NEW QUESTION 1
A user is having access to objects of an S3 bucket which is not owned by him. If he is trying to set the objects of that bucket public, which of the below mentioned options may be a right fit for this action?

• A. Make the bucket public with full access
• B. Define the policy for the bucket
• C. Provide ACL on the object
• D. Create an IAM user with permission

Answer: C

Explanation: An S3 object ACL is the only way to manage access to objects which are not owned by the bucket owner. An AWS account that owns the bucket can grant another AWS account permission to upload objects. The bucket owner does not own these objects. The AWS account that created the object must grant permissions using object ACLs.
Reference: http://docs.aws.amazon.com/AmazonS3/latest/dev/access-policy-alternatives-guidelines.html

NEW QUESTION 2
A user is trying to create a list of IAM users with the AWS console. When the IAM users are created which of the below mentioned credentials will be enabled by default for the user?

• A. IAM access key and secret access key
• B. IAM X.509 certificates
• C. Nothin
• D. Everything is disabled by default
• E. IAM passwords

Answer: C

Explanation: Newly created IAM users have no password and no access key (access key ID and secret access key). If the user needs to administer your AWS resources using the AWS Management Console, you can create
a password for the user. If the user needs to interact with AWS programmatically (using the command line interface (CLI), the AWS SDK, or service-specific APIs), you can create an access key for that user. The credentials you create for users are what they use to uniquely identify themselves to AWS.
Reference: http://docs.aws.amazon.com/IAM/|atest/UserGuide/Using_WorkingWithGroupsAndUsers.htmI

NEW QUESTION 3
In DynamoDB, what type of HTTP response codes indicate that a problem was found with the client request sent to the service?

• A. 5xx HTTP response code
• B. 200 HTTP response code
• C. 306 HTTP response code
• D. 4xx HTTP response code

Answer: D

NEW QUESTION 4
Regarding Amazon SNS, when you want to subscribe to a topic and receive notifications to your email, in the Protocol drop-down box, you should select .

• A. Email
• B. Message
• C. SMTP
• D. IMAP

Answer: A

Explanation: In Amazon SNS, when you want to subscribe to a topic and receive notifications to your email, select Email in the Protocol drop-down box. Enter an email address you can use to receive the notification in the Endpoint field.
Reference: http://docs.aws.amazon.com/sns/latest/dg/SubscribeTopic.html

NEW QUESTION 5
How many types of block devices does Amazon EC2 support?

• A. 5
• B. 1
• C. 2
• D. 4

Answer: C

Explanation: Amazon EC2 supports 2 types of block devices. Reference:
http://docs.amazonwebservices.com/AWSEC2/latest/UserGuide/block-device-mapping-concepts.html

NEW QUESTION 6
AWS Elastic Beanstalk stores your application files and optionally server log files in .

• A. Amazon Storage Gateway
• B. Amazon Glacier
• C. Amazon EC2
• D. Amazon S3

Answer: D

Explanation: AWS Elastic Beanstalk stores your application files and optionally server log files in Amazon S3. If you are using the AWS Management Console, Git, the AWS Toolkit for Visual Studio, or AWS Toolkit for Eclipse, an Amazon S3 bucket will be created in your account for you and the files you upload will be automatically copied from your local client to Amazon S3. Optionally, you may configure Elastic Beanstalk to copy your server log files every hour to Amazon S3. You do this by editing the environment configuration settings.
Reference: http://docs.aws.amazon.com/elasticbeanstaIk/latest/dg/AWSHowTo.htmI

NEW QUESTION 7
Which of the following device names is recommended for an EBS volume that can be attached to an Amazon EC2 Instance running Windows?

• A. xvd[a-e]
• B. /mnt/sd[b-e]
• C. xvd[f-p]
• D. /dev/sda1

Answer: C

Explanation: The xvd[f-p] is the recommended device name for EBS volumes that can be attached to the Amazon EC2 Instances running on Windows.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/device_naming.html

NEW QUESTION 8
What is the maximum number of tags that a user can assign to an EC2 instance?

