Quiz IT certification exam

Question 1

A developer is testing an application that invokes an AWS Lambda function asynchronously. During the testing phase the Lambda function fails to process after two retries.

How can the developer troubleshoot the failure?

Become a Premium Member for full access

Unlock Premium Member

Accepted Answer

Configure Dead Letter Queues by sending events to Amazon SQS for investigation.

Answer

Configure AWS CloudTrail logging to investigate the invocation failures.

Answer

Configure Amazon Simple Workflow Service to process any direct unprocessed events.

Answer

Configure AWS Config to process any direct unprocessed events.

Question 2

A company is migrating its PostgreSQL database into the AWS Cloud. The company wants to use a database that will secure and regularly rotate database credentials. The company wants a solution that does not require additional programming overhead.Which solution will meet these requirements?

Accepted Answer

Use Amazon Aurora PostgreSQL for the database. Store the database credentials in AWS Secrets Manager Turn on rotation.

Answer

Use Amazon Aurora PostgreSQL tor the database. Store the database credentials in AWS Systems Manager Parameter Store Turn on rotation.

Answer

Use Amazon DynamoDB for the database. Store the database credentials in AWS Systems Manager Parameter Store Turn on rotation.

Answer

Use Amazon DynamoDB for the database. Store the database credentials in AWS Secrets Manager Turn on rotation.

Question 3

A developer is creating a mobile application that will not require users to log in.What is the MOST efficient method to grant users access to AWS resources'?

Accepted Answer

Use Amazon Cognito to associate unauthenticated users with an IAM role that has limited access to resources.

Answer

Use an identity provider to securely authenticate with the application.

Answer

Create an AWS Lambda function to create an 1AM user when a user accesses the application.

Answer

Create credentials using AWS KMS and apply these credentials to users when using the application.

Question 4

A company has developed a new serverless application using AWS Lambda functions that will be deployed using the AWS Serverless Application Model (AWS SAM) CLI.Which step should the developer complete prior to deploying the application?

Accepted Answer

Bundle the serverless application using a SAM package.

Answer

Compress the application to a zip file and upload it into AWS Lambda.

Answer

Test the new AWS Lambda function by first tracing it m AWS X-Ray.

Answer

Create the application environment using the eb create my-env command.

Question 5

A company wants to automate part of its deployment process. A developer needs to automate the process of checking for and deleting unused resources that supported previously deployed stacks but that are no longer used.The company has a central application that uses the AWS Cloud Development Kit (AWS CDK) to manage all deployment stacks. The stacks are spread out across multiple accounts. The developer's solution must integrate as seamlessly as possible within the current deployment process.Which solution will meet these requirements with the LEAST amount of configuration?

Accepted Answer

In the central AWS CDK application. write a handler function in the code that uses AWS SDK calls to check for and delete unused resources. Create an AWS CDK custom resource Use the custom resource to attach the function code to an AWS Lambda function and to invoke the Lambda function when the deployment stack runs.

Answer

In the central AWS CDK application, write a handler function in the code that uses AWS SDK calls to check for and delete unused resources. Create an AWS CloudPormation template from a JSON file.Use the template to attach the function code to an AWS Lambda function and lo invoke the Lambda function when the deployment slack runs.

Answer

In the central AWS CDK, write a handler function m the code that uses AWS SDK calls to check for and delete unused resources. Create an API in AWS Amplify Use the API to attach the function code to an AWS Lambda function and to invoke the Lambda function when the deployment stack runs.

Answer

In the AWS Lambda console write a handler function in the code that uses AWS SDK calls to check for and delete unused resources. Create an AWS CDK custom resource. Use the custom resource to import the Lambda function into the stack and to Invoke the Lambda function when the deployment stack runs.

Question 6

A company built a new application in the AWS Cloud. The company automated the bootstrapping of new resources with an Auto Scaling group by using AWS Cloudf-ormation templates. The bootstrap scripts contain sensitive data.The company needs a solution that is integrated with CloudFormation to manage the sensitive data in the bootstrap scripts.Which solution will meet these requirements in the MOST secure way?

Accepted Answer

Put the sensitive data into AWS Systems Manager Parameter Store as a secure string parameter. Update the CloudFormation templates to use dynamic references to specify template values.

Answer

Put the sensitive data into a CloudFormation parameter. Encrypt the CloudFormation templates by using an AWS Key Management Service (AWS KMS) key.

