Quiz IT certification exam

Question 1

A company has implemented a pipeline in AWS CodePipeline. The company Is using a single AWS account and does not use AWS Organizations. The company needs to test its AWS CloudFormation templates in its primary AWS Region and a disaster recovery Region.

Which solution will meet these requirements with the MOST operational efficiency?

Become a Premium Member for full access

Unlock Premium Member

Accepted Answer

Configure CodePipeline to deploy and test the Cloud Formation templates. Use CloudFormation StackSets to start deployment across both Regions.

Answer

In the CodePipeline pipeline, implement an AWS CodeDeploy action for each Region to deploy and test the Cloud Formation templates. Update CodePipeline and AWS CodeBuild with appropriate permissions.

Answer

Configure CodePipeline to invoke AWS CodeBuild to deploy and test the CloudFormation templates in each Region. Update CodeBuild and CloudFormation with appropriate permissions.

Answer

Use the Snyk action in CodePipeline to deploy and test the CloudFormation templates in each Region.

Question 2

A developer created an AWS Lambda function that accesses resources in a VPC. The Lambda function polls an Amazon Simple Queue Service (Amazon SOS) queue for new messages through a VPC endpoint. Then the function calculates a rolling average of the numeric values that are contained in the messages. After initial tests of the Lambda function, the developer found that the value of the rolling average that the function returned was not accurate.How can the developer ensure that the function calculates an accurate rolling average?

Accepted Answer

Modify the function to store the values in Amazon ElastiCache. When the function initializes, use the previous values from the cache to calculate the rolling average.

Answer

Set the function's reserved concurrency to 1. Calculate the rolling average in the function. Store the calculated rolling average in Amazon ElastiCache.

Answer

Set the function's provisioned concurrency to 1. Calculate the rolling average in the function. Store the calculated rolling average in Amazon ElastiCache.

Answer

Modify the function to store the values in the function's layers. When the function initializes, use the previously stored values to calculate the rolling average.

Question 3

A developer is building an ecommerce application that uses multiple AWS Lambda functions. Each function performs a specific step in a customer order workflow, such as order processing and inventory management.The developer must ensure that the Lambda functions run in a specific order.Which solution will meet this requirement with the LEAST operational overhead?

Accepted Answer

Configure an AWS Step Functions state machine to invoke the Lambda functions in a specific order.

Answer

Configure an Amazon Simple Queue Service (Amazon SQS) queue to contain messages about each step a function must perform. Configure the Lambda functions to run sequentially based on the order of messages in the SQS queue.

Answer

Configure an Amazon Simple Notification Service (Amazon SNS) topic to contain notifications about each step a function must perform. Subscribe the Lambda functions to the SNS topic. Use subscription filters based on the step each function must perform.

Answer

Configure Amazon EventBridge Scheduler schedules to invoke the Lambda functions in a specific order.

Question 4

A company hosts a client-side web application for one of its subsidiaries on Amazon S3. The web application can be accessed through Amazon CloudFront from https://www.example.com. After a successful rollout, the company wants to host three more client-side web applications for its remaining subsidiaries on three separate S3 buckets.To achieve this goal, a developer moves all the common JavaScript files and web fonts to a central S3 bucket that serves the web applications. However, during testing, the developer notices that the browser blocks the JavaScript files and web fonts.What should the developer do to prevent the browser from blocking the JavaScript files and web fonts?

Accepted Answer

Create a cross-origin resource sharing (CORS) configuration that allows access to the central S3 bucket. Add the CORS configuration to the central S3 bucket.

Answer

Create four access points that allow access to the central S3 bucket. Assign an access point to each web application bucket.

Answer

Create a bucket policy that allows access to the central S3 bucket. Attach the bucket policy to the central S3 bucket.

Answer

Create a Content-MD5 header that provides a message integrity check for the central S3 bucket. Insert the Content-MD5 header for each web application request.

Question 5

A company runs a new application on AWS Elastic Beanstalk. The company needs to deploy updates to the application. The updates must not cause any downtime for application users. The deployment must forward a specified percentage of incoming client traffic to a new application version during an evaluation period.Which deployment type will meet these requirements?

