Quiz IT certification exam

Question 1

A developer is creating a photo website. Amazon Route 53 hosts the website's domain. The developer wants to store the application code and images in an Amazon S3 bucket. The developer also wants to jse Amazon CloudFront to deliver the images to users. the developer has created the S3 bucket and a CloudFront distribution. The developer wants the images to be accessed only through the website's domain. Users must not use the S3 URLs. Which solution will meet these requirements?

Become a Premium Member for full access

Unlock Premium Member

Accepted Answer

Create a CloudFront origin access identity (OAI). Associate the OAI with the CloudFront distribution. Modify the S3 bucket policy to allow access from only the OAI. Create an alias in Route 53 that points the website domain to the S3 bucket.

Answer

Create a CloudFront origin access identity (OAI). Associate the OAI with the CloudFront distribution. Modify the S3 bucket policy to allow access from only the OAI. Update the Route 53 records to point the website domain to the CloudFront domain name.

Answer

Block public access in the S3 bucket policy. Configure CloudFront to use the S3 bucket endpoint. Create an alias in Route 53 that points the website domain to the S3 bucket.

Answer

Block public access in the S3 bucket policy. Configure CloudFront to use the S3 bucket endpoint. Create an alias in Route 53 that points the website domain to the CloudFront domain name.

Question 2

A company is using continuous integral ion/continuous delivery (CI/CD) systems. A that run on premises. Which AWS service should the developer use to meet these requirements?

Accepted Answer

AWS CodeDeploy

Answer

AWSCIoud9

Answer

AWS CodeBuild

Answer

AWS Elastic Beanstalk

Question 3

A developer is using AWS CodeDeploy to automate a company's application deployments to Amazon EC2.Which application specification file properties are required to ensure the software deployments do not fail? {Select TWO.)

Accepted Answer

The file must be a YAML-formatted file named appspec.yml

Accepted Answer

The file must be placed in the root of the directory structure of the application's source code.

Answer

The file must be a JSON-formatted file named appspec.json.

Answer

The file must be stored in AWS CodeBuikJ and referenced from the application's source code.

Answer

The file must be stored in Amazon S3 and referenced from the application's source code.

Question 4

A developer is writing a new web application that will be deployed and managed with AWS Elastic Beanstalk. The application will include an Amazon RDS DB instance. What steps should the developer take to access the RDS DB instance from the code? (Select TWO.)

Accepted Answer

Download the appropriate database driver and include it with the application.

Accepted Answer

Construct a connection string using the Elastic Beanstalk environment variables

Answer

Modify the endpoint name using either the AWS Management Console or AWS CLI

Answer

Upload the driver to Amazon S3 and reference it in the code

Answer

Create a CNAME record referencing database instances ALIAS.

Question 5

A security review for a software company's application infrastructure shows that there is no test coverage in any of the company's deployment pipelines. A developer must fix this issue as soon as possible. The company has been integrating the AWS Cloud Development Kit (AWS CDK) into the deployment process. However, much of the pipeline still uses AWS CloudFormation templates. The developer needs to add test coverage to all the deployment code. Which solution will meet these requirements with the LEAST amount of configuration?

Accepted Answer

Write unit tests by using the AWS CDK assertions module. Create CloudFormation template instances by using the module's Template class for the existing CloudFormation templates and the module's Capture class for the CDK stacks.

Answer

Write unit tests by using the AWS CDK assertions module. Create CloudFormation template instances by using the module's Template.fromStringO method for the existing CloudFormation templates and the module's Template fromStackQ method for the CDK stacks.

Answer

Convert the CloudFormation templates into CDK stacks by using the AWS CDK Cfnlnclude construct. Write unit tests against the templates by using CloudFormation rule assertions.

Answer

Convert the CDK stacks into CloudFormation templates by using the AWS CDK Cfnlnclude construct Write unit tests against the templates by using CloudFormation rule assertions

Question 6

A developer is creating a new batch application that will run on an Amazon EC2 instance. The application requires read access to an Amazon S3 bucket. The developer needs to follow security best practices to grant S3 read access to the application.Which solution meets these requirements?

