NEW QUESTION 1
An orgAMzation has enabled a strict password policy for its IAM users. The orgAMzation is taking help from the IAM console to set the password policy. Which of the below mentioned rules cannot be specified by the user as a part of the policy?

• A. Allow at least one lower case letter
• B. Allow at least one number
• C. Allow at least one non-alphanumeric character
• D. Do not allow the user to use the password from the last three passwords

Answer: D

Explanation:
AWS IAM allows an orgAMzation to create multiple users and provide them access to various AWS services. By default when the user is created, he does not have password enabled and can not login to AWS console. If the orgAMzation wants to allow the users to login to AWS console, they can enable password for each user. It is required that IAM users follow certain guidelines to set their IAM login password. For this IAM provides root account owner to setup passwrod policy. The password policy also lets the specify whether all IAM users can change their own passwords. As part of policy, orgAMzation can specify that passwords for IAM users must be of a certain minimum length, must include certain characters, and a few more criteria such as below.
One upper/ lower or both letters One alpha numeric
One number
Reference: http://docs.aws.amazon.com/|AM/Iatest/UserGuide/Using_ManagingPasswordPoIicies.htm|

NEW QUESTION 2
In relation to Amazon SQS, how can you ensure that messages are delivered in order?

• A. Increase the size of your queue
• B. Send them with a timestamp
• C. Give each message a unique id.
• D. AWS cannot guarantee that you will receive messages in the exact order you sent them

Answer: D

Explanation:
Amazon SQS makes a best effort to preserve order in messages, but due to the distributed nature of the queue, AWS cannot guarantee that you will receive messages in the exact order you sent them. You typically place sequencing information or timestamps in your messages so that you can reorder them upon receipt.
Reference: https://aws.amazon.com/items/1343?externaI|D=1343

NEW QUESTION 3
What type of block cipher does Amazon S3 offer for server side encryption?

• A. Triple DES
• B. Advanced Encryption Standard
• C. Blowfish
• D. RC5

Answer: B

NEW QUESTION 4
A user is part of a group which has a policy allowing him just read only access to EC2. The user is part of another group which has full access to EC2. What happens when the user tries to launch an instance?

• A. It will allow the user to launch the instance
• B. It will fail since the user has just read only access
• C. It will allow or deny based on the group under which the user has logged into EC2
• D. It will not allow the user to add to the conflicting groups

Answer: A

Explanation:
The IAM group policy is always aggregated. In this case, if the user does not have permission for one group, but has permission for another group, he will have full access to EC2. Unless there is specific deny policy, the user will be able to access EC2.
Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/PoIiciesOverview.htmI

NEW QUESTION 5
When you create a table with a hash-and-range key, you must define one or more secondary indexes on that table.

• A. False, hash-range key is another name for secondary index
• B. False, it is optional
• C. True
• D. False, when you have Hash-Range key you cannot define Secondary index

Answer: B

Explanation:
When you create a table with a hash-and-range key in DynamoDB, you can also define one or more secondary indexes on that table.
Reference: http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/LSI.htmI

NEW QUESTION 6
What is the maximum time messages can be stored in SQS?

• A. 14 days
• B. one month
• C. 4 days
• D. 7 days

Answer: A

Explanation:
A message can be stored in the Simple Queue Service (SQS) from 1 minute up to a maximum of 14 days. Reference: http://aws.amazon.com/sqs/faqs/#How_Iong_can_I_keep_my_messages_in_Amazon_SQS_queues

NEW QUESTION 7
A user is trying to share a video file with all his friends. Which of the below mentioned AWS services will be cheapest and easy to use?

• A. AWS S3
• B. AWS EC2
• C. AWS RRS
• D. AWS Glacier

Answer: C

Explanation:
AWS RRS provides the same functionality as AWS S3, but at a cheaper rate. It is ideally suited for non mission critical applications. It provides less durability than S3, but is a cheaper option.
Reference: http://docs.aws.amazon.com/AmazonS3/Iatest/dev/UsingRRS.htmI

NEW QUESTION 8
A user is trying to create a list of IAM users with the AWS console. When the IAM users are created which of the below mentioned credentials will be enabled by default for the user?

• A. IAM access key and secret access key
• B. IAM X.509 certificates
• C. Nothin
• D. Everything is disabled by default
• E. IAM passwords

Answer: C

Explanation:
Newly created IAM users have no password and no access key (access key ID and secret access key). If the user needs to administer your AWS resources using the AWS Management Console, you can create
a password for the user. If the user needs to interact with AWS programmatically (using the command line interface (CLI), the AWS SDK, or service-specific APIs), you can create an access key for that user. The credentials you create for users are what they use to uniquely identify themselves to AWS.
Reference: http://docs.aws.amazon.com/IAM/|atest/UserGuide/Using_WorkingWithGroupsAndUsers.htmI

NEW QUESTION 9
An EC2 instance has one additional EBS volume attached to it. How can a user attach the same volume to another running instance in the same AZ?