Accepted Answer

Traffic-splitting

Answer

Rolling

Answer

In-place

Answer

Immutable

Question 6

A company is creating a new application that gives users the ability to upload and share short video files. The average size of the video files is 10 MB. After a user uploads a file, a message needs to be placed into an Amazon Simple Queue Service (Amazon SQS) queue so the file can be processed. The files need to be accessible for processing within 5 minutes.Which solution will meet these requirements MOST cost-effectively?

Accepted Answer

Write the files to Amazon S3 Standard. Add the S3 location of the files to the SQS queue.

Answer

Write the files to Amazon S3 Glacier Deep Archive. Add the S3 location of the files to the SQS queue.

Answer

Write the files to an Amazon Elastic Block Store (Amazon EBS) General Purpose SSD volume. Add the EBS location of the files to the SQS queue.

Answer

Write messages that contain the contents of the uploaded files to the SQS queue.

Question 7

A developer needs to retrieve all data from an Amazon DynamoDB table that matches a particular partition key.Which solutions will meet this requirement in the MOST operationally efficient way? (Select TWO.)

Accepted Answer

Use the GetItem API with a request parameter for key that contains the partition key name and specific key value.

Accepted Answer

Use the ExecuteStatement API and a PartiQL statement to match on the key.

Answer

Use the Scan API and a filter expression to match on the key.

Answer

Use the ExecuteStatement API and a filter expression to match on the key.

Answer

Use the GetItem API and a PartiQL statement to match on the key.

Question 8

A company has a web application that contains an Amazon API Gateway REST API. A developer has created an AWS CloudFormation template for the initial deployment of the application. The developer has deployed the application successfully as part of an AWS CodePipeline continuous integration and continuous delivery (CI/CD) process. All resources and methods are available through the deployed stage endpoint.The CloudFormation template contains the following resource types:* AWS::ApiGateway::RestApi* AWS::ApiGateway::Resource* AWS::ApiGateway::Method* AWS:ApiGateway::Stage* AWS::ApiGateway:;DeploymentThe developer adds a new resource to the REST API with additional methods and redeploys the template. CloudFormation reports that the deployment is successful and that the stack is in the UPDATE_COMPLETE state. However, calls to all new methods are returning 404 (Not Found) errors.What should the developer do to make the new methods available?

Accepted Answer

Add an AWS CodeBuild stage lo CodePipeline to run the aws apigateway create-deployment AWS CLI command.

Answer

Specify the disable-rollback option during the update-stack operation.

Answer

Unset the Cloud Forma lion stack failure options.

Answer

Add an action to CodePipeline to run the aws cloudfront create-invalidation AWS CLI command.

Question 9

A company is developing an application that will be accessed through the Amazon API Gateway REST API. Registered users should be the only ones who can access certain resources of this API. The token being used should expire automatically and needs to be refreshed periodically.How can a developer meet these requirements?

Accepted Answer

Create an Amazon Cognito user pool, configure the Cognito Authorizer in API Gateway, and use the identity or access token.

Answer

Create an Amazon Cognito identity pool, configure the Amazon Cognito Authorizer in API Gateway, and use the temporary credentials generated by the identity pool.

Answer

Create and maintain a database record for each user with a corresponding token and use an AWS Lambda authorizer in API Gateway.

Answer

Create an 1AM user for each API user, attach an invoke permissions policy to the API. and use an I AM authorizer in API Gateway.

Question 10

A developer manages a website that distributes its content by using Amazon CloudFront. The website's static artifacts are stored in an Amazon S3 bucket.The developer deploys some changes and can see the new artifacts in the S3 bucket. However, the changes do not appear on the webpage that the CloudFront distribution delivers.How should the developer resolve this issue?

Accepted Answer

Set CloudFront to invalidate the cache after the artifacts have been deployed to Amazon S3.

Answer

Configure S3 Object Lock to update to the latest version of the files every time an S3 object is updated.

