A Review Of Validated BDS-C00 Braindump

NEW QUESTION 1
You have an ASP.NET web application running in Amazon Elastic BeanStalk. Your next version of the
application requires a third-party Windows installer package to be installed on the instance on first boot and before the application launches.
Which options are possible? Choose 2 answer

• A. In the application’s Global.asax file, run msiexec.exe to install the package using Process.Start() in the Application_Start event handler
• B. In the source bundle’s .ebextensions folder, create a file with a .config extensio
• C. In the file, under the “packages” section and “msi” package manager, include the package’s URL
• D. Launch a new Amazon EC2 instance from the AMI used by the environmen
• E. Log into the instance, install the package and run syspre
• F. Create a new AM
• G. Configure the environment to use the new AMI
• H. In the environment’s configuration, edit the instances configuration and add the package’s URL to the “Packages” section
• I. In the source bundle’s .ebextensions folder, create a “Packages” folde
• J. Place the package in the folder

Answer: BC

NEW QUESTION 2
A solutions architect works for a company that has a data lake based on a central Amazon S3 bucket.
The data contains sensitive information. The architect must be able to specify exactly which files each user can access. Users access the platform through SAML federation Single Sign On platform.
The architect needs to build a solution that allows fine grained access control, traceability of access to the objects, and usage of the standard tools (AWS Console, AWS CLI) to access the data.
Which solution should the architect build?

• A. Use Amazon S3 Server-Side Encryption with AWS KMS-Managed Keys for strong data.Use AWS KMS to allow access to specific elements of the platfor
• B. Use AWS CloudTrail for auditing
• C. Use Amazon S3 Server-Side Encryption with Amazon S3 Managed Key
• D. Set Amazon S3ACI to allow access to specific elements of the platfor
• E. Use Amazon S3 to access logs for auditing
• F. Use Amazon S3 Client-Side Encryption with Client-Side Master Ke
• G. Set Amazon S3 ACI to allow access to specific elements of the platfor
• H. Use Amazon S3 access logs for auditing
• I. Use Amazon S3 Client-Side Encryption with AWS KMS-Managed keys for storing data.Use AMS KWS to allow access to specific elements of the platfor
• J. Use AWS CloudTrail for auditing

Answer: B

NEW QUESTION 3
A photo sharing service stores pictures in Amazon Simple Storage Service (S3) and allows application
signin using an Open ID Connect compatible identity provider. Which AWS Security Token approach to temporary access should you use for the Amazon S3 operations?

• A. SAML-based identity Federation
• B. Cross-Account Access
• C. AWS identity and Access Management roles
• D. Web identity Federation

Answer: A

NEW QUESTION 4
You have been tasked with implementing an automated data backup solution for your application
servers that run on Amazon EC2 with Amazon EBS volumes. You want to use a distributed data store for your backups to avoid single points of failure and to increase the durability of the data. Daily backups should be retained for 30 days so that you can restore data within an hour.
How can you implement this through a script that a scheduling deamon runs daily on the application servers?

• A. Write the script to call the ec2-create-volume API, tag the Amazon EBS volume with the current data time group, and copy backup data to a second Amazon EBS volum
• B. Use the ec2-describe- volumes API to enumerate existing backup volume
• C. Call the ec2-delete-volume API to prune backup volumes that are tagged with a date-time group older than 30 days
• D. Write the script to call the Amazon Glacier upload archive API, and tag the backup archive with the current date-time grou
• E. Use the list vaults API to enumerate existing backup archive
• F. Call the delete vault API to prune backup archives that are tagged with a date-time group older than30 days
• G. Write the script to call the ec2-create-snapshot API, and tag the Amazon EBS snapshot with the current date-time grou
• H. Use the ec2-describe-snapshot API to enumerate existing Amazon EBS snapshot
• I. Call the ec2-delete-snapshot API to prune Amazon EBs snapshots that are tagged with a date-time group older than 30 days
• J. Write the script to call the ec2-create-volume API, tag the Amazon EBS volume with the current date-time group, and use the ec2-copy-snapshot API to backup data to the new Amazon EBS volum
• K. Use the ec2-describe-snapshot API to enumerate existing backup volume
• L. Call the ec2- delete- snapshot API to prune backup Amazon EBS volumes that are tagged with a date-time group older than 30 days

