Test
cad5
Crea una cuenta gratis para terminar este test
Guarda tu progreso y consulta tu resultado final.
¿Ya tienes cuenta? Inicia sesión
Preguntas del test (65)
1An application uses Amazon EC2, and Application Load Balancer and Amazon CloudFront to serve content. The security team
have reported malicious activity from a specific range of IP addresses.
How can a Developer prevent the application from being targeted by these addresses again?- ACreate a security group rule denying the address range and apply it to the EC2 instances
- BAdd a certificate using AWS Certificate Manager (ACM) and encrypt all communications
- CAdd a rule to a Web ACL using AWS WAF that denies the IP address ranges
- DDisable the Amazon CloudFront distribution and then reenable it
2A developer is making some updates to an AWS Lambda function that is part of a serverless application and will be saving a new
version. The application is used by hundreds of users and the developer needs to be able to test the updates and be able to
rollback if there any issues with user experience.
What is the SAFEST way to do this with minimal changes to the application code?- ACreate an alias and point it to the new version. Update the application code to point to the new alias
- BUpdate the application code to point to the new version
- CCreate A records in Route 53 for each function version’s ARN. Use a weighted routing policy to direct 20% of traffic to
the new version. Add the DNS records to the application code - DCreate an alias and point it to the new and previous versions. Assign a weight of 20% to the new version to direct less
traffic. Update the application code to point to the new alias
3A developer is creating a new application that will store data in a DynamoDB table. Which APIs can be used to read, write and
modify individual items in the table?- AGetItem, PutItem, UpdateItem
- BGetItem, TransactWriteItems, UpdateTable
- CGetItem, PutItem, DeleteItem
- DBatchGetItem, BatchWriteItem, UpdateItem
4An application running on Amazon EC2 is experiencing intermittent technical difficulties. The developer needs to find a solution
for tracking the errors that occur in the application logs and setting up a notification when the error rate exceeds a certain
threshold.
How can this be achieved with the LEAST complexity?- AUse CloudTrail to monitor the application log files and send an SNS notification
- BConfigure the application to send logs to Amazon S3. Use Amazon Kinesis Analytics to analyze the log files and send
an SES notification - CConfigure Amazon CloudWatch Events to monitor the EC2 instances and configure an SNS topic as a target
- DUse CloudWatch Logs to track the number of errors that occur in the application logs and send an SNS notification
5A website consisting of HTML, images, and client-side JavaScript is being hosted on Amazon S3. The website will be used
globally, what’s the best way to MINIMIZE latency for global users?- ACreate a CloudFront distribution and configure the S3 website as an origin
- BHost the website from multiple buckets around the world and use Route 53 geolocation-based routing
- CEnable S3 transfer acceleration
- DCreate an ElastiCache cluster and configure the S3 website as an origin
6A team of developers need to be able to collaborate and synchronize multiple distributed code repositories and leverage a preconfigured
continuous delivery toolchain for deploying their projects on AWS. The team also require a centralized project
dashboard to monitor application activity.Which AWS service should they use?- AAWS CodePipeline
- BAWS Cloud9
- CAWS CodeStar
- DAWS CodeCommit
7A developer has created a YAML template file that includes the following header: 'AWS::Serverless-2016-10-31'. Which
commands should the developer use to deploy the application?- Asam package and sam deploy
- Bsam package and sam build
- Caws cloudformation create-stack-set
- Daws cloudformation package and aws cloudformation create-stack
8An application uses multiple Lambda functions to write data to an Amazon RDS database. The Lambda functions must share the
same connection string. What is the BEST solution to ensure security and operational efficiency?- AUse KMS encrypted environment variables within each Lambda function
- BCreate a secure string parameter using AWS systems manager parameter store
- CUse a CloudHSM encrypted environment variable that is shared between the functions
- DEmbed the connection string within the Lambda function code
9A company has several AWS accounts used by different departments. Developers use the same CloudFormation template to
deploy an application across accounts. What can the developers use to deploy and manage the application with the LEAST
operational effort?- ACreate a CloudFormation Stack in an administrator account and use StackSets to update the stacks across multiple
accounts - BCreate a CloudFormation Stack in an administrator account and use CloudFormation Change Sets to modify stacks
across multiple accounts - CMigrate the application into an Elastic Beanstalk environment that is shared between multiple accounts
- DSynchronize the applications in multiple accounts using AWS AppSync
- ACreate a CloudFormation Stack in an administrator account and use StackSets to update the stacks across multiple
10A company uses an Amazon EC2 web application with Amazon CloudFront to distribute content to its customers globally. The
company requires that all traffic is encrypted between the customers and CloudFront, and CloudFront and the web application.
