Renovate AWS-Certified-Developer-Associate Forum 2021

NEW QUESTION 1
In DynamoDB, a secondary index is a data structure that contains a subset of attributes from a table, along with an alternate key to support operations.

• A. None of the above
• B. Both
• C. Query
• D. Scan

Answer: C

Explanation:
In DynamoDB, a secondary index is a data structure that contains a subset of attributes from a table, along with an alternate key to support Query operations.
Reference: http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/Secondarylndexes.htmI

NEW QUESTION 2
A startup s photo-sharing site is deployed in a VPC. An ELB distributes web traffic across two subnets. ELB session stickiness is configured to use the AWS-generated session cookie, with a session TTL of 5 minutes. The webserver Auto Scaling Group is configured as: min-size=4, max-size=4.
The startups preparing for a public launch, by running load-testing software installed on a single EC2 instance running in us-west-2a. After 60 minutes of load-testing, the webserver logs show:

Which recommendations can help ensure load-testing HTTP requests are evenly distributed across the
four webservers? Choose 2 answers

• A. Launch and run the load-tester EC2 instance from us-east-1 instead.
• B. Re-configure the load-testing software to re-resolve DNS for each web request.
• C. Use a 3rd-party load-testing service which offers globally-distributed test clients.
• D. Configure ELB and Auto Scaling to distribute across us-west-2a and us-west-2c.
• E. Configure ELB session stickiness to use the app-specific session cooki

Answer: BE

NEW QUESTION 3
EC2 instances are launched from Amazon Machine images (AMIS). A given public AMI can:

• A. be used to launch EC2 Instances in any AWS region.
• B. only be used to launch EC2 instances in the same country as the AMI is stored.
• C. only be used to launch EC2 instances in the same AWS region as the AMI is stored.
• D. only be used to launch EC2 instances in the same AWS availability zone as the AMI is stored

Answer: C

NEW QUESTION 4
Does AWS CIoudFormation support Amazon EC2 tagging?

• A. It depends if the Amazon EC2 tagging has been defined in the template.
• B. No, it doesn’t support Amazon EC2 tagging.
• C. No, CIoudFormation doesn’t support any tagging
• D. Yes, AWS CIoudFormation supports Amazon EC2 tagging

Answer: D

Explanation:
In AWS CIoudFormation, Amazon EC2 resources that support the tagging feature can also be tagged in an AWS template. The tag values can refer to template parameters, other resource names, resource attribute values (e.g. addresses), or values computed by simple functions (e.g., a concatenated list of strings).
Reference: http://aws.amazon.com/c|oudformation/faqs/

NEW QUESTION 5
In Amazon EC2, which of the following is the type of monitoring data for Amazon EBS volumes that is available automatically in 5-minute periods at no charge?

• A. Primary
• B. Basic
• C. Initial
• D. Detailed

Answer: B

Explanation:
Basic is the type of monitoring data (for Amazon EBS volumes) which is available automatically in 5-minute periods at no charge called.
Reference:
http://docs.amazonwebservices.com/AWSEC2/latest/UserGuide/monitoring-volume-status.html

NEW QUESTION 6
Which OS does the current version of AWS Elastic Beanstalk use?

• A. Amazon Linux AMI, Windows Server 2003 R2 AMI or the Windows Server 2008 R2 AMI
• B. Amazon Linux AMI only
• C. Amazon Linux AMI or the Windows Server 2008 R2 AMI
• D. Windows Sewer 2008 R2 AMI only

Answer: C

Explanation:
The current version of AWS Elastic Beanstalk uses the Amazon Linux AMI or the Windows Server 2008 R2 AMI.
Reference: https://aws.amazon.com/elasticbeansta|k/faqs/

NEW QUESTION 7
How does Amazon SQS allow multiple readers to access the same message queue without losing messages or processing them many times?