Answer: C

NEW QUESTION 5
A data engineer is about to perform a major upgrade to the DDL contained within an Amazon Redshift cluster to support a new data warehouse application. The upgrade scripts will include user permission updates, view and table structure changes as well as additional loading and data manipulation tasks. The data engineer must be able to restore the database to its existing state in the event of issues.
Which action should be taken prior to performing this upgrade task?

• A. Run an UNLOAD command for all data in the warehouse and save it to S3
• B. Create a manual snapshot of the Amazon Redshift cluster
• C. Make a copy of the automated snapshot on the Amazon Redshift cluster
• D. Call the wait For Snap Shot Available command from either the AWS CLI or an AWS SDK

Answer: B

NEW QUESTION 6
A company is centralizing a large number of unencrypted small files rom multiple Amazon S3 buckets. The company needs to verify that the files contain the same data after centralization.
Which method meets the requirements?

• A. Company the S3 Etags from the source and destination objects
• B. Call the S3 CompareObjects API for the source and destination objects
• C. Place a HEAD request against the source and destination objects comparing SIG v4 header
• D. Compare the size of the source and destination objects

Answer: B

NEW QUESTION 7
A user has created a launch configuration for Auto Scaling where CloudWatch detailed monitoring is
disabled. The user wants to now enable detailed monitoring. How can the user achieve this?

• A. Update the Launch config with CLI to set InstanceMonitoringDisabled = false
• B. The user should change the Auto Scaling group from the AWS console to enable detailed monitoring
• C. Update the Launch config with CLI to set InstanceMonitoring.Enabled = true
• D. Create a new Launch Config with detail monitoring enabled and update the Auto Scaling group

Answer: D

NEW QUESTION 8
You are currently hosting multiple applications in a VPC and have logged numerous port scans coming in from a specific IP address block. Your security team has requested that all access from the offending IP address block be denied for the next 24 hours.
Which of the following is the best method to quickly and temporarily deny access from the specified IP address block?

• A. Create an AD policy to modify Windows Firewall settings on all hosts in the VPC to deny access from the IP address block
• B. Modify the Network ACLs associated with all public subnets in the VPC to deny access from the IP address block
• C. Add a rule to all of the VPC 5 Security Groups to deny access from the IP address block
• D. Modify the Windows Firewall settings on all Amazon Machine Images (AMIs) that your organization uses in that VPC to deny access from the IP address block

Answer: B

NEW QUESTION 9
A company has reproducible data that they want to store on Amazon Web Services. The company may want to retrieve the data on a frequent basis. Which Amazon web services storage option allows the customer to optimize storage costs and still achieve high availability for their data?

• A. Amazon S3 Reduced Redundancy Storage
• B. Amazon EBS Magnetic Volume
• C. Amazon Glacier
• D. Amazon S3 Standard Storage

Answer: A

NEW QUESTION 10
A company’s social media manager requests more staff on the weekends to handle an increase in
customer contacts from a particular region. The company needs a report to visualize the trends on weekends over the past 6 months using QuickSight.
How should the data be represented?

• A. A line graph plotting customer contacts v
• B. time, with a line for each region
• C. A pie chart per region plotting customer contacts per day of week
• D. A map of the regions with a heatmap overlay to show the volume of customer contacts
• E. A bar graph plotting region vs volume of social media contacts

Answer: A

NEW QUESTION 11
A company needs to monitor the read and write IOPs metrics for their AWS MySQL RDS instance and
send real-time alerts to their operations team. Which AWS services can accomplish this? Choose 2 answers

• A. Amazon Simple Email Service
• B. Amazon CloudWatch
• C. Amazon Simple Queue Service
• D. Amazon Route 53
• E. Amazon Simple Notification Service

