Correct Answers :

[D]

Explanation :

Auto Scaling may cause you to reach limits of other services, such as the default number of Amazon EC2 instances you can currently launch within a region, which is 20.

Correct Answers :

[B]

Explanation :

The Elastic Load Balancing service allows you to distribute traffic across a group of Amazon Elastic Compute Cloud (Amazon EC2) instances in one or more Availability Zones within a region.

Correct Answers :

[A, B]

Explanation :

Amazon CloudWatch has two plans: basic and detailed. There are no diagnostic, precognitive, or retroactive monitoring plans for Amazon CloudWatch.

Correct Answers :

[B, C, E]

Explanation :

You must do the following to create a public subnet with Internet access: Attach an IGW to your Amazon VPC.
Create a subnet route table rule to send all non-local traffic (for example, 0.0.0.0/0) to the IGW.
Configure your network ACLs and security group rules to allow relevant traffic to flow to and from your instance.
You must do the following to enable an Amazon EC2 instance to send and receive traffic from the Internet:
Assign a public IP address or EIP address.

Correct Answers :

[A, D, E]

Explanation :

If a security group is not specified at launch, then an Amazon EC2 instance will be launched into the default security group for the Amazon VPC. The default security group allows communication between all resources within the security group, allows all outbound traffic, and denies all other traffic.

Correct Answers :

[B, D]

Explanation :

To protect data in transit from the clients to the web application, HTTPS with server certificate authentication should be used. To protect data in transit from the web application to the database, SSL/TLS for database connection should be used.

Correct Answers :

[A]

Explanation :

Don't create an IAM user (or an IAM group) and pass the user's credentials to the application or embed the credentials in the application. Instead, create an IAM role that you attach to the Amazon EC2 instance to give applications running on the instance temporary security credentials. The credentials have the permissions specified in the policies attached to the role. A directory is not an identity object in IAM.

Correct Answers :

[B, C, D]

Explanation :

When a request is made, the AWS service decides whether a given request should be allowed or denied. The evaluation logic follows these rules:
1) By default, all requests are denied (in general, requests made using the account credentials for resources in the account are always allowed).
2) An explicit allow overrides this default.
3) An explicit deny overrides any allows.

Correct Answers :

[A]

Explanation :

Amazon EMR uses Apache Hadoop as its distributed data processing engine. Hadoop is an open source, Java software framework that supports data-intensive distributed applications running on large clusters of commodity hardware. Hive, Pig, and HBase are packages that run on top of Hadoop.

Correct Answers :

[B]

Explanation :

An environment tier whose web application runs background jobs is known as a worker tier. An environment tier whose web application processes web requests is known as a web server tier. Database and batch are not valid environment tiers.

Correct Answers :

[D]

Explanation :

Multi-AZ deployment uses synchronous replication to a different Availability Zone so that operations can continue on the replica if the master database stops responding for any reason. Automated backups provide disaster recovery, not high availability. Security groups, while important, have no effect on availability. Maintenance windows are actually times when the database may not be available.

Correct Answers :

[A, B, D]

Explanation :

Amazon RDS will launch Amazon Elastic Compute Cloud (Amazon EC2) instances, install the database software, handle all patching, and perform regular backups. Anything within the database software (schema, user accounts, and so on) is the responsibility of the customer.

Correct Answers :

[A]

Explanation :

Amazon Redshift is a petabyte-scale data warehouse. It is not well suited for unstructured NoSQL data or highly dynamic transactional data. It is in no way a cache.

Correct Answers :

[D]

Explanation :

There can be one secondary index per table, and it must be created when the table is created.

Correct Answers :

[B]

Explanation :

The Amazon Kinesis family of services provides functionality to ingest large streams of data. Amazon Kinesis Firehose is specifically designed to ingest a stream and save it to any of the three storage services listed in Response B.

Correct Answers :

[B]

Explanation :

Amazon S3 and Amazon Glacier are the most cost-effective storage services. After a year, when the objects are unlikely to be accessed, you can save costs by transferring the objects to Amazon Glacier where the retrieval time is three to five hours.

Correct Answers :

[D]

Explanation :

Server access logs provide a record of any access to an object in Amazon S3.

Correct Answers :

[C]

Explanation :

Amazon S3 provides read-after-write consistency for PUTs to new objects (new key), but eventual consistency for GETs and DELETEs of existing objects (existing key). Response C changes the existing object so that a subsequent GET may fetch the previous and inconsistent object.

Correct Answers :

[B]

Explanation :

AWS will never transfer data between regions unless directed to by you. Durability in Amazon S3 is achieved by replicating your data geographically to different Availability Zones regardless of the versioning configuration. AWS doesn't use tapes.

Correct Answers :

[C]

Explanation :

Amazon CloudFront provides the best user experience by delivering the data from a geographically advantageous edge location. Signed URLs allow you to control access to authenticated users.