Amazon-Web-Services DVA-C01 Free Practice Questions

NEW QUESTION 1
In regards to Amazon SQS how can you secure the messages in your queues?

• A. You can't
• B. Amazon SQS uses either your Access Key ID or an X.509 certificate to authenticate your identity
• C. Through your IAM access keys
• D. Don't use root access

Answer: B

Explanation:
Authentication mechAMsms are provided to ensure that messages stored in Amazon SQS queues are secured against unauthorized access. Only the AWS account owners can access the queues they create. Amazon SQS uses proven cryptographic methods to authenticate your identity, either through the use of your Access Key ID and request signature, or through the use of an X.509 certificate.
Reference: https://aws.amazon.com/sqs/faqs/

NEW QUESTION 2
Your manager has requested you to tag EC2 instances to orgAMze and manage a load balancer. Which of the following statements about tag restrictions is incorrect?

• A. The maximum key length is 127 Unicode characters.
• B. The maximum value length is 255 Unicode characters.
• C. Tag keys and values are case sensitive.
• D. The maximum number of tags per load balancer is 20.

Answer: D

Explanation:
Tags help you to categorize your load balancers in different ways, for example, by purpose, owner, or environment. The following basic restrictions apply to tags: The maximum number of tags per resource is
10. The maximum key length is 127 Unicode characters. The maximum value length that can be used is 255 Unicode characters. The tag keys and values are case sensitive. Allowed characters are letters, spaces, and numbers representable in UTF-8, plus the following special characters: + - =. _ : / @. Do not use leading or trailing spaces. Do not use the aws: prefix in your tag names or values because it is reserved for AWS use. You can't edit or delete tag names or values with this prefix. Tags with this prefix do not count against your tags per resource limit.
Reference:
http://docs.aws.amazon.com/EIasticLoadBaIancing/latest/DeveIoperGuide/add-remove-tags.htmI#tag-res trictions

NEW QUESTION 3
Which Amazon service is not used by Elastic Beanstalk?

• A. Amazon S3
• B. Amazon ELB
• C. Auto scaling
• D. Amazon EMR

Answer: D

Explanation:
Elastic Beanstalk leverages AWS services such as Amazon Elastic Cloud Compute (Amazon EC2), Amazon Simple Storage Service (Amazon S3), Amazon Simple Notification Service (Amazon SNS), Elastic Load Balancing and Auto Scaling to deliver the same highly reliable, scalable, and cost-effective infrastructure that hundreds of thousands of businesses depend on today.
Reference: http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/NeIcome.html

NEW QUESTION 4
A user is trying to understand AWS SNS. To which of the below mentioned end points is SNS unable to send a notification?

• A. AWS SES
• B. Email JSON
• C. AWS SQS
• D. HTTP

Answer: A

Explanation:
Amazon Simple Notification Service (Amazon SNS) is a fast, filexible, and fully managed push messaging service. Amazon SNS can deliver notifications by SMS text message or email to the Amazon Simple Queue Service (SQS) queues or to any HTTP endpoint. The user can select one the following
transports as part of the subscription requests: "HTTP", "HTTPS","Emai|", "EmaiI-JSON", "SQS", "and SMS".
Reference: http://aws.amazon.com/sns/faqs/

NEW QUESTION 5
Which of the following is chosen as the default region when making an API call with an AWS SDK?

• A. ap-northeast-1
• B. us-west-2
• C. us-east-1
• D. eu-west-1
• E. us-central-1

Answer: C

NEW QUESTION 6
You want to have multiple versions of your application running at the same time, with all versions launched via AWS Elastic Beanstalk. Is this possible?

