Quiz IT certification exam

Question 1

A company is building a serverless application that uses AWS Lambda functions. The company needs to create a set of test events to test Lambda functions in a development environment. The test events will be created once and then will be used by all the developers in an 1AM developer group. The test events must be editable by any of the 1AM users in the 1AM developer group.

Which solution will meet these requirements?

Become a Premium Member for full access

Unlock Premium Member

Accepted Answer

Create the test events. Configure the event sharing settings to make the test events shareable.

Answer

Create and store the test events in Amazon S3 as JSON objects. Allow S3 bucket access to all 1AM users.

Answer

Create and store the test events in Amazon DynamoDB. Allow access to DynamoDB by using 1AM roles.

Answer

Create the test events. Configure the event sharing settings to make the test events private.

Question 2

A developer has deployed an AWS Lambda function that is subscribed to an Amazon Simple Notification Service {Amazon SNS) topic. The developer must implement a solution to add a record of each Lambda function invocation to an Amazon Simple Queue Service {Amazon SQS) queue.Which solution will meet this requirement?

Accepted Answer

Add a single asynchronous invocation destination to the Lambda function to capture successful invocations. Configure the SQS queue as the destination. Create an Amazon CloudWatch alarm based on the DestinationDeliveryFailures metric to catch any message that cannot be delivered.

Answer

Configure the SQS queue as a dead-letter queue for the Lambda function.

Answer

Create code that uses the AWS SDK to call the SQS SendMessage operation to add the invocation details to the SQS queue. Add the code to the end of the Lambda function.

Answer

Add two asynchronous invocation destinations to the Lambda function: one destination for successful invocations and one destination for failed invocations. Configure the SQS queue as the destination for each type. Create an Amazon CloudWatch alarm based on the DestinationDeliveryFailures metric to catch any message that cannot be delivered.

Question 3

A development learn has an Amazon API Gateway REST API that is backed by an AWS Lambda function.Users have reported performance issues for the Lambda function. The development team identified the source of the issues as a cold start of the Lambda function. The development team needs to reduce the time needed for the Lambda function to initialize.Which solution will meet this requirement?

Accepted Answer

Configure provisioned concurrency for the Lambda function.

Answer

Change the Lambda concurrency lo reserved concurrency.

Answer

Increase the timeout of the Lambda function.

Answer

Increase the memory allocation of the Lambda function.

Question 4

A developer is creating a stock trading application. The developer needs a solution to send text messages to application users to confirmation when a trade has been completed.The solution must deliver messages in the order a user makes stock trades. The solution must not send duplicate messages.Which solution will meet these requirements?

Accepted Answer

Configure a pipe in Amazon EventBridge Pipes. Connect the application to the pipe as a source. Configure the pipe to use each user's mobile phone number as a target. Configure the pipe to send incoming events to the users.

Answer

Configure the application to publish messages to an Amazon Data Firehose delivery stream. Configure the delivery stream to have a destination of each user's mobile phone number that is passed in the trade confirmation message.

Answer

Create an Amazon Simple Queue Service (Amazon SQS) FIFO queue. Use the SendMessageln API call to send the trade confirmation messages to the queue. Use the SendMessageOut API to send the messages to users by using the information provided in the trade confirmation message.

Answer

Create an Amazon Simple Notification Service (SNS) FIFO topic. Configure the application to use the AWS SDK to publish notifications to the SNS topic to send SMS messages to the users.

Question 5

A company offers a business-to-business software service that runs on dedicated infrastructure deployed in each customer's AWS account. Before a feature release, the company needs to run integration tests on real AWS test infrastructure. The test infrastructure consists of Amazon EC2 instances and an Amazon RDS database.A developer must set up a continuous delivery process that will provision the test infrastructure across the different AWS accounts. The developer then must run the integration tests.Which solution will meet these requirements with the LEAST administrative effort?

