Refined AWS-Certified-Developer-Associate Exam Questions and Answers 2021

NEW QUESTION 1
Which features can be used to restrict access to data in S3? Choose 2 answers

• A. Use S3 Virtual Hosting
• B. Set an S3 Bucket policy.
• C. Enable IAM Identity Federation.
• D. Set an S3 ACL on the bucket or the object.
• E. Create a C|oudFront distribution for the bucket

Answer: CD

NEW QUESTION 2
You have a number of image files to encode. In an Amazon SQS worker queue, you create an Amazon SQS message for each file specifying the command (jpeg-encode) and the location of the file in Amazon S3. Which of the following statements best describes the functionality of Amazon SQS?

• A. Amazon SQS is for single-threaded sending or receMng speeds.
• B. Amazon SQS is a non-distributed queuing system.
• C. Amazon SQS is a distributed queuing system that is optimized for horizontal scalability, not for single-threaded sending or receMng speeds.
• D. Amazon SQS is a distributed queuing system that is optimized for vertical scalability and for single-threaded sending or receMng speeds.

Answer: C

Explanation: Amazon SQS is a distributed queuing system that is optimized for horizontal scalability, not for
single-threaded sending or receMng speeds. A single client can send or receive Amazon SQS messages at a rate of about 5 to 50 messages per second. Higher receive performance can be achieved by requesting multiple messages (up to 10) in a single call. It may take several seconds before a message that has been to a queue is available to be received.
Reference: http://media.amazonwebservices.com/AWS_Storage_Options.pdf

NEW QUESTION 3
How is provisioned throughput affected by the chosen consistency model when reading data from a DynamoDB table?

• A. Strongly consistent reads use the same amount of throughput as eventually consistent reads
• B. Strongly consistent reads use more throughput than eventually consistent reads.
• C. Strongly consistent reads use less throughput than eventually consistent reads
• D. Strongly consistent reads use variable throughput depending on read actMty

Answer: B

NEW QUESTION 4
Company B provides an online image recognition service and utilizes SOS to decouple system components for scalability The SQS consumers poll the imaging queue as often as possible to keep
end-to-end throughput as high as possible. However, Company B is realizing that polling in tight loops is burning CPU cycles and increasing costs with empty responses.
How can Company B reduce the number of empty responses?

• A. Set the imaging queue visibility Timeout attribute to 20 seconds
• B. Set the Imaging queue ReceiveMessageWaitTimeSeconds attribute to 20 seconds
• C. Set the imaging queue MessageRetentionPeriod attribute to 20 seconds
• D. Set the DeIaySeconds parameter of a message to 20 seconds

Answer: B

NEW QUESTION 5
Which DynamoDB limits can be raised by contacting AWS support? Choose 2 answers

• A. The number of hash keys per account
• B. The maximum storage used per account
• C. The number of tables per account
• D. The number of local secondary indexes per account
• E. The number of provisioned throughput units per account

Answer: CE

NEW QUESTION 6
Which of the following programming languages have an officially supported AWS SDK? Choose 2 answers

• A. Perl
• B. PHP
• C. Pascal
• D. Java
• E. SQL

Answer: BD

NEW QUESTION 7
An EC2 instance has one additional EBS volume attached to it. How can a user attach the same volume to another running instance in the same AZ?

• A. Terminate the first instance and only then attach to the new instance
• B. Attach the volume as read only to the second instance
• C. Detach the volume first and attach to new instance
• D. No need to detac
• E. Just select the volume and attach it to the new instance, it will take care of mapping internally

Answer: C

Explanation: If an EBS volume is attached to a running EC2 instance, the user needs to detach the volume from the original instance and then attach it to a new running instance. The user doesn't need to stop / terminate the original instance.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-detaching-volume.html

NEW QUESTION 8
You are inserting 1000 new items every second in a DynamoDB table. Once an hour these items are analyzed and then are no longer needed. You need to minimize provisioned throughput, storage, and API calls.
Given these requirements, what is the most efficient way to manage these Items after the analysis?

• A. Retain the items in a single table
• B. Delete items indMdually over a 24 hour period
• C. Delete the table and create a new table per hour
• D. Create a new table per hour

Answer: C

NEW QUESTION 9
A user is planning to use EBS for his DB requirement. The user already has an EC2 instance running in the VPC private subnet. How can the user attach the EBS volume to a running instance?

• A. The user must create EBS within the same VPC and then attach it to a running instance.
• B. The user can create EBS in the same zone as the subnet of instance and attach that EBS to instance.
• C. It is not possible to attach an EBS to an instance running in VPC until the instance is stopped.
• D. The user can specify the same subnet while creating EBS and then attach it to a running instanc

Answer: B

Explanation: A Virtual Private Cloud (VPC) is a virtual network dedicated to the user’s AWS account. The user can create subnets as per the requirement within a VPC. The VPC is always specific to a region. The user can create a VPC which can span multiple Availability Zones by adding one or more subnets in each Availability Zone.
The instance launched will always be in the same availability zone of the respective subnet. When creating an EBS the user cannot specify the subnet or VPC. However, the user must create the EBS in the same zone as the instance so that it can attach the EBS volume to the running instance.
Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Subnets.htm|#VPCSubnet

NEW QUESTION 10
Which of the following is chosen as the default region when making an API call with an AWS SDK?

