NEW QUESTION 1
AutoScaIing is configured with 3 AZs. Each zone has 5 instances running. If AutoScaIing wants to terminate an instance based on the policy action, which instance will it terminate first?

• A. Terminate the first launched instance
• B. Randomly select the instance for termination
• C. Terminate the instance from the AZ which does not have a high AWS load
• D. Terminate the instance from the AZ which has instances running near to the billing hour

Answer: B

Explanation: Before Auto Scaling selects an instance to terminate, it first identifies the Availability Zone that has more instances than the other Availability Zones used by the group. If all the Availability Zones have the same number of instances, it identifies a random Availability Zone.
Reference: http://docs.aws.amazon.com/AutoScaIing/latest/DeveIoperGuide/us-termination-policy.html

NEW QUESTION 2
A user has created a queue named "myqueue" with SQS. There are four messages published to queue which are not received by the consumer yet. If the user tries to delete the queue, what will happen?

• A. A user can never delete a queue manuall
• B. AWS deletes it after 30 days of inactMty on queue
• C. It will initiate the delete but wait for four days before deleting until all messages are deleted automatically.
• D. It will ask user to delete the messages first
• E. It will delete the queue

Answer: D

Explanation: SQS allows the user to move data between distributed components of applications so they can perform different tasks without losing messages or requiring each component to be always available. The user can delete a queue at any time, whether it is empty or not. It is important to note that queues retain
messages for a set period of time. By default, a queue retains messages for four days. Reference:
http://docs.aws.amazon.com/AWSSimpIeQueueService/latest/SQSDeveIoperGuide/SQSConcepts.html

NEW QUESTION 3
In relation to Amazon SQS, how can you ensure that messages are delivered in order?

• A. Increase the size of your queue
• B. Send them with a timestamp
• C. Give each message a unique id.
• D. AWS cannot guarantee that you will receive messages in the exact order you sent them

Answer: D

Explanation: Amazon SQS makes a best effort to preserve order in messages, but due to the distributed nature of the queue, AWS cannot guarantee that you will receive messages in the exact order you sent them. You typically place sequencing information or timestamps in your messages so that you can reorder them upon receipt.
Reference: https://aws.amazon.com/items/1343?externaI|D=1343

NEW QUESTION 4
An Amazon S3 bucket, "myawsbucket" is configured with website hosting in Tokyo region, what is the region-specific website endpoint?

• A. www.myawsbucket.ap-northeast-1.amazonaws.com
• B. myawsbucket.s3-website-ap-northeast-I.amazonawscom
• C. myawsbucket.amazonaws.com
• D. myawsbucket.tokyo.amazonaws.com

Answer: B

NEW QUESTION 5
A user is accessing an EC2 instance on the SSH port for IP 10.20.30.40. Which one is a secure way to
configure that the instance can be accessed only from this IP?

• A. In the security group, open port 22 for IP 1020.30.40/0
• B. In the security group, open port 22 for IP 10.20.30.40/32
• C. In the security group, open port 22 for IP 10.20.30.40/24
• D. In the security group, open port 22 for IP 10.20.30.40

Answer: B

Explanation: In AWS EC2, while configuring a security group, the user needs to specify the IP address in CIDR notation. The CIDR IP range 10.20.30.40/32 says it is for a single IP 10.20.30.40. If the user specifies the IP as 10.20.30.40 only, the security group will not accept and ask it in a CIRD format.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-network-security.html

NEW QUESTION 6
A user has configured an automated backup between 5 AM — 5:30 AM for the MySQL RDS DB. Will the performance of RDS get frozen momentarily during a backup?

• A. No
• B. Yes, only if the instance size is smaller than large size
• C. Yes, provided it is a single zone implementation
• D. Yes, always

Answer: C

Explanation: Amazon RDS provides two different methods for backing up and restoring the Amazon DB instances. A brief I/O freeze, typically lasting a few seconds, occurs during both automated backups and DB snapshot operations on Single-AZ DB instances.
Reference: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.BackingUpAndRestoringAmazonR DSInstances.htmI

NEW QUESTION 7
A user has launched an EBS backed Linux instance. How can a user detach the root device and attach it to another instance as a secondary volume?