Accepted Answer

Add the permissions to an 1AM policy. Attach the policy to a role Attach the role to the EC2 instance profile.

Answer

Add the permissions inline to an 1AM group. Attach the group to the EC2 instance profile.

Answer

Add the permissions to an 1AM policy. Attach the policy to a user Attach the user to the EC2 instance profile.

Answer

Add the permissions to an 1AM policy. Use 1AM web identity federation to access the S3 bucket with the policy

Question 7

A company has an application that provides blog hosting services to its customers. The application includes an Amazon DynamoDB table with a primary key The primary key consists of the customers' UserName as a partition key and the NumberOIBIogs as a sort key. The application stores the TotalReactionsOnBlogs as an attribute on the same DynamoDB table. A developer needs to implement an operation to retrieve the top 10 customers based on the greatest number of reactions on their blogs This operation must not consume the DynamoDB table's existing read capacity. What should the developer do to meet these requirements in the MOST operationally efficient manner?

Accepted Answer

For the existing DynamoDB table, create a new local secondary index (LSI) that has the UserName as a partition key and the TotalReactionsOnBlogs as a sort key

Answer

For the existing DynamoDB table, create a new global secondary index (GSI) that has the UserName as a partition key and the TotalReactionsOnBlogs as a sort key.

Answer

Back up and restore the DynamoDB table to a new DynamoDB table Create a new global secondary index (GSI) that has the UserName as a partition key and the TotalReactionsOnBlogs as a sort key Delete the old DynamoDB table

Answer

Back up and restore the DynamoDB table to a new DynamoDB table. Create a new local secondary index (LSI) that has the UserName as a partition key and the TotalReactionsOnBlogs as a sort key. Delete the old DynamoDB table.

Question 8

A developer is creating an AWS CloudFormation template to deploy Amazon EC2 instances across multiple AWS accounts. The developer must choose the EC2 instances from a list of approved instance types. How can the developer incorporate the list of approved instance types in the CloudFormation template?

Accepted Answer

In the Resources section of the CloudFormation template, create resources for each EC2 instance type in the list.

Answer

Create a separate CloudFormation template for each EC2 instance type in the list

Answer

In the CloudFormation template, create a separate parameter for each EC2 instance type in the list.

Answer

In the CloudFormation template, create a parameter with the list of EC2 instance types as AllowedValues

Question 9

A company is using an Amazon API Gateway REST API endpoint as a webhook lo publish events from an on-premises source control management (SCM) system to Amazon EventBridge. The company has configured an EventBridge rule to listen for the events and to control application deployment m a central AWS account. The company needs to receive the same events across multiple receiver AWS accounts How can a developer meet these requirements without changing the configuration of the SCM system?

Accepted Answer

Deploy the API Gateway REST API to all the required AWS accounts. Use the same custom domain name for all the gateway endpoints so that a single SCM webhook can be used for all events from all accounts.

Answer

Deploy the API Gateway REST API to all the receiver AWS accounts Create as many SCM webhooks as the number of AWS accounts.

Answer

Grant permission to the central AWS account for EventBridge to access the receiver AWS accounts. Add an EventBridge event bus on the receiver AWS accounts as the targets to the existing EventBridge rule

Answer

Convert the API Gateway type from REST API to HTTP API

Question 10

A developer needs to secure the static assets in a company's Amazon S3 bucket that is named DOCEXAMPLE- BUCKET. The company has an Amazon CtoudFront distribution that serves the S3 bucket's assets to the public. The developer has already created the origin access identity (OAI) and has associated the OAI with the distribution. The developer must write a bucket policy that allows only the CloudFront distribution to access the S3 bucket Which policy will meet this requirement MOST securely?

Accepted Answer

Question 11

A company is creating a continuous integration and continuous delivery (CI/CD) process by using AWS CodePipeline for its application on AWS The CI/CD process will pull code from an AWS CodeCommit repository, create the application infrastructure by using AWS Cloud Formation, deploy the frontend code to an Amazon S3 bucket that is configured for static website hosting, and deploy the application backend on an Amazon Elastic Container Service (Amazon ECS) cluster.A developer needs to create a new CodePipeline stage that creates the application infrastructure.Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Create a new action with AWS CodeBuikl as the action provider Configure the buildspec to make an API call by using the AWS CLI to create the CloudFormation stack

Answer

Create a new action with AWS Lambda as the action provider Create a Lambda function that makes an AWS SDK API call to create the CloudFormation stack

Answer

Create a new action with CloudFormation as the action provider Set the action mode to CREATE UPDATE Target the CloudFormation stack to be launched.

