The Secret Of Amazon-Web-Services DVA-C01 Practice Test

NEW QUESTION 1
Which DynamoDB limits can be raised by contacting AWS support? Choose 2 answers

• A. The number of hash keys per account
• B. The maximum storage used per account
• C. The number of tables per account
• D. The number of local secondary indexes per account
• E. The number of provisioned throughput units per account

Answer: CE

NEW QUESTION 2
What happens, by default, when one of the resources in a CIoudFormation stack cannot be created?

• A. Previously-created resources are kept but the stack creation terminates.
• B. Previously-created resources are deleted and the stack creation terminates.
• C. The stack creation continues, and the final results indicate which steps failed.
• D. CIoudFormation templates are parsed in advance so stack creation is guaranteed to succee

Answer: B

NEW QUESTION 3
How long can you keep your Amazon SQS messages in Amazon SQS queues?

• A. From 120 secs up to 4 weeks
• B. From 10 secs up to 7 days
• C. From 60 secs up to 2 weeks
• D. From 30 secs up to 1 week

Answer: C

Explanation:
The SQS message retention period is configurable and can be set anywhere from 1 minute to 2 weeks. The default is 4 days and once the message retention limit is reached your messages will be automatically deleted. The option for longer message retention provides greater filexibility to allow for longer intervals between message production and consumption.
Reference: https://aws.amazon.com/sqs/faqs/

NEW QUESTION 4
You have an environment that consists of a public subnet using Amazon VPC and 3 instances that are running in this subnet. These three instances can successfully communicate with other hosts on the Internet. You launch a fourth instance in the same subnet, using the same AMI and security group configuration you used for the others, but find that this instance cannot be accessed from the Internet. What should you do to enable internet access?

• A. Deploy a NAT instance into the public subnet.
• B. Modify the routing table for the public subnet
• C. Configure a publically routable IP Address In the host OS of the fourth instance.
• D. Assign an Elastic IP address to the fourth instanc

Answer: D

NEW QUESTION 5
A user is planning to host a web server as well as an app server on a single EC2 instance which is a part of the public subnet of a VPC. How can the user setup to have two separate public IPs and separate security groups for both the application as well as the web server?

• A. Launch a VPC instance with two network interface
• B. Assign a separate security group to each and AWS will assign a separate public IP to them.
• C. Launch VPC with two separate subnets and make the instance a part of both the subnets.
• D. Launch a VPC instance with two network interface
• E. Assign a separate security group and elastic IP to them.
• F. Launch a VPC with ELB such that it redirects requests to separate VPC instances of the public subne

Answer: C

Explanation:
If you need to host multiple websites(with different IPs) on a single EC2 instance, the following is the suggested method from AWS.
Launch a VPC instance with two network interfaces
Assign elastic IPs from VPC EIP pool to those interfaces (Because, when the user has attached more than one network interface with an instance, AWS cannot assign public IPs to them.)
Assign separate Security Groups if separate Security Groups are needed
This scenario also helps for operating network appliances, such as firewalls or load balancers that have multiple private IP addresses for each network interface.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/MuItipIeIP.html

NEW QUESTION 6
Which of the following items are required to allow an application deployed on an EC2 instance to write data to a DynamoDB table?
Assume that no security Keys are allowed to be stored on the EC2 instance. Choose 2 answers

• A. Create an IAM User that allows write access to the DynamoDB table.
• B. Add an IAM Role to a running EC2 instance.
• C. Add an IAM User to a running EC2 Instance.
• D. Launch an EC2 Instance with the IAM Role included in the launch configuration.
• E. Create an IAM Role that allows write access to the DynamoDB table.
• F. Launch an EC2 Instance with the IAM User included in the launch configuration.

Answer: DE

NEW QUESTION 7
A user has created a new EBS volume from an existing snapshot. The user mounts the volume on the instance to which it is attached. Which of the below mentioned options is a required step before the user can mount the volume?