What steps need to be taken to enforce this encryption? (Select TWO.)- AEnable Field Level Encryption
- BSet the Origin Protocol Policy to “HTTPS Only”
- CChange the HTTP port to 443 in the Origin Settings
- DSet the Viewer Protocol Policy to “HTTPS Only” or “Redirect HTTP to HTTPS”
- EUse AWS KMS to enforce encryption
11A developer has a user account in the Development AWS account. He has been asked to modify resources in a Production AWS
account. What is the MOST secure way to provide temporary access to the developer?- AGenerate an access key on the second account using the root account and share the access keys with the developer
for API access - BAdd the user to a group in the second account that has a role attached granting the necessary permissions
- CCreate a cross-account access role, and use sts:AssumeRole API to get short-lived credentials
- DUse AWS KMS to generate cross-account customer master keys and use those get short-lived credentials
- AGenerate an access key on the second account using the root account and share the access keys with the developer
12An application scans an Amazon DynamoDB table once per day to produce a report. The scan is performed in non-peak hours
when production usage uses around 50% of the provisioned throughput.
How can you MINIMIZE the time it takes to produce the report without affecting production workloads? (Select TWO.)- AUse a Parallel Scan API operation
- BUse a Sequential Scan API operation
- CIncrease read capacity units during the scan operation
- DUse the Limit parameter
- EUse pagination to divide results into 1 MB pages
13A Developer is creating a banking application that will be used to view financial transactions and statistics. The application
requires multi-factor authentication to be added to the login protocol.
Which service should be used to meet this requirement?- AAWS IAM with MFA
- BAmazon Cognito User Pool with MFA
- CAWS Directory Service
- DAmazon Cognito Identity Pool with MFA
14An application is running on a fleet of EC2 instances running behind an Elastic Load Balancer (ELB). The EC2 instances session
data in a shared Amazon S3 bucket. Security policy mandates that data must be encrypted in transit.
How can the Developer ensure that all data that is sent to the S3 bucket is encrypted in transit?- ACreate an S3 bucket policy that denies any S3 Put request that does not include the x-amz-server-side-encryption
- BCreate an S3 bucket policy that denies traffic where SecureTransport is false
- CConfigure HTTP to HTTPS redirection on the Elastic Load Balancer
- DCreate an S3 bucket policy that denies traffic where SecureTransport is true
15A gaming application displays the results of games in a leaderboard. The leaderboard is updated by 4 KB messages that are
retrieved from an Amazon SQS queue. The updates are received infrequently but the Developer needs to minimize the time
between the messages arriving in the queue and the leaderboard being updated.
Which technique provides the shortest delay in updating the leaderboard?- AReduce the size of the messages with compression before sending them
- BRetrieve the messages from the queue using long polling every 15 seconds
- CStore the message payload in Amazon S3 and use the SQS Extended Client Library for Java
- DRetrieve the messages from the queue using short polling every 10 seconds
16A developer is creating a serverless application that will use a DynamoDB table. The average item size is 9KB. The application will make 4 strongly consistent reads/sec, and 2 standard write/sec. How many RCUs/WCUs are required?
- A24 RCU and 18 WCU
- B12 RCU and 36 WCU
- C6 RCU and 18 WCU
- D12 RCU and 18 WCU
17A monitoring application that keeps track of a large eCommerce website uses Amazon Kinesis for data ingestion. During periods
of peak data rates, the Kinesis stream cannot keep up with the incoming data.
What step will allow Kinesis data streams to accommodate the traffic during peak hours?- AInstall the Kinesis Producer Library (KPL) for ingesting data into the stream
- BCreate an SQS queue and decouple the producers from the Kinesis data stream
- CIncrease the shard count of the stream using UpdateShardCount
- DIngest multiple records into the stream in a single call using PutRecords
18A Developer has created a serverless function that processes log files. The function should be invoked once every 15 minutes.
