Test
DEV-201-250
Crea una cuenta gratis para terminar este test
Guarda tu progreso y consulta tu resultado final.
¿Ya tienes cuenta? Inicia sesión
Preguntas del test (166)
1A Developer must encrypt a 100-GB object using AWS KMS.
What is the BEST approach?- AA. Make an Encrypt API call to encrypt the plaintext data as ciphertext using a customer master key (CMK)
- BB. Make an Encrypt API call to encrypt the plaintext data as ciphertext using a customer master key (CMK) with imported key material
- CC. Make an GenerateDataKey API call that returns a plaintext key and an encrypted copy of a data key. Use a plaintext key to encrypt the data
- DD. Make an GenerateDataKeyWithoutPlaintext API call that returns an encrypted copy of a data key. Use an encrypted key to encrypt the data D
2What happens, by default, when one of the resources in a CloudFormation stack cannot be created?
- AA. Previously-created resources are kept but the stack creation terminates.
- BB. Previously-created resources are deleted and the stack creation terminates.
- CC. The stack creation continues, and the final results indicate which steps failed.
- DD. CloudFormation templates are parsed in advance so stack creation is guaranteed to succeed.
3An application is using Amazon DynamoDB as its data store, and should be able to read 100 items per second as strongly consistent reads. Each item is 5 KB in size.
To what value should the table's provisioned read throughput be set?- AA. 50 read capacity units
- BB. 100 read capacity units
- CC. 200 read capacity units
- DD. 500 read capacity units
4A Development team would like to migrate their existing application code from a GitHub repository to AWS CodeCommit.
What needs to be created before they can migrate a cloned repository to CodeCommit over HTTPS?- AA. A GitHub secure authentication token
- BB. A public and private SSH key file
- CC. A set of Git credentials generated from IAM
- DD. An Amazon EC2 IAM role with CodeCommit permissions
5Which of the following are correct statements with policy evaluation logic in AWS Identity and Access
Management? (Choose two.)- AA. By default, all requests are denied
- BB. An explicit allow overrides an explicit deny
- CC. An explicit allow overrides default deny.
- DD. An explicit deny does not override an explicit allow
- EE. By default, all request are allowed
6A web application is designed to allow new users to create accounts using their email addresses. The application will store attributes for each user, and is expecting millions of user to sign up.
What should the Developer implement to achieve the design goals?- AA. Amazon Cognito user pools
- BB. AWS Mobile Hub user data storage
- CC. Amazon Cognito Sync
- DD. AWS Mobile Hub cloud logic
7A Developer is writing a REST service that will add items to a shopping list. The service is built on Amazon API Gateway with AWS Lambda integrations. The shopping list items are send as query string parameters in the method request.
How should the Developer convert the query string parameters to arguments for the Lambda function?- AA. Enable request validation
- BB. Include the Amazon Resource Name (ARN) of the Lambda function
- CC. Change the integration type
- DD. Create a mapping template C
8You have an environment that consists of a public subnet using Amazon VPC and 3 instances that are running in this subnet. These three instances can successfully communicate with other hosts on the Internet. You launch a fourth instance in the same subnet, using the same AMI and security group configuration you used for the others, but find that this instance cannot be accessed from the Internet.
What should you do to enable internet access?- AA. Deploy a NAT instance into the public subnet.
- BB. Modify the routing table for the public subnet
- CC. Configure a publically routable IP Address In the host OS of the fourth instance.
- DD. Assign an Elastic IP address to the fourth instance.
9A company needs a new REST API that can return information about the contents of an Amazon S3 bucket, such as a count of the objects stored in it. The company has decided that the new API should be written as a microservice using AWS Lambda and Amazon API Gateway.
How should the Developer ensure that the microservice has the necessary access to the Amazon S3 bucket, while adhering to security best practices?- AA. Create an IAM user that has permissions to access the Amazon S3 bucket, and store the IAM user credentials in the Lambda function source code.
- BB. Create an IAM role that has permissions to access the Amazon S3 bucket and assign it to the Lambda function as its execution role.
- CC. Create an Amazon S3 bucket policy that specifies the Lambda service as its principal and assign it to the Amazon S3 bucket.
- DD. Create an IAM role, attach the AmazonS3FullAccess managed policy to it, and assign the role to the Lambda function as its execution role.
10When developing an AWS Lambda function that processes Amazon Kinesis Data Streams, Administrators within the company must receive a notice that includes the processed data.
How should the Developer write the function to send processed data to the Administrators?- AA. Separate the Lambda handler from the core logic
- BB. Use Amazon CloudWatch Events to send the processed data
- CC. Publish the processed data to an Amazon SNS topic
- DD. Push the processed data to Amazon SQS
11If a message is retrieved from a queue in Amazon SQS, how long is the message inaccessible to other users by default?
- AA. 0 seconds
- BB. 1 hour
- CC. 1 day
- DD. forever
- EE. 30 seconds
12An application is running on an EC2 instance. The Developer wants to store an application metric in Amazon CloudWatch.
What is the best practice for implementing this requirement?- AA. Use the PUT Object API call to send data to an S3 bucket. Use an event notification to invoke a Lambda function to publish data to CloudWatch.
- BB. Publish the metric data to an Amazon Kinesis Stream using a PutRecord API call. Subscribe a Lambda function that publishes data to CloudWatch.
- CC. Use the CloudWatch PutMetricData API call to submit a custom metric to CloudWatch. Provide the required credentials to enable the API call.
- DD. Use the CloudWatch PutMetricData API call to submit a custom metric to CloudWatch. Launch the EC2 instance with the required IAM role to enable the API call.
13A Developer is storing documents in Amazon S3 that will require encryption at rest. The encryption keys must be rotated annually, at least.
What is the easiest way to achieve this?- AA. Encrypt the data before sending it to Amazon S3
- BB. Import a custom key into AWS KMS with annual rotation enabled
- CC. Use AWS KMS with automatic key rotation
- DD. Export a key from AWS KMS to encrypt the data
14What is the format of structured notification messages sent by Amazon SNS?
- AA. An XML object containing MessageId, UnsubscribeURL, Subject, Message and other values
- BB. An JSON object containing MessageId, DuplicateFlag, Message and other values
- CC. An XML object containing MessageId, DuplicateFlag, Message and other values
- DD. An JSON object containing MessageId, unsubscribeURL, Subject, Message and other values
15Queries to an Amazon DynamoDB table are consuming a large amount of read capacity. The table has a significant number of large attributes. The application does not need all of the attribute data.
How can DynamoDB costs be minimized while maximizing application performance?- AA. Batch all the writes, and perform the write operations when no or few reads are being performed.
- BB. Create a global secondary index with a minimum set of projected attributes.
- CC. Implement exponential backoffs in the application.
- DD. Load balance the reads to the table using an Application Load Balancer.
16A company is creating a REST service using an Amazon API Gateway with AWS Lambda integration. The service run different versions for testing purposes.
What would be the BEST way to accomplish this?- AA. Use an x-Version header to denote which version is being called and pass that header to the Lambda function(s)
- BB. Create an API Gateway Lambda authorizer to route API clients to the correct API version
- CC. Create an API Gateway resource policy to isolate versions and provide context to the Lambda function(s)
- DD. Deploy the API versions as unique stages with unique endpoints and use stage variables to provide further context
17Which of the following services are key/value stores? (Choose three.)
- AA. Amazon ElastiCache
- BB. Simple Notification Service
- CC. DynamoDB
- DD. Simple Workflow Service
- EE. Simple Storage Service
18AWS CodeBuild builds code for an application, creates the Docker image, pushes the image to Amazon Elastic Container Registry (Amazon ECR), and tags the image with a unique identifier.
If the Developers already have AWS CLI configured on their workstations, how can the Docker images be pulled to the workstations?- AA. Run the following: docker pull REPOSITORY URI : TAG
- BB. Run the output of the following: aws ecr get-login and then run: docker pull REPOSITORY URI : TAG
- CC. Run the following: aws ecr get-login and then run: docker pull REPOSITORY URI : TAG
- DD. Run the output of the following: aws ecr get-download-url-for-layer and then run: docker pull REPOSITORY URI : TAG
19A company wants to implement authentication for its new REST service using Amazon API Gateway. To authenticate the calls, each request must include HTTP headers with a client ID and user ID. These credentials must be compared to authentication data in an Amazon DynamoDB table.
What MUST the company do to implement this authentication in API Gateway?- AA. Implement an AWS Lambda authorizer that references the DynamoDB authentication table
- BB. Create a model that requires the credentials, then grant API Gateway access to the authentication table
- CC. Modify the integration requests to require the credentials, then grant API Gateway access to the authentication table
- DD. Implement an Amazon Cognito authorizer that references the DynamoDB authentication table
20When uploading an object, what request header can be explicitly specified in a request to Amazon S3 to encrypt object data when saved on the server side?
- AA. x-amz-storage-class
- BB. Content-MD5
- CC. x-amz-security-token
- DD. x-amz-server-side-encryption
21A company caches session information for a web application in an Amazon DynamoDB table. The company wants an automated way to delete old items from the table.