• A. Unmount the root volume first and then detach it
• B. It is not possible to mount the root volume to some other instance
• C. Stop the first instance and then attach instance’s root volume as a new volume to the other instance
• D. It is not possible to mount the root device as a secondary volume on the other instance

Answer: C

Explanation: If an Amazon EBS volume is the root device of an instance, it cannot be detached unless the instance is in the stopped state.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-detaching-volume.html

NEW QUESTION 8
A user has created a snapshot of an EBS volume. Which of the below mentioned usage cases is not possible with respect to a snapshot?

• A. Nlirroring the volume from one AZ to another AZ
• B. Launch an instance
• C. Decrease the volume size
• D. Increase the size of the volume

Answer: C

Explanation: The EBS snapshots are a point in time backup ofthe volume. It is helpful to move the volume from one AZ to another or launch a new instance. The user can increase the size of the volume but cannot decrease it less than the original snapshot size.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSSnapshots.htmI

NEW QUESTION 9
You have an environment that consists of a public subnet using Amazon VPC and 3 instances that are running in this subnet. These three instances can successfully communicate with other hosts on the Internet. You launch a fourth instance in the same subnet, using the same AMI and security group configuration you used for the others, but find that this instance cannot be accessed from the Internet. What should you do to enable internet access?

• A. Deploy a NAT instance into the public subnet.
• B. Modify the routing table for the public subnet
• C. Configure a publically routable IP Address In the host OS of the fourth instance.
• D. Assign an Elastic IP address to the fourth instanc

Answer: D

NEW QUESTION 10
Can you SSH to your private machines that reside in a VPC from outside without elastic IP?

• A. Yes, but only if you have direct connect or vpn
• B. Only if you are using a non-US region
• C. Only if you are using a US region
• D. No

Answer: A

Explanation: The instances that reside in the private subnets of your VPC are not reachable from the Internet, meAMng that is not possible to ssh into them. To interact with them you can use a bastion server, located in a public subnet, that will act as a proxy for them.
You can also connect if you have direct connect or vpn.
Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Scenario2.html

NEW QUESTION 11
Which of the following is chosen as the default region when making an API call with an AWS SDK?

• A. ap-northeast-1
• B. us-west-2
• C. us-east-1
• D. eu-west-1
• E. us-central-1

Answer: C

NEW QUESTION 12
Which of the below mentioned commands allows the user to share the AMI with his peers using the AWS EC2 CLI?

• A. ec2-share-image-public
• B. ec2-share-image-account
• C. ec2-share-image
• D. ec2-modify-image-attribute

Answer: D

Explanation: A user can share an AMI with another user / peer using the command: ec2-modify-image-attribute
<AMI-ID> -| -a <AWS Account |D>
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/sharingamis-expIicit.htmI

NEW QUESTION 13
A user is creating a snapshot of an EBS volume. Which of the below statements is incorrect in relation to the creation of an EBS snapshot?

• A. Its incremental
• B. It can be used to launch a new instance
• C. It is stored in the same AZ as the volume
• D. It is a point in time backup of the EBS volume

Answer: C

Explanation: The EBS snapshots are a point in time backup of the EBS volume. It is an incremental snapshot, but is always specific to the region and never specific to a single AZ.
Hence the statement "|t is stored in the same AZ as the volume" is incorrect.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSSnapshots.htmI

NEW QUESTION 14
A user has created an EBS volume with 1000 IOPS. What is the average IOPS that the user will get for most of the year as per EC2 SLA if the instance is attached to the EBS optimized instance?

• A. 900
• B. 990
• C. 950
• D. 1000

Answer: A

Explanation: As per AWS SLA if the instance is attached to an EBS-Optimized instance, then the Provisioned IOPS volumes are designed to deliver within 10% of the provisioned IOPS performance 99.9% of the time in a given year. Thus, if the user has created a volume of 1000 IOPS, the user will get a minimum 900 IOPS 99.9% time of the year.
Reference: http://aws.amazon.com/ec2/faqs/

NEW QUESTION 15
A user had defined an IAM policy similar to the one given below on a bucket:
{
"Version": "2012-10-17",
"Statement": [{
"Effect": "A||ow",
"PrincipaI": {
"AWS": "arn:aws:iam::12112112:user/test"
}!
"Action": [ "s3:GetBucketLocation", "s3:ListBucket", "s3:GetObject"
]!
"Resource": [ "arn:aws:s3:::examkiI|er"
}
}
What will this do?

