Quiz IT certification exam

Question 1

A developer is designing a serverless application for a game in which users register and log in through a web browser The application makes requests on behalf of users to a set of AWS Lambda functions that run behind an Amazon API Gateway HTTP API

The developer needs to implement a solution to register and log in users on the application's sign-in page. The solution must minimize operational overhead and must minimize ongoing management of user identities.

Which solution will meet these requirements'?

Become a Premium Member for full access

Unlock Premium Member

Accepted Answer

Create Amazon Cognito user pools for external social identity providers Configure 1AM roles for the identity pools.

Answer

Program the sign-in page to create users' 1AM groups with the 1AM roles attached to the groups

Answer

Create an Amazon RDS for SQL Server DB instance to store the users and manage the permissions to the backend resources in AWS

Answer

Configure the sign-in page to register and store the users and their passwords in an Amazon DynamoDB table with an attached IAM policy.

Question 2

A developer supports an application that accesses data in an Amazon DynamoDB table. One of the item attributes is expirationDate in the timestamp format. The application uses this attribute to find items, archive them, and remove them from the table based on the timestamp valueThe application will be decommissioned soon, and the developer must find another way to implement this functionality. The developer needs a solution that will require the least amount of code to write.Which solution will meet these requirements?

Accepted Answer

Enable TTL on the expirationDate attribute in the table. Create a DynamoDB stream. Create an AWS Lambda function to process the deleted items. Create a DynamoDB trigger for the Lambda function.

Answer

Create two AWS Lambda functions one to delete the items and one to process the items Create a DynamoDB stream Use the Deleteltem API operation to delete the items based on the expirationDate attribute Use the GetRecords API operation to get the items from the DynamoDB stream and process them

Answer

Create two AWS Lambda functions, one to delete the items and one to process the items. Create an Amazon EventBndge scheduled rule to invoke the Lambda Functions Use the Deleteltem API operation to delete the items based on the expirationDate attribute. Use the GetRecords API operation to get the items from the DynamoDB table and process them.

Answer

Enable TTL on the expirationDate attribute in the table Specify an Amazon Simple Queue Service (Amazon SQS> dead-letter queue as the target to delete the items Create an AWS Lambda function to process the items

Question 3

A developer uses AWS CloudFormation to deploy an Amazon API Gateway API and an AWS Step Functions state machine The state machine must reference the API Gateway API after the CloudFormation template is deployed The developer needs a solution that uses the state machine to reference the API Gateway endpoint.Which solution will meet these requirements MOST cost-effectively?

Accepted Answer

Configure the CloudFormation template to reference the API endpoint in the DefinitionSubstitutions property for the AWS StepFunctions StateMachme resource.

Answer

Configure the CloudFormation template to store the API endpoint in an environment variable for the AWS::StepFunctions::StateMachine resourc Configure the state machine to reference the environment variable

Answer

Configure the CloudFormation template to store the API endpoint in a standard AWS: SecretsManager Secret resource Configure the state machine to reference the resource

Answer

Configure the CloudFormation template to store the API endpoint in a standard AWS::AppConfig;:ConfigurationProfile resource Configure the state machine to reference the resource.

Question 4

A developer created an AWS Lambda function that performs a series of operations that involve multiple AWS services. The function's duration time is higher than normal. To determine the cause of the issue, the developer must investigate traffic between the services without changing the function codeWhich solution will meet these requirements?

Accepted Answer

Enable AWS X-Ray active tracing in the Lambda function Review the logs in X-Ray

Answer

Configure AWS CloudTrail View the trail logs that are associated with the Lambda function.

Answer

Review the AWS Config logs in Amazon Cloud Watch.

Answer

Review the Amazon CloudWatch logs that are associated with the Lambda function.

Question 5

A developer designed an application on an Amazon EC2 instance The application makes API requests to objects in an Amazon S3 bucketWhich combination of steps will ensure that the application makes the API requests in the MOST secure manner? (Select TWO.)

Accepted Answer

Create an IAM role that has permissions to the S3 bucket

Accepted Answer

Add the IAM role to an instance profile. Attach the instance profile to the EC2 instance.

Answer

Create an IAM user that has permissions to the S3 bucket. Add the user to an 1AM group

Answer

Create an 1AM role that has permissions to the S3 bucket Assign the role to an 1AM group

Answer

Store the credentials of the IAM user in the environment variables on the EC2 instance

Question 6

A developer is working on an ecommerce website The developer wants to review server logs without logging in to each of the application servers individually. The website runs on multiple Amazon EC2 instances, is written in Python, and needs to be highly availableHow can the developer update the application to meet these requirements with MINIMUM changes?