What is the simplest way to do this?- AA. Write a script that deletes old records; schedule the scripts as a cron job on an Amazon EC2 instance.
- BB. Add an attribute with the expiration time; enable the Time To Live feature based on that attribute.
- CC. Each day, create a new table to hold session data; delete the previous day's table.
- DD. Add an attribute with the expiration time; name the attribute ItemExpiration.
22An Amazon RDS database instance is used by many applications to look up historical data. The query rate is relatively constant. When the historical data is updated each day, the resulting write traffic slows the read query performance and affects all application users.
What can be done to eliminate the performance impact on application users?- AA. Make sure Amazon RDS is Multi-AZ so it can better absorb increased traffic.
- BB. Create an RDS Read Replica and direct all read traffic to the replica.
- CC. Implement Amazon ElastiCache in front of Amazon RDS to buffer the write traffic
- DD. Use Amazon DynamoDB instead of Amazon RDS to buffer the read traffic.
23What item operation allows the retrieval of multiple items from a DynamoDB table in a single API call?
- AA. GetItem
- BB. BatchGetItem
- CC. GetMultipleItems
- DD. GetItemRange
24An application is expected to process many files. Each file takes four minutes to process each AWS Lambda invocation. The Lambda function does not return any important data.
What is the fastest way to process all the files?- AA. First split the files to make them smaller, then process with synchronous RequestResponse Lambda invocations.
- BB. Make synchronous RequestResponse Lambda invocations and process the files one by one.
- CC. Make asynchronous Event Lambda invocations and process the files in parallel.
- DD. First join all the files, then process it all at once with an asynchronous Event Lambda invocation.
25Company C is currently hosting their corporate site in an Amazon S3 bucket with Static Website Hosting enabled. Currently, when visitors go to http://www.companyc.com the index.html page is returned. Company C now would like a new page welcome.html to be returned when a visitor enters http://www.companyc.com in the browser.
Which of the following steps will allow Company C to meet this requirement? (Choose two.)- AA. Upload an html page named welcome.html to their S3 bucket
- BB. Create a welcome subfolder in their S3 bucket
- CC. Set the Index Document property to welcome.html
- DD. Move the index.html page to a welcome subfolder
- EE. Set the Error Document property to welcome.html
26After launching an instance that you intend to serve as a NAT (Network Address Translation) device in a public subnet you modify your route tables to have the NAT device be the target of internet bound traffic of your private subnet. When you try and make an outbound connection to the Internet from an instance in the private subnet, you are not successful.
Which of the following steps could resolve the issue?- AA. Attaching a second Elastic Network interface (ENI) to the NAT instance, and placing it in the private subnet
- BB. Attaching a second Elastic Network Interface (ENI) to the instance in the private subnet, and placing it in the public subnet
- CC. Disabling the Source/Destination Check attribute on the NAT instance
- DD. Attaching an Elastic IP address to the instance in the private subnet
27The upload of a 15 GB object to Amazon S3 fails. The error message reads: "Your proposed upload exceeds the maximum allowed object size."
What technique will allow the Developer to upload this object?- AA. Upload the object using the multi-part upload API.
- BB. Upload the object over an AWS Direct Connect connection.
- CC. Contact AWS Support to increase the object size limit.
- DD. Upload the object to another AWS region.
28What type of block cipher does Amazon S3 offer for server side encryption?
- AA. Triple DES
- BB. Advanced Encryption Standard
- CC. Blowfish
- DD. RC5
29You attempt to store an object in the US-STANDARD region in Amazon S3, and receive a confirmation that it has been successfully stored. You then immediately make another API call and attempt to read this object. S3 tells you that the object does not exist.
What could explain this behavior?- AA. US-STANDARD uses eventual consistency and it can take time for an object to be readable in a bucket
- BB. Objects in Amazon S3 do not become visible until they are replicated to a second region.
- CC. US-STANDARD imposes a 1 second delay before new objects are readable.
- DD. You exceeded the bucket object limit, and once this limit is raised the object will be visible.
30A company has an AWS CloudFormation template that is stored as a single file. The template is able to launch and create a full infrastructure stack.
Which best practice would increase the maintainability of the template?- AA. Use nested stacks for common template patterns.
- BB. Embed credentials to prevent typos.
- CC. Remove mappings to decrease the number of variables.
- DD. Use AWS::Include to reference publicly-hosted template files.
31If an application is storing hourly log files from thousands of instances from a high traffic web site, which naming scheme would give optimal performance on S3?
- AA. Sequential
- BB. instanceID_log-HH-DD-MM-YYYY
- CC. instanceID_log-YYYY-MM-DD-HH
- DD. HH-DD-MM-YYYY-log_instanceID
- EE. YYYY-MM-DD-HH-log_instanceID
32What is the maximum number of S3 Buckets available per AWS account?
- AA. 100 per region
- BB. there is no limit
- CC. 100 per account
- DD. 500 per account
- EE. 100 per IAM user
33Question #111Topic 1
A Developer wants to encrypt new objects that are being uploaded to an Amazon S3 bucket by an application. There must be an audit trail of who has used the key during this process. There should be no change to the performance of the application.
Which type of encryption meets these requirements?- AA. Server-side encryption using S3-managed keys
- BB. Server-side encryption with AWS KMS-managed keys
- CC. Client-side encryption with a client-side symmetric master key
- DD. Client-side encryption with AWS KMS-managed keys
34Which of the following statements about SQS is true?
- AA. Messages will be delivered exactly once and messages will be delivered in First in, First out order
- BB. Messages will be delivered exactly once and message delivery order is indeterminate
- CC. Messages will be delivered one or more times and messages will be delivered in First in, First out order
- DD. Messages will be delivered one or more times and message delivery order is indeterminate
35Which of the following items are required to allow an application deployed on an EC2 instance to write data to a DynamoDB table?
Assume that no security Keys are allowed to be stored on the EC2 instance. (Choose two.)- AA. Create an IAM User that allows write access to the DynamoDB table.
- BB. Add an IAM Role to a running EC2 instance.
- CC. Add an IAM User to a running EC2 Instance.
- DD. Launch an EC2 Instance with the IAM Role included in the launch configuration.
- EE. Create an IAM Role that allows write access to the DynamoDB table.
- FF. Launch an EC2 Instance with the IAM User included in the launch configuration.
36An on-premises application makes repeated calls to store files to Amazon S3. As usage of the application has increased, "LimitExceeded" errors are being logged.
What should be changed to fix this error?- AA. Implement exponential backoffs in the application.
- BB. Load balance the application to multiple servers.
- CC. Move the application to Amazon EC2.
- DD. Add a one second delay to each API call.
37A corporate web application is deployed within an Amazon VPC, and is connected to the corporate data center via IPSec VPN. The application must authenticate against the on-premise LDAP server. Once authenticated, logged-in users can only access an S3 keyspace specific to the user.
Which two approaches can satisfy the objectives? (Choose two.)- AA. The application authenticates against LDAP. The application then calls the IAM Security Service to login to IAM using the LDAP credentials. The application can use the IAM temporary credentials to access the appropriate S3 bucket.
- BB. The application authenticates against LDAP, and retrieves the name of an IAM role associated with the user. The application then calls the IAM Security Token Service to assume that IAM Role. The application can use the temporary credentials to access the appropriate S3 bucket.
- CC. The application authenticates against IAM Security Token Service using the LDAP credentials. The application uses those temporary AWS security credentials to access the appropriate S3 bucket.
- DD. Develop an identity broker which authenticates against LDAP, and then calls IAM Security Token Service to get IAM federated user credentials. The application calls the identity broker to get IAM federated user credentials with access to the appropriate S3 bucket.
- EE. Develop an identity broker which authenticates against IAM Security Token Service to assume an IAM Role to get temporary AWS security credentials. The application calls the identity broker to get AWS
38Company C is currently hosting their corporate site in an Amazon S3 bucket with Static Website Hosting enabled. Currently, when visitors go to http:// www.companyc.com the index.html page is returned. Company C now would like a new page welcome.html to be returned when a visitor enters http:// www.companyc.com in the browser.
Which of the following steps will allow Company C to meet this requirement? (Choose two.)- AA. Upload an html page named welcome.html to their S3 bucket
- BB. Create a welcome subfolder in their S3 bucket
- CC. Set the Index Document property to welcome.html
- DD. Move the index.html page to a welcome subfolder
- EE. Set the Error Document property to welcome.html
39An organization is storing large files in Amazon S3, and is writing a web application to display meta-data about the files to end-users. Based on the metadata a user selects an object to download. The organization needs a mechanism to index the files and provide single-digit millisecond latency retrieval for the metadata.
What AWS service should be used to accomplish this?- AA. Amazon DynamoDB
- BB. Amazon EC2
- CC. AWS Lambda
- DD. Amazon RDS
40Company B provides an online image recognition service and utilizes SQS to decouple system components for scalability The SQS consumers poll the imaging queue as often as possible to keep end-to-end throughput as high as possible. However, Company B is realizing that polling in tight loops is burning CPU cycles and increasing costs with empty responses.