Accepted Answer

Use AWS CodePipeline with AWS CloudFormation StackSets to deploy the infrastructure. Use AWS CodeBuild to run the tests.

Answer

Use AWS CodeDeploy with AWS CloudFormation StackSets to deploy the infrastructure. Use Amazon CodeGuru to run the tests.

Answer

Use AWS CodePipeline with AWS CloudFormation change sets to deploy the infrastructure. Use a CloudFormation custom resource to run the tests.

Answer

Use AWS Serverless Application Model (AWS SAM) templates with AWS CloudFormation change sets to deploy the infrastructure. Use AWS CodeDeploy to run the tests.

Question 6

A developer is making changes to a custom application that uses AWS Elastic Beanstalk.Which solutions will update the Elastic Beanstalk environment with the new application version after the developer completes the changes? (Select TWO.)

Accepted Answer

Package the application code into a .zip file. Use the AWS Management Console to upload the .zip file and deploy the packaged application.

Accepted Answer

Package the application code into a .zip file. Use the AWS CLI to create a new application version from the .zip file and to update the environment.

Answer

Package the application code into a .tar file. Use the AWS Management Console to create a new application version from the .tar file. Update the environment by using the AWS CLI.

Answer

Package the application code into a .tar file. Use the AWS Management Console to upload the .tar file and deploy the packaged application.

Answer

Package the application code into a .zip file. Use the AWS Management Console to create a new application version from the .zip file. Rebuild the environment by using the AWS CLI.

Question 7

A company has an AWS Step Functions state machine named myStateMachine. The company configured a service role for Step Functions. The developer must ensure that only the myStateMachine state machine can assume the service role.

Accepted Answer

'Condition': { 'ArnLike': { 'aws ':'arn:aws:states:ap-south-1:111111111111:stateMachine ' } }

Answer

' Condition': { 'ArnLike': { 'aws ':'arn:aws:states:ap-south-1:*:stateMachine ' } }

Question 8

A company stores customer credit reports in an Amazon S3 bucket. An analytics service uses standard Amazon S3 GET requests to access the reports. A developer must implement a solution to redact personally identifiable information (PII) from the reports before the reports reach the analytics service.

Accepted Answer

Set up an S3 Object Lambda function. Attach the function to an S3 Object Lambda Access Point. Program the function to call a PII redaction API.

Answer

Load the S3 objects into Amazon Redshift by using a COPY command. Implement dynamic data masking. Refactor the analytics service to read from Amazon Redshift.

Answer

Use AWS Key Management Service (AWS KMS) to implement encryption in the S3 bucket. Re-upload all the existing S3 objects. Give the kms permission to the analytics service.

Answer

Create an Amazon Simple Notification Service (Amazon SNS) topic. Implement message data protection. Refactor the analytics service to publish data access requests to the SNS topic.

Question 9

A company is using the AWS Serverless Application Model (AWS SAM) to develop a social media application. A developer needs a quick way to test AWS Lambda functions locally by using test event payloads. The developer needs the structure of these test event payloads to match the actual events that AWS services create.

Accepted Answer

Use the sam local generate-event command to create test payloads for local testing.

Answer

Create shareable test Lambda events. Use these test Lambda events for local testing.

Answer

Store manually created test event payloads locally. Use the sam local invoke command with the file path to the payloads.

Answer

Store manually created test event payloads in an Amazon S3 bucket. Use the sam local invoke command with the S3 path to the payloads.

Question 10

A developer is updating an Amazon API Gateway REST API to have a mock endpoint. The developer wants to update the integration request mapping template so the endpoint will respond to mock integration requests with specific HTTP status codes based on various conditions.

Accepted Answer

{ if( $context.integration.status ) 'statusCode': 200 else 'statusCode': 500 end }

Answer

{ if( $input.params('integration') == 'mock' ) 'statusCode': 404 else 'statusCode': 500 end }

Answer

{ if( $input.params('scope') == 'internal' ) 'statusCode': 200 else 'statusCode': 500 end }

Answer

{ if( $input.path('integration') ) 'statusCode': 200 else 'statusCode':404 end }

Question 11

A developer is creating an AWS Lambda function that needs network access to private resources in a VPC.

