Free AWS Certified Big Data – Specialty ( 2018 & 2019 ) AWS-Certified-Big-Data-Specialty Exam Practice Test

Is decreasing the storage size of a DB Instance permitted?

• Depends on the RDMS used
• Yes
• No

A sys admin is planning to subscribe to the RDS event notifications. For which of the below mentioned source categories the subscription cannot be configured?

• DB security group
• DB snapshot
• DB options group
• DB parameter group

A company is preparing to give AWS Management Console access to developers. Company policy mandates identity federation and role based access control. Roles are currently assigned using groups in the corporate Active Directory. What combination of the following will give developers access to the AWS console? Choose 2 answers

• AWS Directory Service AD connector
• AWS Directory Service Simple AD
• AWS identity and Access Management groups
• AWS identity and Access Management roles
• AWS identity and Access Management users

A company is building a new application is AWS. The architect needs to design a system to collect application log events. The design should be a repeatable pattern that minimizes data loss if an application instance fails, and keeps a durable copy of all log data for at least 30 days.What is the simplest architecture that will allow the architect to analyze the logs?

• Write them directly to a Kinesis Firehose. Configure Kinesis Firehose to load the events into an Amazon Redshift cluster for analysis.
• Write them to a file on Amazon Simple Storage Service (S3). Write an AWS lambda function that runs in response to the S3 events to load the events into Amazon Elasticsearch service for analysis.
• Write them to the local disk and configure the Amazon cloud watch Logs agent to lead the data into CloudWatch Logs and subsequently into Amazon Elasticsearch Service.
• Write them to CloudWatch Logs and use an AWS Lambda function to load them into HDFS on an Amazon Elastic MapReduce (EMR) cluster for analysis.

An organization uses a custom map reduce application to build monthly reports based on many small data files in an Amazon S3 bucket. The data is submitted from various business units on a frequent but unpredictable schedule. As the dataset continues to grow, it becomes increasingly difficult to process all of the data in one day. The organization has scaled up its Amazon EMR cluster, but other optimizations could improve performance.The organization needs to improve performance minimal changes to existing processes and applications.What action should the organization take?

• Use Amazon S3 Event Notifications and AWS Lambda to create a quick search file index in DynamoDB.
• Add Spark to the Amazon EMR cluster and utilize Resilient Distributed Datasets in-memory.
• Use Amazon S3 Event Notifications and AWS Lambda to index each file into an Amazon Elasticsearch Service cluster.
• Schedule a daily AWS Data Pipeline process that aggregates content into larger files using S3DistCp.
• Have business units submit data via Amazon Kinesis Firehose to aggregate data hourly into Amazon S3.

An Amazon Kinesis stream needs to be encrypted.Which approach should be used to accomplish this task?

• Perform a client-side encryption of the data before it enters the Amazon Kinesis stream on the producer
• Use a partition key to segment the data by MD5 hash functions which makes indecipherable while in transit
• Perform a client-side encryption of the data before it enters the Amazon Kinesis stream on the consumer
• Use a shard to segment the data which has built-in functionality to make it indecipherable while in transit

You want to securely distribute credentials for your Amazon RDS instance to your fleet of web server instances. The credentials are stored in a file that is controlled by a configuration management system.How do you securely deploy the credentials in an automated manner across the fleet of web server instances, which can number in the hundreds, while retaining the ability to roll back if needed?

• Store your credential files in an Amazon S3 bucket. Use Amazon S3 server-side encryption on the credential files. Have a scheduled job that pulls down the credential files into the instances every 10 minutes
• Store the credential files in your version-controlled repository with the rest of your code. Have a post-commit action in version control that kicks off a job in your continuous integration system which securely copies the new credentials files to all web server instances
• Insert credential files into user data and use an instance lifecycle policy to periodically refresh the files from the user data
• Keep credential files as a binary blob in an Amazon RDS MySQL DB instance, and have a script on each Amazon EC2 instance that pulls the files down from the RDS instance
• Store the credential files in your version-controlled repository with the rest of your code. Use a parallel file copy program to send the credential files from your local machine to the Amazon EC2 instances

A company needs to monitor the read and write IOPs metrics for their AWS MySQL RDS instance and send real-time alerts to their operations team. Which AWS services can accomplish this? Choose 2 answers

• Amazon Simple Email Service
• Amazon CloudWatch
• Amazon Simple Queue Service
• Amazon Route 53
• Amazon Simple Notification Service

A user has deployed an application on his private cloud. The user is using his own monitoring tool. He wants to configure that whenever there is an error, the monitoring tool should notify him via SMS. Which of the below mentioned AWS services will help in this scenario?

• None because the user infrastructure is in the private cloud/
• AWS SNS
• AWS SES
• AWS SMS

A company needs to monitor the read and write IOPs metrics for their AWS MySQL RDS instances and send real-time alerts to their operations team. Which AWS services can accomplish this?Choose 2 answers

• Amazon Simple Email Service
• Amazon CloudWatch
• Amazon Simple Queue Service
• Amazon Route 53
• Amazon Simple Notification Service