Accepted Answer

Install the unified Amazon CloudWatch agent on the EC2 instances Configure the agent to push the application logs to CloudWatch

Answer

Rewrite the application to be cloud native and to run on AWS Lambda, where the logs can be reviewed in Amazon CloudWatch

Answer

Set up centralized logging by using Amazon OpenSearch Service, Logstash, and OpenSearch Dashboards

Answer

Scale down the application to one larger EC2 instance where only one instance is recording logs

Question 7

A company has an existing application that has hardcoded database credentials A developer needs to modify the existing application The application is deployed in two AWS Regions with an active-passive failover configuration to meet company's disaster recovery strategyThe developer needs a solution to store the credentials outside the code. The solution must comply With the company's disaster recovery strategyWhich solution Will meet these requirements in the MOST secure way?

Accepted Answer

Store the credentials in AWS Secrets Manager in the primary Region. Enable secret replication to the secondary Region Update the application to use the Amazon Resource Name (ARN) based on the Region.

Answer

Store credentials in AWS Systems Manager Parameter Store in the primary Region. Enable parameter replication to the secondary Region. Update the application to use the Amazon Resource Name (ARN) based on the Region.

Answer

Store credentials in a config file. Upload the config file to an S3 bucket in me primary Region. Enable Cross-Region Replication (CRR) to an S3 bucket in the secondary region. Update the application to access the config file from the S3 bucket based on the Region.

Answer

Store credentials in a config file. Upload the config file to an Amazon Elastic File System (Amazon EFS) file system. Update the application to use the Amazon EFS file system Regional endpoints to access the config file in the primary and secondary Regions.

Question 8

A developer is creating an AWS Lambda function that searches for items from an Amazon DynamoDB table that contains customer contact information- The DynamoDB table items have the customer's email_address as the partition key and additional properties such as customer_type, name, and job_tltle.The Lambda function runs whenever a user types a new character into the customer_type text input The developer wants the search to return partial matches of all the email_address property of a particular customer_type The developer does not want to recreate the DynamoDB table.What should the developer do to meet these requirements?

Accepted Answer

Add a global secondary index (GSI) to the DynamoDB table with customer_type as the partition key and email_address as the sort key Perform a query operation on the GSI by using the begvns_wth key condition expression With the emad_address property

Answer

Add a global secondary index (GSI) to the DynamoDB table With ernail_address as the partition key and customer_type as the sort key Perform a query operation on the GSI by using the begins_wtth key condition expression With the emal_address property.

Answer

Add a local secondary index (LSI) to the DynamoDB table With customer_type as the partition key and email_address as the sort key Perform a query operation on the LSI by using the begins_wlth key condition expression With the email_address property

Answer

Add a local secondary Index (LSI) to the DynamoDB table With job_tltle as the partition key and emad_address as the sort key Perform a query operation on the LSI by using the begins_wrth key condition expression With the email_address property

Question 9

A developer is deploying a company's application to Amazon EC2 instances The application generates gigabytes of data files each day The files are rarely accessed but the files must be available to the application's users within minutes of a request during the first year of storage The company must retain the files for 7 years.How can the developer implement the application to meet these requirements MOST cost-effectively?

Accepted Answer

Store the files in an Amazon S3 bucket Use the S3 Glacier Instant Retrieval storage class Create an S3 Lifecycle policy to transition the files to the S3 Glacier Deep Archive storage class after 1 year

Answer

Store the files in an Amazon S3 bucket. Use the S3 Standard storage class. Create an S3 Lifecycle policy to transition the files to the S3 Glacier Flexible Retrieval storage class after 1 year.

Answer

Store the files on an Amazon Elastic Block Store (Amazon EBS) volume Use Amazon Data Lifecycle Manager (Amazon DLM) to create snapshots of the EBS volumes and to store those snapshots in Amazon S3

Answer

Store the files on an Amazon Elastic File System (Amazon EFS) mount. Configure EFS lifecycle management to transition the files to the EFS Standard-Infrequent Access (Standard-IA) storage class after 1 year.

Question 10

A developer is creating a serverless application that uses an AWS Lambda function The developer will use AWS CloudFormation to deploy the application The application will write logs to Amazon CloudWatch Logs The developer has created a log group in a CloudFormation template for the application to use The developer needs to modify the CloudFormation template to make the name of the log group available to the application at runtimeWhich solution will meet this requirement?

