AWS CLOUD-ALC -TEST28 : Question 1 of 191

Which procedure for backing up a relational database on EC2 that is using a set of RAlDed EBS volumes for storage minimizes the time during which the database cannot be written to and results in a consistent backup? Which procedure for backing up a relational database on EC2 that is using a set of RAlDed EBS volumes for storage minimizes the time during which the database cannot be written to and results in a consistent backup?

1 Mark(s)

1. Detach EBS volumes, 2. Start EBS snapshot of volumes, 3. Re-attach EBS volumes
1. Stop the EC2 Instance. 2. Snapshot the EBS volumes
1. Suspend disk I/O, 2. Create an image of the EC2 Instance, 3. Resume disk I/O
1. Suspend disk I/O, 2. Start EBS snapshot of volumes, 3. Resume disk I/O

Common points of failures like generators and cooling equipment are shared across Availability Zones. Common points of failures like generators and cooling equipment are shared across Availability Zones.

1 Mark(s)

1 1
Sometimes False Sometimes False
Always True Always True

Which of the following are characteristics of Amazon VPC subnets? Which of the following are characteristics of Amazon VPC subnets?

1 Mark(s)

Each subnet spans at least 2 Availability Zones to provide a high-availability environment.
Each subnet maps to a single Availability Zone.By default, all subnets can route between each other, whether they are private or public.
CIDR block mask of/25 is the smallest range supported.
Instances in a private subnet can communicate with the Internet only if they have an Elastic IP.

When an EC2 instance that is backed by an S3-based AMI is terminated, what happens to the data on the root volume? When an EC2 instance that is backed by an S3-based AMI is terminated, what happens to the data on the root volume?

1 Mark(s)

Data is automatically saved as an EBS snapshot.
Data is automatically saved as an EBS volume.
Data is unavailable until the instance is restarted.
Data is automatically deleted. Data is automatically deleted.

You have multiple Amazon EC2 instances running in a cluster across multiple Availability Zones within the same region. What combination of the following should be used to ensure the highest network performance (packets per second), lowest latency, and lowest jitter? You have multiple Amazon EC2 instances running in a cluster across multiple Availability Zones within the same region. What combination of the following should be used to ensure the highest network performance (packets per second), lowest latency, and lowest jitter?

1 Mark(s)

Amazon EC2 placement groups,Enhanced networking, Amazon Linux
Amazon PV AMI and Amazon HVM AMI Amazon PV AMI and Amazon HVM AMI
Amazon HVM AMI alone Amazon HVM AMI alone
Amazon VPC and Enhanced networking Amazon VPC and Enhanced networking

In the Amazon RDS Oracle DB engine, the Database Diagnostic Pack and the Database Tuning Pack are only available with ______________ In the Amazon RDS Oracle DB engine, the Database Diagnostic Pack and the Database Tuning Pack are only available with ______________

1 Mark(s)

Oracle Standard Edition Oracle Standard Edition
Oracle Express Edition Oracle Express Edition
Oracle Enterprise Edition Oracle Enterprise Edition
None of these None of these

Every user you create in the IAM system starts with ___________. Every user you create in the IAM system starts with ___________.

1 Mark(s)

full permissions full permissions
no permissions no permissions
partial permissions partial permissions
None of the above None of the above

How many Elastic IP by default in Amazon Account? How many Elastic IP by default in Amazon Account?

1 Mark(s)

1 Elastic IP 1 Elastic IP
3 Elastic IP 3 Elastic IP
5 Elastic IP 5 Elastic IP
0 Elastic IP 0 Elastic IP

Which Amazon Elastic Compute Cloud feature can you query from within the instance to access instance properties? Which Amazon Elastic Compute Cloud feature can you query from within the instance to access instance properties?

1 Mark(s)

Instance user data Instance user data
Resource tags Resource tags
Instance metadata Instance metadata
Amazon Machine Image Amazon Machine Image

Does Amazon Route 53 support NS Records? Does Amazon Route 53 support NS Records?

1 Mark(s)

Yes, it supports Name Service records. Yes, it supports Name Service records.
No No
It supports only MX records. It supports only MX records.
Yes, it supports Name Server records. Yes, it supports Name Server records.

Because of the extensibility limitations of striped storage attached to Windows Server, Amazon RDS does not currently support increasing storage on a _____ DB Instance. Because of the extensibility limitations of striped storage attached to Windows Server, Amazon RDS does not currently support increasing storage on a _____ DB Instance.

1 Mark(s)

SQL Server SQL Server
MySQL MySQL
Oracle Oracle

Can I initiate a "forced failover" for my Oracle Multi-AZ DB Instance deployment? Can I initiate a "forced failover" for my Oracle Multi-AZ DB Instance deployment?

1 Mark(s)

Yes Yes
Only in certain regions Only in certain regions
Only in VPC Only in VPC
No No

A company is storing data on Amazon Simple Storage Service (S3). The company's security policy mandates that data is encrypted at rest. Which of the following methods can achieve this? A company is storing data on Amazon Simple Storage Service (S3). The company's security policy mandates that data is encrypted at rest. Which of the following methods can achieve this?

1 Mark(s)

Use Amazon S3 server-side encryption with AWS Key Management Service managed keys
Use Amazon S3 server-side encryption with customer-provided keys.
Encrypt the data on the client-side before ingesting to Amazon S3 using their own master key.
All of the above All of the above

Is there a method in the IAM system to allow or deny access to a specific instance? Is there a method in the IAM system to allow or deny access to a specific instance?

1 Mark(s)

Only for VPC based instances Only for VPC based instances
Yes Yes
No No
None of the above None of the above

When should I choose Provisioned IOPS over Standard RDS storage? When should I choose Provisioned IOPS over Standard RDS storage?

1 Mark(s)

If you use production online transaction processing (OLTP) workloads.
If you have batch-oriented workloads If you have batch-oriented workloads
If you have workloads that are not sensitive to consistent performance
None of the above None of the above

An Auto-Scaling group spans 3 AZs and currently has 4 running EC2 instances. When Auto Scaling needs to terminate an EC2 instance by default, AutoScaling will: An Auto-Scaling group spans 3 AZs and currently has 4 running EC2 instances. When Auto Scaling needs to terminate an EC2 instance by default, AutoScaling will:

1 Mark(s)

Allow at least five minutes for Windows/Linux shutdown scripts to complete, before terminating the instance.
Terminate the instance with the least active network connections. If multiple instances meet this criterion, one will be randomly selected.
Send an SNS notification, if configured to do so.Terminate an instance in the AZ which currently has 2 running EC2 instances.
Randomly select one of the 3 AZs, and then terminate an instance in that AZ.

If your DB instance runs out of storage space or file system resources, its status will change to_____ and your DB Instance will no longer be available. If your DB instance runs out of storage space or file system resources, its status will change to_____ and your DB Instance will no longer be available.

1 Mark(s)

storage-overflow storage-overflow
storage-full storage-full
storage-exceed storage-exceed
storage-overage storage-overage

You are tasked with setting up a Linux bastion host for access to Amazon EC2 instances running in your VPC. Only clients connecting from the corporate external public IP address 72.34.51.100 should have SSH access to the host. Which option will meet the customer requirement? You are tasked with setting up a Linux bastion host for access to Amazon EC2 instances running in your VPC. Only clients connecting from the corporate external public IP address 72.34.51.100 should have SSH access to the host. Which option will meet the customer requirement?

1 Mark(s)

Security Group Inbound Rule: Protocol – TCP, Port Range - 22, Source 72.34.51.100/32
Security Group Inbound Rule: Protocol - UDP, Port Range - 22, Source 72.34.51.100/32
Network ACL Inbound Rule: Protocol - UDP, Port Range - 22, Source 72.34.51.100/32
Network ACL Inbound Rule: Protocol - TCP, Port Range-22, Source 72.34.51.100/0

Will I be charged if the DB instance is idle? Will I be charged if the DB instance is idle?

1 Mark(s)

No No
Yes Yes
Only if running in GovCloud Only if running in GovCloud
Only if running in VPC Only if running in VPC

Fill in the blanks: A_____ is a storage device that moves data in sequences of bytes or bits (blocks). Hint: These devices support random access and generally use buffered I/O. Fill in the blanks: A_____ is a storage device that moves data in sequences of bytes or bits (blocks). Hint: These devices support random access and generally use buffered I/O.

1 Mark(s)

block map block map
storage block storage block
mapping device mapping device
block device block device

What does Amazon ElastiCache provide? What does Amazon ElastiCache provide?

1 Mark(s)

A service by this name doesn't exist. Perhaps you mean Amazon CloudCache.
A virtual server with a huge amount of memory.
A managed In-memory cache service. A managed In-memory cache service.
An Amazon EC2 instance with the Memcached software already pre-installed.

How are the EBS snapshots saved on Amazon S3? How are the EBS snapshots saved on Amazon S3?

1 Mark(s)

Exponentially Exponentially
Incrementally Incrementally
EBS snapshots are not stored in the Amazon S3
Decrementally Decrementally

What is the command line instruction for running the remote desktop client in Windows? What is the command line instruction for running the remote desktop client in Windows?

1 Mark(s)

desk.cpl desk.cpl
mstsc mstsc
None of the above None of the above
Both 1 and 2 Both 1 and 2

Is there any way to own a direct connection to Amazon Web Services? Is there any way to own a direct connection to Amazon Web Services?

