How Many Questions Of DVA-C01 Free Samples

NEW QUESTION 1
An EC2 instance has one additional EBS volume attached to it. How can a user attach the same volume to another running instance in the same AZ?

• A. Terminate the first instance and only then attach to the new instance
• B. Attach the volume as read only to the second instance
• C. Detach the volume first and attach to new instance
• D. No need to detac
• E. Just select the volume and attach it to the new instance, it will take care of mapping internally

Answer: C

Explanation:
If an EBS volume is attached to a running EC2 instance, the user needs to detach the volume from the original instance and then attach it to a new running instance. The user doesn't need to stop / terminate the original instance.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-detaching-volume.html

NEW QUESTION 2
If a message is retrieved from a queue in Amazon SQS, how long is the message inaccessible to other users by default?

• A. 0 seconds
• B. 1 hour
• C. 1 day
• D. forever
• E. 30 seconds

Answer: E

NEW QUESTION 3
A user is uploading archives to Glacier. The user is trying to understand key Glacier resources. Which of the below mentioned options is not a Glacier resource?

• A. Notification configuration
• B. Archive ID
• C. Job
• D. Archive

Answer: B

Explanation:
AWS Glacier has four resources. Vault and Archives are core data model concepts. Job is required to initiate download of archive. The notification configuration is required to send user notification when archive is available for download.
Reference: http://docs.aws.amazon.com/amazongIacier/latest/dev/amazon-glacier-data-model.html

NEW QUESTION 4
A user is trying to create a policy for an IAM user from the AWS console. Which of the below mentioned options is not available to the user while configuring policy?

• A. Use policy generator to create policy
• B. Use custom policy to create policy
• C. Use policy simulator to create policy
• D. Assign No permission

Answer: C

Explanation:
When a user is trying to create a policy from the AWS console, it will have options such as create policy from templates or use a policy generator. The user can also define a custom policy or chose the option to have no permission. The policy simulator is not available in the console.
Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/IAMBestPractices.html

NEW QUESTION 5
You run an ad-supported photo sharing website using S3 to serve photos to visitors of your site. At some point you find out that other sites have been linking to the photos on your site, causing loss to your business.
What is an effective method to mitigate this?

• A. Store photos on an EBS volume ofthe web server
• B. Remove public read access and use signed URLs with expiry dates.
• C. Use C|oudFront distributions for static content.
• D. Block the IPs of the offending websites in Security Group

Answer: B

NEW QUESTION 6
Does DynamoDB support in-place atomic updates?

• A. It is not defined
• B. Yes
• C. It does support in-place non-atomic updates
• D. No

Answer: B

Explanation:
DynamoDB supports in-place atomic updates. Reference:
http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/NorkingWithItems.htmI#Working WithItems.AtomicCounters

NEW QUESTION 7
An orgAMzation has hosted an application on the EC2 instances. There will be multiple users connecting to the instance for setup and configuration of application. The orgAMzation is planning to implement certain security best practices. Which of the below mentioned pointers will not help the orgAMzation achieve better security arrangement?

• A. Apply the latest patch of OS and always keep it updated.
• B. Allow only IAM users to connect with the EC2 instances with their own secret access key.
• C. Disable the password based login for all the user
• D. All the users should use their own keys to connect with the instance securely.
• E. Create a procedure to revoke the access rights of the indMdual user when they are not required to connect to EC2 instance anymore for the purpose of application configuration.

Answer: B

Explanation:
Since AWS is a public cloud any application hosted on EC2 is prone to hacker attacks. It becomes extremely important for a user to setup a proper security mechAMsm on the EC2 instances. A few of the security measures are listed below:
Always keep the OS updated with the latest patch
Always create separate users with in OS if they need to connect with the EC2 instances, create their keys and disable their password
Create a procedure using which the admin can revoke the access of the user when the business work on the EC2 instance is completed
Lock down unnecessary ports
Audit any proprietary applications that the user may be running on the EC2 instance
Provide temporary escalated prMleges, such as sudo for users who need to perform occasional prMleged tasks
The IAM is useful when users are required to work with AWS resources and actions, such as launching an instance. It is not useful to connect (RDP / SSH) with an instance.
Reference: http://aws.amazon.com/articles/1233/

NEW QUESTION 8
In DynamoDB, could you use IAM to grant access to Amazon DynamoDB resources and API actions?

• A. Yes
• B. Depended to the type of access
• C. In DynamoDB there is no need to grant access
• D. No

Answer: A

Explanation:
Amazon DynamoDB integrates with AWS Identity and Access Management (IAM). You can use AWS IAM to grant access to Amazon DynamoDB resources and API actions. To do this, you first write an AWS IAM policy, which is a document that explicitly lists the permissions you want to grant. You then attach that policy to an AWS IAM user or role.
Reference: http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/UsingIAMWithDDB.htmI

NEW QUESTION 9
Company A has an S3 bucket containing premier content that they intend to make available to only paid subscribers of their website. The S3 bucket currently has default permissions of all objects being private to prevent inadvertent exposure of the premier content to non-paying website visitors. How can Company A provide only paid subscribers the ability to download a premier content file in the S3 bucket?