Answer

Create a new action with Jenkins as the action provider. Create and configure a Jenkins job to make an API call by using the AWS CLI to create the CloudFormation stack.

Question 12

A developer wants to implement authentication using Amazon Cognito user pools for an existing API in Amazon API Gateway. After creating the Amazon Cognito user pool, the developer tests the GET request to the API. Unauthenticated requests to the API return a 200 OK status response.Which combination of additional steps are required to complete the authentication implementation?(Select TWO.)

Accepted Answer

Create an Amazon Cognito authonzer in API Gateway and specify the Amazon Cognito user pool.

Accepted Answer

Use Amazon Cognito user pools to make and authenticate the request to API Gateway.

Answer

Create an AWS Lambda authorizer in API Gateway and specify the Amazon Cognito user pool.

Answer

Specify the authofizer in the GET method section of API Gateway and redeploy the API.

Answer

Create an Amazon Cognito authorizer in API Gateway and specify the Amazon Cognito identity pool.

Question 13

A company is building an application for stock trading. The application needs sub-millisecond latency for processing trade requests. The company uses Amazon DynamoDB to store all the trading data that is used to process each trading request A development team performs load testing on the application and finds that the data retrieval time is higher than expected. The development team needs a solution that reduces the data retrieval time with the least possible effort. Which solution meets these requirements?

Accepted Answer

Use DynamoDB Accelerator (DAX) to cache the trading data

Answer

Add local secondary indexes (LSIs) for the trading data

Answer

Store the trading data in Amazon S3, and use S3 Transfer Acceleration.

Answer

Add retries with exponential backoff for DynamoDB queries.

Question 14

A developer is building varKHJS microservices for an application that will run on Amazon EC2 instances. The developer needs to monitor the end-to-end view of the requests between the microservices and debug any issues in the various microservices.What should the developer do to accomplish these tasks?

Accepted Answer

Use the AWS X-Ray SDK to add instrumentation in all the microsen/ices, and monitor using the XRay service map.

Answer

Use Amazon CloudWatch to aggregate the microservices' logs and metrics, and build the monitoring dashboard

Answer

Use AWS CloudTrail to aggregate the microservices' logs and metrics, and build the monitoring dashboard

Answer

Use AWS Health to monitor the health of all the microservices

Question 15

An application adds a processing date to each transaction that it receives. The application writes each transaction to an Amazon DynamoDB table by using the Putitem operation. Each transaction has a unique ID (transactionlD). Sometimes the application receives transactions more than once.A developer notices that duplicate transactions in DynamoDB have the latest processing date instead of the date when the transaction was first received. Duplicate records happen infrequently, and most of the transactions are unique. What is the MOST cost-effective solution that the developer can implement to ensure that Putltem does not update an existing record?

Accepted Answer

Implement a conditional put by using the attribute_exists(transactionlD) condition expression.

Answer

Call the Getltem operation first to confirm that the record does not exist. Then call Putltem

Answer

Enable the TTL attribute on the DynamoDB table.

Answer

Implement a conditional put by using the attribute_not_exists(transactionlD) condition expression.

Question 16

A developer is exposing an API by using Amazon API Gateway and AWS Lambda as the backend for an application. The developer wants to add validation rules for a POST method to ensure that the data (rom the frontend web form is valid. The validation rules must include mandatory fields, data type, length, and regular expressions. Which solution will meet these requirements?

Accepted Answer

Create API Gateway URL path parameters for data validation

Answer

Create an API Gateway model with schema for data validation.

Answer

Create API Gateway HTTP request headers for data validation.

Answer

Create API Gateway URL query string parameters for data validation.

