Which code snippet below returns the URL of a load balanced web site created in CloudFormation with an AWS::ElasticLoadBalancing::LoadBalancer resource name "ElasticLoad Balancer"?

"Fn::Join" : ["". [ "http://", {"Fn::GetAtr” : [ "ElasticLoadBalancer","DNSName"]}]]

"Fn::Join" : ["". [ "http://", {"Fn::GetAtr” : [ "ElasticLoadBalancer","Url"]}]]

"Fn::Join" : ["". [ "http://", {"Ref" : "ElasticLoadBalancerUrl"}]]

"Fn::Join" : [".", [ "http://", {"Ref" : "ElasticLoadBalancerDNSName"}]]

Which features can be used to restrict access to data in S3? Choose 2 answers

Set an S3 ACL on the bucket or the object.

Enable IAM Identity Federation.

Set an S3 ACL on the bucket or the object.

Create a CloudFront distribution for the bucket

What happens, by default, when one of the resources in a CloudFormation stack cannot be created?

Previously-created resources are deleted and the stack creation terminates.

Previously-created resources are kept but the stack creation terminates.

Previously-created resources are deleted and the stack creation terminates.

The stack creation continues, and the final results indicate which steps failed.

CloudFormation templates are parsed in advance so stack creation is guaranteed to succeed.

Which of the following are correct statements with policy evaluation logic in AWS Identity and Access Management? Choose 2 answers

By default, all requests are denied

An explicit allow overrides default deny.

By default, all requests are denied

An explicit allow overrides an explicit deny

An explicit allow overrides default deny.

An explicit deny does not override an explicit allow

By default, all request are allowed

You have an environment that consists of a public subnet using Amazon VPC and 3 instances that are running in this subnet. These three instances can successfully communicate with other hosts on the Internet. You launch a fourth instance in the same subnet, using the same AMI and security group configuration you used for the others, but find that this instance cannot be accessed from the Internet. What should you do to enable internet access?

Configure a publically routable IP Address In the host OS of the fourth instance.

Deploy a NAT instance into the public subnet.

Modify the routing table for the public subnet

Configure a publically routable IP Address In the host OS of the fourth instance.

Assign an Elastic IP address to the fourth instance.

What is the format of structured notification messages sent by Amazon SNS?

An JSON object containing MessageId, unsubscribeURL, Subject, Message and other values

An XML object containing MessageId, UnsubscribeURL, Subject, Message and other values

An JSON object containing MessageId, DuplicateFlag, Message and other values

An XML object containing MessageId, DuplicateFlag, Message and other values

An JSON object containing MessageId, unsubscribeURL, Subject, Message and other values

After launching an instance that you intend to serve as a NAT (Network Address Translation) device in a public subnet you modify your route tables to have the NAT device be the target of internet bound traffic of your private subnet. When you try and make an outbound connection to the Internet from an instance in the private subnet, you are not successful. Which of the following steps could resolve the issue?

Disabling the Source/Destination Check attribute on the NAT instance

Attaching a second Elastic Network interface (ENI) to the NAT instance, and placing it in the private subnet

Attaching a second Elastic Network Interface (ENI) to the instance in the private subnet, and placing it in the public subnet

Disabling the Source/Destination Check attribute on the NAT instance

Attaching an Elastic IP address to the instance in the private subnet

You attempt to store an object in the US-STANDARD region in Amazon S3, and receive a confirmation that it has been successfully stored. You then immediately make another API call and attempt to read this object. S3 tells you that the object does not exist What could explain this behavior?

US-STANDARD uses eventual consistency and it can take time for an object to be readable in a bucket

Objects in Amazon S3 do not become visible until they are replicated to a second region.

US-STANDARD imposes a 1 second delay before new objects are readable.

You exceeded the bucket object limit, and once this limit is raised the object will be visible.

Which of the following items are required to allow an application deployed on an EC2 instance to write data to a DynamoDB table? Assume that no security Keys are allowed to be stored on the EC2 instance. Choose 2 answers

Add an IAM Role to a running EC2 instance.

Create an IAM Role that allows write access to the DynamoDB table.

Create an IAM User that allows write access to the DynamoDB table.

Add an IAM Role to a running EC2 instance.

