Quiz IT certification exam

Question 1

A developer is debugging an AWS Lambda function behind an Amazon API Gateway. Whenever the API Gateway endpoint is called, HTTP status code 200 is returned even though AWS Lambda is recording a 4xx error. What change needs to be made to return a proper error code through the API Gateway?

Become a Premium Member for full access

Unlock Premium Member

Accepted Answer

Use a Lambda proxy integration to return HTTP codes and headers.

Answer

Enable CORS in the API Gateway method settings.

Answer

Enable API Gateway error pass-through.

Answer

Return the value in the header X-Amzn-ErrorType.

Question 2

A developer is creating a web application that collects highly regulated and confidential user data through a POST request. The web application is served through Amazon CloudFront. User names and phone numbers must be encrypted at the edge and must remain encrypted throughout the entire application stack.What is the MOST secure way to meet these requirements?

Accepted Answer

Use field-level encryption on CloudFront.

Answer

Enforce Match Viewer with HTTPS Only on CloudFront.

Answer

Use only the newest TLS security policy on CloudFront.

Answer

Enforce a signed URL on CloudFront on the front end.

Question 3

A developer is storing JSON files in an Amazon S3 bucket. The developer wants to securely share an object with a specific group of people. How can the deveioper securely provide temporary access to the objects that are stored in the S3 bucket?

Accepted Answer

Use the AWS software development kit (SDK) to generate a presigned URL. Provide the presigned URL.

Answer

Set object retention on the files. Use the AWS software development kit (SDK) to restore the object before subsequent requests. Provide the bucket's URL.

Answer

Set a bucket policy that restricts access after a period of time. Provide the bucket's S3 URL.

Answer

Configure static web hosting on the S3 bucket. Provide the bucket's web URL.

Question 4

A company has an application that uses Amazon Cognito user pools as an identity provider. The company must secure access to user records. The company I up multi-factor authentication (MFA). The company also wants to send a login activity notification by email every time a user logs in.What is the MOST operationally efficient solution that meets this requirement?

Accepted Answer

Create an AWS Lambda function that uses Amazon Simple Email Service (Amazon SES) to send the email notification. Create an Amazon CloudWatch Logs log subscription filter to invoke the function based on the login status.

Answer

Create an AWS Lambda function that uses Amazon Simple Email Service (Amazon SES) to send the email notification. Add an Amazon API Gateway to invoke the function. Call the API from the client side when login confirmation is received.

Answer

Create an AWS Lambda function that uses Amazon Simple Email Service (Amazon SES) to send the email notification. Add an Amazon Cognito post authentication Lambda trigger for the function.

Answer

Configure Amazon Cognito to stream all logs to Amazon Kinesis Data Firehose. Create an AWS Lambda function to process the streamed logs and it send the email notification based on the login status of each user.

Question 5

A company is using AWS Elastic Beanstalk to deploy a three-tier application. The application uses an Amazon RDS DB instance as the database tier. The com wants to decouple the DB instance from the Elastic Beanstalk environment. Which combination of steps should a developer take to meet this requirement? (Select TWO.)

Accepted Answer

Create a new DB instance from a snapshot of the previous DB instance.

Accepted Answer

Modify the current Elastic Beanstalk environment to connect to the DB instance.

Answer

Create a new Elastic Beanstalk environment that connects to the DB instance.

Answer

Use the Elastic Beanstalk CLI to decouple the DB instance.

Answer

Use the AWS CLI to decouple the DB instance.

Question 6

A developer deployed an application to an Amazon EC2 instance. The application needs to know the public IPv4 address of the instance. How can the application find this information?

Accepted Answer

Query the instance metadata from http://169.254.169.254/latest/meta-data/.

Answer

Query the instance user data from http://169.254.169.254/latest/user-data/.

Answer

Query the Amazon Machine Image (AMI) information from http://169.254.169.254/latest/metadata/ami/.

Answer

Check the hosts file of the operating system.

Question 7

A company has a serverless application that uses AWS Lambda functions and AWS Systems Manager parameters to store configuration dat a. The company....... the Lambda functions inside the VPC and into private subnets. The Lambda functions are now producing errors in their attempts to access Systems Manager parameters.Which solution will allow the Lambda functions to access Systems Manager parameters inside the VPC?

Accepted Answer

Create an interface VPC endpoint for Systems Manager.

Answer

Configure security groups to allow access to Systems Manager.