How can the Developer automatically invoke the function using serverless services?- ALaunch an EC2 Linux instance and add a command to periodically invoke the function to its /etc/crontab file
- BConfigure the Lambda scheduler to run based on recurring time value
- CCreate an Amazon SNS rule to send a notification to Lambda to instruct it to run
- DCreate an Amazon CloudWatch Events rule that is scheduled to run and invoke the function
19A Developer wants to find a list of items in a global secondary index from an Amazon DynamoDB table.Which DynamoDB API call can the Developer use in order to consume the LEAST number of read capacity units?
- AScan operation using eventually-consistent reads
- BQuery operation using strongly-consistent reads
- CQuery operation using eventually-consistent reads
- DScan operation using strongly-consistent reads
20A company provides a large number of services on AWS to customers. The customers connect to one or more services directly
and the architecture is becoming complex. How can the architecture be refactored to provide a single interface for the
services?- AAmazon API Gateway
- BAWS X-Ray
- CAWS Cognito
- DAWS Single Sign On (SSO)
21An application writes items to an Amazon DynamoDB table. As the application scales to thousands of instances, calls to the
DynamoDB API generate occasional ThrottlingException errors. The application is coded in a language that is incompatible with
the AWS SDK.
What can be done to prevent the errors from occurring?- AAdd exponential backoff to the application logic
- BUse Amazon SQS as an API message bus
- CPass API calls through Amazon API Gateway
- DSend the items to DynamoDB through Amazon Kinesis Data Firehose
22A Developer has created an AWS Lambda function in a new AWS account. The function is expected to be invoked 40 times per
second and the execution duration will be around 100 seconds. What MUST the Developer do to ensure there are no errors?- AContact AWS Support to increase the concurrent execution limits
- BImplement error handling within the function code
- CImplement a Dead Letter Queue to capture invocation errors
- DImplement tracing with X-Ray
23You run an ad-supported photo sharing website using Amazon S3 to serve photos to visitors of your site. At some point you find
out that other sites have been linking to the photos on your site, causing loss to your business.
What is an effective method to mitigate this?- AStore photos on an EBS volume of the web server
- BRemove public read access and use signed URLs with expiry dates
- CUse CloudFront distributions for static content
- DBlock the IPs of the offending websites in Security Groups
24A company manages an application that stores data in an Amazon DynamoDB table. The company need to keep a record of all
new changes made to the DynamoDB table in another table within the same AWS region. What is the MOST suitable way to
deliver this requirement?- AUse Amazon DynamoDB streams
- BUse CloudWatch events
- CUse Amazon CloudTrail
- DUse Amazon DynamoDB snapshots
25An IT automation architecture uses many AWS Lambda functions invoking one another as a large state machine. The
coordination of this state machine is legacy custom code that breaks easily.
Which AWS Service can help refactor and manage the state machine?- AAWS CodePipeline
- BAWS CodeBuild
- CAWS CloudFormation
- DAWS Step Functions
26A Developer is deploying an Amazon ECS update using AWS CodeDeploy. In the appspec.yaml file, which of the following is a
valid structure for the order of hooks that should be specified?- ABeforeInstall > AfterInstall > AfterAllowTestTraffic > BeforeAllowTraffic > AfterAllowTraffic
- BBeforeInstall > AfterInstall > ApplicationStart > ValidateService
- CBeforeAllowTraffic > AfterAllowTraffic
- DBeforeBlockTraffic > AfterBlockTraffic > BeforeAllowTraffic > AfterAllowTraffic
27A Developer has setup an Amazon Kinesis Data Stream with 6 shards to ingest a maximum of 2000 records per second. An AWS
Lambda function has been configured to process these records. In which order will these records be processed?- ALambda will receive each record in the reverse order it was placed into the stream
- BLambda will receive each record in the exact order it was placed into the stream
- CLambda will receive each record in the exact order it was placed into the shard. There is no guarantee of order across
shards - DThe Developer can select exact order or reverse order using the GetRecords API
28A Developer created an AWS Lambda function for a serverless application. The Lambda function has been executing for several
minutes and the Developer cannot find any log data in CloudWatch Logs.
What is the MOST likely explanation for this issue?- AThe Lambda function does not have any explicit log statements for the log data to send it to CloudWatch Logs
- BThe Lambda function is missing CloudWatch Logs as a source trigger to send log data
- CThe execution role for the Lambda function is missing permissions to write log data to the CloudWatch Logs
- DThe Lambda function is missing a target CloudWatch Logs group
29A Developer is looking for a way to use shorthand syntax to express functions, APIs, databases, and event source mappings. The
Developer will test using AWS SAM to create a simple Lambda function using Nodejs.12x.
