A Review Of Validated DVA-C01 Training

NEW QUESTION 1
A user has set an IAM policy where it allows all requests if a request from IP 10.10.10.1/32. Another policy allows all the requests between 5 PM to 7 PM. What will happen when a user is requesting access from IP 10.10.10.1/32 at 6 PM?

• A. IAM will throw an error for policy conflict
• B. It is not possible to set a policy based on the time or IP
• C. It will deny access
• D. It will allow access

Answer: D

Explanation:
With regard to IAM, when a request is made, the AWS service decides whether a given request should be allowed or denied. The evaluation logic follows these rules:
By default, all requests are denied. (In general, requests made using the account credentials for resources in the account are always allowed.)
An explicit allow policy overrides this default. An explicit deny policy overrides any allows. Reference:
http://docs.aws.amazon.com/IAM/latest/UserGuide/AccessPoIicyLanguage_EvaIuationLogic.htmI

NEW QUESTION 2
A user has created a MySQL RDS instance. Which of the below mentioned options is mandatory to configure while creating an instance?

• A. MuIti AZ deployment setup
• B. Automated backup window
• C. Availability Zone
• D. Maintenance window

Answer: A

Explanation:
When creating an RDS instance, the user needs to specify whether it is Nlulti AZ or not. If the user does not provide the value for the zone, the maintenance window or automated backup window, RDS will automatically select the value.
Reference: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.lV|u|tiAZ.htmI

NEW QUESTION 3
The AWS console for DynamoDB enables you to do all the following operations, except:

• A. Set up alarms to monitor your tabIe's capacity usage.
• B. Create, update, and delete tables.
• C. Import Data from other databases or from files.
• D. View your tabIe's top monitoring metrics on real-time graphs from CIoudWatc

Answer: C

Explanation:
The AWS console for DynamoDB enables you to do all the above operation but not Importing Data from other databases or from files and it is not possible to do it.
Reference: http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/ConsoIeDynamoDB.html

NEW QUESTION 4
Regarding Amazon SNS, when you want to subscribe to a topic and receive notifications to your email, in the Protocol drop-down box, you should select .

• A. Email
• B. Message
• C. SMTP
• D. IMAP

Answer: A

Explanation:
In Amazon SNS, when you want to subscribe to a topic and receive notifications to your email, select Email in the Protocol drop-down box. Enter an email address you can use to receive the notification in the Endpoint field.
Reference: http://docs.aws.amazon.com/sns/latest/dg/SubscribeTopic.html

NEW QUESTION 5
When working with AWS CIoudFormation Templates what is the maximum number of stacks that you can create?

• A. 500
• B. 50
• C. 20
• D. 10

Answer: C

Explanation:
C|oudFormation Limits
Maximum number of AWS CIoudFormation stacks that you can create is 20 stacks. Reference:
http://docs.aws.amazon.com/AWSCIoudFormation/latest/UserGuide/cloudformation-Iimits.htmI

NEW QUESTION 6
Which of the following statements about SWF are true? Choose 3 answers

• A. SWF tasks are assigned once and never duplicated
• B. SWF requires an S3 bucket for workflow storage
• C. SWF workflow executions can last up to a year
• D. SWF triggers SNS notifications on task assignment
• E. SWF uses deciders and workers to complete tasks
• F. SWF requires atleast 1 EC2 instance per domain

Answer: ACE

NEW QUESTION 7
A user has created a MySQL RDS instance with PIOPS. Which of the below mentioned statements will help user understand the advantage of PIOPS?

• A. The user can achieve additional dedicated capacity for the EBS I/O with an enhanced RDS option
• B. It uses optimized EBS volumes and optimized configuration stacks
• C. It provides a dedicated network bandwidth between EBS and RDS
• D. It uses a standard EBS volume with optimized configuration the stacks

Answer: B

Explanation:
RDS DB instance storage comes in two types: standard and provisioned IOPS. Standard storage is allocated on the Amazon EBS volumes and connected to the user’s DB instance. Provisioned IOPS uses optimized EBS volumes and an optimized configuration stack. It provides additional, dedicated capacity for the EBS I/O.
Reference: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Welcome.html

NEW QUESTION 8
A user has created photo editing software and hosted it on EC2. The software accepts requests from the user about the photo format and resolution and sends a message to S3 to enhance the picture accordingly. Which of the below mentioned AWS services will help make a scalable software with the AWS infrastructure in this scenario?

