Quiz
AWS_1~150
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (150)
1A Developer created a dashboard for an application using Amazon API Gateway, Amazon S3, AWS Lambda, and Amazon RDS. The Developer needs an authentication mechanism allowing a user to sign in and view the dashboard. It must be accessible from mobile applications, desktops, and tablets, and must remember user preferences across platforms.
Which AWS service should the Developer use to support this authentication scenario?- AA. AWS KMS
- BB. Amazon Cognito
- CC. AWS Directory Service
- DD. Amazon IAM D
2A Developer has created an S3 bucket s3://mycoolapp and has enabled server across logging that points to the folder s3://mycoolapp/logs. The
Developer moved 100 KB of Cascading Style Sheets (CSS) documents to the folder s3://mycoolapp/css, and then stopped work. When the developer came back a few days later, the bucket was 50 GB.
What is the MOST likely cause of this situation?- AA. The CSS files were not compressed and S3 versioning was enabled.
- BB. S3 replication was enabled on the bucket.
- CC. Logging into the same bucket caused exponential log growth.
- DD. An S3 lifecycle policy has moved the entire CSS file to S3 Infrequent Access.
3A Developer is creating an Auto Scaling group whose instances need to publish a custom metric to Amazon CloudWatch.
Which method would be the MOST secure way to authenticate a CloudWatch PUT request?- AA. Create an IAM user with PutMetricData permission and put the user credentials in a private repository; have applications pull the credentials as needed.
- BB. Create an IAM user with PutMetricData permission, and modify the Auto Scaling launch configuration to inject the user credentials into the instance user data.
- CC. Modify the CloudWatch metric policies to allow the PutMetricData permission to instances from the Auto Scaling group.
- DD. Create an IAM role with PutMetricData permission and modify the Auto Scaling launching configuration to launch instances using that role.
4A Developer has written a serverless application using multiple AWS services. The business logic is written as a Lambda function which has dependencies on third-party libraries. The Lambda function endpoints will be exposed using Amazon API Gateway. The Lambda function will write the information to Amazon
DynamoDB. The Developer is ready to deploy the application but must have the ability to rollback. How can this deployment be automated, based on these requirements?- AA. Deploy using Amazon Lambda API operations to create the Lambda function by providing a deployment package.
- BB. Use an AWS CloudFormation template and use CloudFormation syntax to define the Lambda function resource in the template.
- CC. Use syntax conforming to the Serverless Application Model in the AWS CloudFormation template to define the Lambda function resource.
- DD. Create a bash script which uses AWS CLI to package and deploy the application. A
5What are the steps to using the AWS CLI to launch a templatized serverless application?
- AA. Use AWS CloudFormation get-template then CloudFormation execute-change-set.
- BB. Use AWS CloudFormation validate-template then CloudFormation create-change-set.
- CC. Use AWS CloudFormation package then CloudFormation deploy.
- DD. Use AWS CloudFormation create-stack then CloudFormation update-stack.
6A Developer is creating a web application that requires authentication, but also needs to support guest access to provide users limited access without having to authenticate. What service can provide support for the application to allow guest access?
- AA. IAM temporary credentials using AWS STS.
- BB. Amazon Directory Service
- CC. Amazon Cognito with unauthenticated access enabled
- DD. IAM with SAML integration
7An application takes 40 seconds to process instructions received in an Amazon SQS message.
Assuming the SQS queue is configured with the default VisibilityTimeout value, what is the BEST way, upon receiving a message, to ensure that no other instances can retrieve a message that has already been processed or is currently being processed?- AA. Use the ChangeMessageVisibility API to increase the VisibilityTimeout, then use the DeleteMessage API to delete the message.
- BB. Use the DeleteMessage API call to delete the message from the queue, then call DeleteQueue API to remove the queue.
- CC. Use the ChangeMessageVisibility API to decrease the timeout value, then use the DeleteMessage API to delete the message.
- DD. Use the DeleteMessageVisibility API to cancel the VisibilityTimeout, then use the DeleteMessage API to delete the message.
8A Developer has implemented a Lambda function that needs to add new customers to an RDS database that is expected to run hundreds of times per hour. The
Lambda function is configured to use 512MB of RAM and is based on the following pseudo code:
def lambda_hander (event, context ) :
db = database.connect ()
db.statement(`INSERT INTO Customers (CusomerName) Values (context.name)`)
db.close()
After testing the Lambda function, the Developer notices that the Lambda execution time is much longer than expected. What should the Developer do to improve performance?- AA. Increase the amount of RAM allocated to the Lambda function, which will increase the number of threads the Lambda can use.
- BB. Increase the size of the RDS database to allow for an increased number of database connections each hour.
- CC. Move the database connection and close statement out of the handler. Place the connection in the global space.
- DD. Replace RDS wit Amazon DynamoDB to implement control over the number of writes per second.
9A current architecture uses many Lambda functions invoking one another as a large state machine. The coordination of this state machine is legacy custom code that breaks easily.
Which AWS Service can help refactor and manage the state machine?- AA. AWS Data Pipeline
- BB. AWS SNS with AWS SQS
- CC. Amazon Elastic MapReduce
- DD. AWS Step Functions D
10A Developer is asked to implement a caching layer in front of Amazon RDS. Cached content is expensive to regenerate in case of service failure. Which implementation below would work while maintaining maximum uptime?
- AA. Implement Amazon ElastiCache Redis in Cluster Mode
- BB. Install Redis on an Amazon EC2 instance.
- CC. Implement Amazon ElastiCache Memcached.
- DD. Migrate the database to Amazon Redshift.
11A current architecture uses many Lambda functions invoking one another as large state machine. The coordination of this state machine is legacy custom code that breaks easily.
Which AWS Service can help refactor and manage the state machine?- AA. AWS Data Pipeline
- BB. AWS SNS with AWS SQS
- CC. Amazon Elastic MapReduce
- DD. AWS Step Functions
12A large e-commerce site is being designed to deliver static objects from Amazon S3. The Amazon S3 bucket will server more than 300 GET requests per second.
What should be done to optimize performance? (Select TWO.)- AA. Integrate Amazon CloudFront with Amazon S3.
- BB. Enable Amazon S3 cross-region replication.
- CC. Delete expired Amazon S3 server log files.
- DD. Configure Amazon S3 lifecycle rules.
- EE. Randomize Amazon S3 key name prefixes.