What is the SIMPLEST way for the Developer to get started with a Hello World Lambda function?- AInstall the AWS SAM CLI, run sam init and use one of the AWS Quick Start Templates
- BInstall the AWS CLI, run aws sam init and use one of the AWS Quick Start Templates
- CUse the AWS Management Console to access AWS SAM and deploy a Hello World function
- DUse AWS CloudFormation to deploy a Hello World stack using AWS SAM
30An Amazon Kinesis Data Stream has recently been configured to receive data from sensors in a manufacturing facility. A
consumer EC2 instance is configured to process the data every 48 hours and save processing results to an Amazon RedShift data warehouse. Testing has identified a large amount of data is missing. A review of monitoring logs has identified that the
sensors are sending data correctly and the EC2 instance is healthy.
What is the MOST likely explanation for this issue?- ARecords are retained for 24 hours in the Kinesis Data Stream by default
- BAmazon RedShift is not suitable for storing streaming data
- CThe EC2 instance is failing intermittently
- DAmazon Kinesis has too many shards provisioned
31A Developer is managing an application that includes an Amazon SQS queue. The consumers that process the data from the
queue are connecting in short cycles and the queue often does not return messages. The cost for API calls is increasing. How
can the Developer optimize the retrieval of messages and reduce cost?- ACall the ReceiveMessage API with the VisibilityTimeout parameter set to 30
- BCall the ReceiveMessage API with the WaitTimeSeconds parameter set to 20
- CCall the SetQueueAttributes API with the DelaySeconds parameter set to 900
- DCall the SetQueueAttributes API with the maxReceiveCount set to 20
32A company currently runs a number of legacy automated batch processes for system update management and operational
activities. The company are looking to refactor these processes and require a service that can coordinate multiple AWS services
into serverless workflows.
What is the MOST suitable service for this requirement?- AAmazon SWF
- BAWS Batch
- CAWS Step Functions
- DAWS Lambda
33A Development team have moved their continuous integration and delivery (CI/CD) pipeline into the AWS Cloud. The team is
leveraging AWS CodeCommit for management of source code. The team need to compile their source code, run tests, and
produce software packages that are ready for deployment.
Which AWS service can deliver these outcomes?- AAWS CodePipeline
- BAWS CodeCommit
- CAWS CodeBuild
- DAWS Cloud9
34Every time an Amazon EC2 instance is launched, certain metadata about the instance should be recorded in an Amazon
DynamoDB table. The data is gathered and written to the table by an AWS Lambda function.
What is the MOST efficient method of invoking the Lambda function?- ACreate a CloudWatch Event with an event pattern looking for EC2 state changes and a target set to use the Lambda
function - BCreate a CloudWatch alarm that triggers the Lambda function based on log streams indicating an EC2 state change in
CloudWatch logs - CCreate a CloudTrail trail alarm that triggers the Lambda function based on the RunInstances API action
- DConfigure detailed monitoring on Amazon EC2 and create an alarm that triggers the Lambda function in initialization
- ACreate a CloudWatch Event with an event pattern looking for EC2 state changes and a target set to use the Lambda
35A Developer is migrating Docker containers to Amazon ECS. A large number of containers will be deployed across some newly
deployed ECS containers instances using the same instance type. High availability is provided within the microservices
architecture. Which task placement strategy requires the LEAST configuration for this scenario?- Abinpack
- Brandom
- Cspread
- DFargate
36A Developer has noticed some suspicious activity in her AWS account and is concerned that the access keys associated with her
IAM user account may have been compromised. What is the first thing the Developer do in should do in this situation?- ADelete her IAM user account
- BDelete the compromised access keys
- CReport the incident to AWS Support
- DChange her IAM User account password
37A Developer needs to setup a new serverless application that includes AWS Lambda and Amazon API Gateway as part of a
single stack. The Developer needs to be able to locally build and test the serverless applications before deployment on AWS.
Which service should the Developer use?- AAWS CloudFormation
- BAWS Elastic Beanstalk
- CAWS CodeBuild
- DAWS Serverless Application Model (SAM)
38An application needs to read up to 100 items at a time from an Amazon DynamoDB. Each item is up to 100 KB in size and all
attributes must be retrieved.