Answer: BE

NEW QUESTION 12
Which of the following are characteristics of Amazon VPC subnets? Choose 2 answers

• A. Each subnet maps to a single Availability Zone
• B. A CIDR block mask of /25 is the smallest range supported
• C. Instances in a private subnet can communicate with the internet only if they have an Elastic IP.
• D. By default, all subnets can route between each other, whether they are private or public
• E. Each subnet spans at least 2 Availability zones to provide a high-availability environment

Answer: AD

NEW QUESTION 13
You are deploying an application to track GPS coordinates of delivery in the United States.
Coordinates are transmitted from each delivery truck once every three seconds. You need to design an architecture that will enable realtime processing of these coordinates from multiple consumers. Which service should you use to implement data ingestion?

• A. Amazon Kinesis
• B. AWS Data Pipeline
• C. Amazon AppStream
• D. Amazon Simple Queue Service

Answer: A

NEW QUESTION 14
How can the domain’s zone apex, for example,”myzoneapexdomain.com”, be pointed towards an
Elastic Load Balancer?

• A. By using an Amazon Route 53 Alias record
• B. By using an A record
• C. By using an AAAA record
• D. By using an Amazon Route 53 CNAME record

Answer: A

NEW QUESTION 15
A company receives data sets coming from external providers on Amazon S3. Data sets from different providers are dependent on one another. Data sets will drive at different and is no particular order.
A data architect needs to design a solution that enables the company to do the following:
• Rapidly perform cross data set analysis as soon as the data becomes available
• Manage dependencies between data sets that arrives at different times
Which architecture strategy offers a scalable and cost-effective solution that meets these requirements?

• A. Maintain data dependency information in Amazon RDS for MySQ
• B. Use an AWS Pipeline job to load an Amazon EMR Hive Table based on task dependencies and event notification triggers in Amazon S3
• C. Maintain data dependency information in an Amazon DynamoDB tabl
• D. Use Amazon SNS and event notification to publish data to a fleet of Amazon EC2 worker
• E. Once the task dependencies have been resolved process the data with Amazon EMR
• F. Maintain data dependency information in an Amazon ElasticCache Redis cluste
• G. Use Amazon S3 event notifications to trigger an AWS Lambda function that maps the S3 object to Redi
• H. Once the dependencies have been resolved process the data with Amazon EMR
• I. Maintain data dependency information in an Amazon DynamoDB tabl
• J. Use Amazon S3 event notifications to trigger an AWS Lambda function that maps the S3 object to the task associated with it in DynamoD
• K. Once all task dependencies have been resolved process the data with Amazon EMR

Answer: D

NEW QUESTION 16
An Amazon Redshift Database is encrypted using KMS. A data engineer needs to use the AWS CLI to
create a KMS encrypted snapshot of the database in another AWS region.
Which three steps should the data engineer take to accomplish this task? (Select Three.)

• A. Create a new KMS key in the destination region
• B. Copy the existing KMS key to the destination region
• C. Use CreateSnapshotCopyGrant to allow Amazon Redshift to use the KMS key created in the destination region
• D. Use CreateSnapshotCopyGrant to allow Amazon Redshift to use the KMS key from the source region
• E. In the source, enable cross-region replication and specify the name of the copy grant created
• F. In the destination region, enable cross-region replication and specify the name of the copy grant created

Answer: BDF

NEW QUESTION 17
An administrator needs to design a strategy for the schema in a Redshift cluster. The administrator
needs to determine the optimal distribution style for the tables on the Redshift schema.
In which two circumstances would choosing EVEN distribution be most appropriate? (Select two)

• A. When the tables are highly denormalized and do NOT participate in frequent joins
• B. When data must be grouped based on a specific key on a defined slice
• C. When data transfer between nodes must be eliminated
• D. When a new table has been loaded and it is unclear how it will be joined to dimension tables

Answer: BD

NEW QUESTION 18
A data engineer is running a DWH on a 25-node Redshift cluster of a SaaS service. The data engineer
needs to build a dashboard that will be used by customers. Five big customers represent 80% of usage, and there is a long tail of dozens of smaller customers. The data engineer has selected the dashboarding tool.
How should the data engineer make sure that the larger customer workloads do NOT interfere with the smaller customer workloads?