13A company is building a stock trading application that requires sub-millisecond latency in processing trading requests. Amazon DynamoDB is used to store all the trading data that is used to process each request. After load testing the application, the development team found that due to data retrieval times, the latency requirement is not satisfied. Because of sudden high spikes in the number of requests, DynamoDB read capacity has to be significantly over-provisioned to avoid throttling.
What steps should be taken to meet latency requirements and reduce the cost of running the application?- AA. Add Global Secondary Indexes for trading data.
- BB. Store trading data in Amazon S3 and use Transfer Acceleration.
- CC. Add retries with exponential back-off for DynamoDB queries
- DD. Use DynamoDB Accelerator to cache trading data.
14A Developer needs temporary access to resources in a second account.
What is the MOST secure way to achieve this?- AA. Use the Amazon Cognito user pools to get short-lived credentials for the second account.
- BB. Create a dedicated IAM access key for the second account, and send it by mail.
- CC. Create a cross-account access role, and use sts:AssumeRole API to get short-lived credentials.
- DD. Establish trust, and add an SSH key for the second account to the IAM user.
15An application reads data from an Amazon DynamoDB table. Several times a day, for a period of 15 seconds, the application receives multiple errors.
ProvisionedThroughputExceeded -
How should this exception be handled?- AA. Create a new global secondary index for the table to help with the additional requests.
- BB. Retry the failed read requests with exponential backoff.
- CC. Immediately retry the failed read requests.
- DD. Use the DynamoDB "UpdateItem" API to increase the provisioned throughput capacity of the table.
16A Developer has created a large Lambda function, and deployment is failing with the following error:
ClientError: An error occurred (InvalidParameterValueException) when calling the CreateFunction operation: Unzipped size must be smaller than XXXXXXXXX bytes', where XXXXXXXXX is the current Lambda limit
What can the Developer do to fix this problem?- AA. Submit a limit increase request to AWS Support to increase the function to the size needed.
- BB. Use a compression algorithm that is more efficient than ZIP.
- CC. Break the function into multiple smaller Lambda functions.
- DD. ZIP the ZIP file twice to compress it further.
17Given the source code for an AWS Lambda function in the local store.py containing a handler function called get_store and the following AWS
CloudFormation template:
Transform: AWS : : Serverless - 2016-10-31
Resources :
StoreFunc :
Type: AWS : : Serverless : : Dunction
Properties :
Handler : Store.get_store
Runtime : python3.6
What should be done to prepare the template so that it can be deployed using the AWS CLI command aws cloudformation deploy?- AA. Use aws cloudformation compile to base64 encode and embed the source file into a modified CloudFormation template.
- BB. Use aws cloudformation package to upload the source code to an Amazon S3 bucket and produce a modified CloudFormation template.
- CC. Use aws lambda zip to package the source file together with the CloudFormation template and deploy the resulting zip archive.
- DD. Use aws serverless create-package to embed the source file directly into the existing CloudFormation template.
18An application stores images in an S3 bucket. Amazon S3 event notifications are used to trigger a Lambda function that resizes the images. Processing each image takes less than a second.
How will AWS Lambda handle the additional traffic?- AA. Lambda will scale out to execute the requests concurrently.
- BB. Lambda will handle the requests sequentially in the order received.
- CC. Lambda will process multiple images in a single execution.
- DD. Lambda will add more compute to each execution to reduce processing time. A
19A company wants to implement a continuous integration for its workloads on AWS. The company wants to trigger unit test in its pipeline for commits-on its code repository, and wants to be notified of failure events in the pipeline.
How can these requirements be met?- AA. Store the source code in AWS CodeCommit. Create a CodePipeline to automate unit testing. Use Amazon SNS to trigger notifications of failure events.
- BB. Store the source code in GitHub. Create a CodePipeline to automate unit testing. Use Amazon SES to trigger notifications of failure events.
- CC. Store the source code on GitHub. Create a CodePipeline to automate unit testing. Use Amazon CloudWatch to trigger notifications of failure events.
- DD. Store the source code in AWS CodeCommit. Create a CodePipeline to automate unit testing. Use Amazon CloudWatch to trigger notification of failure events.
20A serverless application uses an API Gateway and AWS Lambda.
Where should the Lambda function store its session information across function calls?- AA. In an Amazon DynamoDB table
- BB. In an Amazon SQS queue
- CC. In the local filesystem
- DD. In an SQLite session table using ""DSQLITE_ENABLE_SESSION A
21A Developer has created a software package to be deployed on multiple EC2 instances using IAM roles.
What actions could be performed to verify IAM access to get records from Amazon Kinesis Streams? (Select TWO.)- AA. Use the AWS CLI to retrieve the IAM group.
- BB. Query Amazon EC2 metadata for in-line IAM policies.
- CC. Request a token from AWS STS, and perform a describe action.
- DD. Perform a get action using the ""-dry-run argument.
- EE. Validate the IAM role policy with the IAM policy simulator.
22When writing a Lambda function, what is the benefit of instantiating AWS clients outside the scope of the handler?
- AA. Legibility and stylistic convention
- BB. Taking advantage of connection re-use
- CC. Better error handling
- DD. Creating a new instance per invocation
23An application on AWS is using third-party APIs. The Developer needs to monitor API errors in the code, and wants to receive notifications if failures go above a set threshold value.
How can the Developer achieve these requirements?- AA. Publish a custom metric on Amazon CloudWatch and use Amazon SES for notification.
- BB. Use an Amazon CloudWatch API-error metric and use Amazon SNS for notification.
- CC. Use an Amazon CloudWatch API-error metric and use Amazon SES for notification.
- DD. Publish a custom metric on Amazon CloudWatch and use Amazon SNS for notification.
24A Developer has an application that can upload tens of thousands of objects per second to Amazon S3 in parallel within a single AWS account. As part of new requirements, data stored in S3 must use server side encryption with AWS KMS (SSE-KMS). After creating this change, performance of the application is slower.
Which of the following is MOST likely the cause of the application latency?- AA. Amazon S3 throttles the rate at which uploaded objects can be encrypted using Customer Master Keys.
- BB. The AWS KMS API calls limit is less than needed to achieve the desired performance.
- CC. The client encryption of the objects is using a poor algorithm.
- DD. KMS requires that an alias be used to create an independent display name that can be mapped to a CMK.
25A company wants to migrate its web application to AWS and leverage Auto Scaling to handle pear workloads. The Solutions Architect determined that the best metric for an Auto Scaling event is the number of concurrent users.