Answer

Configure the S3 bucket to clear all old objects from the bucket before new artifacts are uploaded.

Answer

Set CloudFront to modify the distribution origin after the artifacts have been deployed to Amazon S3.

Question 11

A company had an Amazon RDS for MySQL DB instance that was named mysql-db. The DB instance was deleted within the past 90 days. A developer needs to find which 1AM user or role deleted the DB instance in the AWS environment. Which solution will provide this information?

Accepted Answer

Retrieve the AWS CloudTrail events for the resource mysql-db where the event name is DeleteDBInstance. Inspect each event.

Answer

Retrieve the Amazon CloudWatch log events from the most recent log stream within the rds/mysql-db log group. Inspect the log events.

Answer

Retrieve the AWS X-Ray trace summaries. Filter by services with the name mysql-db. Inspect the ErrorRootCauses values within each summary.

Answer

Retrieve the AWS Systems Manager deletions inventory Filter the inventory by deletions that have a TypeName value of RDS. Inspect the deletion details.

Question 12

A company is using an Amazon API Gateway REST API endpoint as a webhook to publish events from an on-premises source control management (SCM) system to Amazon EventBridge. The company has configured an EventBridge rule to listen for the events and to control application deployment in a central AWS account. The company needs to receive the same events across multiple receiver AWS accounts.How can a developer meet these requirements without changing the configuration of the SCM system?

Accepted Answer

Grant permission to the central AWS account for EventBridge to access the receiver AWS accounts. Add an EventBridge event bus on the receiver AWS accounts as the targets to the existing EventBridge rule.

Answer

Deploy the API Gateway REST API to all the required AWS accounts. Use the same custom domain name for all the gateway endpoints so that a single SCM webhook can be used for all events from all accounts.

Answer

Deploy the API Gateway REST API to all the receiver AWS accounts. Create as many SCM webhooks as the number of AWS accounts.

Answer

Convert the API Gateway type from REST API to HTTP API.

Question 13

A developer is creating AWS CloudFormation templates to manage an application's deployment in Amazon Elastic Container Service (Amazon ECS) through AWS CodeDeploy. The developer wants to automatically deploy new versions of the application to a percentage of users before the new version becomes available for all users.How should the developer manage the deployment of the new version?

Accepted Answer

Modify the CloudFormation template to include a Transform section and the AWS::CodeDeploy::BlueGreen hook.

Answer

Deploy the new version in a new CloudFormation stack. After testing is complete, update the application's DNS records for the new stack.

Answer

Run CloudFormation stack updates on the application stack to deploy new application versions when they are available.

Answer

Create a nested stack for the new version. Include a Transform section and the AWS::CodeDeploy::BlueGreen hook.

Question 14

A developer is building a highly secure healthcare application using serverless components. This application requires writing temporary data to /Imp storage on an AWS Lambda function.How should the developer encrypt this data?

Accepted Answer

Set up the Lambda function with a role and key policy to access an AWS KMS key. Use the key to generate a data key used to encrypt all data prior to writing to Amp storage.

Answer

Enable Amazon EBS volume encryption with an AWS KMS key in the Lambda function configuration so that all storage attached to the Lambda function is encrypted.

Answer

Use OpenSSL to generate a symmetric encryption key on Lambda startup. Use this key to encrypt the data prior to writing to /tmp.

Answer

Use an on-premises hardware security module (HSM) to generate keys, where the Lambda function requests a data key from the HSM and uses that to encrypt data on all requests to the function.

Question 15

A developer is creating an AWS Serverless Application Model (AWS SAM) template. The AWS SAM template contains the definition of multiple AWS Lambda functions, an Amazon S3 bucket, and an Amazon CtoudFront distribution. One of the Lambda functions runs on Lambda@Edge in the CloudFront distribution. The S3 bucket is configured as an origin for the CloudFront distribution.When the developer deploys the AWS SAM template in the eu-west-1 Region, the creation of the stack fails.Which of the following could be the reason for this issue?

Accepted Answer

Lambda@Edge functions can be created only in the us-east-1 Region.