• A. AWS Elastic Transcoder
• B. AWS Simple Notification Service
• C. AWS Simple Queue Service
• D. AWS Glacier

Answer: C

Explanation:
Amazon Simple Queue Service (SQS) is a fast, reliable, scalable, and fully managed message queuing service. SQS provides a simple and cost-effective way to decouple the components of an application. The user can configure SQS, which will decouple the call between the EC2 application and S3. Thus, the application does not keep waiting for S3 to provide the data.
Reference: http://aws.amazon.com/sqs/faqs/

NEW QUESTION 9
A root AWS account owner has created three IAM users: Bob, John and Michael. Michael is the IAM administrator. Bob and John are not the superpower users, but users with some pre-defined policies. John does not have access to modify his password. Thus, he asks Bob to change his password. How can Bob change John’s password?

• A. This statement is fals
• B. It should be Michael who changes the password for John
• C. It is not possible that John cannot modify his password
• D. Provided Bob is the manager of John
• E. Provided Michael has added Bob to a group, which has permissions to modify the IAM passwords

Answer: D

Explanation:
Generally with IAM users, the password can be modified in two ways. The first option is to define the IAM level policy which allows each user to modify their own passwords. The other option is to create a group and create a policy for the group which can change the passwords of various IAM users.
Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/HowToPwdIAMUser.htmI

NEW QUESTION 10
A user has launched an EC2 instance. However, due to some reason the instance was terminated. If the user wants to find out the reason for termination, where can he find the details?

• A. The user can get information from the AWS console, by checking the Instance description under the State transition reason label
• B. The user can get information from the AWS console, by checking the Instance description under the Instance Termination reason label
• C. The user can get information from the AWS console, by checking the Instance description under the Instance Status Change reason label
• D. It is not possible to find the details after the instance is terminated

Answer: A

Explanation:
An EC2 instance, once terminated, may be available in the AWS console for a while after termination. The user can find the details about the termination from the description tab under the label State transition reason. If the instance is still running, there will be no reason listed. If the user has explicitly stopped or terminated the instance, the reason will be "User initiated shutdown".
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_|nstanceStraightToTerminated.html

NEW QUESTION 11
A user has configured a website and launched it using the Apache web server on port 80. The user is using ELB with the EC2 instances for Load Balancing. What should the user do to ensure that the EC2 instances accept requests only from ELB?

• A. Open the port for an ELB static IP in the EC2 security group
• B. Configure the security group of EC2, which allows access to the ELB source security group
• C. Configure the EC2 instance so that it only listens on the ELB port
• D. Configure the security group of EC2, which allows access only to the ELB listener

Answer: B

Explanation:
When a user is configuring ELB and registering the EC2 instances with it, ELB will create a source security group. If the user wants to allow traffic only from ELB, he should remove all the rules set for the other requests and open the port only for the ELB source security group.
Reference:
http://docs.aws.amazon.com/EIasticLoadBaIancing/latest/DeveIoperGuide/using-elb-security-groups.htmI

NEW QUESTION 12
A user has enabled automated backup for an RDS instance. What is the longest duration for which the user can retain the automated backup?

• A. 25 days
• B. 15 days
• C. 45 days
• D. 35 days

Answer: D

Explanation:
Amazon RDS provides two different methods for backing up and restoring the Amazon DB instances: automated backups and DB snapshots. Automated backups automatically back up the DB instance during a specific, user-definable backup window, and keep the backups for a limited, user-specified period of time. The maximum period can be 35 days.
Reference: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.BackingUpAndRestoringAmazonR DSInstances.htmI

NEW QUESTION 13
A user is trying to find the state of an S3 bucket with respect to versioning. Which of the below mentioned states AWS will not return when queried?

• A. versioning-enabled
• B. versioning-suspended
• C. unversioned
• D. versioned

Answer: D

Explanation:
S3 buckets can be in one of the three states: unversioned (the default), versioning-enabled or versioning-suspended. The bucket owner can configure the versioning state of a bucket. The versioning state applies to all (never some) of the objects in that bucket. The first time owner enables a bucket for versioning, objects in it are thereafter always versioned and given a unique version ID.
Reference: http://docs.aws.amazon.com/AmazonS3/Iatest/dev/Versioning.htmI

NEW QUESTION 14
Which of the following is chosen as the default region when making an API call with an AWS SDK?

• A. ap-northeast-1
• B. us-west-2
• C. us-east-1
• D. eu-west-1
• E. us-central-1

Answer: C

NEW QUESTION 15
A user has configured ELB. Which of the below mentioned protocols the user can configure for ELB health checks while setting up ELB?

• A. All of the options
• B. TCP
• C. HTTPS
• D. SSL

Answer: A

Explanation:
An ELB performs a health check on its instances to ensure that it diverts traffic only to healthy instances. The ELB can perform a health check on HTTP, HTTPS, TCP and SSL protocols.
Reference: http://docs.aws.amazon.com/EIasticLoadBaIancing/latest/Deve|operGuide/Welcome.html

NEW QUESTION 16
......