Free DVA-C01 Exam Dumps

Question 26

In regards to VPC, select the correct statement:

A. You can associate multiple subnets with the same Route Table.
B. You can associate multiple subnets with the same Route Table, but you can't associate a subnet with only one Route Table.
C. You can't associate multiple subnets with the same Route Table.
D. None of thes

Correct Answer:A
Every subnet in your VPC must be associated with exactly one Route Table. However, multiple subnets can be associated with the same Route Table.
Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Route_TabIes.html

Question 27

A user had defined an IAM policy similar to the one given below on a bucket:
{
"Version": "2012-10-17",
"Statement": [{
"Effect": "A||ow",
"PrincipaI": {
"AWS": "arn:aws:iam::12112112:user/test"
}!
"Action": [ "s3:GetBucketLocation", "s3:ListBucket", "s3:GetObject"
]!
"Resource": [ "arn:aws:s3:::examkiI|er"
}
}
What will this do?

A. It will result in an error saying invalid policy statement
B. It will create an IAM policy for the user test
C. Allows the user test of the AWS account ID 12112112 to perform GetBucketLocation, ListBucket and GetObject on the bucket examkiller
D. It will allow all the IAM users of the account ID 12112112 to perform GetBucketLocation, ListBucket and GetObject on bucket examkiller

Correct Answer:C
The IAM policy allows to test a user in the account 12112112 to perform: s3:GetBucketLocation
s3:ListBucket s3:GetObject
Amazon S3 permissions on the examkiller bucket.
Reference: http://docs.aws.amazon.com/AmazonS3/Iatest/dev/access-policy-language-overview.html

Question 28

How long are the messages kept on an SQS queue by default?

A. If a message is not read, it is never deleted
B. 2 weeks
C. 1 day
D. 4 days

Correct Answer:D
The SQS message retention period is configurable and can be set anywhere from 1 minute to 2 weeks. The default is 4 days and once the message retention limit is reached your messages will be automatically deleted. The option for longer message retention provides greater filexibility to allow for longer intervals between message production and consumption.
Reference: https://aws.amazon.com/sqs/faqs/

Question 29

A user has set an IAM policy where it allows all requests if a request from IP 10.10.10.1/32. Another policy allows all the requests between 5 PM to 7 PM. What will happen when a user is requesting access from IP 10.10.10.1/32 at 6 PM?

A. IAM will throw an error for policy conflict
B. It is not possible to set a policy based on the time or IP
C. It will deny access
D. It will allow access

Correct Answer:D
With regard to IAM, when a request is made, the AWS service decides whether a given request should be allowed or denied. The evaluation logic follows these rules:
By default, all requests are denied. (In general, requests made using the account credentials for resources in the account are always allowed.)
An explicit allow policy overrides this default. An explicit deny policy overrides any allows. Reference:
http://docs.aws.amazon.com/IAM/latest/UserGuide/AccessPoIicyLanguage_EvaIuationLogic.htmI

Question 30

Which code snippet below returns the URL of a load balanced web site created in CIoudFormation with an AWS::EIasticLoadBaIancing::LoadBaIancer resource name "EIasticLoad BaIancer"?

A. "Fn::Join" : [ '‘'‘ . ["http://", {"Fn::GetAtr" : ["EIasticLoadBalancer","DNSName"]}]]
B. "Fn::Join" : [ '‘'‘ . ["http://", {"Fn::GetAtr" : ["E|asticLoadBa|ancer","Ur|"]}]]
C. "Fn::Join" : [ '‘'‘ . ["http://", {"Ref" : "EIasticLoadBaIancerUr|"}]]
D. "Fn::Join" : ["http://", {"Ref" : "EIasticLoadBaIancerDNSName"}]]

Correct Answer:B