Answer

CloudFront distributions can be created only in the us-east-1 Region.

Answer

A single AWS SAM template cannot contain multiple Lambda functions.

Answer

The CloudFront distribution and the S3 bucket cannot be created in the same Region.

Question 16

A developer has written a distributed application that uses micro services. The microservices are running on Amazon EC2 instances. Because of message volume, the developer is unable to match log output from each microservice to a specific transaction. The developer needs to analyze the message flow to debug the application.Which combination of steps should the developer take to meet this requirement? (Select TWO.)

Accepted Answer

Download the AWS X-Ray daemon. Install the daemon on an EC2 instance. Ensure that the EC2 instance allows UDP traffic on port 2000.

Accepted Answer

Add the AWS X-Ray software development kit (SDK) to the microservices. Use X-Ray to trace requests that each microservice makes.

Answer

Configure an interface VPC endpoint to allow traffic to reach the global AWS X-Ray daemon on TCP port 2000.

Answer

Enable AWS X-Ray. Configure Amazon CloudWatch to push logs to X-Ray.

Answer

Set up Amazon CloudWatch metric streams to collect streaming data from the microservices.

Question 17

A developer is building an application that uses Amazon DynamoDB. The developer wants to retrieve multiple specific items from the database with a single API call. Which DynamoDB API call will meet these requirements with the MINIMUM impact on the database?

Accepted Answer

BatchGetltem

Answer

Getltem

Answer

Scan

Answer

Query

Question 18

An application stores user data in Amazon S3 buckets in multiple AWS Regions. A developer needs to implement a solution that analyzes the user data in the S3 buckets to find sensitive information. The analysis findings from all the S3 buckets must be available in the eu-west-2 Region.Which solution will meet these requirements with the LEAST development effort?

Accepted Answer

Configure Amazon Made to generate findings. Use Amazon EventBridge to create rules that copy the findings to eu-west-2.

Answer

Create an AWS Lambda function to generate findings. Program the Lambda function to send the findings to another S3 bucket in eu-west-2.

Answer

Configure Amazon Inspector to generate findings. Use Amazon EventBridge to create rules that copy the findings to eu-west-2.

Answer

Configure Amazon Macie to generate findings and to publish the findings to AWS CloudTrail. Use a CloudTrail trail to copy the results to eu-west-2.

Question 19

A company uses Amazon DynamoDB as a data store for its order management system. The company frontend application stores orders in a DynamoDB table. The DynamoDB table is configured to send change events to a DynamoDB stream. The company uses an AWS Lambda function to log and process the incoming orders based on data from the DynamoDB stream.An operational review reveals that the order quantity of incoming orders is sometimes set to 0. A developer needs to create a dashboard that will show how many unique customers this problem affects each day.What should the developer do to implement the dashboard?

Accepted Answer

Grant the Lambda function's execution role permissions to upload logs to Amazon CloudWatch Logs. Implement a CloudWatch Logs Insights query that selects the number of unique customers for orders with order quantity equal to 0 and groups the results in 1-day periods. Add the CloudWatch Logs Insights query to a CloudWatch dashboard.

Answer

Use Amazon Athena to query AWS CtoudTrail API logs for API calls. Implement an Athena query that selects the number of unique customers for orders with order quantity equal to 0 and groups the results in 1-day periods. Add the Athena query to an Amazon CloudWatch dashboard.

Answer

Configure the Lambda function to send events to Amazon EventBridge. Create an EventBridge rule that groups the number of unique customers for orders with order quantity equal to 0 in 1-day periods. Add a CloudWatch dashboard as the target of the rule.

Answer

Turn on custom Amazon CloudWatch metrics for the DynamoDB stream of the DynamoOB table. Create a CloudWatch alarm that groups the number of unique customers for orders with order quantity equal to 0 in 1-day periods. Add the CloudWatch alarm to a CloudWatch dashboard.

