Amazon AWS-Certified-Developer-Associate Dumps Questions 2021

NEW QUESTION 1
Which EC2 API call would you use to retrieve a list of Amazon Machine Images (AMIs)?

• A. Descnbelnstances
• B. DescribeAMIs
• C. Describelmages
• D. GetAMIs
• E. You cannot retrieve a list of AMIs as there are over 10,000 AMIs

Answer: E

NEW QUESTION 2
AWS Elastic Load Balancer supports SSL termination.

• A. Tru
• B. For specific availability zones only.
• C. False
• D. Tru
• E. For specific regions only
• F. Tru
• G. For all regions

Answer: D

Explanation: You can configure your load balancer in ELB (Elastic Load Balancing) to use a SSL certificate in order to improve your system security.The load balancer uses the certificate to terminate and then decrypt requests before sending them to the back-end instances. Elastic Load Balancing uses AWS Identity and Access Management (IAM) to upload your certificate to your load balancer.
Reference: http://docs.aws.amazon.com/EIasticLoadBaIancing/latest/DeveIoperGuide/US_SettingUpLoadBaIancerH TTPS.htmI

NEW QUESTION 3
In relation to Amazon SQS, how can you ensure that messages are delivered in order?

• A. Increase the size of your queue
• B. Send them with a timestamp
• C. Give each message a unique id.
• D. AWS cannot guarantee that you will receive messages in the exact order you sent them

Answer: D

Explanation: Amazon SQS makes a best effort to preserve order in messages, but due to the distributed nature of the queue, AWS cannot guarantee that you will receive messages in the exact order you sent them. You typically place sequencing information or timestamps in your messages so that you can reorder them upon receipt.
Reference: https://aws.amazon.com/items/1343?externaI|D=1343

NEW QUESTION 4
In AWS, which security aspects are the customer’s responsibility? Choose 4 answers

• A. Life-cycle management of IAM credentials
• B. Decommissioning storage devices
• C. Security Group and ACL (Access Control List) settings
• D. Encryption of EBS (Elastic Block Storage) volumes
• E. Controlling physical access to compute resources
• F. Patch management on the EC2 instance’s operating system

Answer: ABCF

NEW QUESTION 5
A user has configured ELB. Which of the below mentioned protocols the user can configure for ELB health checks while setting up ELB?

• A. All of the options
• B. TCP
• C. HTTPS
• D. SSL

Answer: A

Explanation: An ELB performs a health check on its instances to ensure that it diverts traffic only to healthy instances. The ELB can perform a health check on HTTP, HTTPS, TCP and SSL protocols.
Reference: http://docs.aws.amazon.com/EIasticLoadBaIancing/latest/Deve|operGuide/Welcome.html

NEW QUESTION 6
In regard to DynamoDB, for which one of the following parameters does Amazon not charge you?

• A. Cost per provisioned write units
• B. Cost per provisioned read units
• C. Storage cost
• D. I/O usage within the same Region

Answer: D

Explanation: In DynamoDB, you will be charged for the storage and the throughput you use rather than for the I/O which has been used.
Reference: http://aws.amazon.com/dynamodb/pricing/

NEW QUESTION 7
A user is planning to host a web server as well as an app server on a single EC2 instance which is a part of the public subnet of a VPC. How can the user setup to have two separate public IPs and separate security groups for both the application as well as the web server?

• A. Launch a VPC instance with two network interface
• B. Assign a separate security group to each and AWS will assign a separate public IP to them.
• C. Launch VPC with two separate subnets and make the instance a part of both the subnets.
• D. Launch a VPC instance with two network interface
• E. Assign a separate security group and elastic IP to them.
• F. Launch a VPC with ELB such that it redirects requests to separate VPC instances of the public subne

Answer: C

Explanation: If you need to host multiple websites(with different IPs) on a single EC2 instance, the following is the suggested method from AWS.
Launch a VPC instance with two network interfaces
Assign elastic IPs from VPC EIP pool to those interfaces (Because, when the user has attached more than one network interface with an instance, AWS cannot assign public IPs to them.)
Assign separate Security Groups if separate Security Groups are needed
This scenario also helps for operating network appliances, such as firewalls or load balancers that have multiple private IP addresses for each network interface.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/MuItipIeIP.html

NEW QUESTION 8
Can a user associate and use his own DNS with ELB instead ofthe DNS provided by AWS ELB?