• A. Run a cyclic check on the device for data consistency
• B. Create the file system of the volume
• C. Resize the volume as per the original snapshot size
• D. No step is require
• E. The user can directly mount the device

Answer: D

Explanation:
When a user is trying to mount a blank EBS volume, it is required that the user first creates a file system within the volume. If the volume is created from an existing snapshot then the user needs not to create a file system on the volume as it will wipe out the existing data.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-using-volumes.htmI

NEW QUESTION 8
What is the maximum size for messages stored in SQS?

• A. 256KB
• B. 128KB
• C. 1024KB
• D. 64KB

Answer: A

Explanation:
By default, SQS queues allow you to send the largest supported payload size, currently 256KB. You can choose to specify a limit on how many bytes can be sent per payload, using the lVIaximumlVIessageSize attribute of the SetQueueAttributes method.
Reference: http://aws.amazon.com/sqs/faqs/

NEW QUESTION 9
How does Amazon SQS allow multiple readers to access the same message queue without losing messages or processing them many times?

• A. By identifying a user by his unique id
• B. By using unique cryptography
• C. Amazon SQS queue has a configurable visibility timeout.
• D. MuItipIe readers can't access the same message queue

Answer: C

Explanation:
Every Amazon SQS queue has a configurable visibility timeout. For the designated amount of time after a message is read from a queue, it will not be visible to any other reader. As long as the amount of time that it takes to process the message is less than the visibility timeout, every message will be processed and deleted. In the event that the component processing the message fails or becomes unavailable, the message will again become visible to any component reading the queue once the visibility timeout ends. This allows you to have many components all reading messages from the same queue, with each working to process different messages.
Reference: https://aws.amazon.com/sqs/faqs/

NEW QUESTION 10
A user is planning to host MS SQL on an EBS volume. It was recommended to use the AWS RDS. What advantages will the user have if he uses RDS in comparison to an EBS based DB?

• A. Better throughput with PIOPS
• B. Automated backup
• C. NIS SQL is not supported with RDS
• D. High availability with multi AZs

Answer: B

Explanation:
Comparing with on-premises or EC2 based NIS SQL, RDS provides an automated backup feature. PIOPS is available with both RDS and EBS. However, HA is not available with NIS SQL.
Reference: https://aws.amazon.com/rds/faqs/

NEW QUESTION 11
An orgAMzation has created an application which is hosted on the AWS EC2 instance. The application stores images to S3 when the end user uploads to it. The orgAMzation does not want to store the AWS secure credentials required to access the S3 inside the instance. Which of the below mentioned options is a possible solution to avoid any security threat?

• A. Use the IAM role and assign it to the instance.
• B. Since the application is hosted on EC2, it does not need credentials to access S3.
• C. Use the X.509 certificates instead of the access and the secret access keys.
• D. Use the IAM based single sign between the AWS resources and the orgAMzation applicatio

Answer: A

Explanation:
The AWS IAM role uses temporary security credentials to access AWS services. Once the role is assigned to an instance, it will not need any security credentials to be stored on the instance. Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html

NEW QUESTION 12
A user is enabling a static website hosting on an S3 bucket. Which of the below mentioned parameters cannot be configured by the user?

• A. Error document
• B. Conditional error on object name
• C. Index document
• D. Conditional redirection on object name

Answer: B

Explanation:
To host a static website, the user needs to configure an Amazon S3 bucket for website hosting and then upload the website contents to the bucket. The user can configure the index, error document as well as configure the conditional routing of on object name.
Reference: http://docs.aws.amazon.com/AmazonS3/Iatest/dev/HowDoIWebsiteConfiguration.htm|

NEW QUESTION 13
Regarding Amazon SNS, to begin using Amazon SNS mobile push notifications, you first need that uses one of the supported push notification services: APNS, GCM, or ADM.

