NEW QUESTION 1
The Database Administrator learn is interested in performing manual backups of Amazon DRS Oracle DB instance.
What step be taken to perform the backups?

• A. Attach an Amazon EBS volume with Oracle RMAN installed to the RDS instance
• B. Take a snapshot of the EBS volume that is attached to the DB instance.
• C. Install Oracle Secure Backup on the RDS instance and back up the Oracle database to Amazon S3
• D. Take a snapshot of the DB instance

Answer: D

NEW QUESTION 2
A user has received a message from the support team that an issue occurred 1 week back between 3 AM to 4 AM and the EC2 server was not reachable. The user is checking the CloudWatch metrics of that instance. How can the user find the data easily using the CloudWatch console?

• A. The user can find the data by giving the exact values in the time Tab under CloudWatch metrics
• B. The user can find the data by filtering values of the last 1 week for a 1 hour period in the Relative tab under CloudWatch metrics
• C. It is not possible to find the exact time from the consol
• D. The user has to use CLI to provide the specific time
• E. The user can find the data by giving the exact values in the Absolute tab under CloudWatch metrics

Answer: D

Explanation:
If the user is viewing the data inside the CloudWatch console, the console provides options to filter values either using the relative period, such as days /hours or using the Absolute tab where the user can provide data with a specific date and time. The console also provides the option to search using the local timezone under the time range caption in the console.

NEW QUESTION 3
A user has deployed an application on an EBS backed EC2 instance. For a better performance of application, it requires dedicated EC2 to EBS traffic. How can the user achieve this?

• A. Launch the EC2 instance as EBS dedicated with PIOPS EBS
• B. Launch the EC2 instance as EBS enhanced with PIOPS EBS
• C. Launch the EC2 instance as EBS dedicated with PIOPS EBS
• D. Launch the EC2 instance as EBS optimized with PIOPS EBS

Answer: D

Explanation:
Any application which has performance sensitive workloads and requires minimal variability with dedicated EC2 to EBS traffic should use provisioned IOPS EBS volumes, which are attached to an EBS- optimized EC2 instance or it should use an instance with 10 Gigabit network connectivity. Launching an instance that is EBSoptimized provides the user with a dedicated connection between the EC2 instance and the EBS volume.

NEW QUESTION 4
An organization is planning to create 5 different AWS accounts considering various security requirements. The organization wants to use a single payee account by using the consolidated billing option. Which of the below mentioned statements is true with respect to the above information?

• A. Master (Paye
• B. account will get only the total bill and cannot see the cost incurred by each account
• C. Master (Paye
• D. account can view only the AWS billing details of the linked accounts
• E. It is not recommended to use consolidated billing since the payee account will have access to the linked accounts
• F. Each AWS account needs to create an AWS billing policy to provide permission to the payee account

Answer: B

Explanation:
AWS consolidated billing enables the organization to consolidate payments for multiple Amazon Web Services (AWS. accounts within a single organization by making a single paying account. Consolidated billing enables the organization to see a combined view of the AWS charges incurred by each account as well as obtain a detailed cost report for each of the individual AWS accounts associated with the paying account. The payee account will not have any other access than billing data of linked accounts.

NEW QUESTION 5
A Syslog Administrator is troubleshooting an Amazon EC2 server and discovers a bottleneck in reading and writing data to the attached Amazon EBS block storage volume. The instance is a larger and the EBS is io1 with 1,000 IOPS provisioned initially, the Administrator increase the provisioned IOPS to 2,000, but performance does not improve.
What should the Administrator do next?

• A. Change the instance type to a t2 large.
• B. Change the volume to gp2 and make it larger.
• C. Change the instance type to c4 xlarge.
• D. Change the volume to Amazon S3 and introduce random key prepending

Answer: D

NEW QUESTION 6
A user has configured ELB with two EBS backed EC2 instances. The user is trying to understand the DNS access and IP support for ELB. Which of the below mentioned statements may not help the user understand the IP mechanism supported by ELB?

• A. The client can connect over IPV4 or IPV6 using Dualstack
• B. ELB DNS supports both IPV4 and IPV6
• C. Communication between the load balancer and back-end instances is always through IPV4
• D. The ELB supports either IPV4 or IPV6 but not both

Answer: D

Explanation:
Elastic Load Balancing supports both Internet Protocol version 6 (IPv6. and Internet Protocol version 4 (IPv4.. Clients can connect to the user??s load balancer using either IPv4 or IPv6 (in EC2-Classic. DNS. However, communication between the load balancer and its back-end instances uses only IPv4. The user can use the Dualstack-prefixed DNS name to enable IPv6 support for communications between the client and the load balancers. Thus, the clients are able to access the load balancer using either IPv4 or IPv6 as their individual connectivity needs dictate.

