NEW QUESTION 1
You need to create a JSON-formatted text file for AWS CIoudFormation. This is your first template and the only thing you know is that the templates include several major sections but there is only one that is required for it to work. What is the only section required?

• A. Mappings
• B. Outputs
• C. Resources
• D. Conditions

Answer: C

Explanation: AWS CIoudFormation is a service that helps you model and set up your Amazon Web Services resources so that you can spend less time managing those resources and more time focusing on your applications that run in AWS. You create a template that describes all the AWS resources that you want (like Amazon EC2 instances or Amazon RDS DB instances), and AWS CIoudFormation takes care of provisioning and configuring those resources for you.
A template is a JSON-formatted text file that describes your AWS infrastructure. Templates include several major sections.
The Resources section is the only section that is required.
The first character in the template must be an open brace ({), and the last character must be a closed brace (}). The following template fragment shows the template structure and sections.
Reference: http://docs.aws.amazon.com/AWSCIoudFormation/latest/UserGuide/template-anatomy.html

NEW QUESTION 2
You have set up an Auto Scaling group. The cool down period for the Auto Scaling group is 7 minutes. The first instance is launched after 3 minutes, while the second instance is launched after 4 minutes. How many minutes after the first instance is launched will Auto Scaling accept another scaling actMty request?

• A. 11 minutes
• B. 7 minutes
• C. 10 minutes
• D. 14 minutes

Answer: A

Explanation: If an Auto Scaling group is launching more than one instance, the cool down period for each instance starts after that instance is launched. The group remains locked until the last instance that was launched has completed its cool down period. In this case the cool down period for the first instance starts after 3 minutes and finishes at the 10th minute (3+7 cool down), while for the second instance it starts at the 4th minute and finishes at the 11th minute (4+7 cool down). Thus, the Auto Scaling group will receive another request only after 11 minutes.
Reference:http://docs.aws.amazon.com/AutoScaIing/latest/Deve|operGuide/AS_Concepts.htmI

NEW QUESTION 3
When automatic failover occurs, Amazon RDS will emit a DB Instance event to inform you that automatic failover occurred. You can use the to ret urn information about events related to your DB Instance

• A. FetchFai|ure
• B. DescriveFai|ure
• C. DescribeEvents
• D. FetchEvents

Answer: C

NEW QUESTION 4
In the context of AWS support, why must an EC2 instance be unreachable for 20 minutes rather than allowing customers to open tickets immediately?

• A. Because most reachability issues are resolved by automated processes in less than 20 minutes
• B. Because all EC2 instances are unreachable for 20 minutes every day when AWS does routine maintenance
• C. Because all EC2 instances are unreachable for 20 minutes when first launched
• D. Because of all the reasons listed here

Answer: A

Explanation: An EC2 instance must be unreachable for 20 minutes before opening a ticket, because most reachability issues are resolved by automated processes in less than 20 minutes and will not require any action on the part of the customer. If the instance is still unreachable after this time frame has passed, then you should open a case with support.
Reference: https://aws.amazon.com/premiumsupport/faqs/

NEW QUESTION 5
You manually launch a NAT AMI in a public subnet. The network is properly configured. Security groups and network access control lists are property configured. Instances in a private subnet can access the NAT. The NAT can access the Internet. However, private instances cannot access the Internet. What additional step is required to allow access from the private instances?

• A. Enable Source/Destination Check on the private Instances.
• B. Enable Source/Destination Check on the NAT instance.
• C. Disable Source/Destination Check on the private instances.
• D. Disable Source/Destination Check on the NAT instanc

Answer: B

NEW QUESTION 6
A user is making a scalable web application with compartmentalization. The user wants the log module to be able to be accessed by all the application functionalities in an asynchronous way. Each module of the application sends data to the log module, and based on the resource availability it will process the logs. Which AWS service helps this functionality?

• A. AWS Simple Queue Service.
• B. AWS Simple Notification Service.
• C. AWS Simple Workflow Service.
• D. AWS Simple Email Servic

Answer: A

Explanation: Amazon Simple Queue Service (SQS) is a highly reliable distributed messaging system for storing messages as they travel between computers. By using Amazon SQS, developers can simply move data between distributed application components. It is used to achieve compartmentalization or loose coupling. In this case all the modules will send a message to the logger queue and the data will be processed by queue as per the resource availability.
Reference: http://media.amazonwebservices.com/AWS_Building_FauIt_To|erant_AppIications.pdf

NEW QUESTION 7
You have three Amazon EC2 instances with Elastic IP addresses in the US East (Virginia) region, and you want to distribute requests across all three IPs evenly for users for whom US East (Virginia) is the appropriate region.
How many EC2 instances would be sufficient to distribute requests in other regions?

