slate.
D
You need to announce an emergency downtime for a production AWS web application. This downtime notification will require different sets of instructions for different devices. All of the application users signed up to receive SNS notifications from the "mywebapp" topic when they began using the application and they are currently subscribed to this topic. What are appropriate ways for you to provide timely, device-specific instructions to end users when announcing this downtime? Choose an answer from the options below A Create a different topic for each subscription type and send a message to SMS endpoints to one topic and a message to email endpoints to another topic B Send multiple messages to the topic and ask users to ignore the messages that do not pertain to their device C SNS is for automated notifications and you cannot send messages manually via SNS. The best option is to export the endpoints to a csv and send notifications to customers via your email client or SMS device. D Send a single message, but customize the text in the SNS message field so that each device gets only the information that is appropriate for them
D
You receive a call from a potential client who explains that one of the many services they offer is a website running on a t2.micro EC2 instance where users can submit requests for customized e-cards to be sent to their friends and family. The e-card website administrator was on a cruise and was shocked when he returned to the office in mid-January to find hundreds of angry emails complaining that customers' loved ones had not received their Christmas cards. He also had several emails from CloudWatch alerting him that the SQS queue for the e-card application had grown to over 500 messages on December 25th. You investigate and find that the problem was caused by a crashed EC2 instance which serves as an application server. What do you advise your client to do first? Choose the correct answer from the options below A Use an autoscaling group to create as many application servers as needed to process all of the Christmas card SQS messages. B Reboot the application server immediately so that it begins processing the Christmas card SQS messages. C Redeploy the application server as a larger instance type so that it can process the Christmas card SQS messages faster. D Send an apology to the customers notifying them that their cards will not be delivered.
D
If a message is retrieved from a queue in Amazon SQS, how long is the message inaccessible to other users by default? A. 0 seconds B. 1 hour C. 1 day D. forever E. 30 seconds
E
A DynamoDB item is a collection of name and value attributes. Choose a correct answer from the options below A True B False
A
A benefit of multi-part upload is that you can upload a file as it is being created. Choose the correct answer from the options below A True B False
A
A customer has enabled website hosting on a bucket named "devtoolslogging" in the Singapore region. What website URL is assigned to your bucket? A devtoolslogging.s3-website-ap-southeast-1.amazonaws.com B s3-website.devtoolslogging.amazonaws.com C s3-website.devtoolslogging.website-ap-southeast-1.amazonaws.com D devtoolslogging.ap-southeast-1.amazonaws.com
A
A global secondary index is an index with a hash and range key that can be different from those on the table. Choose a correct answer from the options below A True B False
A
A user has launched an EC2 instance and installed a website with the Apache webserver. The webserver is running but the user is not able to access the website from the internet. What can be the possible reason for this failure? A. The security group of the instance is not configured properly. B. The instance is not configured with the proper key-pairs. C. The Apache website cannot be accessed from the internet. D. Instance is not configured with an elastic IP.
A
A user has launched five instances with ELB. How can the user add the sixth EC2 instance to ELB? A. The user can add the sixth instance on the fly. B. The user must stop the ELB and add the sixth instance. C. The user can add the instance and change the ELB config file. D. The ELB can only have a maximum of five instances.
A
A user is creating multiple IAM users. What advice should be given to him to enhance the security? A. Grant least privileges to the individual user B. Grant all higher privileges to the group C. Grant less privileges for user, but higher privileges for the group D. Grant more privileges to the user, but least privileges to the group
A
A user is launching an AWS RDS instance with MySQL. The user wants to enable the Multi AZ feature. Which of the below mentioned parameters will not be allowed to configure by RDS? A. Availability Zone B. Region C. DB subnet group D. Database port
A
An application stores payroll information nightly in DynamoDB for a large number of employees across hundreds of offices. Item attributes consist of individual name, office identifier, and cumulative daily hours. Managers run reports for ranges of names working in their office. One query is. "Return all Items in this office for names starting with A through E". Which table configuration will result in the lowest impact on provisioned throughput for this query? Choose an answer from the options below A Configure the table to have a range index on the name attribute, and a hash index on the office identifier B Configure a hash index on the name attribute and no range index C Configure the table to have a hash index on the name attribute, and a range index on the office identifier D Configure a hash index on the office Identifier attribute and no range index
A
An organization has created 10 IAM users. The organization wants those users to work independently and access AWS. Which of the below mentioned options is not a possible solution? A. Create the access key and secret access key for each user and provide access to AWS using the console B. Create the X.509 certificate for each user and provide them access to AWS CLI C. Enable MFA for each IAM user and assign them the virtual MFA device to access the console D. Provide each user with the IAM login and password for the AWS console
A
An organization has created an application which is hosted on the AWS EC2 instance. The application stores images to S3 when the end user uploads to it. The organization does not want to store the AWS secure credentials required to access the S3 inside the instance. Which of the below mentioned options is a possible solution to avoid any security threat? A. Use the IAM role and assign it to the instance. B. Since the application is hosted on EC2, it does not need credentials to access S3. C. Use the X.509 certificates instead of the access and the secret access keys. D. Use the IAM based single sign between the AWS resources and the organization application.
A
Bucket names must be unique across all S3. A True B False
A
Can Cloudformation be used with Chef and Puppet? Choose the correct answer from the options below A True B False
A
Can a user associate and use his own DNS with ELB instead of the DNS provided by AWS ELB? A. Yes, by creating a CNAME with the existing domain name provider B. Yes, by configuring DNS in the AWS Console C. No D. Yes, only through Route 53 by mapping ELB and DNS
A
Can conditional operations be used in a DynamoDB query? Choose an answer from the options below A True B False
A
Can data be saved when a stack is deleted in Cloudformation? Choose the correct answer from the options below A True B False
A
Can expressions be used as part of the Query API call in DynamoDB? Choose an answer from the options below A True B False
A
How can you peek at a message in Amazon SQS? A. Log the message ID and the receipt handle for your messages and correlate them to confirm when a message has been received and deleted B. Send the message to Amazon S3 C. You can't D. Set up a CloudWatch alarm to auto send you the message
A
How do you configure SQS to support longer message retention? A. Set the MessageRetentionPeriod attribute using the SetQueueAttributes method B. Using a Lambda function C. You can't. It is set to 14 days and cannot be changed D. You need to request it from AWS
A
How is the coordination between worker processes done in SWF? Choose the correct answer from the options below. A By writing a program called the decider B By using SQS C By using a master worker process D This is not possible
A
If a message is retrieved from a queue in Amazon SQS, how long is the message inaccessible to other users by default? Choose an answer from the options below A 30 seconds B 0 seconds C 1 hour D 1 day E forever
A
If you have an item that is 4KB in size and you want to provision read capacity units for 100 requests per second, using strongly consistent reads how many read capacity units do you need to provision? Choose the correct answer from the options below A 100 B 90 C 20 D 50
A
If your table item's size is 3KB and you want to have 90 strongly consistent reads per second, how many read capacity units will you need to provision on the table? Choose the correct answer from the options below A 90 B 45 C 10 D 19
A
In DynamoDB, could you use IAM to grant access to Amazon DynamoDB resources and API actions? A. Yes B. Depended to the type of access C. In DynamoDB there is no need to grant access D. No
A
In DynamoDB, if you create a table and request 10 units of write capacity and 200 units of read capacity of provisioned throughput, how much would you be charged in US East (Northern Virginia) Region? A. $0.05 per hour B. $0.10 per hour C. $0.03 per hour D. $0.15 per hour
A
In regard to DynamoDB, what is the Global secondary index? A. An index with a hash and range key that can be different from those on the table B. An index that has the same range key as the table, but a different hash key C. An index that has the same hash key and range key as the table D. An index that has the same hash key as the table, but a different range key
A
In regards to VPC, select the correct statement: A. You can associate multiple subnets with the same Route Table. B. You can associate multiple subnets with the same Route Table, but you can't associate a subnet with only one Route Table. C. You can't associate multiple subnets with the same Route Table. D. None of these.
