AWS-Certified-Developer-Associate | The Secret Of Amazon AWS-Certified-Developer-Associate Training Tools

NEW QUESTION 1
You have an environment that consists of a public subnet using Amazon VPC and 3 instances that are running in this subnet. These three instances can successfully communicate with other hosts on the Internet. You launch a fourth instance in the same subnet, using the same AMI and security group configuration you used for the others, but find that this instance cannot be accessed from the Internet. What should you do to enable internet access?

• A. Deploy a NAT instance into the public subnet.
• B. Modify the routing table for the public subnet
• C. Configure a publically routable IP Address In the host OS of the fourth instance.
• D. Assign an Elastic IP address to the fourth instanc

Answer: D

NEW QUESTION 2
What type of block cipher does Amazon S3 offer for server side encryption?

• A. Triple DES
• B. Advanced Encryption Standard
• C. Blowfish
• D. RC5

Answer: B

NEW QUESTION 3
A user has created a queue named "myqueue" with SQS. There are four messages published to queue which are not received by the consumer yet. If the user tries to delete the queue, what will happen?

• A. A user can never delete a queue manuall
• B. AWS deletes it after 30 days of inactMty on queue
• C. It will initiate the delete but wait for four days before deleting until all messages are deleted automatically.
• D. It will ask user to delete the messages first
• E. It will delete the queue

Answer: D

Explanation:
SQS allows the user to move data between distributed components of applications so they can perform different tasks without losing messages or requiring each component to be always available. The user can delete a queue at any time, whether it is empty or not. It is important to note that queues retain
messages for a set period of time. By default, a queue retains messages for four days. Reference:
http://docs.aws.amazon.com/AWSSimpIeQueueService/latest/SQSDeveIoperGuide/SQSConcepts.html

NEW QUESTION 4
AWS Elastic Load Balancer supports SSL termination.

• A. Tru
• B. For specific availability zones only.
• C. False
• D. Tru
• E. For specific regions only
• F. Tru
• G. For all regions

Answer: D

Explanation:
You can configure your load balancer in ELB (Elastic Load Balancing) to use a SSL certificate in order to improve your system security.The load balancer uses the certificate to terminate and then decrypt requests before sending them to the back-end instances. Elastic Load Balancing uses AWS Identity and Access Management (IAM) to upload your certificate to your load balancer.
Reference: http://docs.aws.amazon.com/EIasticLoadBaIancing/latest/DeveIoperGuide/US_SettingUpLoadBaIancerH TTPS.htmI

NEW QUESTION 5
Which OS does the current version of AWS Elastic Beanstalk use?

• A. Amazon Linux AMI, Windows Server 2003 R2 AMI or the Windows Server 2008 R2 AMI
• B. Amazon Linux AMI only
• C. Amazon Linux AMI or the Windows Server 2008 R2 AMI
• D. Windows Sewer 2008 R2 AMI only

Answer: C

Explanation:
The current version of AWS Elastic Beanstalk uses the Amazon Linux AMI or the Windows Server 2008 R2 AMI.
Reference: https://aws.amazon.com/elasticbeansta|k/faqs/

NEW QUESTION 6
A user is accessing an EC2 instance on the SSH port for IP 10.20.30.40. Which one is a secure way to
configure that the instance can be accessed only from this IP?

• A. In the security group, open port 22 for IP 1020.30.40/0
• B. In the security group, open port 22 for IP 10.20.30.40/32
• C. In the security group, open port 22 for IP 10.20.30.40/24
• D. In the security group, open port 22 for IP 10.20.30.40

Answer: B

Explanation:
In AWS EC2, while configuring a security group, the user needs to specify the IP address in CIDR notation. The CIDR IP range 10.20.30.40/32 says it is for a single IP 10.20.30.40. If the user specifies the IP as 10.20.30.40 only, the security group will not accept and ask it in a CIRD format.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-network-security.html

NEW QUESTION 7
In relation to Amazon SQS, how can you ensure that messages are delivered in order?