Question 20

A developer has created an AWS Lambda function to provide notification through Amazon Simple Notification Service (Amazon SNS) whenever a file is uploaded to Amazon S3 that is larger than 50 MB. The developer has deployed and tested the Lambda function by using the CLI. However, when the event notification is added to the S3 bucket and a 3.000 MB file is uploaded, the Lambda function does not launch.Which of the following Is a possible reason for the Lambda function's inability to launch?

Accepted Answer

The resource-based policy for the Lambda function does not have the required permissions to be invoked by Amazon S3.

Answer

The S3 event notification does not activate for files that are larger than 1.000 MB.

Answer

Lambda functions cannot be invoked directly from an S3 event.

Answer

The S3 bucket needs to be made public.

Question 21

A developer is creating an application that must transfer expired items from Amazon DynamoDB to Amazon S3. The developer sets up the DynamoDB table to automatically delete items after a specific TTL. The application must process the items in DynamoDB and then must store the expired items in Amazon S3. The entire process, including item processing and storage in Amazon S3, will take 5 minutes.Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Configure DynamoDB Streams to invoke an AWS Lambda function. Program the Lambda function to process the items and to store the expired items in Amazon S3.

Answer

Configure DynamoDB Accelerator (DAX) lo query for expired items based on the TTL Save the results to Amazon S3.

Answer

Deploy a custom application on an Amazon Elastic Container Service (Amazon ECS) cluster on Amazon EC2 instances. Program the custom application to process the items and to store the expired items in Amazon S3.

Answer

Create an Amazon EventBridge rule to invoke an AWS Lambda function. Program the Lambda function to process The items and to store the expired items in Amazon S3.

Question 22

An application ingests data from an Amazon Kinesis data stream. The shards in the data stream are set for normal traffic.During tests for peak traffic, the application ingests data slowly. A developer needs to adjust the data stream to handle the peak traffic.What should the developer do to meet this requirement MOST cost-effectively?

Accepted Answer

Increase the shard count in the data stream by using the UpdateShardCount API operation.

Answer

Install the Kinesis Producer Library {KPL) to ingest data into the data stream.

Answer

Switch to on-demand capacity mode for the data stream. Specify a partition key when writing data to the data stream.

Answer

Decrease the amount of time that data is kept in the data stream by using the DecreaseStreamRetention Period API operation.

Question 23

A company has an application that is deployed on AWS Elastic Beanstalk. The application generates user-specific PDFs and stores the PDFs in an Amazon S3 bucket. The application then uses Amazon Simple Email Service (Amazon SES) to send the PDFs by email to subscribers.Users no longer access the PDFs 90 days after the PDFs are generated. The S3 bucket is not versioned and contains many obsolete PDFs.A developer must reduce the number of files in the S3 bucket by removing PDFs that are older than 90 days.Which solution will meet this requirement with the LEAST development effort?

Accepted Answer

Create an S3 Lifecycle rule for the S3 bucket to expire objects after 90 days.

Answer

Update the application code. In the code, add a rule to scan all the objects in the S3 bucket every day and to delete objects after 90 days.

Answer

Create an AWS Lambda function. Program the Lambda function to scan all the objects in the S3 bucket every day and to delete objects after 90 days.

Answer

Partition the S3 objects with a // key prefix. Create an AWS Lambda function to remove objects that have prefixes that have reached the expiration date.

Question 24

A company runs an ecommerce application on AWS. The application stores data in an Amazon Aurora database.A developer is adding a caching layer to the application. The caching strategy must ensure that the application always uses the most recent value for each data item.Which caching strategy will meet these requirements?

Accepted Answer

Implement a write-through strategy for every item that is created and updated.

Answer

Implement a TTL strategy for every item that is saved in the cache.

Answer

Implement a lazy loading strategy for every item that is loaded.

Answer

Implement a read-through strategy for every item that is loaded.

Question 25

A developer is monitoring an application that runs on an Amazon EC2 Instance. The developer has configured a custom Amazon CloudWatch metric with data granularity of 1 second. It any issues occur, the developer wants to be notified within 30 seconds by Amazon Simple Notification Service (Amazon SNS).What should the developer do to meet this requirement?

