NEW QUESTION 1
You are a solutions architect working for a company that specializes in ingesting large data feeds (using Kinesis) and then analyzing these feeds using Elastic Map Reduce (EMR). The results are then stored on a custom MySQL database which is hosted on an EC2 instance which has 3 volumes, the root/boot volume, and then 2 additional volumes which are striped in to a RAID 1. Your company recently had an outage and lost some key data and have since decided that they will need to run nightly back ups. Your application is only used during office hours, so you can afford to have some
down time in the middle of the night if required. You decide to take a snapshot of all three volumes every 24 hours. In what manner should you do this?

• A. Take a snapshot of each volume independently, while the EC2 instance is running.
• B. Stop the EC2 instance and take a snapshot of each EC2 instance independentl
• C. Once the snapshots are complete, start the EC2 instance and ensure that all relevant volumes are remounted.
• D. Add two additional volumes to the existing RAID 0 volume and mirror these volumes creating a RAID 10. Take a snap of only the two new volumes.
• E. Create a read replica of the existing EC2 instance and then take your snapshots from the read replica and not the live EC2 instance.

Answer: B

NEW QUESTION 2
Fill in the blanks: is a durable, block-level storage volume that you can attach to a single, running Amazon EC2 instance.

• A. Amazon S3
• B. Amazon EBS
• C. None of these
• D. All of these

Answer: B

NEW QUESTION 3
A client needs you to import some existing infrastructure from a dedicated hosting provider to AWS to try and save on the cost of running his current website. He also needs an automated process that manages backups, software patching, automatic failure detection, and recovery. You are aware that his existing set up currently uses an Oracle database. Which of the following AWS databases would be best for accomplishing this task?

• A. Amazon RDS
• B. Amazon Redshift
• C. Amazon SimpleDB
• D. Amazon ElastiCache

Answer: A

Explanation:
Amazon RDS gives you access to the capabilities of a familiar MySQL, Oracle, SQL Server, or PostgreSQL database engine. This means that the code, applications, and tools you already use today with your existing databases can be used with Amazon RDS. Amazon RDS automatically patches the database software and backs up your database, storing the backups for a user-defined retention period and enabling point-in-time recovery.
References:

NEW QUESTION 4
What does specifying the mapping /dev/sdc=none when launching an instance do?

• A. Prevents /dev/sdc from creating the instance.
• B. Prevents /dev/sdc from deleting the instance.
• C. Set the value of /dev/sdc to 'zero'.
• D. Prevents /dev/sdc from attaching to the instanc

Answer: D

Explanation:
none - Suppresses an existing mapping of the device from the AMI used to launch the instance. For example: “/dev/sdc=none”. http://docs.aws.amazon.com/AWSEC2/latest/CommandLineReference/ApiReference-cmd- RegisterImage.html

NEW QUESTION 5
You are migrating an existing enterprise application to AWS. It requires standard file system access from multiple instances. It also requires high storage throughput with consistently low latencies. You are looking for a storage solution that will grow and shrink capacity automatically.
How can you accomplish this in AWS?

• A. Create an Amazon S3 bucket that the application can use for its storage requirements.
• B. Create an Amazon EFS file system and mount it on all of the application instances.
• C. Launch an EBS-backed EC2 instanc
• D. Create and share an NFS mount with the application.
• E. Launch an Amazon Redshift cluster with dense storage nodes to use with the applicatio

Answer: B

Explanation:
Reference https://docs.aws.amazon.com/efs/latest/ug/whatisefs.html

NEW QUESTION 6
Can I encrypt connections between my application and my DB Instance using SSL?

• A. No
• B. Yes
• C. Only in VPC
• D. Only in certain regions

Answer: B

NEW QUESTION 7
What happens to the data on an instance if the instance reboots (intentionally or unintentionally)?