Answer

Use an internet gateway from inside the VPC.

Answer

Create a gateway VPC endpoint for Systems Manager.

Question 8

A developer is writing an AWS Lambda function. The Lambda function needs to access items that are stored in an Amazon DynamoDB table. What is the MOST secure way to configure this access for the Lambda function?

Accepted Answer

Create an IAM user that has permissions to access the DynamoDB table. Create an access key for this user. Store the access key ID and secret...... key in the Lambda function environment variables.

Answer

Add a resource-based policy to the DynamoDB table to allow access from the Lambda function's IAM role.

Answer

Create an IAM policy that allows access to the DynamoDB table. Attach this policy to the Lambda function's 1AM role.

Answer

Create a DynamoDB Accelerator (DAX) cluster. Configure the Lambda function to use the DAX cluster to access the DynamoDB table.

Question 9

A company that has multiple offices uses an Amazon DynamoDB table to store employee payroll information. Item attributes consist of employee names, office identifiers, and cumulative daily hours worked. The most frequently used query extracts a report of an alphabetical subset of employees for a specific office.Which design of the DynamoDB table primary key will have the MINIMUM performance impact?

Accepted Answer

Partition key on the employee name and sort key on the office identifier

Answer

Partition key on the office identifier and sort key on the employee name

Answer

Partition key on the employee name

Answer

Partition key on the office identifier

Question 10

A data-processing application includes an AWS Lambda function that processes data in several steps. Recently, the function has been reaching the Lambda tii A developer wants to use AWS X-Ray to find out how long each step is taking so that the developer can determine which step is causing the timeout. Which combination of actions should the developer take to accomplish this goal? (Select TWO.)

Accepted Answer

Use the aws lambda update-function-configuration AWS CLI command to enable active tracing on the Lambda function.

Answer

Modify the application to call the PutMetricData API operation after each processing step. Include the time taken in milliseconds.

Answer

Modify the application to record each processing step in an X-Ray subsegment by using the X-Ray software development kit (SDK).

Answer

Add the xray:PutTraceSegments permission and the xray:PutTelemetryRecords permission to the Lambda function's execution role.

Answer

Modify the application to put each processing step in a separate Lambda layer. Include all the layers in the Lambda function.

Question 11

A company has an online order website that uses Amazon DynamoDB to store item inventory. A sample of the inventory object is as follows:<img alt="Amazon DVA-C01 image Question 531 4289 09162024005627000000"   width="647" height="155" src="https://examgecko.com/getfile/679863a1-38cd-456e-a590-204ac5b61c32">A developer needs to reduce all inventory prices by 100 as long as the resulting price would not be less than 500. What should the developer do to make this change with the LEAST number of calls to DynamoDB?

Accepted Answer

Perform a DynamoDB Updateltem operation with a condition expression of "ProductCategory IN<{"S": "Sporting Goods"}) and Price = 600".

Answer

Perform a DynamoDB Query operation with the Id. If the price is >= 600, perform an Updateltem operation to update the price.

Answer

Perform a DynamoDB Updateltem operation with a condition expression of "Price >= 600".

Question 12

A company is expanding the compatibility of its photo-sharing mobile app to hundreds of additional devices with unique screen dimensions and resolutions. Ph are stored in Amazon S3 in their original format and resolution. The company uses an Amazon CloudFront distribution to serve the photos.The app includes th dimension and resolution of the display as GET parameters with every request.A developer needs to implement a solution that optimizes the photos that are served to each device to reduce load time and increase photo quality. Which solution will meet these requirements MOST cost-effectively?

Accepted Answer

Use S3 Batch Operations to invoke an AWS Lambda function to create new variants of the photos with the required dimensions and resolutions. Cr........dynamic CloudFront origin that automatically maps the request of each device to the corresponding photo variant.

Answer

Use S3 Batch Operations to invoke an AWS Lambda function to create new variants of the photos with the required dimensions and resolutions. Cre;..... Lambda@Edge function to route requests to the corresponding photo variant by using request headers.

Answer

Create a Lambda@Edge function that optimizes the photos upon request and returns the photos as a response. Change the CloudFront TTL cache policy to the maximum value possible.

Answer

Create a Lambda@Edge function that optimizes the photos upon request and returns the photos as a response. In the same function, store a copy to processed photos on Amazon S3 for subsequent requests.

