NEW QUESTION 1
In the context of Amazon CloudFront Actions, you use the ______ when specifying APIs in IAM policies.

• A. object names
• B. class names
• C. entity names
• D. action names

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/UsingWithIAM.html

NEW QUESTION 2
Use _____ to get more visibility into the health of your AWS Elastic Beanstalk application and take appropriate actions in case of hardware failure or performance degradation.

• A. Amazon Elastic Beanstalk command line
• B. Amazon EC2 log files
• C. Amazon CloudWatch
• D. Amazon Load balancing

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/concepts.concepts.design.html

NEW QUESTION 3
With AWS CloudTrail, creating multiple trails in one region allows ______ to focus on one aspect of AWS operation.

• A. callers
• B. events
• C. buckets
• D. stakeholders

Answer: D

Explanation:
Reference:
https://aws.amazon.com/cloudtrail/faqs/

NEW QUESTION 4
The IPsec protocol suite is made up of various components covering aspects such as confidentiality, encryption, and integrity. Select the correct statement below regarding the correct configuration options for ensure IPsec confidentiality:

• A. The following protocols may be used to configure IPsec confidentiality, DES, 3DES, MD5
• B. The following protocols may be used to configure IPsec confidentiality, DES, 3DES, AES
• C. The following protocols may be used to configure IPsec confidentiality, PSK, RSA
• D. The following protocols may be used to configure IPsec confidentiality, PSK, MD5
• E. The following protocols may be used to configure IPsec confidentiality, PSK, RSA

Answer: B

Explanation:
Reference:
https://en.wikipedia.org/wiki/IPsec

NEW QUESTION 5
You can use the _____ command of the AWS Config service CLI to see the compliance state of each of your rules.

• A. get-compliance-details-by-resource
• B. describe-compliance-by-config-rule
• C. get-compliance-details-by-config-rule
• D. describe-compliance-by-resource

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_view-compliance.html

NEW QUESTION 6
Over which of the following Ethernet standards does AWS Direct Connect link your internal network to an AWS Direct Connect location?

• A. Copper backplane cable
• B. Twisted pair cable
• C. Single mode fiber-optic cable
• D. Shielded balanced copper cable

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/Welcome.html

NEW QUESTION 7
Which of the following does not configure Amazon CloudFront cache behaviors to forward cookies to an origin for web distributions?

• A. Origin server
• B. AWS CLI
• C. Amazon EMR
• D. Amazon S3

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Cookies.html

NEW QUESTION 8
In Amazon CloudFront, to link to your objects, if your domain name is d111111abcdef8.cloudfront.net and your object is image.jpg, then the URL for the link in your webpage will be ______.

• A. http://d111111abcdef8.cloudfront.net/images/image.jpg
• B. http://d111111abcdef8.dns/images/image.jpg
• C. http://d111111abcdef8.dns/image.jpg
• D. http://d111111abcdef8.cloudfront.net/image.jpg

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/GettingStarted.html

NEW QUESTION 9
A user is running a batch process on EBS backed EC2 instances. The batch process launches few EC2 instances to process hadoop Map reduce jobs which can run between 50 – 600 minutes or
sometimes for even more time. The user wants a configuration that can terminate the instance only when the process is completed. How can the user configure this with CloudWatch?

• A. Configure a job which terminates all instances after 600 minutes
• B. It is not possible to terminate instances automatically
• C. Set up the CloudWatch with Auto Scaling to terminate all the instances
• D. Configure the CloudWatch action to terminate the instance when the CPU utilization falls below 5%

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/UsingAlarmActions.html

NEW QUESTION 10
You can use the _____ command of the AWS Config service CLI to see the compliance state of each resource that AWS Config evaluates for a specific rule.

• A. describe-compliance-by-resource
• B. describe-compliance-by-config-rule
• C. get-compliance-details-by-config-rule
• D. get-compliance-details-by-config-rule

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_view-compliance.html

NEW QUESTION 11
What service is used to store the log files generated by CloudTrail?