Question 17

A developer is writing an application that stores data in an Amazon DynamoDB table by using the Putltem API operation. The table has a partition key of streamlD and has a sort key of seqlD. The developer needs to make sure that the Putltem invocation does not overwrite the existing partition key and sort key.Which condition expression will maintain the uniqueness of the partition key and the sort key?

Accepted Answer

Question 18

A developer created a web API that receives requests by using an internet-facing Application Load Balancer (ALB) with an HTTPS listener. The developer configures an Amazon Cognito user pool and wants to ensure that every request to the API is authenticated through Amazon Cognito.What should the developer do to meet this requirement?

Accepted Answer

Create an Amazon API Gateway API. Configure all API methods to be forwarded to the ALB endpoint. Create an authorizer of the COGNITO_USER_POOLS type. Configure every API method to use that authorizer.

Answer

Add a listener rule to the listener to return a fixed response if the Authorization header is missing. Set the fixed response to 401 Unauthorized.

Answer

Create an authentication action for the listener rules of the ALB. Set the rule action type to authenticate-cognito Set the OnUnauthenticatedRequest field to "deny."

Answer

Create a new target group that includes an AWS Lambda function target that validates the Authorization header by using Amazon Cognito. Associate the target group with the listener.

Question 19

A company manages a financial services application that stores a large volume of data in an Amazon DynamoDB table. A developer needs to improve the performance of the DynamoDB read queries without increasing the cost. Which solution meets these requirements?

Accepted Answer

Create a DynamoDB Accelerator (DAX) cluster.

Answer

Use parallel scans

Answer

Add a local secondary index (LSI).

Answer

Query with the Projection Expression parameter

Question 20

A distributed application includes an AWS Lambda function that runs successfully in the DEV environment with 128 MB of memory assigned. The same function is failing in the TEST environment. The developer is monitoring the application using AWS X-Ray, but the Lambda function cannot be seen on the X-Ray service graph. The Lambda execution role has AWS X-Ray permissions What is the MOST LIKELY cause for AWS X-Ray not showing any data for the Lambda function?

Accepted Answer

Active tracing needs to be enabled for the Lambda function

Answer

The AWS SDK needs to be included in the AWS Lambda deployment package.

Answer

VPC Flow Logs are not enabled for the application VPC.

Answer

The memory needs to be increased to 2 GB for the TEST environments.

Question 21

A developer deployed an application to an Amazon EC2 instance. The application needs to know the public IPv4 address of the instance. How can the application find this information?

Accepted Answer

Query the instance metadata from http://169.254.169.254/latest/meta-data/.

Answer

Query the instance user data from http://169 254.169.254/latest/user-data/.

Answer

Query the Amazon Machine Image (AMI) information from http://169 254.169.254/latesl/metadata/ami/.

Answer

Check the hosts file of the operating system.

Question 22

A company uses AWS CloudFormation to deploy an application that uses an Amazon API Gateway REST API with AWS Lambda function integration. The application uses Amazon DynamoDB for data persistence. The application has three stages, development, testing, and production. Each stage uses its own DynamoDB table.The company has encountered unexpected issues when promoting changes to the production stage.The changes were successful in the development and testing stages. A developer needs to route 20% of the traffic to the new production stage API with the next production release. The developer needs to route the remaining 80% of the traffic to the existing production stage. The solution must minimize the number of errors that any single customer experiences. Which approach should the developer take to meet these requirements?

Accepted Answer

Update the Amazon Route 53 DNS record entry for the production stage API to use a weighted routing policy Set the weight to a value of 80. Add a second record for the production domain name Change the second routing policy to a weighted routing policy. Set the weight of the second policy to a value of 20. Change the alias of the second policy to use the testing stage API.

Answer

Update 20% of the planned changes to the production stage. Deploy the new production stage.Monitor the results. Repeat this process five times to test all planned changes

Answer

Deploy an Application Load Balancer (ALB) in front of the REST API Change the production API Amazon Route 53 record to point traffic to the ALB Register the production and testing stages as targets of the ALB with weights of 80% and 20%. respectively.

Answer

Configure canary settings for the production stage API. Change the percentage of traffic directed to canary deployment to 20%. Make the planned updates to the production stage Deploy the changes.

