Free Amazon AWS-Big-Data-Specialty Exam Dumps Questions & Answers

An AWS customer is deploying a web application that is composed of a front-end running on Amazon EC2 and of confidential data that is stored on Amazon S3. The customer security policy that all access operations to this sensitive data must be authenticated and authorized by a centralized access management system that is operated by a separate security team. In addition, the web application team that owns and administers the EC2 web front-end instances is prohibited from having any ability to access the data that circumvents this centralized access management system. Which of the following configurations will support these requirements?

• A.  Configure the web application to authenticate end-users against the centralized access management system using SAML. Have the end-users authenticate to IAM using their SAML token and download the approved data directly from S3.
• B.  Configure the web application to authenticate end-users against the centralized access management system. Have the web application provision trusted users STS tokens entitling the download of approved data directly from Amazon S3
• C.  Encrypt the data on Amazon S3 using a CloudHSM that is operated by the separate security team.
  Configure the web application to integrate with the CloudHSM for decrypting approved data access operations for trusted end-users.
• D.  Have the separate security team create and IAM role that is entitled to access the data on Amazon S3.
  Have the web application team provision their instances with this role while denying their IAM users access to the data on Amazon S3

An Amazon Kinesis stream needs to be encrypted.
Which approach should be used to accomplish this task?

• A.  Use a shard to segment the data which has built-in functionality to make it indecipherable while in transit
• B.  Use a partition key to segment the data by MD5 hash functions which makes indecipherable while in transit
• C.  Perform a client-side encryption of the data before it enters the Amazon Kinesis stream on the consumer
• D.  Perform a client-side encryption of the data before it enters the Amazon Kinesis stream on the producer

Is decreasing the storage size of a DB Instance permitted?

• A.  Yes
• B.  No
• C.  Depends on the RDMS used

What is the minimum charge for the data transferred between Amazon RDS and Amazon EC2 Instances in the same Availability Zone?

• A.  No charge. It is free.
• B.  USD 0.02 per GB
• C.  USD 0.01 per GB
• D.  USD 0.10 per GB

You are configuring your company's application to use Auto Scaling and need to move user state information.
Which of the following AWS services provides a shared data store with durability and low latency?

• A.  AWS ElasticCache Memcached
• B.  Amazon EC2 instance storage
• C.  Amazon DynamoDB
• D.  Amazon Simple Storage Service