• A. 3
• B. 9
• C. 2
• D. 1

Answer: D

Explanation: If your application is running on Amazon EC2 instances in two or more Amazon EC2 regions, and if you have more than one Amazon EC2 instance in one or more regions, you can use latency-based routing to route traffic to the correct region and then use weighted resource record sets to route traffic to instances within the region based on weights that you specify.
For example, suppose you have three Amazon EC2 instances with Elastic IP addresses in the US East (Virginia) region and you want to distribute requests across all three IPs evenly for users for whom US East (Virginia) is the appropriate region. Just one Amazon EC2 instance is sufficient in the other regions, although you can apply the same technique to many regions at once.
Reference: http://docs.aws.amazon.com/Route53/Iatest/DeveIoperGuide/Tutorials.html

NEW QUESTION 8
What is the Reduced Redundancy option in Amazon 53?

• A. Less redundancy for a lower cost.
• B. It doesn't exist in Amazon 53, but in Amazon EBS.
• C. It allows you to destroy any copy of your files outside a specific jurisdiction.
• D. It doesn't exist at all

Answer: A

NEW QUESTION 9
What is the charge for the data transfer incurred in replicating data between your primary and standby?

• A. No charg
• B. It is free.
• C. Double the standard data transfer charge
• D. Same as the standard data transfer charge
• E. Half of the standard data transfer charge

Answer: C

NEW QUESTION 10
You want to use AWS Import/Export to send data from your S3 bucket to several of your branch offices. What should you do if you want to send 10 storage units to AWS?

• A. Make sure your disks are encrypted prior to shipping.
• B. Make sure you format your disks prior to shipping.
• C. Make sure your disks are 1TB or more.
• D. Make sure you submit a separate job request for each devic

Answer: D

Explanation: When using Amazon Import/Export, a separate job request needs to be submitted for each physical device even if they belong to the same import or export job.
Reference: http://docs.aws.amazon.com/AWSImportExport/latest/DG/Concepts.html

NEW QUESTION 11
Which of the following would you use to list your AWS Import/Exportjobs?

• A. Amazon RDS
• B. AWS Import/Export Web Service Tool
• C. Amazon S3 REST API
• D. AWS Elastic Beanstalk

Answer: C

Explanation: You can list AWS Import/Export jobs with the ListJobs command using the command line client or REST API.
Reference: http://docs.aws.amazon.com/AWSImportExport/latest/DG/ListingYourJobs.html

NEW QUESTION 12
You're trying to delete an SSL certificate from the IAM certificate store, and you're getting the message "Certificate: <certificate-id> is being used by CIoudFront." Which of the following statements is probably the reason why you are getting this error?

• A. Before you can delete an SSL certificate, you need to either rotate SSL certificates or revert from using a custom SSL certificate to using the default CIoudFront certificate.
• B. You can't delete SSL certificates . You need to request it from AWS.
• C. Before you can delete an SSL certificate, you need to set up the appropriate access level in IAM
• D. Before you can delete an SSL certificate you need to set up https on your serve

Answer: A

Explanation: CIoudFront is a web service that speeds up distribution of your static and dynamic web content, for example, .htmI, .css, .php, and image files, to end users.
Every CIoudFront web distribution must be associated either with the default CIoudFront certificate or with a custom SSL certificate. Before you can delete an SSL certificate, you need to either rotate SSL certificates (replace the current custom SSL certificate with another custom SSL certificate) or revert from using a custom SSL certificate to using the default CIoudFront certificate.
Reference: http://docs.aws.amazon.com/AmazonCIoudFront/latest/Deve|operGuide/Troubleshooting.htm|

NEW QUESTION 13
Which of the following are characteristics of Amazon VPC subnets? Choose 2 answers

• A. Each subnet spans at least 2 Availability Zones to provide a high-availability environment.
• B. Each subnet maps to a single Availability Zone.
• C. CIDR block mask of/25 is the smallest range supported.
• D. By default, all subnets can route between each other, whether they are private or public.
• E. Instances in a private subnet can communicate with the Internet only if they have an Elastic I

Answer: BE

NEW QUESTION 14
Your company is getting ready to do a major public announcement of a social media site on AWS. The website is running on EC2 instances deployed across multiple Availability Zones with a MuIti-AZ RDS MySQL Extra Large DB Instance. The site performs a high number of small reads and writes per second and relies on an eventual consistency model. After comprehensive tests you discover that there is read contention on RDS MySQL. Which are the best approaches to meet these requirements? (Choose 2 answers)

• A. Deploy EIasticCache in-memory cache running in each availability zone
• B. Implement sharding to distribute load to multiple RDS MySQL instances
• C. Increase the RDS MySQL Instance size and Implement provisioned IQPS
• D. Add an RDS MySQL read replica in each availability zone

Answer: AC

NEW QUESTION 15
A user is observing the EC2 CPU utilization metric on CIoudWatch. The user has observed some interesting patterns while filtering over the 1 week period for a particular hour. The user wants to zoom that data point to a more granular period. How can the user do that easily with CIoudWatch?