Question 23

A development team set up a pipeline to launch a test environment. The developers want to automate tests for their application. The team created an AWS CodePipeline stage to deploy the application to a test environment in batches using AWS Elastic Beanstalk. A later CodePipeline stage contains a single action that uses AWS CodeBuild to run numerous automated Selenium-based tests on the deployed application. The team must speed up the pipeline without removing any of the individual tests.Which set of actions will MOST effectively speed up application deployment and testing?

Accepted Answer

Set up an all-at-once deployment in Elastic Beanstalk. Run tests in parallel with multiple CodeBuild actions.

Answer

Set up a rolling update in Elastic Beanstalk. Run tests in serial with a single CodeBuild action.

Answer

Set up an immutable update in Elastic Beanstalk. Run tests in serial with a single CodeBuild action.

Answer

Set up a traffic-splitting deployment in Elastic Beanstalk. Run tests in parallel with multiple CodeBuild actions.

Question 24

A company must encrypt sensitive data that the company will store in Amazon S3. A developer must retain total control over the company's AWS Key Management Service (AWS KMS) key and the company’s data keys. The company currently uses an on-premises hardware security module (HSM) solution. The company wants to move its key management onto AWS. Which solution will meet these requirements?

Accepted Answer

Implement server-side encryption with AWS KMS managed keys (SSE-KMS). Use the AWS KMS custom key store feature to manage the data keys. Then read or write objects to Amazon S3 as normal.

Answer

Implement server-side encryption with AWS KMS managed keys (SSE-KMS). Use AWS CloudHSM to generate the KMS key and data keys to use with AWS KMS.

Answer

Implement server-side encryption with customer-provided encryption keys (SSE-C). Use AWS CloudHSM to generate the KMS key and manage the data keys that the company will use to read and write objects to Amazon S3.

Answer

Implement server-side encryption with Amazon S3 managed encryption keys (SSE-S3). Use AWS CloudHSM to generate the KMS key and manage the data keys that the company will use to read and write objects to Amazon S3.

Question 25

A media company wants to test its web application more frequently. The company deploys the application by using a separate AWS CloudFormation stack for each environment. The same CloudFormation template is deployed to each stack as the application progresses through the development lifecycle.A developer needs to build an automated alert for the quality assurance (QA) team. The developer wants the alert to occur for new deployments in the final pre-production environment. Which solution will moot these requirements?

Accepted Answer

Create an Amazon Simple Notification Service (Amazon SNS) topic. Add a subscription to notify the QA team. Update the CloudFormation stack options to point to the SNS topic in the pro-production environment. Most Voted

Answer

Create an AWS Lambda function that notifies the QA team. Create an Amazon EventBridge rule to invoke the Lambda function on the default event bus. Filter the events on the CloudFormation service and the CloudFormation stack Amazon Resource Name (ARM).

Answer

Create an Amazon CloudWatch alarm that monitors the metrics from CloudFormation. Filter the metrics on the stack name and the stack status. Configure the alarm to notify the QA team.

Answer

Create an AWS Lambda function that notifies the QA team. Configure the event source mapping to receive events from CloudFormation. Specify the filtering values to limit invocations to the desired CloudFormation stack.

Question 26

A developer needs to deploy an application to AWS Elastic Beanstalk for a company. The application consists of a single Docker image. The company's automated continuous integration and continuous delivery (CI/CD) process builds the Docker image and pushes the image to a public Docker registry.How should the developer deploy the application to Elastic Beanstalk?

Accepted Answer

Create a docker-compose.yml file. Use the Elastic Beanstalk CLI to deploy the application.

Answer

Create a Dockerfile. Configure Elastic Beanstalk to build the application as a Docker image.

Answer

Create a .zip file that contains the Docker image. Upload the .zip file to Elastic Beanstalk.

Answer

Create a Dockerfile. Run the Elastic Beanstalk CLI eb local run command in the same directory.

Question 27

A team of developers is using an AWS CodePipeline pipeline as a continuous integration and continuous delivery (CI/CD) mechanism for a web application. A developer has written unit tests to programmatically test the functionality of the application code. The unit tests produce a test report that shows the results of each individual check. The developer now wants to run these tests automatically during the CI/CD process. Which solution will meet this requirement with the LEAST operational effort?