Based on this information, what should the Developer use to autoscale based on concurrent users?- AA. An Amazon SNS topic to be triggered when a concurrent user threshold is met
- BB. An Amazon Cloudwatch Networkin metric
- CC. Amazon CloudFront to leverage AWS Edge Locations
- DD. A Custom Amazon CloudWatch metric for concurrent users. D
26A company is migrating its on-premises database to Amazon RDS for MySQL. The company has read-heavy workloads, and wants to make sure it re-factors its code to achieve optimum read performance for its queries.
How can this objective be met?- AA. Add database retries to effectively use RDS with vertical scaling
- BB. Use RDS with multi-AZ deployment
- CC. Add a connection string to use an RDS read replica for read queries
- DD. Add a connection string to use a read replica on an EC2 instance. C
27A Developer is receiving HTTP 400: ThrottlingException errors intermittently when calling the Amazon CloudWatch API. When a call fails, no data is retrieved.
What best practice should first be applied to address this issue?- AA. Contact AWS Support for a limit increase.
- BB. Use the AWS CLI to get the metrics
- CC. Analyze the applications and remove the API call
- DD. Retry the call with exponential backoff
28A Developer is testing a Docker-based application that uses the AWS SDK to interact with Amazon DynamoDB. In the local development environment, the application has used IAM access keys. The application is now ready for deployment onto an ECS cluster.
How should the application authenticate with AWS services in production?- AA. Configure an ECS task IAM role for the application to use
- BB. Refactor the application to call AWS STS AssumeRole based on an instance role
- CC. Configure AWS access key/secret access key environment variables with new credentials
- DD. Configure the credentials file with a new access key/secret access key
29A Developer created a Lambda function for a web application backend. When testing the Lambda function from the AWS Lambda console, the Developer can see that the function is being executed, but there is no log data being generated in Amazon CloudWatch Logs, even after several minutes.
What could cause this situation?- AA. The Lambda function does not have any explicit log statements for the log data to send it to CloudWatch Logs.
- BB. The Lambda function is missing CloudWatch Logs as a source trigger to send log data.
- CC. The execution role for the Lambda function is missing permissions to write log data to the CloudWatch Logs.
- DD. The Lambda function is missing a target CloudWatch Log group.
30An application has hundreds of users. Each user may use multiple devices to access the application. The Developer wants to assign unique identifiers to these users regardless of the device they use.
Which of the following methods should be used to obtain unique identifiers?- AA. Create a user table in Amazon DynamoDB as key-value pairs of users and their devices. Use these keys as unique identifiers.
- BB. Use IAM-generated access key IDs for the users as the unique identifier, but do not store secret keys.
- CC. Implement developer-authenticated identities by using Amazon Cognito, and get credentials for these identities.
- DD. Assign IAM users and roles to the users. Use the unique IAM resource ID as the unique identifier.
31An application is designed to use Amazon SQS to manage messages from many independent senders. Each sender's messages must be processed in the order they are received.
Which SQS feature should be implemented by the Developer?- AA. Configure each sender with a unique MessageGroupId
- BB. Enable MessageDeduplicationIds on the SQS queue
- CC. Configure each message with unique MessageGroupIds.
- DD. Enable ContentBasedDeduplication on the SQS queue
32A deployment package uses the AWS CLI to copy files into any S3 bucket in the account, using access keys stored in environment variables. The package is running on EC2 instances, and the instances have been modified to run with an assumed IAM role and a more restrictive policy that allows access to only one bucket. After the change, the Developer logs into the host and still has the ability to write into all of the S3 buckets in that account.
What is the MOST likely cause of this situation?- AA. An IAM inline policy is being used on the IAM role
- BB. An IAM managed policy is being used on the IAM role
- CC. The AWS CLI is corrupt and needs to be reinstalled
- DD. The AWS credential provider looks for instance profile credentials last
33A Developer is writing transactions into a DynamoDB table called "SystemUpdates" that has 5 write capacity units.
Which option has the highest read throughput?- AA. Eventually consistent reads of 5 read capacity units reading items that are 4 KB in size
- BB. Strongly consistent reads of 5 read capacity units reading items that are 4 KB in size
- CC. Eventually consistent reads of 15 read capacity units reading items that are 1 KB in size
- DD. Strongly consistent reads of 15 read capacity units reading items that are 1 KB in size
34Where should an Elastic Beanstalk configuration file named healthcheckur1.config be placed in the application source bundle?
- AA. In the root of the application
- BB. In the bin folder
- CC. In healthcheckur1.config.ebextension under root
- DD. In the .ebextensions folder
35During non-peak hours, a Developer wants to minimize the execution time of a full Amazon DynamoDB table scan without affecting normal workloads. The workloads average half of the strongly consistent read capacity units during non-peak hours.
How would the Developer optimize this scan?- AA. Use parallel scans while limiting the rate
- BB. Use sequential scans
- CC. Increase read capacity units during the scan operation
- DD. Change consistency to eventually consistent during the scan operation B
36A Developer is creating a Lambda function and will be using external libraries that are not included in the standard Lambda libraries.
What action would minimize the Lambda compute time consumed?- AA. Install the dependencies and external libraries at the beginning of the Lambda function.
- BB. Create a Lambda deployment package that includes the external libraries.
- CC. Copy the external libraries to Amazon S3, and reference the external libraries to the S3 location.
- DD. Install the external libraries in Lambda to be available to all Lambda functions.
37A Developer is writing a Linux-based application to run on AWS Elastic Beanstalk. Application requirements state that the application must maintain full capacity during updates while minimizing cost.
Which type of Elastic Beanstalk deployment policy should the Developer specify for the environment?- AA. Immutable
- BB. Rolling
- CC. All at Once
- DD. Rolling with additional batch
38An application under development is required to store hundreds of video files. The data must be encrypted within the application prior to storage, with a unique key for each video file.
How should the Developer code the application?- AA. Use the KMS Encrypt API to encrypt the data. Store the encrypted data key and data.
- BB. Use a cryptography library to generate an encryption key for the application. Use the encryption key to encrypt the data. Store the encrypted data.
- CC. Use the KMS GenerateDataKey API to get a data key. Encrypt the data with the data key. Store the encrypted data key and data.
- DD. Upload the data to an S3 bucket using server side-encryption with an AWS KMS key.
39A Developer is creating an application that needs to locate the public IPv4 address of the Amazon EC2 instance on which it runs. How can the application locate this information?
- AA. Get the instance metadata by retrieving http://169.254.169.254/latest/metadata/.