NEW QUESTION 7
You are building an online store on AWS that uses SQS to process your customer orders. Your backend system needs those messages in the same sequence the customer orders have been put in. How can you achieve that?

• A. It is not possible to do this with SQS
• B. You can use sequencing information on each message
• C. You can do this with SQS but you also need to use SWF
• D. Messages will arrive in the same order by default

Answer: B

Explanation:
Amazon SQS is engineered to always be available and deliver messages. One of the resulting tradeoffs is that SQSdoes not guarantee first in, first out delivery of messages. For many distributed applications, each message can stand on its own, and as long as all messages are delivered, the order is not important. If your system requires that order be preserved, you can place sequencing information in each message, so that you can reorder the messages when the queue returns them.

NEW QUESTION 8
A SysOps Administrator has set up a new Application Load Balancer (ALB) in front of a pair of private web server in multiple Availability Zones. After deployment an updates CloudFormation template with many changes, user now goes to one web server only.
What is the NOST likely reason that the traffic is not being balanced between both servers?

• A. The faulty is returning HTTP 200 has been removed.
• B. Sticky session have been disabled in the ALB for the working sever.
• C. The ALB using a custom ping path that is not found on the faulty server.
• D. The web client are using HTTP/2, which is terminated at the ALB.

Answer: B

Explanation:
Until now, the behavior of load balancers has been to route each request independently to the Amazon EC2 instance with the least load. With the stickiness feature, you can configure the load balancer to bind user sessions to specific application instances. All requests coming from the user during the session will be sent to the same application instance. Elastic Load Balancing supports two mechanisms to provide session stickiness: load balancer-generated HTTP cookies, which allow browser-based session lifetimes, and application-generated HTTP cookies, which allow application- specific session lifetimes. You can learn more about this feature by visiting the ELB Developers Guide.

NEW QUESTION 9
A user is using the AWS EC2. The user wants to make so that when there is an issue in the EC2 server, such as instance status failed, it should start a new instance in the user??s private cloud. Which AWS service helps to achieve this automation?

• A. AWS CloudWatch + Cloudformation
• B. AWS CloudWatch + AWS AutoScaling + AWS ELB
• C. AWS CloudWatch + AWS VPC
• D. AWS CloudWatch + AWS SNS

Answer: D

Explanation:
Amazon SNS can deliver notifications by SMS text message or email to the Amazon Simple Queue Service (SQS. queues or to any HTTP endpoint. The user can configure a web service (HTTP End point. in his data centre which receives data and launches an instance in the private cloud. The user should configure the CloudWatch alarm to send a notification to SNS when the ??StatusCheckFailed?? metric is true for the EC2 instance. The SNS topic can be configured to send a notification to the user??s HTTP end point which launches an instance in the private cloud.

NEW QUESTION 10
A user has launched an EC2 instance. However, due to some reason the instance was terminated. If the user wants to find out the reason for termination, where can he find the details?

• A. It is not possible to find the details after the instance is terminated
• B. The user can get information from the AWS console, by checking the Instance description under the State transition reason label
• C. The user can get information from the AWS console, by checking the Instance description under the Instance Status Change reason label
• D. The user can get information from the AWS console, by checking the Instance description under the Instance Termination reason label

Answer: D

Explanation:
An EC2 instance, once terminated, may be available in the AWS console for a while after termination. The user can find the details about the termination from the description tab under the label State transition reason. If the instance is still running, there will be no reason listed. If the user has explicitly stopped or terminated the instance, the reason will be ??User initiated shutdown??.

NEW QUESTION 11
An organization wants to move to Cloud. They are looking for a secure encrypted database storage option. Which of the below mentioned AWS functionalities helps them to achieve this?

• A. AWS MFA with EBS
• B. AWS EBS encryption
• C. Multi-tier encryption with Redshift
• D. AWS S3 server side storage

Answer: B

Explanation:
AWS EBS supports encryption of the volume while creating new volumes. It also supports creating volumes from existing snapshots provided the snapshots are created from encrypted volumes. The data at rest, the I/O as well as all the snapshots of EBS will be encrypted. The encryption occurs on the servers that host the EC2 instances, providing encryption of data as it moves between the EC2 instances and EBS storage. EBS encryption is based on the AES-256 cryptographic algorithm, which is the industry standard.

NEW QUESTION 12
A storage admin wants to encrypt all the objects stored in S3 using server side encryption. The user does not want to use the AES 256 encryption key provided by S3. How can the user achieve this?