Accepted Answer

Add a new stage to the pipeline. Use AWS CodeBuild as the provider. Add the new stage before the stage that deploys code revisions to the test environment. Write a buildspec that fails the CodeBuild stage if any test does not pass. Use the test reports feature of CodeBuild to integrate the report with the CodeBuild console. View the test results in CodeBuild. Resolve any issues.

Answer

Write a Git pre-commit hook that runs the tests before every commit. Ensure that each developer who is working on the project has the pre-commit hook installed locally. Review the test report and resolve any issues before pushing changes to AWS CodeCommit.

Answer

Add a new stage to the pipeline. Use AWS CodeBuild as the provider. Add the new stage after the stage that deploys code revisions to the test environment. Write a buildspec that fails the CodeBuild stage if any test does not pass. Use the test reports feature of CodeBuild to integrate the report with the CodeBuild console. View the test results in CodeBuild. Resolve any issues.

Answer

Add a new stage to the pipeline. Use Jenkins as the provider. Configure CodePipeline to use Jenkins to run the unit tests. Write a Jenkinsfile that fails the stage if any test does not pass. Use the test report plugin for Jenkins to integrate the report with the Jenkins dashboard. View the test results in Jenkins. Resolve any issues.

Question 28

A company uses the AWS SDK for JavaScript in the Browser to build a web application and then hosts the application on Amazon S3. The company wants the application to support 10,000 users concurrently. The company selects Amazon DynamoDB to store user preferences in a table. There is a requirement to uniquely identify users at any scale. Which solution will meet these requirements?

Accepted Answer

Configure and use Amazon Cognito. Access DynamoDB with the authenticated users.

Answer

Create a user cookie. Attach an 1AM role to the S3 bucket that hosts the application.

Answer

Deploy an Amazon CloudFront distribution with an origin access identity (OAI) to access the S3 bucket.

Answer

Create an IAM user for each user. Use fine-grained access control on the DynamoDB table to control access.

Question 29

A developer deploys an ecommerce application on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances run in an Amazon EC2 Auto Scaling group. The EC2 instances are based on an Amazon Machine Image (AMI) that uses an Amazon Elastic Block Store (Amazon EBS) root volume. After deployment, the developer notices that a third of the instances seem to be idle. These instances are not receiving requests from the load balancer. The developer verifies that all the instances are registered with the load balancer. The developer must implement a solution to allow the EC2 instances to receive requests from the load balancer.Which action will meet this requirement?

Accepted Answer

Use the instance refresh feature to redeploy the EC2 Auto Scaling group.

Answer

Reregister the failed instances with the ALB.

Answer

Enable all Availability Zones for the ALB.

Answer

Restart the EC2 instances that are not receiving traffic.

Question 30

A company is developing a microservice that will manage customer account data in an Amazon DynamoDB table. Insert, update, and delete requests will be rare. Read traffic will be heavy. The company must have the ability to access customer data quickly by using a customer ID. The microservice can tolerate stale data.Which solution will meet these requirements with the FEWEST possible read capacity units (RCUs)?

Accepted Answer

Read the table by using eventually consistent reads.

Answer

Read the table by using strongly consistent reads.

Answer

Read the table by using transactional reads.

Answer

Read the table by using strongly consistent PartiQL queries.

Question 31

A developer is managing an application that uploads user files to an Amazon S3 bucket named companybucket. The company wants to maintain copies of all the files uploaded by users for compliance purposes, while ensuring users still have access to the data through the application.Which IAM permissions should be applied to users to ensure they can create but not remove files from the bucket?

Accepted Answer

Question 32

A company is running its website on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances run in an Amazon EC2 Auto Scaling group. A developer needs to secure the internet-facing connection with HTTPS. The developer uses AWS Certificate Manager (ACM) to issue an X.509 certificate.What should the developer do to secure the connection?

Accepted Answer

Configure the ALB to use the X.509 certificate by using the AWS Management Console.

Answer

Configure each EC2 instance to use the same X.509 certificate by using the AWS Management Console.

