NEW QUESTION 1
While creating a network in the VPC, which of the following is true of a NAT device?

• A. You have to administer the NAT Gateway Service provided by AWS.
• B. You can choose to use any of the three kinds of NAT devices offered by AWS for special purposes.
• C. You can use a NAT device to enable instances in a private subnet to connect to the Internet.
• D. You are recommended to use AWS NAT instances over NAT gateways, as the instances provide better availability and bandwidth.

Answer: C

Explanation: You can use a NAT device to enable instances in a private subnet to connect to the Internet (for example, for software updates) or other AWS services, but prevent the Internet from initiating connections with the instances. AWS offers two kinds of NAT devices u a NAT gateway or a NAT instance. We recommend NAT gateways, as they provide better availability and bandwidth over NAT instances. The NAT Gateway service is also a managed service that does not require your administration efforts. A NAT instance is launched from a NAT AM. You can choose to use a NAT instance for special purposes.
Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/vpc-nat.html

NEW QUESTION 2
A customer has a 10 GB AWS Direct Connect connection to an AWS region where they have a web application hosted on Amazon Elastic Computer Cloud (EC2). The application has dependencies on an on-premises mainframe database that uses a BASE (Basic Available. Sort stale Eventual consistency) rather than an ACID (Atomicity. Consistency isolation. Durability) consistency model.
The application is exhibiting undesirable behavior because the database is not able to handle the volume of writes. How can you reduce the load on your on-premises database resources in the most
cost-effective way?

• A. Use an Amazon Elastic Map Reduce (EMR) S3DistCp as a synchronization mechanism between the on-premises database and a Hadoop cluster on AWS.
• B. Modify the application to write to an Amazon SQS queue and develop a worker process to flush the queue to the on-premises database.
• C. Modify the application to use DynamoDB to feed an EMR cluster which uses a map function to write to the on-premises database.
• D. Provision an RDS read-replica database on AWS to handle the writes and synchronize the two databases using Data Pipeline.

Answer: A

Explanation: Reference: https://aws.amazon.com/blogs/aws/category/amazon-elastic-map-reduce/

NEW QUESTION 3
You launch an Amazon EC2 instance without an assigned AVVS identity and Access Management (IAM) role. Later, you decide that the instance should be running with an IAM role. Which action must you take in order to have a running Amazon EC2 instance with an IAM role assigned to it?

• A. Create an image of the instance, and register the image with an IAM role assigned and an Amazon EBS volume mapping.
• B. Create a new IAM role with the same permissions as an existing IAM role, and assign it to the running instance.
• C. Create an image of the instance, add a new IAM role with the same permissions as the desired IAM role, and deregister the image with the new role assigned.
• D. Create an image of the instance, and use this image to launch a new instance with the desired Lam role assigned.

Answer: D

Explanation: Reference:http://docs.aws.amazon.com/IAM/latest/UserGuide/roles-usingroIe-ec2instanee.htm|

NEW QUESTION 4
While performing the volume status checks, if the status is insufficient-data, what does it mean?

• A. the checks may still be in progress on the volume
• B. the check has passed
• C. the check has failed

Answer: A

NEW QUESTION 5
A user is currently building a website which will require a large number of instances in six months, when a demonstration of the new site will be given upon launch.
Which of the below mentioned options allows the user to procure the resources beforehand so that they need not worry about infrastructure availability during the demonstration?

• A. Procure all the instances as reserved instances beforehand.
• B. Launch all the instances as part of the cluster group to ensure resource availability.
• C. Pre-warm all the instances one month prior to ensure resource availability.
• D. Ask AWS now to procure the dedicated instances in 6 month

Answer: A

Explanation: Amazon Web Services has massive hardware resources at its data centers, but they are finite. The best way for users to maximize their access to these resources is by reserving a portion of the computing capacity that they require. This can be done through reserved instances. With reserved instances, the user literally reserves the computing capacity in the Amazon Web Services cloud.
Reference: http://media.amazonwebservices.com/AWS_Building_FauIt_To|erant_AppIications.pdf

NEW QUESTION 6
While signing in REST/ Query requests, for additional security, you should transmit your requests using Secure Sockets Layer (SSL) by using

• A. HTIP
• B. Internet Protocol Security(IPsec)
• C. TLS (Transport Layer Security)
• D. HTIPS

Answer: D

NEW QUESTION 7
When you run a DB Instance as a Multi-AZ deployment, the " _ " serves database writes and reads

• A. secondary
• B. backup
• C. stand by
• D. primary

Answer: D

NEW QUESTION 8
You are developing a new mobile application and are considering storing user preferences in AWS.2w This would provide a more uniform cross-device experience to users using multiple mobile devices to access the application. The preference data for each user is estimated to be SOKB in size Additionally 5 million customers are expected to use the application on a regular basis. The solution needs to be
cost-effective, highly available, scalable and secure, how would you design a solution to meet the above requirements?