1 Mark(s)

You can create an encrypted tunnel to VPC, but you don't own the connection.
Yes, it's called Amazon Dedicated Connection.
No, AWS only allows access from the public Internet.
Yes, it's called Direct Connect. Yes, it's called Direct Connect.

However, data in the instance store is lost under the following circumstances: – The underlying disk drive fails– The instance stops– The instance terminates Do the Amazon EBS volumes persist independently from the running life of an Amazon EC2 instance? However, data in the instance store is lost under the following circumstances: – The underlying disk drive fails– The instance stops– The instance terminates Do the Amazon EBS volumes persist independently from the running life of an Amazon EC2 instance?

1 Mark(s)

No No
Only if instructed to when created Only if instructed to when created
Yes Yes
None of the above None of the above

What is an isolated database environment running in the cloud (Amazon RDS) called? What is an isolated database environment running in the cloud (Amazon RDS) called?

1 Mark(s)

DB Instance DB Instance
DB Unit DB Unit
DB Volume DB Volume
DB Server DB Server

Are you able to integrate a multi-factor token service with the AWS Platform? Are you able to integrate a multi-factor token service with the AWS Platform?

1 Mark(s)

No, you cannot integrate multi-factor token devices with the AWS platform.
Yes, you can integrate private multi-factor token devices to authenticate users to the AWS platform.
Yes, using the AWS multi-factor token devices to authenticate users on the AWS platform.
None of these None of these

When you add a rule to a DB security group, you do not need to specify port number or protocol. When you add a rule to a DB security group, you do not need to specify port number or protocol.

1 Mark(s)

Depends on the RDMS used Depends on the RDMS used
1 1
False in some cases False in some cases

What is a placement group? What is a placement group?

1 Mark(s)

A collection of Auto Scaling groups in the same region
A feature that enables EC2 instances to interact with each other via high bandwidth, low latency connections
A collection of authorized CloudFront edge locations for a distribution
A collection of Elastic Load Balancers in the same Region or Availability Zone

Amazon EC2 provides a repository of public data sets that can be seamlessly integrated into AWS cloud-based applications.What is the monthly charge for using the public data sets? Amazon EC2 provides a repository of public data sets that can be seamlessly integrated into AWS cloud-based applications.What is the monthly charge for using the public data sets?

1 Mark(s)

A 1 time charge of 10$ for all the datasets.
1$ per dataset per month 1$ per dataset per month
10$ per month for all the datasets 10$ per month for all the datasets
There is no charge for using the public data sets

The Amazon EC2 web service can be accessed using the _____ web services messaging protocol. This interface is described by a Web Services Description Language (WSDL) document. The Amazon EC2 web service can be accessed using the _____ web services messaging protocol. This interface is described by a Web Services Description Language (WSDL) document.

1 Mark(s)

SOAP SOAP
DCOM DCOM
CORBA CORBA
XML-RPC XML-RPC

Can I use Provisioned IOPS with VPC? Can I use Provisioned IOPS with VPC?

1 Mark(s)

Only Oracle based RDS Only Oracle based RDS
No No
Only with MSSQL based RDS Only with MSSQL based RDS
Yes for all RDS instances Yes for all RDS instances

Amazon EC2 has no Amazon Resource Names (ARNs) because you can't specify a particular Amazon EC2 resource in an IAM policy. Amazon EC2 has no Amazon Resource Names (ARNs) because you can't specify a particular Amazon EC2 resource in an IAM policy.

1 Mark(s)

1 1
Sometimes Sometimes
None of the above None of the above

A company needs to deploy virtual desktops to its customers in a virtual private cloud, leveraging existing security controls. Which set of AWS services and features will meet the company's requirements? A company needs to deploy virtual desktops to its customers in a virtual private cloud, leveraging existing security controls. Which set of AWS services and features will meet the company's requirements?

1 Mark(s)

Virtual Private Network connection. AWS Directory Services, and ClassicLink
Virtual Private Network connection. AWS Directory Services, and Amazon Workspaces
AWS Directory Service, Amazon Workspaces, and AWS Identity and Access Management
Amazon Elastic Compute Cloud, and AWS Identity and Access Management

If you have chosen Multi-AZ deployment, in the event of a planned or unplanned outage of your primary DB Instance, Amazon RDS automatically switches to the standby replica. The automatic failover mechanism simply changes the ______ record of the main DB Instance to point to the standby DB Instance. If you have chosen Multi-AZ deployment, in the event of a planned or unplanned outage of your primary DB Instance, Amazon RDS automatically switches to the standby replica. The automatic failover mechanism simply changes the ______ record of the main DB Instance to point to the standby DB Instance.

1 Mark(s)

DNAME DNAME
CNAME CNAME
TXT TXT
MX MX

Which of the following are characteristics of a reserved instance? Which of the following are characteristics of a reserved instance?

1 Mark(s)

It can be applied to instances launched by Auto Scaling
It is specific to an instance Type It is specific to an instance Type
It can be used to lower Total Cost of Ownership (TCO) of a system
All A,B,C All A,B,C

A company has a workflow that sends video files from their on-premise system to AWS for transcoding. They use EC2 worker instances that pull transcoding jobs from SQS. Why is SQS an appropriate service for this scenario? A company has a workflow that sends video files from their on-premise system to AWS for transcoding. They use EC2 worker instances that pull transcoding jobs from SQS. Why is SQS an appropriate service for this scenario?

1 Mark(s)

SQS guarantees the order of the messages.
SQS synchronously provides transcoding output.
SQS checks the health of the worker instances.
SQS helps to facilitate horizontal scaling of encoding tasks.

My Read Replica appears "stuck" after a Multi-AZ failover and is unable to obtain or apply updates from the source DB Instance. What do I do? My Read Replica appears "stuck" after a Multi-AZ failover and is unable to obtain or apply updates from the source DB Instance. What do I do?

1 Mark(s)

You will need to delete the Read Replica and create a new one to replace it.
You will need to disassociate the DB Engine and re associate it.
The instance should be deployed to Single AZ and then moved to Multi- AZ once again
You will need to delete the DB Instance and create a new one to replace it.

Does Dynamic DB support in-place atomic updates? Does Dynamic DB support in-place atomic updates?

1 Mark(s)

Its not defined Its not defined
No No
Yes Yes
It does supoort non atomic updates It does supoort non atomic updates

Which of the following items are required to allow an application deployed on an EC2 instance to write data to a DynamoDB table? Assume that no security keys are allowed to be stored on the EC2 instance. Which of the following items are required to allow an application deployed on an EC2 instance to write data to a DynamoDB table? Assume that no security keys are allowed to be stored on the EC2 instance.

1 Mark(s)

Create an IAM Role that allows write access to the DynamoDB table. Launch an EC2 Instance with the IAM Role included in the launch configuration.
Add an IAM Role to a running EC2 instance.
Create an IAM User that allows write access to the DynamoDB table.
Add an IAM User to a running EC2 instance.

Per the AWS Acceptable Use Policy, penetration testing of EC2 instances: Per the AWS Acceptable Use Policy, penetration testing of EC2 instances:

1 Mark(s)

May be performed by AWS, and will be performed by AWS upon customer request.
May be performed by AWS, and is periodically performed by AWS.
Are expressly prohibited under all circumstances.
May be performed by the customer on their own instances with prior authorization from AWS.

Can I encrypt connections between my application and my DB Instance using SSL? Can I encrypt connections between my application and my DB Instance using SSL?

1 Mark(s)

No No
Yes Yes
Only in VPC Only in VPC
Only in certain regions Only in certain regions

Can I delete a snapshot of the root device of an EBS volume used by a registered AMI? Can I delete a snapshot of the root device of an EBS volume used by a registered AMI?

1 Mark(s)

Only via API Only via API
Only via Console Only via Console
Yes Yes
No No

If I want my instance to run on a single-tenant hardware, which value do I have to set the instance's tenancy attribute to? If I want my instance to run on a single-tenant hardware, which value do I have to set the instance's tenancy attribute to?

1 Mark(s)

dedicated dedicated
isolated isolated
one one
reserved reserved

After creating a new IAM user which of the following must be done before they can successfully make API calls? After creating a new IAM user which of the following must be done before they can successfully make API calls?

1 Mark(s)

Add a password to the user. Add a password to the user.
Enable Multi-Factor Authentication for the user.
Assign a Password Policy to the user. Assign a Password Policy to the user.
Create a set of Access Keys for the user.

What does Amazon EBS stand for? What does Amazon EBS stand for?

1 Mark(s)

Elastic Block Storage Elastic Block Storage
Elastic Business Server Elastic Business Server
Elastic Blade Server Elastic Blade Server
Elastic Block Store Elastic Block Store

Can the string value of 'Key' be prefixed with :aws:"? Can the string value of 'Key' be prefixed with :aws:"?

1 Mark(s)

Only in GovCloud Only in GovCloud
Only for S3 not EC2 Only for S3 not EC2
Yes Yes
No No

The new DB Instance that is created when you promote a Read Replica retains the backup window period. The new DB Instance that is created when you promote a Read Replica retains the backup window period.

1 Mark(s)

true
false
sometimes
under special circumstances

For which of the following use cases are Simple Workflow Service (SWF) and Amazon EC2 an appropriate solution? For which of the following use cases are Simple Workflow Service (SWF) and Amazon EC2 an appropriate solution?