Accepted Answer

Pass the log group's Amazon Resource Name (ARN) as an environment variable to the Lambda function

Answer

Use the AWS:lnclude transform in CloudFormation to provide the log group's name to the application

Answer

Pass the log group's name to the application in the user data section of the CloudFormation template.

Answer

Use the CloudFormation template's Mappings section to specify the log group's name for the application.

Question 11

A company has a web application that runs on Amazon EC2 instances with a custom Amazon Machine Image (AMI) The company uses AWS CloudFormation to provision the application The application runs in the us-east-1 Region, and the company needs to deploy the application to the us-west-1 RegionAn attempt to create the AWS CloudFormation stack in us-west-1 fails. An error message states that the AMI ID does not exist. A developer must resolve this error with a solution that uses the least amount of operational overheadWhich solution meets these requirements?

Accepted Answer

Copy the custom AMI from us-east-1 to us-west-1. Update the AWS CloudFormation template for us-west-1 to refer to AMI ID for the copied AMI Relaunch the stack

Answer

Change the AWS CloudFormation templates for us-east-1 and us-west-1 to use an AWS AMI. Relaunch the stack for both Regions.

Answer

Build the custom AMI in us-west-1 Create a new AWS CloudFormation template to launch the stack in us-west-1 with the new AMI ID

Answer

Manually deploy the application outside AWS CloudFormation in us-west-1.

Question 12

A company is creating an application that processes csv files from Amazon S3 A developer has created an S3 bucket The developer has also created an AWS Lambda function to process the csv files from the S3 bucketWhich combination of steps will invoke the Lambda function when a csv file is uploaded to Amazon S3? (Select TWO.)

Accepted Answer

Create an Amazon EventBridge rule Configure the rule with a pattern to match the S3 object created event

Accepted Answer

Add S3 Lifecycle rules to invoke the existing Lambda function

Answer

Schedule an Amazon EventBridge rule to run a new Lambda function to scan the S3 bucket.

Answer

Add a trigger to the existing Lambda function. Set the trigger type to EventBridge Select the Amazon EventBridge rule.

Answer

Create a new Lambda function to scan the S3 bucket for recently added S3 objects

Question 13

A developer is creating an AWS Lambda function in VPC mode An Amazon S3 event will invoke the Lambda function when an object is uploaded into an S3 bucket The Lambda function will process the object and produce some analytic results that will be recorded into a file Each processed object will also generate a log entry that will be recorded into a file.Other Lambda functions. AWS services, and on-premises resources must have access to the result files and log file. Each log entry must also be appended to the same shared log file. The developer needs a solution that can share files and append results into an existing file.Which solution should the developer use to meet these requirements?

Accepted Answer

Create an Amazon Elastic File System (Amazon EFS) file system. Mount the EFS file system in Lambda. Store the result files and log file in the mount point. Append the log entries to the log file.

Answer

Create an Amazon Elastic Block Store (Amazon EBS) Multi-Attach enabled volume Attach the EBS volume to all Lambda functions. Update the Lambda function code to download the log file, append the log entries, and upload the modified log file to Amazon EBS

Answer

Create a reference to the /tmp local directory. Store the result files and log file by using the directory reference. Append the log entry to the log file.

Answer

Create a reference to the /opt storage directory Store the result files and log file by using the directory reference Append the log entry to the log file

Question 14

A company hosts its application on AWS. The application runs on an Amazon Elastic Container Service (Amazon ECS) cluster that uses AWS Fargate. The cluster runs behind an Application Load Balancer The application stores data in an Amazon Aurora database A developer encrypts and manages database credentials inside the applicationThe company wants to use a more secure credential storage method and implement periodic credential rotation.Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Migrate the credentials to AWS Secrets Manager. Encrypt the credentials by using an AWS Key Management Service (AWS KMS) key Turn on secret rotation Use 1AM policies and roles to grant Amazon ECS Fargate permissions to access to AWS Secrets Manager by using keys.

Answer

Migrate the secret credentials to Amazon RDS parameter groups. Encrypt the parameter by using an AWS Key Management Service (AWS KMS) key Turn on secret rotation. Use 1AM policies and roles to grant AWS KMS permissions to access Amazon RDS.

Answer

Migrate the credentials to AWS Systems Manager Parameter Store. Encrypt the parameter by using an AWS Key Management Service (AWS KMS) key. Turn on secret rotation. Use 1AM policies and roles to grant Amazon ECS Fargate permissions to access to AWS Secrets Manager

Answer

Migrate the credentials to ECS Fargate environment variables. Encrypt the credentials by using an AWS Key Management Service (AWS KMS) key Turn on secret rotation. Use 1AM policies and roles to grant Amazon ECS Fargate permissions to access to AWS Secrets Manager.