Question 13

A developer at a company recently created a serverless application to process and show data from business reports. The application's user interface (Ul) allow users to select and start processing the files. The Ul displays a message when the result is available to view. The application uses AWS Step Functions with A Lambda functions "to process the files. The developer used Amazon API Gateway and Lambda functions to create an API to support the Ul. The company's Ul team reports that the request to process a file is often returning timeout errors because of the size or complexity of the files. The Ul team w< API to provide an immediate response so that the Ul can display a message while the files are being processed. The backend process that is invoked by the A needs to send an email message when the report processing is complete. What should the developer do to configure the API to meet these requirements?

Accepted Answer

Change the API Gateway route to add an X-Amz-lnvocation-Type header with a static value of 'Event' in the integration request. Deploy the API Gatt stage to apply the changes.

Answer

Change the configuration of the Lambda function that implements the request to process a file.Configure the maximum age of the event so that the Lambda function will run asynchronously.

Answer

Change the API Gateway timeout value to match the Lambda function timeout value. Deploy the API Gateway stage to apply the changes.

Answer

Change the API Gateway route to add an X-Amz-Target header with a static value of 'Async' in the integration request. Deploy the API Gateway stag apply the changes.

Question 14

An application that is running on Amazon EC2 instances stores data in an Amazon S3 bucket. All the data must be encrypted in transit. How can a developer ensure that all traffic to the S3 bucket is encrypted?

Accepted Answer

Configure the S3 bucket with server-side encryption with AWS KMS managed encryption keys(SSE-KMS).

Answer

Install certificates on the EC2 instances.

Answer

Create a private VPC endpoint.

Answer

Create an S3 bucket policy that denies traffic when the value for the aws:SecureTransport condition key is false.

Question 15

A developer needs to use Amazon DynamoDB to store customer orders. The developer's company requires all customer data to be encrypted at rest with a ke the company generates. What should the developer do to meet these requirements?

Accepted Answer

Store the key by using AWS Key Management Service (AWS KMS). Create the DynamoDB table with default encryption. Include the kms:Encrypt parameter with the Amazon Resource Name (ARN) of the AWS KMS key when using the DynamoDB software development kit (SDK).

Answer

Create the DynamoDB table with encryption set to None. Code the application to use the key to decrypt the data when the application reads from the table. Code the application to use the key to encrypt the data when the application writes to the table.

Answer

Store the key by using AWS Key Management Service (AWS KMS). Choose an AWS KMS customer managed key during creation of the DynamoDB table. Provide the Amazon Resource Name (ARN) of the AWS KMS key.

Answer

Store the key by using AWS Key Management Service (AWS KMS). Choose an AWS KMS AWS managed key during creation of the DynamoDB table Provide the Amazon Resource Name (ARN) of the AWS KMS key.

Question 16

A developer notices timeouts from the AWS CLI when the developer runs list commands. What should the developer do to avoid these timeouts?

Accepted Answer

Use the -page-size parameter to request a smaller number of items.

Answer

Use shorthand syntax to separate the list by a single space.

Answer

Use the yaml-stream output for faster viewing of large datasets.

Answer

Use quotation marks around strings to enclose data structure.

Question 17

A developer implemented a static website hosted in amazon s3 that makes web service requests in amazon api gateway and aws lambda. The site is showing an error that reads. ''No 'access control-allow-origin'header' header is present on the requested resource. Origin 'null is therefore not allowed access '' What should the developer do to resolve this issue?

Accepted Answer

Enable cross-origin resource sharing (cors) on the s3 bucket

Answer

Enable cross-origin resource sharing (cors) for the method in api gateway

Answer

Add the access control-request-method header to the request

Answer

Add the access-control inquest headers header to the request

Question 18

A developer is creating a serverless application that uses an AWS Lambda function. The developer will use AWS Cloud Formation to deploy the application. The application will write logs to Amazon 3loudWatch Logs. The developer has created a log group in a Cloud Format ion template for the application to use. The developer needs to modify the CloudFormation template to make the name of the log [jroup available to the application at runtime. Which solution will meet this requirement?

Accepted Answer

Use the CloudFormation template's Mappings section to specify the log group's name for the application.

Answer

Use the AWS:: Include transform in CloudFormation to provide the log group's name to the application.

Answer

Pass the log group's name to the application in the user data section of the CloudFormation template.

Answer

Pass the log group's Amazon Resource Name (ARN) as an environment variable to the Lambda function.