Accepted Answer

Attach the Lambda function to the VPC through private subnets. Create a security group that allows network access to the private resources. Associate the security group with the Lambda function.

Answer

Configure the Lambda function to route traffic through a VPN connection. Create a security group that allows network access to the private resources. Associate the security group with the Lambda function.

Answer

Configure a VPC endpoint connection for the Lambda function. Set up the VPC endpoint to route traffic through a NAT gateway.

Answer

Configure an AWS PrivateLink endpoint for the private resources. Configure the Lambda function to reference the PrivateLink endpoint.

Question 12

A web application is using Amazon Kinesis Data Streams for clickstream data that may not be consumed for up to 12 hours.How can the developer implement encryption at rest for data within the Kinesis Data Streams?

Accepted Answer

Use Amazon Kinesis Consumer Library.

Answer

Enable SSL connections to Kinesis.

Answer

Encrypt the data once it is at rest with a Lambda function.

Answer

Enable server-side encryption in Kinesis Data Streams.

Question 13

A developer is building a web and mobile application for two types of users: regular users and guest users. Regular users are required to log in, but guest users do not log in. Users should see only their data, regardless of whether they authenticate. Users need AWS credentials before they can access AWS resources.

Accepted Answer

Use an Amazon Cognito identity pool to generate temporary AWS credentials that are linked to an unauthenticated role that has access to the required resources.

Answer

Set up an IAM user that has permissions to the required resources. Hardcode the IAM credentials in the web and mobile application.

Answer

Generate temporary keys that are stored in AWS KMS. Use the temporary keys to access the required resources.

Answer

Generate temporary credentials. Store the temporary credentials in AWS Secrets Manager. Use the temporary credentials to access the required resources.

Question 14

A developer maintains a serverless application that uses an Amazon API Gateway REST API to invoke an AWS Lambda function by using a non-proxy integration. The Lambda function returns data, which is stored in Amazon DynamoDB.Several application users begin to receive intermittent errors from the API. The developer examines Amazon CloudWatch Logs for the Lambda function and discovers several ProvisionedThroughputExceededException errors.The developer needs to resolve the errors and ensure that the errors do not reoccur.

Accepted Answer

Use provisioned capacity mode for the DynamoDB table, and assign sufficient capacity units. Configure the Lambda function to retry requests with exponential backoff.

Answer

Update the REST API to send requests on an Amazon SQS queue. Configure the Lambda function to process requests from the queue.

Answer

Configure a usage plan for the REST API.

Answer

Update the REST API to invoke the Lambda function asynchronously.

Question 15

A company has an application that consists of different microservices that run inside an AWS account. The microservices are running in containers inside a single VPC. The number of microservices is constantly increasing. A developer must create a central logging solution for application logs.

Accepted Answer

Create a different Amazon CloudWatch Logs stream for each microservice.

Answer

Create an AWS CloudTrail trail to log all the API calls.

Answer

Configure VPC Flow Logs to track the communications between the microservices.

Answer

Use AWS Cloud Map to map the interactions of the microservices.

Question 16

A company has a website that is developed in PHP and is launched using AWS Elastic Beanstalk. There is a new version of the website that needs to be deployed in the Elastic Beanstalk environment. The company cannot tolerate having the website offline if an update fails. Deployments must have minimal impact and rollback as soon as possible.

Accepted Answer

Immutable

Answer

All at once

Answer

Rolling

Answer

Snapshots

Question 17

A company hosts a batch processing application on AWS Elastic Beanstalk with instances that run the most recent version of Amazon Linux. The application sorts and processes large datasets. In recent weeks, the application's performance has decreased significantly during a peak period for traffic. A developer suspects that the application issues are related to the memory usage. The developer checks the Elastic Beanstalk console and notices that memory usage is not being tracked.How should the developer gather more information about the application performance issues?