• A. Increase the size of your queue
• B. Send them with a timestamp
• C. Give each message a unique id.
• D. AWS cannot guarantee that you will receive messages in the exact order you sent them

Answer: D

Explanation:
Amazon SQS makes a best effort to preserve order in messages, but due to the distributed nature of the queue, AWS cannot guarantee that you will receive messages in the exact order you sent them. You typically place sequencing information or timestamps in your messages so that you can reorder them upon receipt.
Reference: https://aws.amazon.com/items/1343?externaI|D=1343

NEW QUESTION 8
If an application is storing hourly log files from thousands of instances from a high traffic web site, which naming scheme would give optimal performance on S3?

• A. Sequential
• B. instancelD_Iog-HH-DD-NIM-YYYY
• C. instancelD_Iog-YYYY-NIM-DD-HH
• D. HH-DD-NINI-YYYY-Iog_instanceID
• E. YYYY-MM-DD-HH-|og_instance|D

Answer: E

NEW QUESTION 9
Is it possible to create an S3 bucket accessible only by a certain IAM user, using policies in a C|oudFormation template?

• A. No, you can only create the S3 bucket but not the IAM user.
• B. S3 is not supported by CIoudFormation.
• C. Yes, all these resources can be created using a CIoudFormation template
• D. No, in the same template you can only create the S3 bucket and the realtive polic

Answer: C

Explanation:
With AWS Identity and Access Management (IAM), you can create IAM users to control who has access to which resources in your AWS account. You can use IAM with AWS CIoudFormation to control what AWS CIoudFormation actions users can perform, such as view stack templates, create stacks, or delete stacks.
In addition to AWS CIoudFormation actions, you can manage what AWS services and resources are available to each user.

NEW QUESTION 10
What is the format of structured notification messages sent by Amazon SNS?

• A. An XML object containing MessageId, UnsubscribeURL, Subject, lVIessage and other values
• B. An JSON object containing MessageId, DupIicateFIag, lVIessage and other values
• C. An XML object containing MessageId, DupIicateFIag, lVIessage and other values
• D. An JSON object containing MessageId, unsubscribeURL, Subject, lVIessage and other values

Answer: D

NEW QUESTION 11
Does DynamoDB support in-place atomic updates?

• A. It is not defined
• B. Yes
• C. It does support in-place non-atomic updates
• D. No

Answer: B

Explanation:
DynamoDB supports in-place atomic updates. Reference:
http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/\NorkingWithItems.htmI#Working WithItems.AtomicCounters

NEW QUESTION 12
Which EC2 API call would you use to retrieve a list of Amazon Machine Images (AMIs)?

• A. Descnbelnstances
• B. DescribeAMIs
• C. Describelmages
• D. GetAMIs
• E. You cannot retrieve a list of AMIs as there are over 10,000 AMIs

Answer: E

NEW QUESTION 13
AutoScaIing is configured with 3 AZs. Each zone has 5 instances running. If AutoScaIing wants to terminate an instance based on the policy action, which instance will it terminate first?

• A. Terminate the first launched instance
• B. Randomly select the instance for termination
• C. Terminate the instance from the AZ which does not have a high AWS load
• D. Terminate the instance from the AZ which has instances running near to the billing hour

Answer: B

Explanation:
Before Auto Scaling selects an instance to terminate, it first identifies the Availability Zone that has more instances than the other Availability Zones used by the group. If all the Availability Zones have the same number of instances, it identifies a random Availability Zone.
Reference: http://docs.aws.amazon.com/AutoScaIing/latest/DeveIoperGuide/us-termination-policy.html

NEW QUESTION 14
Which DynamoDB limits can be raised by contacting AWS support? Choose 2 answers

• A. The number of hash keys per account
• B. The maximum storage used per account
• C. The number of tables per account
• D. The number of local secondary indexes per account
• E. The number of provisioned throughput units per account

Answer: CE

NEW QUESTION 15
A user has created an RDS instance with MySQL. The user is using the HeidiSQL client to connect with the RDS DB. The client is unable to connect to DB from his home machine. What is a possible reason for the failure?