What is the BEST way to minimize latency?- AUse GetItem and use a projection expression
- BUse BatchGetItem
- CUse a Scan operation with pagination
- DUse a Query operation with a FilterExpression
39A Developer manages a website running behind an Elastic Load Balancer in the us-east-1 region. The Developer has recently
deployed an identical copy of the website in us-west-1 and needs to send 20% of the traffic to the new site.
How can the Developer achieve this requirement?- AUse an Amazon Route 53 Geolocation Routing Policy
- BUse a blue/green deployment with Amazon Elastic Beanstalk
- CUse a blue/green deployment with Amazon CodeDeploy
- DUse an Amazon Route 53 Weighted Routing Policy
40A Development team are deploying an AWS Lambda function that will be used by a production application. The function code
will be updated regularly, and new versions will be published. The development team do not want to modify application code
to point to each new version.
How can the Development team setup a static ARN that will point to the latest published version?- APublish a mutable version and point it to the $LATEST version
- BUse an unqualified ARN
- CSetup an Alias that will point to the latest version
- DSetup a Route 53 Alias record that points to the published version
41An application is being instrumented to send trace data using AWS X-Ray. A Developer needs to upload segment documents
using JSON-formatted strings to X-Ray using the API. Which API action should the developer use?- AThe PutTraceSegments API action
- BThe PutTelemetryRecords API action
- CThe UpdateGroup API action
- DThe GetTraceSummaries API action
42A three-tier application is being migrated from an on-premises data center. The application includes an Apache Tomcat web
tier, an application tier running on Linux, and a MySQL back end. A Developer must refactor the application to run on the AWS
cloud. The cloud-based application must be fault tolerant and elastic.
How can the Developer refactor the web tier and application tier? (Select TWO.)- ACreate an Amazon CloudFront distribution for the web tier
- BCreate an Auto Scaling group of EC2 instances for both the web tier and application tier
- CUse a multi-AZ Amazon RDS database for the back end using the MySQL engine
- DImplement an Elastic Load Balancer for the application tier
- EImplement an Elastic Load Balancer for both the web tier and the application tier
43A Developer has joined a team and needs to connect to the AWS CodeCommit repository using SSH. What should the Developer
do to configure access using Git?- AOn the Developer’s IAM account, under security credentials, choose to create HTTPS Git credentials for AWS
CodeCommit - BOn the Developer’s IAM account, under security credentials, choose to create an access key and secret ID
- CCreate an account on Github and user those login credentials to login to AWS CodeCommit
- DGenerate an SSH public and private key. Upload the public key to the Developer’s IAM account
- AOn the Developer’s IAM account, under security credentials, choose to create HTTPS Git credentials for AWS
44A large quantity of sensitive data must be encrypted. A Developer will use a custom CMK to generate the encryption key. The
key policy currently looks like this:
What API action must be added to the key policy?- Akms:EnableKey
- Bkms:GenerateDataKey
- Ckms:CreateKey
- Dkms:GetKeyPolicy
45A Developer needs to access AWS CodeCommit over SSH. The SSH keys configured to access AWS CodeCommit are tied to a
user with the following permissions:
{
"version": "2012-10-17"
"Statement": [
{
"Effect": "Allow",
"Action": [
"codecommit:BatchGetRepositories",
"codecommit:Get*"
"codecommit:List*",
"codecommit:GitPull"
],
"Resource": "*"
}
]
}
The Developer needs to create/delete branches.
Which specific IAM permissions need to be added based on the principle of least privilege?- A“codecommit:CreateBranch” and “codecommit:DeleteBranch”
- B“codecommit:Put*:”
- C“codecommit:Update*”
- D“codecommit:*”
46An application uses Amazon Kinesis Data Streams to ingest and process large streams of data records in real time. Amazon EC2
instances consume and process the data using the Amazon Kinesis Client Library (KCL). The application handles the failure
scenarios and does not require standby workers. The application reports that a specific shard is receiving more data than
expected. To adapt to the changes in the rate of data flow, the “hot” shard is resharded.
Assuming that the initial number of shards in the Kinesis data stream is 6, and after resharding the number of shards increased
to 8, what is the maximum number of EC2 instances that can be deployed to process data from all the shards?- A12
- B8
- C6
- D1
47What does an Amazon SQS delay queue accomplish?