Answer

Put the sensitive data into an Amazon S3 bucket Update the CloudFormation templates to download the object from Amazon S3 during bootslrap.

Answer

Put the sensitive data into Amazon Elastic File System (Amazon EPS) Enforce EFS encryption after file system creation. Update the CloudFormation templates to retrieve data from Amazon EFS.

Question 7

A company needs to set up secure database credentials for all its AWS Cloud resources. The company's resources include Amazon RDS DB instances Amazon DocumentDB clusters and Amazon Aurora DB instances. The company's security policy mandates that database credentials be encrypted at rest and rotated at a regular interval.Which solution will meet these requirements MOST securely?

Accepted Answer

Create an AWS Lambda function by using the SecretsManagerRotationTemplate template in the AWS Secrets Manager console. Create secrets for the database credentials in Secrets Manager Set up secrets rotation on a schedule.

Answer

Set up IAM database authentication for token-based access. Generate user tokens to provide centralized access to RDS DB instances. Amazon DocumentDB clusters and Aurora DB instances.

Answer

Create parameters for the database credentials in AWS Systems Manager Parameter Store Set the Type parameter to Secure Sting. Set up automatic rotation on the parameters.

Answer

Store the database access credentials as an encrypted Amazon S3 object in an S3 bucket Block all public access on the S3 bucket. Use S3 server-side encryption to set up automatic rotation on the encryption key.

Question 8

A company uses Amazon API Gateway to expose a set of APIs to customers. The APIs have caching enabled in API Gateway. Customers need a way to invalidate the cache for each API when they test the API.What should a developer do to give customers the ability to invalidate the API cache?

Accepted Answer

Attach an InvalidateCache policy to the IAM execution role that the customers use to invoke the API. Ask the customers to add the INVALIDATE_CACHE query string parameter when they make an API call.

Answer

Ask the customers to use AWS credentials to call the InvalidateCache API operation.

Answer

Attach an InvalidateCache policy to the IAM execution role that the customers use to invoke the API. Ask the customers to send a request that contains the HTTP header when they make an API call.

Answer

Ask the customers to use the AWS SDK API Gateway class to invoke the InvalidateCache API operation.

Question 9

A developer is building a serverless application by using AWS Serverless Application Model (AWS SAM) on multiple AWS Lambda functions. When the application is deployed, the developer wants to shift 10% of the traffic to the new deployment of the application for the first 10 minutes after deployment. If there are no issues, all traffic must switch over to the new version.Which change to the AWS SAM template will meet these requirements?

Accepted Answer

Set the Deployment Preference Type to Canaryl OPercent10Minutes. Set the AutoPublishAlias property to the Lambda alias.

Answer

Set the Deployment Preference Type to Linearl OPercentEveryIOMinutes. Set AutoPubIishAIias property to the Lambda alias.

Answer

Set the Deployment Preference Type to Canaryl OPercentIOMinutes. Set the PreTraffic and PostTraffic properties to the Lambda alias.

Answer

Set the Deployment Preference Type to Linearl OPercentEvery10Minutes. Set PreTraffic and PostTraffic properties to the Lambda alias.

Question 10

A developer is preparing to begin development of a new version of an application. The previous version of the application is deployed in a production environment. The developer needs to deploy fixes and updates to the current version during the development of the new version of the application. The code for the new version of the application is stored in AWS CodeCommit.Which solution will meet these requirements?

Accepted Answer

From the main branch, create a feature branch for production bug fixes. Create a second feature branch from the main branch for development of the new version. B. Create a Git tag of the code that is currently deployed in production. Create a Git tag for the development of the new version. Push the two tags to the CodeCommit repository.

Answer

From the main branch, create a branch of the code that is currently deployed in production. Apply an IAM policy that ensures no other other users can push or merge to the branch.

Answer

Create a new CodeCommit repository for development of the new version of the application. Create a Git tag for the development of the new version.

Question 11

A developer is creating a new REST API by using Amazon API Gateway and AWS Lambda. The development team tests the API and validates responses for the known use cases before deploying the API to the production environment.The developer wants to make the REST API available for testing by using API Gateway locally.Which AWS Serverless Application Model Command Line Interface (AWS SAM CLI) subcommand will meet these requirements?