Accepted Answer

Configure a high-resolution CloudWatch alarm.

Answer

Set up a custom CloudWatch dashboard.

Answer

Use Amazon CloudWatch Logs Insights.

Answer

Change to a default CloudWatch metric.

Question 26

A company is developing a serverless application that requires storage of sensitive API keys as environment variables for various services. The application requires the automatic rotation of the encryption keys every year.Which solution will meet these requirements with no development effort?

Accepted Answer

Encrypt the environment variables by using AWS Secrets Manager. Set up automatic rotation in Secrets Manager.

Answer

Encrypt the environment variables by using AWS Key Management Service (AWS KMS) customer managed keys. Enable automatic key rotation.

Answer

Encrypt the environment variables by using AWS Key Management Service (AWS KMS) AWS managed keys. Configure a custom AWS Lambda function to automate key rotation.

Answer

Encrypt the environment variables by using AWS Systems Manager Parameter Store. Set up automatic rotation in Parameter Store.

Question 27

A developer needs to use a code template to create an automated deployment of an application onto Amazon EC2 instances. The template must be configured to repeat deployment, installation, and updates of resources for the application. The template must be able to create identical environments and roll back to previous versions.Which solution will meet these requirements?

Accepted Answer

Use AWS CloudFormation to create an infrastructure template in JSON format to deploy the EC2 instances. Use Cloud Formation helper scripts to install the necessary software and to start the application. Call the scripts directly from the template.

Answer

Use AWS Amplify for automatic deployment templates. Use a traffic-splitting deployment to copy any deployments. Modify any resources created by Amplify, if necessary.

Answer

Use AWS CodeBuild for automatic deployment. Upload the required AppSpec file template. Save the appspec.yml file in the root directory folder of the revision. Specify the deployment group that includes the EC2 instances for the deployment.

Answer

Use AWS AppSync to deploy the application. Upload the template as a GraphQL schema. Specify the EC2 instances for deployment of the application. Use resolvers as a version control mechanism and to make any updates to the deployments.

Question 28

A company uses AWS X-Ray to monitor a serverless application. The components of the application have different request rates. The user interactions and transactions are important to trace, but they are low in volume. The background processes such as application health checks, polling, and connection maintenance generate high volumes of read-only requests.Currently, the default X-Ray sampling rules are universal for all requests. Only the first request per second and some additional requests are recorded. This setup is not helping the company review the requests based on service or request type.A developer must configure rules to trace requests based on service or request properties. The developer must trace the user interactions and transactions without wasting effort recording minor background tasks.Which solution will meet these requirements?

Accepted Answer

Disable sampling and trace all requests for requests that handle user interactions or transactions. Sample high-volume read-only requests at a lower rate.

Answer

Disable sampling for high-volume read-only requests. Sample at a lower rate for all requests that handle user interactions or transactions.

Answer

Disable sampling and trace all requests for requests that handle user interactions or transactions. Sample high-volume read-only requests at a higher rate.

Answer

Disable sampling for high-volume read-only requests. Sample at a higher rate for all requests that handle user interactions or transactions.

Question 29

A company has a serverless application that uses Amazon API Gateway backed by AWS Lambda proxy integration. The company is developing several backend APIs. The company needs a landing page to provide an overview of navigation to the APIs.A developer creates a new /LandingPage resource and a new GET method that uses mock integration.What should the developer do next to meet these requirements?

Accepted Answer

Configure the integration request mapping template with Content-Type of application/json and statusCode of 200. Configure the integration response mapping template with Content-Type of text/html. In the integration response mapping template, include the LandingPage HTML code that references the APIs.

Answer

Configure the integration request mapping template with Content-Type of text/html and statusCode of 200. Configure the integration response mapping template with Content-Type of application/json. In the integration response mapping template, include the LandingPage HTML code that references the APIs.

Answer

Configure the Integration request mapping template with Content-Type of application/json. In the integration request mapping template, include the LandingPage HMTL code that references the APIs. Configure the integration response mapping template with Content-Type of text/html and statusCode of 200.