- AMessages are hidden for a configurable amount of time when they are first added to the queue
- BMessages are hidden for a configurable amount of time after they are consumed from the queue
- CThe consumer can poll the queue for a configurable amount of time before retrieving a message
- DMessage cannot be deleted for a configurable amount of time after they are consumed from the queue
48An organization needs to add encryption in-transit to an existing website running behind an Elastic Load Balancer. The website’s
Amazon EC2 instances are CPU-constrained and therefore load on their CPUs should not be increased. What should be done to
secure the website? (Select TWO.)- AConfigure an Elastic Load Balancer with SSL pass-through
- BConfigure SSL certificates on an Elastic Load Balancer
- CConfigure an Elastic Load Balancer with a KMS CMK
- DInstall SSL certificates on the EC2 instances
- EConfigure an Elastic Load Balancer with SSL termination
49A company is running a Docker application on Amazon ECS. The application must scale based on user load in the last 15
seconds.
How should the Developer instrument the code so that the requirement can be met?- ACreate a high-resolution custom Amazon CloudWatch metric for user activity data, then publish data every 30
seconds - BCreate a high-resolution custom Amazon CloudWatch metric for user activity data, then publish data every 5 seconds
- CCreate a standard-resolution custom Amazon CloudWatch metric for user activity data, then publish data every 30
seconds - DCreate a standard-resolution custom Amazon CloudWatch metric for user activity data, then publish data every 5
seconds
- ACreate a high-resolution custom Amazon CloudWatch metric for user activity data, then publish data every 30
50A company needs a fully-managed source control service that will work in AWS. The service must ensure that revision control
synchronizes multiple distributed repositories by exchanging sets of changes peer-to-peer. All users need to work productively
even when not connected to a network.
Which source control service should be used?- ASubversion
- BAWS CodeBuild
- CAWS CodeCommit
- DAWS CodeStar
51A Developer needs to return a list of items in a global secondary index from an Amazon DynamoDB table.
Which DynamoDB API call can the Developer use in order to consume the LEAST number of read capacity units?- AScan operation using eventually-consistent reads
- BQuery operation using strongly-consistent reads
- CQuery operation using eventually-consistent reads
- DScan operation using strongly-consistent reads
52A Developer is writing an AWS Lambda function that processes records from an Amazon Kinesis Data Stream. The Developer
must write the function so that it sends a notice to Administrators if it fails to process a batch of records.
How should the Developer write the function?- ASeparate the Lambda handler from the core logic
- BUse Amazon CloudWatch Events to send the processed data
- CConfigure an Amazon SNS topic as an on-failure destination
- DPush the failed records to an Amazon SQS queue
53An application is running on a cluster of Amazon EC2 instances. The application has received an error when trying to read
objects stored within an Amazon S3 bucket. The bucket is encrypted with server-side encryption and AWS KMS managed keys
(SSE-KMS). The error is as follows:
Service: AWSKMS; Status Code: 400, Error Code: ThrottlingException
Which combination of steps should be taken to prevent this failure? (Select TWO.)- AContact AWS support to request an AWS KMS rate limit increase
- BPerform error retries with exponential backoff in the application code
- CContact AWS support to request an S3 rate limit increase
- DImport a customer master key (CMK) with a larger key size
- EUse more than once customer master key (CMK) to encrypt S3 data
54A Developer is creating an AWS Lambda function that generates a new file each time it runs. Each new file must be checked into
an AWS CodeCommit repository hosted in the same AWS account.How should the Developer accomplish this?- AWhen the Lambda function starts, use the Git CLI to clone the repository. Check the new file into the cloned
repository and push the change - BAfter the new file is created in Lambda, use cURL to invoke the CodeCommit API. Send the file to the repository
- CUse an AWS SDK to instantiate a CodeCommit client. Invoke the put_file method to add the file to the repository
- DUpload the new file to an Amazon S3 bucket. Create an AWS Step Function to accept S3 events. In the Step Function,
add the new file to the repository
- AWhen the Lambda function starts, use the Git CLI to clone the repository. Check the new file into the cloned
55A Developer needs to run some code using Lambda in response to an event and forward the execution result to another
application using a pub/sub notification.