Accepted Answer

Sam local start-api

Answer

Sam local invoke

Answer

Sam local generate-event

Answer

Sam local start-lambda

Question 12

A developer is writing an application that will retrieve sensitive data from a third-party system. The application will format the data into a PDF file. The PDF file could be more than 1 MB. The application will encrypt the data to disk by using AWS Key Management Service (AWS KMS). The application will decrypt the file when a user requests to download it. The retrieval and formatting portions of the application are complete.The developer needs to use the GenerateDataKey API to encrypt the PDF file so that the PDF file can be decrypted later. The developer needs to use an AWS KMS symmetric customer managed key for encryption.Which solutions will meet these requirements?

Accepted Answer

Write the encrypted key from the GenerateDataKey API to disk for later use. Use the plaintext key from the GenerateDataKey API and a symmetric encryption algorithm to encrypt the file.

Answer

Write the plain text key from the GenerateDataKey API to disk for later use. Use the encrypted key from the GenerateDataKey API and a symmetric encryption algorithm to encrypt the file.

Answer

Write the encrypted key from the GenerateDataKey API to disk for later use. Use the plaintext key from the GenerateDataKey API to encrypt the file by using the KMS Encrypt API

Answer

Write the plain text key from the GenerateDataKey API to disk for later use. Use the encrypted key from the GenerateDataKey API to encrypt the file by using the KMS Encrypt API

Question 13

A developer is optimizing an AWS Lambda function and wants to test the changes in production on a small percentage of all traffic. The Lambda function serves requests to a REST API in Amazon API Gateway. The developer needs to deploy their changes and perform a test in production without changing the API Gateway URL.Which solution will meet these requirements?

Accepted Answer

Define an alias on the $LATEST version of the Lambda function. Update the API Gateway endpoint to reference the new Lambda function alias. Upload and publish the optimized Lambda function code. On the production API Gateway stage, define a canary release and set the percentage of traffic to direct to the canary release. Update the API Gateway endpoint to use the SLAT EST version of the Lambda function. Publish to the canary stage.

Answer

Define a function version for the currently deployed production Lambda function. Update the API Gateway endpoint to reference the new Lambda function version. Upload and publish the optimized Lambda function code. On the production API Gateway stage, define a canary release and set the percentage of traffic to direct to the canary release. Update the API Gateway endpoint to use the $LATEST version of the Lambda function. Publish the API to the canary stage.

Answer

Define a function version for the currently deployed production Lambda function. Update the API Gateway endpoint to reference the new Lambda function version. Upload and publish the optimized Lambda function code. Update the API Gateway endpoint to use the $LATEST version of the Lambda function. Deploy a new API Gateway stage.

Answer

Define a function version for the currently deployed production Lambda function. Update the API Gateway endpoint to reference the new Lambda function Deploy the API to the production API Gateway stage.

Question 14

A company has an application that stores data in Amazon RDS instances. The application periodically experiences surges of high traffic that cause performance problems.During periods of peak traffic, a developer notices a reduction in query speed in all database queries.The team's technical lead determines that a multi-threaded and scalable caching solution should be used to offload the heavy read traffic. The solution needs to improve performance.Which solution will meet these requirements with the LEAST complexity?

Accepted Answer

Use Amazon ElastiCache for Memcached to offload read requests from the main database.

Answer

Replicate the data to Amazon DynamoDB. Set up a DynamoDB Accelerator (DAX) cluster.

Answer

Configure the Amazon RDS instances to use Multi-AZ deployment with one standby instance. Offload read requests from the main database to the standby instance.

Answer

Use Amazon ElastiCache for Redis to offload read requests from the main database.

Question 15

A developer at a company needs to create a small application that makes the same API call once each day at a designated time. The company does not have infrastructure in the AWS Cloud yet, but the company wants to implement this functionality on AWS.Which solution meets these requirements in the MOST operationally efficient manner?

Accepted Answer

Use an AWS Lambda function that is invoked by an Amazon EventBridge scheduled event.

Answer

Use a Kubernetes cron job that runs on Amazon Elastic Kubernetes Service (Amazon EKS).

Answer

Use an Amazon Linux crontab scheduled job that runs on Amazon EC2.

Answer

Use an AWS Batch job that is submitted to an AWS Batch job queue.