Question 15

A developer is testing a RESTful application that is deployed by using Amazon API Gateway and AWS Lambda When the developer tests the user login by using credentials that are not valid, the developer receives an HTTP 405 METHOD_NOT_ALLOWED error The developer has verified that the test is sending the correct request for the resourceWhich HTTP error should the application return in response to the request?

Accepted Answer

HTTP 401

Answer

HTTP 404

Answer

HTTP 503

Answer

HTTP 505

Question 16

A company runs an application on AWS The application uses an AWS Lambda function that is configured with an Amazon Simple Queue Service (Amazon SQS) queue called high priority queue as the event source A developer is updating the Lambda function with another SQS queue called low priority queue as the event source The Lambda function must always read up to 10 simultaneous messages from the high priority queue before processing messages from low priority queue. The Lambda function must be limited to 100 simultaneous invocations.Which solution will meet these requirements'?

Accepted Answer

Set the event source mapping maximum concurrency to 10 for the high priority queue and to 90 for the low priority queue

Answer

Set the event source mapping batch size to 10 for the high priority queue and to 90 for the low priority queue

Answer

Set the delivery delay to 0 seconds for the high priority queue and to 10 seconds for the low priority queue

Answer

Set the event source mapping batch window to 10 for the high priority queue and to 90 for the low priority queue

Question 17

A developer deployed an application to an Amazon EC2 instance The application needs to know the public IPv4 address of the instanceHow can the application find this information?

Accepted Answer

Query the instance metadata from http://169.254.169.254. latestmeta-data/.

Answer

Query the instance user data from http '169 254.169 254. latest/user-data/

Answer

Query the Amazon Machine Image (AMI) information from http://169.254.169.254/latest/meta-data/ami/.

Answer

Check the hosts file of the operating system

Question 18

A company has a web application that is hosted on Amazon EC2 instances The EC2 instances are configured to stream logs to Amazon CloudWatch Logs The company needs to receive an Amazon Simple Notification Service (Amazon SNS) notification when the number of application error messages exceeds a defined threshold within a 5-minute periodWhich solution will meet these requirements?

Accepted Answer

Create a CloudWatch metric filter to match the application error pattern in the log data. Set up a CloudWatch alarm based on the new custom metric. Configure the alarm to send an SNS notification when the number of errors exceeds the defined threshold within a 5-minute period.

Answer

Rewrite the application code to stream application logs to Amazon SNS Configure an SNS topic to send a notification when the number of errors exceeds the defined threshold within a 5-minute period

Answer

Configure a subscription filter on the CloudWatch Logs log group. Configure the filter to send an SNS notification when the number of errors exceeds the defined threshold within a 5-minute period.

Answer

Install and configure the Amazon Inspector agent on the EC2 instances to monitor for errors Configure Amazon Inspector to send an SNS notification when the number of errors exceeds the defined threshold within a 5-minute period

Question 19

A developer is creating a service that uses an Amazon S3 bucket for image uploads. The service will use an AWS Lambda function to create a thumbnail of each image Each time an image is uploaded the service needs to send an email notification and create the thumbnail The developer needs to configure the image processing and email notifications setup.Which solution will meet these requirements?

Accepted Answer

Create an Amazon Simple Notification Service (Amazon SNS) topic Configure S3 event notifications with a destination of the SNS topic Subscribe the Lambda function to the SNS topic Create an email notification subscription to the SNS topic

Answer

Create an Amazon Simple Notification Service (Amazon SNS) topic. Configure S3 event notifications with a destination of the SNS topic. Subscribe the Lambda function to the SNS topic. Create an Amazon Simple Queue Service (Amazon SQS) queue Subscribe the SQS queue to the SNS topic Create an email notification subscription to the SQS queue.

Answer

Create an Amazon Simple Queue Service (Amazon SQS) queue Configure S3 event notifications with a destination of the SQS queue Subscribe the Lambda function to the SQS queue Create an email notification subscription to the SQS queue.

