Virtual AWS-Certified-Developer-Associate Braindumps 2021

NEW QUESTION 1
In Amazon SNS, to send push notifications to mobile devices using Amazon SNS and ADM, you need to obtain the following, except:

• A. Client secret
• B. Client ID
• C. Device token
• D. Registration ID

Answer: C

Explanation: To send push notifications to mobile devices using Amazon SNS and ADM, you need to obtain the following: Registration ID and Client secret.
Reference: http://docs.aws.amazon.com/sns/latest/dg/SNSMobiIePushPrereq.htmI

NEW QUESTION 2
Which header received at the EC2 instance identifies the port used by the client while requesting ELB?

• A. X-Forvvarded-Proto
• B. X-Requested-Proto
• C. X-Forvvarded-Port
• D. X-Requested-Port

Answer: C

Explanation: The X-Forvvarded-Port request header helps the user identify the port used by the client while sending a request to ELB.
Reference: http://docs.aws.amazon.com/EIasticLoadBalancing/latest/DeveIoperGuide/TerminologyandKeyConcepts. html

NEW QUESTION 3
A user is having access to objects of an S3 bucket which is not owned by him. If he is trying to set the objects of that bucket public, which of the below mentioned options may be a right fit for this action?

• A. Make the bucket public with full access
• B. Define the policy for the bucket
• C. Provide ACL on the object
• D. Create an IAM user with permission

Answer: C

Explanation: An S3 object ACL is the only way to manage access to objects which are not owned by the bucket owner. An AWS account that owns the bucket can grant another AWS account permission to upload objects. The bucket owner does not own these objects. The AWS account that created the object must grant permissions using object ACLs.
Reference: http://docs.aws.amazon.com/AmazonS3/latest/dev/access-policy-alternatives-guidelines.html

NEW QUESTION 4
Regarding Amazon SQS, what happens if there is no actMty against a queue for more than 30 consecutive days?

• A. Your account will be suspended
• B. The queue may be deleted
• C. Nothing
• D. The queue will be deleted

Answer: B

Explanation: AWS reserve the right to delete a queue if none of the following requests have been issued against the queue for more than 30 consecutive days:
SendMessage ReceiveMessage DeIeteMessage GetQueueAttributes SetQueueAttributes
You should design your application with this in mind. Reference: https://aws.amazon.com/sqs/faqs/

NEW QUESTION 5
Does AWS CIoudFormation support Amazon EC2 tagging?

• A. It depends if the Amazon EC2 tagging has been defined in the template.
• B. No, it doesn’t support Amazon EC2 tagging.
• C. No, CIoudFormation doesn’t support any tagging
• D. Yes, AWS CIoudFormation supports Amazon EC2 tagging

Answer: D

Explanation: In AWS CIoudFormation, Amazon EC2 resources that support the tagging feature can also be tagged in an AWS template. The tag values can refer to template parameters, other resource names, resource attribute values (e.g. addresses), or values computed by simple functions (e.g., a concatenated list of strings).
Reference: http://aws.amazon.com/c|oudformation/faqs/

NEW QUESTION 6
A user is launching an AWS RDS instance with MySQL. The user wants to enable the Nlulti AZ feature. Which of the below mentioned parameters will not be allowed to configure by RDS?

• A. Availability Zone
• B. Region
• C. DB subnet group
• D. Database port

Answer: A

Explanation: If the user is launching RDS with Multi AZ the user cannot provision the Availability Zone. RDS is launched automatically instead
Reference: https://console.aws.amazon.com/rds/

NEW QUESTION 7
A corporate web application is deployed within an Amazon VPC, and is connected to the corporate data center via IPSec VPN. The application must authenticate against the on-premise LDAP server. Once authenticated, logged-in users can only access an S3 keyspace specific to the user.
Which two approaches can satisfy the objectives? Choose 2 answers