Question 16

An developer is building a serverless application by using the AWS Serverless Application Model (AWS SAM). The developer is currently testing the application in a development environment. When the application is nearly finsihed, the developer will need to set up additional testing and staging environments for a quality assurance team.The developer wants to use a feature of the AWS SAM to set up deployments to multiple environments.Which solution will meet these requirements with the LEAST development effort?

Accepted Answer

Add a configuration file in TOML format to group configuration entries to every environment. Add a table for each testing and staging environment. Deploy updates to the environments by using the sam deploy command and the --config-env flag that corresponds to the each environment.

Answer

Create additional AWS SAM templates for each testing and staging environment. Write a custom shell script that uses the sam deploy command and the --template-file flag to deploy updates to the environments.

Answer

Create one AWS SAM configuration file that has default parameters. Perform updates to the testing and staging environments by using the ---parameter-overrides flag in the AWS SAM CLI and the parameters that the updates will override.

Answer

Use the existing AWS SAM template. Add additional parameters to configure specific attributes for the serverless function and database table resources that are in each environment. Deploy updates to the testing and staging environments by using the sam deploy command.

Question 17

A company notices that credentials that the company uses to connect to an external software as a service (SaaS) vendor are stored in a configuration file as plaintext.The developer needs to secure the API credentials and enforce automatic credentials rotation on a quarterly basis.Which solution will meet these requirements MOST securely?

Accepted Answer

Store the credentials in AWS Secrets Manager and enable rotation. Configure the API to have Secrets Manager access.

Answer

Use AWS Key Management Service (AWS KMS) to encrypt the configuration file. Decrypt the configuration file when users make API calls to the SaaS vendor. Enable rotation.

Answer

Retrieve temporary credentials from AWS Security Token Service (AWS STS) every 15 minutes. Use the temporary credentials when users make API calls to the SaaS vendor.

Answer

Store the credentials in AWS Systems Manager Parameter Store and enable rotation. Retrieve the credentials when users make API calls to the SaaS vendor.

Question 18

An application that runs on AWS receives messages from an Amazon Simple Queue Service (Amazon SQS) queue and processes the messages in batches. Theapplication sends the data to another SQS queue to be consumed by another legacy application. The legacy system can take up to 5 minutes to process some transaction data.A developer wants to ensure that there are no out-of-order updates in the legacy system. The developer cannot alter the behavior of the legacy system.Which solution will meet these requirements?

Accepted Answer

Use an SQS FIFO queue. Configure the visibility timeout value.

Answer

Use an SQS standard queue with a SendMessageBatchRequestEntry data type. Configure the DelaySeconds values.

Answer

Use an SQS standard queue with a SendMessageBatchRequestEntry data type. Configure the visibility timeout value.

Answer

Use an SQS FIFO queue. Configure the DelaySeconds value.

Question 19

A developer is troubleshooting an application in an integration environment. In the application, an Amazon Simple Queue Service (Amazon SQS) queue consumes messages and then an AWS Lambda function processes the messages. The Lambda function transforms the messages and makes an API call to a third-party service.There has been an increase in application usage. The third-party API frequently returns an HTTP 429 Too Many Requests error message. The error message prevents a significant number of messages from being processed successfully.How can the developer resolve this issue?

Accepted Answer

Configure maximum concurrency on the SQS event source based on the third-party service's documented rate limits.

Answer

Increase the SQS event source's batch size setting.

Answer

Configure provisioned concurrency for the Lambda function based on the third-party API's documented rate limits.

Answer

Increase the retry attempts and maximum event age in the Lambda function's asynchronous configuration.

Question 20

An online sales company is developing a serverless application that runs on AWS. The application uses an AWS Lambda function that calculates order success rates and stores the data in an Amazon DynamoDB table. A developer wants an efficient way to invoke the Lambda function every 15 minutes.Which solution will meet this requirement with the LEAST development effort?

Accepted Answer

Create an Amazon EventBridge rule that has a rate expression that will run the rule every 15 minutes. Add the Lambda function as the target of the EventBridge rule.

Answer

Create an AWS Systems Manager document that has a script that will invoke the Lambda function on Amazon EC2. Use a Systems Manager Run Command task to run the shell script every 15 minutes.

Answer

Create an AWS Step Functions state machine. Configure the state machine to invoke the Lambda function execution role at a specified interval by using a Wait state. Set the interval to 15 minutes.