Question 19

A company has an ecommerce application. To track product reviews, the company's development team uses an Amazon DynamoDB table. Every record includes the following:• A Review ID, a 16-digit universally unique identifier (UUID)• A Product ID and User ID. 16-digit UUIDs that reference other tables• A Product Rating on a scale of 1—5 - An optional comment from the user The table partition key is the Review ID. The most performed query against the table is to find the 10 reviews with the highest rating for a given product. Which index will provide the FASTEST response tor this query?

Accepted Answer

A global secondary index (GSI) with Product ID as the partition key and Product Rating as the sort key

Answer

A global secondary index (GSI) with Product ID as the partition key and Review ID as the sort key

Answer

A local secondary index (LSI) with Product ID as the partition key and Product Rating as the sort key

Answer

A local secondary index (LSI) with Review ID as the partition key and Product ID as the sort key

Question 20

A developer is monitoring an application that runs on an Amazon EC2 instance. The developer has configured a custom Amazon CloudWatch metric with d#ta granularity of 1 second. If any issues occur, the developer wants to be notified within 30 seconds by Amazon Simple Notification Service(Amazon SNS).What should the developer do to meet this requirement?

Accepted Answer

Change to a default CloudWatch metric.

Answer

Configure a high-resolution CloudWatch alarm.

Answer

Set up a custom CloudWatch dashboard.

Answer

Use Amazon CloudWatch Logs Insights.

Question 21

A developer has an application container, an AWS Lambda function, and an Amazon Simple Queue Sen/ice (Amazon SOS) queue. The Lambda function uses the SOS queue as an event source. The Lambda function makes a call to a third-party machine learning API when the function is invoked.The response from the third-party API can take up to 60 seconds to return. the Lambda function's timeout value is currently 65 seconds. The developer has noticed that the Lambda function sometimes processes duplicate messages from the SOS queue.What should the developer do to ensure that the Lambda function does not process duplicate messages?

Accepted Answer

Configure the Lambda function with a larger amount of memory.

Answer

Configure an increase in the Lambda function's timeout value.

Answer

Configure the SOS queue's delivery delay value to be greater than the maximum time it takes to call the third-party API.

Answer

Configure the SOS queue's visibility timeout value to be greater than the maximum time it takes to call the third-party API.

Question 22

An ecommerce application is running behind an Application Load Balancer. A developer observes some unexpected load on the application during non-peak hours. The developer wants to analyze patterns for the client IP addresses that use the application.Which HTTP header should the developer use for this analysis?

Accepted Answer

The X-Forwarded-For header

Answer

The X-Forwarded-Proto header

Answer

The X-Forwarded-Host header

Answer

The X-Forwarded-Port header

Question 23

A developer is running an application on an Amazon EC2 instance. When the application tries to read an Amazon S3 bucket, the application fails. The developer notices that the associated IAM role is missing the S3 read permission. The developer needs to give the application the ability to read the S3 bucket.Which solution will meet this requirement with the LEAST application disruption?

Accepted Answer

Add the permission to the role so that the change will take effect automatically.

Answer

Add the permission to the role. Terminate the existing EC2 instance. Launch a new EC2 instance.

Answer

Add the permission to the role. Hibernate and restart the existing EC2 instance.

Answer

Add the permission to the S3 bucket. Restart the EC2 instance.

Question 24

\ developer is designing a serverless application for a game in which users register and log in through a web browser. The application makes requests on behalf of users to a set of AWS Lambda functions that un behind an Amazon API Gateway HTTP API. rhe developer needs to implement a solution to register and log in users on the application's sign-in page. The solution must minimize operational overhead and must minimize ongoing management of user identities. Which solution will meet these requirements?

Accepted Answer

Create Amazon Cognito user pools for external social identity providers. Configure 1AM roles for the identity pools.

Answer

Program the sign-in page to create users' 1AM groups with the 1AM roles attached to the groups.

Answer

Create an Amazon RDS for SQL Server DB instance to store the users and manage the permissions to the backend resources in AWS.

Answer

Configure the sign-in page to register and store the users and their passwords in an Amazon DynamoDB table with an attached 1AM policy.

Question 25

An AWS Lambda function requires read access to an Amazon S3 bucket and requires read/write access to an Amazon DynamoDB table. The correct 1AM policy already exists. What is the MOST secure way to grant the Lambda function access to the S3 bucket and the DynamoDB table?