• A. The user can zoom a particular period by selecting that period with the mouse and then releasing the mouse
• B. The user can zoom a particular period by specifying the aggregation data for that period
• C. The user can zoom a particular period by double clicking on that period with the mouse
• D. The user can zoom a particular period by specifying the period in the Time Range

Answer: A

Explanation: Amazon CIoudWatch provides the functionality to graph the metric data generated either by the AWS services or the custom metric to make it easier for the user to analyse. The AWS CIoudWatch console provides the option to change the granularity of a graph and zoom in to see data over a shorter time period. To zoom, the user has to click in the graph details pane, drag on the graph area for selection, and then release the mouse button.
Reference: http://docs.aws.amazon.com/AmazonCloudWatch/Iatest/Deve|operGuide/zoom_in_on_graph.htmI

NEW QUESTION 16
What is Amazon Glacier?

• A. You mean Amazon "Iceberg": it's a low-cost storage service.
• B. A security tool that allows to "freeze" an EBS volume and perform computer forensics on it.
• C. A low-cost storage service that provides secure and durable storage for data archMng and backup.
• D. It's a security tool that allows to "freeze" an EC2 instance and perform computer forensics on i

Answer: C

NEW QUESTION 17
What does Amazon Cloud Formation provide?

• A. The ability to setup Autoscaling for Amazon EC2 instances.
• B. None of these.
• C. A templated resource creation for Amazon Web Services.
• D. A template to map network resources for Amazon Web Service

Answer: D

NEW QUESTION 18
Your organization is in the business of architecting complex transactional databases. For a variety of reasons, this has been done on EBS. What is AWS's recommendation for customers who have architected databases using EBS for backups?

• A. Backups to Amazon S3 be performed through the database management system.
• B. Backups to AWS Storage Gateway be performed through the database management system.
• C. If you take regular snapshots no further backups are required.
• D. Backups to Amazon Glacier be performed through the database management syste

Answer: A

Explanation: Data stored in Amazon EBS volumes is redundantly stored in multiple physical locations as part of normal operation of those services and at no additional charge.
However, Amazon EBS replication is stored within the same availability zone, not across multiple zones; therefore, it is highly recommended that you conduct regular snapshots to Amazon S3 for long-term data durability.
For customers who have architected complex transactional databases using EBS, it is recommended that backups to Amazon S3 be performed through the database management system so that distributed transactions and logs can be checkpointed.
AWS does not perform backups of data that are maintained on virtual disks attached to running instances on Amazon EC2.
Reference: http://d0.awsstatic.com/whitepapers/Security/AWS%20Security%20Whitepaper.pdf

NEW QUESTION 19
You need to change some settings on Amazon Relational Database Service but you do not want the database to reboot immediately which you know might happen depending on the setting that you change. Which of the following will cause an immediate DB instance reboot to occur?

• A. You change storage type from standard to PIOPS, and Apply Immediately is set to true.
• B. You change the DB instance class, and Apply Immediately is set to false.
• C. You change a static parameter in a DB parameter group.
• D. You change the backup retention period for a DB instance from 0 to a nonzero value or from a nonzero value to 0, and Apply Immediately is set to false.

Answer: A

Explanation: A DB instance outage can occur when a DB instance is rebooted, when the DB instance is put into a state that prevents access to it, and when the database is restarted. A reboot can occur when you manually reboot your DB instance or when you change a DB instance setting that requires a reboot before it can take effect.
A DB instance reboot occurs immediately when one of the following occurs:
You change the backup retention period for a DB instance from 0 to a nonzero value or from a nonzero value to 0 and set Apply Immediately to true.
You change the DB instance class, and Apply Immediately is set to true.
You change storage type from standard to PIOPS, and Apply Immediately is set to true.
A DB instance reboot occurs during the maintenance window when one of the following occurs:
You change the backup retention period for a DB instance from 0 to a nonzero value or from a nonzero value to 0, and Apply Immediately is set to false.
You change the DB instance class, and Apply Immediately is set to false. Reference:
http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_Troub|eshooting.htm|#CHAP_TroubI eshooting.Security