Answer

Provision a small Amazon EC2 instance. Set up a cron job that invokes the Lambda function every 15 minutes.

Question 21

A developer is migrating an application to Amazon Elastic Kubernetes Service (Amazon EKS). The developer migrates the application to Amazon Elastic Container Registry (Amazon ECR) with an EKS cluster.As part of the application migration to a new backend, the developer creates a new AWS account. The developer makes configuration changes to the application to point the application to the new AWS account and to use new backend resources. The developer successfully tests the changes within the application by deploying the pipeline.The Docker image build and the pipeline deployment are successful, but the application is still connecting to the old backend. The developer finds that the application's configuration is still referencing the original EKS cluster and not referencing the new backend resources.Which reason can explain why the application is not connecting to the new resources?

Accepted Answer

The developer did not update the Docker image tag to a new version.

Answer

The developer did not successfully create the new AWS account.

Answer

The developer added a new tag to the Docker image.

Answer

The developer pushed the changes to a new Docker image tag.

Question 22

A developer wants to deploy a new version of an AWS Elastic Beanstalk application. During deployment, the application must maintain full capacity and avoid service interruption. Additionally, the developer must minimize the cost of additional resources that support the deployment.Which deployment method should the developer use to meet these requirements?

Accepted Answer

Immutable

Answer

All at once

Answer

Rolling with additional batch

Answer

Blue/green

Question 23

A developer is building a serverless application by using AWS Serverless Application Model (AWS SAM) on multiple AWS Lambda functions.When the application is deployed, the developer wants to shift 10% of the traffic to the new deployment of the application for the first 10 minutes after deployment. If there are no issues, all traffic must switch over to the new version.Which change to the AWS SAM template will meet these requirements?

Accepted Answer

Set the Deployment Preference Type to Canary10Percent10Minutes. Set the AutoPublishAlias property to the Lambda alias.

Answer

Set the Deployment Preference Type to LinearlOPercentEvery10Minutes. Set AutoPubIishAIias property to the Lambda alias.

Answer

Set the Deployment Preference Type to CanaryIOPercentIOMinutes. Set the PreTraffic and PostTraffic properties to the Lambda alias.

Answer

Set the Deployment Preference Type to LinearlOPercentEveryIOMinutes. Set PreTraffic and Post Traffic properties to the Lambda alias.

Question 24

A company developed an API application on AWS by using Amazon CloudFront, Amazon API Gateway, and AWS Lambd a. The API has a minimum of four requests every second. A developer notices that many API users run the same query by using the POST method. The developer wants to cache the POST request to optimize the API resources.Which solution will meet these requirements?

Accepted Answer

Override the cache method in the selected stage of API Gateway. Select the POST method.

Answer

Configure the CloudFront cache. Update the application to return cached content based upon the default request headers.

Answer

Save the latest request response in Lambda /tmp directory. Update the Lambda function to check the /tmp directory.

Answer

Save the latest request in AWS Systems Manager Parameter Store. Modify the Lambda function to take the latest request response from Parameter Store.

Question 25

A company is building a compute-intensive application that will run on a fleet of Amazon EC2 instances. The application uses attached Amazon Elastic Block Store (Amazon EBS) volumes for storing data. The Amazon EBS volumes will be created at time of initial deployment. The application will process sensitive information. All of the data must be encrypted. The solution should not impact the application's performance.Which solution will meet these requirements?

Accepted Answer

Configure the fleet of EC2 instances to use encrypted EBS volumes to store data.

Answer

Configure the application to write all data to an encrypted Amazon S3 bucket.

Answer

Configure a custom encryption algorithm for the application that will encrypt and decrypt all data.

Answer

Configure an Amazon Machine Image (AMI) that has an encrypted root volume and store the data to ephemeral disks.

Question 26

A developer is creating a new REST API by using Amazon API Gateway and AWS Lambda. The development team tests the API and validates responses for the known use cases before deploying the API to the production environment.The developer wants to make the REST API available for testing by using API Gateway locally.Which AWS Serverless Application Model Command Line Interface (AWS SAM CLI) subcommand will meet these requirements?

Accepted Answer

Sam local start-api

Answer

Sam local invoke

Answer

Sam local generate-event

Answer

Sam local start-lambda

Question 27

A developer is creating an AWS Lambda function that consumes messages from an Amazon Simple Queue Service (Amazon SQS) standard queue. The developer notices that the Lambda function processes some messages multiple times.How should developer resolve this issue MOST cost-effectively?