• A. Apply query filters based on customer-id that can NOT be changed by the user and apply distribution keys on customer id
• B. Place the largest customers into a single user group with a dedicated query queue and place the rest of the customer into a different query queue
• C. Push aggregations into an RDS for Aurora instanc
• D. Connect the dashboard application to Aurora rather than Redshift for faster queries
• E. Route the largest customers to a dedicated Redshift cluster, Raise the concurrency of the multi- tenant Redshift cluster to accommodate the remaining customers

Answer: D

NEW QUESTION 19
An administrator needs to design a distribution strategy for a star schema in a Redshift cluster. The
administrator needs to determine the optimal distribution style for the tables in the Redshift schema. In which three circumstances would choosing Key-based distribution be most appropriate? (Select three)

• A. When the administrator needs to optimize a large, slowly changing dimension table
• B. When the administrator needs to reduce cross-node traffic
• C. When the administrator needs to optimize the fact table for parity with the number of slices
• D. When the administrator needs to balance data distribution and collocation of data
• E. When the administrator needs to take advantage of data locality on a local node of joins and aggregates

Answer: ADE

NEW QUESTION 20
A game company needs to properly scale its game application, which is backed by DynamoDB.
Amazon Redshift has the past two years of historical data. Game traffic varies throughout the year based on various factors such as season, movie release, and holiday season. An administrator needs to calculate how much read and write throughput should be previsioned for DynamoDB table for each week in advance.
How should the administrator accomplish this task?

• A. Feed the data into Amazon Machine Learning and build a regression model
• B. Feed the data into Spark Mlib and build a random forest model
• C. Feed the data into Apache Mahout and build a multi-classification model
• D. Feed the data into Amazon Machine Learning and build a binary classification model

Answer: B

NEW QUESTION 21
An online gaming company uses DynamoDB to store user activity logs and is experiencing throttled
writes on the company’s DynamoDB tables. The company is NOT consuming close to the provisioned capacity. The table contains a large number of items and is partitioned on user and sorted by date. The table is 200GB and is currently provisioned at 10K WCU and 20K RCU.
Which two additional pieces of information are required to determine the cause of the throttling? (Select Two.)

• A. The structured of any GSIs that have been defined on the table
• B. CloudWatch data showing consumed and provisioned write capacity when writes are being throttled
• C. Application-level metric showing the average item size and peak update rates for each attribute
• D. The structure of any LSIs that have been defined on the table
• E. The maximum historical WCU and RCU for the table

Answer: BD

NEW QUESTION 22
Which of the following notification endpoints or clients are supported by Amazon Simple Notification Service? Choose 2 answers

• A. Email
• B. CloudFront distribution
• C. File Transfer Protocol
• D. Short Message Service
• E. Simple Network Management Protocol

Answer: BC

NEW QUESTION 23
An administrator needs to manage a large catalog of items from various external sellers. The administration needs to determine if the items should be identified as minimally dangerous, dangerous or highly dangerous based on their textual description. The administrator already has some items with the danger attribute, but receives hundreds of new item descriptions every day without such classification.
The administrator has a system that captures dangerous goods reports from customer support team or from user feedback. What is a cost –effective architecture to solve this issue?

• A. Build a set of regular expression rules that are based on the existing example
• B. And run them on the DynamoDB streams as every new item description is added to the system.
• C. Build a kinesis Streams process that captures and marks the relevant items in the dangerous goods reports using a Lambda function once more than two reports have been filed.
• D. Build a machine learning model to properly classify dangerous goods and run it on the DynamoDB streams as every new item description is added to the system.
• E. Build a machine learning model with binary classification for dangerous goods and run it on the DynamoDB streams as every new item description is added to the system.

Answer: C

NEW QUESTION 24
......