Question1: While signing in REST/ Query requests, for additional security, you should transmit your requests using Secure Sockets Layer (SSL) by using _________
Question2: Is creating a Read Replica of another Read Replica supported?
Question3: Can I encrypt connections between my application and my DB Instance using SSL?
Question4: If I want an instance to have a public IP address, which IP address should I use?
Question5: Can Amazon S3 uploads resume on failure or do they need to restart?
Question6: Can I move a Reserved Instance from one Region to another?
Question7: You have launched an Amazon Elastic Compute Cloud (EC2) instance into a public subnet with a primary private IP address assigned, an internet gateway is attached to the VPC, and the public route table is configured to send all Internet-based traffic to the Internet gateway. The instance security group is set to allow all outbound traffic but cannot access the internet. Why is the Internet unreachable from this instance?
Question8: You are migrating a legacy client-server application to AWS The application responds to a specific DNS domain (e g www example com) and has a 2-tier architecture, with multiple application servers and a database server Remote clients use TCP to connect to the application servers. The application servers need to know the IP address of the clients in order to function properly and are currently taking that information from the TCP socket A Multi-AZ RDS MySQL instance will be used for the database.
During the migration you can change the application code but you have to file a change request.
How would you implement the architecture on AWS In order to maximize scalability and high ability?
Question9: A 3-tier e-commerce web application is current deployed on-premises and will be migrated to AWS for greater scalability and elasticity The web server currently shares read-only data using a network distributed file system The app server tier uses a clustering mechanism for discovery and shared session state that depends on IP multicast The database tier uses shared-storage clustering to provide database fall over capability, and uses several read slaves for scaling Data on all servers and the distributed file system directory is backed up weekly to off-site tapes
Which AWS storage and database architecture meets the requirements of the application?
Question10: You are designing an intrusion detection prevention (IDS/IPS) solution for a customer web application in a single VPC. You are considering the options for implementing IOS IPS protection for traffic coming from the Internet.
Which of the following options would you consider? (Choose 2 answers)
Question11: You are configuring your company's application to use Auto Scaling and need to move user state information. Which of the following AWS services provides a shared data store with durability and low latency?
Question12: Can we attach an EBS volume to more than one EC2 instance at the same time?
Question13: You have decided to change the instance type for instances running in your application tier that is using Auto Scaling. In which area below would you change the instance type definition?
Question14: If I want my instance to run on a single-tenant hardware, which value do I have to set the instance's tenancy attribute to?
Question15: REST or Query requests are HTTP or HTTPS requests that use an HTTP verb (such as GET or POST) and a parameter named Action or Operation that specifies the API you are calling.
Question16: How can I change the security group membership for interfaces owned by other AWS, such as Elastic Load Balancing?
Question17: If I want to run a database in an Amazon instance, which is the most recommended Amazon storage option?
Question18: Do the system resources on the Micro instance meet the recommended configuration for Oracle?
Question19: What happens to the data on an instance if the instance reboots (intentionally or unintentionally)?
Question20: In the Launch Db Instance Wizard, where can I select the backup and maintenance options?
Question21: Which of the following requires a custom CloudWatch metric to monitor?
Question22: Which of the following approaches provides the lowest cost for Amazon Elastic Block Store snapshots while giving you the ability to fully restore data?
Question23: A benefits enrollment company is hosting a 3-tier web application running in a VPC on AWS which includes a NAT (Network Address Translation) instance in the public Web tier. There is enough provisioned capacity for the expected workload tor the new fiscal year benefit enrollment period plus some extra overhead Enrollment proceeds nicely for two days and then the web tier becomes unresponsive, upon investigation using CloudWatch and other monitoring tools it is discovered that there is an extremely large and unanticipated amount of inbound traffic coming from a set of 15 specific IP addresses over port 80 from a country where the benefits company has no customers. The web tier instances are so overloaded that benefit enrollment administrators cannot even SSH into them. Which activity would be useful in defending against this attack?
Question24: What are the initial settings of an user created security group?
Question25: Typically, you want your application to check whether a request generated an error before you spend any time processing results. The easiest way to find out if an error occurred is to look for an __________ node in the response from the Amazon RDS API.
Question26: You are implementing a URL whitelisting system for a company that wants to restrict outbound HTTP'S connections to specific domains from their EC2-hosted applications you deploy a single EC2 instance running proxy software and configure It to accept traffic from all subnets and EC2 instances in the VPC. You configure the proxy to only pass through traffic to domains that you define in its whitelist configuration You have a nightly maintenance window or 10 minutes where ail instances fetch new software updates. Each update Is about 200MB In size and there are 500 instances In the VPC that routinely fetch updates After a few days you notice that some machines are failing to successfully download some, but not all of their updates within the maintenance window The download URLs used for these updates are correctly listed in the proxy's whitelist configuration and you are able to access them manually using a web browser on the instances What might be happening? (Choose 2 answers)
Question27: You are designing Internet connectivity for your VPC. The Web servers must be available on the Internet. The application must have a highly available architecture.
Which alternatives should you consider? (Choose 2 answers)
Question28: After an Amazon VPC instance is launched, can I change the VPC security groups it
belongs to?
Question29: A __________ is the concept of allowing (or disallowing) an entity such as a user, group, or role some type of access to one or more resources.
Question30: How many Elastic IP by default in Amazon Account?
Question31: Will my standby RDS instance be in the same Availability Zone as my primary?
Question32: To help you manage your Amazon EC2 instances, images, and other Amazon EC2
resources, you can assign your own metadata to each resource in the form of____________
Question33: An Auto-Scaling group spans 3 AZs and currently has 4 running EC2 instances. When Auto Scaling needs to terminate an EC2 instance by default, AutoScaling will:
Choose 2 answers
Question34: You must assign each server to at least _____ security group
Question35: True or False: When you add a rule to a DB security group, you do not need to specify port number or protocol.
Question36: What's an ECU?
Question37: A large real-estate brokerage is exploring the option o( adding a cost-effective location based alert to their existing mobile application The application backend infrastructure currently runs on AWS Users who opt in to this service will receive alerts on their mobile device regarding real-estate otters in proximity to their location. For the alerts to be relevant delivery time needs to be in the low minute count the existing mobile app has 5 million users across the us Which one of the following architectural suggestions would you make to the customer?
Question38: Does Dynamic DB support in-place atomic updates?
Question39: You are deploying an application to track GPS coordinates of delivery trucks in the United States. Coordinates are transmitted from each delivery truck once every three seconds. You need to design an architecture that will enable real-time processing of these coordinates from multiple consumers. Which service should you use to implement data ingestion?
Question40: You need to configure an Amazon S3 bucket to serve static assets for your public-facing web application. Which methods ensure that all objects uploaded to the bucket are set to public read? Choose 2 answers
Question41: Your company has an on-premises multi-tier PHP web application, which recently experienced downtime due to a large burst In web traffic due to a company announcement Over the coming days, you are expecting similar announcements to drive similar unpredictable bursts, and are looking to find ways to quickly improve your infrastructures ability to handle unexpected increases in traffic.
The application currently consists of 2 tiers A web tier which consists of a load balancer and several Linux Apache web servers as well as a database tier which hosts a Linux server hosting a MySQL database.
Which scenario below will provide full site functionality, while helping to improve the ability of your application in the short timeframe required?
Question42: For which of the following use cases are Simple Workflow Service (SWF) and Amazon EC2 an appropriate solution? Choose 2 answers
Question43: What does Amazon SWF stand for?
Question44: You are tasked with setting up a Linux bastion host for access to Amazon EC2 instances running in your VPC. Only clients connecting from the corporate external public IP address
72.34.51.100 should have SSH access to the host. Which option will meet the customer requirement?
Question45: In the Amazon cloudwatch, which metric should I be checking to ensure that your DB Instance has enough free storage space?
Question46: What is Amazon Glacier?
Question47: Fill in the blanks: _________ let you categorize your EC2 resources in different ways, for example, by purpose, owner, or environment.
Question48: You have an application running on an EC2 Instance which will allow users to download flies from a private S3 bucket using a pre-assigned URL. Before generating the URL the application should verify the existence of the file in S3.
How should the application use AWS credentials to access the S3 bucket securely?
Question49: Every user you create in the IAM system starts with _________.
Question50: How can you secure data at rest on an EBS volume?
Question51: Which of the following instance types are available as Amazon EBS-backed only? Choose 2 answers
Question52: Does AWS Direct Connect allow you access to all Availabilities Zones within a Region?
Question53: Which of the following are characteristics of a reserved instance? Choose 3 answers
Question54: If I modify a DB Instance or the DB parameter group associated with the instance, should I reboot the instance for the changes to take effect?