Accepted Answer

Create an IAM role for the Lambda function. Attach the existing IAM policy to the role. Attach the role to the Lambda function.

Answer

Attach the existing IAM policy to the Lambda function.

Answer

Create an IAM user with programmatic access. Attach the existing IAM policy to the user. Add the user access key ID and secret access key as environment variables in the Lambda function.

Answer

Add the AWS account root user access key ID and secret access key as encrypted environment variables in the Lambda function.

Question 26

A company is using Amazon Cognito user pools for sign-up and login functionality for a web application. The company is using Amazon RDS for the application's data persistence and is using Amazon API Gateway and AWS Lambda for the application's API functionality. Users must provide their first name, last name, email address, and phone number to sign up. All API endpoints have a Cognito user pool authorizer to guard against unauthenticated requests. A developer wants to show a personalized welcome screen to users after they log in. The welcome screen needs to show the user's first name and the user's previous login date. According to company policy. developers who work on the web application cannot store any personally identifiable information in RDS instances.Which solution should the developer implement to meet these requirements?

Accepted Answer

After successful login, submit a Cognito request for user tokens. When redirecting to the welcome screen, provide the identity token in the Authorization header of the request. Extract the user name from the given_name claim and the user's universally unique identifier (UUID) from the iss claim inside the identity token. Use the UUID as the key to store and retrieve the previous login information from the database.

Answer

After successful login, submit a Cognito request for user tokens. When redirecting to the welcome screen, provide the identity token in the Authorization header of the request. Extract the user name from the given_name claim and the user's universally unique identifier (UUID) from the sub claim inside the identity token. Use the UUID as the key to store and retrieve the previous login information from the database.

Answer

After successful login, submit a Cognito request for user tokens. When redirecting to the welcome screen, provide the access token in the Authorization header of the request. Extract the user name from the given_name claim and the user's universally unique identifier (UUID) from the sub claim inside the access token. Use the UUID as the key to store and retrieve the previous login information from the database.

Answer

After successful login, submit a Cognito request for user tokens. When redirecting to the welcome screen, provide the access token in the Authorization header of the request. Extract the user name from the given name claim and the user's universally unique identifier (UUID) from the iss claim inside the access token. Use the UUID as the key to store and retrieve the previous login information from the database.

Question 27

A banking application processes thousands of transactions each second. Each transaction payload must have end-to-end encryption. The application encrypts each transaction locally by using the AWS Key Management Service (AWS KMS) GenerateDataKey operation. A developer is testing the application and receives a Throttling Except ion error. Which actions are best practices to resolve this error? (Select TWO.)

Accepted Answer

Use the LocalCryptoMaterialsCache feature of the AWS Encryption SDK encryption library.

Accepted Answer

Create a case in the AWS Support Center to increase the quota for the account.

Answer

Call the AWS KMS Encrypt operation directly to allow AWS KMS to encrypt the data.

Answer

Use Amazon Simple Queue Service (Amazon SQS) to queue the requests to AWS KMS.

Answer

Switch to an AWS KMS custom key store.

Question 28

A developer has an Amazon DynamoDB table that must be in provisioned mode to comply with user requirements. The application needs to support the following:• Average item size: 10 KB• Item reads each second: 10 strongly consistent• Item writes each second: 2 transactionalWhich read and write capacity cost-effectively meets these requirements?

Accepted Answer

Read 30; write 40

Answer

Read 10; write 2

Answer

Use on-demand scaling

Answer

Read 300; write 400

Question 29

A developer is building a three-tier application with an Application Load Balancer (ALB). Amazon EC2 instances, and Amazon RDS. There is an alias record in Amazon Route 53 that points to the ALB. When Ihe developer tries to access the ALB from a laptop, the request times out.Which logs should the developer investigate to verify that the request is reaching the AWS network?

Accepted Answer

VPC Flow Logs

Answer

Amazon Route 53 logs

Answer

AWS Systems Manager Agent logs

Answer

Amazon CloudWatch agent logs

Question 30

A developer is working on an application that is deployed on an Amazon EC2 instance. The application needs to transfer a file to an Amazon S3 bucket. What should the developer do to authenticate the application's access to the S3 bucket in the MOST secure way?

Accepted Answer

Create an IAM role. Create an access key for the role. Store the access key in the application's environment variables.

Answer

Create an access key for an IAM user. Store the access key in the application's environment variables.

Answer

Associate an IAM role with the EC2 instance. Use the instance metadata service to retrieve the credentials.