• A. The admin should upload his secret key to the AWS console and let S3 decrypt the objects
• B. The admin should use CLI or API to upload the encryption key to the S3 bucke
• C. When making a callto the S3 API mention the encryption key URL in each request
• D. S3 does not support client supplied encryption keys for server side encryption
• E. The admin should send the keys and encryption algorithm with each API call

Answer: D

Explanation:
AWS S3 supports client side or server side encryption to encrypt all data at rest. The server side encryption can either have the S3 supplied AES-256 encryption key or the user can send the key along with each API callto supply his own encryption key. Amazon S3 never stores the user??s encryption key. The user has to supply it for each encryption or decryption call.

NEW QUESTION 13
A user has launched an EC2 instance from an instance store backed AMI. The infrastructure team wants to create an AMI from the running instance. Which of the below mentioned credentials is not required while creating the AMI?

• A. AWS account ID
• B. X.509 certificate and private key
• C. AWS login ID to login to the console
• D. Access key and secret access key

Answer: C

Explanation:
When the user has launched an EC2 instance from an instance store backed AMI and the admin team wants to create an AMI from it, the user needs to setup the AWS AMI or the API tools first. Once the tool is setup the user will need the following credentials:
AWS account ID;
AWS access and secret access key;
X.509 certificate with private key.

NEW QUESTION 14
A user has created an ELB with the availability zone US-East-1

• A. The user wants to add more zones to ELB to achieve High Availabilit
• B. How can the user add more zones to the existing ELB?
• C. It is not possible to add more zones to the existing ELB
• D. The only option is to launch instances in different zones and add to ELB
• E. The user should stop the ELB and add zones and instances as required
• F. The user can add zones on the fly from the AWS console

Answer: D

Explanation:
The user has created an Elastic Load Balancer with the availability zone and wants to add more zones to the existing ELB. The user can do so in two ways:
From the console or CLI, add new zones to ELB;
Launch instances in a separate AZ and add instances to the existing ELB.

NEW QUESTION 15
A user has launched an EC2 instance store backed instance in the US-East-1a zone. The user created AMI #1 and copied it to the Europe region. After that, the user made a few updates to the application running in the US-East-1a zone. The user makes an AMI#2 after the changes. If the user launches a new instance in Europe from the AMI #1 copy, which of the below mentioned statements is true?

• A. The new instance will have the changes made after the AMI copy as AWS just copies the reference of the original AMI during the copyin
• B. Thus, the copied AMI will have all the updated data
• C. The new instance will have the changes made after the AMI copy since AWS keeps updating the AMI
• D. It is not possible to copy the instance store backed AMI from one region to another
• E. The new instance in the EU region will not have the changes made after the AMI copy

Answer: D

Explanation:
Within EC2, when the user copies an AMI, the new AMI is fully independent of the source AMI; there is no link to the original (source. AMI. The user can modify the source AMI without affecting the new AMI and vice a versa. Therefore, in this case even if the source AMI is modified, the copied AMI of the EU region will not have the changes. Thus, after copy the user needs to copy the new source AMI to the destination region to get those changes.

NEW QUESTION 16
You run a web application with the following components Elastic Load Balancer (EL8), 3 Web/Application servers, 1 MySQL RDS database with read replicas, and Amazon Simple Storage Service (Amazon S3) for static content. Average response time for users is increasing slowly.
What three CloudWatch RDS metrics will allow you to identify if the database is the bottleneck? Choose 3 answers

• A. The number of outstanding IOs waiting to access the disk.
• B. The amount of write latency.
• C. The amount of disk space occupied by binary logs on the master.
• D. The amount of time a Read Replica DB Instance lags behind the source DB Instance
• E. The average number of disk I/O operations per second.

Answer: ABE

NEW QUESTION 17
A company is running an Oracle database engine that handles heavy online transaction processing (OLTP) structured data traffic.
How can a SysOps administrator ensure that the database has high availability?

• A. Use Amazon DynamoOB to store the data
• B. Use Amazon RDS Multi -AZ deployment to store the data
• C. Use Amazon RDS read replicas in a different region to store the data
• D. Use an Amazon Redshift cluster to store the data

Answer: B

NEW QUESTION 18
A user has launched an EBS backed instance. The user started the instance at 9 AM in the morning. Between 9 AM to 10 AM, the user is testing some script. Thus, he stopped the instance twice and restarted it. In the same hour the user rebooted the instance once. For how many instance hours will AWS charge the user?

• A. 3 hours
• B. 4 hours
• C. 2 hours
• D. 1 hour

Answer: A

Explanation:
A user can stop/start or reboot an EC2 instance using the AWS console, the Amazon EC2 CLI or the Amazon EC2 API. Rebooting an instance is equivalent to rebooting an operating system. When the instance is rebooted AWS will not charge the user for the extra hours. In case the user stops the instance, AWS does not charge the running cost but charges only the EBS storage cost. If the user starts and stops the instance multiple times in a single hour, AWS will charge the user for every start and stop. In this case, since the instance was rebooted twice, it will cost the user for 3 instance hours.