Answer

Export the root key of the X.509 certificate to an Amazon S3 bucket. Configure each EC2 instance to use the same X.509 certificate from the S3 bucket.

Answer

Export the root key of the X.509 certificate to an Amazon S3 bucket. Configure the ALB to use the

Answer

509 certificate from the S3 bucket.

Question 33

A developer deploys a custom application to three Amazon EC2 instances. The application processes messages from an Amazon Simple Queue Service (Amazon SQS) standard queue with default settings. When the developer runs a load test on the Amazon SQS queue, the developer discovers that the application processes many messages multiple times. How can the developer ensure that the application processes each message exactly once?

Accepted Answer

Create a new SQS FIFO queue. Point the application to the new queue.

Answer

Modify the SQS standard queue to an SQS FIFO queue.

Answer

Process the messages on one EC2 instance instead of three instances.

Answer

Increase the DelaySeconds value on the current SQS queue.

Question 34

A company has a new application. The company needs to secure sensitive configuration data such as database connection strings, application license codes, and API keys that the application uses to access external resources. The company must track access to the configuration data for auditing purposes. The resources are managed outside the application. The company is not required to manage rotation of the connection strings, license codes, and API keys in the application. The company must implement a solution to securely store the configuration data and to give the application access to the configuration dat a. The solution must comply with security best practices.Which solution will meet these requirements MOST cost-effectively?

Accepted Answer

Store the configuration data in AWS Systems Manager Parameter Store. Grant the application access by using IAM policies.

Answer

Store the configuration data in an encrypted file on the source code bundle. Grant the application access by using IAM policies.

Answer

Store the configuration data on an Amazon Elastic Block Store (Amazon EBS) encrypted volume.Attach the EBS volume to an Amazon EC2 instance to provide the application with access to the data.

Answer

Store the configuration data in AWS Secrets Manager. Grant the application access by using IAM policies.

Question 35

A business intelligence application runs on Amazon Elastic Container Service (Amazon ECS) on AWS Fargate. Application-level audits require a searchable log of all API calls from users to the application. The application’s developers must store the logs centrally on AWS.Which solution will meet these requirements?

Accepted Answer

Configure the awslogs log driver in the ECS task definition.

Answer

Install the Amazon CloudWatch agent on the Amazon EC2 host that runs Fargate.

Answer

Configure AWS CloudTrail for the ECS containers.

Answer

Install the ECS logs collector on the ECS hosts.

Question 36

A developer is deploying a company's application to Amazon EC2 instances. The application generates gigabytes of data files each day. The files are rarely accessed, but the files must be available to the application’s users within minutes of a request during the first year of storage. The company must retain the files for 7 years.How can the developer implement the application to meet these requirements MOST costeffectively?

Accepted Answer

Store the files in an Amazon S3 bucket Use the S3 Glacier Instant Retrieval storage class. Create an S3 Lifecycle policy to transition the files to the S3 Glacier Deep Archive storage class after 1 year.

Answer

Store the files in an Amazon S3 bucket. Use the S3 Standard storage class. Create an S3 Lifecycle policy to transition the files to the S3 Glacier Flexible Retrieval storage class after 1 year.

Answer

Store the files on an Amazon Elastic Block Store (Amazon EBS) volume. Use Amazon Data Lifecycle Manager (Amazon DLM) to create snapshots of the EBS volumes and to store those snapshots in Amazon S3.

Answer

Store the files on an Amazon Elastic File System (Amazon EFS) mount. Configure EFS lifecycle management to transition the files to the EFS Standard-Infrequent Access (Standard-IA) storage class after 1 year.

Question 37

A developer is testing a new file storage application that uses an Amazon CloudFront distribution to serve content from an Amazon S3 bucket. The distribution accesses the S3 bucket by using an origin access identity (OAI). The S3 bucket's permissions explicitly deny access to all other users.The application prompts users to authenticate on a login page and then uses signed cookies to allow users to access their personal storage directories. The developer has configured the distribution to use its default cache behavior with restricted viewer access and has set the origin to point to the S3 bucket. However, when the developer tries to navigate to the login page, the developer receives a 403 Forbidden error.The developer needs to implement a solution to allow unauthenticated access to the login page. The solution also must keep all private content secure.Which solution will meet these requirements?

