NEW QUESTION 1
What is the minimum charge for the data transferred between Amazon RDS and Amazon EC2 Instances in the same Availability Zone?

• A. USD 0.10 per GB
• B. No charg
• C. It is free.
• D. USD 0.02 per GB
• E. USD 0.01 per GB

Answer: B

NEW QUESTION 2
Per the AWS Acceptable Use Policy, penetration testing of EC2 instances:

• A. May be performed by AWS, and will be performed by AWS upon customer request.
• B. May be performed by AWS, and is periodically performed by AWS.
• C. Are expressly prohibited under all circumstances.
• D. May be performed by the customer on their own instances with prior authorization from AWS.
• E. May be performed by the customer on their own instances, only if performed from EC2 instances

Answer: B

Explanation: Reference: http://aws.amazon.com/security/penetration-testing/

NEW QUESTION 3
Fill in the blanks: _ let you categorize your EC2 resources in different ways, for example, by purpose, owner, or environment.

• A. wildcards
• B. pointers
• C. Tags
• D. special filters

Answer: C

NEW QUESTION 4
An AWS customer runs a public blogging website. The site users upload two million blog entries a month. The average blog entry size is 200 KB. The access rate to blog entries drops to negligible 6 months after publication and users rarely access a blog entry 1 year after publication. Additionally, blog entries have a high update rate during the first 3 months following publication, this drops to no updates after 6 months. The customer wants to use CIoudFront to improve his user's load times.
Which of the following recommendations would you make to the customer?

• A. Duplicate entries into two different buckets and create two separate CIoudFront distributions where 53 access is restricted only to Cloud Front identity
• B. Create a CIoudFront distribution with "US" Europe price class for US/ Europe users and a different CIoudFront distribution with AI I Edge Locations' for the remaining users.
• C. Create a CIoudFront distribution with 53 access restricted only to the CIoudFront identity and partition the blog entry's location in 53 according to the month it was uploaded to be used with CIoudFront behaviors.
• D. Create a CIoudFronI distribution with Restrict Viewer Access Forward Query string set to true and minimum TTL of 0.

Answer: C

NEW QUESTION 5
Is there any way to own a direct connection to Amazon Web Services'?

• A. You can create an encrypted tunnel to VPC, but you don't own the connection.
• B. Yes, it's called Amazon Dedicated Connection.
• C. No, AWS only allows access from the public Internet.
• D. Yes, it's called Direct Connec

Answer: D

NEW QUESTION 6
Every user you create in the IAM system starts with _ _

• A. full permissions
• B. no permissions
• C. partial permissions

Answer: B

NEW QUESTION 7
You would like to create a mirror image of your production environment in another region for disaster recovery purposes. Which of the following AWS resources do not need to be recreated in the second region? (Choose 2 answers)

• A. Route 53 Record Sets
• B. IM Roles
• C. Elastic IP Addresses (EIP)
• D. EC2 Key Pairs
• E. Launch configurations
• F. Security Groups

Answer: AC

Explanation: Reference:
http://tech.com/wp-content/themes/optimize/download/AWSDisaster_Recovery.pdf (page 6)

NEW QUESTION 8
The SQL Server _ feature is an efficient means of copying data from a source database to your DB Instance. It writes the data that you specify to a data file, such as an ASCII file.

• A. bulk copy
• B. group copy
• C. dual copy
• D. mass copy

Answer: A

NEW QUESTION 9
When you use the AWS Management Console to delete an IAM user, IAM also deletes any signing certificates and any access keys belonging to the user.

• A. FALSE
• B. This is configurable
• C. TRUE

Answer: C

NEW QUESTION 10
Which one of the below doesn't affect Amazon CIoudFront billing?

• A. Distribution Type
• B. Data Transfer Out
• C. Dedicated IP SSL Certificates
• D. Requests

Answer: A

Explanation: Amazon CIoudFront is a web service for content delivery. C|oudFront delivers your content using a global network of edge locations and works seamlessly with Amazon S3 which durably stores the original and definitive versions of your files.
Amazon CIoudFront billing is maily affected by Data Transfer Out
Edge Location Traffic Distribution Requests
Dedicated IP SSL Certificates
Reference: http://calcu|ator.s3.amazonaws.com/index.htmI

NEW QUESTION 11
A company has a workflow that sends video files from their on-premise system to AWS for transcoding. They use EC2 worker instances that pull transcoding jobs from SQS. Why is SQS an appropriate service for this scenario?

