A user has created a VPC with CIDR 20.0.0.0/24. The user has used all the IPs of CIDR and
wants to increase the size of the VPC. The user has two subnets: public (20.0.0.0/28. and private
(20.0.1.0/28.. How can the user change the size of the VPC?

A user has configured ELB with SSL using a security policy for secure negotiation between the
client and load balancer. Which of the below mentioned security policies is supported by ELB?

A user has granted read/write permission of his S3 bucket using ACL. Which of the below
mentioned options is a valid ID to grant permission to other AWS accounts (grantee. using ACL?

A user has configured an ELB to distribute the traffic among multiple instances. The user
instances are facing some issues due to the back-end servers. Which of the below mentioned
CloudWatch metrics helps the user understand the issue with the instances?

A user has launched an EC2 instance store backed instance in the US-East-1a zone. The user
created AMI #1 and copied it to the Europe region. After that, the user made a few updates to the
application running in the US-East-1a zone. The user makes an AMI#2 after the changes. If the
user launches a new instance in Europe from the AMI #1 copy, which of the below mentioned
statements is true?

A user runs the command “dd if=/dev/zero of=/dev/xvdfbs=1M” on a fresh blank EBS volume
attached to a Linux instance. Which of the below mentioned activities is the user performing with
the command given above?

A user has created an Auto Scaling group using CLI. The user wants to enable CloudWatch
detailed
monitoring for that group. How can the user configure this?

A user has created a VPC with a public subnet. The user has terminated all the instances which
are part of the subnet. Which of the below mentioned statements is true with respect to this
scenario?

A user has configured ELB with SSL using a security policy for secure negotiation between the
client and load balancer. The ELB security policy supports various ciphers. Which of the below
mentioned options helps identify the matching cipher at the client side to the ELB cipher list when
client is requesting ELB DNS over SSL?

A user has created a VPC with public and private subnets. The VPC has CIDR 20.0.0.0/16. The

private subnet uses CIDR 20.0.1.0/24 and the public subnet uses CIDR 20.0.0.0/24. The user is
planning to host a web server in the public subnet (port 80. and a DB server in the private subnet
(port 3306.. The user is configuring a security group of the NAT instance. Which of the below
mentioned entries is not required for the NAT security group?