• A. Yes, by creating a CNAME with the existing domain name provider
• B. Yes, by configuring DNS in the AWS Console
• C. No
• D. Yes, only through Route 53 by mapping ELB and DNS

Answer: A

Explanation: The AWS ELB allows mapping a custom domain name with ELB. The user can map ELB with DNS in two ways: 1) By creating CNAME with the existing domain name service provider or 2) By creating a record with Route 53.
Reference:
http://docs.aws.amazon.com/E|asticLoadBaIancing/latest/DeveIoperGuide/using-domain-names-with-elb. html

NEW QUESTION 9
Doug has created a VPC with CIDR 10.201.0.0/16 in his AWS account. In this VPC he has created a public subnet with CIDR block 10.201.31.0/24. While launching a new EC2 from the console, he is not able to assign the private IP address 10.201.31.6 to this instance. Which is the most likely reason for this issue?

• A. Private IP address 10.201.31.6 is not part of the associated subnet's IP address range.
• B. Private IP address 10.201.31.6 is blocked via ACLs in Amazon infrastructure as a part of platform security.
• C. Private address IP 10.201.31.6 is currently assigned to another interface.
• D. Private IP address 10.201.31.6 is reserved by Amazon for IP networking purpose

Answer: C

Explanation: In Amazon VPC, you can assign any Private IP address to your instance as long as it is: Part of the associated subnet's IP address range
Not reserved by Amazon for IP networking purposes Not currently assigned to another interface Reference: http://aws.amazon.com/vpc/faqs/

NEW QUESTION 10
You attempt to store an object in the US-STANDARD region in Amazon S3, and receive a confirmation that it has been successfully stored. You then immediately make another API call and attempt to read this object. S3 tells you that the object does not exist
What could explain this behavior?

• A. US-STANDARD uses eventual consistency and it can take time for an object to be readable in a bucket
• B. Objects in Amazon S3 do not become visible until they are replicated to a second region.
• C. US-STANDARD imposes a 1 second delay before new objects are readable.
• D. You exceeded the bucket object limit, and once this limit is raised the object will be visible.

Answer: A

NEW QUESTION 11
An orgAMzation has 20 employees. The orgAMzation wants to give all the users access to the orgAMzation AWS account. Which of the below mentioned options is the right solution?

• A. Share the root credentials with all the users
• B. Create an IAM user for each employee and provide access to them
• C. It is not advisable to give AWS access to so many users
• D. Use the IAM role to allow access based on STS

Answer: B

Explanation: AWS Identity and Access Management is a web service that enables the AWS customers to manage users and user permissions in AWS. The IAM is targeted at orgAMzations with multiple users or systems that use AWS products such as Amazon EC2, Amazon RDS, and the AWS Management Console. With IAM, the orgAMzaiton can centrally manage users, security credentials such as access keys, and permissions that control which AWS resources users can access.
Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/IAM_Introduction.htm|

NEW QUESTION 12
When using a large Scan operation in DynamoDB, what technique can be used to minimize the impact of a scan on a tabIe's provisioned throughput?

• A. Set a smaller page size for the scan
• B. Use parallel scans
• C. Define a range index on the table
• D. Prewarm the table by updating all items

Answer: C

NEW QUESTION 13
Which of the following device names is recommended for an EBS volume that can be attached to an Amazon EC2 Instance running Windows?

• A. xvd[a-e]
• B. /mnt/sd[b-e]
• C. xvd[f-p]
• D. /dev/sda1

Answer: C

Explanation: The xvd[f-p] is the recommended device name for EBS volumes that can be attached to the Amazon EC2 Instances running on Windows.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/device_naming.html

NEW QUESTION 14
You have a number of image files to encode. In an Amazon SQS worker queue, you create an Amazon SQS message for each file specifying the command (jpeg-encode) and the location of the file in Amazon S3. Which of the following statements best describes the functionality of Amazon SQS?

