NEW QUESTION 1
What is the maximum number of tags that a user can assign to an EC2 instance?

• A. 50
• B. 10
• C. 5
• D. 25

Answer: B

Explanation:
To help manage EC2 instances as well as their usage in a better way, the user can tag the instances. The tags are metadata assigned by the user which consists of a key and a value. One resource can have a maximum of 10 tags.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_Tags.html

NEW QUESTION 2
Which of the below mentioned options is a must to have an element as a part of the IAM policy?

• A. Condition
• B. ID
• C. Statement
• D. Version

Answer: C

Explanation:
The statement is the main element of the IAM policy and it is a must for a policy. Elements such as condition, version and ID are not required.
Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/AccessPoIicyLanguage_EIementDescriptions.html

NEW QUESTION 3
Which of the following is an example of a good DynamoDB hash key schema for provisioned throughput efficiency?

• A. User ID, where the application has many different users.
• B. Status Code where most status codes are the same
• C. Device ID, where one is by far more popular than all the others.
• D. Game Type, where there are three possible game types

Answer: A

NEW QUESTION 4
A user is trying to find the state of an S3 bucket with respect to versioning. Which of the below mentioned states AWS will not return when queried?

• A. versioning-enabled
• B. versioning-suspended
• C. unversioned
• D. versioned

Answer: D

Explanation:
S3 buckets can be in one of the three states: unversioned (the default), versioning-enabled or versioning-suspended. The bucket owner can configure the versioning state of a bucket. The versioning state applies to all (never some) of the objects in that bucket. The first time owner enables a bucket for versioning, objects in it are thereafter always versioned and given a unique version ID.
Reference: http://docs.aws.amazon.com/AmazonS3/Iatest/dev/Versioning.htmI

NEW QUESTION 5
A user is planning to make a mobile game which can be played online or offline and will be hosted on EC2.
The user wants to ensure that if someone breaks the highest score or they achieve some milestone they can inform all their colleagues through email. Which of the below mentioned AWS services helps achieve this goal?

• A. AWS Simple Workflow Service.
• B. AWS Simple Queue Service.
• C. Amazon Cognito
• D. AWS Simple Email Servic

Answer: D

Explanation:
Amazon Simple Email Service (Amazon SES) is a highly scalable and cost-effective email-sending service for businesses and developers. It integrates with other AWS services, making it easy to send emails from applications that are hosted on AWS.
Reference: http://aws.amazon.com/ses/faqs/

NEW QUESTION 6
A user wants to achieve High Availability with PostgreSQL DB. Which of the below mentioned functionalities helps achieve HA?

• A. Read Replica
• B. Multi AZ
• C. Multi region
• D. PostgreSQL does not support HA

Answer: B

Explanation:
The Multi AZ feature allows the user to achieve High Availability. For Mu|ti AZ, Amazon RDS
automatically provisions and maintains a synchronous "standby" replica in a different Availability Zone. Reference: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Welcome.html

NEW QUESTION 7
ExamKiIIer (with AWS account ID H1122223333) has created 50 IAM users for its orgAMzation’s employees. ExamKiIIer wants to make the AWS console login URL for all IAM users as: https:// examkiI|er.signin.aws.amazon.com/conso|e/. How can this be configured?

• A. Create a bucket with the name ExamKiI|er and map it with the IAM alias
• B. It is not possible to have capital letters as a part of the alias name
• C. The user needs to use Route 53 to map the ExamKiIIer domain and IAM URL
• D. For the AWS account, create an alias ExamKiIIer for the IAM login

Answer: B

Explanation:
If a user wants the URL of the AWS IAM sign-in page to have the company name instead of the AWS
account ID, he can create an alias for his AWS account ID. The alias must be unique across all Amazon Webservices products and contain only digits, lowercase letters, and hyphens.
Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/AccountAIias.html

NEW QUESTION 8
A user has an S3 object in the US Standard region with the content "coIor=red". The user updates the object with the content as "coIor="white". If the user tries to read the value 1 minute after it was uploaded, what will S3 return?

• A. It will return "coIor=white"
• B. It will return "coIor=red"
• C. It will return an error saying that the object was not found
• D. It may return either "coIor=red" or "color=white" i.
• E. any of the value

Answer: D

Explanation:
AWS S3 follows the eventual consistent model in the US Standard Region. Once the object is updated it
may return the new value or the old value based on whether all the content is replicated across multiple servers until it becomes consistent (eventual).
Reference: http://docs.aws.amazon.com/AmazonS3/Iatest/dev/Introduction.htmI

NEW QUESTION 9
Which EC2 API call would you use to retrieve a list of Amazon Machine Images (AMIs)?

• A. Descnbelnstances
• B. DescribeAMIs
• C. Describelmages
• D. GetAMIs
• E. You cannot retrieve a list of AMIs as there are over 10,000 AMIs

Answer: E

NEW QUESTION 10
Games-R-Us is launching a new game app for mobile devices. Users will log into the game using their existing Facebook account and the game will record player data and scoring information directly to a DynamoDB table.
What is the most secure approach for signing requests to the DynamoDB API?

• A. Create an IAM user with access credentials that are distributed with the mobile app to sign the requests
• B. Distribute the AWS root account access credentials with the mobile app to sign the requests
• C. Request temporary security credentials using web identity federation to sign the requests
• D. Establish cross account access between the mobile app and the DynamoDB table to sign the requests

Answer: C

NEW QUESTION 11
A user is setting up an Elastic Load BaIancer(ELB). Which of the below parameters should the user consider so as the instance gets registered with the ELB?