Accepted Answer

Configure the Amazon CloudWatch agent to track the memory usage of the instances.

Answer

Configure the Amazon CloudWatch agent to push logs to Amazon CloudWatch Logs by using port 443.

Answer

Configure the Elastic Beanstalk .ebextensions directory to track the memory usage of the instances.

Answer

Configure an Amazon CloudWatch dashboard to track the memory usage of the instances.

Question 18

A company is creating a new application that gives users the ability to upload and share short video files. The average size of the video files is 10 MB. After a user uploads a file, a message needs to be placed into an Amazon Simple Queue Service (Amazon SQS) queue so the file can be processed. The files need to be accessible for processing within 5 minutes.Which solution will meet these requirements MOST cost-effectively?

Accepted Answer

Write the files to Amazon S3 Standard. Add the S3 location of the files to the SQS queue.

Answer

Write the files to Amazon S3 Glacier Deep Archive. Add the S3 location of the files to the SQS queue.

Answer

Write the files to an Amazon Elastic Block Store (Amazon EBS) General Purpose SSD volume. Add the EBS location of the files to the SQS queue.

Answer

Write messages that contain the contents of the uploaded files to the SQS queue.

Question 19

A developer is building a three-tier web application that should be able to handle a minimum of 5000 requests per minute. Requirements state that the web tier should be completely stateless while the application maintains session state for the users.How can session data be externalized, keeping latency at the LOWEST possible value?

Accepted Answer

Create an Amazon ElastiCache (Memcached) cluster, then implement session handling at the application level to leverage the cluster for session data storage.

Answer

Create an Amazon RDS instance, then implement session handling at the application level to leverage a database inside the RDS database instance for session data storage.

Answer

Implement a shared file system solution across the underlying Amazon EC2 instances, then implement session handling at the application level to leverage the shared file system for session data storage.

Answer

Create an Amazon DynamoDB table, then implement session handling at the application level to leverage the table for session data storage.

Question 20

A company has an AWS Step Functions state machine named myStateMachine. The company configured a service role for Step Functions. The developer must ensure that only the myStateMachine state machine can assume the service role.Which statement should the developer add to the trust policy to meet this requirement?

Accepted Answer

'Condition': { 'ArnLike': { 'aws:SourceArn':'urn:aws:states:ap-south-1:111111111111:stateMachine:myStateMachine' } }

Answer

'Condition': { 'ArnLike': { 'aws:SourceArn':'arn:aws:states:ap-south-1:*:stateMachine:myStateMachine' } }

Answer

'Condition': { 'StringEquals': { 'aws:SourceAccount': '111111111111' } }

Answer

'Condition': { 'StringNotEquals': { 'aws:SourceArn':'arn:aws:states:ap-south-1:111111111111:stateMachine:myStateMachine' } }

Question 21

A company runs a web application on Amazon EC2 instances behind an Application Load Balancer. The application uses Amazon DynamoDB as its database. The company wants to ensure high performance for reads and writes.Which solution will meet these requirements MOST cost-effectively?

Accepted Answer

Configure auto-scaling for the DynamoDB table with a target utilization of 70%. Set the minimum and maximum capacity units based on the expected workload.

Answer

Use DynamoDB on-demand capacity mode for the table. Specify a maximum throughput higher than the expected peak read and write capacity units.

Answer

Use DynamoDB provisioned throughput mode for the table. Create an Amazon CloudWatch alarm on the ThrottledRequests metric. Invoke an AWS Lambda function to increase provisioned capacity.

Answer

Create an Amazon DynamoDB Accelerator (DAX) cluster. Configure the application to use the DAX endpoint.