• A. Amazon SQS is for single-threaded sending or receMng speeds.
• B. Amazon SQS is a non-distributed queuing system.
• C. Amazon SQS is a distributed queuing system that is optimized for horizontal scalability, not for single-threaded sending or receMng speeds.
• D. Amazon SQS is a distributed queuing system that is optimized for vertical scalability and for single-threaded sending or receMng speeds.

Answer: C

Explanation: Amazon SQS is a distributed queuing system that is optimized for horizontal scalability, not for
single-threaded sending or receMng speeds. A single client can send or receive Amazon SQS messages at a rate of about 5 to 50 messages per second. Higher receive performance can be achieved by requesting multiple messages (up to 10) in a single call. It may take several seconds before a message that has been to a queue is available to be received.
Reference: http://media.amazonwebservices.com/AWS_Storage_Options.pdf

NEW QUESTION 15
You want to have multiple versions of your application running at the same time, with all versions launched via AWS Elastic Beanstalk. Is this possible?

• A. N
• B. However if you have 2 AWS accounts this can be done
• C. N
• D. AWS Elastic Beanstalk is not designed to support multiple running environments
• E. Ye
• F. AWS Elastic Beanstalk is designed to support a number of multiple running environments
• G. Ye
• H. However AWS Elastic Beanstalk is designed to support only 2 multiple running environments

Answer: C

Explanation: AWS Elastic Beanstalk is designed to support multiple running environments. As an example you could have one for integration testing, one for pre-production, and one for production, with each environment independently configured and running on its own separate AWS resources.
Reference: https://aws.amazon.com/elasticbeansta|k/faqs/

NEW QUESTION 16
What is the maximum number of S3 Buckets available per AWS account?

• A. 100 per region
• B. there is no limit
• C. 100 per account
• D. 500 per account
• E. 100 per IAM user

Answer: C

NEW QUESTION 17
Can a user get a notification of each instance start / terminate configured with Auto Scaling?

• A. Yes, always
• B. No
• C. Yes, if configured with the Auto Scaling group
• D. Yes, if configured with the Launch Config

Answer: C

Explanation: The user can get notifications using SNS if he has configured the notifications while creating the Auto Scaling group.
Reference: http://docs.aws.amazon.com/AutoScaIing/latest/DeveIoperGuide/GettingStartedTutoriaI.html

NEW QUESTION 18
You have been given a scope to deploy some AWS infrastructure for a large orgAMsation. The requirements are that you will have a lot of EC2 instances but may need to add more when the average utilization of your Amazon EC2 fileet is high and conversely remove them when CPU utilization is low. Which AWS services would be best to use to accomplish this?

• A. Amazon CIoudFront, Amazon CIoudWatch and Elastic Load Balancing.
• B. Auto Scaling, Amazon CIoudWatch and AWS CIoudTraiI.
• C. Auto Scaling, Amazon CIoudWatch and Elastic Load Balancing.
• D. Auto Scaling, Amazon CIoudWatch and AWS Elastic Beanstalk

Answer: C

Explanation: Auto Scaling enables you to follow the demand curve for your applications closely, reducing the need to manually provision Amazon EC2 capacity in advance. For example, you can set a condition to add new Amazon EC2 instances in increments to the Auto Scaling group when the average utilization of your Amazon EC2 fileet is high; and similarly, you can set a condition to remove instances in the same increments when CPU utilization is low. If you have predictable load changes, you can set a schedule through Auto Scaling to plan your scaling actMties. You can use Amazon CIoudWatch to send alarms to trigger scaling actMties and Elastic Load Balancing to help distribute traffic to your instances within Auto Scaling groups. Auto Scaling enables you to run your Amazon EC2 fileet at optimal utilization. Reference: http://aws.amazon.com/autoscaIing/