1 Mark(s)

Using as an endpoint to collect thousands of data points per hour from a distributed fleet of sensors.Managing a multi-step and multi-decision checkout process of an e-commerce website
Orchestrating the execution of distributed and auditable business processes
Using as an SNS (Simple Notification Service) endpoint to trigger execution of video transcoding jobs
Using as a distributed session store for your web application

Which of the following features ensures even distribution of traffic to Amazon EC2 instances in multiple Availability Zones registered with a load balancer? Which of the following features ensures even distribution of traffic to Amazon EC2 instances in multiple Availability Zones registered with a load balancer?

1 Mark(s)

Elastic Load Balancing request routing Elastic Load Balancing request routing
An Amazon Route 53 weighted routing policy
Elastic Load Balancing cross-zone load balancing
An Amazon Route 53 latency routing policy

To help you manage your Amazon EC2 instances, images, and other Amazon EC2 resources, you can assign your own metadata to each resource in the form of____________ To help you manage your Amazon EC2 instances, images, and other Amazon EC2 resources, you can assign your own metadata to each resource in the form of____________

1 Mark(s)

special filters special filters
functions functions
tags tags
wildcards wildcards

What does Amazon RDS stand for? What does Amazon RDS stand for?

1 Mark(s)

Regional Data Server. Regional Data Server.
Relational Database Service. Relational Database Service.
Nothing. Nothing.
Regional Database Service. Regional Database Service.

Is the encryption of connections between my application and my DB Instance using SSL for the MySQL server engines available? Is the encryption of connections between my application and my DB Instance using SSL for the MySQL server engines available?

1 Mark(s)

Yes Yes
Only in VPC Only in VPC
Only in certain regions Only in certain regions
No No

Does AWS Direct Connect allow you access to all Availabilities Zones within a Region? Does AWS Direct Connect allow you access to all Availabilities Zones within a Region?

1 Mark(s)

Depends on the type of connection Depends on the type of connection
Only when there's just one availability zone in a region. If there are more than one, only one availability zone can be accessed directly.
No No
Yes Yes

Please select the Amazon EC2 resource which can be tagged. Please select the Amazon EC2 resource which can be tagged.

1 Mark(s)

key pairs key pairs
Elastic IP addresses Elastic IP addresses
placement groups placement groups
Amazon EBS snapshots Amazon EBS snapshots

In order to optimize performance for a compute cluster that requires low inter-node latency, which of the following feature should you use? In order to optimize performance for a compute cluster that requires low inter-node latency, which of the following feature should you use?

1 Mark(s)

Multiple Availability Zones Multiple Availability Zones
AWS Direct Connect AWS Direct Connect
EC2 Dedicated Instances EC2 Dedicated Instances
Placement Groups Placement Groups

The SQL Server _____ feature is an efficient means of copying data from a source database to your DB Instance. It writes the data that you specify to a data file, such as an ASCII file. The SQL Server _____ feature is an efficient means of copying data from a source database to your DB Instance. It writes the data that you specify to a data file, such as an ASCII file.

1 Mark(s)

bulk copy bulk copy
group copy group copy
dual copy dual copy
mass copy mass copy

A customer needs to capture all client connection information from their load balancer every five minutes. The company wants to use this data for analyzing traffic patterns and troubleshooting their applications. Which of the following options meets the customer requirements? A customer needs to capture all client connection information from their load balancer every five minutes. The company wants to use this data for analyzing traffic patterns and troubleshooting their applications. Which of the following options meets the customer requirements?

1 Mark(s)

Enable AWS CloudTrail for the load balancer.
Enable access logs on the load balancer.
Install the Amazon CloudWatch Logs agent on the load balancer.
Enable Amazon CloudWatch metrics on the load balancer.

A customer is leveraging Amazon Simple Storage Service in eu-west-1 to store static content for a web-based property. The customer is storing objects using the Standard Storage class. Where are the customer’s objects replicated? A customer is leveraging Amazon Simple Storage Service in eu-west-1 to store static content for a web-based property. The customer is storing objects using the Standard Storage class. Where are the customer’s objects replicated?

1 Mark(s)

A single facility in eu-west-1 and a single facility in eu-central-1
A single facility in eu-west-1 and a single facility in us-east-1
Multiple facilities in eu-west-1 Multiple facilities in eu-west-1
A single facility in eu-west-1 A single facility in eu-west-1

Amazon RDS automated backups and DB Snapshots are currently supported for only the ______ storage engine Amazon RDS automated backups and DB Snapshots are currently supported for only the ______ storage engine

1 Mark(s)

MyISAM MyISAM
InnoDB InnoDB
Boith A and B Boith A and B
None of the above None of the above

____________ embodies the "share-nothing" architecture and essentially involves breaking a large database into several smaller databases. Common ways to split a database include 1) splitting tables that are not joined in the same query onto different hosts or 2) duplicating a table across multiple hosts and then using a hashing algorithm to determine which host receives a given update. ____________ embodies the "share-nothing" architecture and essentially involves breaking a large database into several smaller databases. Common ways to split a database include 1) splitting tables that are not joined in the same query onto different hosts or 2) duplicating a table across multiple hosts and then using a hashing algorithm to determine which host receives a given update.

1 Mark(s)

Sharding Sharding
Failure recovery Failure recovery
Federation Federation
DDL operations DDL operations

Which of the following are valid statements about Amazon S3? Which of the following are valid statements about Amazon S3?

1 Mark(s)

S3 provides read-after-write consistency for any type of PUT or DELETE.
Consistency is not guaranteed for any type of PUT or DELETE.
A successful response to a PUT request only occurs when a complete object is saved.S3 provides eventual consistency for overwrite PUTS and DELETES.
Partially saved objects are immediately readable with a GET after an overwrite PUT.

You can modify the backup retention period; valid values are 0 (for no backup retention) to a maximum of ___________ days. You can modify the backup retention period; valid values are 0 (for no backup retention) to a maximum of ___________ days.

1 Mark(s)

45 45
35 35
15 15
5 5

Fill in the blanks: _____ is a durable, block-level storage volume that you can attach to a single, running Amazon EC2 instance. Fill in the blanks: _____ is a durable, block-level storage volume that you can attach to a single, running Amazon EC2 instance.

1 Mark(s)

Amazon S3 Amazon S3
Amazon EBS Amazon EBS
None of these None of these
All of these All of these

What is the charge for the data transfer incurred in replicating data between your primary and standby? What is the charge for the data transfer incurred in replicating data between your primary and standby?

1 Mark(s)

No charge. It is free. No charge. It is free.
Double the standard data transfer charge
Same as the standard data transfer charge
Half of the standard data transfer charge

Select the correct set of options. These are the initial settings for the default security group: Select the correct set of options. These are the initial settings for the default security group:

1 Mark(s)

Allow no inbound traffic, Allow all outbound traffic and Allow instances associated with this security group to talk to each other
Allow all inbound traffic, Allow no outbound traffic and Allow instances associated with this security group to talk to each other
Allow no inbound traffic, Allow all outbound traffic and Does NOT allow instances associated with this security group to talk to each other
Allow all inbound traffic, Allow all outbound traffic and Does NOT allow instances associated with this security group to talk to each other

Can I detach the primary (eth0) network interface when the instance is running or stopped? Can I detach the primary (eth0) network interface when the instance is running or stopped?

1 Mark(s)

Yes, You can. Yes, You can.
No you cannot No you cannot
Depends on the state of the interface at the time
Depends on the type of nterface Depends on the type of nterface

A customer wants to leverage Amazon Simple Storage Service (S3) and Amazon Glacier as part of their backup and archive infrastructure. The customer plans to use third-party software to support this integration. Which approach will limit the access of the third party software to only the Amazon S3 bucket named "company-backup"? A customer wants to leverage Amazon Simple Storage Service (S3) and Amazon Glacier as part of their backup and archive infrastructure. The customer plans to use third-party software to support this integration. Which approach will limit the access of the third party software to only the Amazon S3 bucket named "company-backup"?

1 Mark(s)

A custom bucket policy limited to the Amazon S3 API in thee Amazon Glacier archive "company-backup"
A custom bucket policy limited to the Amazon S3 API in "company-backup"
A custom IAM user policy limited to the Amazon S3 API for the Amazon Glacier archive "company-backup".
A custom IAM user policy limited to the Amazon S3 API in "company-backup".

Amazon S3 doesn't automatically give a user who creates _____ permission to perform other actions on that bucket or object. Amazon S3 doesn't automatically give a user who creates _____ permission to perform other actions on that bucket or object.

1 Mark(s)

a file a file
a bucket or object a bucket or object
a bucket or file a bucket or file
a object or file a object or file

What's an ECU? What's an ECU?

1 Mark(s)

Extended Cluster User. Extended Cluster User.
None of these. None of these.
Elastic Computer Usage. Elastic Computer Usage.
Elastic Compute Unit. Elastic Compute Unit.

Is it possible to access your EBS snapshots? Is it possible to access your EBS snapshots?

1 Mark(s)

Yes, through the Amazon S3 APIs. Yes, through the Amazon S3 APIs.
Yes, through the Amazon EC2 APIs. Yes, through the Amazon EC2 APIs.
No, EBS snapshots cannot be accessed; they can only be used to create a new EBS volume
EBS doesn't provide snapshots. EBS doesn't provide snapshots.

Amazon RDS supports SOAP only through __________. Amazon RDS supports SOAP only through __________.