A
In relation to Amazon SQS, how many queues and messages can you have per queue for each user? A. Unlimited B. 10 C. 256 D. 500
A
Is it possible to use IAM to manage access to SWF? Choose the correct answer from the options below. A True B False
A
Multi-part upload API allows you to stop and resume uploads. Choose a correct answer from the options below A True B False
A
One DynamoDB read capacity unit represents one strongly consistent read per second, for an item up to 4 KB in size. Choose the correct answer from the options below. A True B False.
A
Parts of a multi-part upload will not be completed until the "complete" request has been called which puts all the parts of the file together. Choose the correct answer from the options below A True B False
A
PassLeader (with AWS account ID 111122223333) has created 50 IAM users for its organization's employees. What will be the AWS console URL for these associates? A. https:// 111122223333.signin.aws.amazon.com/console/ B. https:// signin.aws.amazon.com/console/ C. https://signin.aws.amazon.com/111122223333/console/ D. https://signin.aws.amazon.com/console/111122223333/
A
S3 bucket names may only contain only lowercase letters, periods, numbers, and dashes but do not have to contain them all. Choose the correct answer from the options below A True B False
A
S3 object key names are stored lexicographically (alphabetical order). Choose the correct answer from the options below A True B False
A
SQS guarantees delivery but there can be duplicates. Choose the correct answer from the options below. A True B False
A
The following code snippet is the resources section of a CloudFormation template that you have written. "Resources" : { "EC2Instance" : { "Type" : "AWS::EC2::Instance", "Properties" : { "InstanceType" : { "Ref" : "InstanceType" }, "SecurityGroups" : [ { "Ref" : "InstanceSecurityGroup" } ], "KeyName" : { "Ref" : "KeyName" }, "ImageId" : { "Fn::FindInMap" : [ "AWSRegionArch2AMI", { "Ref" : "AWS::Region" }, { "Fn::FindInMap" : [ "AWSInstanceType2Arch", { "Ref" : "InstanceType" }, "Arch" ] } ] } } }, You have used the reference function to define your instance type as follows. "InstanceType" : { "Ref" : "InstanceType" }, The referencing function is referencing the instance type. Where is this value most likely coming from? A From the parameters section of your CloudFormation template. B From the mappings section of your CloudFormation template. C From the second line of this resources section. D From the conditions section of your CloudFormation template.
A
The user has created multiple AutoScaling groups. The user is trying to create a new AS group but it fails. How can the user know that he has reached the AS group limit specified by AutoScaling in that region? A. Run the command: as-describe-account-limits B. Run the command: as-describe-group-limits C. Run the command: as-max-account-limits D. Run the command: as-list-account-limits
A
What does Amazon SQS provide? A. An asynchronous message queue service. B. A Simple Query Server, managed directly by Amazon Web Services. C. None of these. D. A synchronous message queue service.
A
What is the default limit for CloudFormation templates per region? Choose the correct answer from the options below A There are no limits to the number of templates B 200 C 20 D 40
A
What is the function of a conditional write? Choose the correct answer from the options below A A change to a DynamoDB attribute will only be written if it that attribute's value has not changed since it was read B An S3 object will only be written to a bucket if is encrypted C A change to a DynamoDB attribute will only be written if no other users are accessing the table D An S3 object will only be written to a bucket if it is less than 5 GB
A
What is the maximum size for messages stored in SQS? A. 256KB B. 128KB C. 1024KB D. 64KB
A
When a user is launching an instance with EC2, which of the below mentioned options is not available during the instance launch console for a key pair? A. Proceed without the key pair B. Upload a new key pair C. Select an existing key pair D. Create a new key pair
A
When using Amazon SQS how much data can you store in a message? A. 8 KB B. 2 KB C. 16 KB D. 4 KB
A
When using a large Scan operation in DynamoDB, what technique can be used to minimize the impact of a scan on a table's provisioned throughput? A. Set a smaller page size for the scan B. Use parallel scans C. Define a range index on the table D. Prewarm the table by updating all items
A
When using a large Scan operation in DynamoDB, what technique can be used to minimize the impact of a scan on a table's provisioned throughput? Choose an answer from the options below A Set a smaller page size for the scan B Pre-warm the table by updating all items C Use parallel scans D Define a range index on the table
A
Which code snippet below returns the URL of a load balanced web site created in CloudFormation with an AWS::ElasticLoadBalancing::LoadBalancer resource name "ElasticLoad Balancer"? A. "Fn::Join" : ["". [ "http://", {"Fn::GetAtr" : [ "ElasticLoadBalancer","DNSName"]}]] B. "Fn::Join" : ["". [ "http://", {"Fn::GetAtr" : [ "ElasticLoadBalancer","Url"]}]] C. "Fn::Join" : ["". [ "http://", {"Ref" : "ElasticLoadBalancerUrl"}]] D. "Fn::Join" : [".", [ "http://", {"Ref" : "ElasticLoadBalancerDNSName"}]]
A
Which of the following cannot be used inside a CloudFormation template? Choose a correct answer from the options below A Ruby statements B Parameters C Intrinsic function D Regular expression
A
Which of the following device names is reserved for the root device for Linux instances of Amazon EC2? A. /dev/sda1 B. /dev/sd[b-e] C. xvd[a-e] D. /dev/sd[f-p][1-6]
A
Which of the following is an example of a good Amazon DynamoDB hash key schema for provisioned throughput efficiency. Choose an answer from the options below A Student ID where every student has a unique ID B College ID where there are two colleges in the university C Class ID where every student is in one of the four classes D Tuition Plan where the vast majority of students are in state and the rest are out of state
A
Which of the following is an example of a good DynamoDB hash key schema for provisioned throughput efficiency? A. User ID, where the application has many different users. B. Status Code where most status codes are the same. C. Device ID, where one is by far more popular than all the others. D. Game Type, where there are three possible game types.
A
Which of the following statements is true about DynamoDB? Choose the correct answer from the options below A Read requests are eventually consistent unless otherwise specified. B Read requests are strongly consistent. C Tables do not contain primary keys. D None of the above
A
Which of the following will not make a CloudFormation stack deployment to 'rollback'? Choose a correct answer from the options below. A The template contains invalid JSON syntax B A subnet specified in the template does not exist C An AMI specified in the template exists in a different region than the one in which the stack is being deployed. D The template specifies an instance-store backed AMI and an incompatible EC2 instance type.
A
Which of these CloudFormation snippets of code will return an address that can be used to access our application from our browser if we're using a resource type of AWS::ElasticLoadBalancing::LoadBalancer with Logical ID "ElasticLoadBalancer"? Choose an answer from the options below A "Fn::Join" : [ "", [ "http://", { "Fn::GetAtt" : [ "ElasticLoadBalancer", "DNSName" ]}]] B "Fn::Join" : [ "", [ "http://", { "Ref" : ["ElasticLoadBalancer" }]] C "Fn::Join" : [ "http://", [ ".", { "Fn::GetAtt" : [ "ElasticLoadBalancer", "DNSName" ]}]] D "Fn::Join" : [ "", [ "http://", { "Fn::GetAtt" : [ "ElasticLoadBalancer", "URL" ]}]]
A
You are working with the S3 API and receive an error message: 409 Conflict. What is the possible cause of this error? Choose the correct answer from the options below A You're attempting to remove a bucket without emptying the contents of the bucket first. B You're attempting to upload an object to the bucket that is greater than 5TB in size. C Your request does not contain the proper metadata. D Amazon S3 is having internal issues.
A
You attempt to store an object in the US-STANDARD region in Amazon S3, and receive a confirmation that it has been successfully stored. You then immediately make another API call and attempt to read this object. S3 tells you that the object does not exist. What could explain this behavior? A. US-STANDARD uses eventual consistency and it can take time for an object to be readable in a bucket. B. Objects in Amazon S3 do not become visible until they are replicated to a second region. C. US-STANDARD imposes a 1 second delay before new objects are readable. D. You exceeded the bucket object limit, and once this limit is raised the object will be visible.
A
You have an EC2 instance deployed with an IAM role with write access permissions to an SQS queue. The instance is attempting to write a 512 KB message to an SQS queue. What will the result of this attempt be? Choose the correct answer from the options below A It will fail because it is greater than the 256 KB limit for SQS messages. B It will fail because SQS requires the EC2 instance to use API keys with permissions to write to the queue. C It will succeed as a single message request. D It will succeed but be considered as 8 message requests because SQS measures message requests in 64 KB chunks.