• A. It will result in an error saying invalid policy statement
• B. It will create an IAM policy for the user test
• C. Allows the user test of the AWS account ID 12112112 to perform GetBucketLocation, ListBucket and GetObject on the bucket examkiller
• D. It will allow all the IAM users of the account ID 12112112 to perform GetBucketLocation, ListBucket and GetObject on bucket examkiller

Answer: C

Explanation: The IAM policy allows to test a user in the account 12112112 to perform: s3:GetBucketLocation
s3:ListBucket s3:GetObject
Amazon S3 permissions on the examkiller bucket.
Reference: http://docs.aws.amazon.com/AmazonS3/Iatest/dev/access-policy-language-overview.html

NEW QUESTION 16
In regard to DynamoDB, which of the following statements is correct?

• A. An Item should have at least two value sets, a primary key and another attribute.
• B. An Item can have more than one attributes.
• C. A primary key should be single-valued.
• D. An attribute can have one or several other attribute

Answer: B

Explanation: In Amazon DynamoDB, a database is a collection of tables. A table is a collection of items and each item
is a collection of attributes.
Reference: http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/DataModeI.html

NEW QUESTION 17
Your manager has requested you to tag EC2 instances to orgAMze and manage a load balancer. Which of the following statements about tag restrictions is incorrect?

• A. The maximum key length is 127 Unicode characters.
• B. The maximum value length is 255 Unicode characters.
• C. Tag keys and values are case sensitive.
• D. The maximum number of tags per load balancer is 20.

Answer: D

Explanation: Tags help you to categorize your load balancers in different ways, for example, by purpose, owner, or environment. The following basic restrictions apply to tags: The maximum number of tags per resource is
10. The maximum key length is 127 Unicode characters. The maximum value length that can be used is 255 Unicode characters. The tag keys and values are case sensitive. Allowed characters are letters, spaces, and numbers representable in UTF-8, plus the following special characters: + - =. _ : / @. Do not use leading or trailing spaces. Do not use the aws: prefix in your tag names or values because it is reserved for AWS use. You can't edit or delete tag names or values with this prefix. Tags with this prefix do not count against your tags per resource limit.
Reference:
http://docs.aws.amazon.com/EIasticLoadBaIancing/latest/DeveIoperGuide/add-remove-tags.htmI#tag-res trictions

NEW QUESTION 18
A user has configured ELB with two instances running in separate AZs of the same region? Which of the below mentioned statements is true?

• A. Nlulti AZ instances will provide HA with ELB
• B. lVIuIti AZ instances are not possible with a single ELB
• C. Nlulti AZ instances will provide scalability with ELB
• D. The user can achieve both HA and scalability with ELB

Answer: A

Explanation: If a user is running two instances in separate AZs, it will provide HA with ELB since ELB will automatically stop routing the traffic to unhealthy instances and send it to healthy instances only.

NEW QUESTION 19
When you create a table with a hash-and-range key, you must define one or more secondary indexes on that table.

• A. False, hash-range key is another name for secondary index
• B. False, it is optional
• C. True
• D. False, when you have Hash-Range key you cannot define Secondary index

Answer: B

Explanation: When you create a table with a hash-and-range key in DynamoDB, you can also define one or more secondary indexes on that table.
Reference: http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/LSI.htmI

NEW QUESTION 20
A user has an S3 object in the US Standard region with the content "coIor=red". The user updates the object with the content as "coIor="white". If the user tries to read the value 1 minute after it was uploaded, what will S3 return?

• A. It will return "coIor=white"
• B. It will return "coIor=red"
• C. It will return an error saying that the object was not found
• D. It may return either "coIor=red" or "color=white" i.
• E. any of the value

Answer: D

Explanation: AWS S3 follows the eventual consistent model in the US Standard Region. Once the object is updated it
may return the new value or the old value based on whether all the content is replicated across multiple servers until it becomes consistent (eventual).
Reference: http://docs.aws.amazon.com/AmazonS3/Iatest/dev/Introduction.htmI