Add an IAM User to a running EC2 Instance.

Launch an EC2 Instance with the IAM Role included in the launch configuration.

Create an IAM Role that allows write access to the DynamoDB table.

Launch an EC2 Instance with the IAM User included in the launch configuration.

A Developer has created an S3 bucket s3://mycoolapp and has enabled server across logging that points to the folder s3://mycoolapp/logs. The Developer moved 100 KB of Cascading Style Sheets (CSS) documents to the folder s3://mycoolapp/css, and then stopped work. When the developer came back a few days later, the bucket was 50 GB. What is the MOST likely cause of this situation?

Logging into the same bucket caused exponential log growth.

The CSS files were not compressed and S3 versioning was enabled.

S3 replication was enabled on the bucket.

Logging into the same bucket caused exponential log growth.

An S3 lifecycle policy has moved the entire CSS file to S3 Infrequent Access.

A Developer is creating an Auto Scaling group whose instances need to publish a custom metric to Amazon CloudWatch. Which method would be the MOST secure way to authenticate a CloudWatch PUT request?

Create an IAM role with PutMetricData permission and modify the Auto Scaling launching configuration to launch instances using that role.

Create an IAM user with PutMetricData permission and put the user credentials in a private repository; have applications pull the credentials as needed.

Create an IAM user with PutMetricData permission, and modify the Auto Scaling launch configuration to inject the user credentials into the instance user data.

Modify the CloudWatch metric policies to allow the PutMetricData permission to instances from the Auto Scaling group.

Create an IAM role with PutMetricData permission and modify the Auto Scaling launching configuration to launch instances using that role.

A Developer has written a serverless application using multiple AWS services. The business logic is written as a Lambda function which has dependencies on third-party libraries. The Lambda function endpoints will be exposed using Amazon API Gateway. The Lambda function will write the information to Amazon DynamoDB.The Developer is ready to deploy the application but must have the ability to rollback. How can this deployment be automated, based on these requirements?

Use syntax conforming to the Serverless Application Model in the AWS CloudFormation template to define the Lambda function resource.

Deploy using Amazon Lambda API operations to create the Lambda function by providing a deployment package.

Use an AWS CloudFormation template and use CloudFormation syntax to define the Lambda function resource in the template.

Use syntax conforming to the Serverless Application Model in the AWS CloudFormation template to define the Lambda function resource.

Create a bash script which uses AWS CLI to package and deploy the application.

What are the steps to using the AWS CLI to launch a templatized serverless application?

Use AWS CloudFormation package then CloudFormation deploy.

Use AWS CloudFormation get-template then CloudFormation execute-change-set.

Use AWS CloudFormation validate-template then CloudFormation create-change-set.

Use AWS CloudFormation package then CloudFormation deploy.

Use AWS CloudFormation create-stack then CloudFormation update-stack.

A Developer is creating a web application that requires authentication, but also needs to support guest access to provide users limited access without having to authenticate. What service can provide support for the application to allow guest access?

Amazon Cognito with unauthenticated access enabled

IAM temporary credentials using AWS STS.

Amazon Cognito with unauthenticated access enabled

An application takes 40 seconds to process instructions received in an Amazon SQS message.Assuming the SQS queue is configured with the default VisibilityTimeout value, what is the BEST way, upon receiving a message, to ensure that no other instances can retrieve a message that has already been processed or is currently being processed?

Use the ChangeMessageVisibility API to increase the VisibilityTimeout, then use the DeleteMessage API to delete the message.

Use the DeleteMessage API call to delete the message from the queue, then call DeleteQueue API to remove the queue.

Use the ChangeMessageVisibility API to decrease the timeout value, then use the DeleteMessage API to delete the message.

Use the DeleteMessageVisibility API to cancel the VisibilityTimeout, then use the DeleteMessage API to delete the message.

A Developer has implemented a Lambda function that needs to add new customers to an RDS database that is expected to run hundreds of times per hour. The Lambda function is configured to use 512MB of RAM and is based on the following pseudo code: After testing the Lambda function, the Developer notices that the Lambda execution time is much longer than expected. What should the Developer do to improve performance?

Move the database connection and close statement out of the handler. Place the connection in the global space.