Question55: You deployed your company website using Elastic Beanstalk and you enabled log file rotation to S3. An Elastic Map Reduce job is periodically analyzing the logs on S3 to build a usage dashboard that you share with your CIO. You recently improved overall performance of the website using Cloud Front for dynamic content delivery and your website as the origin
After this architectural change, the usage dashboard shows that the traffic on your website dropped by an order of magnitude. How do you fix your usage dashboard'?
Question56: How can an EBS volume that is currently attached to an EC2 instance be migrated from one Availability Zone to another?
Question57: Out of the stripping options available for the EBS volumes, which one has the following disadvantage : 'Doubles the amount of I/O required from the instance to EBS compared to RAID 0, because you're mirroring all writes to a pair of volumes, limiting how much you can stripe.' ?
Question58: Is there a limit to the number of groups you can have?
Question59: Can you create IAM security credentials for existing users?
Question60: 
Refer to the architecture diagram above of a batch processing solution using Simple Queue Service (SOS) to set up a message queue between EC2 instances which are used as batch processors Cloud Watch monitors the number of Job requests (queued messages) and an Auto Scaling group adds or deletes batch servers automatically based on parameters set in Cloud Watch alarms. You can use this architecture to implement which of the following features in a cost effective and efficient manner?
Question61: Your firm has uploaded a large amount of aerial image data to S3 In the past, in your on-premises environment, you used a dedicated group of servers to oaten process this data and used Rabbit MQ - An open source messaging system to get job information to the servers. Once processed the data would go to tape and be shipped offsite. Your manager told you to stay with the current design, and leverage AWS archival storage and messaging services to minimize cost. Which is correct?
Question62: Which Amazon Elastic Compute Cloud feature can you query from within the instance to access instance properties?
Question63: If you're unable to connect via SSH to your EC2 instance, which of the following should you check and possibly correct to restore connectivity?
Question64: Which service enables AWS customers to manage users and permissions in AWS?
Question65: You have launched an EC2 instance with four (4) 500 GB EBS Provisioned IOPS volumes attached The EC2 Instance Is EBS-Optimized and supports 500 Mbps throughput between EC2 and EBS The two EBS volumes are configured as a single RAID o device, and each Provisioned IOPS volume is provisioned with 4.000 IOPS (4 000 16KB reads or writes) for a total of 16.000 random IOPS on the instance The EC2 Instance initially delivers the expected 16 000 IOPS random read and write performance Sometime later in order to increase the total random I/O performance of the instance, you add an additional two 500 GB EBS Provisioned IOPS volumes to the RAID Each volume Is provisioned to 4.000 lOPs like the original four for a total of 24.000 IOPS on the EC2 instance Monitoring shows that the EC2 instance CPU utilization increased from 50% to 70%. but the total random IOPS measured at the instance level does not increase at all.
What is the problem and a valid solution?
Question66: When an EC2 EBS-backed (EBS root) instance is stopped, what happens to the data on any ephemeral store volumes?
Question67: Regarding the attaching of ENI to an instance, what does 'warm attach' refer to?
Question68: An enterprise wants to use a third-party SaaS application. The SaaS application needs to have access to issue several API commands to discover Amazon EC2 resources running within the enterprise's account The enterprise has internal security policies that require any outside access to their environment must conform to the principles of least privilege and there must be controls in place to ensure that the credentials used by the SaaS vendor cannot be used by any other third party. Which of the following would meet all of these conditions?
Question69: Is it possible to access your EBS snapshots?
Question70: Read Replicas require a transactional storage engine and are only supported for the _________ storage engine
Question71: You need to pass a custom script to new Amazon Linux instances created in your Auto Scaling group. Which feature allows you to accomplish this?
Question72: Because of the extensibility limitations of striped storage attached to Windows Server,
Amazon RDS does not currently support increasing storage on a _____ DB Instance.
Question73: Amazon RDS supports SOAP only through __________.
Question74: Is there a method in the IAM system to allow or deny access to a specific instance?
Question75: You run an ad-supported photo sharing website using S3 to serve photos to visitors of your site. At some point you find out that other sites have been linking to the photos on your site, causing loss to your business. What is an effective method to mitigate this?
Question76: A company is building a two-tier web application to serve dynamic transaction-based content. The data tier is leveraging an Online Transactional Processing (OLTP) database. What services should you leverage to enable an elastic and scalable web tier?
Question77: The Trusted Advisor service provides insight regarding which four categories of an AWS account?
Question78: By default what are ENIs that are automatically created and attached to instances using the EC2 console set to do when the attached instance terminates?
Question79: How are the EBS snapshots saved on Amazon S3?
Question80: While performing the volume status checks, if the status is insufficient-data, what does it mean?
Question81: What does the following command do with respect to the Amazon EC2 security groups?
ec2-create-group CreateSecurityGroup
Question82: Is there a limit to the number of groups you can have?
Question83: A web-startup runs its very successful social news application on Amazon EC2 with an Elastic Load Balancer, an Auto-Scaling group of Java/Tomcat application-servers, and DynamoDB as data store. The main web-application best runs on m2 x large instances since it is highly memory- bound Each new deployment requires semi-automated creation and testing of a new AMI for the application servers which takes quite a while ana is therefore only done once per week.
Recently, a new chat feature has been implemented in nodejs and wails to be integrated in the architecture. First tests show that the new component is CPU bound Because the company has some experience with using Chef, they decided to streamline the deployment process and use AWS Ops Works as an application life cycle tool to simplify management of the application and reduce the deployment cycles.
What configuration in AWS Ops Works is necessary to integrate the new chat module in the most cost-efficient and flexible way?
Question84: Are you able to integrate a multi-factor token service with the AWS Platform?
Question85: If your DB instance runs out of storage space or file system resources, its status will change to_____ and your DB Instance will no longer be available.
Question86: You have an EC2 Security Group with several running EC2 instances. You change the Security Group rules to allow inbound traffic on a new port and protocol, and launch several new instances in the same Security Group. The new rules apply:
Question87: True or False: Automated backups are enabled by default for a new DB Instance.
Question88: A __________ is a document that provides a formal statement of one or more permissions.
Question89: Which features can be used to restrict access to data in S3? Choose 2 answers
Question90: When should I choose Provisioned IOPS over Standard RDS storage?
Question91: What is a placement group?
Question92: Your company has HQ in Tokyo and branch offices all over the world and is using a logistics software with a multi-regional deployment on AWS in Japan, Europe and USA.
The logistic software has a 3-tier architecture and currently uses MySQL 5.6 for data persistence. Each region has deployed its own database
In the HQ region you run an hourly batch process reading data from every region to compute cross-regional reports that are sent by email to all offices this batch process must be completed as fast as possible to quickly optimize logistics how do you build the database architecture in order to meet the requirements'?
Question93: You require the ability to analyze a customer's clickstream data on a website so they can do behavioral analysis. Your customer needs to know what sequence of pages and ads
their customer clicked on. This data will be used in real time to modify the page layouts as customers click through the site to increase stickiness and advertising click-through. Which option meets the requirements for captioning and analyzing this data?
Question94: What is the charge for the data transfer incurred in replicating data between your primary and standby?
Question95: Which AWS instance address has the following characteristics? :"If you stop an instance, its Elastic IP address is unmapped, and you must remap it when you restart the instance."
Question96: Which is the default region in AWS?
Question97: Through which of the following interfaces is AWS Identity and Access Management available?
A) AWS Management Console B) Command line interface (CLI) C) IAM Query API D) Existing libraries
Question98: What is Oracle SQL Developer?
Question99: What happens to the I/O operations while you take a database snapshot?
Question100: You have been asked to design the storage layer for an application. The application requires disk performance of at least 100,000 IOPS in addition, the storage layer must be able to survive the loss of an individual disk. EC2 instance, or Availability Zone without any data loss. The volume you provide must have a capacity of at least 3 TB. Which of the following designs will meet these objectives'?
Question101: Can I use Provisioned IOPS with VPC?
Question102: What is the charge for the data transfer incurred in replicating data between your primary and standby?
Question103: Your team has a tomcat-based Java application you need to deploy into development, test and production environments. After some research, you opt to use Elastic Beanstalk due to
its tight integration with your developer tools and RDS due to its ease of management. Your QA team lead points out that you need to roll a sanitized set of production data into your environment on a nightly basis. Similarly, other software teams in your org want access to that same restored data via their EC2 instances in your VPC .The optimal setup for persistence and security that meets the above requirements would be the following.
Question104: You must increase storage size in increments of at least __________ %
Question105: True or False: Manually created DB Snapshots are deleted after the DB Instance is deleted.
Question106: A company is running a batch analysis every hour on their main transactional DB. running on an RDS MySQL instance to populate their central Data Warehouse running on Redshift During the execution of the batch their transactional applications are very slow When the batch completes they need to update the top management dashboard with the new data The dashboard is produced by another system running on-premises that is currently started when a manually-sent email notifies that an update is required The on-premises system cannot be modified because is managed by another team.
How would you optimize this scenario to solve performance issues and automate the process as much as possible?
