Amazon Amazon Certifications BDS-C00 Questions & Answers

• Question 161:

  You are managing the AWS account of a big organization. The organization has more than

  1000+ employees and they want to provide access to the various services to most of the employees. Which of the below mentioned options is the best possible solution in this case?

  A. The user should create a separate IAM user for each employee and provide access to them as per the policy

  B. The user should create an IAM role and attach STS with the role. The user should attach that role to the EC2 instance and setup AWS authentication on that server

  C. The user should create IAM groups as per the organization's departments and add each user to the group for better access control

  D. Attach an IAM role with the organization's authentication service to authorize each user for various AWS services

  Correct Answer: D

• Question 162:

  You need to configure an Amazon S3 bucket to serve static assets for your public-facing web application. Which methods ensure that all objects uploaded to the bucket are set to public read? Choose 2 answers

  A. Set permissions on the object to public read during upload

  B. Configure the bucket ACL to sell all objects to public read

  C. Configure the bucket policy to set all objects to public read

  D. Use AWS identity and access Management roles to set the bucket to public read

  E. Amazon S3 objects default to public read, so no action is needed

  Correct Answer: BC

• Question 163:

  Do the system resources on the Micro instance meet the recommended configuration for Oracle?

  A. Yes completely

  B. Yes but only for certain situations

  C. Not in any circumstance

  Correct Answer: B

• Question 164:

  A user is receiving a notification from the RDS DB whenever there is a change in the DB security group. The user does not want to receive these notifications for only a month. Thus, he does not want to delete the notification. How can the user configure this?

  A. Change the Disable button for notification to "Yes" in the RDS console

  B. Set the send mail flag to false in the DB event notification console

  C. The only option is to delete the notification from the console

  D. Change the Enable button for notification to "No" in the RDS console

  Correct Answer: D

• Question 165:

  A customers needs to capture all client connection information from their load balancer every five minutes. The company wants to use data for analyzing traffic patterns and troubleshooting their applications. Which of the following options meets the customer requirements?

  A. Enable access logs on the load balancer

  B. Enable AWS CloudTrail for the load balancer

  C. Enable Amazon CloudWatch metrics on the load balancer

  D. Install the Amazon CloudWatch Logs agent on the load balancer

  Correct Answer: B

• Question 166:

  Can I attach more than one policy to a particular entity?

  A. Yes always

  B. Only if within GovCloud

  C. No

  D. Only if within VPC

  Correct Answer: A

• Question 167:

  When using the following AWS services, which should be implemented in multiple Availability Zones for high availability solutions? Choose 2 answers

  A. Amazon Simple Storage Service

  B. Amazon Elastic Load Balancing

  C. Amazon Elastic Compute Cloud

  D. Amazon Simple Notification Service

  E. Amazon DynamoDB

  Correct Answer: BC

• Question 168:

  You are designing a web application that stores static assets in an Amazon Simple Storage

  Service (S3) bucket. You expect this bucket to immediately receive over 150 PUT requests per second. What should you do to ensure optimal performance?

  A. Use multi-part upload.

  B. Add a random prefix to the key names.

  C. Amazon S3 will automatically manage performance at this scale.

  D. Use a predictable naming scheme, such as sequential numbers or date time sequences, in the key names

  Correct Answer: B

• Question 169:

  When an EC2 instance that is backed by an s3-based AMI is terminated. What happens to the data on the root volume?

  A. Data is unavailable until the instance is restarted

  B. Data is automatically deleted

  C. Data is automatically saved as an EBS snapshot

  D. Data is automatically saved as an EBS volume

  Correct Answer: B

• Question 170:

  You need to design a VPC for a web-application consisting of an Elastic Load Balancer (ELB). A fleet of web/application servers, and an RDS database The Entire Infrastructure must be distributed over 2 availability zones.

  Which VPC configuration works while assuring the database is not available from the Internet?

  A. One public subnet for ELB one public subnet for the web-servers, and one private subnet for the database

  B. One public subnet for ELB two private subnets for the web-servers, two private subnets for RDS

  C. Two public subnets for ELB two private subnets for the web-servers and two private subnets for RDS

  D. Two public subnets for ELB two public subnets for the web-servers, and two public subnets for RDS

  Correct Answer: C