NEW QUESTION 19
An organization is planning to use AWS for 5 different departments. The finance department is responsible to pay for all the accounts. However, they want the cost separation for each account to map with the right cost centre. How can the finance department achieve this?

• A. Create 5 separate accounts and make them a part of one consolidate billing
• B. Create 5 separate accounts and use the IAM cross account access with the roles for better management
• C. Create 5 separate IAM users and set a different policy for their access
• D. Create 5 separate IAM groups and add users as per the department??s employees

Answer: A

Explanation:
AWS consolidated billing enables the organization to consolidate payments for multiple Amazon Web Services (AWS. accounts within a single organization by making a single paying account. Consolidated billing enables the organization to see a combined view of the AWS charges incurred by each account as well as obtain a detailed cost report for each of the individual AWS accounts associated with the paying account.

NEW QUESTION 20
A user has setup an Auto Scaling group. The group has failed to launch a single instance for more than 24 hours. What will happen to Auto Scaling in this condition?

• A. Auto Scaling will keep trying to launch the instance for 72 hours
• B. Auto Scaling will suspend the scaling process
• C. Auto Scaling will start an instance in a separate region
• D. The Auto Scaling group will be terminated automatically

Answer: B

Explanation:
If Auto Scaling is trying to launch an instance and if the launching of the instance fails continuously, it will
suspend the processes for the Auto Scaling groups since it repeatedly failed to launch an instance. This is known as an administrative suspension. It commonly applies to the Auto Scaling group that has no running instances which is trying to launch instances for more than 24 hours, and has not succeeded in that to do so.

NEW QUESTION 21
A company three-tier web application is not performing as well as expected. A manager has asked a System Administrator to analyser all the system involved and identity where the performance bottleneck exist.
Which AWS service can be help find bottleneck?

• A. Analyse AWS ClouldTrail logs to see which API call are taking the longest to execute
• B. Run a performance trace using Amazon Inspector to measure response tone between various API calls
• C. Create a rule in AWS Config to send an alert when the performance s noncompliant for each of the tiers
• D. Create an Amazon CloudWatch dashboard that contains Amazon EC2 and Amazon RDS metrics

Answer: D

Explanation:
Check the CloudWatch Latency metric
The Latency metric represents the time elapsed, in seconds, after the request leaves the load balancer until a response is received by the load balancer from a registered instance. The preferred statistic for this metric is average, which reports average latency for all requests. A high Latency average value typically indicates a problem with the backend server(s) rather than a problem with the load balancer. Check the maximum statistic to determine the number of latency data points that reach or exceed the load balancer idle timeout value. When latency data points meet or exceed the idle timeout value, it is likely that some requests are timing out, which initiates an HTTP 504 response to clients.

NEW QUESTION 22
An organization has setup multiple IAM users. The organization wants that each IAM user accesses the IAM console only within the organization and not from outside. How can it achieve this?

• A. Create an IAM policy with the security group and use that security group for AWS console login
• B. Create an IAM policy with a condition which denies access when the IP address range is not from the organization
• C. Configure the EC2 instance security group which allows traffic only from the organization??s IP range
• D. Create an IAM policy with VPC and allow a secure gateway between the organization and AWS Console

Answer: B

Explanation:
AWS Identity and Access Management is a web service which allows organizations to manage users and user permissions for various AWS services. The user can add conditions as a part of the IAM policies. The condition can be set on AWS Tags, Time, and Client IP as well as on many other parameters. If the organization wants the user to access only from a specific IP range, they should set an IAM policy condition which denies access when the IP is not in a certain range. E.g. The sample policy given below denies all traffic when the IP is not in a certain range.
"Statement": [{
"Effect": "Deny",
"Action": "*",
"Resource": "*", "Condition": { "NotIpAddress": {
"aws:SourceIp": ["10.10.10.0/24", "20.20.30.0/24"]
}
}
}]

NEW QUESTION 23
A user is trying to understand the CloudWatch metrics for the AWS services. It is required that the
user should first understand the namespace for the AWS services. Which of the below mentioned is not a valid namespace for the AWS services?

• A. AWS/StorageGateway
• B. AWS/CloudTrail
• C. AWS/ElastiCache
• D. AWS/SWF

Answer: B

Explanation:
Amazon CloudWatch is basically a metrics repository. The AWS product puts metrics into this repository, and the user can retrieve the data or statistics based on those metrics. To distinguish the data for each service, the CloudWatch metric has a namespace. Namespaces are containers for metrics. All AWS services that provide the Amazon CloudWatch data use a namespace string, beginning with "AWS/". All the services which are supported by CloudWatch will have some namespace. CloudWatch does not monitor CloudTrail. Thus, the namespace ??AWS/CloudTrail?? is incorrect.

NEW QUESTION 24
......