DVA-C01 | All About Vivid DVA-C01 Free Exam

NEW QUESTION 1
AutoScaIing is configured with 3 AZs. Each zone has 5 instances running. If AutoScaIing wants to terminate an instance based on the policy action, which instance will it terminate first?

• A. Terminate the first launched instance
• B. Randomly select the instance for termination
• C. Terminate the instance from the AZ which does not have a high AWS load
• D. Terminate the instance from the AZ which has instances running near to the billing hour

Answer: B

Explanation:
Before Auto Scaling selects an instance to terminate, it first identifies the Availability Zone that has more instances than the other Availability Zones used by the group. If all the Availability Zones have the same number of instances, it identifies a random Availability Zone.
Reference: http://docs.aws.amazon.com/AutoScaIing/latest/DeveIoperGuide/us-termination-policy.html

NEW QUESTION 2
You are inserting 1000 new items every second in a DynamoDB table. Once an hour these items are analyzed and then are no longer needed. You need to minimize provisioned throughput, storage, and API calls.
Given these requirements, what is the most efficient way to manage these Items after the analysis?

• A. Retain the items in a single table
• B. Delete items indMdually over a 24 hour period
• C. Delete the table and create a new table per hour
• D. Create a new table per hour

Answer: C

NEW QUESTION 3
Can you SSH to your private machines that reside in a VPC from outside without elastic IP?

• A. Yes, but only if you have direct connect or vpn
• B. Only if you are using a non-US region
• C. Only if you are using a US region
• D. No

Answer: A

Explanation:
The instances that reside in the private subnets of your VPC are not reachable from the Internet, meAMng that is not possible to ssh into them. To interact with them you can use a bastion server, located in a public subnet, that will act as a proxy for them.
You can also connect if you have direct connect or vpn.
Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Scenario2.html

NEW QUESTION 4
EC2 instances are launched from Amazon Machine images (AMIS). A given public AMI can:

• A. be used to launch EC2 Instances in any AWS region.
• B. only be used to launch EC2 instances in the same country as the AMI is stored.
• C. only be used to launch EC2 instances in the same AWS region as the AMI is stored.
• D. only be used to launch EC2 instances in the same AWS availability zone as the AMI is stored

Answer: C

NEW QUESTION 5
ExamKiIIer (with AWS account ID H1122223333) has created 50 IAM users for its orgAMzation’s employees. ExamKiIIer wants to make the AWS console login URL for all IAM users as: https:// examkiI|er.signin.aws.amazon.com/conso|e/. How can this be configured?

• A. Create a bucket with the name ExamKiI|er and map it with the IAM alias
• B. It is not possible to have capital letters as a part of the alias name
• C. The user needs to use Route 53 to map the ExamKiIIer domain and IAM URL
• D. For the AWS account, create an alias ExamKiIIer for the IAM login

Answer: B

Explanation:
If a user wants the URL of the AWS IAM sign-in page to have the company name instead of the AWS
account ID, he can create an alias for his AWS account ID. The alias must be unique across all Amazon Webservices products and contain only digits, lowercase letters, and hyphens.
Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/AccountAIias.html

NEW QUESTION 6
You are writing to a DynamoDB table and receive the following exception:" ProvisionedThroughputExceededException". though according to your Cloudwatch metrics for the table, you are not exceeding your provisioned throughput.
What could be an explanation for this?

• A. You haven't provisioned enough DynamoDB storage instances
• B. You're exceeding your capacity on a particular Range Key
• C. You're exceeding your capacity on a particular Hash Key
• D. You're exceeding your capacity on a particular Sort Key
• E. You haven't configured DynamoDB Auto Scaling triggers

Answer: C

NEW QUESTION 7
How can you secure data at rest on an EBS volume?

• A. Attach the volume to an instance using EC2's SSL interface.
• B. Write the data randomly instead of sequentially.
• C. Use an encrypted file system on top of the BBS volume.
• D. Encrypt the volume using the S3 server-side encryption service.
• E. Create an IAM policy that restricts read and write access to the volum

Answer: C

NEW QUESTION 8
Which of the following are valid SNS delivery transports? Choose 2 answers

• A. HTTP
• B. UDP
• C. SNIS
• D. DynamoDB
• E. Named Pipes

Answer: AC

NEW QUESTION 9
In regard to DynamoDB, can I delete local secondary indexes?

• A. Yes, if it is a primary hash key index
• B. No
• C. Yes, if it is a local secondary indexes
• D. Yes, if it is a Global secondary indexes

Answer: B

Explanation:
In DynamoDB, an index cannot be modified once it is created. Reference: http://aws.amazon.com/dynamodb/faqs/#security_anchor

NEW QUESTION 10
A user is creating multiple IAM users. What advice should be given to him to enhance the security?

• A. Grant least prMleges to the indMdual user
• B. Grant all higher prMleges to the group
• C. Grant less prMleges for user, but higher prMleges for the group
• D. Grant more prMleges to the user, but least prMleges to the group

Answer: A

Explanation:
It is a recommended rule that the root user should grant the least prMleges to the IAM user or the group. The higher the prMleges, the more problems it can create.
Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/IAMBestPractices.htmI

NEW QUESTION 11
When a user is detaching an EBS volume from a running instance and attaching it to a new instance, which of the below mentioned options should be followed to avoid file system damage?