Accepted Answer

Change the Amazon SQS standard queue to an Amazon SQS FIFO queue by using the Amazon SQS message deduplication ID.

Answer

Set up a dead-letter queue.

Answer

Set the maximum concurrency limit of the AWS Lambda function to 1

Answer

Change the message processing to use Amazon Kinesis Data Streams instead of Amazon SQS.

Question 28

A developer has observed an increase in bugs in the AWS Lambda functions that a development team has deployed in its Node.js application.To minimize these bugs, the developer wants to implement automated testing of Lambda functions in an environment that closely simulates the Lambda environment.The developer needs to give other developers the ability to run the tests locally. The developer also needs to integrate the tests into the team's continuous integration and continuous delivery (CI/CD) pipeline before the AWS Cloud Development Kit (AWS CDK) deployment.Which solution will meet these requirements?

Accepted Answer

Install the AWS Serverless Application Model (AWS SAM) CLI tool. Use the sam local generate-event command to generate sample events for the automated tests. Create automated test scripts that use the sam local invoke command to invoke the Lambda functions. Check the response. Document the test scripts for the other developers on the team. Update the CI/CD pipeline to run the test scripts.

Answer

Create sample events based on the Lambda documentation. Create automated test scripts that use the cdk local invoke command to invoke the Lambda functions. Check the response. Document the test scripts for the other developers on the team. Update the CI/CD pipeline to run the test scripts.

Answer

Install a unit testing framework that reproduces the Lambda execution environment. Create sample events based on the Lambda documentation. Invoke the handler function by using a unit testing framework. Check the response. Document how to run the unit testing framework for the other developers on the team. Update the CI/CD pipeline to run the unit testing framework.

Answer

Create sample events based on the Lambda documentation. Create a Docker container from the Node.js base image to invoke the Lambda functions. Check the response. Document how to run the Docker container for the other developers on the team. Update the CllCD pipeline to run the Docker container.

Question 29

A developer wants to add request validation to a production environment Amazon API Gateway API. The developer needs to test the changes before the API is deployed to the production environment. For the test, the developer will send test requests to the API through a testing tool.Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Modify the existing API to add request validation. Deploy the updated API to a new API Gateway stage. Perform the tests. Deploy the updated API to the API Gateway production stage.

Answer

Export the existing API to an OpenAPI file. Create a new API. Import the OpenAPI file. Modify the new API to add request validation. Perform the tests. Modify the existing API to add request validation. Deploy the existing API to production.

Answer

Create a new API. Add the necessary resources and methods, including new request validation. Perform the tests. Modify the existing API to add request validation. Deploy the existing API to production.

Answer

Clone the existing API. Modify the new API to add request validation. Perform the tests. Modify the existing API to add request validation. Deploy the existing API to production.

Question 30

A developer creates a static website for their department The developer deploys the static assets for the website to an Amazon S3 bucket and serves the assets with Amazon CloudFront The developer uses origin access control (OAC) on the CloudFront distribution to access the S3 bucketThe developer notices users can access the root URL and specific pages but cannot access directories without specifying a file name. For example, /products/index.html works, but /products returns an error The developer needs to enable accessing directories without specifying a file name without exposing the S3 bucket publicly.Which solution will meet these requirements'?

Accepted Answer

Update the Amazon S3 bucket settings and enable static website hosting. Specify index html as the Index document Update the S3 bucket policy to enable access. Update the CloudFront distribution's origin to use the S3 website endpoint

Answer

Update the CloudFront distribution's settings to index.html as the default root object is set

Answer

Create a CloudFront function that examines the request URL and appends index.html when directories are being accessed Add the function as a viewer request CloudFront function to the CloudFront distribution's behavior.

Answer

Create a custom error response on the CloudFront distribution with the HTTP error code set to the HTTP 404 Not Found response code and the response page path to /index html Set the HTTP response code to the HTTP 200 OK response code

Question 31

A company needs to deploy all its cloud resources by using AWS CloudFormation templates A developer must create an Amazon Simple Notification Service (Amazon SNS) automatic notification to help enforce this rule. The developer creates an SNS topic and subscribes the email address of the company's security team to the SNS topic.The security team must receive a notification immediately if an 1AM role is created without the use of CloudFormation.Which solution will meet this requirement?