• A. 50
• B. 10
• C. 5
• D. 25

Answer: B

Explanation: To help manage EC2 instances as well as their usage in a better way, the user can tag the instances. The tags are metadata assigned by the user which consists of a key and a value. One resource can have a maximum of 10 tags.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_Tags.html

NEW QUESTION 9
Company B provides an online image recognition service and utilizes SOS to decouple system components for scalability The SQS consumers poll the imaging queue as often as possible to keep
end-to-end throughput as high as possible. However, Company B is realizing that polling in tight loops is burning CPU cycles and increasing costs with empty responses.
How can Company B reduce the number of empty responses?

• A. Set the imaging queue visibility Timeout attribute to 20 seconds
• B. Set the Imaging queue ReceiveMessageWaitTimeSeconds attribute to 20 seconds
• C. Set the imaging queue MessageRetentionPeriod attribute to 20 seconds
• D. Set the DeIaySeconds parameter of a message to 20 seconds

Answer: B

NEW QUESTION 10
The user has configured AutoScaIing based on the dynamic policy. Which of the following is not the right command to specify a change in capacity as a part of the policy?

• A. "adjustment=-50" (type is PercentChangeInCapacity)
• B. "adjustment=3" (type is ExactCapacity)
• C. "adjustment=-1" (type is ChangeInCapacity)
• D. "adjustment=-8" (type is ExactCapacity)

Answer: D

Explanation: The user can configure the AutoScaIing group to automatically scale up and then scale down based on the various specified CIoudWatch monitoring conditions. The user needs to provide the adjustment value and the adjustment type. A positive adjustment value increases the current capacity and a negative adjustment value decreases the current capacity. The user can express the change to the current size as an absolute number, an increment or as a percentage of the current group size.
In this option specifying the exact capacity with the adjustment value = -8 will not work as when type is exact capacity the adjustment value cannot be negative.
Reference:
http://docs.aws.amazon.com/AutoScaling/latest/DeveIoperGuide/as-scaIe-based-on-demand.html

NEW QUESTION 11
A startup s photo-sharing site is deployed in a VPC. An ELB distributes web traffic across two subnets. ELB session stickiness is configured to use the AWS-generated session cookie, with a session TTL of 5 minutes. The webserver Auto Scaling Group is configured as: min-size=4, max-size=4.
The startups preparing for a public launch, by running load-testing software installed on a single EC2 instance running in us-west-2a. After 60 minutes of load-testing, the webserver logs show:

Which recommendations can help ensure load-testing HTTP requests are evenly distributed across the
four webservers? Choose 2 answers

• A. Launch and run the load-tester EC2 instance from us-east-1 instead.
• B. Re-configure the load-testing software to re-resolve DNS for each web request.
• C. Use a 3rd-party load-testing service which offers globally-distributed test clients.
• D. Configure ELB and Auto Scaling to distribute across us-west-2a and us-west-2c.
• E. Configure ELB session stickiness to use the app-specific session cooki

Answer: BE

NEW QUESTION 12
Regarding Amazon SNS, you can send notification messages to mobile devices through any of the following supported push notification services, EXCEPT:

• A. Google Cloud Messaging for Android (GCM)
• B. Apple Push Notification Service (APNS)
• C. Amazon Device Messaging (ADM)
• D. Microsoft Windows Mobile Messaging (MWMM)

Answer: D

Explanation: In Amazon SNS, you have the ability to send notification messages directly to apps on mobile devices. Notification messages sent to a mobile endpoint can appear in the mobile app as message alerts, badge updates, or even sound alerts. Microsoft Windows MobiIe Messaging (MWMM) doesn’t exist and is not supported by Amazon SNS.
Reference: http://docs.aws.amazon.com/sns/latest/dg/SNSMobiIePush.htmI

NEW QUESTION 13
A user has enabled the automated backup, but not specified the backup window. What will RDS do in this case?