Answer

Create an Amazon Simple Queue Service (Amazon SQS) queue. Send S3 event notifications to Amazon EventBridge. Create an EventBndge rule that runs the Lambda function when images are uploaded to the S3 bucket Create an EventBridge rule that sends notifications to the SQS queue Create an email notification subscription to the SQS queue

Question 20

A developer is building a microservices-based application by using Python on AWS and several AWS services The developer must use AWS X-Ray The developer views the service map by using the console to view the service dependencies. During testing, the developer notices that some services are missing from the service mapWhat can the developer do to ensure that all services appear in the X-Ray service map?

Accepted Answer

Instrument the application by using the X-Ray SDK for Python. Install the X-Ray SDK for all the services that the application uses

Answer

Modify the X-Ray Python agent configuration in each service to increase the sampling rate

Answer

Enable X-Ray data aggregation in Amazon CloudWatch Logs for all the services that the application uses

Answer

Increase the X-Ray service map timeout value in the X-Ray console

Question 21

A developer is creating an AWS Lambda function. The Lambda function needs an external library to connect to a third-party solution The external library is a collection of files with a total size of 100 MB The developer needs to make the external library available to the Lambda execution environment and reduce the Lambda package spaceWhich solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Create a Lambda layer to store the external library Configure the Lambda function to use the layer

Answer

Create an Amazon S3 bucket Upload the external library into the S3 bucket. Mount the S3 bucket folder in the Lambda function Import the library by using the proper folder in the mount point.

Answer

Load the external library to the Lambda function's /tmp directory during deployment of the Lambda package. Import the library from the /tmp directory.

Answer

Create an Amazon Elastic File System (Amazon EFS) volume. Upload the external library to the EFS volume Mount the EFS volume in the Lambda function. Import the library by using the proper folder in the mount point.

Question 22

A company built an online event platform For each event the company organizes quizzes and generates leaderboards that are based on the quiz scores. The company stores the leaderboard data in Amazon DynamoDB and retains the data for 30 days after an event is complete The company then uses a scheduled job to delete the old leaderboard dataThe DynamoDB table is configured with a fixed write capacity. During the months when many events occur, the DynamoDB write API requests are throttled when the scheduled delete job runs.A developer must create a long-term solution that deletes the old leaderboard data and optimizes write throughputWhich solution meets these requirements?

Accepted Answer

Configure a TTL attribute for the leaderboard data

Answer

Use DynamoDB Streams to schedule and delete the leaderboard data

Answer

Use AWS Step Functions to schedule and delete the leaderboard data.

Answer

Set a higher write capacity when the scheduled delete job runs

Question 23

A developer must use multi-factor authentication (MFA) to access data in an Amazon S3 bucket that is in another AWS account. Which AWS Security Token Service (AWS STS) API operation should the developer use with the MFA information to meet this requirement?

Accepted Answer

AssumeRole

Answer

AssumeRoleWithWebidentity

Answer

GetFederationToken

Answer

AssumeRoleWithSAML

Question 24

A company has an analytics application that uses an AWS Lambda function to process transaction data asynchronously A developer notices that asynchronous invocations of the Lambda function sometimes fail When failed Lambda function invocations occur, the developer wants to invoke a second Lambda function to handle errors and log details.Which solution will meet these requirements?

Accepted Answer

Configure a Lambda function destination with a failure condition Specify Lambda function as the destination type Specify the error-handling Lambda function's Amazon Resource Name (ARN) as the resource

Answer

Enable AWS X-Ray active tracing on the initial Lambda function. Configure X-Ray to capture stack traces of the failed invocations. Invoke the error-handling Lambda function by including the stack traces in the event object.

Answer

Configure a Lambda function trigger with a failure condition Specify Lambda function as the destination type Specify the error-handling Lambda function's Amazon Resource Name (ARN) as the resource

Answer

Create a status check alarm on the initial Lambda function. Configure the alarm to invoke the error-handling Lambda function when the alarm is initiated. Ensure that the alarm passes the stack trace in the event object.

Question 25

A company is preparing to migrate an application to the company's first AWS environment Before this migration, a developer is creating a proof-of-concept application to validate a model for building and deploying container-based applications on AWS.Which combination of steps should the developer take to deploy the containerized proof-of-concept application with the LEAST operational effort? (Select TWO.)

Accepted Answer

Package the application into a container image by using the Docker CLI. Upload the image to Amazon Elastic Container Registry (Amazon ECR)

Accepted Answer

Deploy the application to Amazon Elastic Container Service (Amazon ECS) on AWS Fargate

Answer

Package the application into a zip file by using a command line tool Upload the package to Amazon S3

Answer

Deploy the application to an Amazon EC2 instance by using AWS CodeDeploy.