• A. N
• B. However if you have 2 AWS accounts this can be done
• C. N
• D. AWS Elastic Beanstalk is not designed to support multiple running environments
• E. Ye
• F. AWS Elastic Beanstalk is designed to support a number of multiple running environments
• G. Ye
• H. However AWS Elastic Beanstalk is designed to support only 2 multiple running environments

Answer: C

Explanation:
AWS Elastic Beanstalk is designed to support multiple running environments. As an example you could have one for integration testing, one for pre-production, and one for production, with each environment independently configured and running on its own separate AWS resources.
Reference: https://aws.amazon.com/elasticbeansta|k/faqs/

NEW QUESTION 7
An orgAMzation is having an application which can start and stop an EC2 instance as per schedule. The orgAMzation needs the MAC address of the instance to be registered with its software. The instance is launched in EC2-CLASSIC. How can the orgAMzation update the MAC registration every time an instance is booted?

• A. The instance MAC address never change
• B. Thus, it is not required to register the MAC address every time.
• C. The orgAMzation should write a boot strapping script which will get the MAC address from the instance metadata and use that script to register with the application.
• D. AWS never provides a MAC address to an instance; instead the instance ID is used for identifying the instance for any software registration.
• E. The orgAMzation should provide a MAC address as a part of the user dat
• F. Thus, whenever the instance is booted the script assigns the fixed MAC address to that instance.

Answer: B

Explanation:
AWS provides an on demand, scalable infrastructure. AWS EC2 allows the user to launch On-Demand instances. AWS does not provide a fixed MAC address to the instances launched in EC2-CLASSIC. If the instance is launched as a part of EC2-VPC, it can have an ENI which can have a fixed MAC. However, with EC2-CLASSIC, every time the instance is started or stopped it will have a new MAC address.
To get this MAC, the orgAMzation can run a script on boot which can fetch the instance metadata and get the MAC address from that instance metadata. Once the MAC is received, the orgAMzation can register that MAC with the software.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/AESDG-chapter-instancedata.html

NEW QUESTION 8
A user is accessing an EC2 instance on the SSH port for IP 10.20.30.40. Which one is a secure way to
configure that the instance can be accessed only from this IP?

• A. In the security group, open port 22 for IP 1020.30.40/0
• B. In the security group, open port 22 for IP 10.20.30.40/32
• C. In the security group, open port 22 for IP 10.20.30.40/24
• D. In the security group, open port 22 for IP 10.20.30.40

Answer: B

Explanation:
In AWS EC2, while configuring a security group, the user needs to specify the IP address in CIDR notation. The CIDR IP range 10.20.30.40/32 says it is for a single IP 10.20.30.40. If the user specifies the IP as 10.20.30.40 only, the security group will not accept and ask it in a CIRD format.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-network-security.html

NEW QUESTION 9
A user has enabled the automated backup, but not specified the backup window. What will RDS do in this case?

• A. Will throw an error on instance launch
• B. RDS will take 3 AM — 3:30 AM as the default window
• C. RDS assigns a random time period based on the region
• D. Will not allow to launch a DB instance

Answer: C

Explanation:
If the user does not specify a preferred backup window while enabling an automated backup, Amazon RDS assigns a default 30-minute backup window which is selected at random from an 8-hour block of
time per region. Reference:
http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.BackingUpAndRestoringAmazonR DSInstances.htmI

NEW QUESTION 10
The user has created multiple AutoScaIing groups. The user is trying to create a new AS group but it fails. How can the user know that he has reached the AS group limit specified by AutoScaIing in that region?

• A. Run the command: as-describe-account-limits
• B. Run the command: as-describe-group-limits
• C. Run the command: as-max-account-limits
• D. Run the command: as-list-account-limits

Answer: A

Explanation:
A user can see the number of AutoScaIing resources currently allowed for the AWS account either by using the as-describe-account-Iimits command or by calling the DescribeAccountLimits action. Reference:http://docs.aws.amazon.com/AutoScaIing/latest/DeveIoperGuide/ts-as-capacity.html

NEW QUESTION 11
When working with AWS CIoudFormation Templates what is the maximum number of stacks that you can create?