1 Mark(s)

HTTP or HTTPS HTTP or HTTPS
TCP/IP TCP/IP
HTTP HTTP
HTTPS HTTPS

Which features can be used to restrict access to data in S3? Choose 2 answers Which features can be used to restrict access to data in S3? Choose 2 answers

1 Mark(s)

Set an S3 ACL on the bucket or the object. Set an S3 bucket policy.
Create a CloudFront distribution for the bucket.
Enable IAM Identity Federation Enable IAM Identity Federation
Use S3 Virtual Hosting Use S3 Virtual Hosting

Please select the most correct answer regarding the persistence of the Amazon Instance Store Please select the most correct answer regarding the persistence of the Amazon Instance Store

1 Mark(s)

The data on an instance store volume persists only during the life of the associated Amazon EC2 instance
The data on an instance store volume is lost when the security group rule of the associated instance is changed.
The data on an instance store volume persists even after associated Amazon EC2 instance is deleted
None of these None of these

When automatic failover occurs, Amazon RDS will emit a DB Instance event to inform you that automatic failover occurred. You can use the _____ to return information about events related to your DB Instance When automatic failover occurs, Amazon RDS will emit a DB Instance event to inform you that automatic failover occurred. You can use the _____ to return information about events related to your DB Instance

1 Mark(s)

FetchFailure FetchFailure
DescriveFailure DescriveFailure
DescribeEvents DescribeEvents
FetchEvents FetchEvents

Is there a limit to the number of groups you can have? Is there a limit to the number of groups you can have?

1 Mark(s)

Yes for all users except root Yes for all users except root
No No
Yes unless special permission granted Yes unless special permission granted
Yes for all users Yes for all users

Your web application front end consists of multiple EC2 instances behind an Elastic Load Balancer. You configured ELB to perform health checks on these EC2 instances, if an instance fails to pass health checks, which statement will be true? Your web application front end consists of multiple EC2 instances behind an Elastic Load Balancer. You configured ELB to perform health checks on these EC2 instances, if an instance fails to pass health checks, which statement will be true?

1 Mark(s)

The instance gets terminated automatically by the ELB.
The instance gets quarantined by the ELB for root cause analysis.
The instance is replaced automatically by the ELB.
The ELB stops sending traffic to the instance that failed its health check.

Your application provides data transformation services. Files containing data to be transformed are first uploaded to Amazon S3 and then transformed by a fleet of spot EC2 instances. Files submitted by your premium customers must be transformed with the highest priority. How should you implement such a system? Your application provides data transformation services. Files containing data to be transformed are first uploaded to Amazon S3 and then transformed by a fleet of spot EC2 instances. Files submitted by your premium customers must be transformed with the highest priority. How should you implement such a system?

1 Mark(s)

A. Use a DynamoDB table with an attribute defining the priority level. Transformation instances will scan the table for tasks, sorting the results by priority level.
Use Route 53 latency based-routing to send high priority tasks to the closest transformation instances.
Use two SQS queues, one for high priority messages, the other for default priority. Transformation instances first poll the high priority queue; if there is no message, they poll the default priority queue.
Use a single SQS queue. Each message contains the priority level. Transformation instances poll high-priority messages first.

When you put objects in Amazon S3, what is the indication that an object was successfully stored? When you put objects in Amazon S3, what is the indication that an object was successfully stored?

1 Mark(s)

A HTTP 200 result code and MD5 checksum, taken together, indicate that the operation was successful.
Amazon S3 is engineered for 99.999999999% durability. Therefore there is no need to confirm that data was inserted.
A success code is inserted into the S3 object metadata.
Each S3 account has a special bucket named _s3_logs. Success codes are written to this bucket with a timestamp and checksum.

Will I be alerted when automatic failover occurs? Will I be alerted when automatic failover occurs?

1 Mark(s)

Only if SNS configured Only if SNS configured
No No
Yes Yes
Only if Cloudwatch configured Only if Cloudwatch configured

When you resize the Amazon RDS DB instance, Amazon RDS will perform the upgrade during the next maintenance window. If you want the upgrade to be performed now, rather than waiting for the maintenance window, specify the _____ option. When you resize the Amazon RDS DB instance, Amazon RDS will perform the upgrade during the next maintenance window. If you want the upgrade to be performed now, rather than waiting for the maintenance window, specify the _____ option.

1 Mark(s)

ApplyNow ApplyNow
ApplySoon ApplySoon
ApplyThis ApplyThis
ApplyImmediately ApplyImmediately

You have launched an Amazon Elastic Compute Cloud (EC2) instance into a public subnet with a primary private IP address assigned, an internet gateway is attached to the VPC, and the public route table is configured to send all Internet-based traffic to the Internet gateway. The instance security group is set to allow all outbound traffic but cannot access the internet. Why is the Internet unreachable from this instance? You have launched an Amazon Elastic Compute Cloud (EC2) instance into a public subnet with a primary private IP address assigned, an internet gateway is attached to the VPC, and the public route table is configured to send all Internet-based traffic to the Internet gateway. The instance security group is set to allow all outbound traffic but cannot access the internet. Why is the Internet unreachable from this instance?

1 Mark(s)

The instance does not have a public IP address.
The internet gateway security group must allow all outbound traffic.
The instance security group must allow all inbound traffic.
The instance "Source/Destination check" property must be enabled.

If I modify a DB Instance or the DB parameter group associated with the instance, should I reboot the instance for the changes to take effect? If I modify a DB Instance or the DB parameter group associated with the instance, should I reboot the instance for the changes to take effect?

1 Mark(s)

No No
Yes Yes
wont have any effect wont have any effect
None of the above None of the above

How can you secure data at rest on an EBS volume? How can you secure data at rest on an EBS volume?

1 Mark(s)

Write the data randomly instead of sequentially.
Encrypt the volume using the S3 server-side encryption service.
Create an IAM policy that restricts read and write access to the volume.
Use an encrypted file system on top of the EBS volume.

In regards to IAM you can edit user properties later, but you cannot use the console to change the ___________. In regards to IAM you can edit user properties later, but you cannot use the console to change the ___________.

1 Mark(s)

user name user name
password password
default group default group
You can change anything You can change anything

Regarding the attaching of ENI to an instance, what does 'warm attach' refer to? Regarding the attaching of ENI to an instance, what does 'warm attach' refer to?

1 Mark(s)

Attaching an ENI to an instance when it is stopped
This question doesn't make sense. This question doesn't make sense.
Attaching an ENI to an instance when it is running
Attaching an ENI to an instance during the launch process

Can I attach more than one policy to a particular entity? Can I attach more than one policy to a particular entity?

1 Mark(s)

Yes always Yes always
Only if within GovCloud Only if within GovCloud
No No
Only if within VPC Only if within VPC

A Provisioned IOPS volume must be at least __________ GB in size A Provisioned IOPS volume must be at least __________ GB in size

1 Mark(s)

1 1
50 50
20 20
Decrementally Decrementally

After an Amazon VPC instance is launched, can I change the VPC security groups it belongs to? After an Amazon VPC instance is launched, can I change the VPC security groups it belongs to?

1 Mark(s)

No. You cannot. No. You cannot.
Yes. You can. Yes. You can.
Only if you are the root user Only if you are the root user
Only if the tag "VPC_Change_Group" is true

You are configuring your company's application to use Auto Scaling and need to move user state information. Which of the following AWS services provides a shared data store with durability and low latency? You are configuring your company's application to use Auto Scaling and need to move user state information. Which of the following AWS services provides a shared data store with durability and low latency?

1 Mark(s)

AWS ElastiCache Memcached AWS ElastiCache Memcached
Amazon Simple Storage Service Amazon Simple Storage Service
Amazon EC2 instance storage Amazon EC2 instance storage
Amazon DynamoDB Amazon DynamoDB

You launch an Amazon EC2 instance without an assigned AVVS identity and Access Management (IAM) role. Later, you decide that the instance should be running with an IAM role. Which action must you take in order to have a running Amazon EC2 instance with an IAM role assigned to it? You launch an Amazon EC2 instance without an assigned AVVS identity and Access Management (IAM) role. Later, you decide that the instance should be running with an IAM role. Which action must you take in order to have a running Amazon EC2 instance with an IAM role assigned to it?

1 Mark(s)

Create an image of the instance, and register the image with an IAM role assigned and an Amazon EBS volume mapping.
Create a new IAM role with the same permissions as an existing IAM role, and assign it to the running instance.
Create an image of the instance, add a new IAM role with the same permissions as the desired IAM role, and deregister the image with the new role assigned.
Create an image of the instance, and use this image to launch a new instance with the desired IAM role assigned.

HTTP Query-based requests are HTTP requests that use the HTTP verb GET or POST and a Query parameter named_____________. HTTP Query-based requests are HTTP requests that use the HTTP verb GET or POST and a Query parameter named_____________.

1 Mark(s)

Action Action
Value Value
Reset Reset
Retrieve Retrieve

If you want to launch Amazon Elastic Compute Cloud (EC2) instances and assign each instance a predetermined private IP address you should: If you want to launch Amazon Elastic Compute Cloud (EC2) instances and assign each instance a predetermined private IP address you should:

1 Mark(s)

Launch the instance from a private Amazon Machine Image (AMI).
Assign a group of sequential Elastic IP address to the instances.
Launch the instances in the Amazon Virtual Private Cloud (VPC).
Launch the instances in a Placement Group.

Which DNS name can only be resolved within Amazon EC2? Which DNS name can only be resolved within Amazon EC2?

1 Mark(s)

Internal DNS name Internal DNS name
External DNS name External DNS name
Global DNS name Global DNS name
Private DNS name Private DNS name

If you add a tag that has the same key as an existing tag on a DB Instance, the new value overwrites the old value. If you add a tag that has the same key as an existing tag on a DB Instance, the new value overwrites the old value.