Question107: A customer wants to leverage Amazon Simple Storage Service (S3) and Amazon Glacier as part of their backup and archive infrastructure. The customer plans to use third-party software to support this integration. Which approach will limit the access of the third party software to only the Amazon S3 bucket named "company-backup"?
Question108: You are working with a customer who is using Chef configuration management in their data center. Which service is designed to let the customer leverage existing Chef recipes in AWS?
Question109: You launch an Amazon EC2 instance without an assigned AVVS identity and Access Management (IAM) role. Later, you decide that the instance should be running with an IAM role. Which action must you take in order to have a running Amazon EC2 instance with an IAM role assigned to it?
Question110: All Amazon EC2 instances are assigned two IP addresses at launch, out of which one can only be reached from within the Amazon EC2 network?
Question111: If you want to launch Amazon Elastic Compute Cloud (EC2) instances and assign each instance a predetermined private IP address you should:
Question112: If an Amazon EBS volume is the root device of an instance, can I detach it without stopping the instance?
Question113: What can I access by visiting the URL: http://status.aws.amazon.com/?
Question114: You can modify the backup retention period; valid values are 0 (for no backup retention) to a maximum of ___________ days.
Question115: A customer is hosting their company website on a cluster of web servers that are behind a public-facing load balancer. The customer also uses Amazon Route 53 to manage their public DNS. How should the customer configure the DNS zone apex record to point to the load balancer?
Question116: A photo-sharing service stores pictures in Amazon Simple Storage Service (S3) and allows application sign-in using an OpenID Connect-compatible identity provider. Which AWS Security Token Service approach to temporary access should you use for the Amazon S3 operations?
Question117: When you use the AWS Management Console to delete an IAM user, IAM also deletes any signing certificates and any access keys belonging to the user.
Question118: You must increase storage size in increments of at least _____ %
Question119: Your company produces customer commissioned one-of-a-kind skiing helmets combining nigh fashion with custom technical enhancements Customers can show oft their Individuality on the ski slopes and have access to head-up-displays. GPS rear-view cams and any other technical innovation they wish to embed in the helmet.
The current manufacturing process is data rich and complex including assessments to ensure that the custom electronics and materials used to assemble the helmets are to the highest standards Assessments are a mixture of human and automated assessments you need to add a new set of assessment to model the failure modes of the custom electronics using GPUs with CUDA. across a cluster of servers with low latency networking.
What architecture would allow you to automate the existing process using a hybrid approach and ensure that the architecture can support the evolution of processes over time?
Question120: What will be the status of the snapshot until the snapshot is complete.
Question121: IAM's Policy Evaluation Logic always starts with a default ____________ for every request, except for those that use the AWS account's root security credentials b
Question122: Will I be alerted when automatic failover occurs?
Question123: Which of the following are true regarding encrypted Amazon Elastic Block Store (EBS) volumes? Choose 2 answers
Question124: What is the maximum response time for a Business level Premium Support case?
Question125: Your customer is willing to consolidate their log streams (access logs application logs security logs etc.) in one single system. Once consolidated, the customer wants to analyze these logs in real time based on heuristics. From time to time, the customer needs to validate heuristics, which requires going back to data samples extracted from the last 12 hours?
What is the best approach to meet your customer's requirements?
Question126: For each DB Instance class, what is the maximum size of associated storage capacity?
Question127: You require the ability to analyze a large amount of data, which is stored on Amazon S3 using Amazon Elastic Map Reduce.
You are using the cc2 8x large Instance type, whose CPUs are mostly idle during processing.
Which of the below would be the most cost efficient way to reduce the runtime of the job?
Question128: The one-time payment for Reserved Instances is __________ refundable if the reservation is cancelled.
Question129: How many types of block devices does Amazon EC2 support A
Question130: You have a content management system running on an Amazon EC2 instance that is approaching 100% CPU utilization. Which option will reduce load on the Amazon EC2 instance?
Question131: When automatic failover occurs, Amazon RDS will emit a DB Instance event to inform you that automatic failover occurred. You can use the _____ to return information about events related to your DB Instance
Question132: Is creating a Read Replica of another Read Replica supported?
Question133: Select the correct set of steps for exposing the snapshot only to specific AWS accounts
Question134: How many types of block devices does Amazon EC2 support?
Question135: What are the two permission types used by AWS?
Question136: Can I attach more than one policy to a particular entity?
Question137: Company B is launching a new game app for mobile devices. Users will log into the game using their existing social media account to streamline data capture. Company B would like to directly save player data and scoring information from the mobile app to a DynamoDS table named Score Data When a user saves their game the progress data will be stored to the Game state S3 bucket. what is the best approach for storing data to DynamoDB and S3?
Question138: Fill in the blanks : _____ let you categorize your EC2 resources in different ways, for example, by purpose, owner, or environment.
Question139: What is the maximum response time for a Business level Premium Support case?
Question140: Your application provides data transformation services. Files containing data to be transformed are first uploaded to Amazon S3 and then transformed by a fleet of spot EC2 instances. Files submitted by your premium customers must be transformed with the highest priority. How should you implement such a system?
Question141: In the Amazon cloudwatch, which metric should I be checking to ensure that your DB Instance has enough free storage space?
Question142: You've been brought in as solutions architect to assist an enterprise customer with their migration of an e-commerce platform to Amazon Virtual Private Cloud (VPC) The previous architect has already deployed a 3-tier VPC.
The configuration is as follows: VPC vpc-2f8t>C447 IGVV ig-2d8bc445 NACL acl-2080c448
Subnets and Route Tables: Web server's subnet-258Dc44d Application server's suDnet-248bc44c Database server's subnet-9189c6f9
Route Tables: rrb-218DC449 rtb-238bc44b
Associations: subnet-258bc44d: rtb-2i8bc449 Subnet-248DC44C rtb-238tX44b subnet-9189c6f9 rtb-238Dc 44b
You are now ready to begin deploying EC2 instances into the VPC Web servers must have direct access to the internet Application and database servers cannot have direct access to the internet.
Which configuration below will allow you the ability to remotely administer your application and database servers, as well as allow these servers to retrieve updates from the Internet?
Question143: What does the following command do with respect to the Amazon EC2 security groups?
ec2-create-group CreateSecurityGroup
Question144: Can I initiate a "forced failover" for my MySQL Multi-AZ DB Instance deployment?
Question145: What does Amazon EC2 provide?
Question146: Is decreasing the storage size of a DB Instance permitted?
Question147: You are designing a multi-platform web application for AWS The application will run on EC2 instances and will be accessed from PCs. tablets and smart phones Supported accessing platforms are Windows. MACOS. IOS and Android Separate sticky session and SSL certificate setups are required for different platform types which of the following describes the most cost effective and performance efficient architecture setup?
Question148: A web company is looking to implement an external payment service into their highly available application deployed in a VPC Their application EC2 instances are behind a public lacing ELB Auto scaling is used to add additional instances as traffic increases under normal load the application runs 2 instances in the Auto Scaling group but at peak it can scale 3x in size. The application instances need to communicate with the payment service over the Internet which requires whitelisting of all public IP addresses used to communicate with it. A maximum of 4 whitelisting IP addresses are allowed at a time and can be added through an API.
How should they architect their solution?
Question149: What does Amazon EBS stand for?
Question150: How can I change the security group membership for interfaces owned by other AWS, such as Elastic Load Balancing?
Question151: What is the default maximum number of MFA devices in use per AWS account (at the root account level)?
Question152: True or False: When you perform a restore operation to a point in time or from a DB Snapshot, a new DB Instance is created with a new endpoint.
Question153: Your company plans to host a large donation website on Amazon Web Services (AWS). You anticipate a large and undetermined amount of traffic that will create many database writes. To be certain that you do not drop any writes to a database hosted on AWS. Which service should you use?
Question154: You have a distributed application that periodically processes large volumes of data across multiple Amazon EC2 Instances. The application is designed to recover gracefully from Amazon EC2 instance failures. You are required to accomplish this task in the most cost-effective way.
Which of the following will meet your requirements?
Question155: A US-based company is expanding their web presence into Europe. The company wants to extend their AWS infrastructure from Northern Virginia (us-east-1) into the Dublin (eu-west1) region. Which of the following options would enable an equivalent experience for users on both continents?
Question156: Which Amazon storage do you think is the best for my database-style applications that frequently encounter many random reads and writes across the dataset?
Question157: Fill in the blanks: A_____ is a storage device that moves data in sequences of bytes or bits (blocks). Hint: These devices support random access and generally use buffered I/O.
Question158: You are working with a customer who has 10 TB of archival data that they want to migrate to Amazon Glacier. The customer has a 1-Mbps connection to the Internet. Which service or feature provides the fastest method of getting the data into Amazon Glacier?