How can Company B reduce the number of empty responses?- AA. Set the imaging queue visibility Timeout attribute to 20 seconds
- BB. Set the Imaging queue ReceiveMessageWaitTimeSeconds attribute to 20 seconds
- CC. Set the imaging queue MessageRetentionPeriod attribute to 20 seconds
- DD. Set the DelaySeconds parameter of a message to 20 seconds
41What type of block cipher does Amazon S3 offer for server side encryption?
- AA. Triple DES
- BB. Advanced Encryption Standard
- CC. Blowfish
- DD. RC5
42While developing an application that runs on Amazon EC2 in an Amazon VPC, a Developer identifies the need for centralized storage of application-level logs.
Which AWS service can be used to securely store these logs?- AA. Amazon EC2 VPC Flow Logs
- BB. Amazon CloudWatch Logs
- CC. Amazon CloudSearch
- DD. AWS CloudTrail
43An Amazon S3 bucket, "myawsbucket" is configured with website hosting in Tokyo region, what is the region- specific website endpoint?
- AA. www.myawsbucket.ap-northeast-1.amazonaws.com
- BB. myawsbucket.s3-website-ap-northeast-1.amazonawscom
- CC. myawsbucket.amazonaws.com
- DD. myawsbucket.tokyo.amazonaws.com
44If an application is storing hourly log files from thousands of instances from a high traffic web site, which naming scheme would give optimal performance on S3?
- AA. Sequential
- BB. instanceID_log-HH-DD-MM-YYYY
- CC. instanceID_log-YYYY-MM-DD-HH
- DD. HH-DD-MM-YYYY-log_instanceID
- EE. YYYY-MM-DD-HH-log_instanceID
45A stock market monitoring application uses Amazon Kinesis for data ingestion. During simulated tests of peak data rates, the Kinesis stream cannot keep up with the incoming data.
What step will allow Kinesis to accommodate the traffic during peak hours?- AA. Install the Kinesis Producer Library (KPL) for ingesting data into the stream.
- BB. Reduce the data retention period to allow for more data ingestion using DecreaseStreamRetentionPeriod.
- CC. Increase the shard count of the stream using UpdateShardCount.
- DD. Ingest multiple records into the stream in a single call using PutRecords.
46You are inserting 1000 new items every second in a DynamoDB table. Once an hour these items are analyzed and then are no longer needed. You need to minimize provisioned throughput, storage, and API calls.
Given these requirements, what is the most efficient way to manage these Items after the analysis?- AA. Retain the items in a single table
- BB. Delete items individually over a 24 hour period
- CC. Delete the table and create a new table per hour
- DD. Create a new table per hour
47Which of the following statements about SQS is true?
- AA. Messages will be delivered exactly once and messages will be delivered in First in, First out order
- BB. Messages will be delivered exactly once and message delivery order is indeterminate
- CC. Messages will be delivered one or more times and messages will be delivered in First in, First out order
- DD. Messages will be delivered one or more times and message delivery order is indeterminate
48Where can PortMapping be defined when launching containers in Amazon ECS?
- AA. Security groups
- BB. Amazon Elastic Container Registry (Amzon ECR)
- CC. Container agent
- DD. Task definition
49You have written an application that uses the Elastic Load Balancing service to spread traffic to several web servers. Your users complain that they are sometimes forced to login again in the middle of using your application, after they have already logged in. This is not behavior you have designed.
What is a possible solution to prevent this happening?- AA. Use instance memory to save session state.
- BB. Use instance storage to save session state.
- CC. Use EBS to save session state
- DD. Use ElastiCache to save session state.
- EE. Use Glacier to save session slate.
50A corporate web application is deployed within an Amazon VPC, and is connected to the corporate data center via IPSec VPN. The application must authenticate against the on-premise LDAP server. Once authenticated, logged-in users can only access an S3 keyspace specific to the user.
Which two approaches can satisfy the objectives? (Choose two.)- AA. The application authenticates against LDAP. The application then calls the IAM Security Service to login to IAM using the LDAP credentials. The application can use the IAM temporary credentials to access the appropriate S3 bucket.
- BB. The application authenticates against LDAP, and retrieves the name of an IAM role associated with the user. The application then calls the IAM Security Token Service to assume that IAM Role. The application can use the temporary credentials to access the appropriate S3 bucket.
- CC. The application authenticates against IAM Security Token Service using the LDAP credentials. The application uses those temporary AWS security credentials to access the appropriate S3 bucket.
- DD. Develop an identity broker which authenticates against LDAP, and then calls IAM Security Token Service to get IAM federated user credentials. The application calls the identity broker to get IAM federated user credentials with access to the appropriate S3 bucket.
- EE. Develop an identity broker which authenticates against IAM Security Token Service to assume an IAM Role to get temporary AWS security credentials. The application calls the identity broker to get AWS temporary security credentials with access to the appropriate S3 bucket.
51An application uses Amazon Kinesis Data Streams to ingest and process large streams of data records in real time. Amazon EC2 instances consume and process the data from the shards of the Kinesis data stream by using Amazon Kinesis Client Library (KCL). The application handles the failure scenarios and does not require standby workers. The application reports that a specific shard is receiving more data than expected. To adapt to the changes in the rate of data flow, the "hot" shard is resharded.
Assuming that the initial number of shards in the Kinesis data stream is 4, and after resharding the number of shards increased to 6, what is the maximum number of EC2 instances that can be deployed to process data from all the shards?- AA. 12
- BB. 6
- CC. 4
- DD. 1
52You run an ad-supported photo sharing website using S3 to serve photos to visitors of your site. At some point you find out that other sites have been linking to the photos on your site, causing loss to your business.
What is an effective method to mitigate this?- AA. Store photos on an EBS volume of the web server
- BB. Remove public read access and use signed URLs with expiry dates.
- CC. Use CloudFront distributions for static content.
- DD. Block the IPs of the offending websites in Security Groups.
53Company B provides an online image recognition service and utilizes SQS to decouple system components for scalability The SQS consumers poll the imaging queue as often as possible to keep end-to-end throughput as high as possible. However, Company B is realizing that polling in tight loops is burning CPU cycles and increasing costs with empty responses.
How can Company B reduce the number of empty responses?- AA. Set the imaging queue visibility Timeout attribute to 20 seconds
- BB. Set the Imaging queue ReceiveMessageWaitTimeSeconds attribute to 20 seconds
- CC. Set the imaging queue MessageRetentionPeriod attribute to 20 seconds
- DD. Set the DelaySeconds parameter of a message to 20 seconds
54A Development team is working on a case management solution that allows medical claims to be processed and reviewed. Users log in to provide information related to their medical and financial situations.
As part of the application, sensitive documents such as medical records, medical imaging, bank statements, and receipts are uploaded to Amazon S3. All documents must be securely transmitted and stored. All access to the documents must be recorded for auditing.
What is the MOST secure approach?- AA. Use S3 default encryption using Advanced Encryption Standard-256 (AES-256) on the destination bucket.
- BB. Use Amazon Cognito for authorization and authentication to ensure the security of the application and documents.
- CC. Use AWS Lambda to encrypt and decrypt objects as they are placed into the S3 bucket.
- DD. Use client-side encryption/decryption with Amazon S3 and AWS KMS.
55Which statements about DynamoDB are true? (Choose two.)
- AA. DynamoDB uses a pessimistic locking model
- BB. DynamoDB uses optimistic concurrency control
- CC. DynamoDB uses conditional writes for consistency
- DD. DynamoDB restricts item access during reads
- EE. DynamoDB restricts item access during writes
56An Amazon S3 bucket, "myawsbucket" is configured with website hosting in Tokyo region, what is the region-specific website endpoint?
- AA. www.myawsbucket.ap-northeast-1.amazonaws.com
- BB. myawsbucket.s3-website-ap-northeast-1.amazonawscom
- CC. myawsbucket.amazonaws.com
- DD. myawsbucket.tokyo.amazonaws.com
57A company has an internet-facing application that uses Web Identity Federation to obtain a temporary credential from AWS Security Token Service (AWS STS).
The app then uses the token to access AWS services.
Review the following response:
AssumerRole
Based on the response displayed what permissions are associated with the call from the application?- AA. Permissions associated with the role AROACLKWSDQRAOEXAMPLE:app1
- BB. Permissions associated with the default role used when the AWS service was built
- CC. Permission associated with the IAM principal that owns the AccessKeyID ASgeIAIOSFODNN7EXAMPLE
- DD. Permissions associated with the account that owns the AWS service
58You are providing AWS consulting services for a company developing a new mobile application that will be leveraging Amazon SNS Mobile Push for push notifications. In order to send direct notification messages to individual devices each device registration identifier or token needs to be registered with SNS; however the developers are not sure of the best way to do this.
You advise them to:- AA. Bulk upload the device tokens contained in a CSV file via the AWS Management Console.
- BB. Let the push notification service (e.g. Amazon Device Messaging) handle the registration.
- CC. Implement a token vending service to handle the registration.
- DD. Call the CreatePlatformEndPoint API function to register multiple device tokens.
59You are inserting 1000 new items every second in a DynamoDB table. Once an hour these items are analyzed and then are no longer needed. You need to minimize provisioned throughput, storage, and API calls.