Question 22

A company regularly receives route status updates from its delivery trucks as events in Amazon EventBridge. The company is building an API-based application in a VPC that will consume and process the events to create a delivery status dashboard. The API application must not be available by using public IP addresses because of security and compliance requirements.How should the company send events from EventBridge to the API application?

Accepted Answer

Create an AWS Lambda function that runs in the same VPC as the API application. Configure the function as an EventBridge target. Use the function to send events to the API.

Answer

Create an internet-facing Application Load Balancer (ALB) in front of the API application. Associate a security group with rules that block access from all external sources except for EventBridge. Configure the ALB as an EventBridge target.

Answer

Create an internet-facing Network Load Balancer (NLB) in front of the API application. Associate a security group with rules that block access from all external sources except for EventBridge. Configure the NLB as an EventBridge target.

Answer

Use the application API endpoint in the VPC as a target for EventBridge. Send events directly to the application API endpoint from EventBridge.

Question 23

A company has a large amount of data in an Amazon DynamoDB table. A large batch of data is appended to the table once each day. The company wants a solution that will make all the existing and future data in DynamoDB available for analytics on a long-term basis.Which solution meets these requirements with the LEAST operational overhead?

Accepted Answer

Configure DynamoDB incremental exports to Amazon S3.

Answer

Configure Amazon DynamoDB Streams to write records to Amazon S3.

Answer

Configure Amazon EMR to copy DynamoDB data to Amazon S3.

Answer

Configure Amazon EMR to copy DynamoDB data to Hadoop Distributed File System (HDFS).

Question 24

An ecommerce company is planning to migrate an on-premises Microsoft SQL Server database to the AWS Cloud. The company needs to migrate the database to SQL Server Always On availability groups. The cloud-based solution must be highly available.Which solution will meet these requirements?

Accepted Answer

Deploy three Amazon EC2 instances with SQL Server across three Availability Zones. Use Amazon FSx for Windows File Server as the storage tier.

Answer

Deploy three Amazon EC2 instances with SQL Server across three Availability Zones. Attach one Amazon Elastic Block Store (Amazon EBS) volume to the EC2 instances.

Answer

Migrate the database to Amazon RDS for SQL Server. Configure a Multi-AZ deployment and read replicas.

Answer

Deploy three Amazon EC2 instances with SQL Server across three Availability Zones. Use Amazon S3 as the storage tier.

Question 25

A social media application is experiencing high volumes of new user requests after a recent marketing campaign. The application is served by an Amazon RDS for MySQL instance. A solutions architect examines the database performance and notices high CPU usage and many 'too many connections' errors that lead to failed requests on the database. The solutions architect needs to address the failed requests.Which solution will meet this requirement?

Accepted Answer

Deploy an RDS Proxy. Configure the application to use the RDS Proxy.

Answer

Deploy an Amazon DynamoDB Accelerator (DAX) cluster. Configure the application to use the DAX cluster.

Answer

Migrate the database to an Amazon RDS for PostgreSQL instance.

Answer

Deploy an Amazon ElastiCache (Redis OSS) cluster. Configure the application to use the ElastiCache cluster.

Question 26

A company hosts a stateless web application with low data storage in a single AWS Region. The company wants to increase the resiliency of the application to include a multi-Region presence. The company wants to set the recovery time objective (RTO) and recovery point objective (RPO) to hours. The company needs a low-cost and low-complexity disaster recovery (DR) strategy.Which DR strategy should the company use?

Accepted Answer

Pilot light

Answer

Warm standby

Answer

Backup and restore

Answer

Multi-site active-active

Question 27

A developer is building an application that uses an Amazon RDS for PostgreSQL database. To meet security requirements, the developer needs to ensure that data is encrypted at rest. The developer must be able to rotate the encryption keys on demand.

Accepted Answer

Create a symmetric customer managed AWS KMS key. Use the key to encrypt the database.

Answer

Use an AWS KMS managed encryption key to encrypt the database.