• A. By identifying a user by his unique id
• B. By using unique cryptography
• C. Amazon SQS queue has a configurable visibility timeout.
• D. MuItipIe readers can't access the same message queue

Answer: C

Explanation:
Every Amazon SQS queue has a configurable visibility timeout. For the designated amount of time after a message is read from a queue, it will not be visible to any other reader. As long as the amount of time that it takes to process the message is less than the visibility timeout, every message will be processed and deleted. In the event that the component processing the message fails or becomes unavailable, the message will again become visible to any component reading the queue once the visibility timeout ends. This allows you to have many components all reading messages from the same queue, with each working to process different messages.
Reference: https://aws.amazon.com/sqs/faqs/

NEW QUESTION 8
ExamKiIIer (with AWS account ID 111122223333) has created 50 IAM users for its orgAMzation’s employees. What will be the AWS console URL for these associates?

• A. https:// 111122223333.signin.aws.amazon.com/conso|e/
• B. https:// signin.aws.amazon.com/consoIe/
• C. https://signin.aws.amazon.com/111122223333/conso|e/
• D. https://signin.aws.amazon.com/console/111122223333/

Answer: A

Explanation:
When an orgAMzation is using AWS IAM for creating various users and manage their access rights, the IAM user cannot use the login URL http://aws.amazon.com/console to access AWS management console. The console login URL for the IAM user will have AWS account ID of that orgAMzation to identify the IAM user belongs to particular account. The AWS console login URL for the IAM user will be https://
<AWS_Account_|D>.signin.aws.amazon.com/consoIe/. In this case it will be https:// 111122223333.signin.aws.amazon.com/consoIe/
Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/AccountAIias.html

NEW QUESTION 9
How many types of block devices does Amazon EC2 support?

• A. 5
• B. 1
• C. 2
• D. 4

Answer: C

Explanation:
Amazon EC2 supports 2 types of block devices. Reference:
http://docs.amazonwebservices.com/AWSEC2/latest/UserGuide/block-device-mapping-concepts.html

NEW QUESTION 10
A user is trying to share a video file with all his friends. Which of the below mentioned AWS services will be cheapest and easy to use?

• A. AWS S3
• B. AWS EC2
• C. AWS RRS
• D. AWS Glacier

Answer: C

Explanation:
AWS RRS provides the same functionality as AWS S3, but at a cheaper rate. It is ideally suited for non mission critical applications. It provides less durability than S3, but is a cheaper option.
Reference: http://docs.aws.amazon.com/AmazonS3/Iatest/dev/UsingRRS.htmI

NEW QUESTION 11
A user is accessing an EC2 instance on the SSH port for IP 10.20.30.40. Which one is a secure way to
configure that the instance can be accessed only from this IP?

• A. In the security group, open port 22 for IP 1020.30.40/0
• B. In the security group, open port 22 for IP 10.20.30.40/32
• C. In the security group, open port 22 for IP 10.20.30.40/24
• D. In the security group, open port 22 for IP 10.20.30.40

Answer: B

Explanation:
In AWS EC2, while configuring a security group, the user needs to specify the IP address in CIDR notation. The CIDR IP range 10.20.30.40/32 says it is for a single IP 10.20.30.40. If the user specifies the IP as 10.20.30.40 only, the security group will not accept and ask it in a CIRD format.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-network-security.html

NEW QUESTION 12
AWS Elastic Beanstalk will change the health status of a web server environment tier to gray color when:

• A. AWS Elastic Beanstalk detects other problems with the environment that are known to make the application unavailable
• B. Your application hasn't responded to the application health check URL within the last one hour.
• C. Your application hasn't responded to the application health check URL within the last five minutes.
• D. Your appIication's health status is unknown because status is reported when the application is not in the ready state.

Answer: D

Explanation:
AWS Elastic Beanstalk will change the health status of a web server environment tier to gray color when your appIication's health status is unknown (because status is reported when the application is not in the ready state).
Reference: http://docs.aws.amazon.com/elasticbeanstaIk/latest/dg/using-features.heaIthstatus.htmI

NEW QUESTION 13
An orgAMzation has enabled a strict password policy for its IAM users. The orgAMzation is taking help from the IAM console to set the password policy. Which of the below mentioned rules cannot be specified by the user as a part of the policy?