• A. ELB DNS
• B. IP address
• C. Security group
• D. ELB IP

Answer: B

Explanation:
The EC2 instances are registered with the load balancer using the IP addresses associated with the instances. When an instance is stopped and then started, the IP address associated with the instance changes. This prevents the load balancer from routing traffic to the restarted instance. When the user stops and then starts registered EC2 instances, it is recommended that to de-register the stopped instance from load balancer, and then register the restarted instance. Failure to do so may prevent the load balancer from performing health checks and routing the traffic to the restarted instance.

NEW QUESTION 12
Can you configure an RDS Read Replica using CIoudFormation templates?

• A. Yes, provided that you have root access.
• B. Yes, when you create a new CIoudFormation template
• C. Yes, but not for all Regions.
• D. No, you can add the ReadRepIica only when the resource is made available by CIoudFormation

Answer: B

Explanation:
AWS CIoudFormation gives developers and systems administrators an easy way to create and manage collections of AWS resources. You can now set Read Replicas for your databases with RDS when you create a new C|oudFormation tempIate.You can start using it with the sample template of C|oudFormation.
Reference:
https://s3.amazonaws.com/cloudformation-templates-us-east-1/RDS_MySQL_With_Read_RepIica.tempI

NEW QUESTION 13
A user has launched an EC2 instance. However, due to some reason the instance was terminated. If the user wants to find out the reason for termination, where can he find the details?

• A. The user can get information from the AWS console, by checking the Instance description under the State transition reason label
• B. The user can get information from the AWS console, by checking the Instance description under the Instance Termination reason label
• C. The user can get information from the AWS console, by checking the Instance description under the Instance Status Change reason label
• D. It is not possible to find the details after the instance is terminated

Answer: A

Explanation:
An EC2 instance, once terminated, may be available in the AWS console for a while after termination. The user can find the details about the termination from the description tab under the label State transition reason. If the instance is still running, there will be no reason listed. If the user has explicitly stopped or terminated the instance, the reason will be "User initiated shutdown".
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_|nstanceStraightToTerminated.html

NEW QUESTION 14
Which statements about DynamoDB are true? Choose 2 answers

• A. DynamoDB uses a pessimistic locking model
• B. DynamoDB uses optimistic concurrency control
• C. DynamoDB uses conditional writes for consistency
• D. DynamoDB restricts item access during reads
• E. DynamoDB restricts item access during writes

Answer: BC

NEW QUESTION 15
A user is having access to objects of an S3 bucket which is not owned by him. If he is trying to set the objects of that bucket public, which of the below mentioned options may be a right fit for this action?

• A. Make the bucket public with full access
• B. Define the policy for the bucket
• C. Provide ACL on the object
• D. Create an IAM user with permission

Answer: C

Explanation:
An S3 object ACL is the only way to manage access to objects which are not owned by the bucket owner. An AWS account that owns the bucket can grant another AWS account permission to upload objects. The bucket owner does not own these objects. The AWS account that created the object must grant permissions using object ACLs.
Reference: http://docs.aws.amazon.com/AmazonS3/latest/dev/access-policy-alternatives-guidelines.html

NEW QUESTION 16
If a message is retrieved from a queue in Amazon SQS, how long is the message inaccessible to other users by default?

• A. 0 seconds
• B. 1 hour
• C. 1 day
• D. forever
• E. 30 seconds

Answer: E

NEW QUESTION 17
When you register an actMty in Amazon SWF, you provide the following information, except:

• A. a name
• B. timeout values
• C. a domain
• D. version

Answer: C

Explanation:
When designing an Amazon SWF workflow, you precisely define each of the required actMties. You then register each actMty with Amazon SWF as an actMty type. When you register the actMty, you provide information such as a name and version, and some timeout values based on how long you expect the actMty to take.
Reference: http://docs.aws.amazon.com/amazonswf/latest/developerguide/swf-dg-intro-to-swf.html

NEW QUESTION 18
An orgAMzation has created multiple components of a single application for compartmentalization. Currently all the components are hosted on a single EC2 instance. Due to security reasons the orgAMzation wants to implement two separate SSLs for the separate modules although it is already using VPC. How can the orgAMzation achieve this with a single instance?

• A. Create a VPC instance which will have both the ACL and the security group attached to it and haveseparate rules for each IP address.
• B. Create a VPC instance which will have multiple network interfaces with multiple elastic IP addresses.
• C. You have to launch two instances each in a separate subnet and allow VPC peering for a single IP.
• D. Create a VPC instance which will have multiple subnets attached to it and each will have a separate IP address.

Answer: B

Explanation:
A Virtual Private Cloud (VPC) is a virtual network dedicated to the user’s AWS account. It enables the user to launch AWS resources into a virtual network that the user has defined. With VPC the user can specify multiple private IP addresses for his instances.
The number of network interfaces and private IP addresses that a user can specify for an instance depends on the instance type. With each network interface the orgAMzation can assign an EIP. This scenario helps when the user wants to host multiple websites on a single EC2 instance by using multiple SSL certificates on a single server and associating each certificate with a specific EIP address. It also helps in scenarios for operating network appliances, such as firewalls or load balancers that have multiple private IP addresses for each network interface.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/MuItipIeIP.html

NEW QUESTION 19
......