Answer

Create a 256-bit AES-GCM encryption key. Store the key in AWS Secrets Manager, and enable managed rotation. Use the key to encrypt the database.

Answer

Create a 256-bit AES-GCM encryption key. Store the key in AWS Secrets Manager. Configure an AWS Lambda function to perform key rotation. Use the key to encrypt the database.

Question 28

A developer is migrating a containerized application from an on-premises environment to an Amazon ECS cluster.In the on-premises environment, the container uses a Docker file to store the application. Service dependency configurations such as databases, caches, and storage volumes are stored in a docker-compose.yml file.Both files are located at the top level of the code base that the developer needs to containerize. When the developer deploys the code to Amazon ECS, the instructions from the Docker file are carried out. However, none of the configurations from docker-compose.yml are applied.The developer needs to resolve the error and ensure the configurations are applied.

Accepted Answer

Add the details from the docker-compose.yml file to an ECS task definition. Associate the task with the ECS cluster.

Answer

Store the file path for the docker-compose.yml file as a Docker label. Add the label to the ECS cluster's container details.

Answer

Create a namespace in the ECS cluster. Associate the docker-compose.yml file to the namespace.

Answer

Update the service type of the ECS cluster to REPLICA, and redeploy the stack.

Question 29

A developer created a Node.js-based AWS Lambda function by using a container image of an AWS OS-only base image. There is a new security patch for Node.js that must be patched to the new Lambda function.Which solution will meet this requirement?

Accepted Answer

Rebuild the Lambda container code with the latest Node.js patch version. Publish a new version of the Lambda function.

Answer

Set the runtime update mode of the Lambda function to Auto.

Answer

Patch the runtime version by redeploying the same version of the Lambda function.

Answer

Rebuild the Lambda container code with the latest version of the AWS OS base image. Publish a new version of the Lambda function.

Question 30

A developer is preparing to deploy an AWS CloudFormation stack for an application from a template that includes an IAM user. The developer needs to configure the application's resources to retain the IAM user after successful creation. However, the developer also needs to configure the application to delete the IAM user if the stack rolls back.

Accepted Answer

Update CloudFormation template with the following deletion policy: AWSTemplateFormatVersion: '2010-09-09' Resources: appUser: Type: AWS::IAM::User DeletionPolicy: RetainExceptOnCreate

Answer

Update CloudFormation template with the following deletion policy: AWSTemplateFormatVersion: '2010-05-09' Resources: appUser: Type: AWS::IAM::User DeletionPolicy: Retain

Answer

Update the CloudFormation service role to include the following policy: { 'Version': '2012-10-17', 'Statement': [{ 'Effect': 'Allow', 'Action': ['cloudformation:UpdateTerminationProtection'], 'Resource': '*' }] }

Answer

Update the stack policy to include the following statements: { 'Statement': [{ 'Effect': 'Deny', 'Action': 'Update:*', 'Principal': '*', 'Resource': '*', 'Condition': { 'StringEquals': { 'ResourceType': 'AWS::IAM::User' } } }] }

Question 31

A healthcare company uses AWS Amplify to host a patient management system. The system uses Amazon API Gateway to expose RESTful APIs. The backend logic of the system is handled by AWS Lambda functions.One of the Lambda functions receives patient data that includes personally identifiable information (PII). The Lambda function sends the patient data to an Amazon DynamoDB table. The company must encrypt all patient data at rest and in transit before the data is stored in DynamoDB.

Accepted Answer

Configure the Lambda function to use AWS KMS keys with the AWS Database Encryption SDK to encrypt the patient data before sending the data to DynamoDB.

Answer

Use AWS managed AWS KMS keys to encrypt the data in the DynamoDB table.

Answer

Configure a DynamoDB stream on the table to invoke a Lambda function. Configure the Lambda function to use an AWS KMS key to encrypt the DynamoDB table and to update the table.

Answer

Use an AWS Step Functions workflow to transfer the data to an Amazon SQS queue. Configure a Lambda function to encrypt the data in the queue before sending the data to the DynamoDB table.