• A. Allow at least one lower case letter
• B. Allow at least one number
• C. Allow at least one non-alphanumeric character
• D. Do not allow the user to use the password from the last three passwords

Answer: D

Explanation:
AWS IAM allows an orgAMzation to create multiple users and provide them access to various AWS services. By default when the user is created, he does not have password enabled and can not login to AWS console. If the orgAMzation wants to allow the users to login to AWS console, they can enable password for each user. It is required that IAM users follow certain guidelines to set their IAM login password. For this IAM provides root account owner to setup passwrod policy. The password policy also lets the specify whether all IAM users can change their own passwords. As part of policy, orgAMzation can specify that passwords for IAM users must be of a certain minimum length, must include certain characters, and a few more criteria such as below.
One upper/ lower or both letters One alpha numeric
One number
Reference: http://docs.aws.amazon.com/|AM/Iatest/UserGuide/Using_ManagingPasswordPoIicies.htm|

NEW QUESTION 14
A user has created a snapshot of an EBS volume. Which of the below mentioned usage cases is not possible with respect to a snapshot?

• A. Nlirroring the volume from one AZ to another AZ
• B. Launch an instance
• C. Decrease the volume size
• D. Increase the size of the volume

Answer: C

Explanation:
The EBS snapshots are a point in time backup ofthe volume. It is helpful to move the volume from one AZ to another or launch a new instance. The user can increase the size of the volume but cannot decrease it less than the original snapshot size.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSSnapshots.htmI

NEW QUESTION 15
In AWS Elastic Beanstalk, if the application returns any response other than 200 ,OK or there is no response within the configured InactMtyTimeout period, .

• A. SQS once again makes the message visible in the queue and available for another attempt at processing
• B. SQS waits for another timeout
• C. SQS run DeIeteMessagecaII and deletes the message from the queue
• D. SQS sends a message to the application with the lVIessageID and pending status

Answer: A

Explanation:
In AWS Elastic Beanstalk, if the application returns any response other than 200, OK or there is no response within the configured InactMtyTimeout period, SQS once again makes the message visible in the queue and available for another attempt at processing.
Reference:
http://docs.aws.amazon.com/elasticbeanstaIk/latest/dg/using-features-managing-env-tiers.htmI#worker-e nviron

NEW QUESTION 16
What is the format of structured notification messages sent by Amazon SNS?

• A. An XML object containing MessageId, UnsubscribeURL, Subject, lVIessage and other values
• B. An JSON object containing MessageId, DupIicateFIag, lVIessage and other values
• C. An XML object containing MessageId, DupIicateFIag, lVIessage and other values
• D. An JSON object containing MessageId, unsubscribeURL, Subject, lVIessage and other values

Answer: D

NEW QUESTION 17
What is the maximum number of S3 Buckets available per AWS account?

• A. 100 per region
• B. there is no limit
• C. 100 per account
• D. 500 per account
• E. 100 per IAM user

Answer: C

NEW QUESTION 18
In DynamoDB, if you create a table and request 10 units of write capacity and 200 units of read capacity of provisioned throughput, how much would you be charged in US East (Northern Virginia) Region?

• A. $0.05 per hour
• B. $0.10 per hour
• C. $0.03 per hour
• D. $0.15 per hour

Answer: A

Explanation:
To understand pricing in DynamoDB, consider the following example. If you create a table and request 10 units of write capacity and 200 units of read capacity of provisioned throughput, you would be charged:
$0.01 + (4 x $0.01) = $0.05 per hour
Reference: http://aws.amazon.com/dynamodb/pricing/

NEW QUESTION 19
A user is uploading archives to Glacier. The user is trying to understand key Glacier resources. Which of the below mentioned options is not a Glacier resource?

• A. Notification configuration
• B. Archive ID
• C. Job
• D. Archive

Answer: B

Explanation:
AWS Glacier has four resources. Vault and Archives are core data model concepts. Job is required to initiate download of archive. The notification configuration is required to send user notification when archive is available for download.
Reference: http://docs.aws.amazon.com/amazongIacier/latest/dev/amazon-glacier-data-model.html

NEW QUESTION 20
Which of the following services are key/value stores? Choose 3 answers

• A. Amazon EIastiCache
• B. Simple Notification Service
• C. DynamoDB
• D. Simple Workflow Service
• E. Simple Storage Service

Answer: ABC

NEW QUESTION 21
What happens if your application performs more reads or writes than your provisioned capacity?