Given these requirements, what is the most efficient way to manage these Items after the analysis?- AA. Retain the items in a single table
- BB. Delete items individually over a 24 hour period
- CC. Delete the table and create a new table per hour
- DD. Create a new table per hour
60A Developer is using AWS CLI, but when running list commands on a large number of resources, it is timing out.
What can be done to avoid this time-out?- AA. Use pagination
- BB. Use shorthand syntax
- CC. Use parameter values
- DD. Use quoting strings
61You are writing to a DynamoDB table and receive the following exception:"
ProvisionedThroughputExceededException". though according to your Cloudwatch metrics for the table, you are not exceeding your provisioned throughput.
What could be an explanation for this?- AA. You haven't provisioned enough DynamoDB storage instances
- BB. You're exceeding your capacity on a particular Range Key
- CC. You're exceeding your capacity on a particular Hash Key
- DD. You're exceeding your capacity on a particular Sort Key
- EE. You haven't configured DynamoDB Auto Scaling triggers
62You have written an application that uses the Elastic Load Balancing service to spread traffic to several web servers. Your users complain that they are sometimes forced to login again in the middle of using your application, after they have already logged in. This is not behavior you have designed.
What is a possible solution to prevent this happening?- AA. Use instance memory to save session state.
- BB. Use instance storage to save session state.
- CC. Use EBS to save session state
- DD. Use ElastiCache to save session state.
- EE. Use Glacier to save session slate.
63What does an Amazon SQS delay queue accomplish?
- AA. Messages are hidden for a configurable amount of time when they are first added to the queue.
- BB. Messages are hidden for a configurable amount of time after they are consumed from the queue.
- CC. The consumer can poll the queue for a configurable amount of time before retrieving a message.
- DD. Message cannot be deleted for a configurable amount of time after they are consumed from the queue.
64Which of the following services are included at no additional cost with the use of the AWS platform? (Choose two.)
- AA. Simple Storage Service
- BB. Elastic Compute Cloud
- CC. Auto Scaling
- DD. Elastic Load Balancing
- EE. CloudFormation
- FF. Simple Workflow Service
65You run an ad-supported photo sharing website using S3 to serve photos to visitors of your site. At some point you find out that other sites have been linking to the photos on your site, causing loss to your business.
What is an effective method to mitigate this?- AA. Store photos on an EBS volume of the web server
- BB. Remove public read access and use signed URLs with expiry dates.
- CC. Use CloudFront distributions for static content.
- DD. Block the IPs of the offending websites in Security Groups.
66A company has multiple Developers located across the globe who are updating code incrementally for a development project. When Developers upload code concurrently, internet connectivity is slow and it is taking a long time to upload code for deployment in AWS Elastic Beanstalk.
Which step will result in minimized upload and deployment time with the LEAST amount of administrative effort?- AA. Allow the Developers to upload the code to an Amazon S3 bucket, and deploy it directly to Elastic Beanstalk.
- BB. Allow the Developers to upload the code to a central FTP server to deploy the application to Elastic Beanstalk.
- CC. Create an AWS CodeCommit repository, allow the Developers to commit code to it, and then directly deploy the code to Elastic Beanstalk.
- DD. Create a code repository on an Amazon EC2 instance so that all Developers can update the code, and deploy the application from the instance to Elastic Beanstalk.
67Your application is trying to upload a 6 GB file to Simple Storage Service and receive a "Your proposed upload exceeds the maximum allowed object size." error message.
What is a possible solution for this?- AA. None, Simple Storage Service objects are limited to 5 GB
- BB. Use the multi-part upload API for this object
- CC. Use the large object upload API for this object
- DD. Contact support to increase your object size limit
- EE. Upload to a different region
68Which statements about DynamoDB are true? (Choose two.)
- AA. DynamoDB uses a pessimistic locking model
- BB. DynamoDB uses optimistic concurrency control
- CC. DynamoDB uses conditional writes for consistency
- DD. DynamoDB restricts item access during reads
- EE. DynamoDB restricts item access during writes
69A company recently migrated its web, application and NoSQL database tiers to AWS. The company is using Auto Scaling to scale the web and application tiers.
More than 95 percent of the Amazon DynamoDB requests are repeated read-requests.
How can the DynamoDB NoSQL tier be scaled up to cache these repeated requests?- AA. Amazon EMR
- BB. Amazon DynamoDB Accelerator
- CC. Amazon SQS
- DD. Amazon CloudFront
70What AWS products and features can be deployed by Elastic Beanstalk? (Choose three.)
- AA. Auto scaling groups
- BB. Route 53 hosted zones
- CC. Elastic Load Balancers
- DD. RDS Instances
- EE. Elastic IP addresses
- FF. SQS Queues
71You are providing AWS consulting services for a company developing a new mobile application that will be leveraging Amazon SNS Mobile Push for push notifications. In order to send direct notification messages to individual devices each device registration identifier or token needs to be registered with SNS; however the developers are not sure of the best way to do this.
You advise them to:- AA. Bulk upload the device tokens contained in a CSV file via the AWS Management Console.
- BB. Let the push notification service (e.g. Amazon Device Messaging) handle the registration.
- CC. Implement a token vending service to handle the registration.
- DD. Call the CreatePlatformEndPoint API function to register multiple device tokens.
72A company is building an application to track athlete performance using an Amazon DynamoDB table. Each item in the table is identified by a partition key
(user_id) and a sort key (sport_name). The table design is shown below:
Partition Key : user_id
Sort Key: sport_name
Attributes: score
A Developer is asked to write a leaderboard application to display the top performers (user_id) based on the score for each sport_name.
What process will allow the Developer to extract results MOST efficiently from the DynamoDB table?- AA. Use a DynamoDB query operation with the key attributes of user_id and sport_name and order the results based on the score attribute.
- BB. Create a global secondary index with a partition key of sport_name and a sort key of score, and get the results
- CC. Use a DynamoDB scan operation to retrieve scores and user_id based on sport_name, and order the results based on the score attribute.
- DD. Create a local secondary index with a primary key of sport_name and a sort key of score and get the results based on the score attribute.
73Games-R-Us is launching a new game app for mobile devices. Users will log into the game using their existing
Facebook account and the game will record player data and scoring information directly to a DynamoDB table.
What is the most secure approach for signing requests to the DynamoDB API?- AA. Create an IAM user with access credentials that are distributed with the mobile app to sign the requests
- BB. Distribute the AWS root account access credentials with the mobile app to sign the requests
- CC. Request temporary security credentials using web identity federation to sign the requests
- DD. Establish cross account access between the mobile app and the DynamoDB table to sign the requests
74You are writing to a DynamoDB table and receive the following exception:" ProvisionedThroughputExceededException". though according to your Cloudwatch metrics for the table, you are not exceeding your provisioned throughput.
What could be an explanation for this?- AA. You haven't provisioned enough DynamoDB storage instances
- BB. You're exceeding your capacity on a particular Range Key
- CC. You're exceeding your capacity on a particular Hash Key
- DD. You're exceeding your capacity on a particular Sort Key
- EE. You haven't configured DynamoDB Auto Scaling triggers
75A Developer is creating a mobile application that will not require users to log in.
What is the MOST efficient method to grant users access to AWS resources?- AA. Use an identity provider to securely authenticate with the application.
- BB. Create an AWS Lambda function to create an IAM user when a user accesses the application.
- CC. Create credentials using AWS KMS and apply these credentials to users when using the application.
- DD. Use Amazon Cognito to associate unauthenticated users with an IAM role that has limited access to resources.
76Which of the following programming languages have an officially supported AWS SDK? (Choose two.)
- AA. Perl
- BB. PHP
- CC. Pascal
- DD. Java
- EE. SQL
77Which of the following services are included at no additional cost with the use of the AWS platform? (Choose two.)
- AA. Simple Storage Service
- BB. Elastic Compute Cloud
- CC. Auto Scaling
- DD. Elastic Load Balancing
- EE. CloudFormation
- FF. Simple Workflow Service
78An application running on Amazon EC2 instances must access objects within an Amaon S3 busket that are encrypted using server-side encryption using AWS
KMS encryption keys (SSE-KMS). The application must have access to the customer master key (CMK) to decrypt the objects.
Which combination of steps will grant the application access? (Select TWO.)- AA. Write an S3 bucket policy that grants the bucket access to the key.
- BB. Grant access to the key in the IAM EC2 role attached to the application's EC2 instances.
- CC. Write a key policy that enables IAM policies to grant access to the key.
- DD. Grant access to the key in the S3 bucket's ACL
- EE. Create a Systems Manager parameter that exposes the KMS key to the EC2 instances. AE
79A meteorological system monitors 600 temperature gauges, obtaining temperature samples every minute and saving each sample to a DynamoDB table. Each sample involves writing 1K of data and the writes are evenly distributed over time.
How much write throughput is required for the target table?- AA. 1 write capacity unit
- BB. 10 write capacity units
- CC. 60 write capacity units
- DD. 600 write capacity units
- EE. 3600 write capacity units
80Your application is trying to upload a 6 GB file to Simple Storage Service and receive a "Your proposed upload exceeds the maximum allowed object size." error message.