Question 32

A developer is using an AWS CloudFormation template to create a pipeline in AWS CodePipeline. The template creates an Amazon S3 bucket that the pipeline references in a source stage. The template also creates an AWS CodeBuild project for a build stage. The pipeline sends notifications to an Amazon SNS topic. Logs for the CodeBuild project are stored in Amazon CloudWatch Logs.The company needs to ensure that the pipeline's artifacts are encrypted with an existing customer-managed AWS KMS key. The developer has granted the pipeline permissions to use the KMS key.Which additional step will meet these requirements?

Accepted Answer

Apply an S3 bucket policy that ensures the pipeline sends only encrypted objects to the S3 bucket.

Answer

Create an Amazon S3 gateway endpoint that the pipeline can access.

Answer

In the CloudFormation template, use the KMS key to encrypt the logs in CloudWatch Logs.

Answer

Configure the notification topic to use the existing KMS key to enable encryption with the existing KMS key.

Question 33

A developer previously deployed an AWS Lambda function as a .zip package. The developer needs to deploy the Lambda function as a container.

Accepted Answer

Create an Amazon ECR repository in the same AWS Region as the Lambda function. Package the Lambda function into a container image. Build the image and upload it to the Amazon ECR repository. Update the existing Lambda function configuration to specify the repository URI and container image tag.

Answer

Create an AWS SAM template that defines the Lambda function and its resources as code. Include a container image in the template, and store the container image in an Amazon S3 bucket. Deploy the AWS SAM template. Specify the S3 bucket URI.

Answer

Create an AWS CloudFormation template that defines the Lambda function and its resources as code. Include a container image in the template, and store the image in an Amazon S3 bucket. Deploy the CloudFormation template. Specify the S3 bucket URI.

Answer

Create an Amazon ECR repository in the same AWS Region as the Lambda function. Build the image and upload it to the Amazon ECR repository. Update the existing Lambda function to use the new image by specifying the repository URI.

Question 34

A company has developed an application that uses AWS Lambda functions to process messages from an Amazon SQS queue. One of the Lambda functions makes a call to an external API that is expected to encounter temporary service unavailability.A developer needs to configure the function to retry failed messages from an Amazon SQS dead-letter queue. The developer notices that the Lambda function is re-processing some messages in the queue more than once.Which solution will resolve this issue?

Accepted Answer

Set the visibility timeout parameter at the queue level. Configure the Lambda function to delete processed messages from the queue.

Answer

Set a message retention period for each message. Configure the Lambda function to add a MessageId to each message.

Answer

Set a receive message wait time for each message. Configure the Lambda function to add a MessageId to each message.

Answer

Set the delivery delay parameter at the queue level. Configure the Lambda function to delete processed messages from the queue.

Question 35

A company deploys a new application to AWS. The company is streaming application logs to Amazon CloudWatch Logs. The company's development team must receive notification by email when the word 'ERROR' appears in any log lines. A developer sets up an Amazon SNS topic and subscribes the development team to the topic.What should the developer do next to meet the requirements?

Accepted Answer

Select the appropriate log group. Create a CloudWatch metric filter with 'ERROR' as the search term. Create an alarm on this metric that notifies the SNS topic when the metric is 1 or higher.

Answer

In CloudWatch Logs Insights, select the appropriate log group. Create a metric query to search for the term 'ERROR' in the logs. Create an alarm on this metric that notifies the SNS topic when the metric is 1 or higher.

Answer

Select the appropriate log group. Create an SNS subscription filter with 'ERROR' as the filter pattern. Select the SNS topic as the destination.

Answer

Create a CloudWatch alarm that includes 'ERROR' as a filter pattern, a log group dimension that defines the appropriate log group, and a destination that notifies the SNS topic.

