NEW QUESTION 1
A user is having access to objects of an S3 bucket which is not owned by him. If he is trying to set the objects of that bucket public, which of the below mentioned options may be a right fit for this action?

• A. Make the bucket public with full access
• B. Define the policy for the bucket
• C. Provide ACL on the object
• D. Create an IAM user with permission

Answer: C

Explanation:
An S3 object ACL is the only way to manage access to objects which are not owned by the bucket owner. An AWS account that owns the bucket can grant another AWS account permission to upload objects. The bucket owner does not own these objects. The AWS account that created the object must grant permissions using object ACLs.
Reference: http://docs.aws.amazon.com/AmazonS3/latest/dev/access-policy-alternatives-guidelines.html

NEW QUESTION 2
A user has set an IAM policy where it allows all requests if a request from IP 10.10.10.1/32. Another policy allows all the requests between 5 PM to 7 PM. What will happen when a user is requesting access from IP 10.10.10.1/32 at 6 PM?

• A. IAM will throw an error for policy conflict
• B. It is not possible to set a policy based on the time or IP
• C. It will deny access
• D. It will allow access

Answer: D

Explanation:
With regard to IAM, when a request is made, the AWS service decides whether a given request should be allowed or denied. The evaluation logic follows these rules:
By default, all requests are denied. (In general, requests made using the account credentials for resources in the account are always allowed.)
An explicit allow policy overrides this default. An explicit deny policy overrides any allows. Reference:
http://docs.aws.amazon.com/IAM/latest/UserGuide/AccessPoIicyLanguage_EvaIuationLogic.htmI

NEW QUESTION 3
A user has setup Multi AZ with the MS SQL RDS instance. Which of the below mentioned functionalities can be achieved by the user?

• A. High availability
• B. Scalability
• C. MS SQL does not support Multi AZ
• D. Disaster recovery

Answer: C

Explanation:
The Multi AZ feature allows the user to achieve High Availability. MS SQL does not support Multi AZ. Reference: https://aws.amazon.com/rds/faqs/#36

NEW QUESTION 4
Which DynamoDB limits can be raised by contacting AWS support? Choose 2 answers

• A. The number of hash keys per account
• B. The maximum storage used per account
• C. The number of tables per account
• D. The number of local secondary indexes per account
• E. The number of provisioned throughput units per account

Answer: CE

NEW QUESTION 5
You cannot access your AWS console, so you revert to using the CLI that you are not familiar with. Which of the following commands is not a valid CLI command for EC2 instances?

• A. ec2-allocate-address
• B. ec2-attach-internet-gateway
• C. ec2-associate-route-table
• D. ec2-allocate-interface

Answer: D

Explanation:
You can use the CLI tools to manage your Amazon EC2 resources (such as instances, security groups, and volumes) and your Amazon VPC resources (such as VPCs, subnets, route tables, and Internet gateways). Before you can start using the tools, you must download and configure them.
The following are valid CLI commands for EC2 instances: ec2-accept-vpc-peering-connection
ec2-allocate-address
ec2-assign-private-ip-addresses ec2-associate-address
ec2-associate-dhcp-options ec2-associate-route-table
ec2-attach-internet-gateway
ec2-attach-network-interface (not ec2-allocate-interface) Reference:
http://docs.aws.amazon.com/AWSEC2/latest/CommandLineReference/command-reference.html

NEW QUESTION 6
Regarding Amazon SNS, when you want to subscribe to a topic and receive notifications to your email, in the Protocol drop-down box, you should select .

• A. Email
• B. Message
• C. SMTP
• D. IMAP

Answer: A

Explanation:
In Amazon SNS, when you want to subscribe to a topic and receive notifications to your email, select Email in the Protocol drop-down box. Enter an email address you can use to receive the notification in the Endpoint field.
Reference: http://docs.aws.amazon.com/sns/latest/dg/SubscribeTopic.html

NEW QUESTION 7
A user has launched an EC2 instance and installed a website with the Apache webserver. The webserver is running but the user is not able to access the website from the internet. What can be the possible reason for this failure?

• A. The security group of the instance is not configured properly.
• B. The instance is not configured with the proper key-pairs.
• C. The Apache website cannot be accessed from the internet.
• D. Instance is not configured with an elastic I

Answer: A

Explanation:
In Amazon Web Services, when a user has configured an instance with Apache, the user needs to ensure that the ports in the security group are opened as configured in Apache config. E.g. If Apache is running on port 80, the user should open port 80 in the security group.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-network-security.html

NEW QUESTION 8
When you register an actMty in Amazon SWF, you provide the following information, except:

• A. a name
• B. timeout values
• C. a domain
• D. version

Answer: C

Explanation:
When designing an Amazon SWF workflow, you precisely define each of the required actMties. You then register each actMty with Amazon SWF as an actMty type. When you register the actMty, you provide information such as a name and version, and some timeout values based on how long you expect the actMty to take.
Reference: http://docs.aws.amazon.com/amazonswf/latest/developerguide/swf-dg-intro-to-swf.html

NEW QUESTION 9
A user has attached an EBS volume to a running Linux instance as a "/dev/sdf" device. The user is unable to see the attached device when he runs the command "df -h". What is the possible reason for this?