1 Mark(s)

1 1
Sometimes False Sometimes False
none of the above none of the above

REST or Query requests are HTTP or HTTPS requests that use an HTTP verb (such as GET or POST) and a parameter named Action or Operation that specifies the API you are calling. REST or Query requests are HTTP or HTTPS requests that use an HTTP verb (such as GET or POST) and a parameter named Action or Operation that specifies the API you are calling.

1 Mark(s)

1 1
True in some cases True in some cases
False in some cases False in some cases

You have an EC2 Security Group with several running EC2 instances. You change the Security Group rules to allow inbound traffic on a new port and protocol, and launch several new instances in the same Security Group. The new rules apply: You have an EC2 Security Group with several running EC2 instances. You change the Security Group rules to allow inbound traffic on a new port and protocol, and launch several new instances in the same Security Group. The new rules apply:

1 Mark(s)

Immediately to all instances in the security group.
Immediately to the new instances only. Immediately to the new instances only.
Immediately to the new instances, but old instances must be stopped and restarted before the new rules apply.
To all instances, but it may take several minutes for old instances to see the changes.

1 Mark(s)

SQL Server
MySQL
Oracle
None of these

Does Route 53 support MX Records? Does Route 53 support MX Records?

1 Mark(s)

Yes. Yes.
It supports CNAME records, but not MX records.
No No
Only Primary MX records. Secondary MX records are not supported.

You are using an m1.small EC2 Instance with one 300 GB EBS volume to host a relational database. You determined that write throughput to the database needs to be increased. Which of the following approaches can help achieve this? You are using an m1.small EC2 Instance with one 300 GB EBS volume to host a relational database. You determined that write throughput to the database needs to be increased. Which of the following approaches can help achieve this?

1 Mark(s)

Use an array of EBS volumes. Use an array of EBS volumes.
Enable Multi-AZ mode. Enable Multi-AZ mode.
Place the instance in an Auto Scaling Groups
Add an EBS volume and place into RAID 5, increase the size of the EC2 Instance.

When you use the AWS Management Console to delete an IAM user, IAM also deletes any signing certificates and any access keys belonging to the user. When you use the AWS Management Console to delete an IAM user, IAM also deletes any signing certificates and any access keys belonging to the user.

1 Mark(s)

This is configurable This is configurable
1 1
None of these None of these

What happens to the I/O operations while you take a database snapshot? What happens to the I/O operations while you take a database snapshot?

1 Mark(s)

I/O operations to the database are suspended for an hour while the backup is in progress.
I/O operations to the database are sent to a Replica (if available) for a few minutes while the backup is in progress.
I/O operations will be functioning normally
I/O operations to the database are suspended for a few minutes while the backup is in progress.

If I have multiple Read Replicas for my master DB Instance and I promote one of them, what happens to the rest of the Read Replicas? If I have multiple Read Replicas for my master DB Instance and I promote one of them, what happens to the rest of the Read Replicas?

1 Mark(s)

The remaining Read Replicas will still replicate from the older master DB Instance
The remaining Read Replicas will be deleted
The remaining Read Replicas will be combined to one read replica
None of the above None of the above

Fill in the blanks: "To ensure failover capabilities, consider using a _____ for incoming traffic on a network interface". Fill in the blanks: "To ensure failover capabilities, consider using a _____ for incoming traffic on a network interface".

1 Mark(s)

primary public IP primary public IP
secondary private IP secondary private IP
secondary public IP secondary public IP
add on secondary IP add on secondary IP

What is one key difference between an Amazon EBS-backed and an instance-store backed instance? What is one key difference between an Amazon EBS-backed and an instance-store backed instance?

1 Mark(s)

Amazon EBS-backed instances can be stopped and restarted.
Instance-store backed instances can be stopped and restarted.
Auto scaling requires using Amazon EBS-backed instances.
Virtual Private Cloud requires EBS backed instances.

Can I initiate a "forced failover" for my MySQL Multi-AZ DB Instance deployment? Can I initiate a "forced failover" for my MySQL Multi-AZ DB Instance deployment?

1 Mark(s)

Only in certain regions Only in certain regions
Only in VPC Only in VPC
Yes Yes
No No

In AWS, which security aspects are the customer's responsibility? In AWS, which security aspects are the customer's responsibility?

1 Mark(s)

Security Group and ACL (Access Control List) settings
Life-cycle management of IAM credentials
Patch management on the EC2 instance's operating system, Encryption of EBS (Elastic Block Storage) volumes
All of the above All of the above

What does Amazon Route53 provide? What does Amazon Route53 provide?

1 Mark(s)

A global Content Delivery Network. A global Content Delivery Network.
None of these. None of these.
A scalable Domain Name System. A scalable Domain Name System.
An SSH endpoint for Amazon EC2. An SSH endpoint for Amazon EC2.

Can I test my DB Instance against a new version before upgrading? Can I test my DB Instance against a new version before upgrading?

1 Mark(s)

No No
Yes Yes
Only in VPC Only in VPC
Sometimes Sometimes

Do the system resources on the Micro instance meet the recommended configuration for Oracle? Do the system resources on the Micro instance meet the recommended configuration for Oracle?

1 Mark(s)

Yes completely Yes completely
Yes but only for certain situations Yes but only for certain situations
Not in any circumstance Not in any circumstance

How can an EBS volume that is currently attached to an EC2 instance be migrated from one Availability Zone to another? How can an EBS volume that is currently attached to an EC2 instance be migrated from one Availability Zone to another?

1 Mark(s)

Detach the volume and attach it to another EC2 instance in the other AZ.
Simply create a new volume in the other AZ and specify the original volume as the source.
Create a snapshot of the volume, and create a new volume from the snapshot in the other AZ.
Detach the volume, then use the ec2-migrate-voiume command to move it to another AZ.

Select the correct set of steps for exposing the snapshot only to specific AWS accounts Select the correct set of steps for exposing the snapshot only to specific AWS accounts

1 Mark(s)

Select public for all the accounts and check mark those accounts with whom you want to expose the snapshots and click save.
SelectPrivate, enter the IDs of those AWS accounts, and clickSave.
SelectPublic, enter the IDs of those AWS accounts, and clickSave.
SelectPublic, mark the IDs of those AWS accounts as private, and clickSave.

MySQL installations default to port _____. MySQL installations default to port _____.

1 Mark(s)

3306 3306
443 443
80 80
1158 1158

A group can contain many users. Can a user belong to multiple groups? A group can contain many users. Can a user belong to multiple groups?

1 Mark(s)

Yes always Yes always
No No
Yes but only if they are using two factor authentication
Yes but only in VPC Yes but only in VPC

It is advised that you watch the Amazon CloudWatch "_____" metric (available via the AWS Management Console or Amazon Cloud Watch APIs) carefully and recreate the Read Replica should it fall behind due to replication errors. It is advised that you watch the Amazon CloudWatch "_____" metric (available via the AWS Management Console or Amazon Cloud Watch APIs) carefully and recreate the Read Replica should it fall behind due to replication errors.

1 Mark(s)

Write Lag Write Lag
Read Replica Read Replica
Replica Lag Replica Lag
Single Replica Single Replica

You need to configure an Amazon S3 bucket to serve static assets for your public-facing web application. Which methods ensure that all objects uploaded to the bucket are set to public read? You need to configure an Amazon S3 bucket to serve static assets for your public-facing web application. Which methods ensure that all objects uploaded to the bucket are set to public read?

1 Mark(s)

Set permissions on the object to public read during upload.
Configure the bucket ACL to set all objects to public read.Configure the bucket policy to set all objects to public read.
Use AWS Identity and Access Management roles to set the bucket to public read.
Amazon S3 objects default to public read, so no action is needed.

Is decreasing the storage size of a DB Instance permitted? Is decreasing the storage size of a DB Instance permitted?

1 Mark(s)

Depends on the RDMS used Depends on the RDMS used
Yes Yes
No No
None of the above None of the above

A __________ is a document that provides a formal statement of one or more permissions. A __________ is a document that provides a formal statement of one or more permissions.

1 Mark(s)

policy policy
permission permission
Role Role
resource resource

After an Amazon VPC instance is launched, can I change the VPC security groups it belongs to? After an Amazon VPC instance is launched, can I change the VPC security groups it belongs to?

1 Mark(s)

Only if the tag "VPC_Change_Group" is true
Yes. You can. Yes. You can.
No. You cannot. No. You cannot.
Only if the tag "VPC Change Group" is true

You have a web application running on six Amazon EC2 instances, consuming about 45% of resources on each instance. You are using auto-scaling to make sure that six instances are running at all times. The number of requests this application processes is consistent and does not experience spikes. The application is critical to your business and you want high availability at all times. You want the load to be distributed evenly between all instances. You also want to use the same Amazon Machine Image (AMI) for all instances. Which of the following architectural choices should you make? You have a web application running on six Amazon EC2 instances, consuming about 45% of resources on each instance. You are using auto-scaling to make sure that six instances are running at all times. The number of requests this application processes is consistent and does not experience spikes. The application is critical to your business and you want high availability at all times. You want the load to be distributed evenly between all instances. You also want to use the same Amazon Machine Image (AMI) for all instances. Which of the following architectural choices should you make?

1 Mark(s)

Deploy 6 EC2 instances in one availability zone and use Amazon Elastic Load Balancer.
Deploy 3 EC2 instances in one region and 3 in another region and use Amazon Elastic Load Balancer.
Deploy 3 EC2 instances in one availability zone and 3 in another availability zone and use Amazon Elastic Load Balancer.
Deploy 2 EC2 instances in three regions and use Amazon Elastic Load Balancer.