• A. Data will be lost
• B. Data persists
• C. Data may persist however cannot be sure

Answer: B

Explanation:
Instance Store Lifetime
You can specify instance store volumes for an instance only when you launch it. The data in an instance store persists only during the lifetime of its associated instance. If an instance reboots (intentionally or unintentionally), data in the instance store persists. However, data in the instance store is lost under the following circumstances:
The underlying disk drive fails The instance stops
The instance terminates http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/InstanceStorage.html

NEW QUESTION 8
A customer wants to track access to their Amazon Simple Storage Service (S3) buckets and also use this information for their internal security and access audits. Which of the following will meet the Customer requirement?

• A. Enable AWS CloudTrail to audit all Amazon S3 bucket access.
• B. Enable server access logging for all required Amazon S3 buckets.
• C. Enable the Requester Pays option to track access via AWS Billing
• D. Enable Amazon S3 event notifications for Put and Pos

Answer: B

Explanation:
References:
http://docs.aws.amazon.com/AmazonS3/latest/dev/ServerLogs.html http://docs.aws.amazon.com/AmazonS3/latest/dev/cloudtrail-logging.html

NEW QUESTION 9
In relation to AWS CloudHSM, High-availability (HA) recovery is hands-off resumption by failed HA group members.
Prior to the introduction of this function, the HA feature provided redundancy and performance, but required that a failed/lost group member be _____ reinstated.

• A. automatically
• B. periodically
• C. manually
• D. continuously

Answer: C

Explanation:
In relation to AWS CloudHSM, High-availability (HA) recovery is hands-off resumption by failed HA group members.
Prior to the introduction of this function, the HA feature provided redundancy and performance, but
required that a failed/lost group member be manually reinstated.

NEW QUESTION 10
A major customer has asked you to set up his AWS infrastructure so that it will be easy to recover in the case of a disaster of some sort. Which of the following is important when thinking about being able to quickly launch resources in AWS to ensure business continuity in case of a disaster?

• A. Create and maintain AMIs of key servers where fast recovery is required.
• B. Regularly run your servers, test them, and apply any software updates and configuration changes.
• C. All items listed here are important when thinking about disaster recovery.
• D. Ensure that you have all supporting custom software packages available in AW

Answer: C

Explanation:
In the event of a disaster to your AWS infrastructure you should be able to quickly launch resources in Amazon Web Services (AWS) to ensure business continuity.
The following are some key steps you should have in place for preparation:
1. Set up Amazon EC2 instances to replicate or mirror data.
2. Ensure that you have all supporting custom software packages available in AWS.
3. Create and maintain AMIs of key servers where fast recovery is required.
4. Regularly run these servers, test them, and apply any software updates and configuration changes.
5. Consider automating the provisioning of AWS resources. References:

NEW QUESTION 11
A government client needs you to set up secure cryptographic key storage for some of their extremely confidential dat

• A. You decide that the AWS CloudHSM is the best service for thi
• B. However, there seem to be a few pre-requisites before this can happen, one of those being a security group that has certain ports ope
• C. Which of the following is correct in regards to those security groups?
• D. A security group that has port 22 (for SSH) or port 3389 (for RDP) open to your network.
• E. A security group that has no ports open to your network.
• F. A security group that has only port 3389 (for RDP) open to your network.
• G. A security group that has only port 22 (for SSH) open to your networ

Answer: A

Explanation:
AWS CloudHSM provides secure cryptographic key storage to customers by making hardware security modules (HSMs) available in the AWS cloud.
AWS CloudHSM requires the following environment before an HSM appliance can be provisioned. A virtual private cloud (VPC) in the region where you want the AWS CloudHSM service. One private subnet (a subnet with no Internet gateway) in the VPC. The HSM appliance is provisioned into this subnet.
One public subnet (a subnet with an Internet gateway attached). The control instances are attached to this subnet.
An AWS Identity and Access Management (IAM) role that delegates access to your AWS resources to AWS CloudHSM.
An EC2 instance, in the same VPC as the HSM appliance, that has the SafeNet client software installed. This instance is referred to as the control instance and is used to connect to and manage the HSM appliance.
A security group that has port 22 (for SSH) or port 3389 (for RDP) open to your network. This security group is attached to your control instances so you can access them remotely.