• A. The volume is not in the same AZ of the instance
• B. The volume is not formatted
• C. The volume is not attached as a root device
• D. The volume is not mounted

Answer: D

Explanation:
When a user creates an EBS volume and attaches it as a device, it is required to mount the device. If the device/volume is not mounted it will not be available in the listing.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/AmazonEBS.htmI

NEW QUESTION 10
A user has created a MySQL RDS instance with PIOPS. Which of the below mentioned statements will help user understand the advantage of PIOPS?

• A. The user can achieve additional dedicated capacity for the EBS I/O with an enhanced RDS option
• B. It uses optimized EBS volumes and optimized configuration stacks
• C. It provides a dedicated network bandwidth between EBS and RDS
• D. It uses a standard EBS volume with optimized configuration the stacks

Answer: B

Explanation:
RDS DB instance storage comes in two types: standard and provisioned IOPS. Standard storage is allocated on the Amazon EBS volumes and connected to the user’s DB instance. Provisioned IOPS uses optimized EBS volumes and an optimized configuration stack. It provides additional, dedicated capacity for the EBS I/O.
Reference: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Welcome.html

NEW QUESTION 11
A user is creating an ELB with VPC. Which of the following options is available as a part of the "Add EC2 instances" page?

• A. Select Subnet
• B. Select IAM
• C. Select ENI
• D. Select VPC

Answer: A

Explanation:
When a user is launching an ELB with VPC, he/she has to select the options, such as subnet and security group before selecting the instances part of that subnet.
Reference:
http://docs.aws.amazon.com/EIasticLoadBaIancing/latest/Deve|operGuide/elb-getting-started.htmI

NEW QUESTION 12
A user is configuring the HTTPS protocol on a front end ELB and the SSL protocol for the back-end listener in ELB. What will ELB do?

• A. It will allow you to create the configuration, but the instance will not pass the health check
• B. Receives requests on HTTPS and sends it to the back end instance on SSL
• C. It will not allow you to create this configuration
• D. It will allow you to create the configuration, but ELB will not work as expected

Answer: C

Explanation:
If a user is configuring HTTPS on the front end and TCP on the back end, ELB will not allow saving these listeners and will respond with the message.
"Load Balancer protocol is an application layer protocol, but instance protocol is not. Both the Load Balancer protocol and the instance protocol should be at the same layer. Please fix."
Reference:
http://docs.aws.amazon.com/EIasticLoadBaIancing/latest/DeveIoperGuide/elb-troubleshooting.htmI

NEW QUESTION 13
Regarding Amazon SWF, the coordination logic in a workflow is contained in a software program called a

• A. Handler
• B. Decider
• C. Cordinator
• D. Worker

Answer: B

Explanation:
In Amazon SWF, the coordination logic in a workflow is contained in a software program called a decider. The decider schedules actMty tasks, provides input data to the actMty workers, processes events that arrive while the workflow is in progress, and ultimately ends (or closes) the workflow when the objective has been completed.
Reference: http://docs.aws.amazon.com/amazonswf/latest/developerguide/swf-dg-intro-to-swf.html

NEW QUESTION 14
An account owner has created an IAM user with the name examkiller. The account owner wants to give EC2 access of only the US West region to that IAM user. How can the owner configure this?

• A. While creating a policy provide the region as a part of the resources
• B. Create an IAM user in the US West region and give access to EC2
• C. Create an IAM policy and define the region in the condition
• D. It is not possible to provide access based on the region

Answer: C

Explanation:
The IAM policy is never region specific. If the user wants to configure the region specific setting, he needs to provide conditions as part of the policy.
Reference: http://awspolicygen.s3.amazonaws.com/poIicygen.htmI

NEW QUESTION 15
How can you peek at a message in Amazon SQS?

• A. Log the message ID and the receipt handle for your messages and correlate them to confirm when a message has been received and deleted
• B. Send the message to Amazon S3
• C. You can't
• D. Set up a CIoudWatch alarm to auto send you the message

Answer: A

Explanation:
With version 2008-01-01, the PeekMessage action has been removed from Amazon SQS. This functionality was used mainly to debug small systems — specifically to confirm a message was successfully sent to the queue or deleted from the queue.
To do this with version 2008-01-01, you can log the message ID and the receipt handle for your messages and correlate them to confirm when a message has been received and deleted. Reference: https://aws.amazon.com/items/1343?externaI|D=1343

NEW QUESTION 16
What is the maximum number of S3 Buckets available per AWS account?

• A. 100 per region
• B. there is no limit
• C. 100 per account
• D. 500 per account
• E. 100 per IAM user

Answer: C

NEW QUESTION 17
A user has created a MySQL RDS instance. Which of the below mentioned options is mandatory to configure while creating an instance?

• A. MuIti AZ deployment setup
• B. Automated backup window
• C. Availability Zone
• D. Maintenance window

Answer: A

Explanation:
When creating an RDS instance, the user needs to specify whether it is Nlulti AZ or not. If the user does not provide the value for the zone, the maintenance window or automated backup window, RDS will automatically select the value.
Reference: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.lV|u|tiAZ.htmI

NEW QUESTION 18
......