• A. Nothing
• B. requests above your provisioned capacity will be performed but you will receive 400 error codes.
• C. requests above your provisioned capacity will be performed but you will receive 200 error codes.
• D. requests above your provisioned capacity will be throttled and you will receive 400 error code

Answer: D

Explanation:
Speaking about DynamoDB, if your application performs more reads/second or writes/second than your tabIe’s provisioned throughput capacity allows, requests above your provisioned capacity will be throttled and you will receive 400 error codes.
Reference: http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/ProvisionedThroughputlntro.htmI

NEW QUESTION 22
When you use the AWS Elastic Beanstalk console to deploy a new application you’II need to upload a source bundle and it should .

• A. Consist of a single .zip file
• B. Consist of a single .war file
• C. Consist of a single .zip file or .war file
• D. Consist of a folder with all files

Answer: C

Explanation:
When you use the AWS Elastic Beanstalk console to deploy a new application or an application version, you’II need to upload a source bundle. Your source bundle must meet the following requirements: Consist of a single .zip file or .war file
Not exceed 512 MB
Not include a parent folder or top-level directory (subdirectories are fine) Reference:
http://docs.aws.amazon.com/elasticbeanstaIk/latest/dg/using-features.depIoyment.source.html

NEW QUESTION 23
Which of the below mentioned options can be a good use case for storing content in AWS RRS?

• A. Storing mission critical data Files
• B. Storing infrequently used log files
• C. Storing a video file which is not reproducible
• D. Storing image thumbnails

Answer: D

Explanation:
AWS RRS provides the same functionality as AWS S3, but at a cheaper rate. It is ideally suited for non-mission, critical applications, such as files which can be reproduced.
Reference: http://docs.aws.amazon.com/AmazonS3/Iatest/dev/UsingRRS.htmI

NEW QUESTION 24
What does Amazon SQS provide?

• A. An asynchronous message queue service.
• B. A Simple Query Sewer, managed directly by Amazon Web Services.
• C. None of these.
• D. A synchronous message queue service.

Answer: A

Explanation:
Amazon SQS stands for Simple Queue Services, and provides a cost-effective way to decouple the components of your application through an asynchronous message queue service
Reference: http://aws.amazon.com/sqs/

NEW QUESTION 25
A user has enabled serverside encryption with S3. The user downloads the encrypted object from S3. How can the user decrypt it?

• A. S3 does not support server side encryption
• B. S3 provides a server side key to decrypt the object
• C. The user needs to decrypt the object using their own private key
• D. S3 manages encryption and decryption automatically

Answer: D

Explanation:
If the user is using the server-side encryption feature, Amazon S3 encrypts the object data before saving it on disks in its data centres and decrypts it when the user downloads the objects. Thus, the user is free from the tasks of managing encryption, encryption keys, and related tools.
Reference: http://docs.aws.amazon.com/AmazonS3/Iatest/dev/UsingEncryption.htmI

NEW QUESTION 26
An orgAMzation has created multiple components of a single application for compartmentalization. Currently all the components are hosted on a single EC2 instance. Due to security reasons the orgAMzation wants to implement two separate SSLs for the separate modules although it is already using VPC. How can the orgAMzation achieve this with a single instance?

• A. Create a VPC instance which will have both the ACL and the security group attached to it and haveseparate rules for each IP address.
• B. Create a VPC instance which will have multiple network interfaces with multiple elastic IP addresses.
• C. You have to launch two instances each in a separate subnet and allow VPC peering for a single IP.
• D. Create a VPC instance which will have multiple subnets attached to it and each will have a separate IP address.

Answer: B

Explanation:
A Virtual Private Cloud (VPC) is a virtual network dedicated to the user’s AWS account. It enables the user to launch AWS resources into a virtual network that the user has defined. With VPC the user can specify multiple private IP addresses for his instances.
The number of network interfaces and private IP addresses that a user can specify for an instance depends on the instance type. With each network interface the orgAMzation can assign an EIP. This scenario helps when the user wants to host multiple websites on a single EC2 instance by using multiple SSL certificates on a single server and associating each certificate with a specific EIP address. It also helps in scenarios for operating network appliances, such as firewalls or load balancers that have multiple private IP addresses for each network interface.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/MuItipIeIP.html

NEW QUESTION 27
......