Amazon Amazon Certifications BDS-C00 Questions & Answers

• Question 41:

  A company is preparing to give AWS Management Console access to developers. Company policy mandates identity federation and role based access control. Roles are currently assigned using groups in the corporate

  Choose 2 answers

  A. AWS Directory Service AD connector

  B. AWS Directory Service Simple AD

  C. AWS identity and Access Management groups

  D. AWS identity and Access Management roles

  E. AWS identity and Access Management users

  Correct Answer: AD

• Question 42:

  A __________ is the concept of allowing (or disallowing) an entity such as a user, group, or role some type

  of access to one or more resources.

  A. user

  B. AWS Account

  C. resource

  D. permission

  Correct Answer: B

• Question 43:

  What does Amazon CloudFormation provide?

  A. None of these.

  B. The ability to setup Autoscaling for Amazon EC2 instances.

  C. A template to map network resources for Amazon Web Services.

  D. A templated resource creation for Amazon Web Services.

  Correct Answer: D

• Question 44:

  What is the maximum response time for a Business level Premium Support case?

  A. 30 minutes

  B. You always get instant responses (within a few seconds).

  C. 10 minutes

  D. 1 hour

  Correct Answer: D

• Question 45:

  A user has deployed an application on his private cloud. The user is using his own monitoring tool. He wants to configure that whenever there is an error, the monitoring tool should notify him via SMS.

  Which of the below mentioned AWS services will help in this scenario?

  A. None because the user infrastructure is in the private cloud/

  B. AWS SNS

  C. AWS SES

  D. AWS SMS

  Correct Answer: B

• Question 46:

  An existing application stores sensitive information on a non-boot Amazon EBS data volume attached to an Amazon Elastic Compute Cloud instance.

  Which of the following approaches would protect the sensitive data on an Amazon EBS volume?

  A. Snapshot the current Amazon EBS volume. Restore the snapshot to a new, encrypted Amazon EBS volume Mount the Amazon EBS volume

  B. Create and mount a new, encrypted Amazon EBS volume. Move the data to the new volume.

  Delete the old Amazon EBS volume

  C. Unmount the EBS volume. Toggle the encryption attribute to True. Re-mount the Amazon EBs volume

  D. Upload your customer keys to AWS CloudHSM. Associate the Amazon EBS volume with AWS CloudHSM. Re-mount the Amazon EBS volume

  Correct Answer: A

• Question 47:

  If I modify a DB Instance or the DB parameter group associated with the instance, should I reboot the instance for the changes to take effect?

  A. No

  B. Yes

  Correct Answer: B

• Question 48:

  Is there any way to own a direct connection to Amazon Web Services?

  A. You can create an encrypted tunnel to VPC, but you don't own the connection.

  B. Yes, it's called Amazon Dedicated Connection.

  C. No, AWS only allows access from the public Internet.

  D. Yes, it's called Direct Connect.

  Correct Answer: D

• Question 49:

  Within the IAM service a GROUP is regarded as a:

  A. A collection of AWS accounts

  B. It's the group of EC2 machines that gain the permissions specified in the GROUP.

  C. There's no GROUP in IAM, but only USERS and RESOURCES.

  D. A collection of users.

  Correct Answer: D

• Question 50:

  The Amazon EC2 web service can be accessed using the _____ web services messaging protocol. This interface is described by a Web Services Description Language (WSDL) document.

  A. SOAP

  B. DCOM

  C. CORBA

  D. XML-RPC

  Correct Answer: A