Answer

Deploy the application to Amazon Elastic Kubernetes Service (Amazon EKS) on AWS Fargate

Question 26

A company runs an application on AWS The application stores data in an Amazon DynamoDB table Some queries are taking a long time to run These slow queries involve an attribute that is not the table's partition key or sort keyThe amount of data that the application stores in the DynamoDB table is expected to increase significantly. A developer must increase the performance of the queries.Which solution will meet these requirements'?

Accepted Answer

Create a global secondary index (GSI). Set query attribute to be the partition key of the index

Answer

Increase the page size for each request by setting the Limit parameter to be higher than the default value Configure the application to retry any request that exceeds the provisioned throughput.

Answer

Perform a parallel scan operation by issuing individual scan requests in the parameters specify the segment for the scan requests and the total number of segments for the parallel scan.

Answer

Turn on read capacity auto scaling for the DynamoDB table. Increase the maximum read capacity units (RCUs).

Question 27

A developer maintains a critical business application that uses Amazon DynamoDB as the primary data store The DynamoDB table contains millions of documents and receives 30-60 requests each minute The developer needs to perform processing in near-real time on the documents when they are added or updated in the DynamoDB tableHow can the developer implement this feature with the LEAST amount of change to the existing application code?

Accepted Answer

Enable a DynamoDB stream on the table Invoke an AWS Lambda function to process the documents.

Answer

Set up a cron job on an Amazon EC2 instance Run a script every hour to query the table for changes and process the documents

Answer

Update the application to send a PutEvents request to Amazon EventBridge. Create an EventBridge rule to invoke an AWS Lambda function to process the documents.

Answer

Update the application to synchronously process the documents directly after the DynamoDB write

Question 28

A developer needs to build an AWS CloudFormation template that self-populates the AWS Region variable that deploys the CloudFormation templateWhat is the MOST operationally efficient way to determine the Region in which the template is being deployed?

Accepted Answer

Use the AWS:.Region pseudo parameter

Answer

Require the Region as a CloudFormation parameter

Answer

Find the Region from the AWS::Stackld pseudo parameter by using the Fn::Split intrinsic function

Answer

Dynamically import the Region by referencing the relevant parameter in AWS Systems Manager Parameter Store

Question 29

A company has an application that runs across multiple AWS Regions. The application is experiencing performance issues at irregular intervals. A developer must use AWS X-Ray to implement distributed tracing for the application to troubleshoot the root cause of the performance issues.What should the developer do to meet this requirement?

Accepted Answer

Use Region annotation that X-Ray adds automatically for AWS services Add Region annotation for user-defined services

Answer

Use the X-Ray console to add annotations for AWS services and user-defined services

Answer

Use the X-Ray daemon to add annotations for AWS services and user-defined services

Answer

Use Region annotation that X-Ray adds automatically for user-defined services Configure X-Ray to add Region annotation for AWS services

Question 30

A company has a social media application that receives large amounts of traffic User posts and interactions are continuously updated in an Amazon RDS database The data changes frequently, and the data types can be complex The application must serve read requests with minimal latencyThe application's current architecture struggles to deliver these rapid data updates efficiently The company needs a solution to improve the application's performance.Which solution will meet these requirements'?

Accepted Answer

Create an Amazon ElastiCache for Redis cluster. Update the application code to use a write-through caching strategy and read the data from Redis.

Answer

Use Amazon DynamoDB Accelerator (DAX) in front of the RDS database to provide a caching layer for the high volume of rapidly changing data

Answer

Set up Amazon S3 Transfer Acceleration on the RDS database to enhance the speed of data transfer from the databases to the application.

Answer

Add an Amazon CloudFront distribution in front of the RDS database to provide a caching layer for the high volume of rapidly changing data

Question 31

A company runs a payment application on Amazon EC2 instances behind an Application Load Balance The EC2 instances run in an Auto Scaling group across multiple Availability Zones The application needs to retrieve application secrets during the application startup and export the secrets as environment variables These secrets must be encrypted at rest and need to be rotated every month.Which solution will meet these requirements with the LEAST development effort?

Accepted Answer

Store the secrets in AWS Secrets Manager Provision a new customer master key Use the key to encrypt the secrets Enable automatic rotation Configure an Amazon EC2 user data script to programmatically retrieve the secrets during the startup and export as environment variables

Answer

Save the secrets in a text file and store the text file in Amazon S3 Provision a customer managed key Use the key for secret encryption in Amazon S3 Read the contents of the text file and read the export as environment variables Configure S3 Object Lambda to rotate the text file every month

Answer

Save the secrets as strings in AWS Systems Manager Parameter Store and use the default AWS Key Management Service (AWS KMS) key Configure an Amazon EC2 user data script to retrieve the secrets during the startup and export as environment variables Configure an AWS Lambda function to rotate the secrets in Parameter Store every month.