Through which of the following interfaces is AWS Identity and Access Management available? Through which of the following interfaces is AWS Identity and Access Management available?

1 Mark(s)

AWS Management Console AWS Management Console
Command line interface (CLI) Command line interface (CLI)
IAM Query API IAM Query API
All of the above All of the above

A____________ is an individual, system, or application that interacts with AWS programmatically. A____________ is an individual, system, or application that interacts with AWS programmatically.

1 Mark(s)

user user
AWS Account AWS Account
Group Group
Role Role

What is the maximum response time for a Business level Premium Support case? What is the maximum response time for a Business level Premium Support case?

1 Mark(s)

30 minutes 30 minutes
1 hour 1 hour
12 hours 12 hours
10 minutes 10 minutes

Amazon RDS creates an SSL certificate and installs the certificate on the DB Instance when Amazon RDS provisions the instance. These certificates are signed by a certificate authority. The _____ is stored athttps://rds.amazonaws.com/doc/rds-ssl-ca-cert.pem. Amazon RDS creates an SSL certificate and installs the certificate on the DB Instance when Amazon RDS provisions the instance. These certificates are signed by a certificate authority. The _____ is stored athttps://rds.amazonaws.com/doc/rds-ssl-ca-cert.pem.

1 Mark(s)

private key private key
foreign key foreign key
public key public key
protected key protected key

A customer needs corporate IT governance and cost oversight of all AWS resources consumed by its divisions. The divisions want to maintain administrative control of the discrete AWS resources they consume and keep those resources separate from the resources of other divisions. Which of the following options, when used together will support the autonomy/control of divisions while enabling corporate IT to maintain governance and cost oversight? A customer needs corporate IT governance and cost oversight of all AWS resources consumed by its divisions. The divisions want to maintain administrative control of the discrete AWS resources they consume and keep those resources separate from the resources of other divisions. Which of the following options, when used together will support the autonomy/control of divisions while enabling corporate IT to maintain governance and cost oversight?

1 Mark(s)

Use AWS Consolidated Billing and disable AWS root account access for the child accounts.
Enable IAM cross-account access for all corporate IT administrators in each child account.
Create separate VPCs for each division within the corporate IT AWS account.
Use AWS Consolidated Billing to link the divisions' accounts to a parent corporate account.Write all child AWS CloudTrail and Amazon CloudWatch logs to each child account's Amazon S3 'Log' bucket.

If you are using Amazon RDS Provisioned IOPS storage with MySQL and Oracle database engines, you can scale the throughput of your database Instance by specifying the IOPS rate from __________ . If you are using Amazon RDS Provisioned IOPS storage with MySQL and Oracle database engines, you can scale the throughput of your database Instance by specifying the IOPS rate from __________ .

1 Mark(s)

1,000 to 1, 00, 000 1,000 to 1, 00, 000
100 to 1, 000 100 to 1, 000
10, 000 to 1, 00, 000 10, 000 to 1, 00, 000
1, 000 to 10, 000 1, 000 to 10, 000

What does the "Server Side Encryption" option on Amazon S3 provide? What does the "Server Side Encryption" option on Amazon S3 provide?

1 Mark(s)

It provides an encrypted virtual disk in the Cloud.
It doesn't exist for Amazon S3, but only for Amazon EC2.
It encrypts the files that you send to Amazon S3, on the server side.
It allows to upload files using an SSL endpoint, for a secure transfer.

If you're unable to connect via SSH to your EC2 instance, which of the following should you check and possibly correct to restore connectivity? If you're unable to connect via SSH to your EC2 instance, which of the following should you check and possibly correct to restore connectivity?

1 Mark(s)

Adjust Security Group to permit egress traffic over TCP port 443 from your IP.
Configure the IAM role to permit changes to security group settings.
Modify the instance security group to allow ingress of ICMP packets from your IP.
Adjust the instance's Security Group to permit ingress traffic over port 22 from your IP.

What is a Security Group? What is a Security Group?

1 Mark(s)

None of these. None of these.
A list of users that can access Amazon EC2 instances.
An Access Control List (ACL) for AWS resources.
A firewall for inbound traffic, built-in around every Amazon EC2 instance.

Making your snapshot public shares all snapshot data with everyone. Can the snapshots with AWS Marketplace product codes be made public? Making your snapshot public shares all snapshot data with everyone. Can the snapshots with AWS Marketplace product codes be made public?

1 Mark(s)

No No
Yes Yes
Sometimes No Sometimes No
None of these None of these

Can the string value of 'Key' be prefixed with laws? Can the string value of 'Key' be prefixed with laws?

1 Mark(s)

No No
Only for EC2 not S3 Only for EC2 not S3
Yes Yes
Only for S3 not EC Only for S3 not EC

Which of the following requires a custom CloudWatch metric to monitor? Which of the following requires a custom CloudWatch metric to monitor?

1 Mark(s)

Memory Utilization of an EC2 instance Memory Utilization of an EC2 instance
CPU Utilization of an EC2 instance CPU Utilization of an EC2 instance
Data transfer of an EC2 instance Data transfer of an EC2 instance
Disk usage activity of an EC2 instance Disk usage activity of an EC2 instance

Is creating a Read Replica of another Read Replica supported? Is creating a Read Replica of another Read Replica supported?

1 Mark(s)

Only in VPC Only in VPC
Yes Yes
Only in certain regions Only in certain regions
No No

You are working with a customer who has 10 TB of archival data that they want to migrate to Amazon Glacier. The customer has a 1-Mbps connection to the Internet. Which service or feature provides the fastest method of getting the data into Amazon Glacier? You are working with a customer who has 10 TB of archival data that they want to migrate to Amazon Glacier. The customer has a 1-Mbps connection to the Internet. Which service or feature provides the fastest method of getting the data into Amazon Glacier?

1 Mark(s)

Amazon Glacier multipart upload Amazon Glacier multipart upload
AWS Storage Gateway AWS Storage Gateway
VM Import/Export VM Import/Export
AWS Import/Export AWS Import/Export

A company is building a two-tier web application to serve dynamic transaction-based content. The data tier is leveraging an Online Transactional Processing (OLTP) database. What services should you leverage to enable an elastic and scalable web tier? A company is building a two-tier web application to serve dynamic transaction-based content. The data tier is leveraging an Online Transactional Processing (OLTP) database. What services should you leverage to enable an elastic and scalable web tier?

1 Mark(s)

Elastic Load Balancing, Amazon EC2, and Auto Scaling
Elastic Load Balancing, Amazon RDS with Multi-AZ, and Amazon S3
Amazon RDS with Multi-AZ and Auto Scaling
Amazon EC2, Amazon DynamoDB, and Amazon S3

In the context of MySQL, version numbers are organized as MySQL version = X.Y.Z. What does X denote here? In the context of MySQL, version numbers are organized as MySQL version = X.Y.Z. What does X denote here?

1 Mark(s)

release level release level
minor version minor version
version number version number
major version major version

The _____ service is targeted at organizations with multiple users or systems that use AWS products such as Amazon EC2, Amazon SimpleDB, and the AWS Management Console. The _____ service is targeted at organizations with multiple users or systems that use AWS products such as Amazon EC2, Amazon SimpleDB, and the AWS Management Console.

1 Mark(s)

Amazon RDS Amazon RDS
AWS Integrity Management AWS Integrity Management
AWS Identity and Access Management AWS Identity and Access Management
Amazon EMR Amazon EMR

What does Amazon ELB stand for? What does Amazon ELB stand for?

1 Mark(s)

Elastic Linux Box. Elastic Linux Box.
Encrypted Linux Box. Encrypted Linux Box.
Encrypted Load Balancing. Encrypted Load Balancing.
Elastic Load Balancing. Elastic Load Balancing.

Select the incorrect statement Select the incorrect statement

1 Mark(s)

In Amazon EC2, the private IP addresses only returned to Amazon EC2 when the instance is stopped or terminated
In Amazon VPC, an instance retains its private IP addresses when the instance is stopped.
In Amazon VPC, an instance does NOT retain its private IP addresses when the instance is stopped.
In Amazon EC2, the private IP address is associated exclusively with the instance for its lifetime

Please select the Amazon EC2 resource which cannot be tagged. Please select the Amazon EC2 resource which cannot be tagged.

1 Mark(s)

images (AMIs, kernels, RAM disks) images (AMIs, kernels, RAM disks)
Amazon EBS volumes Amazon EBS volumes
Elastic IP addresses Elastic IP addresses
VPCs VPCs

1 Mark(s)

Same as the standard data transfer charge
Double the standard data transfer charge
No charge. It is free No charge. It is free
Half of the standard data transfer charge

A __________ is the concept of allowing (or disallowing) an entity such as a user, group, or role some type of access to one or more resources. A __________ is the concept of allowing (or disallowing) an entity such as a user, group, or role some type of access to one or more resources.

1 Mark(s)

user
AWS Account
resource
permission

What does Amazon CloudFormation provide? What does Amazon CloudFormation provide?

1 Mark(s)

None of these. None of these.
The ability to setup Autoscaling for Amazon EC2 instances.
A template to map network resources for Amazon Web Services.
A templated resource creation for Amazon Web Services.

How can the domain's zone apex, for example, "myzoneapexdomain.com", be pointed towards an Elastic Load Balancer? How can the domain's zone apex, for example, "myzoneapexdomain.com", be pointed towards an Elastic Load Balancer?