• A. Setup an RDS MySQL instance in 2 availability zones to store the user preference dat
• B. Deploy a public facing application on a server in front of the database to manage security and access credentials
• C. Setup a DynamoDB table with an item for each user having the necessary attributes to hold the user preference
• D. The mobile application will query the user preferences directly from the DynamoDB tabl
• E. Utilize ST
• F. Web Identity Federation, and DynamoDB Fine Grained Access Control to authenticate and authorize access.
• G. Setup an RDS MySQL instance with multiple read replicas in 2 availability zones to store the user preference data .The mobile application will query the user preferences from the read replica
• H. Leverage the MySQL user management and access prMlege system to manage security and access credentials.
• I. Store the user preference data in 53 Setup a DynamoDB table with an item for each user and an item attribute pointing to the user' 53 objec
• J. The mobile application will retrieve the 53 URL from DynamoDB and then access the 53 object directly utilize STS, Web identity Federation, and 53 ACLs to authenticate and authorize access.

Answer: B

NEW QUESTION 9
AWS CIoudFormation is a service that helps you model and set up your Amazon Web Services resources so that you can spend less time managing those resources and more time focusing on your applications that run in AWS. You create a template that describes all the AWS resources that you want (like Amazon EC2 instances or Amazon RDS DB instances), and AWS CIoudFormation takes care of provisioning and configuring those resources for you. What formatting is required for this template?

• A. JSON-formatted document
• B. CSS-formatted document
• C. XML-formatted document
• D. HTML-formatted document

Answer: A

Explanation: You can write an AWS CIoudFormation template (a JSON-formatted document) in a text editor or pick an existing template. The template describes the resources you want and their settings. For example,
suppose you want to create an Amazon EC2. Your template can declare an instance Amazon EC2 and describe its properties, as shown in the following example:
{
"AWSTemp|ateFormatVersion" : "2010-09-O9",
"Description" : "A simple Amazon EC2 instance", "Resources" : {
"MyEC2Instance" : {
"Type" : "AWS::EC2::Instance", "Properties" : {
"Image|d" : "ami-2f726546", "|nstanceType" : "t1.micro"
}
}
}
}
Reference:
http://docs.aws.amazon.com/AWSCIoudFormation/latest/UserGuide/cfn-whatis-howdoesitwork.html

NEW QUESTION 10
What does t he following command do with respect to the Amazon EC2 security groups? ec2-create-group CreateSecurityGroup

• A. Groups the user created security groups in to a new group for easy access.
• B. Creates a new security group for use with your account.
• C. Creates a new group inside the security group.
• D. Creates a new rule inside the security grou

Answer: B

NEW QUESTION 11
A user has created a CIoudFormation stack. The stack creates AWS services, such as EC2 instances, ELB, AutoScaIing, and RDS. While creating the stack it created EC2, ELB and AutoScaIing but failed to create RDS. What will C|oudFormation do in this scenario?

• A. Rollback all the changes and terminate all the created services
• B. It will wait for the user’s input about the error and correct the mistake after the input
• C. CIoudFormation can never throw an error after launching a few services since it verifies all the steps before launching
• D. It will warn the user about the error and ask the user to manually create RDS

Answer: A

Explanation: AWS CIoudFormation is an application management tool which provides application modeling, deployment, configuration, management and related actMties. The AWS CIoudFormation stack is a collection of AWS resources which are created and managed as a single unit when AWS CIoudFormation instantiates a template. If any of the services fails to launch, C|oudFormation will rollback all the changes and terminate or delete all the created services.
Reference: http://aws.amazon.com/c|oudformation/faqs/

NEW QUESTION 12
Every user you create in the IAM system starts with _ _

• A. Partial permissions
• B. Full permissions
• C. No permissions

Answer: C

NEW QUESTION 13
You are planning and configuring some EBS volumes for an application. In order to get the most performance out of your EBS volumes, you should attach them to an instance with enough to support your volumes.