Answer

Configure the integration request mapping template with Content-Type of text/html. In the integration request mapping template, include the LandingPage HTML code that references the APIs. Configure the integration response mapping template with Content-Type of application/json and statusCode of 200.

Question 30

A developer is setting up infrastructure by using AWS Cloud Formation. If an error occurs when the resources described in the CloudFormation template are provisioned, successfully provisioned resources must be preserved. The developer must provision and update the CloudFormation stack by using the AWS CLI.Which solution will meet these requirements?

Accepted Answer

Add a -disable-roll back command line option to the create-stack command and the update-stack command

Answer

Add an --enable-terminal ion-protection command line option to the create-stack command and the update-stack command.

Answer

Add a ---parameters ParameterKey=P reserve Resources. ParameterVaIue=True command line option to the create-stack command and the update-stack command.

Answer

Add a -tags Key=PreserveResources.VaIue=True command line option to the create-stack command and the update-stack command.

Question 31

A developer is receiving HTTP 400: ThrottlingException errors intermittently when calling the Amazon CloudWatch API. When a call fails, no data is retrieved.What best practice should first be applied to address this issue?

Accepted Answer

Retry the call with exponential backoff.

Answer

Contact AWS Support for a limit increase.

Answer

Use the AWS CLI to get the metrics.

Answer

Analyze the applications and remove the API call.

Question 32

A developer needs to troubleshoot an AWS Lambda function in a development environment. The Lambda function is configured in VPC mode and needs to connect to an existing Amazon RDS for SOL Server DB instance. The DB instance is deployed in a private subnet and accepts connections by using port 1433.When the developer tests the function, the function reports an error when it tries to connect to the database.Which combination of steps should the developer take to diagnose this issue? (Select TWO.)

Accepted Answer

Check that the function's security group has outbound access on port 1433 to the DB instance's security group. Check that the DB instance's security group has inbound access on port 1433 from the function's security group.

Accepted Answer

Check that the function's execution rote permissions include ec2: CreateNetworklnterface. ec2: DescribeNetworklnterfaces. and ec2: DeleteNetworklnterface.

Answer

Check that the function's security group has Inbound access on port 1433 from the DB Instance's security group. Check that the DB instance's security group has outbound access on port 1433 to the function's security group.

Answer

Check that the VPC is set up for a NAT gateway. Check that the DB instance has the public access option turned on.

Answer

Check that the function's execution role permissions include rds:DescribeDBInstances, rds: ModifyDB Instance, and rds:DescribeDBSecurityGroups for the DB instance.

Question 33

A developer is building an application on AWS. The application has an Amazon API Gateway API that sends requests to an AWS Lambda function. The API is experiencing increased latency because the Lambda function has limited available CPU to fulfill the requests.Before the developer deploys the API into production, the developer must configure the Lambda function to have more CPU.Which solution will meet this requirement?

Accepted Answer

Increase the amount of memory that is allocated to the Lambda function.

Answer

Increase the virtual CPU (vCPU) cores quota of the Lambda function.

Answer

Increase the ephemeral storage size of the Lambda function.

Answer

Increase the timeout value of the Lambda function.

Question 34

A company caches session information for a web application in an Amazon DynamoDB table. The company wants an automated way to delete old items from the table.What is the simplest way to do this?

Accepted Answer

Add an attribute with the expiration time; enable the Time To Live feature based on that attribute.

Answer

Write a script that deletes old records; schedule the script as a cron job on an Amazon EC2 instance.

Answer

Each day, create a new table to hold session data; delete the previous day's table.

Answer

Add an attribute with the expiration time; name the attribute ItemExpiration.

Question 35

A company requires that all applications running on Amazon EC2 use 1AM roles to gam access to AWS services. A developer is modifying an application that currently relies on 1AM user access keys stored in environment variables to access Amazon DynamoDB tables using boto, the AWS SDK for Python.The developer associated a role with the same permissions as the 1AM user to the EC2 instance, then deleted the 1AM user. When the application was restarted, the AWSAccess Denied Exception messages started appearing in the application logs. The developer was able to use their personal account on the server to run DynamoDB API commands using the AWS CLI.What is the MOST likely cause of the exception?