• A. Unmount the volume first
• B. Stop all the I/O of the volume before processing
• C. Take a snapshot of the volume before detaching
• D. Force Detach the volume to ensure that all the data stays intact

Answer: A

Explanation:
When a user is trying to detach an EBS volume, the user can either terminate the instance or explicitly remove the volume. It is a recommended practice to unmount the volume first to avoid any file system damage.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-detaching-volume.html

NEW QUESTION 12
AWS Elastic Beanstalk stores your application files and optionally server log files in .

• A. Amazon Storage Gateway
• B. Amazon Glacier
• C. Amazon EC2
• D. Amazon S3

Answer: D

Explanation:
AWS Elastic Beanstalk stores your application files and optionally server log files in Amazon S3. If you are using the AWS Management Console, Git, the AWS Toolkit for Visual Studio, or AWS Toolkit for Eclipse, an Amazon S3 bucket will be created in your account for you and the files you upload will be automatically copied from your local client to Amazon S3. Optionally, you may configure Elastic Beanstalk to copy your server log files every hour to Amazon S3. You do this by editing the environment configuration settings.
Reference: http://docs.aws.amazon.com/elasticbeanstaIk/latest/dg/AWSHowTo.htmI

NEW QUESTION 13
You have been doing a lot of testing of your VPC Network by deliberately failing EC2 instances to test whether instances are failing over properly. Your customer who will be paying the AWS bill for all this asks you if he being charged for all these instances. You try to explain to him how the billing works on EC2 instances to the best of your knowledge. What would be an appropriate response to give to the customer
in regards to this?

• A. Billing commences when Amazon EC2 AMI instance is completely up and billing ends as soon as the instance starts to shutdown.
• B. Billing commences when Amazon EC2 initiates the boot sequence of an AMI instance and billing ends when the instance shuts down.
• C. Billing only commences only after 1 hour of uptime and billing ends when the instance terminates.
• D. Billing commences when Amazon EC2 initiates the boot sequence of an AMI instance and billing ends as soon as the instance starts to shutdown.

Answer: B

Explanation:
Billing commences when Amazon EC2 initiates the boot sequence of an AMI instance. Billing ends when the instance shuts down, which could occur through a web services command, by running "shutdown -h", or through instance failure.
Reference: http://aws.amazon.com/ec2/faqs/#BiIIing

NEW QUESTION 14
A user has created an EBS instance in the US-East-1a AZ. The user has a volume of 30 GB in the US-East-1 b zone. How can the user attach the volume to an instance?

• A. Since both the volume and the instance are in the same region, the user can attach the volume
• B. Use the volume migrate function to move the volume from one AZ to another and attach to the instance
• C. Take a snapshot of the volum
• D. Create a new volume in the USEast-1a and attach that to the instance
• E. Use the volume replicate function to create a new volume in the US-East-1a and attach that to the volume

Answer: C

Explanation:
If an EBS volume is not in the same AZ of an EC2 instance, it cannot be attached to the instance. The only option is to take a snapshot of the volume and create a new volume in the instance’s AZ. Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSSnapshots.htmI

NEW QUESTION 15
Which of the following are correct statements with policy evaluation logic in AWS Identity and Access Management? Choose 2 answers

• A. By default, all requests are denied
• B. An explicit allow overrides an explicit deny
• C. An explicit allow overrides default deny.
• D. An explicit deny does not override an explicit allow
• E. By default, all request are allowed

Answer: AC

NEW QUESTION 16
A user has created a queue named "myqueue" with SQS. There are four messages published to queue which are not received by the consumer yet. If the user tries to delete the queue, what will happen?

• A. A user can never delete a queue manuall
• B. AWS deletes it after 30 days of inactMty on queue
• C. It will initiate the delete but wait for four days before deleting until all messages are deleted automatically.
• D. It will ask user to delete the messages first
• E. It will delete the queue

Answer: D

Explanation:
SQS allows the user to move data between distributed components of applications so they can perform different tasks without losing messages or requiring each component to be always available. The user can delete a queue at any time, whether it is empty or not. It is important to note that queues retain
messages for a set period of time. By default, a queue retains messages for four days. Reference:
http://docs.aws.amazon.com/AWSSimpIeQueueService/latest/SQSDeveIoperGuide/SQSConcepts.html

NEW QUESTION 17
A user is having access to objects of an S3 bucket which is not owned by him. If he is trying to set the objects of that bucket public, which of the below mentioned options may be a right fit for this action?

• A. Make the bucket public with full access
• B. Define the policy for the bucket
• C. Provide ACL on the object
• D. Create an IAM user with permission

Answer: C

Explanation:
An S3 object ACL is the only way to manage access to objects which are not owned by the bucket owner. An AWS account that owns the bucket can grant another AWS account permission to upload objects. The bucket owner does not own these objects. The AWS account that created the object must grant permissions using object ACLs.
Reference: http://docs.aws.amazon.com/AmazonS3/latest/dev/access-policy-alternatives-guidelines.html

NEW QUESTION 18
......