Question159: Your company previously configured a heavily used, dynamically routed VPN connection between your on-premises data center and AWS. You recently provisioned a DirectConnect connection and would like to start using the new connection. After configuring DirectConnect settings in the AWS Console, which of the following options win provide the most seamless transition for your users?
Question160: An administrator is using Amazon CloudFormation to deploy a three tier web application that consists of a web tier and application tier that will utilize Amazon DynamoDB for storage when creating the CloudFormation template which of the following would allow the application instance access to the DynamoDB tables without exposing API credentials?
Question161: Fill in the blanks: _____ is a durable, block-level storage volume that you can attach to a single, running Amazon EC2 instance.
Question162: Is the SQL Server Audit feature supported in the Amazon RDS SQL Server engine?
Question163: How many relational database engines does RDS currently support?
Question164: Your company is getting ready to do a major public announcement of a social media site on AWS. The website is running on EC2 instances deployed across multiple Availability Zones with a Multi-AZ RDS MySQL Extra Large DB Instance. The site performs a high number of small reads and writes per second and relies on an eventual consistency model. After comprehensive tests you discover that there is read contention on RDS MySQL. Which are the best approaches to meet these requirements? (Choose 2 answers)
Question165: If I modify a DB Instance or the DB parameter group associated with the instance, should I reboot the instance for the changes to take effect?
Question166: IAM provides several policy templates you can use to automatically assign permissions to the groups you create. The _____ policy template gives the Admins group permission to access all account resources, except your AWS account information
Question167: Your customer wishes to deploy an enterprise application to AWS which will consist of several web servers, several application servers and a small (50GB) Oracle database information is stored, both in the database and the file systems of the various servers. The backup system must support database recovery whole server and whole disk restores, and individual file restores with a recovery time of no more than two hours. They have chosen to use RDS Oracle as the database
Which backup architecture will meet these requirements?
Question168: Can I move a Reserved Instance from one Region to another?
Question169: SQL Server __________ store logins and passwords in the master database.
Question170: EBS Snapshots occur _____
Question171: Your company runs a customer facing event registration site This site is built with a 3-tier architecture with web and application tier servers and a MySQL database The application requires 6 web tier servers and 6 application tier servers for normal operation, but can run on a minimum of 65% server capacity and a single MySQL database. When deploying this application in a region with three availability zones (AZs) which architecture provides high availability?
Question172: Can I control if and when MySQL based RDS Instance is upgraded to new supported versions?
Question173: Can Amazon S3 uploads resume on failure or do they need to restart?
Question174: By default, when an EBS volume is attached to a Windows instance, it may show up as any drive letter on the instance. You can change the settings of the _____ Service to set the drive letters of the EBS volumes per your specifications.
Question175: A company has a workflow that sends video files from their on-premise system to AWS for transcoding. They use EC2 worker instances that pull transcoding jobs from SQS. Why is SQS an appropriate service for this scenario?
Question176: Your system recently experienced down time during the troubleshooting process. You found that a new administrator mistakenly terminated several production EC2 instances.
Which of the following strategies will help prevent a similar situation in the future?
The administrator still must be able to:
-launch, start stop, and terminate development resources.
-
launch and start production instances.
Question177: Can I detach the primary (eth0) network interface when the instance is running or stopped?
Question178: When running my DB Instance as a Multi-AZ deployment, can I use the standby for read or write operations?
Question179: A customer needs corporate IT governance and cost oversight of all AWS resources consumed by its divisions. The divisions want to maintain administrative control of the discrete AWS resources they consume and keep those resources separate from the resources of other divisions. Which of the following options, when used together will support the autonomy/control of divisions while enabling corporate IT to maintain governance and cost oversight?
Choose 2 answers
Question180: The SQL Server _____ feature is an efficient means of copying data from a source database to your DB Instance. It writes the data that you specify to a data file, such as an ASCII file.
Question181: What does specifying the mapping /dev/sdc=none when launching an instance do?
Question182: A t2.medium EC2 instance type must be launched with what type of Amazon Machine Image (AMI)?
Question183: What does the AWS Storage Gateway provide?
Question184: Amazon RDS creates an SSL certificate and installs the certificate on the DB Instance when Amazon RDS provisions the instance. These certificates are signed by a certificate authority. The _____ is stored athttps://rds.amazonaws.com/doc/rds-ssl-ca-cert.pem.
Question185: Disabling automated backups ______ disable the point-in-time recovery.
Question186: Your company is in the process of developing a next generation pet collar that collects biometric information to assist families with promoting healthy lifestyles for their pets Each collar will push 30kb of biometric data In JSON format every 2 seconds to a collection platform that will process and analyze the data providing health trending information back to the pet owners and veterinarians via a web portal Management has tasked you to architect the collection platform ensuring the following requirements are met.
Provide the ability for real-time analytics of the inbound biometric data
Ensure processing of the biometric data is highly durable. Elastic and parallel
The results of the analytic processing should be persisted for data mining
Which architecture outlined below win meet the initial requirements for the collection platform?
Question187: Does Route 53 support MX Records?
Question188: What does the following command do with respect to the Amazon EC2 security groups?
ec2-revoke RevokeSecurityGroupIngress
Question189: Your website is serving on-demand training videos to your workforce. Videos are uploaded monthly in high resolution MP4 format. Your workforce is distributed globally often on the move and using company-provided tablets that require the HTTP Live Streaming (HLS) protocol to watch a video. Your company has no video transcoding expertise and it required you may need to pay for a consultant.
How do you implement the most cost-efficient architecture without compromising high availability and quality of video delivery'?
Question190: Can we attach an EBS volume to more than one EC2 instance at the same time?
Question191: What is the maximum key length of a tag?
Question192: Groups can't _____.
Question193: It is advised that you watch the Amazon CloudWatch "_____" metric (available via the AWS Management Console or Amazon Cloud Watch APIs) carefully and recreate the Read Replica should it fall behind due to replication errors.
Question194: While creating an Amazon RDS DB, your first task is to set up a DB ______ that controls what IP addresses or EC2 instances have access to your DB Instance.
Question195: A corporate web application is deployed within an Amazon Virtual Private Cloud (VPC) and is connected to the corporate data center via an iPsec VPN. The application must authenticate against the on-premises LDAP server. After authentication, each logged-in user can only access an Amazon Simple Storage Space (S3) keyspace specific to that user.
Which two approaches can satisfy these objectives? (Choose 2 answers)
Question196: What are characteristics of Amazon S3? Choose 2 answers
Question197: What is an isolated database environment running in the cloud (Amazon RDS) called?
Question198: Is there any way to own a direct connection to Amazon Web Services?
Question199: Provisioned IOPS Costs: you are charged for the IOPS and storage whether or not you use them in a given month.
Question200: What does Amazon Elastic Beanstalk provide?
Question201: Can I test my DB Instance against a new version before upgrading?
Question202: A web company is looking to implement an intrusion detection and prevention system into their deployed VPC. This platform should have the ability to scale to thousands of instances running inside of the VPC.
How should they architect their solution to achieve these goals?
Question203: You must assign each server to at least _____________ security group
Question204: A customer has a single 3-TB volume on-premises that is used to hold a large repository of images and print layout files. This repository is growing at 500 GB a year and must be presented as a single logical volume. The customer is becoming increasingly constrained with their local storage capacity and wants an off-site backup of this data, while maintaining low-latency access to their frequently accessed data. Which AWS Storage Gateway configuration meets the customer requirements?
Question205: A____________ is an individual, system, or application that interacts with AWS programmatically.
Question206: When you view the block device mapping for your instance, you can see only the EBS volumes, not the instance store volumes.
Question207: You need a persistent and durable storage to trace call activity of an IVR (Interactive Voice Response) system. Call duration is mostly in the 2-3 minutes timeframe. Each traced call can be either active or terminated. An external application needs to know each minute the list of currently active calls, which are usually a few calls/second. Put once per month there is a periodic peak up to 1000 calls/second for a few hours The system is open 24/7 and any downtime should be avoided. Historical data is periodically archived to files. Cost saving is a priority for this project.
What database implementation would better fit this scenario, keeping costs as low as possible?
Question208: You are designing a photo sharing mobile app the application will store all pictures in a single Amazon S3 bucket.
Users will upload pictures from their mobile device directly to Amazon S3 and will be able to view and download their own pictures directly from Amazon S3.
You want to configure security to handle potentially millions of users in the most secure manner possible. What should your server-side application do when a new user registers on the photo-sharing mobile application?
Question209: Do the Amazon EBS volumes persist independently from the running life of an Amazon EC2 instance?
Question210: A company wants to implement their website in a virtual private cloud (VPC). The web tier will use an Auto Scaling group across multiple Availability Zones (AZs). The database will use Multi-AZ RDS MySQL and should not be publicly accessible. What is the minimum number of subnets that need to be configured in the VPC?