• A. ap-northeast-1
• B. us-west-2
• C. us-east-1
• D. eu-west-1
• E. us-central-1

Answer: C

NEW QUESTION 11
In DynamoDB, the default table size is:

• A. 5 GB
• B. 1 GB
• C. 10 GB
• D. There is no table size

Answer: D

Explanation: DynamoDB has seamless scalability with no table size limits and unlimited storage, so you shouIdn't be worried about managing storage on the host or to provisioning more drive, as your data requirement changes.
Reference: http://aws.amazon.com/dynamodb/

NEW QUESTION 12
A user has launched one EC2 instance in the US West region. The user wants to access the RDS instance launched in the US East region from that EC2 instance. How can the user configure the access for that EC2 instance?

• A. It is not possible to access RDS of the US East region from the US West region
• B. Open the security group of the US West region in the RDS security group’s ingress rule
• C. Configure the IP range of the US West region instance as the ingress security rule of RDS
• D. Create an IAM role which has access to RDS and launch an instance in the US West region with it

Answer: C

Explanation: The user cannot authorize an Amazon EC2 security group if it is in a different AWS Region than the RDS DB instance. The user can authorize an IP range or specify an Amazon EC2 security group in the same region that refers to an IP address in another region.
Reference: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_WorkingWithSecurityGroups.html

NEW QUESTION 13
A user has setup an application on EC2 which uses the IAM user access key and secret access key to make secure calls to S3. The user wants to temporarily stop the access to S3 for that IAM user. What should the root owner do?

• A. Delete the IAM user
• B. Change the access key and secret access key for the users
• C. Disable the access keys for the IAM user
• D. Stop the instance

Answer: C

Explanation: If the user wants to temporarily stop the access to S3 the best solution is to disable the keys. Deleting the user will result in a loss of all the credentials and the app will not be useful in the future. If the user stops the instance IAM users can still access S3. The change of the key does not help either as they are still active. The best possible solution is to disable the keys.
Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/NIanagingCredentia|s.html

NEW QUESTION 14
Your supervisor has asked you to build a simple file synchronization service for your department. He doesn't want to spend too much money and he wants to be notified of any changes to files by email. What do you think would be the best Amazon service to use for the email solution?

• A. Amazon CIoudSearch
• B. Amazon Elastic Transcoder
• C. Amazon SES
• D. Amazon AppStream

Answer: C

Explanation: File change notifications can be sent via email to users following the resource with Amazon Simple Email Service (Amazon SES), an easy-to-use, cost-effective email solution.
Reference: http://media.amazonwebservices.com/architecturecenter/AWS_ac_ra_fiIesync_08.pdf

NEW QUESTION 15
In AWS, which security aspects are the customer’s responsibility? Choose 4 answers

• A. Life-cycle management of IAM credentials
• B. Decommissioning storage devices
• C. Security Group and ACL (Access Control List) settings
• D. Encryption of EBS (Elastic Block Storage) volumes
• E. Controlling physical access to compute resources
• F. Patch management on the EC2 instance’s operating system

Answer: ABCF

NEW QUESTION 16
A root AWS account owner has created three IAM users: Bob, John and Michael. Michael is the IAM administrator. Bob and John are not the superpower users, but users with some pre-defined policies. John does not have access to modify his password. Thus, he asks Bob to change his password. How can Bob change John’s password?

• A. This statement is fals
• B. It should be Michael who changes the password for John
• C. It is not possible that John cannot modify his password
• D. Provided Bob is the manager of John
• E. Provided Michael has added Bob to a group, which has permissions to modify the IAM passwords

Answer: D

Explanation: Generally with IAM users, the password can be modified in two ways. The first option is to define the IAM level policy which allows each user to modify their own passwords. The other option is to create a group and create a policy for the group which can change the passwords of various IAM users.
Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/HowToPwdIAMUser.htmI

NEW QUESTION 17
A user is running a webserver on EC2. The user wants to receive the SMS when the EC2 instance utilization is above the threshold limit. Which AWS services should the user configure in this case?

• A. AWS CIoudWatch + AWS SES.
• B. AWS CIoudWatch + AWS SNS.
• C. AWS CIoudWatch + AWS SQS.
• D. AWS EC2 + AWS Cloudwatc

Answer: B

Explanation: Amazon SNS makes it simple and cost-effective to push to mobile devices, such as iPhone, iPad, Android, Kindle Fire, and internet connected smart devices, as well as pushing to other distributed services. In this case, the user can configure that Cloudwatch sends an alarm on when the threshold is crossed to SNS which will trigger an SMS.
Reference: http://aws.amazon.com/sns/

NEW QUESTION 18
A user has an S3 object in the US Standard region with the content "coIor=red". The user updates the object with the content as "coIor="white". If the user tries to read the value 1 minute after it was uploaded, what will S3 return?

• A. It will return "coIor=white"
• B. It will return "coIor=red"
• C. It will return an error saying that the object was not found
• D. It may return either "coIor=red" or "color=white" i.
• E. any of the value

Answer: D

Explanation: AWS S3 follows the eventual consistent model in the US Standard Region. Once the object is updated it
may return the new value or the old value based on whether all the content is replicated across multiple servers until it becomes consistent (eventual).
Reference: http://docs.aws.amazon.com/AmazonS3/Iatest/dev/Introduction.htmI

NEW QUESTION 19
Does DynamoDB support in-place atomic updates?

• A. It is not defined
• B. Yes
• C. It does support in-place non-atomic updates
• D. No

Answer: B

Explanation: DynamoDB supports in-place atomic updates. Reference:
http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/NorkingWithItems.htmI#Working WithItems.AtomicCounters