What is a possible solution for this?- AA. None, Simple Storage Service objects are limited to 5 GB
- BB. Use the multi-part upload API for this object
- CC. Use the large object upload API for this object
- DD. Contact support to increase your object size limit
- EE. Upload to a different region
81A company needs a fully-managed source control service that will work in AWS. The service must ensure that revision control synchronizes multiple distributed repositories by exchanging sets of changes peer-to-peer. All users need to work productively even when not connected to a network.
Which source control service should be used?- AA. Subversion
- BB. AWS CodeBuild
- CC. AWS CodeCommit
- DD. AWS CodeStar
82In DynamoDB, what type of HTTP response codes indicate that a problem was found with the client request sent to the service?
- AA. 5xx HTTP response code
- BB. 200 HTTP response code
- CC. 306 HTTP response code
- DD. 4xx HTTP response code
83What AWS products and features can be deployed by Elastic Beanstalk? (Choose three.)
- AA. Auto scaling groups
- BB. Route 53 hosted zones
- CC. Elastic Load Balancers
- DD. RDS Instances
- EE. Elastic IP addresses
- FF. SQS Queues
84A Developer is writing a serverless application that requires that an AWS Lambda function be invoked every 10 minutes.
What is an automated and serverless way to trigger the function?- AA. Deploy an Amazon EC2 instance based on Linux, and edit its /etc/crontab file by adding a command to periodically invoke the Lambda function.
- BB. Configure an environment variable named PERIOD for the Lambda function. Set the value to 600.
- CC. Create an Amazon CloudWatch Events rule that triggers on a regular schedule to invoke the Lambda function.
- DD. Create an Amazon SNS topic that has a subscription to the Lambda function with a 600-second timer.
85Company C has recently launched an online commerce site for bicycles on AWS. They have a "Product"
DynamoDB table that stores details for each bicycle, such as, manufacturer, color, price, quantity and size to display in the online store. Due to customer demand, they want to include an image for each bicycle along with the existing details.
Which approach below provides the least impact to provisioned throughput on the "Product" table?- AA. Serialize the image and store it in multiple DynamoDB tables
- BB. Create an "Images" DynamoDB table to store the Image with a foreign key constraint to the "Product" table
- CC. Add an image data type to the "Product" table to store the images in binary format
- DD. Store the images in Amazon S3 and add an S3 URL pointer to the "Product" table item for each image
86Games-R-Us is launching a new game app for mobile devices. Users will log into the game using their existing Facebook account and the game will record player data and scoring information directly to a DynamoDB table.
What is the most secure approach for signing requests to the DynamoDB API?- AA. Create an IAM user with access credentials that are distributed with the mobile app to sign the requests
- BB. Distribute the AWS root account access credentials with the mobile app to sign the requests
- CC. Request temporary security credentials using web identity federation to sign the requests
- DD. Establish cross account access between the mobile app and the DynamoDB table to sign the requests
87A Developer is writing an imaging micro service on AWS Lambda. The service is dependent on several libraries that are not available in the Lambda runtime environment.
Which strategy should the Developer follow to create the Lambda deployment package?- AA. Create a ZIP file with the source code and all dependent libraries.
- BB. Create a ZIP file with the source code and a script that installs the dependent libraries at runtime.
- CC. Create a ZIP file with the source code. Stage the dependent libraries on an Amazon S3 bucket indicated by the Lambda environment variable LD_LIBRARY_PATH
- DD. Create a ZIP file with the source code and a buildspec.yaml file that installs the dependent libraries on AWS Lambda.
88Which DynamoDB limits can be raised by contacting AWS support? (Choose two.)
- AA. The number of hash keys per account
- BB. The maximum storage used per account
- CC. The number of tables per account
- DD. The number of local secondary indexes per account
- EE. The number of provisioned throughput units per account
89Which of the following programming languages have an officially supported AWS SDK? (Choose two.)
- AA. Perl
- BB. PHP
- CC. Pascal
- DD. Java
- EE. SQL
90A Developer is designing a fault-tolerant environment where client sessions will be saved.
How can the Developer ensure that no sessions are lost if an Amazon EC2 instance fails?- AA. Use sticky sessions with an Elastic Load Balancer target group.
- BB. Use Amazon SQS to save session data.
- CC. Use Amazon DynamoDB to perform scalable session hadling.
- DD. Use Elastic Load Balancer connection draining to stop sending requests to failing instances.
91When a Simple Queue Service message triggers a task that takes 5 minutes to complete, which process below will result in successful processing of the message and remove it from the queue while minimizing the chances of duplicate processing?
- AA. Retrieve the message with an increased visibility timeout, process the message, delete the message from the queue
- BB. Retrieve the message with an increased visibility timeout, delete the message from the queue, process the message
- CC. Retrieve the message with increased DelaySeconds, process the message, delete the message from the queue
- DD. Retrieve the message with increased DelaySeconds, delete the message from the queue, process the
92A meteorological system monitors 600 temperature gauges, obtaining temperature samples every minute and saving each sample to a DynamoDB table. Each sample involves writing 1K of data and the writes are evenly distributed over time.
How much write throughput is required for the target table?- AA. 1 write capacity unit
- BB. 10 write capacity units
- CC. 60 write capacity units
- DD. 600 write capacity units
- EE. 3600 write capacity units
93In a move toward using microservices, a company's Management team has asked all Development teams to build their services so that API requests depend only on that service's data store. One team is building a Payments service which has its own database; the service needs data that originates in the Accounts database. Both are using Amazon DynamoDB.
What approach will result in the simplest, decoupled, and reliable method to get near-real time updates from the Accounts database?- AA. Use Amazon Glue to perform frequent ETL updates from the Accounts database to the Payments database.
- BB. Use Amazon ElastiCache in Payments, with the cache updated by triggers in the Accounts database.
- CC. Use Amazon Kinesis Data Firehouse to deliver all changes from the Accounts database to the Payments database.
- DD. Use Amazon DynamoDB Streams to deliver all changes from the Accounts database to the Payments database.
94Company A has an S3 bucket containing premier content that they intend to make available to only paid subscribers of their website. The S3 bucket currently has default permissions of all objects being private to prevent inadvertent exposure of the premier content to non-paying website visitors.
How can Company A provide only paid subscribers the ability to download a premier content file in the S3 bucket?- AA. Apply a bucket policy that grants anonymous users to download the content from the S3 bucket
- BB. Generate a pre-signed object URL for the premier content file when a paid subscriber requests a download
- CC. Add a bucket policy that requires Multi-Factor Authentication for requests to access the S3 bucket objects
- DD. Enable server side encryption on the S3 bucket for data protection against the non-paying website visitors
95In DynamoDB, what type of HTTP response codes indicate that a problem was found with the client request sent to the service?
- AA. 5xx HTTP response code
- BB. 200 HTTP response code
- CC. 306 HTTP response code
- DD. 4xx HTTP response code
96How should custom libraries be utilized in AWS Lambda?
- AA. Host the library on Amazon S3 and reference to it from the Lambda function.
- BB. Install the library locally and upload a ZIP file of the Lambda function.
- CC. Import the necessary Lambda blueprint when creating the function.
- DD. Modify the function runtime to include the necessary library.
97Which of the following is an example of a good DynamoDB hash key schema for provisioned throughput efficiency?
- AA. User ID, where the application has many different users.
- BB. Status Code where most status codes are the same
- CC. Device ID, where one is by far more popular than all the others.
- DD. Game Type, where there are three possible game types
98Company C has recently launched an online commerce site for bicycles on AWS. They have a "Product" DynamoDB table that stores details for each bicycle, such as, manufacturer, color, price, quantity and size to display in the online store. Due to customer demand, they want to include an image for each bicycle along with the existing details.
Which approach below provides the least impact to provisioned throughput on the "Product" table?- AA. Serialize the image and store it in multiple DynamoDB tables
- BB. Create an "Images" DynamoDB table to store the Image with a foreign key constraint to the "Product" table
- CC. Add an image data type to the "Product" table to store the images in binary format
- DD. Store the images in Amazon S3 and add an S3 URL pointer to the "Product" table item for each image
99A company needs to secure its existing website running behind an Elastic Load Balancer. The website's Amazon EC2 instances are CPU-constrained.
What should be done to secure the website while not increasing the CPU load on the EC2 web servers? (Select TWO.)- AA. Configure an Elastic Load Balancer with SSL pass-through.
- BB. Configure SSL certificates on an Elastic Load Balancer.
- CC. Configure an Elastic Load Balancer with a Loadable Storage System.
- DD. Install SSL certificates on the EC2 instances.
- EE. Configure an Elastic Load Balancer with SSL termination.
100An application stores payroll information nightly in DynamoDB for a large number of employees across hundreds of offices. Item attributes consist of individual name, office identifier, and cumulative daily hours.
Managers run reports for ranges of names working in their office. One query is. "Return all Items in this office for names starting with A through E".
Which table configuration will result in the lowest impact on provisioned throughput for this query?- AA. Configure the table to have a hash index on the name attribute, and a range index on the office identifier
- BB. Configure the table to have a range index on the name attribute, and a hash index on the office identifier
- CC. Configure a hash index on the name attribute and no range index
- DD. Configure a hash index on the office Identifier attribute and no range index
101Which DynamoDB limits can be raised by contacting AWS support? (Choose two.)