A
You have software on an EC2 instance that needs to access both the private and public IP address of that instance. What's the best way for the software to get that information? Choose the correct answer from the options below A Look it up in instance metadata B Look it up in user data C Use the instance metadata for the private IP and user data for the public IP D Make a call to the EC2 API
A
You're using CloudFormation templates to build out staging environments. What section of the CloudFormation would you edit in order to allow the user to specify the PEM key-name at start time? Choose a correct answer from the options below A Parameters Section B Declaration Section C Mappings Section D Resources Section
A
You've enabled website hosting on a bucket named "demo.com" in the US-East-1 (US standard region). Select the URL you'll receive from AWS as the URL for the bucket. Choose a correct answer from the options below A demo.com.s3-website-us-east-1.amazonaws.com B demo-com.s3-website-us-east-1.amazonaws.com C demo.com.s3-website.amazonaws.com D demo.com.us-east-1-s3-website.amazonaws.com
A
Your application instance takes 60 seconds to process instructions received in an SQS message. Assuming the SQS queue is configured with the default Visibility Timeout, what is the best way to configure your application to ensure that no other instances retrieve a message that has already been processed or is currently being processed? Choose the correct answer from the options below A Use the ReceiveMessage API call to retrieve the message, the ChangeMessageVisibility API call to increase the visibility timeout, and the DeleteMessage API call to delete the message when processing completes B Use the ReceiveMessage API call to retrieve the message and the DeleteMessage API call to delete the message when processing completes. C Use the ReceiveMessage API call to retrieve the message, the ChangeMessageVisibility API call to lower the visibility timeout, and the DeleteMessage API call to delete the message when processing completes. D Use ReceiveMessage API call to retrieve the message, SetQueueAttributes API call to lower the visibility timeout, and DeleteMessage API call to delete the message when processing completes.
A
Company C is currently hosting their corporate site in an Amazon S3 bucket with Static Website Hosting enabled. Currently, when visitors go to http://www.companyc.com the index.html page is returned. Company C now would like a new page welcome.html to be returned when a visitor enters http://www.companyc.com in the browser. Which of the following steps will allow Company C to meet this requirement? Choose 2 answers. A. Upload an html page named welcome.html to their S3 bucket B. Create a welcome subfolder in their S3 bucket C. Set the Index Document property to welcome.html D. Move the index.html page to a welcome subfolder E. Set the Error Document property to welcome.html
AC
Your supervisor is upset about the fact that SNS topics that he subscribed to are now cluttering up his email inbox. How can he stop receiving email from SNS without disrupting other users' ability to receive email from SNS? Choose 2 answers from the options below A You can delete the subscription from the SNS topic responsible for the emails B You can delete the endpoint from the SNS subscription responsible for the emails C You can delete the SNS topic responsible for the emails D He can use the unsubscribe information provided in the emails
AD
A corporate web application is deployed within an Amazon VPC, and is connected to the corporate data center via IPSec VPN. The application must authenticate against the on-premise LDAP server. Once authenticated, logged-in users can only access an S3 keyspace specific to the user. Which two approaches can satisfy the objectives? Choose 2 answers from the options below A The application authenticates against LDAP, and retrieves the name of an IAM role associated with the user. The application then calls the IAM Security Token Service to assume that IAM Role. The application can use the temporary credentials to access the appropriate S3 bucket. B Develop an identity broker which authenticates against IAM Security Token Service to assume an IAM Role to get temporary AWS security credentials. The application calls the identity broker to get AWS temporary security credentials with access to the appropriate S3 bucket. C The application authenticates against IAM Security Token Service using the LDAP credentials. The application uses those temporary AWS security credentials to access the appropriate S3 bucket. D The application authenticates against LDAP. The application then calls the IAM Security Service to login to IAM using the LDAP credentials. The application can use the IAM temporary credentials to access the appropriate S3 bucket. E Develop an identity broker which authenticates against LDAP, and then calls IAM Security Token Service to get IAM federated user credentials. The application calls the identity broker to get IAM federated user credentials with access to the appropriate S3 bucket.
AE
Which of the following statements about SWF are true? Choose 3 answers from the options below A SWF uses deciders and workers to complete tasks B SWF requires at least 1 EC2 instance per domain C SWF triggers SNS notifications on task assignment D SWF requires an S3 bucket for workflow storage E SWF tasks are assigned once and never duplicated F SWF workflow executions can last up to a year
AEF
Which of the following services are included at no additional cost with the use of the AWS platform? Choose 2 answers from the options below A CloudFormation B Simple Workflow Service C Elastic Load Balancing D Elastic Compute Cloud E Simple Storage Service F Auto Scaling
AF
10.2.181.56 is a valid S3 bucket name. Choose a correct answer from the options below A True B False
B
A DynamoDB table can contain ____ local secondary indexes on a table. Choose a correct answer from the options below A 3 B 5 C 10 D 2
B
A company is deploying a two-tier, highly available web application to AWS. Which service provides durable storage for static content while utilizing lower Overall CPU resources for the web tier? A Amazon EBS volume B Amazon S3 C Amazon EC2 instance store D Amazon RDS instance
B
A meteorological system monitors 600 temperature gauges, obtaining temperature samples every minute and saving each sample to a DynamoDB table. Each sample involves writing 1K of data and the writes are evenly distributed over time. How much write throughput is required for the target table? A. 1 write capacity unit B. 10 write capacity units C. 60 write capacity units D. 600 write capacity units E. 3600 write capacity units
B
A recent increase in the amount of users of an application hosted on an EC2 instance that you manage has caused the instance's OS to run out of CPU resources and crash. The crash caused several users' unsaved data to be lost and your supervisor wants to know how this problem can be avoided in the future. Which of the following would you not recommend? A Redesign the application so that users' unsaved data is periodically written to disk. B Take frequent snapshots of the EBS volume during business hours to ensure users' data is backed up. C Snapshot the EBS volume and re-deploy the application server as a larger instance type. D Use autoscaling to deploy additional application server instances when load is high.=
B
A root account owner is trying to setup an additional level of security for all his IAM users. Which of the below mentioned options is a recommended solution for the account owner? A. Enable access key and secret access key for all the IAM users B. Enable MFA for all IAM users C. Enable the password for all the IAM users D. Enable MFA for the root account
B
A user has configured a website and launched it using the Apache web server on port 80. The user is using ELB with the EC2 instances for Load Balancing. What should the user do to ensure that the EC2 instances accept requests only from ELB? A. Open the port for an ELB static IP in the EC2 security group B. Configure the security group of EC2, which allows access to the ELB source security group C. Configure the EC2 instance so that it only listens on the ELB port D. Configure the security group of EC2, which allows access only to the ELB listener
B
A user has created a blank EBS volume in the US-East-1 region. The user is unable to attach the volume to a running instance in the same region. What could be the possible reason for this? A. The instance must be in a running state. It is required to stop the instance to attach volume B. The AZ for the instance and volume are different C. The instance is from an instance store backed AMI D. The instance has enabled the volume attach protection
B
A user has created a new raw EBS volume. The user mounts the volume on the instance to which it is attached. Which of the below mentioned options is a required step before the user can mount the volume? A. Run a cyclic check on the device for data consistency B. Create a file system of the volume C. No step is required. The user can directly mount the device D. Resize the volume as per the original snapshot size
B
A user is enabling a static website hosting on an S3 bucket. Which of the below mentioned parameters cannot be configured by the user? A. Error document B. Conditional error on object name C. Index document D. Conditional redirection on object name
B
A user is planning to host MS SQL on an EBS volume. It was recommended to use the AWS RDS. What advantages will the user have if he uses RDS in comparison to an EBS based DB? A. Better throughput with PIOPS B. Automated backup C. MS SQL is not supported with RDS D. High availability with multi AZs
B
A user is planning to host data with RDS. Which of the below mentioned databases is not supported by RDS? A. PostgreSQL B. SQLDB C. Oracle D. MS SQL
B
A user is planning to use the AWS RDS with MySQL. Which of the below mentioned services the user is not going to pay? A. Data transfer B. RDS Cloudwatch metrics C. Data storage D. I/O requests per month
B
A user is setting up an Elastic Load Balancer(ELB). Which of the below parameters should the user consider so as the instance gets registered with the ELB? A. ELB DNS B. IP address C. Security group D. ELB IP