1 Mark(s)

By using an Amazon Route 53 Alias record
By using an AAAA record By using an AAAA record
By using an Amazon Route 53 CNAME record
By using an A record By using an A record

What are the four levels of AWS Premium Support? What are the four levels of AWS Premium Support?

1 Mark(s)

Basic, Developer, Business, Enterprise Basic, Developer, Business, Enterprise
Basic, Startup, Business, Enterprise Basic, Startup, Business, Enterprise
Free, Bronze, Silver, Gold Free, Bronze, Silver, Gold
All support is free All support is free

You have a video transcoding application running on Amazon EC2. Each instance polls a queue to find out which video should be transcoded, and then runs a transcoding process. If this process is interrupted, the video will be transcoded by another instance based on the queuing system. You have a large backlog of videos which need to be transcoded and would like to reduce this backlog by adding more instances. You will need these instances only until the backlog is reduced. Which type of Amazon EC2 instances should you use to reduce the backlog in the most cost efficient way? You have a video transcoding application running on Amazon EC2. Each instance polls a queue to find out which video should be transcoded, and then runs a transcoding process. If this process is interrupted, the video will be transcoded by another instance based on the queuing system. You have a large backlog of videos which need to be transcoded and would like to reduce this backlog by adding more instances. You will need these instances only until the backlog is reduced. Which type of Amazon EC2 instances should you use to reduce the backlog in the most cost efficient way?

1 Mark(s)

Reserved instances Reserved instances
Spot instances Spot instances
Dedicated instances Dedicated instances
On-demand instances On-demand instances

You have an environment that consists of a public subnet using Amazon VPC and 3 instances that are running in this subnet. These three instances can successfully communicate with other hosts on the Internet. You launch a fourth instance in the same subnet, using the same AMI and security group configuration you used for the others, but find that this instance cannot be accessed from the internet. What should you do to enable Internet access? You have an environment that consists of a public subnet using Amazon VPC and 3 instances that are running in this subnet. These three instances can successfully communicate with other hosts on the Internet. You launch a fourth instance in the same subnet, using the same AMI and security group configuration you used for the others, but find that this instance cannot be accessed from the internet. What should you do to enable Internet access?

1 Mark(s)

Deploy a NAT instance into the public subnet.
Assign an Elastic IP address to the fourth instance.
Configure a publically routable IP Address in the host OS of the fourth instance.
Modify the routing table for the public subnet.

What are characteristics of Amazon S3? What are characteristics of Amazon S3?

1 Mark(s)

S3 allows you to store objects of virtually unlimited size.
S3 offers Provisioned IOPS. S3 offers Provisioned IOPS.
S3 allows you to store unlimited amounts of data.Objects are directly accessible via a URL.
S3 should be used to host a relational database.

You are building a solution for a customer to extend their on-premises data center to AWS. The customer requires a 50-Mbps dedicated and private connection to their VPC. Which AWS product or feature satisfies this requirement? You are building a solution for a customer to extend their on-premises data center to AWS. The customer requires a 50-Mbps dedicated and private connection to their VPC. Which AWS product or feature satisfies this requirement?

1 Mark(s)

Amazon VPC peering Amazon VPC peering
Elastic IP Addresses Elastic IP Addresses
AWS Direct Connect AWS Direct Connect
Amazon VPC virtual private gateway Amazon VPC virtual private gateway

What is the name of licensing model in which I can use your existing Oracle Database licenses to run Oracle deployments on Amazon RDS? What is the name of licensing model in which I can use your existing Oracle Database licenses to run Oracle deployments on Amazon RDS?

1 Mark(s)

Bring Your Own License Bring Your Own License
Role Bases License Role Bases License
Enterprise License Enterprise License
License Included License Included

Is the SQL Server Audit feature supported in the Amazon RDS SQL Server engine? Is the SQL Server Audit feature supported in the Amazon RDS SQL Server engine?

1 Mark(s)

No No
Yes Yes
Sometimes Sometimes
Always Always

Does Amazon RDS for SQL Server currently support importing data into the msdb database? Does Amazon RDS for SQL Server currently support importing data into the msdb database?

1 Mark(s)

No No
Yes Yes
Sometimes Sometimes
None of the above None of the above

If an Amazon EBS volume is the root device of an instance, can I detach it without stopping the instance? If an Amazon EBS volume is the root device of an instance, can I detach it without stopping the instance?

1 Mark(s)

Yes but only if Windows instance Yes but only if Windows instance
No No
Yes Yes
Yes but only if a Linux instance Yes but only if a Linux instance

Select the correct statement: Select the correct statement:

1 Mark(s)

You don't need not specify the resource identifier while stopping a resource
You can terminate, stop, or delete a resource based solely on its tags
You can't terminate, stop, or delete a resource based solely on its tags
You don't need to specify the resource identifier while terminating a resource

The one-time payment for Reserved Instances is __________ refundable if the reservation is cancelled. The one-time payment for Reserved Instances is __________ refundable if the reservation is cancelled.

1 Mark(s)

always always
in some cirmunstances in some cirmunstances
never never
Its not paid but free Its not paid but free

A company wants to implement their website in a virtual private cloud (VPC). The web tier will use an Auto Scaling group across multiple Availability Zones (AZs). The database will use Multi-AZ RDS MySQL and should not be publicly accessible. What is the minimum number of subnets that need to be configured in the VPC? A company wants to implement their website in a virtual private cloud (VPC). The web tier will use an Auto Scaling group across multiple Availability Zones (AZs). The database will use Multi-AZ RDS MySQL and should not be publicly accessible. What is the minimum number of subnets that need to be configured in the VPC?

1 Mark(s)

When using consolidated billing there are two account types. What are they? When using consolidated billing there are two account types. What are they?

1 Mark(s)

Paying account and Linked account Paying account and Linked account
Parent account and Child account Parent account and Child account
Main account and Sub account. Main account and Sub account.
Main account and Secondary account. Main account and Secondary account.

Are you able to integrate a multi-factor token service with the AWS Platform? Are you able to integrate a multi-factor token service with the AWS Platform?

1 Mark(s)

Yes, you can integrate private multi-factor token devices to authenticate users to the AWS platform.
No, you cannot integrate multi-factor token devices with the AWS platform.
Yes, using the AWS multi-factor token devices to authenticate users on the AWS platform.
None of the above None of the above

Within the IAM service a GROUP is regarded as a: Within the IAM service a GROUP is regarded as a:

1 Mark(s)

A collection of AWS accounts A collection of AWS accounts
It's the group of EC2 machines that gain the permissions specified in the GROUP.
There's no GROUP in IAM, but only USERS and RESOURCES.
A collection of users. A collection of users.

What can I access by visiting the URL: http://status.aws.amazon.com/? What can I access by visiting the URL: http://status.aws.amazon.com/?

1 Mark(s)

Amazon Cloud Watch Amazon Cloud Watch
Status of the Amazon RDS DB Status of the Amazon RDS DB
AWS Service Health Dashboard AWS Service Health Dashboard
AWS Cloud Monitor AWS Cloud Monitor

A client application requires operating system privileges on a relational database server. What is an appropriate configuration for a highly available database architecture? A client application requires operating system privileges on a relational database server. What is an appropriate configuration for a highly available database architecture?

1 Mark(s)

A standalone Amazon EC2 instance A standalone Amazon EC2 instance
Amazon RDS in a Multi-AZ configuration Amazon RDS in a Multi-AZ configuration
Amazon EC2 instances in a replication configuration utilizing a single Availability Zone
Amazon EC2 instances in a replication configuration utilizing two different Availability Zones

What happens when you create a topic on Amazon SNS? What happens when you create a topic on Amazon SNS?

1 Mark(s)

The topic is created, and it has the name you specified for it.
An ARN (Amazon Resource Name) is created.
You can create a topic on Amazon SQS, not on Amazon SNS.
This question doesn't make sense. This question doesn't make sense.

Without _____, you must either create multiple AWS accounts-each with its own billing and subscriptions to AWS products-or your employees must share the security credentials of a single AWS account. Without _____, you must either create multiple AWS accounts-each with its own billing and subscriptions to AWS products-or your employees must share the security credentials of a single AWS account.

1 Mark(s)

Amazon RDS Amazon RDS
Amazon Glacier Amazon Glacier
Amazon EMR Amazon EMR
Amazon IAM Amazon IAM

You run an ad-supported photo sharing website using S3 to serve photos to visitors of your site. At some point you find out that other sites have been linking to the photos on your site, causing loss to your business. What is an effective method to mitigate this? You run an ad-supported photo sharing website using S3 to serve photos to visitors of your site. At some point you find out that other sites have been linking to the photos on your site, causing loss to your business. What is an effective method to mitigate this?

1 Mark(s)

Remove public read access and use signed URLs with expiry dates.
Use CloudFront distributions for static content.
Block the IPs of the offending websites in Security Groups.
Store photos on an EBS volume of the web server.

Is there a limit to the number of groups you can have? Is there a limit to the number of groups you can have?

1 Mark(s)

Yes for all users Yes for all users
Yes for all users except root Yes for all users except root
No No
Yes unless special permission granted Yes unless special permission granted

You are working with a customer who is using Chef configuration management in their data center. Which service is designed to let the customer leverage existing Chef recipes in AWS? You are working with a customer who is using Chef configuration management in their data center. Which service is designed to let the customer leverage existing Chef recipes in AWS?

1 Mark(s)

Amazon Simple Workflow Service Amazon Simple Workflow Service
AWS Elastic Beanstalk AWS Elastic Beanstalk
AWS CloudFormation AWS CloudFormation
AWS OpsWorks AWS OpsWorks

What does Amazon CloudFormation provide? What does Amazon CloudFormation provide?