Answer

Save the secrets as base64 encoded environment variables in the application properties. Retrieve the secrets during the application startup. Reference the secrets in the application code. Write a script to rotate the secrets saved as environment variables.

Question 32

A company is using Amazon API Gateway to invoke a new AWS Lambda function The company has Lambda function versions in its PROD and DEV environments. In each environment, there is a Lambda function alias pointing to the corresponding Lambda function version API Gateway has one stage that is configured to point at the PROD aliasThe company wants to configure API Gateway to enable the PROD and DEV Lambda function versions to be simultaneously and distinctly availableWhich solution will meet these requirements?

Accepted Answer

Use an API Gateway stage variable to configure the Lambda function alias Republish PROD and create a new stage for development Create API Gateway stage variables for PROD and DEV stages Point each stage variable to the PROD Lambda function alias and to the DEV Lambda function alias

Answer

Enable a Lambda authorizer for the Lambda function alias in API Gateway Republish PROD and create a new stage for DEV Create API Gateway stage variables for the PROD and DEV stages. Point each stage variable to the PROD Lambda authorizer to the DEV Lambda authorizer.

Answer

Set up a gateway response in API Gateway for the Lambda function alias. Republish PROD and create a new stage for DEV. Create gateway responses in API Gateway for PROD and DEV Lambda aliases

Answer

Use an environment variable for the Lambda function alias in API Gateway. Republish PROD and create a new stage for development. Create API gateway environment variables for PROD and DEV stages. Point each stage variable to the PROD Lambda function alias to the DEV Lambda function alias.

Question 33

A developer is working on an ecommerce platform that communicates with several third-party payment processing APIs The third-party payment services do not provide a test environment.The developer needs to validate the ecommerce platform's integration with the third-party payment processing APIs. The developer must test the API integration code without invoking the third-party payment processing APIs.Which solution will meet these requirements'?

Accepted Answer

Set up an Amazon API Gateway REST API for each third-party API Specify an integration request type of Mock Configure integration responses by using sample responses captured from the real third-party API

Answer

Set up an Amazon API Gateway REST API with a gateway response configured for status code 200 Add response templates that contain sample responses captured from the real third-party API.

Answer

Set up an AWS AppSync GraphQL API with a data source configured for each third-party API Specify an integration type of Mock Configure integration responses by using sample responses captured from the real third-party API.

Answer

Create an AWS Lambda function for each third-party API. Embed responses captured from the real third-party API. Configure Amazon Route 53 Resolver with an inbound endpoint for each Lambda function's Amazon Resource Name (ARN).

Question 34

A developer is creating a simple proof-of-concept demo by using AWS CloudFormation and AWS Lambda functions The demo will use a CloudFormation template to deploy an existing Lambda function The Lambda function uses deployment packages and dependencies stored in Amazon S3 The developer defined anAWS Lambda Function resource in a CloudFormation template. The developer needs to add the S3 bucket to the CloudFormation template.What should the developer do to meet these requirements with the LEAST development effort?

Accepted Answer

Add the relevant key and bucket to the S3Bucket and S3Key properties in the CloudFormation template

Answer

Add the function code in the CloudFormation template inline as the code property

Answer

Add the function code in the CloudFormation template as the ZipFile property.

Answer

Find the S3 key for the Lambda function Add the S3 key as the ZipFile property in the CloudFormation template.

Question 35

A company is planning to use AWS CodeDeploy to deploy an application to Amazon Elastic Container Service (Amazon ECS) During the deployment of a new version of the application, the company initially must expose only 10% of live traffic to the new version of the deployed application. Then, after 15 minutes elapse, the company must route all the remaining live traffic to the new version of the deployed application.Which CodeDeploy predefined configuration will meet these requirements?

Accepted Answer

CodeDeployDefault ECSCanary10Percent15Minutes

Answer

CodeDeployDefault LambdaCanary10Percent5Minutes

Answer

CodeDeployDefault LambdaCanary10Percent15Minutes

Answer

CodeDeployDefault ECSLinear10PercentEvery1 Minutes

Question 36

A developer is using AWS Step Functions to automate a workflow The workflow defines each step as an AWS Lambda function task The developer notices that runs of the Step Functions state machine fail in the GetResource task with either an UlegalArgumentException error or a TooManyRequestsException errorThe developer wants the state machine to stop running when the state machine encounters an UlegalArgumentException error. The state machine needs to retry the GetResource task one additional time after 10 seconds if the state machine encounters a TooManyRequestsException error. If the second attempt fails, the developer wants the state machine to stop running.How can the developer implement the Lambda retry functionality without adding unnecessary complexity to the state machine'?