• A. Apply a bucket policy that grants anonymous users to download the content from the S3 bucket
• B. Generate a pre-signed object URL for the premier content file when a paid subscriberrequests adownload
• C. Add a bucket policy that requires Multi-Factor Authentication for requests to access the S3 bucket objects
• D. Enable server side encryption on the S3 bucket for data protection against the non-paying website visitors

Answer: B

NEW QUESTION 10
Which one of the following operations is NOT a DynamoDB operation?

• A. BatchWrite|tem
• B. DescribeTabIe
• C. BatchGetItem
• D. BatchDeIeteItem

Answer: D

Explanation:
In DynamoDB, Deleteltem deletes a single item in a table by primary key, but BatchDeIeteItem doesn’t exist.
Reference: http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/operationIist.htmI

NEW QUESTION 11
Which header received at the EC2 instance identifies the port used by the client while requesting ELB?

• A. X-Forvvarded-Proto
• B. X-Requested-Proto
• C. X-Forvvarded-Port
• D. X-Requested-Port

Answer: C

Explanation:
The X-Forvvarded-Port request header helps the user identify the port used by the client while sending a request to ELB.
Reference: http://docs.aws.amazon.com/EIasticLoadBalancing/latest/DeveIoperGuide/TerminologyandKeyConcepts. html

NEW QUESTION 12
A user is planning to host MS SQL on an EBS volume. It was recommended to use the AWS RDS. What advantages will the user have if he uses RDS in comparison to an EBS based DB?

• A. Better throughput with PIOPS
• B. Automated backup
• C. NIS SQL is not supported with RDS
• D. High availability with multi AZs

Answer: B

Explanation:
Comparing with on-premises or EC2 based NIS SQL, RDS provides an automated backup feature. PIOPS is available with both RDS and EBS. However, HA is not available with NIS SQL.
Reference: https://aws.amazon.com/rds/faqs/

NEW QUESTION 13
A user has launched one EC2 instance in the US West region. The user wants to access the RDS instance launched in the US East region from that EC2 instance. How can the user configure the access for that EC2 instance?

• A. It is not possible to access RDS of the US East region from the US West region
• B. Open the security group of the US West region in the RDS security group’s ingress rule
• C. Configure the IP range of the US West region instance as the ingress security rule of RDS
• D. Create an IAM role which has access to RDS and launch an instance in the US West region with it

Answer: C

Explanation:
The user cannot authorize an Amazon EC2 security group if it is in a different AWS Region than the RDS DB instance. The user can authorize an IP range or specify an Amazon EC2 security group in the same region that refers to an IP address in another region.
Reference: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_WorkingWithSecurityGroups.html

NEW QUESTION 14
A user is trying to understand AWS SNS. To which of the below mentioned end points is SNS unable to send a notification?

• A. AWS SES
• B. Email JSON
• C. AWS SQS
• D. HTTP

Answer: A

Explanation:
Amazon Simple Notification Service (Amazon SNS) is a fast, filexible, and fully managed push messaging service. Amazon SNS can deliver notifications by SMS text message or email to the Amazon Simple Queue Service (SQS) queues or to any HTTP endpoint. The user can select one the following
transports as part of the subscription requests: "HTTP", "HTTPS","Emai|", "EmaiI-JSON", "SQS", "and SMS".
Reference: http://aws.amazon.com/sns/faqs/

NEW QUESTION 15
Which of the following are valid arguments for an SNS Publish request? Choose 3 answers

• A. TopicAm
• B. Subject
• C. Destination
• D. Format
• E. Message F.Language

Answer: ABE

NEW QUESTION 16
Which of the following platforms are supported by Elastic Beanstalk? Choose 2 answers

• A. Apache Tomcat
• B. .NET
• C. IBM Websphere
• D. Oracle JBoss
• E. Jetty

Answer: AB

NEW QUESTION 17
A user has an S3 object in the US Standard region with the content "coIor=red". The user updates the object with the content as "coIor="white". If the user tries to read the value 1 minute after it was uploaded, what will S3 return?

• A. It will return "coIor=white"
• B. It will return "coIor=red"
• C. It will return an error saying that the object was not found
• D. It may return either "coIor=red" or "color=white" i.
• E. any of the value

Answer: D

Explanation:
AWS S3 follows the eventual consistent model in the US Standard Region. Once the object is updated it
may return the new value or the old value based on whether all the content is replicated across multiple servers until it becomes consistent (eventual).
Reference: http://docs.aws.amazon.com/AmazonS3/Iatest/dev/Introduction.htmI

NEW QUESTION 18
What kind of service is provided by AWS DynamoDB?

