AWS-Certified-Developer-Associate Exam - Amazon AWS Certified Developer Associate

NEW QUESTION 1
Which one of the following operations is NOT a DynamoDB operation?

• A. BatchWrite|tem
• B. DescribeTabIe
• C. BatchGetItem
• D. BatchDeIeteItem

Answer: D

Explanation: In DynamoDB, Deleteltem deletes a single item in a table by primary key, but BatchDeIeteItem doesn’t exist.
Reference: http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/operationIist.htmI

NEW QUESTION 2
A user has configured a bucket S3 to host a static website. What difference will there be when static website hosting is enabled?

• A. It will help the user identify this bucket as the website root to map with the domain
• B. It will create a new version of the bucket
• C. It will not make any difference, but will help the user to configure the error page
• D. It will provide the region specific website endpoint

Answer: D

Explanation: To host a static website, the user needs to configure an Amazon S3 bucket for website hosting and then upload the website contents to the bucket. The website is then available at the region-specific website endpoint of the bucket.
Reference: http://docs.aws.amazon.com/AmazonS3/latest/dev/WebsiteHosting.htmI

NEW QUESTION 3
ExamKiIIer (with AWS account ID H1122223333) has created 50 IAM users for its orgAMzation’s employees. ExamKiI|er wants to make the AWS console login URL for all IAM users like: https://examki||er.signin.aws.amazon.com/consoIe/. How can this be configured?

• A. The user needs to use Route 53 to map the examkiller domain and IAM URL
• B. Create an IAM AWS account alias with the name examkiller
• C. It is not possible to have a personalized IAM login URL
• D. Create an IAM hosted zone Identity for the domain examkiller

Answer: B

Explanation: If a user wants the URL of the AWS IAM sign-in page to have a company name instead of the AWS account ID, he can create an alias for his AWS account ID.
Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/AccountAIias.html

NEW QUESTION 4
The AWS console for DynamoDB enables you to do all the following operations, except:

• A. Set up alarms to monitor your tabIe's capacity usage.
• B. Create, update, and delete tables.
• C. Import Data from other databases or from files.
• D. View your tabIe's top monitoring metrics on real-time graphs from CIoudWatc

Answer: C

Explanation: The AWS console for DynamoDB enables you to do all the above operation but not Importing Data from other databases or from files and it is not possible to do it.
Reference: http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/ConsoIeDynamoDB.html

NEW QUESTION 5
What is the maximum number of S3 Buckets available per AWS account?

• A. 100 per region
• B. there is no limit
• C. 100 per account
• D. 500 per account
• E. 100 per IAM user

Answer: C

NEW QUESTION 6
Which of the below mentioned commands allows the user to share the AMI with his peers using the AWS EC2 CLI?

• A. ec2-share-image-public
• B. ec2-share-image-account
• C. ec2-share-image
• D. ec2-modify-image-attribute

Answer: D

Explanation: A user can share an AMI with another user / peer using the command: ec2-modify-image-attribute
<AMI-ID> -| -a <AWS Account |D>
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/sharingamis-expIicit.htmI

NEW QUESTION 7
You have been doing a lot of testing of your VPC Network by deliberately failing EC2 instances to test whether instances are failing over properly. Your customer who will be paying the AWS bill for all this asks you if he being charged for all these instances. You try to explain to him how the billing works on EC2 instances to the best of your knowledge. What would be an appropriate response to give to the customer
in regards to this?

• A. Billing commences when Amazon EC2 AMI instance is completely up and billing ends as soon as the instance starts to shutdown.
• B. Billing commences when Amazon EC2 initiates the boot sequence of an AMI instance and billing ends when the instance shuts down.
• C. Billing only commences only after 1 hour of uptime and billing ends when the instance terminates.
• D. Billing commences when Amazon EC2 initiates the boot sequence of an AMI instance and billing ends as soon as the instance starts to shutdown.

Answer: B

Explanation: Billing commences when Amazon EC2 initiates the boot sequence of an AMI instance. Billing ends when the instance shuts down, which could occur through a web services command, by running "shutdown -h", or through instance failure.
Reference: http://aws.amazon.com/ec2/faqs/#BiIIing

NEW QUESTION 8
A user is trying to create a list of IAM users with the AWS console. When the IAM users are created which of the below mentioned credentials will be enabled by default for the user?

• A. IAM access key and secret access key
• B. IAM X.509 certificates
• C. Nothin
• D. Everything is disabled by default
• E. IAM passwords

Answer: C

Explanation: Newly created IAM users have no password and no access key (access key ID and secret access key). If the user needs to administer your AWS resources using the AWS Management Console, you can create
a password for the user. If the user needs to interact with AWS programmatically (using the command line interface (CLI), the AWS SDK, or service-specific APIs), you can create an access key for that user. The credentials you create for users are what they use to uniquely identify themselves to AWS.
Reference: http://docs.aws.amazon.com/IAM/|atest/UserGuide/Using_WorkingWithGroupsAndUsers.htmI

NEW QUESTION 9
A user has enabled the automated backup, but not specified the backup window. What will RDS do in this case?

• A. Will throw an error on instance launch
• B. RDS will take 3 AM — 3:30 AM as the default window
• C. RDS assigns a random time period based on the region
• D. Will not allow to launch a DB instance

Answer: C

Explanation: If the user does not specify a preferred backup window while enabling an automated backup, Amazon RDS assigns a default 30-minute backup window which is selected at random from an 8-hour block of
time per region. Reference:
http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.BackingUpAndRestoringAmazonR DSInstances.htmI

NEW QUESTION 10
An account owner has created an IAM user with the name examkiller. The account owner wants to give EC2 access of only the US West region to that IAM user. How can the owner configure this?