- BB. Get the instance user data by retrieving http://169.254.169.254/latest/userdata/.
- CC. Get the application to run IFCONFIG to get the public IP address.
- DD. Get the application to run IPCONFIG to get the public IP address.
40The Lambda function below is being called through an API using Amazon API Gateway. The average execution time for the Lambda function is about 1 second.
The pseudocode for the Lambda function is as shown in the exhibit.
What two actions can be taken to improve the performance of this Lambda function without increasing the cost of the solution? (Select two.)
- AA. Package only the modules the Lambda function requires
- BB. Use Amazon DynamoDB instead of Amazon RDS
- CC. Move the initialization of the variable Amazon RDS connection outside of the handler function
- DD. Implement custom database connection pooling with the Lambda function
- EE. Implement local caching of Amazon RDS data so Lambda can re-use the cache
41tion #42 Topic 1
An application will ingest data at a very high throughput from many sources and must store the data in an Amazon S3 bucket. Which service would BEST accomplish this task?- AA. Amazon Kinesis Firehose
- BB. Amazon S3 Acceleration Transfer
- CC. Amazon SQS
- DD. Amazon SNS
42A Developer has setup an Amazon Kinesis Stream with 4 shards to ingest a maximum of 2500 records per second. A Lambda function has been configured to process these records.
In which order will these records be processed?- AA. Lambda will receive each record in the reverse order it was placed into the stream following a LIFO (last-in, first-out) method
- BB. Lambda will receive each record in the exact order it was placed into the stream following a FIFO (first-in, first-out) method.
- CC. Lambda will receive each record in the exact order it was placed into the shard following a FIFO (first-in, first-out) method. There is no guarantee of order across shards.
- DD. The Developer can select FIFO, (first-in, first-out), LIFO (last-in, last-out), random, or request specific record using the getRecords API.
43A static website is hosted in an Amazon S3 bucket. Several HTML pages on the site use JavaScript to download images from another Amazon S3 bucket. These images are not displayed when users browse the site.
What is the possible cause for the issue?- AA. The referenced Amazon S3 bucket is in another region.
- BB. The images must be stored in the same Amazon S3 bucket.
- CC. Port 80 must be opened on the security group in which the Amazon S3 bucket is located.
- DD. Cross Origin Resource Sharing must be enabled on the Amazon S3 bucket.
44Amazon S3 has the following structure: S3://BUCKET/FOLDERNAME/FILENAME.zip
Which S3 best practice would optimize performance with thousands of PUT request each second to a single bucket?- AA. Prefix folder names with user id; for example, s3://BUCKET/2013-FOLDERNAME/FILENAME.zip
- BB. Prefix file names with timestamps; for example, s3://BUCKET/FOLDERNAME/2013-26-05-15-00-00-FILENAME.zip
- CC. Prefix file names with random hex hashes; for example, s3://BUCKET/FOLDERNAME/23a6-FILENAME.zip
- DD. Prefix folder names with random hex hashes; for example, s3://BUCKET/23a6-FOLDERNAME/FILENAME.zip B
45For a deployment using AWS CodeDeploy, what is the run order of the hooks for in-place deployments?
- AA. Before Install -> Application Stop -> Application Start -> After Install
- BB. Application Stop -> Before Install -> After Install -> Application Start
- CC. Before Install -> Application Stop -> Validate Service -> Application Start
- DD. Application Stop -> Before Install -> Validate Service -> Application Start
46A Developer is developing an application that manages financial transactions. To improve security, multi-factor authentication (MFA) will be required as part of the login protocol.
What services can the Developer use to meet these requirements?- AA. Amazon DynamoDB to store MFA session data, and Amazon SNS to send MFA codes
- BB. Amazon Cognito with MFA
- CC. AWS Directory Service
- DD. AWS IAM with MFA enabled D
47A game stores user game data in an Amazon DynamoDB table. Individual users should not have access to other users' game data. How can this be accomplished?
- AA. Encrypt the game data with individual user keys.
- BB. Restrict access to specific items based on certain primary key values.
- CC. Stage data in SQS queues to inject metadata before accessing DynamoDB.
- DD. Read records from DynamoDB and discard irrelevant data client-side.
48A company developed a set of APIs that are being served through the Amazon API Gateway. The API calls need to be authenticated based on OpenID identity providers such as Amazon or Facebook. The APIs should allow access based on a custom authorization model.
Which is the simplest and MOST secure design to use to build an authentication and authorization model for the APIs?- AA. Use Amazon Cognito user pools and a custom authorizer to authenticate and authorize users based on JSON Web Tokens.
- BB. Build a OpenID token broker with Amazon and Facebook. Users will authenticate with these identify providers and pass the JSON Web Token to the API to authenticate each API call.
- CC. Store user credentials in Amazon DynamoDB and have the application retrieve temporary credentials from AWS STS. Make API calls by passing user credentials to the APIs for authentication and authorization.
- DD. Use Amazon RDS to store user credentials and pass them to the APIs for authentications and authorization.
49A supplier is writing a new RESTful API for customers to query the status of orders. The customers requested the following API endpoint. http://www.supplierdomain.com/status/customerID
Which of the following application designs meet the requirements? (Select two.)- AA. Amazon SQS; Amazon SNS
- BB. Elastic Load Balancing; Amazon EC2
- CC. Amazon ElastiCache; Amazon Elacticsearch Service
- DD. Amazon API Gateway; AWS Lambda
- EE. Amazon S3; Amazon CloudFront
50A development team consists of 10 team members. Similar to a home directory for each team member the manager wants to grant access to user-specific folders in an Amazon S3 bucket. For the team member with the username "TeamMemberX", the snippet of the IAM policy looks like this:
Instead of creating distinct policies for each team member, what approach can be used to make this policy snippet generic for all team members?- AA. Use IAM policy condition
- BB. Use IAM policy principal
- CC. Use IAM policy variables
- DD. Use IAM policy resource
51A legacy service has an XML-based SOAP interface. The Developer wants to expose the functionality of the service to external clients with the Amazon API
Gateway. Which technique will accomplish this?- AA. Create a RESTful API with the API Gateway; transform the incoming JSON into a valid XML message for the SOAP interface using mapping templates.
- BB. Create a RESTful API with the API Gateway; pass the incoming JSON to the SOAP interface through an Application Load Balancer.
- CC. Create a RESTful API with the API Gateway; pass the incoming XML to the SOAP interface through an Application Load Balancer.