• A. SQS guarantees the order of the messages.
• B. SQS synchronously provides transcoding output.
• C. SQS checks the health of the worker instances.
• D. SQS helps to facilitate horizontal scaling of encoding task

Answer: D

NEW QUESTION 12
You are designing a social media site and are considering how to mitigate distributed denial-of service (DDoS) attacks. Which of the below are viable mitigation techniques? (Choose 3 answers)

• A. Add multiple elastic network interfaces (ENis) to each EC2 instance to increase the network bandwidth.
• B. Use dedicated instances to ensure that each instance has the maximum performance possible.
• C. Use an Amazon C|oudFront distribution for both static and dynamic content.
• D. Use an Elastic Load Balancer with auto scaling groups at the we
• E. App and Amazon Relational Database Service (RDS) tiers
• F. Add alert Amazon CIoudWatch to look for high Network in and CPU utilization.
• G. Create processes and capabilities to quickly add and remove rules to the instance OS firewal

Answer: CEF

NEW QUESTION 13
What does Amazon EC2 provide?

• A. Virtual sewers in the Cloud.
• B. A platform to run code (Java, PHP, Python), paying on an hourly basis.
• C. Computer Clusters in the Cloud.
• D. Physical sewers, remotely managed by the custome

Answer: A

NEW QUESTION 14
In the Launch Db Instance Wizard, where can I select the backup and maintenance options?

• A. Under DB INSTANCE DETAILS
• B. Under REVI EW
• C. Under MANAGEMENT OPTIONS
• D. Under ENGINE SELECTION

Answer: C

NEW QUESTION 15
If you want to launch Amazon Elastic Compute Cloud (EC2) instances and assign each instance a predetermined private IP address you should:

• A. Launch the instance from a private Amazon Machine Image (AMI).
• B. Assign a group of sequential Elastic IP address to the instances.
• C. Launch the instances in the Amazon Virtual Private Cloud (VPC).
• D. Launch the instances in a Placement Group.
• E. Use standard EC2 instances since each instance gets a private Domain Name Service (DNS) alread

Answer: B

Explanation: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-vpc.htmI

NEW QUESTION 16
You are signed in as root user on your account but there is an Amazon S3 bucket under your account that you cannot access. What is a possible reason for this?

• A. An IAM user assigned a bucket policy to an Amazon S3 bucket and didn't specify the root user as a principal
• B. The S3 bucket is full.
• C. The S3 bucket has reached the maximum number of objects allowed.
• D. You are in the wrong availability zone

Answer: A

Explanation: With IAM, you can centrally manage users, security credentials such as access keys, and permissions that control which AWS resources users can access.
In some cases, you might have an IAM user with full access to IAM and Amazon S3. If the IAM user assigns a bucket policy to an Amazon S3 bucket and doesn't specify the root user as a principal, the root user is denied access to that bucket. However, as the root user, you can still access the bucket by modifying the bucket policy to allow root user access.
Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/iam-troubleshooting.htmI#testing2

NEW QUESTION 17
Amazon EC2 provides a . It is an HTTP or HTTPS request that uses the HTTP verbs GET or POST.

• A. web database
• B. .net framework
• C. Query API
• D. C library

Answer: C

Explanation: Amazon EC2 provides a Query API. These requests are HTTP or HTTPS requests that use the HTTP verbs GET or POST and a Query parameter named Action.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/APIReference/making-api-requests.html

NEW QUESTION 18
In an experiment, if the minimum size for an Auto Scaling group is 1 instance, which of the following statements holds true when you terminate the running instance?

• A. Auto Scaling must launch a new instance to replace it.
• B. Auto Scaling will raise an alarm and send a notification to the user for action.
• C. Auto Scaling must configure the schedule actMty that terminates the instance after 5 days.
• D. Auto Scaling will terminate the experimen

Answer: A

Explanation: If the minimum size for an Auto Scaling group is 1 instance, when you terminate the running instance, Auto Scaling must launch a new instance to replace it.
Reference:http://docs.aws.amazon.com/AutoScaIing/latest/Deve|operGuide/AS_Concepts.htmI

NEW QUESTION 19
What is the time period with which metric data is sent to CIoudWatch when detailed monitoring is enabled on an Amazon EC2 instance?

• A. 15 minutes
• B. 5 minutes
• C. 1 minute
• D. 45 seconds

Answer: C

Explanation: By default, Amazon EC2 metric data is automatically sent to CIoudWatch in 5-minute periods. However, you can, enable detailed monitoring on an Amazon EC2 instance, which sends data to CIoudWatch in
1-minute periods
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-cloudwatch.htmI