• A. Terminate the first instance and only then attach to the new instance
• B. Attach the volume as read only to the second instance
• C. Detach the volume first and attach to new instance
• D. No need to detac
• E. Just select the volume and attach it to the new instance, it will take care of mapping internally

Answer: C

Explanation:
If an EBS volume is attached to a running EC2 instance, the user needs to detach the volume from the original instance and then attach it to a new running instance. The user doesn't need to stop / terminate the original instance.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-detaching-volume.html

NEW QUESTION 10
A user has an S3 object in the US Standard region with the content "coIor=red". The user updates the object with the content as "coIor="white". If the user tries to read the value 1 minute after it was uploaded, what will S3 return?

• A. It will return "coIor=white"
• B. It will return "coIor=red"
• C. It will return an error saying that the object was not found
• D. It may return either "coIor=red" or "color=white" i.
• E. any of the value

Answer: D

Explanation:
AWS S3 follows the eventual consistent model in the US Standard Region. Once the object is updated it
may return the new value or the old value based on whether all the content is replicated across multiple servers until it becomes consistent (eventual).
Reference: http://docs.aws.amazon.com/AmazonS3/Iatest/dev/Introduction.htmI

NEW QUESTION 11
An orgAMzation has created an application which is hosted on the AWS EC2 instance. The application stores images to S3 when the end user uploads to it. The orgAMzation does not want to store the AWS secure credentials required to access the S3 inside the instance. Which of the below mentioned options is a possible solution to avoid any security threat?

• A. Use the IAM role and assign it to the instance.
• B. Since the application is hosted on EC2, it does not need credentials to access S3.
• C. Use the X.509 certificates instead of the access and the secret access keys.
• D. Use the IAM based single sign between the AWS resources and the orgAMzation applicatio

Answer: A

Explanation:
The AWS IAM role uses temporary security credentials to access AWS services. Once the role is assigned to an instance, it will not need any security credentials to be stored on the instance. Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html

NEW QUESTION 12
A user is planning to host MS SQL on an EBS volume. It was recommended to use the AWS RDS. What advantages will the user have if he uses RDS in comparison to an EBS based DB?

• A. Better throughput with PIOPS
• B. Automated backup
• C. NIS SQL is not supported with RDS
• D. High availability with multi AZs

Answer: B

Explanation:
Comparing with on-premises or EC2 based NIS SQL, RDS provides an automated backup feature. PIOPS is available with both RDS and EBS. However, HA is not available with NIS SQL.
Reference: https://aws.amazon.com/rds/faqs/

NEW QUESTION 13
What happens, by default, when one of the resources in a CIoudFormation stack cannot be created?

• A. Previously-created resources are kept but the stack creation terminates.
• B. Previously-created resources are deleted and the stack creation terminates.
• C. The stack creation continues, and the final results indicate which steps failed.
• D. CIoudFormation templates are parsed in advance so stack creation is guaranteed to succee

Answer: B

NEW QUESTION 14
Which of the following is chosen as the default region when making an API call with an AWS SDK?

• A. ap-northeast-1
• B. us-west-2
• C. us-east-1
• D. eu-west-1
• E. us-central-1

Answer: C

NEW QUESTION 15
A user is planning to host data with RDS. Which of the below mentioned databases is not supported by RDS?

• A. PostgreSQL
• B. SQLDB
• C. Oracle
• D. MS SQL

Answer: B

Explanation:
Amazon Relational Database Service (Amazon RDS) is a web service that makes it easier to set up, operate, and scale a relational database in the cloud. AWS RDS supports popular DBs, such as lV|ySQL, PostgreSQL, MS SQL and Oracle. This means that the code, applications, and tools user is already using with existing databases can be used with Amazon RDS too. In short, it is a managed Relation Database offering from AWS which manages backups, software patching, automatic failure detection, and recovery of Database.
Reference: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Welcome.html

NEW QUESTION 16
A user is running a MySQL RDS instance. The user will not use the DB for the next 3 months. How can the user save costs?

• A. Pause the RDS actMties from CLI until it is required in the future
• B. Stop the RDS instance
• C. Create a snapshot of RDS to launch in the future and terminate the instance now
• D. Change the instance size to micro

Answer: C

Explanation:
The RDS instances unlike the AWS EBS backed instances cannot be stopped or paused. The user needs to take the final snapshot, terminate the instance and launch a new instance in the future from that snapshot
Reference: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.BackingUpAndRestoringAmazonR DSInstances.htmI

NEW QUESTION 17
Can a user associate and use his own DNS with ELB instead ofthe DNS provided by AWS ELB?

• A. Yes, by creating a CNAME with the existing domain name provider
• B. Yes, by configuring DNS in the AWS Console
• C. No
• D. Yes, only through Route 53 by mapping ELB and DNS

Answer: A

Explanation:
The AWS ELB allows mapping a custom domain name with ELB. The user can map ELB with DNS in two ways: 1) By creating CNAME with the existing domain name service provider or 2) By creating a record with Route 53.
Reference:
http://docs.aws.amazon.com/E|asticLoadBaIancing/latest/DeveIoperGuide/using-domain-names-with-elb. html

NEW QUESTION 18
......