• A. an access policy for the mobile endpoints
• B. to active push notification service of Amazon SNS
• C. to know the type of mobile device operating system
• D. an app for the mobile endpoints

Answer: D

Explanation:
In Amazon SNS, to begin using Amazon SNS mobile push notifications, you first need an app for the mobile endpoints that uses one of the supported push notification services: APNS, GCM, or ADM. After you've registered and configured the app to use one of these services, you configure Amazon SNS to send push notifications to the mobile endpoints.
Reference: http://docs.aws.amazon.com/sns/latest/dg/SNSMobiIePush.htmI

NEW QUESTION 14
A user has launched a MySQL RDS. The user wants to plan for the DR and automate the snapshot. Which of the below mentioned functionality offers this option with RDS?

• A. Copy snapshot
• B. Automated synchronization
• C. Snapshot
• D. Automated backup

Answer: D

Explanation:
Amazon RDS provides two different methods for backing up and restoring the Amazon DB instances: automated backups and DB snapshots. Automated backups automatically back up the DB instance during a specific, user-definable backup window, and keep the backups for a limited, user-specified period of time.
Reference: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.BackingUpAndRestoringAmazonR DSInstances.htmI

NEW QUESTION 15
Can a user associate and use his own DNS with ELB instead ofthe DNS provided by AWS ELB?

• A. Yes, by creating a CNAME with the existing domain name provider
• B. Yes, by configuring DNS in the AWS Console
• C. No
• D. Yes, only through Route 53 by mapping ELB and DNS

Answer: A

Explanation:
The AWS ELB allows mapping a custom domain name with ELB. The user can map ELB with DNS in two ways: 1) By creating CNAME with the existing domain name service provider or 2) By creating a record with Route 53.
Reference:
http://docs.aws.amazon.com/E|asticLoadBaIancing/latest/DeveIoperGuide/using-domain-names-with-elb. html

NEW QUESTION 16
How can a user configure three termination policies for the AutoScaIing group?

• A. Define multiple policies in random order
• B. Define multiple policies in the ordered list
• C. Keep updating the AutoScaIing group with each policy
• D. The user cannot specify more than two policies for AutoScaIing

Answer: B

Explanation:
To configure the Auto Scaling termination policy, the user can either specify any one of the policies as a standalone policy or list multiple policies in an ordered list. The policies are executed in the order that they are listed.
Reference: http://docs.aws.amazon.com/AutoScaIing/latest/DeveIoperGuide/us-termination-policy.html

NEW QUESTION 17
Which of the following is an example of a good DynamoDB hash key schema for provisioned throughput efficiency?

• A. User ID, where the application has many different users.
• B. Status Code where most status codes are the same
• C. Device ID, where one is by far more popular than all the others.
• D. Game Type, where there are three possible game types

Answer: A

NEW QUESTION 18
Which one of the following operations is NOT a DynamoDB operation?

• A. BatchWrite|tem
• B. DescribeTabIe
• C. BatchGetItem
• D. BatchDeIeteItem

Answer: D

Explanation:
In DynamoDB, Deleteltem deletes a single item in a table by primary key, but BatchDeIeteItem doesn’t exist.
Reference: http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/operationIist.htmI

NEW QUESTION 19
A user has created an EBS instance in the US-East-1a AZ. The user has a volume of 30 GB in the US-East-1 b zone. How can the user attach the volume to an instance?

• A. Since both the volume and the instance are in the same region, the user can attach the volume
• B. Use the volume migrate function to move the volume from one AZ to another and attach to the instance
• C. Take a snapshot of the volum
• D. Create a new volume in the USEast-1a and attach that to the instance
• E. Use the volume replicate function to create a new volume in the US-East-1a and attach that to the volume

Answer: C

Explanation:
If an EBS volume is not in the same AZ of an EC2 instance, it cannot be attached to the instance. The only option is to take a snapshot of the volume and create a new volume in the instance’s AZ. Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSSnapshots.htmI

NEW QUESTION 20
is a task coordination and state management service for cloud applications.