• A. While creating a policy provide the region as a part of the resources
• B. Create an IAM user in the US West region and give access to EC2
• C. Create an IAM policy and define the region in the condition
• D. It is not possible to provide access based on the region

Answer: C

Explanation: The IAM policy is never region specific. If the user wants to configure the region specific setting, he needs to provide conditions as part of the policy.
Reference: http://awspolicygen.s3.amazonaws.com/poIicygen.htmI

NEW QUESTION 11
A user has created a new raw EBS volume. The user mounts the volume on the instance to which it is attached. Which of the below mentioned options is a required step before the user can mount the volume?

• A. Run a cyclic check on the device for data consistency
• B. Create a file system of the volume
• C. No step is require
• D. The user can directly mount the device
• E. Resize the volume as per the original snapshot size

Answer: B

Explanation: When a user is trying to mount a blank EBS volume, it is required that the user first creates a file system within the volume.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-using-volumes.htmI

NEW QUESTION 12
Which of the following device names is reserved for the root device for Linux instances of Amazon EC2?

• A. /dev/sda1
• B. /dev/sd[b-e]
• C. xvd[a-e]
• D. /dev/sd[f-p][1 -6]

Answer: A

Explanation: /dev/sda1 is the name of the device reserved for the root device for Linux instances. Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/device_naming.htmI

NEW QUESTION 13
Which Amazon service is not used by Elastic Beanstalk?

• A. Amazon S3
• B. Amazon ELB
• C. Auto scaling
• D. Amazon EMR

Answer: D

Explanation: Elastic Beanstalk leverages AWS services such as Amazon Elastic Cloud Compute (Amazon EC2), Amazon Simple Storage Service (Amazon S3), Amazon Simple Notification Service (Amazon SNS), Elastic Load Balancing and Auto Scaling to deliver the same highly reliable, scalable, and cost-effective infrastructure that hundreds of thousands of businesses depend on today.
Reference: http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/NeIcome.html

NEW QUESTION 14
You are inserting 1000 new items every second in a DynamoDB table. Once an hour these items are analyzed and then are no longer needed. You need to minimize provisioned throughput, storage, and API calls.
Given these requirements, what is the most efficient way to manage these Items after the analysis?

• A. Retain the items in a single table
• B. Delete items indMdually over a 24 hour period
• C. Delete the table and create a new table per hour
• D. Create a new table per hour

Answer: C

NEW QUESTION 15
When AutoScaIing is launching a new instance based on condition, which of the below mentioned policies will it follow?

• A. Based on the criteria defined with cross zone Load balancing
• B. Launch an instance which has the highest load distribution
• C. Launch an instance in the AZ with the fewest instances
• D. Launch an instance in the AZ which has the highest instances

Answer: C

Explanation: AutoScaIing attempts to distribute instances evenly between the Availability Zones that are enabled for the user’s AutoScaIing group. Auto Scaling does this by attempting to launch new instances in the Availability Zone with the fewest instances.
Reference:http://docs.aws.amazon.com/AutoScaIing/latest/Deve|operGuide/AS_Concepts.htmI

NEW QUESTION 16
An orgAMzation has created an application which is hosted on the AWS EC2 instance. The application stores images to S3 when the end user uploads to it. The orgAMzation does not want to store the AWS secure credentials required to access the S3 inside the instance. Which of the below mentioned options is a possible solution to avoid any security threat?

• A. Use the IAM role and assign it to the instance.
• B. Since the application is hosted on EC2, it does not need credentials to access S3.
• C. Use the X.509 certificates instead of the access and the secret access keys.
• D. Use the IAM based single sign between the AWS resources and the orgAMzation applicatio

Answer: A

Explanation: The AWS IAM role uses temporary security credentials to access AWS services. Once the role is assigned to an instance, it will not need any security credentials to be stored on the instance. Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html

NEW QUESTION 17
An orgAMzation has launched two applications: one for blogging and one for ECM on the same AWS Linux EC2 instance running in the AWS VPC. The orgAMzation has attached two private IPs (primary and secondary) to the above mentioned instance. The orgAMzation wants the instance OS to recognize the secondary IP address. How can the orgAMzation configure this?

• A. Use the ec2-net-utility package which updates routing tables, uses DHCP to refresh the secondary IP and adds the network interface.
• B. Use the ec2-net-utils package which will configure an additional network interface and update the routing table
• C. Use the ec2-ip-update package which can configure the network interface as well as update the secondary IP with DHCP.
• D. Use the ec2-ip-utility package which can update the routing tables as well as refresh the secondary IP using DHCP.

Answer: B

Explanation: A Virtual Private Cloud (VPC) is a virtual network dedicated to the user’s AWS account. It enables the
user to launch AWS resources into a virtual network that the user has defined. With VPC the user can specify multiple private IP addresses for his instances.
The number of network interfaces and private IP addresses that a user can specify for an instance depends on the instance type. This scenario helps when the user wants to host multiple websites on a single EC2 instance. After the user has assigned a secondary private IP address to his instance, he needs to configure the operating system on that instance to recognize the secondary private IP address. For AWS Linux, the ec2-net-utils package can take care of this step. It configures additional network interfaces that the user can attach while the instance is running, refreshes secondary IP addresses during DHCP lease renewal, and updates the related routing rules.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/MuItipIeIP.html

NEW QUESTION 18
A user is trying to share a video file with all his friends. Which of the below mentioned AWS services will be cheapest and easy to use?

• A. AWS S3
• B. AWS EC2
• C. AWS RRS
• D. AWS Glacier

Answer: C

Explanation: AWS RRS provides the same functionality as AWS S3, but at a cheaper rate. It is ideally suited for non mission critical applications. It provides less durability than S3, but is a cheaper option.
Reference: http://docs.aws.amazon.com/AmazonS3/Iatest/dev/UsingRRS.htmI