- DD. Create a RESTful API with the API Gateway; transform the incoming XML into a valid message for the SOAP interface using mapping templates.
52A company is using AWS CodeBuild to compile a website from source code stored in AWS CodeCommit. A recent change to the source code has resulted in the
CodeBuild project being unable to successfully compile the website.
How should the Developer identify the cause of the failures?- AA. Modify the buildspec.yml file to include steps to send the output of build commands to Amazon CloudWatch.
- BB. Use a custom Docker image that includes the AWS X-Ray agent in the AWS CodeBuild project configuration.
- CC. Check the build logs of the failed phase in the last build attempt in the AWS CodeBuild project build history.
- DD. Manually re-run the build process on a local machine so that the output can be visualized.
53A web application is using Amazon Kinesis Streams for clickstream data that may not be consumed for up to 12 hours.
How can the Developer implement encryption at rest for data within the Kinesis Streams?- AA. Enable SSL connections to Kinesis
- BB. Use Amazon Kinesis Consumer Library
- CC. Encrypt the data once it is at rest with a Lambda function
- DD. Enable server-side encryption in Kinesis Streams
54A Developer wants to use AWS X-Ray to trace a user request end-to-end throughput the software stack. The Developer made the necessary changes in the application tested it, and found that the application is able to send the traces to AWS X-Ray. However, when the application is deployed to an EC2 instance, the traces are not available.
Which of the following could create this situation? (Select two.)- AA. The traces are reaching X-Ray, but the Developer does not have access to view the records.
- BB. The X-Ray daemon is not installed on the EC2 instance.
- CC. The X-Ray endpoint specified in the application configuration is incorrect.
- DD. The instance role does not have "xray:BatchGetTraces" and "xray:GetTraceGraph" permissions.
- EE. The instance role does not have "xray:PutTraceSegments" and "xray:PutTelemetryRecords" permissions.
55A Developer executed a AWS CLI command and received the error shown below:
What action should the Developer perform to make this error human-readable?- AA. Make a call to AWS KMS to decode the message.
- BB. Use the AWS STS decode-authorization-message API to decode the message.
- CC. Use an open source decoding library to decode the message.
- DD. Use the AWS IAM decode-authorization-message API to decode this message.
56A company is using Amazon API Gateway to manage access to a set of microservices implemented as AWS Lambda functions. Following a bug report, the company makes a minor breaking change to one of the APIs.
In order to avoid impacting existing clients when the new API is deployed, the company wants to allow clients six months to migrate from v1 to v2.
Which approach should the Developer use to handle this change?- AA. Update the underlying Lambda function and provide clients with the new Lambda invocation URL.
- BB. Use API Gateway to automatically propagate the change to clients, specifying 180 days in the phased deployment parameter.
- CC. Use API Gateway to deploy a new stage named v2 to the API and provide users with its URL.
- DD. Update the underlying Lambda function, create an Amazon CloudFront distribution with the updated Lambda function as its origin.
57A company has written a Java AWS Lambda function to be triggered whenever a user uploads an image to an Amazon S3 bucket. The function converts the original image to several different formats and then copies the resulting images to another Amazon S3 bucket.
The Developers find that no images are being copied to the second Amazon S3 bucket. They have tested the code on an Amazon EC2 instance with 1GB of
RAM, and it takes an average of 500 seconds to complete.
What is the MOST likely cause of the problem?- AA. The Lambda function has insufficient memory and needs to be increased to 1 GB to match the Amazon EC2 instance
- BB. Files need to be copied to the same Amazon S3 bucket for processing, so the second bucket needs to be deleted.
- CC. Lambda functions have a maximum execution limit of 300 seconds, therefore the function is not completing.
- DD. There is a problem with the Java runtime for Lambda, and the function needs to be converted to node.js. C
58An application stops working with the following error: The specified bucket does not exist. Where is the BEST place to start the root cause analysis?
- AA. Check the Elastic Load Balancer logs for DeleteBucket requests.
- BExplanation
- CC. Check AWS X-Ray for Amazon S3 DeleteBucket alarms.
- DD. Check AWS CloudTrail for a DeleteBucket event.
59An organization must store thousands of sensitive audio and video files in an Amazon S3 bucket. Organizational security policies require that all data written to this bucket be encrypted.
How can compliance with this policy be ensured?- AA. Use AWS Lambda to send notifications to the security team if unencrypted objects are pun in the bucket.
- BB. Configure an Amazon S3 bucket policy to prevent the upload of objects that do not contain the x-amz-server-side-encryption header.
- CC. Create an Amazon CloudWatch event rule to verify that all objects stored in the Amazon S3 bucket are encrypted.
- DD. Configure an Amazon S3 bucket policy to prevent the upload of objects that contain the x-amz-server-side-encryption header.
60An application overwrites an object in Amazon S3, and then immediately reads the same object. Why would the application sometimes retrieve the old version of the object?
- AA. S3 overwrite PUTS are eventually consistent, so the application may read the old object.
- BB. The application needs to add extra metadata to label the latest version when uploading to Amazon S3.
- CC. All S3 PUTS are eventually consistent, so the application may read the old object.
- DD. The application needs to explicitly specify latest version when retrieving the object.
61The release process workflow of an application requires a manual approval before the code is deployed into the production environment.
What is the BEST way to achieve this using AWS CodePipeline?- AA. Use multiple pipelines to allow approval
- BB. Use an approval action in a stage
- CC. Disable the stage transition to allow manual approval
- DD. Disable a stage just prior the deployment stage
62Where should the appspec.yml file be placed in order for AWS CodeDeploy to work?
- AA. In the root of the application source code directory structure
- BB. In the bin folder along with all the complied code
- CC. In an S3 bucket
- DD. In the same folder as the application configuration files
63An existing serverless application processes uploaded image files. The process currently uses a single Lambda function that takes an image file, performs the processing, and stores the file in Amazon S3. Users of the application now require thumbnail generation of the images. Users want to avoid any impact to the time it takes to perform the image uploads.
How can thumbnail generation be added to the application, meeting user requirements while minimizing changes to existing code?- AA. Change the existing Lambda function handling the uploads to create thumbnails at the time of upload. Have the function store both the image and thumbnail in Amazon S3.
- BB. Create a second Lambda function that handles thumbnail generation and storage. Change the existing Lambda function to invoke it asynchronously.
- CC. Create an S3 event notification with a Lambda function destination. Create a new Lambda function to generate and store thumbnails.