Increase the amount of RAM allocated to the Lambda function, which will increase the number of threads the Lambda can use.

Increase the size of the RDS database to allow for an increased number of database connections each hour.

Move the database connection and close statement out of the handler. Place the connection in the global space.

Replace RDS wit Amazon DynamoDB to implement control over the number of writes per second.

A Developer is asked to implement a caching layer in front of Amazon RDS. Cached content is expensive to regenerate in case of service failure. Which implementation below would work while maintaining maximum uptime?

Implement Amazon ElastiCache Redis in Cluster Mode

Install Redis on an Amazon EC2 instance.

Implement Amazon ElastiCache Memcached.

Migrate the database to Amazon Redshift.

A large e-commerce site is being designed to deliver static objects from Amazon S3. The Amazon S3 bucket wills server more than 300 GET requests per second. What should be done to optimize performance? (Select TWO.)

Integrate Amazon CloudFront with Amazon S3.

Randomize Amazon S3 key name prefixes.

Integrate Amazon CloudFront with Amazon S3.

Enable Amazon S3 cross-region replication.

Delete expired Amazon S3 server log files.

Configure Amazon S3 lifecycle rules.

Randomize Amazon S3 key name prefixes.

A company is building a stock trading application that requires sub-millisecond latency in processing trading requests. Amazon DynamoDB is used to store all the trading data that is used to process each request. After load testing the application, the development team found that due to data retrieval times, the latency requirement is not satisfied. Because of sudden high spikes in the number of requests, DynamoDB read capacity has to be significantly over-provisioned to avoid throttling.What steps should be taken to meet latency requirements and reduce the cost of running the application?

Use DynamoDB Accelerator to cache trading data.

Add Global Secondary Indexes for trading data.

Store trading data in Amazon S3 and use Transfer Acceleration.

Add retries with exponential back-off for DynamoDB queries

Use DynamoDB Accelerator to cache trading data.

A Developer needs temporary access to resources in a second account.What is the MOST secure way to achieve this?

Create a cross-account access role, and use sts:AssumeRole API to get short-lived credentials.

Use the Amazon Cognito user pools to get short-lived credentials for the second account.

Create a dedicated IAM access key for the second account, and send it by mail.

Create a cross-account access role, and use sts:AssumeRole API to get short-lived credentials.

Establish trust, and add an SSH key for the second account to the IAM user.

An application reads data from an Amazon DynamoDB table. Several times a day, for a period of 15 seconds, the application receives multiple ProvisionedThroughputExceeded errors. How should this exception be handled?

Retry the failed read requests with exponential backoff.

Create a new global secondary index for the table to help with the additional requests.

Retry the failed read requests with exponential backoff.

Immediately retry the failed read requests.

Use the DynamoDB “UpdateItem” API to increase the provisioned throughput capacity of the table.

A Developer has created a large Lambda function, and deployment is failing with the following error:ClientError: An error occurred (InvalidParameterValueException) when calling the CreateFunction operation: Unzipped size must be smaller than XXXXXXXXX bytes’, where XXXXXXXXX is the current Lambda limit What can the Developer do to fix this problem?

Break the function into multiple smaller Lambda functions.

Submit a limit increase request to AWS Support to increase the function to the size needed.

Use a compression algorithm that is more efficient than ZIP.

Break the function into multiple smaller Lambda functions.

ZIP the ZIP file twice to compress it further.

Given the source code for an AWS Lambda function in the local store.py containing a handler function called get_store and the following AWS CloudFormation template: What should be done to prepare the template so that it can be deployed using the AWS CLI command aws cloudformation deploy?

Use aws cloudformation package to upload the source code to an Amazon S3 bucket and produce a modified CloudFormation template.

Use aws cloudformation compile to base64 encode and embed the source file into a modified CloudFormation template.

Use aws cloudformation package to upload the source code to an Amazon S3 bucket and produce a modified CloudFormation template.

Use aws lambda zip to package the source file together with the CloudFormation template and deploy the resulting zip archive.

Use aws serverless create-package to embed the source file directly into the existing CloudFormation template.

An application stores images in an S3 bucket. Amazon S3 event notifications are used to trigger a Lambda function that resizes the images. Processing each image takes less than a second. How will AWS Lambda handle the additional traffic?