- AA. The number of hash keys per account
- BB. The maximum storage used per account
- CC. The number of tables per account
- DD. The number of local secondary indexes per account
- EE. The number of provisioned throughput units per account
102An AWS Lambda function generates a 3MB JSON file and then uploads it to an Amazon S3 bucket daily. The file contains sensitive information, so the Developer must ensure that it is encrypted before uploading to the bucket.
Which of the following modifications should the Developer make to ensure that the data is encrypted before uploading it to the bucket?- AA. Use the default AWS KMS customer master key for S3 in the Lambda function code.
- BB. Use the S3 managed key and call the GenerateDataKey API to encrypt the file.
- CC. Use the GenerateDateKey API, then use that data key to encrypt the file in the Lambda function code.
- DD. Use a custom KMS customer master key created for S3 in the Lambda function code.
103What is one key difference between an Amazon EBS-backed and an instance-store backed instance?
- AA. Virtual Private Cloud requires EBS backed instances
- BB. Amazon EBS-backed instances can be stopped and restarted
- CC. Auto scaling requires using Amazon EBS-backed instances.
- DD. Instance-store backed instances can be stopped and restarted.
104When a Simple Queue Service message triggers a task that takes 5 minutes to complete, which process below will result in successful processing of the message and remove it from the queue while minimizing the chances of duplicate processing?
- AA. Retrieve the message with an increased visibility timeout, process the message, delete the message from the queue
- BB. Retrieve the message with an increased visibility timeout, delete the message from the queue, process the message
- CC. Retrieve the message with increased DelaySeconds, process the message, delete the message from the queue
- DD. Retrieve the message with increased DelaySeconds, delete the message from the queue, process the message
105A Developer wants to find a list of items in a global secondary index from an Amazon DynamoDB table.
Which DynamoDB API call can the Developer use in order to consume the LEAST number of read capacity units?- AA. Scan operation using eventually-consistent reads
- BB. Query operation using strongly-consistent reads
- CC. Query operation using eventually-consistent reads
- DD. Scan operation using strongly-consistent reads
106How can you secure data at rest on an EBS volume?
- AA. Attach the volume to an instance using EC2's SSL interface.
- BB. Write the data randomly instead of sequentially.
- CC. Use an encrypted file system on top of the BBS volume.
- DD. Encrypt the volume using the S3 server-side encryption service.
- EE. Create an IAM policy that restricts read and write access to the volume.
107Company A has an S3 bucket containing premier content that they intend to make available to only paid subscribers of their website. The S3 bucket currently has default permissions of all objects being private to prevent inadvertent exposure of the premier content to non-paying website visitors.
How can Company A provide only paid subscribers the ability to download a premier content file in the S3 bucket?- AA. Apply a bucket policy that grants anonymous users to download the content from the S3 bucket
- BB. Generate a pre-signed object URL for the premier content file when a paid subscriber requests a download
- CC. Add a bucket policy that requires Multi-Factor Authentication for requests to access the S3 bucket objects
- DD. Enable server side encryption on the S3 bucket for data protection against the non-paying website visitors
108A Developer has published an update to an application that is served to a global user base using Amazon CloudFront. After deploying the application, users are not able to see the updated changes.
How can the Developer resolve this issue?- AA. Remove the origin from the CloudFront configuration and add it again.
- BB. Disable forwarding of query strings and request headers from the CloudFront distribution configuration.
- CC. Invalidate all the application objects from the edge caches.
- DD. Disable the CloudFront distribution and enable it again to update all the edge locations.
109Which of the following is chosen as the default region when making an API call with an AWS SDK?
- AA. ap-northeast-1
- BB. us-west-2
- CC. us-east-1
- DD. eu-west-1
- EE. us-central-1
110Which of the following is an example of a good DynamoDB hash key schema for provisioned throughput efficiency?
- AA. User ID, where the application has many different users.
- BB. Status Code where most status codes are the same
- CC. Device ID, where one is by far more popular than all the others.
- DD. Game Type, where there are three possible game types
111A Developer must deploy a new AWS Lambda function using an AWS CloudFormation template.
Which procedures will deploy a Lambda function? (Select TWO.)- AA. Upload the code to an AWS CodeCommit repository, then add a reference to it in an AWS::Lambda::Function resource in the template.
- BB. Create an AWS::Lambda::Function resource in the template, then write the code directly inside the CloudFormation template.
- CC. Upload a .ZIP file containing the function code to Amazon S3, then add a reference to it in an AWS::Lambda::Function resource in the template.
- DD. Upload a .ZIP file to AWS CloudFormation containing the function code, then add a reference to it in an AWS::Lambda::Function resource in the template.
- EE. Upload the function code to a private Git repository, then add a reference to it in an AWS::Lambda::Function resource in the template. BD
112Which of the following statements about SWF are true? (Choose three.)
- AA. SWF tasks are assigned once and never duplicated
- BB. SWF requires an S3 bucket for workflow storage
- CC. SWF workflow executions can last up to a year
- DD. SWF triggers SNS notifications on task assignment
- EE. SWF uses deciders and workers to complete tasks
- FF. SWF requires at least 1 EC2 instance per domain
113An application stores payroll information nightly in DynamoDB for a large number of employees across hundreds of offices. Item attributes consist of individual name, office identifier, and cumulative daily hours. Managers run reports for ranges of names working in their office. One query is. "Return all Items in this office for names starting with A through E".
Which table configuration will result in the lowest impact on provisioned throughput for this query?- AA. Configure the table to have a hash index on the name attribute, and a range index on the office identifier
- BB. Configure the table to have a range index on the name attribute, and a hash index on the office identifier
- CC. Configure a hash index on the name attribute and no range index
- DD. Configure a hash index on the office Identifier attribute and no range index
114A Developer wants to enable AWS X-Ray for a secure application that runs in an Amazon ECS environment.
What combination of steps will enable X-Ray? (Select THREE.)- AA. Create a Docker image that runs the X-Ray daemon.
- BB. Add instrumentation to the application code for X-Ray.
- CC. Install the X-Ray daemon on the underlying EC2 instance.
- DD. Configure and use an IAM EC2 instance role.
- EE. Register the application with X-Ray.
- FF. Configure and use an IAM role for tasks.
115Which of the following are valid SNS delivery transports? (Choose two.)
- AA. HTTP
- BB. UDP
- CC. SMS
- DD. DynamoDB
- EE. Named Pipes
116What is one key difference between an Amazon EBS-backed and an instance-store backed instance?
- AA. Virtual Private Cloud requires EBS backed instances
- BB. Amazon EBS-backed instances can be stopped and restarted
- CC. Auto scaling requires using Amazon EBS-backed instances.
- DD. Instance-store backed instances can be stopped and restarted.
117A Developer is designing a new application that uses Amazon S3. To satisfy compliance requirements, the Developer must encrypt the data at rest.
How can the Developer accomplish this?- AA. Use s3:x-amz-acl as a condition in the S3 bucket policy.
- BB. Use Amazon RDS with default encryption.
- CC. Use aws:SecureTransport as a condition in the S3 bucket policy.
- DD. Turn on S3 default encryption for the S3 bucket.
118How is provisioned throughput affected by the chosen consistency model when reading data from a
DynamoDB table?- AA. Strongly consistent reads use the same amount of throughput as eventually consistent reads
- BB. Strongly consistent reads use more throughput than eventually consistent reads.
- CC. Strongly consistent reads use less throughput than eventually consistent reads
- DD. Strongly consistent reads use variable throughput depending on read activity
119How can you secure data at rest on an EBS volume?
- AA. Attach the volume to an instance using EC2's SSL interface.
- BB. Write the data randomly instead of sequentially.
- CC. Use an encrypted file system on top of the BBS volume.
- DD. Encrypt the volume using the S3 server-side encryption service.
- EE. Create an IAM policy that restricts read and write access to the volume.
120An AWS Elastic Beanstalk application needs to be deployed in multiple regions and requires a different Amazon Machine Image (AMI) in each region.
Which AWS CloudFormation template key can be used to specify the correct AMI for each region?- AA. Parameters
- BB. Outputs
- CC. Mappings
- DD. Resources
121Which of the following are valid arguments for an SNS Publish request? (Choose three.)
- AA. TopicAm
- BB. Subject
- CC. Destination
- DD. Format
- EE. Message
- FF. Language
122Which of the following is chosen as the default region when making an API call with an AWS SDK?
- AA. ap-northeast-1
- BB. us-west-2
- CC. us-east-1
- DD. eu-west-1
- EE. us-central-1
123A Developer has been asked to make changes to the source code of an AWS Lambda function. The function is managed using an AWS CloudFormation template. The template is configured to load the source code from an Amazon S3 bucket. The Developer manually created a .ZIP file deployment package containing the changes and put the file into the correct location on Amazon S3. When the function is invoked, the code changes have not been applied.
What step is required to update the function with the changes?- AA. Delete the .ZIP file on S3, and re-upload by using a different object key name.