How can the Developer accomplish this?- AConfigure a CloudWatch Events alarm the triggers based on Lambda execution success and route the execution
results to Amazon SNS - BConfigure a Lambda “on success” destination and route the execution results to Amazon SNS
- CConfigure a Lambda “on success” destination and route the execution results to Amazon SQS
- DConfigure a CloudWatch Events alarm the triggers based on Lambda execution success and route the execution
results to Amazon SQS
- AConfigure a CloudWatch Events alarm the triggers based on Lambda execution success and route the execution
56An application runs on Amazon EC2 and generates log files. A Developer needs to centralize the log files so they can be queried
and retained. What is the EASIEST way for the Developer to centralize the log files?- AInstall the Amazon CloudWatch Logs agent and collect the logs from the instances
- BCreate a script that copies the log files to Amazon S3 and use a cron job to run the script on a recurring schedule
- CCreate a script that uses the AWS SDK to collect and send the log files to Amazon CloudWatch Logs
- DSetup a CloudWatch Events rule to trigger an SNS topic when an application log file is generated
57A company needs to encrypt a large quantity of data. The data encryption keys must be generated from a dedicated, tamperresistant
hardware device.
To deliver these requirements, which AWS service should the company use?- AAWS KMS
- BAWS CloudHSM
- CAWS Certificate Manager
- DAWS IAM
58A Developer needs to restrict all users and roles from using a list of API actions within a member account in AWS Organizations.
The Developer needs to deny access to a few specific API actions.
What is the MOST efficient way to do this?- ACreate a deny list and specify the API actions to deny
- BCreate an allow list and specify the API actions to deny
- CCreate an IAM policy that denies the API actions for all users and roles
- DCreate an IAM policy that allows only the unrestricted API actions
59A development team require a fully-managed source control service that is compatible with Git.
Which service should they use?- AAWS CodeDeploy
- BAWS Cloud9
- CAWS CodePipeline
- DAWS CodeCommit
60How can a Developer view a summary of proposed changes to an AWS CloudFormation stack without implementing the
changes in production?- ACreate a StackSet
- BCreate a Change Set
- CUse drift detection
- DUse a direct update
61Based on the following AWS CLI command the resulting output, what has happened here?
$ aws lambda invoke --function-name MyFunction --payload
ewogICJrZXkxIjogInZhbHVlMSIsCiAgImtleTIiOiAidmFsdWUyIiwKICAia2V5MyI6ICJ2YWx1ZTMiCn0= response.json
{
"StatusCode": 200
}- AAn AWS Lambda function has been invoked synchronously and has completed successfully
- BAn AWS Lambda function has been invoked synchronously and has not completed successfully
- CAn AWS Lambda function has been invoked asynchronously and has completed successfully
- DAn AWS Lambda function has been invoked asynchronously and has not completed successfully
62A Developer must run a shell script on Amazon EC2 Linux instances each time they are launched by an Amazon EC2 Auto Scaling
group. What is the SIMPLEST way to run the script?- AAdd the script to the user data when creating the launch configuration
- BConfigure Amazon CloudWatch Events to trigger the AWS CLI when an instance is launched and run the script
- CPackage the script in a zip file with some AWS Lambda source code. Upload to Lambda and run the function when
instances are launched - DRun the script using the AWS Systems Manager Run Command
63A Developer has created a task definition that includes the following JSON code:
"placementConstraints": [
{
"expression": "task:group == databases",
"type": "memberOf"
}
]
What will be the effect for tasks using this task definition?- AThey will become members of a task group called “databases”
- BThey will not be placed on container instances in the “databases” task group
- CThey will be placed on container instances in the “databases” task group
- DThey will not be allowed to run unless they have the “databases” tag assigned
64Data must be loaded into an application each week for analysis. The data is uploaded to an Amazon S3 bucket from several
offices around the world. Latency is slowing the uploads and delaying the analytics job. What is the SIMPLEST way to improve
upload times?- AUpload to a local Amazon S3 bucket within each region and enable Cross-Region Replication (CRR)
- BUpload via a managed AWS VPN connection
- CUpload to Amazon CloudFront and then download from the local cache to the S3 bucket
- DUpload using Amazon S3 Transfer Acceleration
65An AWS Lambda function must be connected to an Amazon VPC private subnet that does not have Internet access. The
function also connects to an Amazon DynamoDB table. What MUST a Developer do to enable access to the DynamoDB table?- AAttach an Internet Gateway
- BConfigure a VPC endpoint
- CCreate a route table
- DAttach an ENI to the DynamoDB table
Información
- Descripción
- Selectividad tecnologia Test sobre cad5, creado por Parodo TS el 17/07/2022.
- Autor
- Parodo TS
- Idioma
- English
- Visitas
- 2
- Historial
- Creado el 17 jul 2022 · actualizado el 11 ago 2022
- Etiquetas
- Valoración
- Aún sin valoraciones Valora este test