1 Mark(s)

The ability to setup Autoscaling for Amazon EC2 instances.
None of these. None of these.
A templated resource creation for Amazon Web Services.
A template to map network resources for Amazon Web Services.

You can use _____ and _____ to help secure the instances in your VPC. You can use _____ and _____ to help secure the instances in your VPC.

1 Mark(s)

security groups and multi-factor authentication
security groups and multi-factor authentication
security groups and biometric authentication
security groups and network ACLs security groups and network ACLs

Can I test my DB Instance against a new version before upgrading? Can I test my DB Instance against a new version before upgrading?

1 Mark(s)

Only in VPC Only in VPC
NO NO
Yes Yes
None of the above None of the above

When an EC2 EBS-backed (EBS root) instance is stopped, what happens to the data on any ephemeral store volumes? When an EC2 EBS-backed (EBS root) instance is stopped, what happens to the data on any ephemeral store volumes?

1 Mark(s)

Data is automatically saved in an EBS volume.
Data is unavailable until the instance is restarted.
Data will be deleted and will no longer be accessible.
Data is automatically saved as an EBS snapshot.

An instance is launched into a VPC subnet with the network ACL configured to allow all inbound traffic and deny all outbound traffic. The instance's security group is configured to allow SSH from any IP address and deny all outbound traffic. What changes need to be made to allow SSH access to the instance? An instance is launched into a VPC subnet with the network ACL configured to allow all inbound traffic and deny all outbound traffic. The instance's security group is configured to allow SSH from any IP address and deny all outbound traffic. What changes need to be made to allow SSH access to the instance?

1 Mark(s)

The outbound security group needs to be modified to allow outbound traffic.
The outbound network ACL needs to be modified to allow outbound traffic.
Nothing, it can be accessed from any IP address using SSH.
Both the outbound security group and outbound network ACL need to be modified to allow outbound traffic.

If I want to run a database in an Amazon instance, which is the most recommended Amazon storage option? If I want to run a database in an Amazon instance, which is the most recommended Amazon storage option?

1 Mark(s)

Amazon Instance Storage Amazon Instance Storage
Amazon EBS Amazon EBS
You can't run a database inside an Amazon instance
Amazon S3 Amazon S3

In the 'Detailed' monitoring data available for your Amazon EBS volumes, Provisioned IOPS volumes automatically send _____ minute metrics to Amazon CloudWatch. In the 'Detailed' monitoring data available for your Amazon EBS volumes, Provisioned IOPS volumes automatically send _____ minute metrics to Amazon CloudWatch.

1 Mark(s)

Which services allow the customer to retain full administrative privileges of the underlying EC2 instances? Which services allow the customer to retain full administrative privileges of the underlying EC2 instances?

1 Mark(s)

Amazon Relational Database Service Amazon Relational Database Service
Amazon Elastic Map Reduce,AWS Elastic Beanstalk
Amazon ElastiCache Amazon ElastiCache
Amazon DynamoDB Amazon DynamoDB

If I scale the storage capacity provisioned to my DB Instance by mid of a billing month, how will I be charged? If I scale the storage capacity provisioned to my DB Instance by mid of a billing month, how will I be charged?

1 Mark(s)

You will be charged for the highest storage capacity you have used
On a proration basis On a proration basis
You will be charged for the lowest storage capacity you have used
You will ot be chraged You will ot be chraged

Which technique can be used to integrate AWS IAM (Identity and Access Management) with an on-premise LDAP (Lightweight Directory Access Protocol) directory service? Which technique can be used to integrate AWS IAM (Identity and Access Management) with an on-premise LDAP (Lightweight Directory Access Protocol) directory service?

1 Mark(s)

Use an IAM policy that references the LDAP account identifiers and the AWS credentials
Use SAML (Security Assertion Markup Language) to enable single sign-on between AWS and LDAP.
Use AWS Security Token Service from an identity broker to issue short-lived AWS credentials.
Use IAM roles to automatically rotate the IAM credentials when LDAP credentials are updated.

What does Amazon SES stand for? What does Amazon SES stand for?

1 Mark(s)

Simple Elastic Server Simple Elastic Server
Simple Email Service Simple Email Service
Software Email Solution Software Email Solution
Software Enabled Server Software Enabled Server

When creation of an EBS snapshot is initiated, but not completed, the EBS volume: When creation of an EBS snapshot is initiated, but not completed, the EBS volume:

1 Mark(s)

Can be used while the snapshot is in progress.
Cannot be detached or attached to an EC2 instance until the snapshot completes
Can be used in read-only mode while the snapshot is in progress.
Cannot be used until the snapshot completes.

Multi-AZ deployment ___________ supported for Microsoft SQL Server DB Instances. Multi-AZ deployment ___________ supported for Microsoft SQL Server DB Instances.

1 Mark(s)

is not currently is not currently
is as of 2013 is as of 2013
is planned to be in 2014 is planned to be in 2014
will never be will never be

Without IAM, you cannot control the tasks a particular user or system can do and what AWS resources they might use. Without IAM, you cannot control the tasks a particular user or system can do and what AWS resources they might use.

1 Mark(s)

1 1
Sometimes TRUE Sometimes TRUE
None of these None of these

After launching an instance that you intend to serve as a NAT (Network Address Translation) device in a public subnet you modify your route tables to have the NAT device be the target of internet bound traffic of your private subnet. When you try and make an outbound connection to the internet from an instance in the private subnet, you are not successful. Which of the following steps could resolve the issue? After launching an instance that you intend to serve as a NAT (Network Address Translation) device in a public subnet you modify your route tables to have the NAT device be the target of internet bound traffic of your private subnet. When you try and make an outbound connection to the internet from an instance in the private subnet, you are not successful. Which of the following steps could resolve the issue?

1 Mark(s)

Disabling the Source/Destination Check attribute on the NAT instance
Attaching an Elastic IP address to the instance in the private subnet
Attaching a second Elastic Network Interface (ENI) to the NAT instance, and placing it in the private subnet
Attaching a second Elastic Network Interface (ENI) to the instance in the private subnet, and placing it in the public subnet

Are you able to integrate a multi-factor token service with the AWS Platform? Are you able to integrate a multi-factor token service with the AWS Platform?

1 Mark(s)

Yes, using the AWS multi-factor token devices to authenticate users on the AWS platform.
No, you cannot integrate multi-factor token devices with the AWS platform.
Yes, you can integrate private multi-factor token devices to authenticate users to the AWS platform.
None of the above None of the above

What is the default maximum number of MFA devices in use per AWS account (at the root account level)? What is the default maximum number of MFA devices in use per AWS account (at the root account level)?

1 Mark(s)

1 1
5 5
15 15
10 10

Do the Amazon EBS volumes persist independently from the running life of an Amazon EC2 instance? Do the Amazon EBS volumes persist independently from the running life of an Amazon EC2 instance?

1 Mark(s)

Only if instructed to when created Only if instructed to when created
Yes Yes
No No
Sometimes Sometimes

Which Amazon storage do you think is the best for my database-style applications that frequently encounter many random reads and writes across the dataset? Which Amazon storage do you think is the best for my database-style applications that frequently encounter many random reads and writes across the dataset?

1 Mark(s)

None of these. None of these.
Amazon Instance Storage Amazon Instance Storage
Any of these Any of these
Amazon EBS Amazon EBS

By default what are ENIs that are automatically created and attached to instances using the EC2 console set to do when the attached instance terminates? By default what are ENIs that are automatically created and attached to instances using the EC2 console set to do when the attached instance terminates?

1 Mark(s)

Remain as is Remain as is
Terminate Terminate
Hibernate Hibernate
Pause Pause

What does Amazon Elastic Beanstalk provide? What does Amazon Elastic Beanstalk provide?

1 Mark(s)

An application container on top of Amazon Web Services.
A scalable storage appliance on top of Amazon Web Services.
A scalable cluster of EC2 instances. A scalable cluster of EC2 instances.
A service by this name doesn't exist. A service by this name doesn't exist.

What is the maximum response time for a Business level Premium Support case? What is the maximum response time for a Business level Premium Support case?

1 Mark(s)

120 seconds 120 seconds
1 hour 1 hour
10 minutes 10 minutes
12 hours 12 hours

In the Amazon RDS which uses the SQL Server engine, what is the maximum size for a Microsoft SQL Server DB Instance with SQL Server Express edition? In the Amazon RDS which uses the SQL Server engine, what is the maximum size for a Microsoft SQL Server DB Instance with SQL Server Express edition?

1 Mark(s)

10 GB per DB 10 GB per DB
100 GB per DB 100 GB per DB
2 TB per DB 2 TB per DB
1TB per DB 1TB per DB

What is the maximum response time for a Business level Premium Support case? What is the maximum response time for a Business level Premium Support case?

1 Mark(s)

30 minutes 30 minutes
You always get instant responses (within a few seconds).
10 minutes 10 minutes
1 hour 1 hour

When using the following AWS services, which should be implemented in multiple Availability Zones for high availability solutions? When using the following AWS services, which should be implemented in multiple Availability Zones for high availability solutions?

1 Mark(s)

Amazon DynamoDB Amazon DynamoDB
Amazon Elastic Compute Cloud (EC2),Amazon Elastic Load Balancing
Amazon Simple Notification Service (SNS)
Amazon Simple Storage Service (S3) Amazon Simple Storage Service (S3)