- BB. Update the CloudFormation stack with the correct values for the function code properties S3Bucket, S3Key, or S3ObjectVersion.
- CC. Ensure that the function source code is base64-encoded before uploading the deployment package to S3.
- DD. Modify the execution role of the Lambda function to allow S3 access permission to the deployment package .ZIP file.
124How can software determine the public and private IP addresses of the Amazon EC2 instance that it is running on?
- AA. Query the appropriate Amazon CloudWatch metric.
- BB. Use ipconfig or ifconfig command.
- CC. Query the local instance userdata.
- DD. Query the local instance metadata.
125Which of the following statements about SWF are true? (Choose three.)
- AA. SWF tasks are assigned once and never duplicated
- BB. SWF requires an S3 bucket for workflow storage
- CC. SWF workflow executions can last up to a year
- DD. SWF triggers SNS notifications on task assignment
- EE. SWF uses deciders and workers to complete tasks
- FF. SWF requires at least 1 EC2 instance per domain
126A Developer needs to design an application running on AWS that will be used to consume Amazon SQS messages that range from 1 KB up to 1GB in size.
How should the Amazon SQS messages be managed?- AA. Use Amazon S3 and the Amazon SQS CLI.
- BB. Use Amazon S3 and the Amazon SQS Extended Client Library for Java.
- CC. Use Amazon EBS and the Amazon SQS CLI.
- DD. Use Amazon EFS and the Amazon SQS CLI.
127EC2 instances are launched from Amazon Machine images (AMIs). A given public AMI can:
- AA. be used to launch EC2 Instances in any AWS region.
- BB. only be used to launch EC2 instances in the same country as the AMI is stored.
- CC. only be used to launch EC2 instances in the same AWS region as the AMI is stored.
- DD. only be used to launch EC2 instances in the same AWS availability zone as the AMI is stored
128Which of the following are valid SNS delivery transports? (Choose two.)
- AA. HTTP
- BB. UDP
- CC. SMS
- DD. DynamoDB
- EE. Named Pipes
129A company is developing an application that will run on several Amazon EC2 instances in an Auto Scaling group and can access a database running on Amazon
EC2. The application needs to store secrets required to connect to the database. The application must allow for periodic secret rotation, and there should be no changes to the application when a secret changes.
What is the SAFEST way to meet these requirements?- AA. Associate an IAM role to the EC2 instance where the application is running with permission to access the database.
- BB. Use AWS Systems Manager Parameter Store with the SecureString data type to store secrets.
- CC. Configure the application to store secrets in Amazon S3 object metadata.
- DD. Hard code the database secrets in the application code itself
130Which EC2 API call would you use to retrieve a list of Amazon Machine Images (AMIs)?
- AA. DescnbeInstances
- BB. DescribeAMls
- CC. DescribeImages
- DD. GetAMls
- EE. You cannot retrieve a list of AMIs as there are over 10,000 AMIs
131How is provisioned throughput affected by the chosen consistency model when reading data from a DynamoDB table
- AA. Strongly consistent reads use the same amount of throughput as eventually consistent reads
- BB. Strongly consistent reads use more throughput than eventually consistent reads.
- CC. Strongly consistent reads use less throughput than eventually consistent reads
- DD. Strongly consistent reads use variable throughput depending on read activity
132A Developer writes an AWS Lambda function and uploads the code in a .ZIP file to Amazon S3. The Developer makes changes to the code and uploads a new
.ZIP file to Amazon S3. However, Lambda executes the earlier code.
How can the Developer fix this in the LEAST disruptive way?- AA. Create another Lambda function and specify the new .ZIP file.
- BB. Call the update-function-code API.
- CC. Remove the earlier .ZIP file first, then add the new .ZIP file.
- DD. Call the create-alias API. B
133In AWS, which security aspects are the customer’s responsibility? (Choose four.)
- AA. Life-cycle management of IAM credentials
- BB. Decommissioning storage devices
- CC. Security Group and ACL (Access Control List) settings
- DD. Encryption of EBS (Elastic Block Storage) volumes
- EE. Controlling physical access to compute resources
- FF. Patch management on the EC2 instance’s operating system
134Which of the following are valid arguments for an SNS Publish request? (Choose three.)
- AA. TopicAm
- BB. Subject
- CC. Destination
- DD. Format
- EE. Message
- FF. Language
135An AWS Lambda function must read data from an Amazon RDS MySQL database in a VPC and also reach a public endpoint over the internet to get additional data.
Which steps must be taken to allow the function to access both the RDS resource and the public endpoint? (Select TWO.)- AA. Modify the default configuration for the Lambda function to associate it with an Amazon VPC private subnet.
- BB. Modify the default network access control list to allow outbound traffic.
- CC. Add a NAT Gateway to the VPC.
- DD. Modify the default configuration of the Lambda function to associate it with a VPC public subnet.
- EE. Add an environmental variable to the Lambda function to allow outbound internet access.
136When using a large Scan operation in DynamoDB, what technique can be used to minimize the impact of a scan on a table's provisioned throughput?
- AA. Set a smaller page size for the scan
- BB. Use parallel scans
- CC. Define a range index on the table
- DD. Prewarm the table by updating all items
137How can software determine the public and private IP addresses of the Amazon EC2 instance that it is running on?
- AA. Query the appropriate Amazon CloudWatch metric.
- BB. Use ipconfig or ifconfig command.
- CC. Query the local instance userdata.
- DD. Query the local instance metadata.
138A Developer must build an application that uses Amazon DynamoDB. The requirements state that items being stored in the DynamoDB table will be 7KB in size and that reads must be strongly consistent. The maximum read rate is 3 items per second, and the maximum write rate is 10 items per second.
How should the Developer size the DynamoDB table to meet these requirements?- AA. Read: 3 read capacity units Write: 70 write capacity units
- BB. Read: 6 read capacity units Write: 70 write capacity units
- CC. Read: 6 read capacity units Write: 10 write capacity units
- DD. Read: 3 read capacity units Write: 10 write capacity units
139Company D is running their corporate website on Amazon S3 accessed from http//www.companyd.com. Their marketing team has published new web fonts to a separate S3 bucket accessed by the S3 endpoint https://s3- us-west-1.amazonaws.com/cdfonts. While testing the new web fonts, Company D recognized the web fonts are being blocked by the browser.
What should Company D do to prevent the web fonts from being blocked by the browser?- AA. Enable versioning on the cdfonts bucket for each web font
- BB. Create a policy on the cdfonts bucket to enable access to everyone
- CC. Add the Content-MD5 header to the request for webfonts in the cdfonts bucket from the website
- DD. Configure the cdfonts bucket to allow cross-origin requests by creating a CORS configuration
140EC2 instances are launched from Amazon Machine images (AMIs). A given public AMI can:
- AA. be used to launch EC2 Instances in any AWS region.
- BB. only be used to launch EC2 instances in the same country as the AMI is stored.
- CC. only be used to launch EC2 instances in the same AWS region as the AMI is stored.
- DD. only be used to launch EC2 instances in the same AWS availability zone as the AMI is stored
141A Developer is creating an AWS Lambda function to process a stream of data from an Amazon Kinesis Data Stream. When the Lambda function parses the data and encounters a missing field, it exits the function with an error. The function is generating duplicate records from the Kinesis stream. When the Developer looks at the stream output without the Lambda function, there are no duplicate records.
What is the reason for the duplicates?- AA. The Lambda function did not advance the Kinesis stream pointer to the next record after the error.
- BB. The Lambda event source used asynchronous invocation, resulting in duplicate records.
- CC. The Lambda function did not handle the error, and the Lambda service attempted to reprocess the data.
- DD. The Lambda function is not keeping up with the amount of data coming from the stream.
142Which of the following platforms are supported by Elastic Beanstalk? (Choose two.)
- AA. Apache Tomcat
- BB. .NET
- CC. IBM Websphere
- DD. Oracle JBoss
- EE. Jetty
143Which EC2 API call would you use to retrieve a list of Amazon Machine Images (AMIs)?
- AA. DescnbeInstances
- BB. DescribeAMls
- CC. DescribeImages
- DD. GetAMls
- EE. You cannot retrieve a list of AMIs as there are over 10,000 AMIs
144A company maintains an application responsible for processing several thousand external callbacks each day. The company's System administrators want to know how many callbacks are being received on a rolling basis, and they want this data available for 10 days.
The company also wants the ability to issue automated alerts if the number of callbacks exceeds the defined thresholds.
What is the MOST cost-effective way to address the need to track and alert on these statistics?- AA. Push callback data to an Amazon RDS database that can be queried to show historical data and to alert on exceeded thresholds.
- BB. Push callback data to AWS X-Ray and use AWS Lambda to query, display, and alert on exceeded thresholds.
- CC. Push callback data to Amazon Kinesis Data Streams and invoke an AWS Lambda function that stores data in Amazon DynamoDB and sends the required alerts.
- DD. Push callback data to Amazon CloudWatch as a custom metric and use the CloudWatch alerting mechanisms to alert System Administrators.