B
An organization has 10 departments. The organization wants to track the AWS usage of each department. Which of the below mentioned options meets the requirement? A. Setup IAM groups for each department and track their usage B. Create separate accounts for each department, but use consolidated billing for payment and tracking C. Create separate accounts for each department and track them separately D. Setup IAM users for each department and track their usage
B
An organization has 20 employees. The organization wants to give all the users access to the organization AWS account. Which of the below mentioned options is the right solution? A. Share the root credentials with all the users B. Create an IAM user for each employee and provide access to them C. It is not advisable to give AWS access to so many users D. Use the IAM role to allow access based on STS
B
Company A has an S3 bucket containing premier content that they intend to make available to only paid subscribers of their website. The S3 bucket currently has default permissions of all objects being private to prevent inadvertent exposure of the premier content to non-paying website visitors. How can Company A provide only paid subscribers the ability to download a premier content file in the S3 bucket? A Apply a bucket policy that grants anonymous users to download the content from the S3 bucket B Generate a pre-signed object URL for the premier content file when a paid subscriber requests a download C Add a bucket policy that requires Multi-Factor Authentication for requests to access the S3 bucket objects D Enable server side encryption on the S3 bucket for data protection against the non-paying website visitors
B
Company B is writing 10 items to the products table every second. Each item is 15.5Kb in size. What would be the required provisioned write throughput for best performance? Choose the correct answer from the options below. A 10 B 160 C 155 D 16
B
Company B provides an online image recognition service and utilizes SOS to decouple system components for scalability The SQS consumers poll the imaging queue as often as possible to keep end-to-end throughput as high as possible. However, Company B is realizing that polling in tight loops is burning CPU cycles and increasing costs with empty responses. How can Company B reduce the number of empty responses? A. Set the imaging queue visibility Timeout attribute to 20 seconds B. Set the Imaging queue ReceiveMessageWaitTimeSeconds attribute to 20 seconds C. Set the imaging queue MessageRetentionPeriod attribute to 20 seconds D. Set the DelaySeconds parameter of a message to 20 seconds
B
Does DynamoDB support in-place atomic updates? PrepAway - Latest Free Exam Questions & Answers A. It is not defined B. Yes C. It does support in-place non-atomic updates D. No
B
DynamoDB supports cross table joins. A True B False
B
Is DynamoDB suited only for high scale based applications? Choose an answer from the options below A True B False
B
Once a message has been published to SNS, can it be recalled? Choose one answer from the options below A True B False
B
PassLeader (with AWS account ID 111122223333) has created 50 IAM users for its organization's employees. PassLeader wants to make the AWS console login URL for all IAM users like: https://passleader.signin.aws.amazon.com/console/. How can this be configured? A. The user needs to use Route 53 to map the passleader domain and IAM URL B. Create an IAM AWS account alias with the name passleader C. It is not possible to have a personalized IAM login URL D. Create an IAM hosted zone Identity for the domain passleader
B
What is the AWS service provided which provides a fully managed NoSQL database service that provides fast and predictable performance with seamless scalability. A AWS RDS B DynamoDB C Oracle RDS D Elastic MapReduce E Simple Network Management Protocol
B
What is the maximum length of a topic name in SNS? Choose the correct answer from the options below A 128 characters B 256 characters C 512 characters D There is no limit
B
What is the maximum number of tags that a user can assign to an EC2 instance? A. 50 B. 10 C. 5 D. 25
B
You have been doing a lot of testing of your VPC Network by deliberately failing EC2 instances to test whether instances are failing over properly. Your customer who will be paying the AWS bill for all this asks you if he being charged for all these instances. You try to explain to him how the billing works on EC2 instances to the best of your knowledge. What would be an appropriate response to give to the customer in regards to this? A. Billing commences when Amazon EC2 AMI instance is completely up and billing ends as soon as the instance starts to shutdown. B. Billing commences when Amazon EC2 initiates the boot sequence of an AMI instance and billing ends when the instance shuts down. C. Billing only commences only after 1 hour of uptime and billing ends when the instance terminates. D. Billing commences when Amazon EC2 initiates the boot sequence of an AMI instance and billing ends as soon as the instance starts to shutdown.
B
You have created a mobile application that relies on reading data from DynamoDB. How could you give each mobile device permissions to read from DynamoDB? Choose an answer from the options below A Connect to an EC2 instance which will pull the data from DynamoDB securely B Create an IAM role that can be assumed by an app that allows federated users C Add the username and password into the app code D Create an IAM user
B
You run an ad-supported photo sharing website using S3 to serve photos to visitors of your site. At some point you find out that other sites have been linking to the photos on your site, causing loss to your business. What is an effective method to mitigate this? A. Store photos on an EBS volume of the web server. B. Remove public read access and use signed URLs with expiry dates. C. Use CloudFront distributions for static content. D. Block the IPs of the offending websites in Security Groups.
B
A startup s photo-sharing site is deployed in a VPC. An ELB distributes web traffic across two subnets. ELB session stickiness is configured to use the AWS-generated session cookie, with a session TTL of 5 minutes. The webserver Auto Scaling Group is configured as: min-size=4, max-size=4. The startups preparing for a public launch, by running loadtesting software installed on a single EC2 instance running in us-west-2a. After 60 minutes of load-testing, the webserver logs show: Which recommendations can help ensure load-testing HTTP requests are evenly distributed across the four webservers? Choose 2 answers. A. Launch and run the load-tester EC2 instance from us-east-1 instead. B. Re-configure the load-testing software to re-resolve DNS for each web request. C. Use a 3rd-party load-testing service which offers globally-distributed test clients. D. Configure ELB and Auto Scaling to distribute across us-west-2a and us-west-2c. E. Configure ELB session stickiness to use the app-specific session cookie.
BC
Which of the following is an incorrect S3 bucket name? Choose 2 correct answer from the options below A 1-demo.com B 10.2.181.2 C 1Demo.com D 1demo.com
BC
Which statements about Amazon RDS are true? Choose 2 answers from the options below A RDS supports Oracle, MySQL and DB2 B RDS can be deployed within a VPC C RDS supports automated backups D RDS features are identical across all support database technologies
BC
Which statements about DynamoDB are true? Choose 2 answers. A. DynamoDB uses a pessimistic locking model B. DynamoDB uses optimistic concurrency control C. DynamoDB uses conditional writes for consistency D. DynamoDB restricts item access during reads E. DynamoDB restricts item access during writes
BC
You have launched a windows server EC2 instance which is up and running. You however cannot connect from your corporate laptop using Remote Desktop Connection over the internet. Which of the following can be a cause. Choose 3 answers from the options below A The instance security group does not support ingress to port 22 B The instance security group does not support ingress to port 3389 C The instance does not have a route to the internet gateway D Windows instances do not support the RDP protocol E The IP Address of the laptop is being masked by the corporate network proxy server
BCE
Which of the following are actors in an Amazon SWF workflow. Choose 3 answers from the options below A Workflow activity B Decider C Activity worker D Adapter E Message port F Workflow starter
BCF
Which features can be used to restrict access to data in S3? Choose 2 answers. A. Use S3 Virtual Hosting. B. Set an S3 Bucket policy. C. Enable IAM Identity Federation. D. Set an S3 ACL on the bucket or the object. E. Create a CloudFront distribution for the bucket.
BD
Which of the following programming languages have an officially supported AWS SDK? Choose 2 answers. A. Perl B. PHP C. Pascal D. Java E. SQL
BD
A local secondary index is an index that has the same hash key as the table, but a different range key. Choose the correct answer from the options below A True B False
A
A user has configured ELB with two instances running in separate AZs of the same region? Which of the below mentioned statements is true? A. Multi AZ instances will provide HA with ELB B. Multi AZ instances are not possible with a single ELB C. Multi AZ instances will provide scalability with ELB D. The user can achieve both HA and scalability with ELB
A
A user has created an EBS volume with 1000 IOPS. What is the average IOPS that the user will get for most of the year as per EC2 SLA if the instance is attached to the EBS optimized instance? A. 900 B. 990 C. 950 D. 1000
A
A user is planning to host a mobile game on EC2 which sends notifications to active users on either high score or the addition of new features. The user should get this notification when he is online on his mobile device. Which of the below mentioned AWS services can help achieve this functionality? A. AWS Simple Notification Service. B. AWS Simple Queue Service. C. AWS Mobile Communication Service. D. AWS Simple Email Service.