• A. 500
• B. 50
• C. 20
• D. 10

Answer: C

Explanation:
C|oudFormation Limits
Maximum number of AWS CIoudFormation stacks that you can create is 20 stacks. Reference:
http://docs.aws.amazon.com/AWSCIoudFormation/latest/UserGuide/cloudformation-Iimits.htmI

NEW QUESTION 12
A user is having access to objects of an S3 bucket which is not owned by him. If he is trying to set the objects of that bucket public, which of the below mentioned options may be a right fit for this action?

• A. Make the bucket public with full access
• B. Define the policy for the bucket
• C. Provide ACL on the object
• D. Create an IAM user with permission

Answer: C

Explanation:
An S3 object ACL is the only way to manage access to objects which are not owned by the bucket owner. An AWS account that owns the bucket can grant another AWS account permission to upload objects. The bucket owner does not own these objects. The AWS account that created the object must grant permissions using object ACLs.
Reference: http://docs.aws.amazon.com/AmazonS3/latest/dev/access-policy-alternatives-guidelines.html

NEW QUESTION 13
You have a number of image files to encode. In an Amazon SQS worker queue, you create an Amazon SQS message for each file specifying the command (jpeg-encode) and the location of the file in Amazon S3. Which of the following statements best describes the functionality of Amazon SQS?

• A. Amazon SQS is for single-threaded sending or receMng speeds.
• B. Amazon SQS is a non-distributed queuing system.
• C. Amazon SQS is a distributed queuing system that is optimized for horizontal scalability, not for single-threaded sending or receMng speeds.
• D. Amazon SQS is a distributed queuing system that is optimized for vertical scalability and for single-threaded sending or receMng speeds.

Answer: C

Explanation:
Amazon SQS is a distributed queuing system that is optimized for horizontal scalability, not for
single-threaded sending or receMng speeds. A single client can send or receive Amazon SQS messages at a rate of about 5 to 50 messages per second. Higher receive performance can be achieved by requesting multiple messages (up to 10) in a single call. It may take several seconds before a message that has been to a queue is available to be received.
Reference: http://media.amazonwebservices.com/AWS_Storage_Options.pdf

NEW QUESTION 14
When should a user try to Force Detach an EBS volume?

• A. If the volume is stuck in a detaching state
• B. If the volume is not accessible from the instance
• C. If the volume is not unmounted and the user still wants to detach
• D. If the volume is a root volume

Answer: A

Explanation:
If an EBS volume stays in the detaching state, the user can force the detachment by clicking Force Detach. Forcing the detachment can lead to either data loss or a corrupted file system. The user should use this option only as a last resort to detach a volume from a failed instance or if he is detaching a volume with the intention of deleting it.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-detaching-volume.html

NEW QUESTION 15
A user is trying to find the state of an S3 bucket with respect to versioning. Which of the below mentioned states AWS will not return when queried?

• A. versioning-enabled
• B. versioning-suspended
• C. unversioned
• D. versioned

Answer: D

Explanation:
S3 buckets can be in one of the three states: unversioned (the default), versioning-enabled or versioning-suspended. The bucket owner can configure the versioning state of a bucket. The versioning state applies to all (never some) of the objects in that bucket. The first time owner enables a bucket for versioning, objects in it are thereafter always versioned and given a unique version ID.
Reference: http://docs.aws.amazon.com/AmazonS3/Iatest/dev/Versioning.htmI

NEW QUESTION 16
Is there a limit to how much throughput you can get out of a single table in DynamoDB?

• A. Yes, not more than 1,000 writes/second or 1,000 reads/second
• B. No
• C. Yes, not more than 10,000 writes/second or 10,000 reads/second
• D. No, but If you wish to exceed throughput rates of 10,000 writes/second or 10,000 reads/second, you must first contact AWS.