145Which code snippet below returns the URL of a load balanced web site created in CloudFormation with an
AWS::ElasticLoadBalancing::LoadBalancer resource name "ElasticLoad Balancer"?- AA. "Fn::Join" : ["". [ "http://", {"Fn::GetAtr" : [ "ElasticLoadBalancer","DNSName"]}]]
- BB. "Fn::Join" : ["". [ "http://", {"Fn::GetAtr" : [ "ElasticLoadBalancer","Url"]}]]
- CC. "Fn::Join" : ["". [ "http://", {"Ref" : "ElasticLoadBalancerUrl"}]]
- DD. "Fn::Join" : [".", [ "http://", {"Ref" : "ElasticLoadBalancerDNSName"}]]
146In AWS, which security aspects are the customer's responsibility? (Choose four.)
- AA. Life-cycle management of IAM credentials
- BB. Decommissioning storage devices
- CC. Security Group and ACL (Access Control List) settings
- DD. Encryption of EBS (Elastic Block Storage) volumes
- EE. Controlling physical access to compute resources
- FF. Patch management on the EC2 instance's operating system
147A company has a website that is developed in PHP and WordPress and is launched using AWS Elastic Beanstalk. There is a new version of the website that needs to be deployed in the Elastic Beanstalk environment. The company cannot tolerate having the website offline if an update fails. Deployments must have minimal impact and rollback as soon as possible.
What deployment method should be used?- AA. All at once
- BB. Rolling
- CC. Snapshots
- DD. Immutable
148Which features can be used to restrict access to data in S3? (Choose two.)
- AA. Use S3 Virtual Hosting
- BB. Set an S3 Bucket policy.
- CC. Enable IAM Identity Federation.
- DD. Set an S3 ACL on the bucket or the object.
- EE. Create a CloudFront distribution for the bucket
149When using a large Scan operation in DynamoDB, what technique can be used to minimize the impact of a scan on a table's provisioned throughput?
- AA. Set a smaller page size for the scan
- BB. Use parallel scans
- CC. Define a range index on the table
- DD. Prewarm the table by updating all items
150A company has a multi-tiered web application on AWS. During a recent spike in traffic, one of the primary relational databases on Amazon RDS could not serve all the traffic. Some read queries for repeatedly accessed items failed, so users received error messages.
What can be done to minimize the impact on database read queries MOST efficiently during future traffic spikes?- AA. Use Amazon S3 to cache database query results.
- BB. Use Amazon RDS as a custom origin for Amazon CloudFront.
- CC. Use local storage and memory on Amazon EC2 instances to cache data
- DD. Use Amazon ElastiCache in front of the primary database to cache data.
151Company D is running their corporate website on Amazon S3 accessed from http//www.companyd.com. Their marketing team has published new web fonts to a separate S3 bucket accessed by the S3 endpoint https://s3-us-west-1.amazonaws.com/cdfonts. While testing the new web fonts, Company D recognized the web fonts are being blocked by the browser.
What should Company D do to prevent the web fonts from being blocked by the browser?- AA. Enable versioning on the cdfonts bucket for each web font
- BB. Create a policy on the cdfonts bucket to enable access to everyone
- CC. Add the Content-MD5 header to the request for webfonts in the cdfonts bucket from the website
- DD. Configure the cdfonts bucket to allow cross-origin requests by creating a CORS configuration
152Which of the following platforms are supported by Elastic Beanstalk? (Choose two.)
- AA. Apache Tomcat
- BB. .NET
- CC. IBM Websphere
- DD. Oracle JBoss
- EE. Jetty
153Which code snippet below returns the URL of a load balanced web site created in CloudFormation with an AWS::ElasticLoadBalancing::LoadBalancer resource name "ElasticLoad Balancer"?
- AA. "Fn::Join" : ["". [ "http://", {"Fn::GetAtr" : [ "ElasticLoadBalancer","DNSName"]}]]
- BB. "Fn::Join" : ["". [ "http://", {"Fn::GetAtr" : [ "ElasticLoadBalancer","Url"]}]]
- CC. "Fn::Join" : ["". [ "http://", {"Ref" : "ElasticLoadBalancerUrl"}]]
- DD. "Fn::Join" : [".", [ "http://", {"Ref" : "ElasticLoadBalancerDNSName"}]]
154Which features can be used to restrict access to data in S3? (Choose two.)
- AA. Use S3 Virtual Hosting
- BB. Set an S3 Bucket policy.
- CC. Enable IAM Identity Federation.
- DD. Set an S3 ACL on the bucket or the object.
- EE. Create a CloudFront distribution for the bucket
155What happens, by default, when one of the resources in a CloudFormation stack cannot be created?
- AA. Previously-created resources are kept but the stack creation terminates.
- BB. Previously-created resources are deleted and the stack creation terminates.
- CC. The stack creation continues, and the final results indicate which steps failed.
- DD. CloudFormation templates are parsed in advance so stack creation is guaranteed to succeed.
156Which of the following are correct statements with policy evaluation logic in AWS Identity and Access Management? (Choose two.)
- AA. By default, all requests are denied
- BB. An explicit allow overrides an explicit deny
- CC. An explicit allow overrides default deny.
- DD. An explicit deny does not override an explicit allow
- EE. By default, all request are allowed
157You have an environment that consists of a public subnet using Amazon VPC and 3 instances that are running in this subnet. These three instances can successfully communicate with other hosts on the Internet. You launch a fourth instance in the same subnet, using the same AMI and security group configuration you used for the others, but find that this instance cannot be accessed from the Internet.
What should you do to enable internet access?- AA. Deploy a NAT instance into the public subnet.
- BB. Modify the routing table for the public subnet
- CC. Configure a publically routable IP Address In the host OS of the fourth instance.
- DD. Assign an Elastic IP address to the fourth instance.
158If a message is retrieved from a queue in Amazon SQS, how long is the message inaccessible to other users by default?
- AA. 0 seconds
- BB. 1 hour
- CC. 1 day
- DD. forever
- EE. 30 seconds
159What is the format of structured notification messages sent by Amazon SNS?
- AA. An XML object containing MessageId, UnsubscribeURL, Subject, Message and other values
- BB. An JSON object containing MessageId, DuplicateFlag, Message and other values
- CC. An XML object containing MessageId, DuplicateFlag, Message and other values
- DD. An JSON object containing MessageId, unsubscribeURL, Subject, Message and other values
160Which of the following services are key/value stores? (Choose three.)
- AA. Amazon ElastiCache
- BB. Simple Notification Service
- CC. DynamoDB
- DD. Simple Workflow Service
- EE. Simple Storage Service
161When uploading an object, what request header can be explicitly specified in a request to Amazon S3 to encrypt object data when saved on the server side?
- AA. x-amz-storage-class
- BB. Content-MD5
- CC. x-amz-security-token
- DD. x-amz-server-side-encryption
162What item operation allows the retrieval of multiple items from a DynamoDB table in a single API call?
- AA. GetItem
- BB. BatchGetItem
- CC. GetMultipleItems
- DD. GetItemRange
163After launching an instance that you intend to serve as a NAT (Network Address Translation) device in a public subnet you modify your route tables to have the
NAT device be the target of internet bound traffic of your private subnet. When you try and make an outbound connection to the Internet from an instance in the private subnet, you are not successful.
Which of the following steps could resolve the issue?- AA. Attaching a second Elastic Network interface (ENI) to the NAT instance, and placing it in the private subnet
- BB. Attaching a second Elastic Network Interface (ENI) to the instance in the private subnet, and placing it in the public subnet
- CC. Disabling the Source/Destination Check attribute on the NAT instance
- DD. Attaching an Elastic IP address to the instance in the private subnet
164You attempt to store an object in the US-STANDARD region in Amazon S3, and receive a confirmation that it has been successfully stored. You then immediately make another API call and attempt to read this object. S3 tells you that the object does not exist.
What could explain this behavior?- AA. US-STANDARD uses eventual consistency and it can take time for an object to be readable in a bucket
- BB. Objects in Amazon S3 do not become visible until they are replicated to a second region.
- CC. US-STANDARD imposes a 1 second delay before new objects are readable.
- DD. You exceeded the bucket object limit, and once this limit is raised the object will be visible.
165What is the maximum number of S3 Buckets available per AWS account?
- AA. 100 per region
- BB. there is no limit
- CC. 100 per account
- DD. 500 per account
- EE. 100 per IAM user
166Which of the following items are required to allow an application deployed on an EC2 instance to write data to a DynamoDB table?
Assume that no security Keys are allowed to be stored on the EC2 instance. (Choose two.)- AA. Create an IAM User that allows write access to the DynamoDB table.
- BB. Add an IAM Role to a running EC2 instance
- CC. Add an IAM User to a running EC2 Instance.
- DD. Launch an EC2 Instance with the IAM Role included in the launch configuration.
- EE. Create an IAM Role that allows write access to the DynamoDB table.
- FF. Launch an EC2 Instance with the IAM User included in the launch configuration.
Información
- Descripción
- AWS AWS Test sobre DEV-201-250, creado por Victoria Arda el 19/06/2020.
- Autor
- Victoria Arda
- Idioma
- English
- Visitas
- 2
- Etiquetas
- Valoración
- Aún sin valoraciones Valora este test