Amazon Amazon Certifications BDS-C00 Questions & Answers

• Question 81:

  Typically, you want your application to check whether a request generated an error before you spend any time processing results. The easiest way to find out if an error occurred is to look for an __________ node in the response from the Amazon RDS API.

  A. Incorrect

  B. Error

  C. FALSE

  Correct Answer: B

• Question 82:

  Amazon RDS creates an SSL certificate and installs the certificate on the DB Instance when Amazon RDS provisions the instance. These certificates are signed by a certificate authority. The _____ is stored athttps://rds.amazonaws.com/doc/ rds-ssl-ca-cert.pem.

  A. private key

  B. foreign key

  C. public key

  D. protected key

  Correct Answer: A

• Question 83:

  REST or Query requests are HTTP or HTTPS requests that use an HTTP verb (such as GET or POST) and a parameter named Action or Operation that specifies the API you are calling.

  A. FALSE

  B. TRUE

  Correct Answer: A

• Question 84:

  In AWS, which security aspects are the customer's responsibility? Choose 4 answers

  A. Life-Cycle management of IAM credentials

  B. Security Group and ACL settings

  C. Controlling physical access to compute resources

  D. Path management on the EC2 instance's operating system

  E. Encryption of EBS volumes

  F. Decommissioning storage devices

  Correct Answer: ABDE

• Question 85:

  As part of your continuous deployment process, your application undergoes an I/O load performance test before it is deployed to production using new AMIs. The application uses one Amazon Elastic Block Store (EBS) PIOPS volume per instance and requires consistent I/O performance.

  Which of the following must be carried out to ensure that I/O load performance tests yield the correct results in a repeatable manner?

  A. Ensure that the I/O block sizes for the test are randomly selected

  B. Ensure that the Amazon EBS volumes have been pre-warmed by reading all the blocks before the test

  C. Ensure that snapshots of the Amazon EBS volumes are created as a backup

  D. Ensure that the Amazon EBS volume is encrypted

  E. Ensure that the Amazon EBS volume has been pre-warmed by creating a snapshot of the volume before the test

  Correct Answer: B

• Question 86:

  You are building a mobile app for consumers to post cat pictures online. You will be storing the images in AWS S3. You want to run the system very cheaply and simply. Which one of these options allows you to build a photo sharing application without needing to worry about scaling expensive uploads processes, authentication/authorization and so forth?

  A. Build the application out using AWS Cognito and web identity federation to allow users to log in using Facebook or Google Accounts. Once they are logged in, the secret token passed to that user is used to directly access resources on AWS, like AWS S3. (Amazon Cognito is a superset of the functionality provided by web identity federation. Referlink)

  B. Use JWT or SAML compliant systems to build authorization policies. Users log in with a username and password, and are given a token they can use indefinitely to make calls against the photo infrastructure.

  C. Use AWS API Gateway with a constantly rotating API Key to allow access from the client-side. Construct a custom build of the SDK and include S3 access in it.

  D. Create an AWS oAuth Service Domain ad grant public signup and access to the domain. During setup, add at least one major social media site as a trusted Identity Provider for users

  Correct Answer: A

• Question 87:

  Select the correct set of steps for exposing the snapshot only to specific AWS accounts

  A. Select public for all the accounts and check mark those accounts with whom you want to expose the snapshots and click save.

  B. SelectPrivate, enter the IDs of those AWS accounts, and clickSave.

  C. SelectPublic, enter the IDs of those AWS accounts, and clickSave.

  D. SelectPublic, mark the IDs of those AWS accounts as private, and clickSave.

  Correct Answer: C

• Question 88:

  A photo sharing service stores pictures in Amazon Simple Storage Service (S3) and allows application signin using an Open ID Connect compatible identity provider. Which AWS Security Token approach to temporary access should you use for the Amazon S3 operations?

  A. SAML-based identity Federation

  B. Cross-Account Access

  C. AWS identity and Access Management roles

  D. Web identity Federation

  Correct Answer: A

• Question 89:

  An organization has configured a VPC with an Internet Gateway (IGW). Pairs of public and private subnets (each with one subnet per Availability Zone), and an Elastic Load Balancer (ELB) configured to use the public subnets. The application's web tier leverages the ELB. Auto Scaling and a multi-AZ RDS database instance the organization would like to eliminate any potential single points of failure in this design.

  What step should you take to achieve this organization's objective?

  A. Nothing, there are no single points of failure in this architecture.

  B. Create and attach a second IGW to provide redundant internet connectivity.

  C. Create and configure a second Elastic Load Balancer to provide a redundant load balancer.

  D. Create a second multi-AZ RDS instance in another Availability Zone and configure replication to provide a redundant database.

  Correct Answer: A

• Question 90:

  A user has launched an EC2 instance from an instance store backed AMI. The user has attached an additional instance store volume to the instance. The user wants to create an AMI from the running instance. Will the AMI have the additional instance store volume data?

  A. Yes, the block device mapping will have information about the additional instance store volume

  B. No, since the instance store backed AMI can have only the root volume bundled

  C. It is not possible to attach an additional instance store volume to the existing instance store backed AMI instance

  D. No, since this is ephermal storage it will not be a part of the AMI

  Correct Answer: A