Answer: D

Explanation:
In DynamoDB, you can increase the throughput you have provisioned for your table using UpdateTabIe API or in the AWS Management Console. If you wish to exceed throughput rates of 10,000 writes/second or 10,000 reads/second, you must first contact AWS.
Reference: http://aws.amazon.com/dynamodb/

NEW QUESTION 17
Which one of the following statements is NOT an advantage of DyanamoDB being built on Solid State Drives:

• A. serve high-scale request workloads
• B. low request pricing
• C. high I/O performance of WebApp on EC2 instance
• D. low-latency response times

Answer: C

Explanation:
In DynamoDB, SSDs help achieve design goals of predictable low-latency response times for storing and accessing data at any scale. The high I/O performance of SSDs also enables to serve high-scale request workloads cost efficiently, and to pass this efficiency along in low request pricing.
Reference: http://aws.amazon.com/dynamodb/faqs/

NEW QUESTION 18
Which of the following device names is reserved for the root device for Linux instances of Amazon EC2?

• A. /dev/sda1
• B. /dev/sd[b-e]
• C. xvd[a-e]
• D. /dev/sd[f-p][1 -6]

Answer: A

Explanation:
/dev/sda1 is the name of the device reserved for the root device for Linux instances. Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/device_naming.htmI

NEW QUESTION 19
What is the data model of DynamoDB?

• A. "Items", with Keys and one or more Attribute; and "Attribute", with Name and Value.
• B. "Database", which is a set of "TabIes", which is a set of "Items", which is a set of "Attributes".
• C. "TabIe", a collection of Items; "Items", with Keys and one or more Attribute; and "Attribute", with Name and Value.
• D. "Database", a collection of Tables; "TabIes", with Keys and one or more Attribute; and "Attribute", with Name and Value.

Answer: C

Explanation:
The data model of DynamoDB is: "TabIe", a collection of Items;
"Items", with Keys and one or more Attribute; "Attribute", with Name and Value.
Reference: http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/DataModeI.html

NEW QUESTION 20
Your supervisor has asked you to build a simple file synchronization service for your department. He doesn't want to spend too much money and he wants to be notified of any changes to files by email. What do you think would be the best Amazon service to use for the email solution?

• A. Amazon CIoudSearch
• B. Amazon Elastic Transcoder
• C. Amazon SES
• D. Amazon AppStream

Answer: C

Explanation:
File change notifications can be sent via email to users following the resource with Amazon Simple Email Service (Amazon SES), an easy-to-use, cost-effective email solution.
Reference: http://media.amazonwebservices.com/architecturecenter/AWS_ac_ra_fiIesync_08.pdf

NEW QUESTION 21
You are inserting 1000 new items every second in a DynamoDB table. Once an hour these items are analyzed and then are no longer needed. You need to minimize provisioned throughput, storage, and API calls.
Given these requirements, what is the most efficient way to manage these Items after the analysis?

• A. Retain the items in a single table
• B. Delete items indMdually over a 24 hour period
• C. Delete the table and create a new table per hour
• D. Create a new table per hour

Answer: C

NEW QUESTION 22
How many types of block devices does Amazon EC2 support?

• A. 5
• B. 1
• C. 2
• D. 4

Answer: C

Explanation:
Amazon EC2 supports 2 types of block devices. Reference:
http://docs.amazonwebservices.com/AWSEC2/latest/UserGuide/block-device-mapping-concepts.html

NEW QUESTION 23
An ELB is diverting traffic across 5 instances. One of the instances was unhealthy only for 20 minutes. What will happen after 20 minutes when the instance becomes healthy?

• A. ELB will never divert traffic back to the same instance
• B. ELB will not automatically send traffic to the same instanc
• C. However, the user can configure to start sending traffic to the same instance
• D. ELB starts sending traffic to the instance once it is healthy
• E. ELB terminates the instance once it is unhealth
• F. Thus, the instance cannot be healthy after 10 minutes

Answer: C

Explanation:
AWS Elastic Load Balancing continuously checks the health of an instance. If one of the instances is unhealthy it stops sending traffic to it and automatically reroutes the traffic to the remaining running EC2 instances. If the failed EC2 instance is restored, Elastic Load Balancing will again start sending traffic to that instance.
Reference: http://docs.aws.amazon.com/E|asticLoadBaIancing/latest/DeveIoperGuide/Svclntro.htm|

NEW QUESTION 24
An orgAMzation has hosted an application on the EC2 instances. There will be multiple users connecting to the instance for setup and configuration of application. The orgAMzation is planning to implement certain security best practices. Which of the below mentioned pointers will not help the orgAMzation achieve better security arrangement?

