Quiz
AWS Developer Set 4
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (20)
1A developer is completing the configuration for an Amazon ECS cluster. Which task placement strategy will MINIMIZE the number of instances in use?
- Abinpack
- Brandom
- Cspread
- DCanary
2A company is using AWS Lambda for processing small images that are uploaded to Amazon S3. This was working well until a
large number of small files (several thousand) were recently uploaded and an error was generated by AWS Lambda (status code
429).
What is the MOST likely cause?- AThe concurrency execution limit for the account has been exceeded
- BAmazon S3 could not handle the sudden burst in traffic
- CLambda cannot process multiple files simultaneously
- DThe event source mapping has not been configured
3A developer is creating a serverless application that will use a DynamoDB table. The average item size is 7KB. The application
will make 3 strongly consistent reads/sec, and 1 standard write/sec. How many RCUs/WCUs are required?- A3 RCU and 7 WCU
- B6 RCU and 7 WCU
- C6 RCU and 14 WCU
- D12 RCU and 14 WCU
4A developer is building a multi-tier web application that accesses an Amazon RDS MySQL database. The application must use a
credentials to connect and these need to be stored securely. The application will take care of secret rotation.
Which AWS service represents the LOWEST cost solution for storing credentials?- AAWS IAM with the Security Token Service (STS)
- BAWS Secrets Manager
- CAWS Systems Manager Parameter Store
- DAWS Key Management Service (KMS)
5A mobile application is being developed that will use AWS Lambda, Amazon API Gateway and Amazon DynamoDB. A developer
would like to securely authenticate the users of the mobile application and then grant them access to the API.
What is the BEST way to achieve this?- ACreate a Lambda authorizer in API Gateway
- BCreate a COGNITO_USER_POOLS authorizer in API Gateway
- CCreate a COGNITO_IDENTITY_POOLS authorizer in API Gateway
- DCreate an IAM authorizer in API Gateway
6A developer is preparing the resources for creating a multicontainer Docker environment on AWS Elastic Beanstalk. How can the developer define the Docker containers?
- ADefine the containers in the Dockerrun.aws.json file in JSON format and save at the root of the source directory
- BCreate a Docker.config file and save it in the .ebextensions folder at the root of the source directory
- CDefine the containers in the Dockerrun.aws.json file in YAML format and save at the root of the source directory
- DCreate a buildspec.yml file and save it at the root of the source directory
7A developer is planning to launch as serverless application composed of AWS Lambda, Amazon API Gateway, and Amazon DynamoDB. What is the EASIEST way to deploy the application using simple syntax?
- AUse AWS CloudFormation
- BUse AWS Elastic Beanstalk
- CUse the Serverless Application Model
- DUse the Serverless Application Repository
8A web application has been deployed on AWS. A developer is concerned about exposure to common exploits that could affect
application availability or compromise security. Which AWS service can protect from these threats?- AAWS Web Application Firewall (WAF)
- BAWS CloudFront
- CAmazon Cognito
- DAWS CloudHSM
9A team of developers are adding an API layer to a multicontainer Docker environment running on AWS Elastic Beanstalk. The client-submitted method requests should be passed directly to the backend, without modification.
Which integration type is MOST suitable for this solution?- AAWS
- BHTTP
- CHTTP_PROXY
- DAWS_PROXY
10A company runs a booking system for a medical practice. The AWS SDK is used to communicate with between several AWS services. Due to compliance requirements, the security department has requested that a record is made of all API calls. How can this requirement be met?
- AUse Amazon CloudWatch logs to keep a history of API calls
- BUse AWS X-Ray to trace the API calls and keep a record
- CUse an AWS Lambda to function to continually monitor API calls and log them to an Amazon S3 bucket
- DUse Amazon CloudTrail to keep a history of API calls
11A company is in the process of migrating an application from a monolithic architecture to a microservices-based architecture.
The developers need to refactor the application so that the many microservices can asynchronously communicate with each other in a decoupled manner.
Which AWS services can be used for asynchronous message passing? (Select TWO.)- AAmazon SQS
- BAmazon Kinesis
- CAmazon ECS
- DAWS Lambda
- EAmazon SNS
12A developer needs to implement a caching layer in front of an Amazon RDS database. If the caching layer fails, it is time consuming to repopulate cached data so the solution should be designed for maximum uptime. Which solution is best for this scenario?
- AImplement Amazon ElastiCache Memcached
- BMigrate the database to Amazon RedShift
- CImplement Amazon DynamoDB DAX
- DImplement Amazon ElastiCache Redis
13An application running on a fleet of EC2 instances use the AWS SDK for Java to copy files into several AWS buckets using access
keys stored in environment variables. A Developer has modified the instances to use an assumed IAM role with a more
restrictive policy that allows access to only one bucket.
However, after applying the change the Developer logs into one of the instances and is still able to write to all buckets. What is
the MOST likely explanation for this situation?- AAn IAM inline policy is being used on the IAM role
- BAn IAM managed policy is being used on the IAM role
- CThe AWS CLI is corrupt and needs to be reinstalled
- DThe AWS credential provider looks for instance profile credentials last
14A static website is hosted on Amazon S3 using the bucket name of dctlabs.com. Some HTML pages on the site use JavaScript to download images that are located in the bucket https://dctlabsimages.s3.amazonaws.com/. Users have reported that the images are not being displayed.