A
A user is trying to understand AWS SNS. To which of the below mentioned end points is SNS unable to send a notification? A. AWS SES B. Email JSON C. AWS SQS D. HTTP
A
A user wants to access RDS from an EC2 instance using IP addresses. Both RDS and EC2 are in the same region, but different AZs. Which of the below mentioned options help configure that the instance is accessed faster? A. Configure the Private IP of the Instance in RDS security group B. Security group of EC2 allowed in the RDS security group C. Configuring the elastic IP of the instance in RDS security group D. Configure the Public IP of the instance in RDS security group
A
AWS CloudFormation provides a set of Python helper scripts that you can use to install software and start services on an Amazon EC2 instance in your stack. You can call the helper scripts directly from your template. Choose an answer from the options below. A True B False
A
Any local secondary index in a DynamoDB table can be updated once it is created. A False B True
A
Can software's be installed at stack creation process in Cloudformation? Choose the correct answers from the options below A True B False
A
Company B has created an e-commerce site using DynamoDB and is designing a products table that includes items purchased and the users who purchased the item. When creating a primary key on a table which of the following would be the best attribute for the primary key? Select the BEST possible answer. A user_id where there are many users to few products B product_id where there are few products to many users C category_id where there are few categories to many products D None of the above
A
Company B has many users updating the same table. At times it is not uncommon for multiple users to update the same item and attribute of an item at the same time. If user A calls an item in a table to update an attribute at the same time as user B and user B updates the table first, what can we deploy in DynamoDB to ensure User A is not updating an item that was updated since User A's table read? Choose the correct answer from the options below. A Conditional Writes B Eventual Consistency C Extra API read calls to determine if the data was updated before the update call is made D Atomic Counters
A
Does AWS CloudFormation assume default template version if one is not explicitly mentioned in a CloudFormation template? A True B False
A
Does SNS guarantee message delivery to SQS? Choose one answer from the options below A True B False
A
DynamoDB supports two types of primary keys, "Hash" and "Hash and Range" primary keys. Choose the correct answer from the options below A True B False
A
How many global secondary indexes are allowed per table? Choose the correct answer from the options below. A 5 B 1 C 10 D 15
A
In AWS CloudFormation, the intrinsic function Fn::Join appends a set of values into a single value, separated by the specified delimiter. If a delimiter is the empty string, the set of values are concatenated with no delimiter. Keeping the above in mind what value will the following example return? "Fn::Join" : [ "-", [ "the", "demo", "app" ] ] A the-demo-app B -thedemoapp C -the-demo-app D -the-demo-app-
A
In AWS Elastic Beanstalk, if the application returns any response other than 200 ,OK or there is no response within the configured InactivityTimeout period, ____. A. SQS once again makes the message visible in the queue and available for another attempt at processing B. SQS waits for another timeout C. SQS run DeleteMessagecall and deletes the message from the queue D. SQS sends a message to the application with the MessageID and pending status
A
In DynamoDB, an atomic counter allows all write requests to be applied in the order they are received by incrementing or decrementing the attribute value. A True B False
A
In SNS, are push notifications allowed for multiple platforms. A True B False
A
Regarding Amazon SNS, to send messages to a queue through a topic, you must subscribe the queue to the Amazon SNS topic. You specify the queue by its ____. A. ARN B. Token C. Registration ID D. URL
A
Regarding Amazon SWF, at times you might want to record information in the workflow history of a workflow execution that is specific to your use case. ____ enable you to record information in the workflow execution history that you can use for any custom or scenario-specific purpose. A. Markers B. Tags C. Hash keys D. Events
A
What is the default timeout for visibility queue in SQS in seconds? Choose the correct answer from the options below A 30 B 14 C 10 D 60
A
What is the maximum time messages can be stored in SQS? A. 14 days B. one month C. 4 days D. 7 days
A
When a Simple Queue Service message triggers a task that takes 5 minutes to complete, which process below will result in successful processing of the message and remove it from the queue while minimizing the chances of duplicate processing? A. Retrieve the message with an increased visibility timeout, process the message, delete the message from the queue B. Retrieve the message with an increased visibility timeout, delete the message from the queue, process the message C. Retrieve the message with increased DelaySeconds, process the message, delete the message from the queue D. Retrieve the message with increased DelaySeconds, delete the message from the queue, process the message
A
Which of the following groups is AWS Elastic Beanstalk best suited for? A. Those who want to deploy and manage their applications within minutes in the AWS cloud. B. Those who want to privately store and manage Git repositories in the AWS cloud. C. Those who want to automate the deployment of applications to instances and to update the applications as required. D. Those who want to model, visualize, and automate the steps required to release software.
A
Which of the following solutions is not supported by DynamoDB? A. Hash secondary index B. Local secondary index C. Hash Primary Key D. Global secondary index
A
You are maintaining an application that is spread across multiple web servers and has incoming traffic balanced by ELB. The application allows users to upload pictures. Currently each web server stores the image and a background task synchronizes the data between servers. However the synchronization task can no longer keep up with the number of images uploaded What change could you make so that all web servers have a place to store and read images at the same time? Choose an answer from the options below A Store the images in Amazon S3 B Store the images on Amazon Cloudfront C Store the images on Amazon EBS D Store the images on the ELB
A
A bucket owner has allowed another account's IAM users to upload or access objects in his bucket. The IAM user of CAccount A is trying to access an object created by the IAM user of account B. What will happen in this scenario? A. The bucket policy may not be created as S3 will give error due to conflict of Access Rights B. It is not possible to give permission to multiple IAM users C. AWS S3 will verify proper rights given by the owner of Account A, the bucket owner as well as by the IAM user B to the object D. It is not possible that the IAM user of one account accesses objects of the other IAM user
C
A meteorological system monitors 600 temperature gauges, obtaining temperature samples every minute and saving each sample to a DynamoDB table. Each sample involves writing 1K of data and the writes are evenly distributed over time. How much write throughput is required for the target table? Choose an answer from the options below A 3600 write capacity units B 1 write capacity unit C 10 write capacity units D 60 write capacity units E 600 write capacity units
C
A user had defined an IAM policy similar to the one given below on a bucket: { "Version": "2012-10-17", "Statement": [{ "Effect": "Allow", "Principal": { "AWS": "arn:aws:iam::12112112:user/test" }, "Action": [ "s3:GetBucketLocation", "s3:ListBucket", "s3:GetObject" ], "Resource": [ "arn:aws:s3:::passleader" ] } ] } What will this do? A. It will result in an error saying invalid policy statement B. It will create an IAM policy for the user test C. Allows the user test of the AWS account ID 12112112 to perform GetBucketLocation, ListBucket and GetObject on the bucket passleader D. It will allow all the IAM users of the account ID 12112112 to perform GetBucketLocation, ListBucket and GetObject on bucket passleader
C
____ can be used to bootstrap both the Chef Server and Chef Client software on your EC2 instances. A. AWS CloudFormation B. AWS Elastic Beanstalk C. AWS OpsWorks D. Amazon Glacier
A
A user has attached one RDS security group with 5 RDS instances. The user has changed the ingress rule for the security group. What will be the initial status of the ingress rule? A. Approving B. Implementing C. Authorizing D. It is not possible to assign a single group to multiple DB instances
C
ou are providing AWS consulting services for a company developing a new mobile application that will be leveraging Amazon SNS Mobile Push for push notifications. In order to send direct notification messages to individual devices each device registration identifier or token needs to be registered with SNS; however the developers are not sure of the best way to do this. You advise them to A Call the CreatePlatformEndPoint API function to register multiple device tokens. B Bulk upload the device tokens contained in a CSV file via the AWS Management Console. C Let the push notification service (e.g. Amazon Device Messaging) handle the registration. D Implement a token vending service to handle the registration.