NEW QUESTION 12
Which of the following is not a valid configuration type for AWS Storage gateway.

• A. Gateway-accessed volumes
• B. Gateway-cached volumes
• C. Gateway-stored volumes
• D. Gateway-Virtual Tape Library

Answer: A

NEW QUESTION 13
You want to use AWS Import/Export to send data from your S3 bucket to several of your branch offices. What should you do if you want to send 10 storage units to AWS?

• A. Make sure your disks are encrypted prior to shipping.
• B. Make sure you format your disks prior to shipping.
• C. Make sure your disks are 1TB or more.
• D. Make sure you submit a separate job request for each devic

Answer: D

Explanation:
When using Amazon Import/Export, a separate job request needs to be submitted for each physical device even if they belong to the same import or export job.

NEW QUESTION 14
What does Amazon SWF stand for?

• A. Simple Web Flow
• B. Simple Work Flow
• C. Simple Wireless Forms
• D. Simple Web Form

Answer: B

NEW QUESTION 15
Are Reserved Instances available for Multi-AZ Deployments?

• A. Only for Cluster Compute instances
• B. Yes for all instance types
• C. Only for M3 instance types
• D. No

Answer: B

Explanation:
https://aws.amazon.com/rds/faqs/

NEW QUESTION 16
In Amazon S3, what is the document that defines who can access a particular bucket or object called?

• A. Access Control Record
• B. Access Control Service
• C. Access Control List
• D. Access Control Server

Answer: C

Explanation:
Access Control List is the document that defines who can access a particular bucket or object in Amazon S3. Amazon S3 Access Control Lists (ACLs) enable you to manage access to buckets and objects. Each bucket and object has an ACL attached to it as a subresource. It defines which AWS accounts or groups are granted access and the type of access. http://docs.aws.amazon.com/AmazonS3/latest/dev/acl-overview.html

NEW QUESTION 17
You are appointed as your company's Chief Security Officer and you want to be able to track all changes made to your AWS environment, by all users and at all times, in all regions. What AWS service should you use to achieve this?

• A. CloudAudit
• B. CloudWatch
• C. CloudTrail
• D. CloudDetective

Answer: C

Explanation:

NEW QUESTION 18
When an instance terminates, Amazon EC2 uses the value of the ______ attribute for each attached Amazon EBS volume to determine whether to preserve or delete the volume.

• A. InstanceInitiatedShutdownBehavior
• B. DeleteOnTermination
• C. EC2ModifyInstance
• D. DisableApiTermination

Answer: B

Explanation:
When an instance terminates, Amazon EC2 uses the value of the DeleteOnTermination attribute for each attached Amazon EBS volume to determine whether to preserve or delete the volume. http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/terminating-instances.html

NEW QUESTION 19
You need to create a JSON-formatted text file for AWS CloudFormation. This is your first template and the only thing you know is that the templates include several major sections but there is only one
that is required for it to work. What is the only section required?

• A. Mappings
• B. Outputs
• C. Resources
• D. Conditions

Answer: C

Explanation:
AWS CloudFormation is a service that helps you model and set up your Amazon Web Services resources so that you can spend less time managing those resources and more time focusing on your applications that run in AWS. You create a template that describes all the AWS resources that you
want (like Amazon EC2 instances or Amazon RDS DB instances), and AWS CloudFormation takes care of provisioning and configuring those resources for you.
A template is a JSON-formatted text file that describes your AWS infrastructure. Templates include several major sections.
The Resources section is the only section that is required. The first character in the template must be an open brace ({), and the last character must be a closed brace (}). The following template fragment shows the template structure and sections.