What is the MOST likely cause?- ACross Origin Resource Sharing is not enabled on the dctlabsimages bucket
- BThe dctlabsimages bucket is not in the same region as the dctlabs.com bucket
- CAmazon S3 Transfer Acceleration should be enabled on the dctlabs.com bucket
- DCross Origin Resource Sharing is not enabled on the dctlabs.com bucket
15A Developer received the following error when attempting to launch an Amazon EC2 instance using the AWS CLI.
An error occurred (UnauthorizedOperation) when calling the RunInstances operation: You are not authorized to perform this
operation. Encoded authorization failure message: VNVaHFdCohROkbyT_rIXoRyNTp7vXFJCqnGiwPuyKnsSVfWSSGK_06H3vKnrkUa3qx5D40hqj9HEG8kznr04Acmi6lvc8m51tfqtsomFSDylK15x96ZrxMW7MjDJLrMkM0BasPvy8ixo1wi6X2b0C
-J1ThyWU9IcrGd7WbaRDOiGbBhJtKs1z01WSn2rVa5_7sr5PwEKARrC9y5Pl54pmeF6wh7QhSv2pFO0y39WVBajL2GmByFmQ4p8s-6Lcgxy23b4NJdJwWOF4QGxK9HcKof1VTVZ2oIpsIdH6_0t2DI0BTwaIgmaT7ldontI1p7OGz-3wPgXm67x2NVNgaK63zPxjYNbpl32QuXLKUKNlB9DdkSdoLvsuFIvflQOXLPHnZKCWMqrkI87eqKHYpYKyV5c11TIZTAJ3MntTGO_TJ4U9ySYvTzU2LgswYOtKF_O76-
13fryGG5dhgOW5NxwCWBj6WT2NSJvqOeLykAFjR_ET4lM6Dl1XYfQITWCqIzlvlQdLmHJ1jqjp4gW56VcQCdqozLv2UAg8IdrZIXd0O
J047RQcvvN1IyZN0ElL7dR6RzAAQrftoKMRhZQng6THZs8PZM6wep6-yInzwfg8J5_FW6G_PwYqO4VunVtJSTzM_F_8kojGlRmzqy7eCk5or__bIisUoslw
What action should the Developer perform to make this error more human-readable?- AMake a call to AWS KMS to decode the message
- BUse the AWS STS decode-authorization-message API to decode the message
- CUse an open source decoding library to decode the message
- DUse the AWS IAM decode-authorization-message API to decode this message
16A company is developing a game for the Android and iOS platforms. The mobile game will securely store user game history and
other data locally on the device. The company would like users to be able to use multiple mobile devices and synchronize data
between devices.
Which service can be used to synchronize the data across mobile devices without the need to create a backend application?- AAWS Lambda
- BAmazon API Gateway
- CAmazon DynamoDB
- DAmazon Cognito
17An application is using Amazon DynamoDB as its data store and needs to be able to read 200 items per second as eventually
consistent reads. Each item is 12 KB in size.
What value should be set for the table's provisioned throughput for reads?- A300 Read Capacity Units
- B600 Read Capacity Units
- C1200 Read Capacity Units
- D150 Read Capacity Units
18An application uses AWS Lambda to process many files. The Lambda function takes approximately 3 minutes to process each file and does not return any important data. A Developer has written a script that will invoke the function using the AWS CLI.
What is the FASTEST way to process all the files?- AInvoke the Lambda function synchronously with the invocation type Event and process the files in parallel
- BInvoke the Lambda function synchronously with the invocation type RequestResponse and process the files
sequentially - CInvoke the Lambda function asynchronously with the invocation type Event and process the files in parallel
- DInvoke the Lambda function asynchronously with the invocation type RequestResponse and process the files
sequentially
19A development team are creating a mobile application that customers will use to receive notifications and special offers. Users will not be required to log in.
What is the MOST efficient method to grant users access to AWS resources?- AUse an IAM SAML 2.0 identity provider to establish trust
- BUse Amazon Cognito Federated Identities and setup authentication using a Cognito User Pool
- CUse Amazon Cognito to associate unauthenticated users with an IAM role that has limited access to resources
- DEmbed access keys in the application that have limited access to resources
20A serverless application is used to process customer information and outputs a JSON file to an Amazon S3 bucket. AWS Lambda
is used for processing the data. The data is sensitive and should be encrypted.
How can a Developer modify the Lambda function to ensure the data is encrypted before it is uploaded to the S3 bucket?- AUse the GenerateDataKey API, then use the data key to encrypt the file using the Lambda code
- BEnable server-side encryption on the S3 bucket and create a policy to enforce encryption
- CUse the S3 managed key and call the GenerateDataKey API to encrypt the file
- DUse the default KMS key for S3 and encrypt the file using the Lambda code
Information
- Description
- Quiz on AWS Developer Set 4, created by David Armenteros Soto on 01/06/2022.
- Author
- David Armenteros Soto
- Language
- Español
- Views
- 1
- Tags
- Rating
- No ratings yet Rate this quiz