• A. Amazon SES
• B. Amazon SWF
• C. Amazon FPS
• D. Amazon SNS

Answer: B

Explanation:
Amazon Simple Workflow (Amazon SWF) is a task coordination and state management service for cloud applications. With Amazon SWF, you can stop writing complex glue-code and state machinery and invest more in the business logic that makes your applications unique.
Reference: http://aws.amazon.com/swf/

NEW QUESTION 21
What type of block cipher does Amazon S3 offer for server side encryption?

• A. Triple DES
• B. Advanced Encryption Standard
• C. Blowfish
• D. RC5

Answer: B

NEW QUESTION 22
AWS Elastic Beanstalk will change the health status of a web server environment tier to gray color when:

• A. AWS Elastic Beanstalk detects other problems with the environment that are known to make the application unavailable
• B. Your application hasn't responded to the application health check URL within the last one hour.
• C. Your application hasn't responded to the application health check URL within the last five minutes.
• D. Your appIication's health status is unknown because status is reported when the application is not in the ready state.

Answer: D

Explanation:
AWS Elastic Beanstalk will change the health status of a web server environment tier to gray color when your appIication's health status is unknown (because status is reported when the application is not in the ready state).
Reference: http://docs.aws.amazon.com/elasticbeanstaIk/latest/dg/using-features.heaIthstatus.htmI

NEW QUESTION 23
A user is planning to host a mobile game on EC2 which sends notifications to active users on either high score or the addition of new features. The user should get this notification when he is online on his mobile device. Which of the below mentioned AWS services can help achieve this functionality?

• A. AWS Simple Notification Service.
• B. AWS Simple Queue Service.
• C. AWS Mobile Communication Service.
• D. AWS Simple Email Servic

Answer: A

Explanation:
Amazon Simple Notification Service (Amazon SNS) is a fast, filexible, and fully managed push messaging service. Amazon SNS makes it simple and cost-effective to push to mobile devices, such as iPhone, iPad, Android, Kindle Fire, and internet connected smart devices, as well as pushing to other distributed services.
Reference: http://aws.amazon.com/sns

NEW QUESTION 24
An orgAMzation is having an application which can start and stop an EC2 instance as per schedule. The orgAMzation needs the MAC address of the instance to be registered with its software. The instance is launched in EC2-CLASSIC. How can the orgAMzation update the MAC registration every time an instance is booted?

• A. The instance MAC address never change
• B. Thus, it is not required to register the MAC address every time.
• C. The orgAMzation should write a boot strapping script which will get the MAC address from the instance metadata and use that script to register with the application.
• D. AWS never provides a MAC address to an instance; instead the instance ID is used for identifying the instance for any software registration.
• E. The orgAMzation should provide a MAC address as a part of the user dat
• F. Thus, whenever the instance is booted the script assigns the fixed MAC address to that instance.

Answer: B

Explanation:
AWS provides an on demand, scalable infrastructure. AWS EC2 allows the user to launch On-Demand instances. AWS does not provide a fixed MAC address to the instances launched in EC2-CLASSIC. If the instance is launched as a part of EC2-VPC, it can have an ENI which can have a fixed MAC. However, with EC2-CLASSIC, every time the instance is started or stopped it will have a new MAC address.
To get this MAC, the orgAMzation can run a script on boot which can fetch the instance metadata and get the MAC address from that instance metadata. Once the MAC is received, the orgAMzation can register that MAC with the software.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/AESDG-chapter-instancedata.html

NEW QUESTION 25
An account owner has created an IAM user with the name examkiller. The account owner wants to give EC2 access of only the US West region to that IAM user. How can the owner configure this?

• A. While creating a policy provide the region as a part of the resources
• B. Create an IAM user in the US West region and give access to EC2
• C. Create an IAM policy and define the region in the condition
• D. It is not possible to provide access based on the region

Answer: C

Explanation:
The IAM policy is never region specific. If the user wants to configure the region specific setting, he needs to provide conditions as part of the policy.
Reference: http://awspolicygen.s3.amazonaws.com/poIicygen.htmI

NEW QUESTION 26
......