A
A user has created photo editing software and hosted it on EC2. The software accepts requests from the user about the photo format and resolution and sends a message to S3 to enhance the picture accordingly. Which of the below mentioned AWS services will help make a scalable software with the AWS infrastructure in this scenario? A. AWS Elastic Transcoder B. AWS Simple Notification Service C. AWS Simple Queue Service D. AWS Glacier
C
A user has launched one EC2 instance in the US West region. The user wants to access the RDS instance launched in the US East region from that EC2 instance. How can the user configure the access for that EC2 instance? A. It is not possible to access RDS of the US East region from the US West region B. Open the security group of the US West region in the RDS security group's ingress rule C. Configure the IP range of the US West region instance as the ingress security rule of RDS D. Create an IAM role which has access to RDS and launch an instance in the US West region with it
C
A user has not enabled versioning on an S3 bucket. What will be the version ID of the object inside that bucket? A. 0 B. There will be no version attached C. Null D. Blank
C
A user is configuring the HTTPS protocol on a front end ELB and the SSL protocol for the back-end listener in ELB. What will ELB do? A. It will allow you to create the configuration, but the instance will not pass the health check B. Receives requests on HTTPS and sends it to the back end instance on SSL C. It will not allow you to create this configuration D. It will allow you to create the configuration, but ELB will not work as expected
C
A user is creating an EBS volume. He asks for your advice. Which advice mentioned below should you not give to the user for creating an EBS volume? A. Take the snapshot of the volume when the instance is stopped B. Stripe multiple volumes attached to the same instance C. Create an AMI from the attached volume D. Attach multiple volumes to the same instance
C
A user is having access to objects of an S3 bucket which is not owned by him. If he is trying to set the objects of that bucket public, which of the below mentioned options may be a right fit for this action? A. Make the bucket public with full access B. Define the policy for the bucket C. Provide ACL on the object D. Create an IAM user with permission
C
A user is running a MySQL RDS instance. The user will not use the DB for the next 3 months. How can the user save costs? A. Pause the RDS activities from CLI until it is required in the future B. Stop the RDS instance C. Create a snapshot of RDS to launch in the future and terminate the instance now D. Change the instance size to micro
C
A user is trying to create a policy for an IAM user from the AWS console. Which of the below mentioned options is not available to the user while configuring policy? A. Use policy generator to create policy B. Use custom policy to create policy C. Use policy simulator to create policy D. Assign No permission
C
An EC2 instance has one additional EBS volume attached to it. How can a user attach the same volume to another running instance in the same AZ? A. Terminate the first instance and only then attach to the new instance B. Attach the volume as read only to the second instance C. Detach the volume first and attach to new instance D. No need to detach. Just select the volume and attach it to the new instance, it will take care of mapping internally
C
An ELB is diverting traffic across 5 instances. One of the instances was unhealthy only for 20 minutes. What will happen after 20 minutes when the instance becomes healthy? A. ELB will never divert traffic back to the same instance B. ELB will not automatically send traffic to the same instance. However, the user can configure to start sending traffic to the same instance C. ELB starts sending traffic to the instance once it is healthy D. ELB terminates the instance once it is unhealthy. Thus, the instance cannot be healthy after 10 minutes
C
An account owner has created an IAM user with the name passleader. The account owner wants to give EC2 access of only the US West region to that IAM user. How can the owner configure this? A. While creating a policy provide the region as a part of the resources B. Create an IAM user in the US West region and give access to EC2 C. Create an IAM policy and define the region in the condition D. It is not possible to provide access based on the region
C
An online gaming site asked you if you can deploy a database that is a fast, highly scalable NoSQL database service in AWS for a new site that he wants to build. Which database should you recommend? A. Amazon Redshift B. Amazon SimpleDB C. Amazon DynamoDB D. Amazon RDS
C
An organization has 500 employees. The organization wants to set up AWS access for each department. Which of the below mentioned options is a possible solution? A. Create IAM roles based on the permission and assign users to each role B. Create IAM users and provide individual permission to each C. Create IAM groups based on the permission and assign IAM users to the groups D. It is not possible to manage more than 100 IAM users with AWS
C
At what size does does AWS recommend customers to use the multi-part upload tool when uploading object to S3? A 1 MB B 1 TB C 100 MB D 1 GB
C
Can one instance be registered with two ELBs in the same region? A. No B. Yes, provided both ELBs have the same health check configuration C. Yes, always D. Yes, provided both ELBs are in the same AZ
C
Company B is using strongly consistent reads to request 50 items per second from their customer table. Each item is 20KB in size. What throughout would be required to efficiently handle the read throughput of the table ? A 150 B 50 C 250 D 125
C
Company D is running their corporate website on Amazon S3 accessed from http//www.companyd.com. Their marketing team has published new web fonts to a separate S3 bucket accessed by the S3 endpoint https://s3-us-west1. amazonaws.com/cdfonts. While testing the new web fonts, Company D recognized the web fonts are being blocked by the browser. What should Company D do to prevent the web fonts from being blocked by the browser? A Create a policy on the cdfonts bucket to enable access to everyone B Add the Content-MD5 header to the request for webfonts in the cdfonts bucket from the website C Configure the cdfonts bucket to allow cross-origin requests by creating a CORS configuration D Enable versioning on the cdfonts bucket for each web font
C
Doug has created a VPC with CIDR 10.201.0.0/16 in his AWS account. In this VPC he has created a public subnet with CIDR block 10.201.31.0/24. While launching a new EC2 from the console, he is not able to assign the private IP address 10.201.31.6 to this instance. Which is the most likely reason for this issue? A. Private IP address 10.201.31.6 is not part of the associated subnet's IP address range. B. Private IP address 10.201.31.6 is blocked via ACLs in Amazon infrastructure as a part of platform security. C. Private address IP 10.201.31.6 is currently assigned to another interface. D. Private IP address 10.201.31.6 is reserved by Amazon for IP networking purposes.
C
Games-R-Us is launching a new game app for mobile devices. Users will log into the game using their existing Facebook account and the game will record player data and scoring information directly to a DynamoDB table. What is the most secure approach for signing requests to the DynamoDB API? A. Create an IAM user with access credentials that are distributed with the mobile app to sign the requests B. Distribute the AWS root account access credentials with the mobile app to sign the requests C. Request temporary security credentials using web identity federation to sign the requests D. Establish cross account access between the mobile app and the DynamoDB table to sign the requests
C
Games-R-Us is launching a new game app for mobile devices. Users will log into the game using their existing Facebook account and the game will record player data and scoring information directly to a DynamoDB table. What is the most secure approach for signing requests to the DynamoDB API? Choose an answer from the options below A Create an IAM user with access credentials that are distributed with the mobile app to sign the requests B Distribute the AWS root account access credentials with the mobile app to sign the requests C Request temporary security credentials using web identity federation to sign the requests D Establish cross account access between the mobile app and the DynamoDB table to sign the requests
C
How can you secure data at rest on an EBS volume? A. Attach the volume to an instance using EC2's SSL interface. B. Write the data randomly instead of sequentially. C. Use an encrypted file system on top of the BBS volume. D. Encrypt the volume using the S3 server-side encryption service. E. Create an IAM policy that restricts read and write access to the volume.
C
How long can messages live in an SQS queue. Choose the correct answer from the options below A 12 hours B 10 days C 14 days D 1 year
C
The following code snippet is the parameters section of a CloudFormation template that you have written. "Parameters" : { "KeyName": { "Description" : "answer to the question", "Type": "AWS::EC2::KeyPair::KeyName", ... } } Which of the the following is the best description of what this section will do once you run your CloudFormation template? A It will ask you if you want to create a new key pair to use. B It will ask you to input any name and that name will then be the name of the new key pair it will generate. C It will ask you to provide the name of an existing EC2 KeyPair to use. D It will create a new key pair automatically for you named KeyName.
C
What are the new type of SQS queues available in some regions? Choose an answer from the options below A LIFO B Dynamic C FIFO D Static
C
What configuration does AWS provide to handle unsuccessfully-processed messages in SQS? Choose an answer from the options below A Retention queues B Delivery queues C Dead letter queues D There is no such option available
C
What is the data model of DynamoDB? A. "Items", with Keys and one or more Attribute; and "Attribute", with Name and Value. B. "Database", which is a set of "Tables", which is a set of "Items", which is a set of "Attributes". C. "Table", a collection of Items; "Items", with Keys and one or more Attribute; and "Attribute", with Name and Value. D. "Database", a collection of Tables; "Tables", with Keys and one or more Attribute; and "Attribute", with Name and Value.