Accepted Answer

Add a retrier to the GetResource task Configure the retrier with an error type of TooManyRequestsException, an interval of 10 seconds, and a maximum attempts value of 1.

Answer

Add a Delay task after the GetResource task. Add a catcher to the GetResource task. Configure the catcher with an error type of TooManyRequestsException. Configure the next step to be the Delay task Configure the Delay task to wait for an interval of 10 seconds Configure the next step to be the GetResource task.

Answer

Add a catcher to the GetResource task Configure the catcher with an error type of TooManyRequestsException. an interval of 10 seconds, and a maximum attempts value of 1. Configure the next step to be the GetResource task.

Answer

Duplicate the GetResource task Rename the new GetResource task to TryAgain Add a catcher to the original GetResource task Configure the catcher with an error type of TooManyRequestsException. Configure the next step to be TryAgain.

Question 37

An Amazon Simple Queue Service (Amazon SQS) queue serves as an event source for an AWS Lambda function In the SQS queue, each item corresponds to a video file that the Lambda function must convert to a smaller resolution The Lambda function is timing out on longer video files, but the Lambda function's timeout is already configured to its maximum valueWhat should a developer do to avoid the timeouts without additional code changes'?

Accepted Answer

Increase the visibility timeout on the SQS queue

Answer

Increase the memory configuration of the Lambda function

Answer

Increase the instance size of the host that runs the Lambda function.

Answer

Use multi-threading for the conversion.

Question 38

A developer is creating an Amazon DynamoDB table by using the AWS CLI The DynamoDB table must use server-side encryption with an AWS owned encryption keyHow should the developer create the DynamoDB table to meet these requirements?

Accepted Answer

Create the DynamoDB table with the default encryption options

Answer

Create an AWS Key Management Service (AWS KMS) customer managed key. Provide the key's Amazon Resource Name (ARN) in the KMSMasterKeyld parameter during creation of the DynamoDB table

Answer

Create an AWS Key Management Service (AWS KMS) AWS managed key Provide the key's Amazon Resource Name (ARN) in the KMSMasterKeyld parameter during creation of the DynamoDB table

Answer

Create an AWS owned key Provide the key's Amazon Resource Name (ARN) in the KMSMasterKeyld parameter during creation of the DynamoDB table.

Question 39

A software company is launching a multimedia application. The application will allow guest users to access sample content before the users decide if they want to create an account to gain full access. The company wants to implement an authentication process that can identify users who have already created an account. The company also needs to keep track of the number of guest users who eventually create an account.Which combination of steps will meet these requirements? {Select TWO.)

Accepted Answer

Create an Amazon Cognito identity pool. Configure the identity pool to allow unauthenticated users. Exchange unique identity for temporary credentials that allow all users to assume a role.

Accepted Answer

Create a role for authenticated users that allows access to all content. Create a role for unauthenticated users that allows access to only the sample content.

Answer

Create an Amazon Cognito user pool. Configure the user pool to allow unauthenticated users. Exchange user tokens for temporary credentials that allow authenticated users to assume a role.

Answer

Create an Amazon CloudFront distribution. Configure the distribution to allow unauthenticated users. Exchange user tokens for temporary credentials that allow all users to assume a role.

Answer

Allow all users to access the sample content by default. Create a role for authenticated users that allows access to the other content.

Question 40

A developer received the following error message during an AWS CloudFormation deployment:Which action should the developer take to resolve this error?

Accepted Answer

Modify the CloudFormation template to retain the ASGInstanceRolet 2345678 resource. Then manually delete the resource after deployment.

Answer

Contact AWS Support to report an issue with the Auto Scaling Groups (ASG> service.

Answer

Add a DependsOn attribute to the ASGInstanceRole12345678 resource in the CloudFormation template. Then delete the stack.

Answer

Add a force parameter when calling CloudFormation with the role-am of ASGInstanceRole12345678.

Amazon DVA-C02 Practice Test 5

Amazon DVA-C02 Practice Tests

Amazon DVA-C02 Practice Test 5

Question

Amazon DVA-C02 Practice Tests

Practice Tests