• A. EC2
• B. EBS
• C. S3
• D. VPC

Answer: C

Explanation:
Reference: https://aws.amazon.com/cloudtrail/

NEW QUESTION 12
In Amazon CloudFront, while creating a web distribution, which of the following can be used as origin servers?

• A. Any combination AWS Glacier archives and Oracle server
• B. Any combination of Amazon DB intances and XML servers
• C. Any combination of Amazon S3 buckets and HTTP servers
• D. Any combination of Amazon Data Insights and PHP servers

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-webcreating. html

NEW QUESTION 13
Within the TCP/IP model what is the name of the Packet Data Unit (PDU) used between Transport Layers for communication between sender and receiver

• A. Frames
• B. Packets
• C. Data
• D. Segments

Answer: D

Explanation:
Reference:
https://en.wikipedia.org/wiki/Transmission_Control_Protocol

NEW QUESTION 14
Which statement is NOT true about accessing remote AWS region in the US by your AWS Direct Connect which is located in the US?

• A. To connect to a VPC in a remote region, you can use a virtual private network (VPN) connection over your public virtual interface.
• B. To access public resources in a remote region, you must set up a public virtual interface and establish a border gateway protocol (BGP) session.
• C. If you have a public virtual interface and established a BGP session to it, your router learns the routes of the other AWS regions in the US.
• D. Any data transfer out of a remote region is billed at the location of your AWS Direct Connect data transfer rate.

Answer: D

Explanation:
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/remote_regions.html

NEW QUESTION 15
In AWS, which tool records API calls for a specific AWS account and also delivers the log files for that account?

• A. CloudTrail
• B. Redshift
• C. Beanstalk
• D. Cognito

Answer: A

Explanation:
Reference:
https://aws.amazon.com/cloudtrail/

NEW QUESTION 16
In Amazon CloudFront, if you need to quickly remove objects from a distribution, you can:

• A. delete the objects from cache.
• B. invalidate the objects.
• C. remove your Amazon S3 bucket.
• D. delete your distribution and recreate i

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/AddRemoveReplaceObject s.html

NEW QUESTION 17
In the "start using the AWS Direct Connect steps," when can you complete the Cross Connect step?

• A. After verifying your virtual interface
• B. After you have received your Letter of Authorization and Connecting Facility Assignment (LOA-CFA) from AWS
• C. 72 hours after submitting your request for AWS Direct Connect Connection
• D. Immediately after submitting your request for AWS Direct Connect Connection

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/directconnect/latest/UserGuide/Colocation.html

NEW QUESTION 18
What is the maximum number of CloudTrails that you can create per AWS region?

• A. 10
• B. 2
• C. 16
• D. 5

Answer: D

Explanation:
Reference:
https://aws.amazon.com/cloudtrail/faqs/

NEW QUESTION 19
With respect to Amazon CloudFront, which one of the following statements is correct?

• A. For HTTPS web distributions, you cannot forward cookies to your origin.
• B. For both HTTP and HTTPS web distributions, you can choose to forward cookies to your origin.
• C. For HTTP web distributions, you cannot forward cookies to your origin.
• D. For Real Time Messaging Protocol (RTMP) distributions, you can configure CloudFront to process cookies.

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Cookies.html

NEW QUESTION 20
Which of the following services is used to send an alert from CloudWatch?

• A. AWS SNS
• B. AWS EBS
• C. AWS SES
• D. AWS SQS

Answer: A

Explanation:
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/related_services.html

NEW QUESTION 21
AWS Config flags a resource as ______ if a resource violates any conditions of an AWS Config rule that it evaluates on the resource in question.

• A. corrupted
• B. noncompliant
• C. invalid
• D. misconfigured

Answer: B

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config.html

NEW QUESTION 22
You can turn on the AWS Config service from the AWS CLI by running the subscribe command and passing as parameters a valid IAM role, SNS topic, and ______.

• A. EBS volume
• B. EC2 instance
• C. S3 bucket
• D. Kinesis stream

Answer: C

Explanation:
Reference:
http://docs.aws.amazon.com/config/latest/developerguide/gs-cli-subscribe.html

NEW QUESTION 23
......