C
What is the maximum number of S3 Buckets available per AWS account? A. 100 per region B. there is no limit C. 100 per account D. 500 per account E. 100 per IAM user
C
What is the maximum number of topics allowed per account in SNS? Choose the correct answer from the options below A 1,000 B 10,000 C 100,000 D There is no limit
C
What kind of message does SNS send to endpoints? Choose the correct answer from the options below A An XML document with parameters like Message, Source, Destination, Type B A JSON document with parameters like Message, Source, Destination, Type C A JSON document with parameters like Message, Signature, Subject, Type D An XML document with parameters like Message, Signature, Subject, Type
C
When AutoScaling is launching a new instance based on condition, which of the below mentioned policies will it follow? A. Based on the criteria defined with cross zone Load balancing B. Launch an instance which has the highest load distribution C. Launch an instance in the AZ with the fewest instances D. Launch an instance in the AZ which has the highest instances
C
When a Simple Queue Service message triggers a task that takes 5 minutes to complete, which process below will result in successful processing of the message and remove it from the queue while minimizing the chances of duplicate processing? Choose an answer from the options below A Retrieve the message with an increased visibility timeout, delete the message from the queue, process the message B Retrieve the message with increased DelaySeconds, process the message, delete the message from the queue C Retrieve the message with an increased visibility timeout, process the message, delete the message from the queue D Retrieve the message with increased DelaySeconds, delete the message from the queue, process the message
C
When working with AWS CloudFormation Templates what is the maximum number of stacks that you can create? A. 500 B. 50 C. 20 D. 10
C
When you register an activity in Amazon SWF, you provide the following information, except: A. a name B. timeout values C. a domain D. version
C
When you use the AWS Elastic Beanstalk console to deploy a new application ____. A. you'll need to upload each file separately B. you'll need to create each file and path C. you'll need to upload a source bundle D. you'll need to create each file
C
Which of the following is chosen as the default region when making an API call with an AWS SDK? A. ap-northeast-1 B. us-west-2 C. us-east-1 D. eu-west-1 E. us-central-1
C
Which of the following is chosen as the default region when making an API call with an AWS SDK? Choose an answer from the options below A ap-northeast-1 B us-west-2 C us-east-1 D eu-west-1 E us-central-1
C
Which of the following is not true about SWF? Choose the correct answer from the options below A Decision tasks occur when the state of the workflow changes. B EC2 instances can perform a worker task. C Humans can perform a decision task. D A server residing outside of an AWS datacenter can perform a worker task.
C
You are building an online store on AWS that uses SQS to process your customer orders. Your backend system needs those messages in the same sequence the customer orders have been put in. How can you achieve that? A. You can do this with SQS but you also need to use SWF B. Messages will arrive in the same order by default C. You can use sequencing information on each message D. It is not possible to do this with SQS
C
You are inserting 1000 new items every second in a DynamoDB table. Once an hour these items are analyzed and then are no longer needed. You need to minimize provisioned throughput, storage, and API calls. Given these requirements, what is the most efficient way to manage these Items after the analysis? A. Retain the items in a single table B. Delete items individually over a 24 hour period C. Delete the table and create a new table per hour D. Create a new table per hour
C
You are inserting 1000 new items every second in a DynamoDB table. Once an hour these items are analyzed and then are no longer needed. You need to minimize provisioned throughput, storage, and API calls. Given these requirements, what is the most efficient way to manage these Items after the analysis? Choose an answer from the options below A Retain the items in a single table B Delete items individually over a 24 hour period C Delete the table and create a new table per hour D Create a new table per hour
C
You are writing to a DynamoDB table and receive the following exception:" ProvisionedThroughputExceededException", though according to your Cloudwatch metrics for the table, you are not exceeding your provisioned throughput. What could be an explanation for this? A You haven't provisioned enough DynamoDB storage instances B You're exceeding your capacity on a particular Range Key C You're exceeding your capacity on a particular Hash Key D You're exceeding your capacity on a particular Sort Key E You haven't configured DynamoDB Auto Scaling triggers
C
You are writing to a DynamoDB table and receive the following exception:" ProvisionedThroughputExceededException". though according to your Cloudwatch metrics for the table, you are not exceeding your provisioned throughput. What could be an explanation for this? A. You haven't provisioned enough DynamoDB storage instances B. You're exceeding your capacity on a particular Range Key C. You're exceeding your capacity on a particular Hash Key D. You're exceeding your capacity on a particular Sort Key E. You haven't configured DynamoDB Auto Scaling triggers
C
You attempt to store a new object in the US-STANDARD region in Amazon S3 and receive a confirmation that it has been successfully stored. You then immediately make another API call and attempt to read this object. Will you be able to read this object immediately after? Choose the correct answer from the options below A It depends. Objects in Amazon S3 do not become visible until they are replicated to a second region, which can take a few milliseconds or sometimes even a few seconds. B Yes, unless you exceed API call limits. C Yes, US-Standard has read-after-write consistency which means you will have access to the object immediately after. D US - STANDARD imposes a 1 second delay before new objects are readable.
C
You created three S3 buckets - "mydomain.com", "downloads.mydomain.com", and "www.mydomain.com". You uploaded your files, enabled static website hosting, specified both of the default documents under the "enable static website hosting" header, and set the "Make Public" permission for the objects in each of the three buckets. All that's left for you to do is to create the Route 53 Aliases for the three buckets. You are going to have your end users test your websites by browsing to http://mydomain.com/error.html, http://downloads.mydomain.com/index.html, and http://www.mydomain.com. What problems will your testers encounter? Choose an answer from the options below A http://mydomain.com/error.html will not work because you did not set a value for the error.html file B http://www.mydomain.com will not work because the URL does not include a file name at the end of it. C There will be no problems, all three sites should work. D http://downloads.mydomain.com/index.html will not work because the "downloads" prefix is not a supported prefix for S3 websites using Route 53 aliases
C
You want to find out what AMIs are available for you to use in a given region. Which API call is most appropriate? Choose an answer from the options below A ListInstances B ListAMIs C DescribeImages D DescribeAMIs
C
A startups photo-sharing site is deployed in a VPC. An ELB distributes web traffic across two subnets. ELB session stickiness is configured to use the AWS-generated session cookie, with a session TTL of 5 minutes. The webserver Auto Scaling Group is configured as: min-size=4, max-size=4. The startups preparing for a public launch, by running load-testing software installed on a single EC2 instance running in us-west-2a. After 60 minutes of load-testing, the webserver logs show: Which recommendations can help ensure load-testing HTTP requests are evenly distributed across the four webservers? Choose 2 answers from the options below A Re-configure the load-testing software to re-resolve DNS for each web request. B Use a 3rd-party load-testing service which offers globally-distributed test clients. C Configure ELB and Auto Scaling to distribute across us-west-2a and us-west-2c. D Configure ELB session stickiness to use the app-specific session cookie. E Launch and run the load-tester EC2 instance from us-east-1 instead.