Accepted Answer

Create an Amazon EventBridge rule to filter events from CloudTrail if a role was created without CloudFormation Specify the SNS topic as the target of the EventBridge rule.

Answer

Create an AWS Lambda function to filter events from CloudTrail if a role was created without CloudFormation Configure the Lambda function to publish to the SNS topic. Create an Amazon EventBridge schedule to invoke the Lambda function every 15 minutes

Answer

Create an AWS Fargate task in Amazon Elastic Container Service (Amazon ECS) to filter events from CloudTrail if a role was created without CloudFormation Configure the Fargate task to publish to the SNS topic Create an Amazon EventBridge schedule to run the Fargate task every 15 minutes

Answer

Launch an Amazon EC2 instance that includes a script to filter events from CloudTrail if a role was created without CloudFormation. Configure the script to publish to the SNS topic. Create a cron job to run the script on the EC2 instance every 15 minutes.

Question 32

A developer is working on a web application that uses Amazon DynamoDB as its data store The application has two DynamoDB tables one table that is named artists and one table that is named songs The artists table has artistName as the partition key. The songs table has songName as the partition key and artistName as the sort keyThe table usage patterns include the retrieval of multiple songs and artists in a single database operation from the webpage. The developer needs a way to retrieve this information with minimal network traffic and optimal application performance.Which solution will meet these requirements'?

Accepted Answer

Perform a BatchGetltem operation that returns items from the two tables. Use the list of songName artistName keys for the songs table and the list of artistName key for the artists table.

Answer

Create a local secondary index (LSI) on the songs table that uses artistName as the partition key Perform a query operation for each artistName on the songs table that filters by the list of songName Perform a query operation for each artistName on the artists table

Answer

Perform a BatchGetltem operation on the songs table that uses the songName/artistName keys. Perform a BatchGetltem operation on the artists table that uses artistName as the key.

Answer

Perform a Scan operation on each table that filters by the list of songName/artistName for the songs table and the list of artistName in the artists table.

Question 33

A data visualization company wants to strengthen the security of its core applications The applications are deployed on AWS across its development staging, pre-production, and production environments. The company needs to encrypt all of its stored sensitive credentials The sensitive credentials need to be automatically rotated Aversion of the sensitive credentials need to be stored for each environmentWhich solution will meet these requirements in the MOST operationally efficient way?

Accepted Answer

Configure AWS Secrets Manager to create a new secret for each environment type. Store the environment-specific credentials in the secret

Answer

Configure AWS Secrets Manager versions to store different copies of the same credentials across multiple environments

Answer

Create a new parameter version in AWS Systems Manager Parameter Store for each environment Store the environment-specific credentials in the parameter version.

Answer

Configure the environment variables in the application code Use different names for each environment type

Question 34

A company's developer has deployed an application in AWS by using AWS CloudFormation The CloudFormation stack includes parameters in AWS Systems Manager Parameter Store that the application uses as configuration settings. The application can modify the parameter valuesWhen the developer updated the stack to create additional resources with tags, the developer noted that the parameter values were reset and that the values ignored the latest changes made by the application. The developer needs to change the way the company deploys the CloudFormation stack. The developer also needs to avoid resetting the parameter values outside the stack.Which solution will meet these requirements with the LEAST development effort?

Accepted Answer

Modify the CloudFormation stack to set the deletion policy to Retain for the Parameter Store parameters.

Answer

Create an Amazon DynamoDB table as a resource in the CloudFormation stack to hold configuration data for the application Migrate the parameters that the application is modifying from Parameter Store to the DynamoDB table

Answer

Create an Amazon RDS DB instance as a resource in the CloudFormation stack. Create a table in the database for parameter configuration. Migrate the parameters that the application is modifying from Parameter Store to the configuration table

Answer

Modify the CloudFormation stack policy to deny updates on Parameter Store parameters

Question 35

A company has built an AWS Lambda function to convert large image files into output files that can be used in a third-party viewer application The company recently added a new module to the function to improve the output of the generated files However, the new module has increased the bundle size and has increased the time that is needed to deploy changes to the function code.How can a developer increase the speed of the Lambda function deployment?

Accepted Answer

Use Lambda layers to package and load dependencies.