- DD. Create an S3 event notification to an SQS Queue. Create a scheduled Lambda function that processes the queue, and generates and stores thumbnails.
64A Developer must re-implement the business logic for an order fulfilment system. The business logic has to make requests to multiple vendors to decide where to purchase an item. The whole process can take up to a week to complete.
What is the MOST efficient and SIMPLEST way to implement a system that meets these requirements?- AA. Use AWS Step Functions to execute parallel Lambda functions, and join the results.
- BB. Create an AWS SQS for each vendor, poll the queue from a worker instance, and joint the results.
- CC. Use AWS Lambda to asynchronously call a Lambda function for each vendor, and join the results.
- DD. Use Amazon CloudWatch Events to orchestrate the Lambda functions.
65A customer wants to deploy its source code on an AWS Elastic Beanstalk environment. The customer needs to perform deployment with minimal outage and should only use existing instances to retain application access log.
What deployment policy would satisfy these requirements?- AA. Rolling
- BB. All at once
- CC. Rolling with an additional batch
- DD. Immutable
66A Developer has been asked to build a real-time dashboard web application to visualize the key prefixes and storage size of objects in Amazon S3 buckets.
Amazon DynamoDB will be used to store the Amazon S3 metadata.
What is the optimal and MOST cost-effective design to ensure that the real-time dashboard is kept up to date with the state of the objects in the Amazon S3 buckets?- AA. Use an Amazon CloudWatch event backed by an AWS Lambda function. Issue an Amazon S3 API call to get a list of all Amazon S3 objects and persist the metadata within DynamoDB. Have the web application poll the DynamoDB table to reflect this change.
- BB. Use Amazon S3 Event Notification backed by a Lambda function to persist the metadata into DynamoDB. Have the web application poll the DynamoDB table to reflect this change.
- CC. Run a cron job within an Amazon EC2 instance to list all objects within Amazon S3 and persist the metadata into DynamoDB. Have the web application poll the DynamoDB table to reflect this change.
- DD. Create a new Amazon EMR cluster to get all the metadata about Amazon S3 objects; persist the metadata into DynamoDB. Have the web application poll the DynamoDB table to reflect this change. A
67A Developer must repeatedly and consistently deploy a serverless RESTful API on AWS.
Which techniques will work? (Choose two.)- AA. Define a Swagger file. Use AWS Elastic Beanstalk to deploy the Swagger file.
- BB. Define a Swagger file. Use AWS CodeDeploy to deploy the Swagger file.
- CC. Deploy a SAM template with an inline Swagger definition.
- DD. Define a Swagger file. Deploy a SAM template that references the Swagger file.
- EE. Define an inline Swagger definition in a Lambda function. Invoke the Lambda function.
68A set of APIs are exposed to customers using the Amazon API Gateway. These APIs have caching enabled on the API Gateway. Customers have asked for an option to invalidate this cache for each of the APIs.
What action can be taken to allow API customers to invalidate the API Cache?- AA. Ask customers to use AWS credentials to call the InvalidateCache API.
- BB. Ask customers to invoke an AWS API endpoint which invalidates the cache.
- CC. Ask customers to pass an HTTP header called Cache-Control:max-age=0.
- DD. Ask customers to add a query string parameter called "INVALIDATE_CACHE" when making an API call. B
69A Developer uses AWS CodeDeploy to automate application deployment that connects to an external MySQL database. The Developer wants to securely access the encrypted secrets, such as API keys and database passwords.
Which of the following solutions would involve the LEAST administrative effort?- AA. Save the secrets in Amazon S3 with AWS KMS server-side encryption, and use a signed URL to access them by using the IAM role from Amazon EC2 instances.
- BB. Use the instance metadata to store the secrets and to programmatically access the secrets from EC2 instances.
- CC. Use the Amazon DynamoDB client-side encryption library to save the secrets in DynamoDB and to programmatically access the secrets from EC2 instances.
- DD. Use AWS SSM Parameter Store to store the secrets and to programmatically access them by using the IAM role from EC2 instances.
70An application running on EC2 instances is storing data in an S3 bucket. Security policy mandates that all data must be encrypted in transit.
How can the Developer ensure that all traffic to the S3 bucket is encrypted?- AA. Install certificates on the EC2 instances.
- BB. Create a bucket policy that allows traffic where SecureTransport is true.
- CC. Create an HTTPS redirect on the EC2 instances.
- DD. Create a bucket policy that denies traffic where SecureTransport is false.
71 Question #72 Topic 1
A company is developing a new online game that will run on top of Amazon ECS. Four distinct Amazon ECS services will be part of the architecture, each requiring specific permissions to various AWS services. The company wants to optimize the use of the underlying Amazon EC2 instances by bin packing the containers based on memory reservation.
Which configuration would allow the Development team to meet these requirements MOST securely?- AA. Create a new Identity and Access Management (IAM) instance profile containing the required permissions for the various ECS services, then associate that instance role with the underlying EC2 instances.
- BB. Create four distinct IAM roles, each containing the required permissions for the associated ECS service, then configure each ECS service to reference the associated IAM role.
- CC. Create four distinct IAM roles, each containing the required permissions for the associated ECS service, then, create an IAM group and configure the ECS cluster to reference that group.
- DD. Create four distinct IAM roles, each containing the required permissions for the associated ECS service, then configure each ECS task definition to referenÑe the associated IAM role.
72A company needs to encrypt data at rest, but it wants to leverage an AWS managed service using its own master key.
Which of the following AWS service can be used to meet these requirements?- AA. SSE with Amazon S3
- BB. SSE with AWS KMS
- CC. Client-side encryption
- DD. AWS IAM roles and policies
73When a Developer tries to run an AWS CodeBuild project, it raises an error because the length of all environment variables exceeds the limit for the combined maximum of characters.
What is the recommended solution?- AA. Add the export LC_ALL="en_US.utf8" command to the pre_build section to ensure POSIX localization.
- BB. Use Amazon Cognito to store key-value pairs for large numbers of environment variables.
- CC. Update the settings for the build project to use an Amazon S3 bucket for large numbers of environment variables.
- DD. Use AWS Systems Manager Parameter Store to store large numbers of environment variables.
74A Lambda function is packaged for deployment to multiple environments, including development, test, production, etc. Each environment has unique set of resources such as databases, etc.
How can the Lambda function use the resources for the current environment?- AA. Apply tags to the Lambda functions.
- BB. Hardcore resources in the source code.