Answer

Configure a bucket policy for the S3 bucket. Allow access from the EC2 instance ID in the bucket policy.

Question 31

A developer has an application that pushes files from an on-premises local server to an Amazon S3 bucket. The application uses an AWS access key and a secret key that are stored on the server for authentication. The application calls AWS Security Token Service (AWS STS) to assume a role with access to perform the S3 PUT operation to upload the file. The developer is migrating the server to an Amazon EC2 instance. The EC2 instance is configured with an 1AM instance profile in the same AWS account that owns the S3 bucket. What is the MOST secure solution for the developer to use to migrate the automation code?

Accepted Answer

Remove the access key, the secret key, and the code that calls the STS AssumeRole operation. Use an 1AM instance profile role that grants access to the S3 bucket.

Answer

Remove the code that calls the STS AssumeRole operation. Use the same access key and secret key from the server to access the S3 bucket.

Answer

Remove the access key and the secret key. Use the STS AssumeRole operation to add permissions to access the S3 bucket.

Answer

Remove the access key, the secret key, and the code that calls the STS AssumeRole operation.Create a new access key and secret key. Use the new keys to access the S3 bucket.

Question 32

A developer runs an application that uses an Amazon API Gateway REST API. The developer needs to implement a solution to proactively monitor the health of both API responses and latencies in case a deployment causes a service disruption despite passing deployment pipeline tests. The solution also must check for endpoint vulnerability and unauthorized changes to APIs. URLs, and website content. Which solution will meet these requirements?

Accepted Answer

Use the Amazon CloudWatch Synthetics canary functionality to call the API and check the responses and duration of the request.

Answer

Use a custom health check in the API that queries hosts to check the duration of the request.

Answer

Implement a custom AWS Lambda function with an Amazon EventBridge event to periodically call the API and check the responses and duration of the request.

Answer

Use the built-in API Gateway metrics to monitor the average duration of the API response.

Question 33

A company uses Amazon DynamoDB as a data store for its order management system. The company frontend application stores orders in a DynamoDB table. The DynamoDB table is configured to send change events to a DynamoDB stream. The company uses an AWS Lambda function to log and process the incoming orders based on data from the DynamoDB stream. An operational review reveals that the order quantity of incoming orders is sometimes set to 0. A developer needs to create a dashboard that will show how many unique customers this problem affects each day. What should the developer do to implement the dashboard?

Accepted Answer

Turn on custom Amazon CloudWatch metrics for the DynamoDB stream of the DynamoDB table.Create a CloudWatch alarm that groups the number of unique customers for orders with order quantity equal to 0 in 1-day periods. Add the CloudWatch alarm to a CloudWatch dashboard.

Answer

Grant the Lambda function's execution role permissions to upload logs to Amazon CloudWatch Logs. Implement a CloudWatch Logs Insights query that selects the number of unique customers for orders with order quantity equal to 0 and groups the results in 1-day periods. Add the CloudWatch Logs Insights query to a CloudWatch dashboard.

Answer

Use Amazon Athena to query AWS CloudTrail API logs for API calls. Implement an Athena query that selects the number of unique customers for orders with order quantity equal to 0 and groups the results in 1 -day periods. Add the Athena query to an Amazon CloudWatch dashboard.

Answer

Configure the Lambda function to send events to Amazon EventBridge. Create an EventBridge rule that groups the number of unique customers for orders with order quantity equal to 0 in 1 -day periods. Add a CloudWatch dashboard as the target of the rule.

Question 34

A developer is writing an application that will run on Amazon EC2 instances in an Auto Scaling group. The developer wants to externalize the session state to support the application. Miich AWS services or resources can the developer use to meet these requirements? (Select TWO.)

Accepted Answer

Amazon DynamoDB

Accepted Answer

Amazon ElastiCache

Answer

Amazon Cognito

Answer

Application Load Balancer

Answer

Amazon Simple Queue Service (Amazon SQS)

Question 35

A developer is creating a serverless orchestrator that performs a series of steps to processes incoming loT dat a. The orchestrator transforms the data, performs a series of calculations, and stores the results in Amazon DynamoDB. The entire process is completed in less than a minute.The orchestrator must process tens of thousands of transactions each second. The orchestrator must not miss a transaction and must process each transaction at least once. Which solution will meet these requirements MOST cost-effectively?

Accepted Answer

Use AWS Step Functions to process the data as Asynchronous Express Workflows.