Accepted Answer

Disabled environment variable credentials are still being used by the application.

Answer

1AM policies might take a few minutes to propagate to resources.

Answer

The AWS SDK does not support credentials obtained using an instance role.

Answer

The instance's security group does not allow access to http://169.254.169.254.

Question 36

A developer wants the ability to roll back to a previous version of an AWS Lambda function in the event of errors caused by a new deployment. How can the developer achieve this with MINIMAL impact on users?

Accepted Answer

Change the application to use an alias that points to the current version. Deploy the new version of the code Update the alias to use the newly deployed version. If too many errors are encountered, point the alias back to the previous version.

Answer

Change the application to use an alias that points to the current version. Deploy the new version of the code. Update the alias to direct 10% of users to the newly deployed version. If too many errors are encountered, send 100% of traffic to the previous version

Answer

Do not make any changes to the application. Deploy the new version of the code. If too many errors are encountered, point the application back to the previous version using the version number in the Amazon Resource Name (ARN).

Answer

Create three aliases: new, existing, and router. Point the existing alias to the current version. Have the router alias direct 100% of users to the existing alias. Update the application to use the router alias. Deploy the new version of the code. Point the new alias to this version. Update the router alias to direct 10% of users to the new alias. If too many errors are encountered, send 100% of traffic to the existing alias.

Question 37

A company has an online web application that includes a product catalog. The catalog is stored in an Amazon S3 bucket that is named DOC-EXAMPLE-BUCKET. The application must be able to list the objects in the S3 bucket and must be able to download objects through an 1AM policy.Which policy allows MINIMUM access to meet these requirements? Amazon DVA-C02 image Question 237 120807 10232024000527000000

Amazon DVA-C02 image Question 237 120807 10232024000527000000

Accepted Answer

Option A

Answer

Option B

Answer

Option C

Answer

Option D

Question 38

A developer is building an application that uses an AWS Lambda function to process data. The application requires minimum latency. The Lambda function must have predictable function start times. All setup activities for the execution environment must happen before invocation of the Lambda function.Which solution will meet these requirements?

Accepted Answer

Publish a new version of the Lambda function. Configure provisioned concurrency for the Lambda function with the required minimum number of execution environments.

Answer

Increase the memory of the Lambda function to the maximum amount. Configure an Amazon EventBridge rule to schedule invocations of the Lambda function every minute to keep the execution environment active.

Answer

Optimize the static initialization code that runs when a new execution environment is prepared for the first time. Decrease and compress the size of the Lambda function package and the imported libraries and dependencies.

Answer

Increase the reserved concurrency of the Lambda function to the maximum value for unreserved account concurrency. Run any setup activities manually before the initial invocation of the Lambda function.

Question 39

A company uses an AWS Lambda function to transfer files from an Amazon S3 bucket to the company's SFTP server. The Lambda function connects to the SFTP server by using credentials such as username and password. The company uses Lambda environment variables to store these credentials.A developer needs to implement encrypted username and password credentials.Which solution will meet these requirements?

Accepted Answer

Move the user credentials from Lambda environment variables to AWS Systems Manager Parameter Store.

Answer

Remove the user credentials from the Lambda environment. Implement 1AM database authentication.

Answer

Move the user credentials from Lambda environment variables to AWS Key Management Service (AWS KMS).

Answer

Move the user credentials from the Lambda environment to an encrypted .txt file. Store the file in an S3 bucket.

Question 40

A developer needs to modify an application architecture to meet new functional requirements. Application data is stored in Amazon DynamoDB and processed tor analysis in a nightly batch. The system analysts do not want to wait until the next day to view the processed data and have asked to have it available in near-real time.Which application architecture pattern would enable the data to be processed as it is received?

Accepted Answer

Event driven

Answer

Client-server d riven

Answer

Fan-out driven

Answer

Schedule driven

Amazon DVA-C02 Practice Test 6

Amazon DVA-C02 Practice Tests