NEW QUESTION 20
If I want to run a database in an Amazon instance, which is the most recommended Amazon storage option?

• A. Amazon Instance Storage
• B. Amazon EBS
• C. You can't run a database inside an Amazon instance.
• D. Amazon S3

Answer: B

Explanation:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Storage.html

NEW QUESTION 21
A web design company currently runs several FTP servers that their 250 customers use to upload and download large graphic files. They wish to move this system to AWS to make it more scalable, but they wish to maintain customer privacy and Keep costs to a minimum.
What AWS architecture would you recommend?

• A. ASK their customers to use an S3 client instead of an FTP clien
• B. Create a single S3 bucket Create an IAM user for each customer Put the IAM Users in a Group that has an IAM policy that permits access to sub-directories within the bucket via use of the 'username' Policy variable.
• C. Create a single S3 bucket with Reduced Redundancy Storage turned on and ask their customers to use an S3 client instead of an FTP client Create a bucket for each customer with a Bucket Policy that permits access only to that one customer.
• D. Create an auto-scaling group of FTP servers with a scaling policy to automatically scale-in when minimum network traffic on the auto-scaling group is below a given threshol
• E. Load a central list of ftp users from S3 as part of the user Data startup script on each Instance.
• F. Create a single S3 bucket with Requester Pays turned on and ask their customers to use an S3 client instead of an FTP client Create a bucket tor each customer with a Bucket Policy that permits access only to that one customer.

Answer: A

Explanation:
In question we have keywords `scalable' and company wants to `move systems' to AWS, which is best suited for Auto-scaling group.
https://aws.amazon.com/blogs/security/writing-iam-policies-grant-access-to-user-specific-foldersin- an-amazon-s3-bucket/

NEW QUESTION 22
The Amazon EC2 web service can be accessed using the _____ web services messaging protocol. This interface is described by a Web Services Description Language (WSDL) document.

• A. SOAP
• B. DCOM
• C. CORBA
• D. XML-RPC

Answer: A

Explanation:
http://docs.aws.amazon.com/AWSECommerceService/latest/DG/WSDLLocation.html

NEW QUESTION 23
A user is launching an instance with EC2. Which options below should the user consider before launching an instance?

• A. Select the region where the instance is being launched.
• B. All choices are correct.
• C. Select the instance type.
• D. Select the OS of the AM

Answer: B

Explanation:
Regarding Amazon EC2, when launching an instance, the user needs to select the region the instance would be launched from. While launching, the user needs to plan for the instance type and the OS of the instance.
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-launch-instance_linux.html

NEW QUESTION 24
You receive a bill from AWS but are confused because you see you are incurring different costs for the exact same storage size in different regions on Amazon S3. You ask AWS why this is so.
What response would you expect to receive from AWS?

• A. We charge less in different time zones.
• B. We charge less where our costs are less.
• C. This will balance out next bill.
• D. It must be a mistak

Answer: B

Explanation:
Amazon S3 is storage for the Internet. It's a simple storage service that offers software developers a highly-scalable, reliable, and low-latency data storage infrastructure at very low costs.
AWS charges less where their costs are less.
For example, their costs are lower in the US Standard Region than in the US West (Northern California) Region.

NEW QUESTION 25
What happens to Amazon EBS root device volumes, by default, when an instance terminates?

• A. Amazon EBS root device volumes are moved to IAM.
• B. Amazon EBS root device volumes are copied into Amazon RDS.
• C. Amazon EBS root device volumes are automatically deleted.
• D. Amazon EBS root device volumes remain in the database until you delete the

Answer: C

Explanation:
By default, Amazon EBS root device volumes are automatically deleted when the instance terminates.

NEW QUESTION 26
Which procedure for backing up a relational database on EC2 that is using a set of RAlDed EBS volumes for storage minimizes the time during which the database cannot be written to and results in a consistent backup?