Question211: You have an environment that consists of a public subnet using Amazon VPC and 3 instances that are running in this subnet. These three instances can successfully communicate with other hosts on the Internet. You launch a fourth instance in the same subnet, using the same AMI and security group configuration you used for the others, but find that this instance cannot be accessed from the internet. What should you do to enable Internet access?
Question212: The Amazon EC2 web service can be accessed using the _____ web services messaging protocol. This interface is described by a Web Services Description Language (WSDL) document.
Question213: Your startup wants to implement an order fulfillment process for selling a personalized gadget that needs an average of 3-4 days to produce with some orders taking up to 6 months you expect 10 orders per day on your first day. 1000 orders per day after 6 months and 10,000 orders after 12 months.
Orders coming in are checked for consistency men dispatched to your manufacturing plant for production quality control packaging shipment and payment processing If the product does not meet the quality standards at any stage of the process employees may force the process to repeat a step Customers are notified via email about order status and any critical issues with their orders such as payment failure.
Your case architecture includes AWS Elastic Beanstalk for your website with an RDS MySQL instance for customer data and orders.
How can you implement the order fulfillment process while making sure that the emails are delivered reliably?
Question214: In order to optimize performance for a compute cluster that requires low inter-node latency, which of the following feature should you use?
Question215: When creation of an EBS snapshot is initiated, but not completed, the EBS volume:
Question216: What does Amazon ElastiCache provide?
Question217: Which of the following features ensures even distribution of traffic to Amazon EC2 instances in multiple Availability Zones registered with a load balancer?
Question218: Which of the following services natively encrypts data at rest within an AWS region? Choose 2 answers
Question219: You are designing a web application that stores static assets in an Amazon Simple Storage Service (S3) bucket. You expect this bucket to immediately receive over 150 PUT requests per second. What should you do to ensure optimal performance?
Question220: Which procedure for backing up a relational database on EC2 that is using a set of RAlDed EBS volumes for storage minimizes the time during which the database cannot be written to and results in a consistent backup?
Question221: A client application requires operating system privileges on a relational database server. What is an appropriate configuration for a highly available database architecture?
Question222: If you are using Amazon RDS Provisioned IOPS storage with MySQL and Oracle database engines, you can scale the throughput of your database Instance by specifying the IOPS rate from __________ .
Question223: A company needs to monitor the read and write IOPs metrics for their AWS MySQL RDS instance and send real-time alerts to their operations team. Which AWS services can accomplish this? Choose 2 answers
Question224: What does Amazon RDS stand for?
Question225: Which of the following notification endpoints or clients are supported by Amazon Simple Notification Service? Choose 2 answers
Question226: A customer has a 10 GB AWS Direct Connect connection to an AWS region where they have a web application hosted on Amazon Elastic Computer Cloud (EC2). The application has dependencies on an on-premises mainframe database that uses a BASE (Basic Available. Sort stale Eventual consistency) rather than an ACID (Atomicity. Consistency isolation. Durability) consistency model. The application is exhibiting undesirable behavior because the database is not able to handle the volume of writes. How can you reduce the load on your on-premises database resources in the most cost-effective way?
Question227: Select the most correct
answer: The
device name /dev/sda1 (within Amazon EC2) is _____
Question228: Amazon RDS DB snapshots and automated backups are stored in
Question229: When you run a DB Instance as a Multi-AZ deployment, the "_____" serves database writes and reads
Question230: A customer wants to track access to their Amazon Simple Storage Service (S3) buckets and also use this information for their internal security and access audits. Which of the following will meet the Customer requirement?
Question231: What happens when you create a topic on Amazon SNS?
Question232: Your company has recently extended its datacenter into a VPC on AVVS to add burst computing capacity as needed Members of your Network Operations Center need to be able to go to the AWS Management Console and administer Amazon EC2 instances as necessary You don't want to create new IAM users for each NOC member and make those users sign in again to the AWS Management Console Which option below will meet the needs for your NOC members?
Question233: When should I choose Provisioned IOPS over Standard RDS storage?
Question234: What does Amazon Elastic Beanstalk provide?
Question235: What is the durability of S3 RRS?
Question236: Will my standby RDS instance be in the same Availability Zone as my primary?
Question237: What happens to the I/O operations while you take a database snapshot?
Question238: Making your snapshot public shares all snapshot data with everyone.
Can the snapshots with AWS Marketplace product codes be made public?
Question239: Your company currently has a 2-tier web application running in an on-premises data center. You have experienced several infrastructure failures in the past two months resulting in significant financial losses. Your CIO is strongly agreeing to move the application to AWS. While working on achieving buy-in from the other company executives, he asks you to develop a disaster recovery plan to help improve Business continuity in the short term. He specifies a target Recovery Time Objective (RTO) of 4 hours and a Recovery Point Objective (RPO) of 1 hour or less. He also asks you to implement the solution within 2 weeks. Your database is 200GB in size and you have a 20Mbps Internet connection. How would you do this while minimizing costs?
Question240: You are implementing AWS Direct Connect. You intend to use AWS public service end points such as Amazon S3, across the AWS Direct Connect link. You want other Internet traffic to use your existing link to an Internet Service Provider.
What is the correct way to configure AWS Direct connect for access to services such as Amazon S3?
Question241: An AWS customer is deploying an application mat is composed of an AutoScaling group of EC2 Instances.
The customers security policy requires that every outbound connection from these instances to any other service within the customers
Virtual Private Cloud must be authenticated using a unique x 509 certificate that contains the specific instance-id.
In addition an x 509 certificates must Designed by the customer's Key management service in order to be trusted for authentication.
Which of the following configurations will support these requirements?
Question242: What does Amazon S3 stand for?
Question243: Your application is using an ELB in front of an Auto Scaling group of web/application servers deployed across two AZs and a Multi-AZ RDS Instance for data persistence.
The database CPU is often above 80% usage and 90% of I/O operations on the database are reads. To improve performance you recently added a single-node Memcached ElastiCache Cluster to cache frequent DB query results. In the next weeks the overall workload is expected to grow by 30%.
Do you need to change anything in the architecture to maintain the high availability or the application with the anticipated additional load'* Why?
Question244: You have deployed a three-tier web application in a VPC with a CIOR block of 10 0 0 0/28 You initially deploy two web servers, two application servers, two database servers and one NAT instance tor a total of seven EC2 instances The web. Application and database servers are deployed across two availability zones (AZs). You also deploy an ELB in front of the two web servers, and use Route53 for DNS Web (raffle gradually increases in the first few days following the deployment, so you attempt to double the number of instances in each tier of the application to handle the new load unfortunately some of these new instances fail to launch.
Which of the following could De the root caused? (Choose 2 answers)
Question245: What is the type of monitoring data (for Amazon EBS volumes) which is available automatically in 5-minute periods at no charge called?
Question246: You're running an application on-premises due to its dependency on non-x86 hardware and want to use AWS for data backup. Your backup application is only able to write to POSIX-compatible block-based storage. You have 140TB of data and would like to mount it as a single folder on your file server Users must be able to access portions of this data while the backups are taking place. What backup solution would be most appropriate for this use case?
Question247: Amazon RDS automated backups and DB Snapshots are currently supported for only the ______ storage engine
Question248: After an Amazon VPC instance is launched, can I change the VPC security groups it belongs to?
Question249: What is the minimum charge for the data transferred between Amazon RDS and Amazon EC2 Instances in the same Availability Zone?
Question250: Which of the following cannot be used in Amazon EC2 to control who has access to specific Amazon EC2 instances?
Question251: Which of the following statements are true about Amazon Route 53 resource records? Choose 2 answers
Question252: After launching an instance that you intend to serve as a NAT (Network Address Translation) device in a public subnet you modify your route tables to have the NAT device be the target of internet bound traffic of your private subnet. When you try and make an outbound connection to the internet from an instance in the private subnet, you are not successful. Which of the following steps could resolve the issue?
Question253: Which technique can be used to integrate AWS IAM (Identity and Access Management)
with an on-premise LDAP (Lightweight Directory Access Protocol) directory service?
Question254: What does Amazon Route53 provide?
Question255: What is a Security Group?
Question256: What does RRS stand for when talking about S3?
Question257: What does Amazon CloudFormation provide?
Question258: What is an isolated database environment running in the cloud (Amazon RDS) called?
Question259: When using consolidated billing there are two account types. What are they?
Question260: Your department creates regular analytics reports from your company's log files All log data is collected in Amazon S3 and processed by daily Amazon Elastic MapReduce (EMR) jobs that generate daily PDF reports and aggregated tables in CSV format for an Amazon Redshift data warehouse.
Your CFO requests that you optimize the cost structure for this system.
Which of the following alternatives will lower costs without compromising average performance of the system or data integrity for the raw data?
Question261: What does the "Server Side Encryption" option on Amazon S3 provide?
Question262: Your web application front end consists of multiple EC2 instances behind an Elastic Load Balancer. You configured ELB to perform health checks on these EC2 instances, if an instance fails to pass health checks, which statement will be true?