Accepted Answer

Add a second cache behavior to the distribution with the same origin as the default cache behavior. Set the path pattern for the second cache behavior to *, and make viewer access restricted. Change the default cache behavior's path pattern to the path of the login page, and make viewer access unrestricted.

Answer

Add a second cache behavior to the distribution with the same origin as the default cache behavior. Set the path pattern for the second cache behavior to the path of the login page, and make viewer access unrestricted. Keep the default cache behavior’s settings unchanged.

Answer

Add a second origin as a failover origin to the default cache behavior. Point the failover origin to the S3 bucket. Set the path pattern for the primary origin to * and make viewer access restricted. Set the path pattern for the failover origin to the path of the login page, and make viewer access unrestricted.

Answer

Add a bucket policy to the S3 bucket to allow read access. Set the resource on the policy to the Amazon Resource Name (ARN) of the login page object in the S3 bucket. Add a CloudFront function to the default cache behavior to redirect unauthorized requests to the login page’s S3 URI.

Question 38

A developer creates a web service that performs many critical activities. The web service code uses an AWS SDK to publish noncritical metrics to Amazon CloudWatch by using the PutMetricData API. The web service must return results to the caller as quickly as possible. The response data from the PutMetricData API is not necessary to create the web service response. Which solution will MOST improve the response time of the web service?

Accepted Answer

Send metric data to an Amazon Simple Queue Service (Amazon SQS) queue. Configure an AWS Lambda function with the queue as the event source. Call the PutMetricData API within the Lambda function.

Answer

Upgrade to the latest version of the AWS SDK.

Answer

Call the PutMetricData API in a background thread.

Answer

Use the AWS SDK to perform a synchronous call to an AWS Lambda function. Call the PutMetricData API within the Lambda function.

Question 39

A developer is designing a serverless application that customers use to select seats for a concert venue. Customers send the ticket requests to an Amazon API Gateway API with an AWS Lambda function that acknowledges the order and generates an order ID. The application includes two additional Lambda functions: one for inventory management and one for payment processing. These two Lambda functions run in parallel and write the order to an Amazon Dynamo DB table.The application must provide seats to customers according to the following requirements. If a seat is accidently sold more than once, the first order that the application received must get the seat. In these cases, the application must process the payment for only the first order. However, if the first order is rejected during payment processing, the second order must get the seat. In these cases, the application must process the payment for the second order. Which solution will meet these requirements?

Accepted Answer

Send the order ID to an Amazon Simple Notification Service (Amazon SNS) FIFO topic that fans out to one Amazon Simple Queue Service (Amazon SQS) FIFO queue for inventory management and another SQS FIFO queue for payment processing.

Answer

Change the Lambda function that generates the order ID to initiate the Lambda function for inventory management. Then initiate the Lambda function for payment processing.

Answer

Send the order ID to an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe the Lambda functions for inventory management and payment processing to the topic.

Answer

Deliver the order ID to an Amazon Simple Queue Service (Amazon SQS) queue. Configure the Lambda functions for inventory management and payment processing to poll the queue.

Question 40

An open-source map application gathers data from several geolocation APIs. The application's source code repository is public and can be used by anyone, but the geolocation APIs must not be directly accessible. A developer must implement a solution to prevent the credentials that are used to access the APIs from becoming public. The solution also must ensure that the application still functions properly. Which solution will meet these requirements MOST cost-effectively?

Accepted Answer

Store the credentials in AWS Systems Manager Parameter Store. Retrieve the credentials by using the GetParameter API operation.

Answer

Store the credentials in AWS Secrets Manager. Retrieve the credentials by using the GetSecretValue API operation.

Answer

Store the credentials in AWS Key Management Service (AWS KMS). Retrieve the credentials by using the GetPublicKey API operation.

Answer

Store the credentials in AWS Security Token Service (AWS STS). Retrieve the credentials by using the GetCallerldentity API operation.

Amazon DVA-C01 Practice Test 15

Amazon DVA-C01 Practice Tests

Amazon DVA-C01 Practice Test 15

Question

Amazon DVA-C01 Practice Tests

Practice Tests