- CC. Use environment variables for the Lambda functions.
- DD. Use separate function for development and production.
75The Developer for a retail company must integrate a fraud detection solution into the order processing solution. The fraud detection solution takes between ten and thirty minutes to verify an order. At peak, the web site can receive one hundred orders per minute.
What is the most scalable method to add the fraud detection solution to the order processing pipeline?- AA. Add all new orders to an Amazon SQS queue. Configure a fleet of 10 EC2 instances spanning multiple AZs with the fraud detection solution installed on them to pull orders from this queue. Update the order with a pass or fails status.
- BB. Add all new orders to an SQS queue. Configure an Auto Scaling group that uses the queue depth metric as its unit of scale to launch a dynamically-sized fleet of EC2 instances spanning multiple AZs with the fraud detection solution installed on them to pull orders from this queue. Update the order with a pass or fails status.
- CC. Add all new orders to an Amazon Kinesis Stream. Subscribe a Lambda function to automatically read batches of records from the Kinesis Stream. The Lambda function includes the fraud detection software and will update the order with a pass or fail status.
- DD. Write all new orders to Amazon DynamoDB. Configure DynamoDB Streams to include all new orders. Subscribe a Lambda function to automatically read batches of records from the Kinesis Stream. The Lambda function includes the fraud detection software and will update the order with a pass or fail status.
76A Developer is creating a mobile application with a limited budget. The solution requires a scalable service that will enable customers to sign up and authenticate into the mobile application while using the organization's current SAML 2.0 identity provider.
Which AWS service should be used to meet these requirements?- AA. AWS Lambda
- BB. Amazon Cognito
- CC. AWS IAM
- DD. Amazon EC2
77An application is real-time processing millions of events that are received through an API.
What service could be used to allow multiple consumers to process the data concurrently and MOST cost-effectively?- AA. Amazon SNS with fanout to an SQS queue for each application
- BB. Amazon SNS with fanout to an SQS FIFO (first-in, firtst-out) queue for each application
- CC. Amazon Kinesis Firehouse
- DD. Amazon Kinesis Streams
78A Developer needs to use AWS X-Ray to monitor an application that is deployed on EC2 instances.
What steps have to be executed to perform the monitoring?- AA. Deploy the X-Ray SDK with the application and use X-Ray annotation.
- BB. Install the X-Ray daemon and instrument the application code.
- CC. Install the X-Ray daemon and configure it to forward data to Amazon CloudWatch Events.
- DD. Deploy the X-Ray SDK with the application and instrument the application code.
79A Developer will be using the AWS CLI on a local development server to manage AWS services.
What can be done to ensure that the CLI uses the Developer's IAM permissions when making commands?- AA. Specify the Developer's IAM access key ID and secret access key as parameters for each CLI command.
- BB. Run the aws configure CLI command, and provide the Developer's IAM access key ID and secret access key.
- CC. Specify the Developer's IAM user name and password as parameters for each CLI command.
- DD. Use the Developer's IAM role when making the CLI command. B
80After installing the AWS CLI, a Developer tries to run the command aws configure but receives the following error:
Error: aws: command not found -
What is the most likely cause of this error?- AA. The aws executable is not in the PATH environment variable.
- BB. Access to the aws executable has been denied to the installer.
- CC. Incorrect AWS credentials were provided.
- DD. The aws script does not have an executable file mode.
81An on-premises legacy application is caching data files locally and writing shared images to local disks.
What is necessary to allow for horizontal scaling when migrating the application to AWS?- AA. Modify the application to have both shared images and caching data written to Amazon EBS.
- BB. Modify the application to read and write cache data on Amazon S3, and also store shared images on S3.
- CC. Modify the application to use Amazon S3 for serving shared images; cache data can then be written to local disks.
- DD. Modify the application to read and write cache data on Amazon S3, while continuing to write shared images to local disks.
82A Developer must trigger an AWS Lambda function based on the item lifecycle activity in an Amazon DynamoDB table.
How can the Developer create the solution?- AA. Enable a DynamoDB stream that publishes an Amazon SNS message. Trigger the Lambda function synchronously from the SNS message.
- BB. Enable a DynamoDB stream that publishes an SNS message. Trigger the Lambda function asynchronously from the SNS message.
- CC. Enable a DynamoDB stream, and trigger the Lambda function synchronously from the stream.
- DD. Enable a DynamoDB stream, and trigger the Lambda function asynchronously from the stream.
83A gaming company is developing a mobile game application for iOS® and Android® platforms. This mobile game securely stores user data locally on the device.
The company wants to allow users to use multiple device for the game, which requires user data synchronization across device.
Which service should be used to synchronize user data across devices without the need to create a backend application?- AA. AWS Lambda
- BB. Amazon S3
- CC. Amazon DynamoDB
- DD. Amazon Cognito
84An on-premises application is implemented using a Linux, Apache, MySQL and PHP (LAMP) stack. The Developer wants to run this application in AWS.
Which of the following sets of AWS services can be used to run this stack?- AA. Amazon API Gateway, Amazon S3
- BB. AWS Lambda, Amazon DynamoDB
- CC. Amazon EC2, Amazon Aurora
- DD. Amazon Cognito, Amazon RDS
- EE. Amazon ECS, Amazon EBS
85An application displays a status dashboard. The status is updated by 1 KB messages from an SQS queue. Although the status changes infrequently, the
Developer must minimize the time between the message arrival in the queue and the dashboard update.
What technique provides the shortest delay in updating the dashboard?- AA. Retrieve the messages from the queue using long polling every 20 seconds.
- BB. Reduce the size of the messages by compressing them before sending.
- CC. Retrieve the messages from the queue using short polling every 10 seconds.
- DD. Reduce the size of each message payload by sending it in two parts. A
86A company is using AWS CodePipeline to deliver one of its applications. The delivery pipeline is triggered by changes to the master branch of an AWS
CodeCommit repository and uses AWS CodeBuild to implement the test and build stages of the process and AWS CodeDeploy to deploy the application.
The pipeline has been operating successfully for several months and there have been no modifications. Following a recent change to the application's source code, AWS CodeDeploy has not deployed the updates application as expected.
What are the possible causes? (Choose two.)- AA. The change was not made in the master branch of the AWS CodeCommit repository.
- BB. One of the earlier stages in the pipeline failed and the pipeline has terminated.
- CC. One of the Amazon EC2 instances in the company's AWS CodePipeline cluster is inactive.