• A. The user has to open port 80 in the RDS security group to connect with RDS DNS
• B. The security group is not configured to allow a request from the user’s IP on port 3306
• C. You can never connect to RDS from your desktop
• D. The user has to open port 22 in the RDS security group to connect with RDS DNS

Answer: B

Explanation:
If the user needs to connect to RDS then he has to open port 3306 in the RDS security group for his IP address.
Reference: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Welcome.html

NEW QUESTION 16
You have been given a scope to deploy some AWS infrastructure for a large orgAMsation. The requirements are that you will have a lot of EC2 instances but may need to add more when the average utilization of your Amazon EC2 fileet is high and conversely remove them when CPU utilization is low. Which AWS services would be best to use to accomplish this?

• A. Amazon CIoudFront, Amazon CIoudWatch and Elastic Load Balancing.
• B. Auto Scaling, Amazon CIoudWatch and AWS CIoudTraiI.
• C. Auto Scaling, Amazon CIoudWatch and Elastic Load Balancing.
• D. Auto Scaling, Amazon CIoudWatch and AWS Elastic Beanstalk

Answer: C

Explanation:
Auto Scaling enables you to follow the demand curve for your applications closely, reducing the need to manually provision Amazon EC2 capacity in advance. For example, you can set a condition to add new Amazon EC2 instances in increments to the Auto Scaling group when the average utilization of your Amazon EC2 fileet is high; and similarly, you can set a condition to remove instances in the same increments when CPU utilization is low. If you have predictable load changes, you can set a schedule through Auto Scaling to plan your scaling actMties. You can use Amazon CIoudWatch to send alarms to trigger scaling actMties and Elastic Load Balancing to help distribute traffic to your instances within Auto Scaling groups. Auto Scaling enables you to run your Amazon EC2 fileet at optimal utilization. Reference: http://aws.amazon.com/autoscaIing/

NEW QUESTION 17
A user wants to achieve High Availability with PostgreSQL DB. Which of the below mentioned functionalities helps achieve HA?

• A. Read Replica
• B. Multi AZ
• C. Multi region
• D. PostgreSQL does not support HA

Answer: B

Explanation:
The Multi AZ feature allows the user to achieve High Availability. For Mu|ti AZ, Amazon RDS
automatically provisions and maintains a synchronous "standby" replica in a different Availability Zone. Reference: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Welcome.html

NEW QUESTION 18
Which one of the following statements is NOT an advantage of DyanamoDB being built on Solid State Drives:

• A. serve high-scale request workloads
• B. low request pricing
• C. high I/O performance of WebApp on EC2 instance
• D. low-latency response times

Answer: C

Explanation:
In DynamoDB, SSDs help achieve design goals of predictable low-latency response times for storing and accessing data at any scale. The high I/O performance of SSDs also enables to serve high-scale request workloads cost efficiently, and to pass this efficiency along in low request pricing.
Reference: http://aws.amazon.com/dynamodb/faqs/

NEW QUESTION 19
When a Simple Queue Service message triggers a task that takes 5 minutes to complete, which process below will result in successful processing of the message and remove it from the queue while minimizing the chances of duplicate processing?

• A. Retrieve the message with an increased visibility timeout, process the message, delete the message from the queue
• B. Retrieve the message with an increased visibility timeout, delete the message from the queue, process the message
• C. Retrieve the message with increased DeIaySeconds, process the message, delete the message from the queue
• D. Retrieve the message with increased DeIaySeconds, delete the message from the queue, process the message

Answer: A

NEW QUESTION 20
A user is part of a group which has a policy allowing him just read only access to EC2. The user is part of another group which has full access to EC2. What happens when the user tries to launch an instance?

• A. It will allow the user to launch the instance
• B. It will fail since the user has just read only access
• C. It will allow or deny based on the group under which the user has logged into EC2
• D. It will not allow the user to add to the conflicting groups

Answer: A

Explanation:
The IAM group policy is always aggregated. In this case, if the user does not have permission for one group, but has permission for another group, he will have full access to EC2. Unless there is specific deny policy, the user will be able to access EC2.
Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/PoIiciesOverview.htmI

NEW QUESTION 21
......