Question263: Amazon EC2 has no Amazon Resource Names (ARNs) because you can't specify a particular Amazon EC2 resource in an IAM policy.
Question264: Is Federated Storage Engine currently supported by Amazon RDS for MySQL?
Question265: Please select the most correct answer regarding the persistence of the Amazon Instance Store
Question266: To serve Web traffic for a popular product your chief financial officer and IT director have purchased 10 ml large heavy utilization Reserved Instances (RIs) evenly spread across two availability zones: Route 53 is used to deliver the traffic to an Elastic Load Balancer (ELB). After several months, the product grows even more popular and you need additional capacity As a result, your company purchases two C3.2xlarge medium utilization Ris You register the two c3 2xlarge instances with your ELB and quickly find that the ml large instances are at 100% of capacity and the c3 2xlarge instances have significant capacity that's unused Which option is the most cost effective and uses EC2 capacity most effectively?
Question267: What is the name of licensing model in which I can use your existing Oracle Database licenses to run Oracle deployments on Amazon RDS?
Question268: A customer is running a multi-tier web application farm in a virtual private cloud (VPC) that is not connected to their corporate network. They are connecting to the VPC over the Internet to manage all of their Amazon EC2 instances running in both the public and private subnets. They have only authorized the bastion-security-group with Microsoft Remote Desktop Protocol (RDP) access to the application instance security groups, but the company wants to further limit administrative access to all of the instances in the VPC. Which of the following Bastion deployment scenarios will meet this requirement?
Question269: Your company policies require encryption of sensitive data at rest. You are considering the possible options for protecting data while storing it at rest on an EBS data volume, attached to an EC2 instance. Which of these options would allow you to encrypt your data at rest? (Choose 3 answers)
Question270: Can the string value of 'Key' be prefixed with laws?
Question271: In the context of MySQL, version numbers are organized as MySQL version = X.Y.Z. What does X denote here?
Question272: Will I be charged if the DB instance is idle?
Question273: A company is building software on AWS that requires access to various AWS services. Which configuration should be used to ensure mat AWS credentials (i.e., Access Key ID/Secret Access Key combination) are not compromised?
Question274: You are looking to migrate your Development (Dev) and Test environments to AWS. You have decided to use separate AWS accounts to host each environment. You plan to link each accounts bill to a Master AWS account using Consolidated Billing. To make sure you Keep within budget you would like to implement a way for administrators in the Master account to have access to stop, delete and/or terminate resources in both the Dev and Test accounts. Identify which option will allow you to achieve this goal.
Question275: Security groups act like a firewall at the instance level, whereas ____________ are an additional layer of security that act at the subnet level.
Question276: You have a load balancer configured for VPC, and all back-end Amazon EC2 instances are in service. However, your web browser times out when connecting to the load balancer's DNS name. Which options are probable causes of this behavior? Choose 2 answers
Question277: What does Amazon CloudFormation provide?
Question278: Which set of Amazon S3 features helps to prevent and recover from accidental data loss?
Question279: Are Reserved Instances available for Multi-AZ Deployments?
Question280: What are the Amazon EC2 API tools?
Question281: If I write the below command, what does it do?
ec2-run ami-e3a5408a -n 20 -g appserver
Question282: My Read Replica appears "stuck" after a Multi-AZ failover and is unable to obtain or apply updates from the source DB Instance. What do I do?
Question283: If I scale the storage capacity provisioned to my DB Instance by mid of a billing month, how will I be charged?
Question284: You currently operate a web application In the AWS US-East region The application runs on an auto-scaled layer of EC2 instances and an RDS Multi-AZ database Your IT security compliance officer has tasked you to develop a reliable and durable logging solution to track changes made to your EC2.IAM And RDS resources. The solution must ensure the integrity and confidentiality of your log data. Which of these solutions would you recommend?
Question285: Which Amazon service can I use to define a virtual network that closely resembles a traditional data center?
Question286: Which DNS name can only be resolved within Amazon EC2?
Question287: Typically, you want your application to check whether a request generated an error before
you spend any time processing results. The easiest way to find out if an error occurred is to look for an _____________ node in the response from the Amazon RDS API.
Question288: A customer is leveraging Amazon Simple Storage Service in eu-west-1 to store static content for a web-based property. The customer is storing objects using the Standard Storage class. Where are the customers objects replicated?
Question289: In the Amazon RDS which uses the SQL Server engine, what is the maximum size for a Microsoft SQL Server DB Instance with SQL Server Express edition?
Question290: Which of the following are valid statements about Amazon S3? Choose 2 answers
Question291: Which of the following are characteristics of Amazon VPC subnets? Choose 2 answers
Question292: Select the correct statement:
Question293: Is the encryption of connections between my application and my DB Instance using SSL for the MySQL server engines available?
Question294: You have a video transcoding application running on Amazon EC2. Each instance polls a queue to find out which video should be transcoded, and then runs a transcoding process. If this process is interrupted, the video will be transcoded by another instance based on the queuing system. You have a large backlog of videos which need to be transcoded and would like to reduce this backlog by adding more instances. You will need these instances only until the backlog is reduced. Which type of Amazon EC2 instances should you use to reduce the backlog in the most cost efficient way?
Question295: What is one key difference between an Amazon EBS-backed and an instance-store backed instance?
Question296: An existing application stores sensitive information on a non-boot Amazon EBS data volume attached to an Amazon Elastic Compute Cloud instance. Which of the following approaches would protect the sensitive data on an Amazon EBS volume?
Question297: A web design company currently runs several FTP servers that their 250 customers use to upload and download large graphic files They wish to move this system to AWS to make it more scalable, but they wish to maintain customer privacy and Keep costs to a minimum.
What AWS architecture would you recommend?
Question298: Location of Instances are ____________
Question299: What is the maximum write throughput I can provision for a single Dynamic DB table?
Question300: True or False: Without IAM, you cannot control the tasks a particular user or system can do and what AWS resources they might use.
Question301: Select the incorrect statement
Question302: Is there a limit to how many groups a user can be in?
Question303: True or False: Common points of failures like generators and cooling equipment are shared across Availability Zones.
Question304: What is the minimum time Interval for the data that Amazon CloudWatch receives and aggregates?
Question305: Which Amazon Storage behaves like raw, unformatted, external block devices that you can attach to your instances?
Question306: In the 'Detailed' monitoring data available for your Amazon EBS volumes, Provisioned IOPS volumes automatically send _____ minute metrics to Amazon CloudWatch.
Question307: Within the IAM service a GROUP is regarded as a:
Question308: You are running a successful multitier web application on AWS and your marketing department has asked you to add a reporting tier to the application. The reporting tier will aggregate and publish status reports every 30 minutes from user-generated information that is being stored in your web application s database. You are currently running a Multi-AZ RDS MySQL instance for the database tier. You also have implemented Elasticache as a database caching layer between the application tier and database tier. Please select the answer that will allow you to successfully implement the reporting tier with as little impact as possible to your database.
Question309: Fill in the blanks: The base URI for all requests for instance metadata is ___________
Question310: Before I delete an EBS volume, what can I do if I want to recreate the volume later?
Question311: What does Amazon SES stand for?
Question312: An International company has deployed a multi-tier web application that relies on DynamoDB in a single region For regulatory reasons they need disaster recovery capability In a separate region with a Recovery Time Objective of 2 hours and a Recovery Point Objective of 24 hours They should synchronize their data on a regular basis and be able to provision me web application rapidly using CloudFormation.
The objective is to minimize changes to the existing web application, control the throughput of DynamoDB used for the synchronization of data and synchronize only the modified elements.
Which design would you choose to meet these requirements?
Question313: When you resize the Amazon RDS DB instance, Amazon RDS will perform the upgrade during the next maintenance window.
If you want the upgrade to be performed now, rather than waiting for the maintenance window, specify the _____ option.
Question314: You have a periodic Image analysis application that gets some files In Input analyzes them and tor each file writes some data in output to a ten file the number of files in input per day is high and concentrated in a few hours of the day.
Currently you have a server on EC2 with a large EBS volume that hosts the input data and the results it takes almost 20 hours per day to complete the process
What services could be used to reduce the elaboration time and improve the availability of the solution?
Question315: A company is deploying a two-tier, highly available web application to AWS. Which service provides durable storage for static content while utilizing lower Overall CPU resources for the web tier?
Question316: If you have chosen Multi-AZ deployment, in the event of a planned or unplanned outage of your primary DB Instance, Amazon RDS automatically switches to the standby replica. The automatic failover mechanism simply changes the ______ record of the main DB Instance to point to the standby DB Instance.
Question317: A newspaper organization has a on-premises application which allows the public to search its back catalogue and retrieve individual newspaper pages via a website written in Java They have scanned the old newspapers into JPEGs (approx 17TB) and used Optical Character Recognition (OCR) to populate a commercial search product. The hosting platform and software are now end of life and the organization wants to migrate Its archive to AWS and produce a cost efficient architecture and still be designed for availability and durability Which is the most appropriate?