Answer

Use AWS CodeDeploy to deploy the function code

Answer

Increase the memory size of the function.

Answer

Use Amazon S3 to host the function dependencies

Question 36

A company runs a batch processing application by using AWS Lambda functions and Amazon API Gateway APIs with deployment stages for development, user acceptance testing and production A development team needs to configure the APIs in the deployment stages to connect to third-party service endpoints.Which solution will meet this requirement?

Accepted Answer

Store the third-party service endpoints in API Gateway stage variables that correspond to the stage

Answer

Store the third-party service endpoints in Lambda layers that correspond to the stage

Answer

Encode the third-party service endpoints as query parameters in the API Gateway request URL.

Answer

Store the third-party service endpoint for each environment in AWS AppConfig

Question 37

A developer is investigating an issue in part of a company's application. In the application messages are sent to an Amazon Simple Queue Service (Amazon SQS) queue The AWS Lambda function polls messages from the SQS queue and sends email messages by using Amazon Simple Email Service (Amazon SES) Users have been receiving duplicate email messages during periods of high traffic.Which reasons could explain the duplicate email messages? (Select TWO.)

Accepted Answer

Standard SQS queues support at-least-once message delivery

Answer

Standard SQS queues support exactly-once processing, so the duplicate email messages are because of user error.

Answer

Amazon SES has the DomainKeys Identified Mail (DKIM) authentication incorrectly configured

Answer

The SQS queue's visibility timeout is lower than or the same as the Lambda function's timeout.

Answer

The Amazon SES bounce rate metric is too high.

Question 38

A company is building a new application that runs on AWS and uses Amazon API Gateway to expose APIs Teams of developers are working on separate components of the application in parallel The company wants to publish an API without an integrated backend so that teams that depend on the application backend can continue the development work before the API backend development is complete.Which solution will meet these requirements?

Accepted Answer

Create API Gateway resources and set the integration type value to MOCK Configure the method integration request and integration response to associate a response with an HTTP status code Create an API Gateway stage and deploy the API.

Answer

Create an AWS Lambda function that returns mocked responses and various HTTP status codes. Create API Gateway resources and set the integration type value to AWS_PROXY Deploy the API.

Answer

Create an EC2 application that returns mocked HTTP responses Create API Gateway resources and set the integration type value to AWS Create an API Gateway stage and deploy the API.

Answer

Create API Gateway resources and set the integration type value set to HTTP_PROXY. Add mapping templates and deploy the API. Create an AWS Lambda layer that returns various HTTP status codes Associate the Lambda layer with the API deployment

Question 39

A company has an application that is hosted on Amazon EC2 instances The application stores objects in an Amazon S3 bucket and allows users to download objects from the S3 bucket A developer turns on S3 Block Public Access for the S3 bucket After this change, users report errors when they attempt to download objects The developer needs to implement a solution so that only users who are signed in to the application can access objects in the S3 bucket.Which combination of steps will meet these requirements in the MOST secure way? (Select TWO.)

Accepted Answer

Create an EC2 instance profile and role with an appropriate policy Associate the role with the EC2 instances

Accepted Answer

Modify the application to use the S3 GeneratePresignedUrl API call

Answer

Create an 1AM user with an appropriate policy. Store the access key ID and secret access key on the EC2 instances

Answer

Modify the application to use the S3 GetObject API call and to return the object handle to the user

Answer

Modify the application to delegate requests to the S3 bucket.

Question 40

An AWS Lambda function requires read access to an Amazon S3 bucket and requires read/write access to an Amazon DynamoDB table The correct 1AM policy already existsWhat is the MOST secure way to grant the Lambda function access to the S3 bucket and the DynamoDB table?

Accepted Answer

Create an 1AM role for the Lambda function Attach the existing 1AM policy to the role Attach the role to the Lambda function

Answer

Attach the existing 1AM policy to the Lambda function.

Answer

Create an 1AM user with programmatic access Attach the existing 1AM policy to the user. Add the user access key ID and secret access key as environment variables in the Lambda function.

Answer

Add the AWS account root user access key ID and secret access key as encrypted environment variables in the Lambda function

Amazon DVA-C02 Practice Test 4

Amazon DVA-C02 Practice Tests

Amazon DVA-C02 Practice Test 4

Question

Amazon DVA-C02 Practice Tests

Practice Tests