AB
What are the 2 actions required to fanout identical messages to multiple SQS queues. Choose 2 answers from the options below A Use Amazon SNS to create a topic. B Create and subscribe multiple Amazon SQS standard queues to the Amazon SNS topic. C Create and subscribe single Amazon SQS standard queues to the Amazon SNS topic. D Use Cloudformation templates
AB
Which of the following platforms are supported by Elastic Beanstalk? Choose 2 answers. A. Apache Tomcat B. .NET C. IBM Websphere D. Oracle JBoss E. Jetty
AB
What are the protocol versions supported by SQS. Choose 3 answers from the options below A TLS 1.0 B TLS 1.1 C TLS 1.2 D TLS 1.3
ABC
What are some of the owner operations possible in SNS? Choose 3 correct answers from the options below A CreateTopic B DeleteTopic C ListSubscriptions D AddPermission
ABD
What are the API's available for DynamoDB? Choose 3 answers from the options below A CreateTable B UpdateTable C ListAllTables D UpdateItem
ABD
Which of the following are AWS IAM entities. Choose 3 answers from the options below A User B Group C Team D Role E Root F Organization
ABD
You would like to set up a static website on S3 with the least possible effort. The URL of the website is unimportant to you. Which of the following steps are necessary? Choose 3 correct answer from the options below A Upload an index document to your S3 bucket B Select the "Make Public" permission for your bucket's objects C Create an Alias record in Route 53 D Enable static website hosting in your S3 bucket properties
ABD
Which of the following are valid arguments for an SNS Publish request? Choose 3 answers. A. TopicAm B. Subject C. Destination D. Format E. Message F. Language
ABE
Company C is currently hosting their corporate site in an Amazon S3 bucket with Static Website Hosting enabled. Currently, when visitors go to http://www.companyc.com the index.html page is returned. Company C now would like a new page welcome.html to be returned when a visitor enters http://www.companyc.com in the browser. Which of the following steps will allow Company C to meet this requirement? Choose 2 answers from the options below A Upload an html page named welcome.html to their S3 bucket B Create a welcome subfolder in their S3 bucket C Set the Index Document property to welcome.html D Move the index.html page to a welcome subfolder E Set the Error Document property to welcome.html
AC
Which features can be used to restrict access to data in S3? Choose 2 answers from the options below A Set an S3 Bucket policy. B Enable IAM Identity Federation. C Set an S3 ACL on the bucket or the object. D Use Server-Side encryption to encrypt the data stored in S3 bucket.
AC
Which of the following are correct statements with policy evaluation logic in AWS Identity and Access Management? Choose 2 answers. A. By default, all requests are denied B. An explicit allow overrides an explicit deny C. An explicit allow overrides default deny D. An explicit deny does not override an explicit allow E. By default, all request are allowed
AC
Which of the following are the responsibility of AWS. Choose 2 answers from the options below A Virtualization Infrastructure B Managing security groups C Physical security of AWS data centers D Patching the OS on the running EC2 instance
AC
Which of the following are valid SNS delivery transports? Choose 2 answers from the options below A SMS B DynamoDB C HTTP D UDP E Named Pipes
AC
Which of the following are valid SNS delivery transports? Choose 2 answers. A. HTTP B. UDP C. SMS D. DynamoDB E. Named Pipes
AC
Which of the following can be increased by contacting AWS? Choose 2 correct answer from the options below A DynamoDB tables per account B DynamoDB secondary indexes per table C S3 buckets per account D S3 buckets per region
AC
Which of the following programming languages have an officially supported AWS SDK? Choose 2 answers from the options below A PHP B Pascal C Java D SQL E Perl
AC
What AWS products and features can be deployed by Elastic Beanstalk? Choose 3 answers from the options below A Auto scaling groups B Route 53 hosted zones C Elastic Load Balancers D RDS Instances E Elastic IP addresses F SQS Queues
ACD
What AWS products and features can be deployed by Elastic Beanstalk? Choose 3 answers. A. Auto scaling groups B. Route 53 hosted zones C. Elastic Load Balancers D. RDS Instances E. Elastic IP addresses F. SQS Queues
ACD
Which of the below APIS are available for tables in DynamoDB? Choose 3 answers from the options below A CreateTable B UpdateAllTables C UpdateTable D ListTables
ACD
Which of the below logical operators are allowed in a DynamoDB query? Choose 3 answers from the options below A NOT B XOR C OR D AND
ACD
In AWS, which security aspects are the customer's responsibility? Choose 4 answers. A. Life-cycle management of IAM credentials B. Decommissioning storage devices C. Security Group and ACL (Access Control List) settings D. Encryption of EBS (Elastic Block Storage) volumes E. Controlling physical access to compute resources F. Patch management on the EC2 instance's operating system
ACDF
Which is the following services can be used to deploy systems into AWS. Choose 3 answers from the options below A AWS Elastic Beanstalk B Amazon ElasticCache C AWS Cloudformation D Amazon Kinesis E AWS Opsworks
ACE
Which of the following are valid sections in AWS Cloudformation template. Choose 3 answers from the options below A Parameters B Services C Outputs D Declarations E Resources
ACE
Which of the following services are key/value stores? Choose 3 answers from the options below A Amazon ElastiCache B Simple Notification Service C DynamoDB D Simple Workflow Service E Simple Storage Service
ACE
Which of the following statements about SWF are true? Choose 3 answers. A. SWF tasks are assigned once and never duplicated B. SWF requires an S3 bucket for workflow storage C. SWF workflow executions can last up to a year D. SWF triggers SNS notifications on task assignment E. SWF uses deciders and workers to complete tasks F. SWF requires at least 1 EC2 instance per domain
ACE
Which statements about DynamoDB are true? Choose 2 answers from the options below A DynamoDB uses optimistic concurrency control B DynamoDB restricts item access during writes C DynamoDB uses a pessimistic locking model D DynamoDB restricts item access during reads E DynamoDB uses conditional writes for consistency
AE
Which of the following are supported platforms in Elastic Beanstalk? Choose 2 correct answer from the options below A IBM WebSphere B Oracle Weblogic C Microsoft IIS D Apache
CD
Which DynamoDB limits can be raised by contacting AWS support? Choose 2 answers from the options below A The number of hash keys per account B The maximum storage used per account C The number of tables per account D The number of local secondary indexes per account E The number of provisioned throughput units per account
CE
Which DynamoDB limits can be raised by contacting AWS support? Choose 2 answers. A. The number of hash keys per account B. The maximum storage used per account C. The number of tables per account D. The number of local secondary indexes per account E. The number of provisioned throughput units per account
CE
Which of the following are correct statements with policy evaluation logic in AWS Identity and Access Management? Choose 2 answers from the options below A An explicit deny does not override an explicit allow B By default, all request are allowed C An explicit allow overrides default deny. D An explicit allow overrides an explicit deny E By default, all requests are denied
CE
A SWF workflow task or task execution can live up to ______ long? Choose the correct answer from the options below A 3 days B 24 hours C 14 Days D 1 year
D
As you retrieve information from DynamoDB, you receive this error: "ProvisionedThroughputExceededException", but upon investigation you notice that you're not exceeding your table read capacity throughput. What is causing this error? Choose the correct answer from the options below A DynamoDB needs a short amount of time to pre-warm before being able to handle a spike in demand, even if a table has enough throughput capacity configured B Metrics reported by AWS are not always real-time and could take a minute or so to appear C This happens when using sort keys because they consume an extra read capacity for each call which doubles throughput D You exceeded your maximum allowed provisioned throughput for a table or for one or more global secondary indexes.
D
You are using Amazon SQS and are getting a "Queue Deleted Recently" error. What is wrong? A. The message is too big B. You have incorrect permissions C. Another user has deleted the queue D. If you delete a queue, you need to wait for at least 60 seconds before creating a queue with the same name
D
You cannot access your AWS console, so you revert to using the CLI that you are not familiar with. Which of the following commands is not a valid CLI command for EC2 instances? A. ec2-allocate-address B. ec2-attach-internet-gateway C. ec2-associate-route-table D. ec2-allocate-interface
D
Your manager has requested you to tag EC2 instances to organize and manage a load balancer. Which of the following statements about tag restrictions is incorrect? A. The maximum key length is 127 Unicode characters. B. The maximum value length is 255 Unicode characters. C. Tag keys and values are case sensitive. D. The maximum number of tags per load balancer is 20.
D
Your supervisor asks you to find a solution for scheduling a sequence of tasks. The sequence may take several months to complete and it's very important that no tasks are processed more than once. What AWS service should you recommend? Choose the correct answer from the options below A SQS B OpsWorks C CloudFormation D SWF
D
f an application is storing hourly log files from thousands of instances from a high traffic web site, which naming scheme would give optimal performance on S3? A. Sequential B. instanceID_log-HH-DD-MM-YYYY C. instanceID_log-YYYY-MM-DD-HH D. HH-DD-MM-YYYY-log_instanceID E. YYYY-MM-DD-HH-log_instanceID
D
https://www.briefmenow.org/amazon/how-can-this-be-configured/
X
https://www.briefmenow.org/amazon/how-much-write-throughput-is-required-for-the-target-table-4/
X
https://www.briefmenow.org/amazon/when-you-use-the-aws-elastic-beanstalk-console-to-deplo-2/
X
https://www.briefmenow.org/amazon/which-of-the-below-mentioned-features-is-not-supported/
X