• A. The application authenticates against LDA
• B. The application then calls the IAM Security Service to login to IAM using the LDAP credential
• C. The application can use the IAM temporary credentials to access the appropriate S3 bucket.
• D. The application authenticates against LDAP, and retrieves the name of an IAM role associated with the use
• E. The application then calls the IAM Security Token Service to assume that IAM Rol
• F. The application can use the temporary credentials to access the appropriate S3 bucket.
• G. The application authenticates against IAM Security Token Service using the LDAP credential
• H. The application uses those temporary AWS security credentials to access the appropriate S3 bucket.
• I. Develop an identity broker which authenticates against LDAP, and then calls IAM Security Token Service to get IAM federated user credential
• J. The application calls the identity broker to get IAM federated user credentials with access to the appropriate S3 bucket.
• K. Develop an identity broker which authenticates against IAM Security Token Service to assume an IAM Role to get temporary AWS security credential
• L. The application calls the identity broker to get AWS temporary security credentials with access to the appropriate S3 bucket.

Answer: BD

NEW QUESTION 8
A user has created a snapshot of an EBS volume. Which of the below mentioned usage cases is not possible with respect to a snapshot?

• A. Nlirroring the volume from one AZ to another AZ
• B. Launch an instance
• C. Decrease the volume size
• D. Increase the size of the volume

Answer: C

Explanation: The EBS snapshots are a point in time backup ofthe volume. It is helpful to move the volume from one AZ to another or launch a new instance. The user can increase the size of the volume but cannot decrease it less than the original snapshot size.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSSnapshots.htmI

NEW QUESTION 9
In regard to DynamoDB, can I delete local secondary indexes?

• A. Yes, if it is a primary hash key index
• B. No
• C. Yes, if it is a local secondary indexes
• D. Yes, if it is a Global secondary indexes

Answer: B

Explanation: In DynamoDB, an index cannot be modified once it is created. Reference: http://aws.amazon.com/dynamodb/faqs/#security_anchor

NEW QUESTION 10
You are using Amazon SQS and are getting a "Queue Deleted RecentIy" error. What is wrong?

• A. The message is too big
• B. You have incorrect permissions
• C. Another user has deleted the queue
• D. If you delete a queue, you need to wait for at least 60 seconds before creating a queue with the same name

Answer: D

Explanation: If you delete a queue, you need to wait for at least 60 seconds before creating a queue with the same name. Please note that when you delete a queue, the deletion process takes up to 60 seconds. Requests you send to a recently deleted queue might succeed during the 60-second period. For example, a SendlVIessage request might succeed, but after 60 seconds the queue and that message you sent no longer exists.
Reference: https://aws.amazon.com/items/1343?externaI|D=1343

NEW QUESTION 11
A user is setting up an Elastic Load BaIancer(ELB). Which of the below parameters should the user consider so as the instance gets registered with the ELB?

• A. ELB DNS
• B. IP address
• C. Security group
• D. ELB IP

Answer: B

Explanation: The EC2 instances are registered with the load balancer using the IP addresses associated with the instances. When an instance is stopped and then started, the IP address associated with the instance changes. This prevents the load balancer from routing traffic to the restarted instance. When the user stops and then starts registered EC2 instances, it is recommended that to de-register the stopped instance from load balancer, and then register the restarted instance. Failure to do so may prevent the load balancer from performing health checks and routing the traffic to the restarted instance.

NEW QUESTION 12
Can one instance be registered with two ELBs in the same region?

• A. No
• B. Yes, provided both ELBs have the same health check configuration
• C. Yes, always
• D. Yes, provided both ELBs are in the same AZ

Answer: C

Explanation: Yes, it is possible to have one instance part of two separate ELBs, though both ELBs have different configurations. ELBs are never launched in specific zones.
Reference:
http://docs.aws.amazon.com/EIasticLoadBaIancing/latest/DeveIoperGuide/enable-disable-az.html

NEW QUESTION 13
A user has created a queue named "myqueue" with SQS. There are four messages published to queue which are not received by the consumer yet. If the user tries to delete the queue, what will happen?