Answer

Use Amazon Simple Notification Service (Amazon SNS) to process the data through an HTTP or HTTPS endpoint.

Answer

Use AWS Step Functions to process the data as Standard Workflows.

Answer

Use AWS Step Functions to process the data as Synchronous Express Workflows.

Question 36

A developer has an application that is composed of many different AWS Lambda functions. The Lambda functions all use some of the same dependencies. To avoid security issues, the developer is constantly updating the dependencies of all of the Lambda functions. The result is duplicated effort for each function.Now can the developer keep the dependencies of the Lambda functions up to date with the LEAST additional complexity?

Accepted Answer

Define a Lambda layer that contains all of the shared dependencies.

Answer

Define a maintenance window for the Lambda functions to ensure that the functions get updated copies of the dependencies.

Answer

Upgrade the Lambda functions to the most recent runtime version.

Answer

Use an AWS CodeCommit repository to host the dependencies in a centralized location.

Question 37

A developer is implementing an AWS Lambda function that will be invoked when an object is uploaded to Amazon S3. The developer wants to test the Lambda function in a local development machine before publishing the function to a production AWS account.Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Create a JSON string for the put object S3 event. In the AWS Management Console, use the JSON string to create a test event for the local Lambda function. Perform the test.

Answer

Upload an object to Amazon S3 by using the aws s3api put-object CLI command. Wait for the local Lambda invocation from the S3 event.

Answer

Create a sample JSON text file for a put object S3 event. Invoke the Lambda function locally. Use the aws lambda invoke CLI command with the JSON file and Lambda function name as arguments.

Answer

Use the sam local start-lambda CLI command lo start Lambda. Use the sam local generate-event s3 put CLI command to create the Lambda test JSON file. Use the sam local invoke CLI command with the JSON file as the argument to invoke the Lambda function.

Question 38

A company has a serverless application that uses Amazon API Gateway backed by AWS Lambda proxy integration. The company is developing several backend APIs. The company needs a landing page to arovide an overview ol navigation to the APIs.\ developer creates a new /LandingPage resource and a new GET method that uses mock integration.What should the developer do next to meet these requirements?

Accepted Answer

Configure the integration request mapping template with Content-Type of application/json. In the integration request mapping template, include the LandingPage HMTL code that references the APIs. Configure the integration response mapping template with Content-Type of text/html and statusCode of 200.

Answer

Configure the integration request mapping template with Content-Type of text/html and statusCode of 200. Configure the integration response mapping template with Content-Type of application/json. In the integration response mapping template, include the LandingPage HTML code that references the APIs.

Answer

Configure the integration request mapping template with Content-Type of application/json and statusCode of 200. Configure the integration response mapping template with Content-Type of text/html. In the integration response mapping template, include the LandingPage HTML code that references the APIs.

Answer

Configure the integration request mapping template with Content-Type of text/html. In the integration request mapping template, include the LandingPage HTML code that references the APIs. Configure the integration response mapping template with Content-Type of application/json and statusCode of 200.

Question 39

A company has a serverless application that uses AWS Lambda functions and AWS Systems Manager parameters to store configuration dat a. The company moves the Lambda functions inside the VPC and into private subnets. The Lambda functions are now producing errors in their attempts to access Systems Manager parameters.Which solution will allow the Lambda functions to access Systems Manager parameters inside the VPC?

Accepted Answer

Create an interface VPC endpoint for Systems Manager.

Answer

Configure security groups to allow access lo Systems Manager.

Answer

Use an internet gateway from inside the VPC.

Answer

Create a gateway VPC endpoint for Systems Manager.

Question 40

A company is hosting a workshop for external users and wants to share the reference documents with the external users for 7 days. The company stores the reference documents in an Amazon S3 bucket that the company owns. What is the MOST secure way to share the documents with the external users?

Accepted Answer

Use S3 presigned URLs to share the documents with the external users. Set an expiration time of 7 days.

Answer

Move the documents to an Amazon WorkDocs folder. Share the links of the WorkDocs folder with the external users.

Answer

Create temporary 1AM users that have read-only access to the S3 bucket. Share the access keys with the external users. Expire the credentials after 7 days.

Answer

Create a role that has read-only access to the S3 bucket. Share the Amazon Resource Name (ARN) of this role with the external users.

Amazon DVA-C01 Practice Test 14

Amazon DVA-C01 Practice Tests