Question 36

A company is building a content authoring application. The application has multiple user groups, such as content creator, reviewer, approver, and administrator. The company needs to assign users fine-grained permissions for specific parts of the application.The company needs a solution to configure, maintain, and analyze user permissions. The company wants a solution that can be easily adapted to work with newer applications in the future. The company must use a third-party OpenID Connect (OIDC) identity provider (IdP) to authenticate users.

Accepted Answer

Use Amazon Verified Permissions to set up user permissions. Integrate Verified Permissions with a third-party IdP. Configure the application to request authorization decisions from Verified Permissions.

Answer

Configure an Amazon Cognito identity pool for the application. Use the identity pool identities within the application to manage user permissions.

Answer

Configure the application to check user permissions upon request. Configure the application logic to manage user permissions.

Answer

Set up an IAM role for each user group. Assign users appropriate IAM roles. Configure the application to determine appropriate permissions for each user based on the user's IAM role.

Question 37

A developer runs an application that displays scores for sports games on Amazon EC2 instances. The application uses a Redis client to retrieve the scores from an Amazon ElastiCache (Redis OSS) cluster.The developer observes increased latency during operations on the cache because of connection failures to the cluster. The developer needs to resolve the latency issues.

Accepted Answer

Configure the Redis client in the application to persist connections to the cluster by implementing a connection pool.

Answer

Configure the Redis client to use an exponential backoff retry strategy to establish cache connections.

Answer

Store the scores in the application's memory. Perform bulk set operations on the scores that are stored in memory.

Answer

Deploy more nodes in the ElastiCache cluster. Update the Redis client to discover the new nodes.

Question 38

A developer is using AWS CodeDeploy to automate a company's application deployments to Amazon EC2.Which application specification file properties are required to ensure the software deployments do not fail? (Select TWO.)

Accepted Answer

The file must be a YAML-formatted file named appspec.yml.

Accepted Answer

The file must be placed in the root of the directory structure of the application's source code.

Answer

The file must be a JSON-formatted file named appspec.json.

Answer

The file must be stored in AWS CodeBuild and referenced from the application's source code.

Answer

The file must be stored in Amazon S3 and referenced from the application's source code.

Question 39

A developer is creating an ecommerce workflow in an AWS Step Functions state machine that includes a HTTP Task state. The task passes shipping information and order details to an endpoint.The developer needs to test the workflow to confirm that the HTTP headers and body are correct and that the responses meet expectations.

Accepted Answer

Use the TestState API to invoke only the HTTP Task. Set the inspection level to TRACE.

Answer

Use the TestState API to invoke the state machine. Set the inspection level to DEBUG.

Answer

Use the data flow simulator to invoke only the HTTP Task. View the request and response data.

Answer

Change the log level of the state machine to ALL. Run the state machine.

Question 40

A bookstore has an ecommerce website that stores order information in an Amazon DynamoDB table named BookOrders. The DynamoDB table contains approximately one million records.The table uses OrderID as a partition key. There are no other indexes.A developer wants to build a new reporting feature to retrieve all records from the table for a specified customer, based on a CustomerID property.

Accepted Answer

Create a DynamoDB global secondary index (GSI) on the table. Use CustomerID as the partition key. Use the specified CustomerID value to run a query on the table.

Answer

Create a DynamoDB global secondary index (GSI) on the table. Use CustomerID as the sort key. Use a filter expression to perform a scan operation on the table to match on the specified CustomerID value.

Answer

Create a DynamoDB local secondary index (LSI) on the table. Use CustomerID as the sort key. Run a PartiQL query on the table with a SELECT statement where CustomerID equals the specified CustomerID value.

Answer

Create a DynamoDB local secondary index (LSI) on the table. Use CustomerID as the partition key. Use the specified CustomerID value to run a query on the table.

Amazon DVA-C02 Practice Test 8

Amazon DVA-C02 Practice Tests

Amazon DVA-C02 Practice Test 8

Question

Amazon DVA-C02 Practice Tests

Practice Tests