• A. Redundancy
• B. Storage
• C. Bandwidth
• D. Memory

Answer: C

Explanation: When you plan and configure EBS volumes for your application, it is important to consider the configuration of the instances that you will attach the volumes to. In order to get the most performance out of your EBS volumes, you should attach them to an instance with enough bandwidth to support your volumes, such as an EBS-optimized instance or an instance with 10 Gigabit network connectMty. This is especially important when you use General Purpose (SSD) or Provisioned IOPS (SSD) volumes, or when you stripe multiple volumes together in a RAID configuration.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-ec2-config.htmI

NEW QUESTION 14
If I scale the storage capacity provisioned to my DB Instance by mid of a billing month, how will I be charged?

• A. You will be charged for the highest storage capacity you have used
• B. On a proration basis
• C. You will be charged for the lowest storage capacity you have used

Answer: B

NEW QUESTION 15
You have been using T2 instances as your CPU requirements have not been that intensive. However you now start to think about larger instance types and start looking at M and IV|3 instances. You are a little confused as to the differences between them as they both seem to have the same ratio of CPU and memory. Which statement below is incorrect as to why you would use one over the other?

• A. M3 instances are less expensive than M1 instances.
• B. IV|3 instances are configured with more swap memory than M instances.
• C. IV|3 instances provide better, more consistent performance that M instances for most use-cases.
• D. M3 instances also offer SSD-based instance storage that delivers higher I/O performanc

Answer: B

Explanation: Amazon EC2 allows you to set up and configure everything about your instances from your operating system up to your applications. An Amazon Nlachine Image (AMI) is simply a packaged-up environment that includes all the necessary bits to set up and boot your instance.
M1 and M3 Standard instances have the same ratio of CPU and memory, some reasons below as to why you would use one over the other.
IV|3 instances provide better, more consistent performance that M instances for most use-cases. M3 instances also offer SSD-based instance storage that delivers higher I/O performance.
M3 instances are also less expensive than M1 instances. Due to these reasons, we recommend M3 for applications that require general purpose instances with a balance of compute, memory, and network resources.
However, if you need more disk storage than what is provided in M3 instances, you may still find M1 instances useful for running your applications.
Reference: https://aws.amazon.com/ec2/faqs/

NEW QUESTION 16
You are migrating an internal sewer on your DC to an EC2 instance with EBS volume. Your server disk usage is around 500GB so you just copied all your data to a 2TB disk to be used with AWS Import/Export. Where will the data be imported once it arrives at Amazon?

• A. to a 2TB EBS volume
• B. to an S3 bucket with 2 objects of 1TB
• C. to an 500GB EBS volume
• D. to an S3 bucket as a 2TB snapshot

Answer: B

Explanation: An import to Amazon EBS will have different results depending on whether the capacity of your storage device is less than or equal to 1 TB or greater than 1 TB. The maximum size of an Amazon EBS snapshot is 1 TB, so if the device image is larger than 1 TB, the image is chunked and stored on Amazon S3. The target location is determined based on the total capacity of the device, not the amount of data on the device.
Reference: http://docs.aws.amazon.com/AWSImportExport/latest/DG/Concepts.html

NEW QUESTION 17
When does the billing of an Amazon EC2 system begin?

• A. It starts when the Status column for your distribution changes from Creating to Deployed.
• B. It starts as soon as you click the create instance option on the main EC2 console.
• C. It starts when your instance reaches 720 instance hours.
• D. It starts when Amazon EC2 initiates the boot sequence of an AM instanc

Answer: D

Explanation: Billing commences when Amazon EC2 initiates the boot sequence of an AM instance. Billing ends when the instance terminates, which could occur through a web services command, by running "shutdown -h", or through instance failure. When you stop an instance, Amazon shuts it down but doesn/Et charge hourly usage for a stopped instance, or data transfer fees, but charges for the storage for any Amazon EBS volumes.
Reference: http://aws.amazon.com/ec2/faqs/

NEW QUESTION 18
In Route 53, what does a Hosted Zone refer to?

• A. A hosted zone is a collection of geographical load balancing rules for Route 53.
• B. A hosted zone is a collection of resource record sets hosted by Route 53.
• C. A hosted zone is a selection of specific resource record sets hosted by CIoudFront for distribution to Route 53.
• D. A hosted zone is the Edge Location that hosts the Route 53 records for a use

Answer: B

Explanation: A Hosted Zone refers to a selection of resource record sets hosted by Route 53.
Reference: http://docs.aws.amazon.com/Route53/Iatest/DeveIoperGuide/AboutHostedZones.html

NEW QUESTION 19
EBS Snapshots occur _

• A. Asynchronously
• B. Synchronously
• C. Weekly

Answer: A