• A. A user can never delete a queue manuall
• B. AWS deletes it after 30 days of inactMty on queue
• C. It will initiate the delete but wait for four days before deleting until all messages are deleted automatically.
• D. It will ask user to delete the messages first
• E. It will delete the queue

Answer: D

Explanation: SQS allows the user to move data between distributed components of applications so they can perform different tasks without losing messages or requiring each component to be always available. The user can delete a queue at any time, whether it is empty or not. It is important to note that queues retain
messages for a set period of time. By default, a queue retains messages for four days. Reference:
http://docs.aws.amazon.com/AWSSimpIeQueueService/latest/SQSDeveIoperGuide/SQSConcepts.html

NEW QUESTION 14
ExamKiIIer has three AWS accounts. They have created separate IAM users within each account. ExamKiIIer wants a single IAM console URL such as https://examkiIIer.signin.aws.amazon.com/consoIe/ for all account users. How can this be achieved?

• A. Merge all the accounts with consolidated billing
• B. Create the same account alias with each account ID
• C. It is not possible to have the same IAM account login URL for separate AWS accounts
• D. Create the S3 bucket with an alias name and use the redirect rule to forward requests to various accounts

Answer: C

Explanation: If a user wants the URL of the AWS IAM sign-in page to have a company name instead of the AWS account ID, he can create an alias for his AWS account ID. The alias should be unique.
Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/AccountAIias.html

NEW QUESTION 15
What is the maximum number of tags that a user can assign to an EC2 instance?

• A. 50
• B. 10
• C. 5
• D. 25

Answer: B

Explanation: To help manage EC2 instances as well as their usage in a better way, the user can tag the instances. The tags are metadata assigned by the user which consists of a key and a value. One resource can have a maximum of 10 tags.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_Tags.html

NEW QUESTION 16
A user wants to configure AutoScaIing which scales up when the CPU utilization is above 70% and scales down when the CPU utilization is below 30%. How can the user configure AutoScaIing for the above mentioned condition?

• A. Use AutoScaIing with a schedule
• B. Configure ELB to notify AutoScaIing on load increase or decrease
• C. Use dynamic AutoScaIing with a policy
• D. Use AutoScaIing by manually modifying the desired capacity during a condition

Answer: C

Explanation: The user can configure the AutoScaIing group to automatically scale up and then scale down based on the specified conditions. To configure this, the user must setup policies which will get triggered by the C|oudWatch alarms.
Reference:
http://docs.aws.amazon.com/AutoScaling/latest/DeveIoperGuide/as-scaIe-based-on-demand.html

NEW QUESTION 17
When you register an actMty in Amazon SWF, you provide the following information, except:

• A. a name
• B. timeout values
• C. a domain
• D. version

Answer: C

Explanation: When designing an Amazon SWF workflow, you precisely define each of the required actMties. You then register each actMty with Amazon SWF as an actMty type. When you register the actMty, you provide information such as a name and version, and some timeout values based on how long you expect the actMty to take.
Reference: http://docs.aws.amazon.com/amazonswf/latest/developerguide/swf-dg-intro-to-swf.html

NEW QUESTION 18
A user has created a MySQL RDS instance. Which of the below mentioned options is mandatory to configure while creating an instance?

• A. MuIti AZ deployment setup
• B. Automated backup window
• C. Availability Zone
• D. Maintenance window

Answer: A

Explanation: When creating an RDS instance, the user needs to specify whether it is Nlulti AZ or not. If the user does not provide the value for the zone, the maintenance window or automated backup window, RDS will automatically select the value.
Reference: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.lV|u|tiAZ.htmI

NEW QUESTION 19
Can you SSH to your private machines that reside in a VPC from outside without elastic IP?

• A. Yes, but only if you have direct connect or vpn
• B. Only if you are using a non-US region
• C. Only if you are using a US region
• D. No

Answer: A

Explanation: The instances that reside in the private subnets of your VPC are not reachable from the Internet, meAMng that is not possible to ssh into them. To interact with them you can use a bastion server, located in a public subnet, that will act as a proxy for them.
You can also connect if you have direct connect or vpn.
Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Scenario2.html