• A. Will throw an error on instance launch
• B. RDS will take 3 AM — 3:30 AM as the default window
• C. RDS assigns a random time period based on the region
• D. Will not allow to launch a DB instance

Answer: C

Explanation: If the user does not specify a preferred backup window while enabling an automated backup, Amazon RDS assigns a default 30-minute backup window which is selected at random from an 8-hour block of
time per region. Reference:
http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.BackingUpAndRestoringAmazonR DSInstances.htmI

NEW QUESTION 14
Which OS does the current version of AWS Elastic Beanstalk use?

• A. Amazon Linux AMI, Windows Server 2003 R2 AMI or the Windows Server 2008 R2 AMI
• B. Amazon Linux AMI only
• C. Amazon Linux AMI or the Windows Server 2008 R2 AMI
• D. Windows Sewer 2008 R2 AMI only

Answer: C

Explanation: The current version of AWS Elastic Beanstalk uses the Amazon Linux AMI or the Windows Server 2008 R2 AMI.
Reference: https://aws.amazon.com/elasticbeansta|k/faqs/

NEW QUESTION 15
In regard to AWS CIoudFormation, what is a stack?

• A. The set of AWS templates that are created and managed as a template
• B. The set of AWS resources that are created and managed as a template
• C. The set of AWS resources that are created and managed as a single unit
• D. The set of AWS templates that are created and managed as a single unit

Answer: C

Explanation: A stack is the set of AWS resources that are created and managed as a single unit when AWS C|oudFormation initiates a template.
Reference: http://docs.aws.amazon.com/AWSCIoudFormation/latest/UserGuide/concept-stack.html

NEW QUESTION 16
Which statements about DynamoDB are true? Choose 2 answers

• A. DynamoDB uses a pessimistic locking model
• B. DynamoDB uses optimistic concurrency control
• C. DynamoDB uses conditional writes for consistency
• D. DynamoDB restricts item access during reads
• E. DynamoDB restricts item access during writes

Answer: BC

NEW QUESTION 17
Can you configure an RDS Read Replica using CIoudFormation templates?

• A. Yes, provided that you have root access.
• B. Yes, when you create a new CIoudFormation template
• C. Yes, but not for all Regions.
• D. No, you can add the ReadRepIica only when the resource is made available by CIoudFormation

Answer: B

Explanation: AWS CIoudFormation gives developers and systems administrators an easy way to create and manage collections of AWS resources. You can now set Read Replicas for your databases with RDS when you create a new C|oudFormation tempIate.You can start using it with the sample template of C|oudFormation.
Reference:
https://s3.amazonaws.com/cloudformation-templates-us-east-1/RDS_MySQL_With_Read_RepIica.tempI

NEW QUESTION 18
Which of the following are valid SNS delivery transports? Choose 2 answers

• A. HTTP
• B. UDP
• C. SNIS
• D. DynamoDB
• E. Named Pipes

Answer: AC

NEW QUESTION 19
A meteorological system monitors 600 temperature gauges, obtaining temperature samples every minute and saving each sample to a DynamoDB table. Each sample involves writing 1K of data and the writes are evenly distributed over time.
How much write throughput is required for the target table?

• A. 1 write capacity unit
• B. 10 write capacity units
• C. 60 write capacity units
• D. 600 write capacity units
• E. 3600 write capacity units

Answer: B

NEW QUESTION 20
In regards to Amazon SQS how can you secure the messages in your queues?

• A. You can't
• B. Amazon SQS uses either your Access Key ID or an X.509 certificate to authenticate your identity
• C. Through your IAM access keys
• D. Don't use root access

Answer: B

Explanation: Authentication mechAMsms are provided to ensure that messages stored in Amazon SQS queues are secured against unauthorized access. Only the AWS account owners can access the queues they create. Amazon SQS uses proven cryptographic methods to authenticate your identity, either through the use of your Access Key ID and request signature, or through the use of an X.509 certificate.
Reference: https://aws.amazon.com/sqs/faqs/