Question318: An AWS customer runs a public blogging website. The site users upload two million blog entries a month The average blog entry size is 200 KB. The access rate to blog entries drops to negligible 6 months after publication and users rarely access a blog entry 1 year after publication. Additionally, blog entries have a high update rate during the first 3 months following publication, this drops to no updates after 6 months. The customer wants to use CloudFront to improve his user's load times. Which of the following recommendations would you make to the customer?
Question319: You have a web application running on six Amazon EC2 instances, consuming about 45% of resources on each instance. You are using auto-scaling to make sure that six instances are running at all times. The number of requests this application processes is consistent and does not experience spikes. The application is critical to your business and you want high availability at all times. You want the load to be distributed evenly between all instances. You also want to use the same Amazon Machine Image (AMI) for all instances. Which of the following architectural choices should you make?
Question320: What does Amazon ELB stand for?
Question321: In regards to IAM you can edit user properties later, but you cannot use the console to change the ___________.
Question322: Please select the Amazon EC2 resource which can be tagged.
Question323: True or False: If you add a tag that has the same key as an existing tag on a DB Instance, the new value overwrites the old value.
Question324: You manually launch a NAT AMI in a public subnet. The network is properly configured. Security groups and network access control lists are property configured. Instances in a private subnet can access the NAT. The NAT can access the Internet. However, private instances cannot access the Internet. What additional step is required to allow access from the private instances?
Question325: How can the domain's zone apex, for example, "myzoneapexdomain.com", be pointed towards an Elastic Load Balancer?
Question326: The new DB Instance that is created when you promote a Read Replica retains the backup window period.
Question327: What does Amazon SWF stand for?
Question328: While creating the snapshots using the API, which Action should I be using?
Question329: Amazon S3 doesn't automatically give a user who creates _____ permission to perform other actions on that bucket or object.
Question330: In the Amazon RDS Oracle DB engine, the Database Diagnostic Pack and the Database Tuning Pack are only available with ______________
Question331: You try to connect via SSH to a newly created Amazon EC2 instance and get one of the following error messages:
"Network error: Connection timed out" or "Error connecting to [instance], reason: -> Connection timed out: connect,"
You have confirmed that the network and security group rules are configured correctly and the instance is passing status checks. What steps should you take to identify the source of the behavior? Choose 2 answers
Question332: When an EC2 instance that is backed by an S3-based AMI is terminated, what happens to the data on the root volume?
Question333: You are running a news website in the eu-west-1 region that updates every 15 minutes.
The website has a world-wide audience it uses an Auto Scaling group behind an Elastic Load Balancer and an Amazon RDS database Static content resides on Amazon S3, and is distributed through Amazon CloudFront. Your Auto Scaling group is set to trigger a scale up event at 60% CPU utilization, you use an Amazon RDS extra large DB instance with
10.000 Provisioned IOPS its CPU utilization is around 80%. While freeable memory is in the 2 GB range.
Web analytics reports show that the average load time of your web pages is around 1 5 to 2 seconds, but your SEO consultant wants to bring down the average load time to under
0.5 seconds.
How would you improve page load times for your users? (Choose 3 answers)
Question334: Is there a limit to how many groups a user can be in?
Question335: What are the four levels of AWS Premium Support?
Question336: Select the correct set of options. These are the initial settings for the default security group:
Question337: Your company hosts a social media site supporting users in multiple countries. You have been asked to provide a highly available design tor the application that leverages multiple regions tor the most recently accessed content and latency sensitive portions of the wet) site The most latency sensitive component of the application involves reading user preferences to support web site personalization and ad selection.
In addition to running your application in multiple regions, which option will support this application's requirements?
Question338: You are deploying an application to collect votes for a very popular television show. Millions of users will submit votes using mobile devices. The votes must be collected into a durable, scalable, and highly available data store for real-time public tabulation. Which service should you use?
Question339: Every user you create in the IAM system starts with ___________.
Question340: When using the following AWS services, which should be implemented in multiple Availability Zones for high availability solutions? Choose 2 answers
Question341: A group can contain many users. Can a user belong to multiple groups?
Question342: Using Amazon IAM, can I give permission based on organizational groups?
Question343: ____________ embodies the "share-nothing" architecture and essentially involves
breaking a large database into several smaller databases. Common ways to split a database include 1) splitting tables that are not joined in the same query onto different hosts or 2) duplicating a table across multiple hosts and then using a hashing algorithm to determine which host receives a given update.
Question344: What is the Reduced Redundancy option in Amazon S3?
Question345: When will you incur costs with an Elastic IP address (EIP)?
Question346: Amazon EC2 provides a repository of public data sets that can be seamlessly integrated into AWS cloud-based applications.What is the monthly charge for using the public data sets?
Question347: A company needs to deploy virtual desktops to its customers in a virtual private cloud, leveraging existing security controls. Which set of AWS services and features will meet the company's requirements?
Question348: Can the string value of 'Key' be prefixed with :aws:"?
Question349: An instance is launched into a VPC subnet with the network ACL configured to allow all inbound traffic and deny all outbound traffic. The instance's security group is configured to allow SSH from any IP address and deny all outbound traffic. What changes need to be made to allow SSH access to the instance?
Question350: When you put objects in Amazon S3, what is the indication that an object was successfully stored?
Question351: A company is deploying a new two-tier web application in AWS. The company has limited staff and requires high availability, and the application requires complex queries and table joins. Which configuration provides the solution for the company's requirements?
Question352: If I have multiple Read Replicas for my master DB Instance and I promote one of them, what happens to the rest of the Read Replicas?
Question353: Because of the extensibility limitations of striped storage attached to Windows Server,
Amazon RDS does not currently support increasing storage on a _____ DB Instance.
Question354: What does a "Domain" refer to in Amazon SWF?
Question355: You are building an automated transcription service in which Amazon EC2 worker instances process an uploaded audio file and generate a text file. You must store both of these files in the same durable storage until the text file is retrieved. You do not know what the storage capacity requirements are. Which storage option is both cost-efficient and scalable?
Question356: You are the new IT architect in a company that operates a mobile sleep tracking application
When activated at night, the mobile app is sending collected data points of 1 kilobyte every
5 minutes to your backend
The backend takes care of authenticating the user and writing the data points into an
Amazon DynamoDB table.
Every morning, you scan the table to extract and aggregate last night's data on a per user
basis, and store the results in Amazon S3.
Users are notified via Amazon SMS mobile push notifications that new data is available,
which is parsed and visualized by (he mobile app Currently you have around 100k users who are mostly based out of North America.
You have been tasked to optimize the architecture of the backend system to lower cost what would you recommend? (Choose 2 answers)
Question357: You can use _____ and _____ to help secure the instances in your VPC.
Question358: A company needs to deploy services to an AWS region which they have not previously used. The company currently has an AWS identity and Access Management (IAM) role for the Amazon EC2 instances, which permits the instance to have access to Amazon DynamoDB. The company wants their EC2 instances in the new region to have the same privileges. How should the company achieve this?
Question359: Which services allow the customer to retain full administrative privileges of the underlying EC2 instances? Choose 2 answers
Question360: A company has configured and peered two VPCs: VPC-1 and VPC-2. VPC-1 contains only private subnets, and VPC-2 contains only public subnets. The company uses a single AWS Direct Connect connection and private virtual interface to connect their on-premises network with VPC-1. Which two methods increases the fault tolerance of the connection to VPC-1? Choose 2 answers
Question361: By default, EBS volumes that are created and attached to an instance at launch are deleted when that instance is terminated. You can modify this behavior by changing the value of the flag_____ to false when you launch the instance
Question362: True or False: When you perform a restore operation to a point in time or from a DB Snapshot, a new DB Instance is created with a new endpoint.
Question363: Please select the Amazon EC2 resource which cannot be tagged.
Question364: A/An _____ acts as a firewall that controls the traffic allowed to reach one or more
instances.
Question365: In the 'Detailed' monitoring data available for your Amazon EBS volumes, Provisioned IOPS volumes automatically send _____ minute metrics to Amazon CloudWatch.
Question366: You have recently joined a startup company building sensors to measure street noise and air quality in urban areas.
The company has been running a pilot deployment of around 100 sensors for 3 months Each sensor uploads 1KB of sensor data every minute to a backend hosted on AWS.
During the pilot, you measured a peak or 10 IOPS on the database, and you stored an average of 3GB of sensor data per month in the database
The current deployment consists of a load-balanced auto scaled Ingestion layer using EC2 instances and a PostgreSQL RDS database with 500GB standard storage.
The pilot is considered a success and your CEO has managed to get the attention or some potential investors
The business plan requires a deployment of at least 1O0K sensors which needs to be supported by the backend
You also need to store sensor data for at least two years to be able to compare year over year Improvements.
