Amazon Amazon Certifications BDS-C00 Questions & Answers

• Question 21:

  Which of the following notification endpoints or clients does Amazon Simple Notification Service support? Choose 2 answers

  A. Email

  B. CloudFront distribution

  C. File Transfer Protocol

  D. Short Message Service

  E. Simple Network Management Protocol

  Correct Answer: AD

• Question 22:

  Which of these configuration or deployment practices is a security risk for RDS?

  A. Storing SQL function code in plaintext

  B. Non-Multi-AZ RDS instance

  C. Having RDS and EC2 instances exist in the same subnet

  D. RDS in a public subnet

  Correct Answer: D

• Question 23:

  A company needs to deploy services to an AWS region which they not previously used. The company currently has an AWS identity and Access Management (IAM) role for their Amazon EC2 instances, which permits the instance to have access to Amazon DynamoDB. The company wants their EC2 instances in the new region to have the same privileges. How should the company achieve this?

  A. Create a new IAM role and associated policies within the new region

  B. Assign the existing IAM role to the Amazon EC2 instances in the new region

  C. Copy the IAM role and associated policies to the new region and attach it to the instances

  D. Create the Amazon Machine Image of the instance and copy it to the desired region using the AMI Copy feature

  Correct Answer: B

• Question 24:

  You are currently hosting multiple applications in a VPC and have logged numerous port scans coming in from a specific IP address block. Your security team has requested that all access from the offending IP address block be denied for the next 24 hours.

  Which of the following is the best method to quickly and temporarily deny access from the specified IP address block?

  A. Create an AD policy to modify Windows Firewall settings on all hosts in the VPC to deny access from the IP address block

  B. Modify the Network ACLs associated with all public subnets in the VPC to deny access from the IP address block

  C. Add a rule to all of the VPC 5 Security Groups to deny access from the IP address block

  D. Modify the Windows Firewall settings on all Amazon Machine Images (AMIs) that your organization uses in that VPC to deny access from the IP address block

  Correct Answer: B

• Question 25:

  It is advised that you watch the Amazon CloudWatch "_____" metric (available via the AWS Management Console or Amazon Cloud Watch APIs) carefully and recreate the Read Replica should it fall behind due to replication errors.

  A. Write Lag

  B. Read Replica

  C. Replica Lag

  D. Single Replica

  Correct Answer: C

• Question 26:

  Does Dynamic DB support in-place atomic updates?

  A. It is not defined

  B. No

  C. Yes

  D. It does support in-place non-atomic updates

  Correct Answer: C

• Question 27:

  You have a load balancer configured for VPC, and all backend Amazon EC2 instances are in service. However, your web browser times out when connecting to the load balancer's DNS name.

  Which options are probable causes of this behavior?

  A. The load balancer was not configured to use a public subnet with an Internet gateway configured

  B. The Amazon EC2 instances do not have a dynamically allocated private IP address

  C. The security groups or network ACLs are not properly configured for web traffic

  D. The load balancer is not configured in a private subnet with a NAT instance

  E. The VPC does not have a VGW configured

  Correct Answer: AC

• Question 28:

  If your DB instance runs out of storage space or file system resources, its status will change to_____ and your DB Instance will no longer be available.

  A. storage-overflow

  B. storage-full

  C. storage-exceed

  D. storage-overage

  Correct Answer: B

• Question 29:

  You have a video Trans coding application running on Amazon EC2. Each instance pools a queue to find out which video should be Trans coded, and then runs a Trans coding process.

  If this process is interrupted, the video will be Trans coded by another instance based on the queuing system. You have a large backlog of videos which need to be Trans coded and would like to reduce this backlog by adding more instances. You will need these instances only until the backlog is reduced. Which type of Amazon EC2 instance should you use to reduce the backlog in the most cost-effective way?

  A. Dedicated instances

  B. Spot instances

  C. On-demand instances

  D. Reserved instances

  Correct Answer: B

• Question 30:

  A user has setup an RDS DB with Oracle. The user wants to get notifications when someone modifies the security group of that DB. How can the user configure that?

  A. It is not possible to get the notifications on a change in the security group

  B. Configure SNS to monitor security group changes

  C. Configure event notification on the DB security group

  D. Configure the CloudWatch alarm on the DB for a change in the security group

  Correct Answer: C