• A. Apply the latest patch of OS and always keep it updated.
• B. Allow only IAM users to connect with the EC2 instances with their own secret access key.
• C. Disable the password based login for all the user
• D. All the users should use their own keys to connect with the instance securely.
• E. Create a procedure to revoke the access rights of the indMdual user when they are not required to connect to EC2 instance anymore for the purpose of application configuration.

Answer: B

Explanation:
Since AWS is a public cloud any application hosted on EC2 is prone to hacker attacks. It becomes extremely important for a user to setup a proper security mechAMsm on the EC2 instances. A few of the security measures are listed below:
Always keep the OS updated with the latest patch
Always create separate users with in OS if they need to connect with the EC2 instances, create their keys and disable their password
Create a procedure using which the admin can revoke the access of the user when the business work on the EC2 instance is completed
Lock down unnecessary ports
Audit any proprietary applications that the user may be running on the EC2 instance
Provide temporary escalated prMleges, such as sudo for users who need to perform occasional prMleged tasks
The IAM is useful when users are required to work with AWS resources and actions, such as launching an instance. It is not useful to connect (RDP / SSH) with an instance.
Reference: http://aws.amazon.com/articles/1233/

NEW QUESTION 25
Which of the following is an example of a good DynamoDB hash key schema for provisioned throughput efficiency?

• A. User ID, where the application has many different users.
• B. Status Code where most status codes are the same
• C. Device ID, where one is by far more popular than all the others.
• D. Game Type, where there are three possible game types

Answer: A

NEW QUESTION 26
A user has launched an EBS backed Linux instance. How can a user detach the root device and attach it to another instance as a secondary volume?

• A. Unmount the root volume first and then detach it
• B. It is not possible to mount the root volume to some other instance
• C. Stop the first instance and then attach instance’s root volume as a new volume to the other instance
• D. It is not possible to mount the root device as a secondary volume on the other instance

Answer: C

Explanation:
If an Amazon EBS volume is the root device of an instance, it cannot be detached unless the instance is in the stopped state.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-detaching-volume.html

NEW QUESTION 27
To scale up the AWS resources using manual AutoScaIing, which of the below mentioned parameters should the user change?

• A. Maximum capacity
• B. Desired capacity
• C. Preferred capacity
• D. Current capacity

Answer: B

Explanation:
The Manual Scaling as part of Auto Scaling allows the user to change the capacity of Auto Scaling group. The user can add / remove EC2 instances on the fly. To execute manual scaling, the user should modify the desired capacity. AutoScaIing will adjust instances as per the requirements. If the user is trying to CLI, he can use command as-set-desired-capacity <Auto Scaling Group Name> --desired-capacity <New Capacity>
Reference: http://docs.aws.amazon.com/AutoScaIing/latest/DeveIoperGuide/as-manual-scaling.htmI

NEW QUESTION 28
In relation to Amazon SQS, how can you ensure that messages are delivered in order?

• A. Increase the size of your queue
• B. Send them with a timestamp
• C. Give each message a unique id.
• D. AWS cannot guarantee that you will receive messages in the exact order you sent them

Answer: D

Explanation:
Amazon SQS makes a best effort to preserve order in messages, but due to the distributed nature of the queue, AWS cannot guarantee that you will receive messages in the exact order you sent them. You typically place sequencing information or timestamps in your messages so that you can reorder them upon receipt.
Reference: https://aws.amazon.com/items/1343?externaI|D=1343

NEW QUESTION 29
......