To secure funding, you have to make sure that the platform meets these requirements and leaves room for further scaling
Which setup win meet the requirements?
Question367: What are the two types of licensing options available for using Amazon RDS for Oracle?
Question368: What is the maximum response time for a Business level Premium Support case?
Question369: Can I test my DB Instance against a new version before upgrading?
Question370: You have an application running on an Amazon Elastic Compute Cloud instance, that uploads 5 GB video objects to Amazon Simple Storage Service (S3). Video uploads are taking longer than expected, resulting in poor application performance. Which method will help improve performance of your application?
Question371: You are designing the network infrastructure for an application server in Amazon VPC Users will access all the application instances from the Internet as well as from an on-premises network The on-premises network is connected to your VPC over an AWS Direct Connect link.
How would you design routing to meet the above requirements?
Question372: An ERP application is deployed across multiple AZs in a single region. In the event of failure, the Recovery Time Objective (RTO) must be less than 3 hours, and the Recovery Point Objective (RPO) must be 15 minutes the customer realizes that data corruption occurred roughly 1.5 hours ago.
What DR strategy could be used to achieve this RTO and RPO in the event of this kind of failure?
Question373: A customer needs to capture all client connection information from their load balancer every five minutes. The company wants to use this data for analyzing traffic patterns and troubleshooting their applications. Which of the following options meets the customer requirements?
Question374: You are responsible for a legacy web application whose server environment is approaching end of life You would like to migrate this application to AWS as quickly as possible, since the application environment currently has the following limitations:
- The VM's single 10GB VMDK is almost full - Me virtual network interface still uses the 10Mbps driver, which leaves your 100Mbps WAN connection completely underutilized - It is currently running on a highly customized. Windows VM within a VMware environment: - You do not have me installation media
This is a mission critical application with an RTO (Recovery Time Objective) of 8 hours. RPO (Recovery Point Objective) of 1 hour. How could you best migrate this application to AWS while meeting your business continuity requirements?
Question375: The _____ service is targeted at organizations with multiple users or systems that use AWS products such as Amazon EC2, Amazon SimpleDB, and the AWS Management Console.
Question376: Can I initiate a "forced failover" for my Oracle Multi-AZ DB Instance deployment?
Question377: You've been hired to enhance the overall security posture for a very large e-commerce site They have a well architected multi-tier application running in a VPC that uses ELBs in front of both the web and the app tier with static assets served directly from S3 They are using a combination of RDS and DynamoOB for their dynamic data and then archiving nightly into S3 for further processing with EMR They are concerned because they found questionable log entries and suspect someone is attempting to gain unauthorized access.
Which approach provides a cost effective scalable mitigation to this kind of attack?
Question378: You are designing a data leak prevention solution for your VPC environment. You want your VPC Instances to be able to access software depots and distributions on the Internet for product updates. The depots and distributions are accessible via third party CONs by their URLs. You want to explicitly deny any other outbound connections from your VPC instances to hosts on the internet.
Which of the following options would you consider?
Question379: Using Amazon CloudWatch's Free Tier, what is the frequency of metric updates which you receive?
Question380: To view information about an Amazon EBS volume, open the Amazon EC2 console at https://console.aws.amazon.com/ec2/, click __________ in the Navigation pane.
Question381: A company has an AWS account that contains three VPCs (Dev, Test, and Prod) in the same region. Test is peered to both Prod and Dev. All VPCs have non-overlapping CIDR blocks. The company wants to push minor code releases from Dev to Prod to speed up time to market. Which of the following options helps the company accomplish this?
Question382: Your fortune 500 company has under taken a TCO analysis evaluating the use of Amazon S3 versus acquiring more hardware The outcome was that ail employees would be granted access to use Amazon S3 for storage of their personal documents.
Which of the following will you need to consider so you can set up a solution that incorporates single sign-on from your corporate AD or LDAP directory and restricts access for each user to a designated user folder in a bucket? (Choose 3 Answers)
Question383: A read only news reporting site with a combined web and application tier and a database tier that receives large and unpredictable traffic demands must be able to respond to these traffic fluctuations automatically. What AWS services should be used meet these requirements?
Question384: If I write the below command, what does it do?
ec2-run ami-e3a5408a -n 20 -g appserver
Question385: Changes to the backup window take effect ______.
Question386: Provisioned IOPS Costs: you are charged for the IOPS and storage whether or not you use them in a given month.
Question387: Without _____, you must either create multiple AWS accounts-each with its own billing and subscriptions to AWS products-or your employees must share the security credentials of a single AWS account.
Question388: You are building a solution for a customer to extend their on-premises data center to AWS. The customer requires a 50-Mbps dedicated and private connection to their VPC. Which AWS product or feature satisfies this requirement?
Question389: You are designing an SSUTLS solution that requires HTTPS clients to be authenticated by the Web server using client certificate authentication. The solution must be resilient.
Which of the following options would you consider for configuring the web server infrastructure? (Choose 2 answers)
Question390: Do the Amazon EBS volumes persist independently from the running life of an Amazon EC2 instance?
Question391: What is the command line instruction for running the remote desktop client in Windows?
Question392: Does Amazon Route 53 support NS Records?
Question393: You are developing a new mobile application and are considering storing user preferences in AWS.2w This would provide a more uniform cross-device experience to users using multiple mobile devices to access the application. The preference data for each user is estimated to be 50KB in size Additionally 5 million customers are expected to use the application on a regular basis. The solution needs to be cost-effective, highly available, scalable and secure, how would you design a solution to meet the above requirements?
Question394: Per the AWS Acceptable Use Policy, penetration testing of EC2 instances:
Question395: Does Amazon RDS allow direct host access via Telnet, Secure Shell (SSH), or Windows Remote Desktop Connection?
Question396: You have deployed a web application targeting a global audience across multiple AWS Regions under the domain name.example.com. You decide to use Route53 Latency-Based Routing to serve web requests to users from the region closest to the user. To provide business continuity in the event of server downtime you configure weighted record sets associated with two web servers in separate Availability Zones per region. Dunning a DR test you notice that when you disable all web servers in one of the regions Route53 does not automatically direct all users to the other region. What could be happening? (Choose 2 answers)
Question397: Does Amazon RDS for SQL Server currently support importing data into the msdb database?
Question398: While creating the snapshots using the command line tools, which command should I be using?
Question399: HTTP Query-based requests are HTTP requests that use the HTTP verb GET or POST and a Query parameter named_____________.
Question400: Are you able to integrate a multi-factor token service with the AWS Platform?
Question401: MySQL installations default to port _____.
Question402: What is Amazon Glacier?
Question403: Which of the following items are required to allow an application deployed on an EC2 instance to write data to a DynamoDB table? Assume that no security keys are allowed to be stored on the EC2 instance. (Choose 2 answers)
Question404: Are you able to integrate a multi-factor token service with the AWS Platform?
Question405: After creating a new IAM user which of the following must be done before they can successfully make API calls?
Question406: Amazon SWF is designed to help users...
Question407: A customer has established an AWS Direct Connect connection to AWS. The link is up and routes are being advertised from the customer's end, however the customer is unable to connect from EC2 instances inside its VPC to servers residing in its datacenter.
Which of the following options provide a viable solution to remedy this situation? (Choose 2 answers)
Question408: Multi-AZ deployment ___________ supported for Microsoft SQL Server DB Instances.
Question409: A Provisioned IOPS volume must be at least __________ GB in size
Question410: Can I delete a snapshot of the root device of an EBS volume used by a registered AMI?
Question411: A company is building a voting system for a popular TV show, viewers win watch the performances then visit the show's website to vote for their favorite performer. It is expected that in a short period of time after the show has finished the site will receive millions of visitors. The visitors will first login to the site using their Amazon.com credentials and then submit their vote. After the voting is completed the page will display the vote totals. The company needs to build the site such that can handle the rapid influx of traffic while maintaining good performance but also wants to keep costs to a minimum. Which of the design patterns below should they use?
Question412: What is the maximum write throughput I can provision for a single Dynamic DB table?
Question413: True or False: When using IAM to control access to your RDS resources, the key names that can be used are case sensitive. For example,
aws:CurrentTime is NOT equivalent to AWS:currenttime.
Question414: Amazon RDS automated backups and DB Snapshots are currently supported for only the __________ storage engine
Question415: Fill in the blanks: "To ensure failover capabilities, consider using a _____ for incoming traffic on a network interface".
Question416: A company is preparing to give AWS Management Console access to developers Company policy mandates identity federation and role-based access control. Roles are currently assigned using groups in the corporate Active Directory. What combination of the following will give developers access to the AWS console? (Select 2) Choose 2 answers
Question417: Can a 'user' be associated with multiple AWS accounts?
Question418: Will my standby RDS instance be in the same Region as my primary?
Question419: While launching an RDS DB instance, on which page I can select the Availability Zone?