Lambda will scale out to execute the requests concurrently.

Lambda will handle the requests sequentially in the order received.

Lambda will process multiple images in a single execution.

Lambda will add more compute to each execution to reduce processing time.

A company wants to implement a continuous integration for its workloads on AWS. The company wants to trigger unit test in its pipeline for commits-on its code repository, and wants to be notified of failure events in the pipeline. How can these requirements be met?

Store the source code in AWS CodeCommit. Create a CodePipeline to automate unit testing. Use Amazon CloudWatch to trigger notification of failure events.

Store the source code in AWS CodeCommit. Create a CodePipeline to automate unit testing. Use Amazon SNS to trigger notifications of failure events.

Store the source code in GitHub. Create a CodePipeline to automate unit testing. Use Amazon SES to trigger notifications of failure events.

Store the source code on GitHub. Create a CodePipeline to automate unit testing. Use Amazon CloudWatch to trigger notifications of failure events.

Store the source code in AWS CodeCommit. Create a CodePipeline to automate unit testing. Use Amazon CloudWatch to trigger notification of failure events.

A serverless application uses an API Gateway and AWS Lambda.Where should the Lambda function store its session information across function calls?

In an SQLite session table using –DSQLITE_ENABLE_SESSION

A Developer has created a software package to be deployed on multiple EC2 instances using IAM roles. What actions could be performed to verify IAM access to get records from Amazon Kinesis Streams?(Select TWO.)

Use the AWS CLI to retrieve the IAM group.

Validate the IAM role policy with the IAM policy simulator.

Use the AWS CLI to retrieve the IAM group.

Query Amazon EC2 metadata for in-line IAM policies.

Request a token from AWS STS, and perform a describe action.

Perform a get action using the –-dry-run argument.

Validate the IAM role policy with the IAM policy simulator.

When writing a Lambda function, what is the benefit of instantiating AWS clients outside the scope of the handler?

Taking advantage of connection re-use

Legibility and stylistic convention

Taking advantage of connection re-use

Creating a new instance per invocation

An application on AWS is using third-party APIs. The Developer needs to monitor API errors in the code, and wants to receive notifications if failures go above a set threshold value. How can the Developer achieve these requirements?

Publish a custom metric on Amazon CloudWatch and use Amazon SNS for notification.

Publish a custom metric on Amazon CloudWatch and use Amazon SES for notification.

Use an Amazon CloudWatch API-error metric and use Amazon SNS for notification.

Use an Amazon CloudWatch API-error metric and use Amazon SES for notification.

Publish a custom metric on Amazon CloudWatch and use Amazon SNS for notification.

A Developer has an application that can upload tens of thousands of objects per second to Amazon S3 in parallel within a single AWS account. As part of new requirements, data stored in S3 must use server side encryption with AWS KMS (SSE-KMS). After creating this change, performance of the application is slower.Which of the following is MOST likely the cause of the application latency?

The AWS KMS API calls limit is less than needed to achieve the desired performance.

Amazon S3 throttles the rate at which uploaded objects can be encrypted using Customer Master Keys.

The AWS KMS API calls limit is less than needed to achieve the desired performance.

The client encryption of the objects is using a poor algorithm.

KMS requires that an alias be used to create an independent display name that can be mapped to a CMK.

A company wants to migrate its web application to AWS and leverage Auto Scaling to handle pear workloads. The Solutions Architect determined that the best metric for an Auto Scaling event is the number of concurrent users. Based on this information, what should the Developer use to autoscale based on concurrent users?

A Custom Amazon CloudWatch metric for concurrent users.

An Amazon SNS topic to be triggered when a concurrent user threshold is met

An Amazon Cloudwatch Networkin metric

Amazon CloudFront to leverage AWS Edge Locations

A Custom Amazon CloudWatch metric for concurrent users.

Amazon DVA-C01 Practice Test 2 - Free Online Exam Prep & Questions

Which of the following platforms are supported by Elastic Beanstalk? Choose 2 answers

A.

Apache Tomcat

B.

.NET

C.

IBM Websphere

D.

Oracle JBoss

E.

Jetty

Amazon DVA-C01 Practice Test 2

Question

Amazon DVA-C01 Practice Tests

Practice Tests