• A. 1. Detach EBS volumes, 2. Start EBS snapshot of volumes, 3. Re-attach EBS volumes
• B. 1. Stop the EC2 Instanc
• C. 2. Snapshot the EBS volumes
• D. 1. Suspend disk I/O, 2. Create an image of the EC2 Instance, 3. Resume disk I/O
• E. 1. Suspend disk I/O, 2. Start EBS snapshot of volumes, 3. Resume disk I/O
• F. 1. Suspend disk I/O, 2. Start EBS snapshot of volumes, 3. Wait for snapshots to complete, 4. Resume disk I/O

Answer: B

Explanation:
https://aws.amazon.com/cn/premiumsupport/knowledge-center/snapshot-ebs-raid-array/
To create an "application-consistent" snapshot of your RAID array, stop applications from writing to the RAID array, and flush all caches to disk. Then ensure that the associated EC2 instance is no longer writing to the RAID array by taking steps such as freezing the file system, unmounting the RAID array, or
*shutting down the associated EC2 instance*. After completing the steps to halt all I/O, take a snapshot of each EBS volume. http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebsdetaching- volume.html You can detach an Amazon EBS volume from an instance explicitly or by
terminating the instance. However, if the instance is running, you must first unmount the volume from the instance."

NEW QUESTION 27
An EC2 instance is connected to an ENI (Elastic Network Interface) in one subnet. What happens when you attach an ENI of a different subnet to this EC2 instance?

• A. The EC2 instance follows the rules of the older subnet
• B. The EC2 instance follows the rules of both the subnets
• C. Not possible, cannot be connected to 2 ENIs
• D. The EC2 instance follows the rules of the newer subnet

Answer: B

Explanation:
AWS allows you create an elastic network interface (ENI), attach an ENI to an EC2 instance, detach an ENI from an EC2 instance and attach this ENI to another EC2 instance. The attributes of a network traffic follow the ENI which is attached to an EC2 instance or detached from an EC2 instance. When you move an ENI from one EC2 instance to another, network traffic is redirected to the new EC2 instance. You can create and attach additional ENIs to an EC2 instance.
Attaching multiple network interfaces (ENIs) to an EC2 instance is useful to: Create a management network.
Use network and security appliances in your VPC.
Create dual-homed instances with workloads/roles on distinct subnets Create alow-budget, high-availability solution.

NEW QUESTION 28
Amazon EC2 provides a ____. It is an HTTP or HTTPS request that uses the HTTP verbs GET or POST.

• A. web database
• B. net framework
• C. Query API
• D. C library

Answer: C

Explanation:
Amazon EC2 provides a Query API. These requests are HTTP or HTTPS requests that use the HTTP verbs GET or POST and a Query parameter named Action.

NEW QUESTION 29
When should I choose Provisioned IOPS over Standard RDS storage?

• A. If you have batch-oriented workloads
• B. If you use production online transaction processing (OLTP) workloads.
• C. If you have workloads that are not sensitive to consistent performance

Answer: B

Explanation:
http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Storage.html
Amazon RDS provisions that IOPS rate and storage for the lifetime of the DB instance or until you change it. Provisioned IOPS storage is optimized for I/O intensive, online transaction processing (OLTP) workloads that have consistent performance requirements. Provisioned IOPS helps performance tuning.

NEW QUESTION 30
Before I delete an EBS volume, what can I do if I want to recreate the volume later?

• A. Create a copy of the EBS volume (not a snapshot)
• B. Store a snapshot of the volume
• C. Download the content to an EC2 instance
• D. Back up the data in to a physical disk

Answer: B

Explanation:
After you no longer need an Amazon EBS volume, you can delete it. After deletion, its data is gone and the volume can’t be attached to any instance. However, before deletion, you can store a snapshot of the volume, which you can use to re-create the volume later. http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-deleting-volume.html

NEW QUESTION 31
......