• A. Relational Database
• B. NoSQL Database
• C. Dynamic Database
• D. Document Database

Answer: B

Explanation:
DynamoDB is a fast, fully managed NoSQL database service. Reference: http://aws.amazon.com/dynamodb/

NEW QUESTION 19
Which of the following solutions is not supported by DynamoDB:

• A. Hash secondary index
• B. Local secondary index
• C. Hash Primary Key
• D. Global secondary index

Answer: A

Explanation:
In DynamoDB, a secondary index is a data structure that contains a subset of attributes from a table, along with an alternate key to support Query operations. DynamoDB supports the following two types of secondary indexes:
Local secondary index is an index that has the same hash key as the table, but a different range key. A local secondary index is "IocaI" in the sense that every partition of a local secondary index is scoped to a table partition that has the same hash key.
Global secondary index is an index with a hash and range key that can be different from those on the table. A global secondary index is considered "gIobaI" because queries on the index can span all of the data in a table, across all partitions.
Reference: http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/DataModeI.html

NEW QUESTION 20
In Amazon EC2, which of the following is the type of monitoring data for Amazon EBS volumes that is available automatically in 5-minute periods at no charge?

• A. Primary
• B. Basic
• C. Initial
• D. Detailed

Answer: B

Explanation:
Basic is the type of monitoring data (for Amazon EBS volumes) which is available automatically in 5-minute periods at no charge called.
Reference:
http://docs.amazonwebservices.com/AWSEC2/latest/UserGuide/monitoring-volume-status.html

NEW QUESTION 21
A user is planning to use EBS for his DB requirement. The user already has an EC2 instance running in the VPC private subnet. How can the user attach the EBS volume to a running instance?

• A. The user must create EBS within the same VPC and then attach it to a running instance.
• B. The user can create EBS in the same zone as the subnet of instance and attach that EBS to instance.
• C. It is not possible to attach an EBS to an instance running in VPC until the instance is stopped.
• D. The user can specify the same subnet while creating EBS and then attach it to a running instanc

Answer: B

Explanation:
A Virtual Private Cloud (VPC) is a virtual network dedicated to the user’s AWS account. The user can create subnets as per the requirement within a VPC. The VPC is always specific to a region. The user can create a VPC which can span multiple Availability Zones by adding one or more subnets in each Availability Zone.
The instance launched will always be in the same availability zone of the respective subnet. When creating an EBS the user cannot specify the subnet or VPC. However, the user must create the EBS in the same zone as the instance so that it can attach the EBS volume to the running instance.
Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Subnets.htm|#VPCSubnet

NEW QUESTION 22
A meteorological system monitors 600 temperature gauges, obtaining temperature samples every minute and saving each sample to a DynamoDB table. Each sample involves writing 1K of data and the writes are evenly distributed over time.
How much write throughput is required for the target table?

• A. 1 write capacity unit
• B. 10 write capacity units
• C. 60 write capacity units
• D. 600 write capacity units
• E. 3600 write capacity units

Answer: B

NEW QUESTION 23
A user has launched an EBS backed Linux instance. How can a user detach the root device and attach it to another instance as a secondary volume?

• A. Unmount the root volume first and then detach it
• B. It is not possible to mount the root volume to some other instance
• C. Stop the first instance and then attach instance’s root volume as a new volume to the other instance
• D. It is not possible to mount the root device as a secondary volume on the other instance

Answer: C

Explanation:
If an Amazon EBS volume is the root device of an instance, it cannot be detached unless the instance is in the stopped state.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-detaching-volume.html

NEW QUESTION 24
ExamKiIIer has three AWS accounts. They have created separate IAM users within each account. ExamKiIIer wants a single IAM console URL such as https://examkiIIer.signin.aws.amazon.com/consoIe/ for all account users. How can this be achieved?

• A. Merge all the accounts with consolidated billing
• B. Create the same account alias with each account ID
• C. It is not possible to have the same IAM account login URL for separate AWS accounts
• D. Create the S3 bucket with an alias name and use the redirect rule to forward requests to various accounts

Answer: C

Explanation:
If a user wants the URL of the AWS IAM sign-in page to have a company name instead of the AWS account ID, he can create an alias for his AWS account ID. The alias should be unique.
Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/AccountAIias.html

NEW QUESTION 25
A user is creating a new EBS volume from an existing snapshot. The snapshot size shows 10 GB. Can the user create a volume of 30 GB from that snapshot?

• A. Provided the original volume has set the change size attribute to true
• B. Yes
• C. Provided the snapshot has the modify size attribute set as true
• D. No

Answer: B

Explanation:
A user can always create a new EBS volume of a higher size than the original snapshot size. The user cannot create a volume of a lower size. When the new volume is created the size in the instance will be shown as the original size. The user needs to change the size of the device with resize2fs or other OS specific commands.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-expand-volume.htmI

NEW QUESTION 26
Which of the following services are key/value stores? Choose 3 answers

• A. Amazon EIastiCache
• B. Simple Notification Service
• C. DynamoDB
• D. Simple Workflow Service
• E. Simple Storage Service

Answer: ABC

NEW QUESTION 27
......