- DD. The AWS CodePipeline is incorrectly configured and is not executing AWS CodeDeploy.
- EE. AWS CodePipeline does not have permissions to access AWS CodeCommit.
87A social media company is using Amazon Cognito in order to synchronize profiles across different mobile devices, to enable end users to have a seamless experience.
Which of the following configurations can be used to silently notify users whenever an update is available on all other devices?- AA. Modify the user pool to include all the devices which keep them in sync.
- BB. Use the SyncCallback interface to receive notifications on the application.
- CC. Use an Amazon Cognito stream to analyze the data and push the notifications.
- DD. Use the push synchronization feature with the appropriate IAM role.
88A website's page load times are gradually increasing as more users access the system at the same time. Analysis indicates that a user profile is being loaded from a database in all the web pages being visited by each user and this is increasing the database load and the page load latency. To address this issue the
Developer decides to cache the user profile data.
Which caching strategy will address this situation MOST efficiently?- AA. Create a new Amazon EC2 Instance and run a NoSQL database on it. Cache the profile data within this database using the write-through caching strategy.
- BB. Create an Amazon ElastiCache cluster to cache the user profile data. Use a cache-aside caching strategy.
- CC. Use a dedicated Amazon RDS instance for caching profile data. Use a write-through caching strategy.
- DD. Create an ElastiCache cluster to cache the user profile data. Use a write-through caching strategy.
89An application needs to use the IP address of the client in its processing. The application has been moved into AWS and has been placed behind an Application
Load Balancer (ALB). However, all the client IP addresses now appear to be the same. The application must maintain the ability to scale horizontally.
Based on this scenario, what is the MOST cost-effective solution to this problem?- AA. Remove the application from the ALB. Delete the ALB and change Amazon Route 53 to direct traffic to the instance running the application.
- BB. Remove the application from the ALB. Create a Classic Load Balancer in its place. Direct traffic to the application using the HTTP protocol.
- CC. Alter the application code to inspect the X-Forwarded-For header. Ensure that the code can work properly if a list of IP addresses is passed in the header.
- DD. Alter the application code to inspect a custom header. Alter the client code to pass the IP address in the custom header.
90A development team is using AWS Elastic Beanstalk to deploy a two-tier application that consists of a load-balanced web tier and an Amazon RDS database tier in production. The team would like to separate the RDS instance from the Elastic Beanstalk.
How can this be accomplished?- AA. Use the Elastic Beanstalk CLI to disassociate the database.
- BB. Use the AWS CLI to disassociate the database.
- CC. Change the deployment policy to disassociate the database.
- DD. Recreate a new Elastic Beanstalk environment without Amazon RDS. C
91According to best practice, how should access keys be managed in AWS? (Choose two.)
- AA. Use the same access key in all applications for consistency.
- BB. Delete all access keys for the account root user.
- CC. Leave unused access keys in the account for tracking purposes.
- DD. Embed and encrypt access keys in code for continuous deployment.
- EE. Use Amazon IAM roles instead of access keys where possible.
92The development team is working on an API that will be served from Amazon API gateway. The API will be served from three environments: development, test, and production. The API Gateway is configured to use 237 GB of cache in all three stages.
Which is the MOST cost-efficient deployment strategy?- AA. Create a single API Gateway with all three stages.
- BB. Create three API Gateways, one for each stage in a single AWS account.
- CC. Create an API Gateway in three separate AWS accounts.
- DD. Enable the cache for development and test environments only when needed.
93An application running on an Amazon Linux EC2 instance needs to manage the AWS infrastructure.
How can the EC2 instance be configured to make AWS API calls securely?- AA. Sign the AWS CLI command using the signature version 4 process.
- BB. Run the aws configure AWS CLI command and specify the access key id and secret access key.
- CC. Specify a role for the EC2 instance with the necessary privileges.
- DD. Pass the access key id and secret access key as parameters for each AWS CLI command.
94A company is migrating from a monolithic architecture to a microservices-based architecture. The Developers need to refactor the application so that the many microservices can asynchronously communicate with each other without impacting performance.
Use of which managed AWS services will enable asynchronous message passing? (Choose two.)- AA. Amazon SQS
- BB. Amazon Cognito
- CC. Amazon Kinesis
- DD. Amazon SNS
- EE. Amazon ElastiCache
95An application runs on multiple EC2 instances behind an ELB.
Where is the session data best written so that it can be served reliably across multiple requests?- AA. Write data to Amazon ElastiCache
- BB. Write data to Amazon Elastic Block Store.
- CC. Write data to Amazon EC2 Instance Store.
- DD. Write data to the root filesystem.
96A Developer is creating a Lambda function that will generate and export a file. The function requires 100 MB of temporary storage for temporary files while executing. These files will not be needed after the function is complete.
How can the Developer MOST efficiently handle the temporary files?- AA. Store the files in EBS and delete the files at the end of the Lambda function.
- BB. Copy the files to EFS and delete the files at the end of the Lambda function.
- CC. Store the files in the /tmp directory and delete the files at the end of the Lambda function.
- DD. Copy the files to an S3 bucket with a lifecycle policy to delete the files.
97A Developer has developed a web application and wants to deploy it quickly on a Tomcat server on AWS. The Developer wants to avoid having to manage the underlying infrastructure.
What is the easiest way to deploy the application, based on these requirements?- AA. AWS CloudFormation
- BB. AWS Elastic Beanstalk
- CC. Amazon S3
- DD. AWS CodePipeline
98An application uses Lambda functions to extract metadata from files uploaded to an S3 bucket; the metadata is stored in Amazon DynamoDB. The application starts behaving unexpectedly, and the Developer wants to examine the logs of the Lambda function code for errors.
Based on this system configuration, where would the Developer find the logs?- AA. Amazon S3
- BB. AWS CloudTrail
- CC. Amazon CloudWatch
- DD. Amazon DynamoDB
99An organization is using Amazon CloudFront to ensure that its users experience low-latency access to its web application. The organization has identified a need to encrypt all traffic between users and CloudFront, and all traffic between CloudFront and the web application.
How can these requirements be met? (Choose two.)- AA. Use AWS KMS to encrypt traffic between CloudFront and the web application.
- BB. Set the Origin Protocol Policy to "HTTPS Only".
- CC. Set the Origin's HTTP Port to 443.
- DD. Set the Viewer Protocol Policy to "HTTPS Only" or "Redirect HTTP to HTTPS".
- EE. Enable the CloudFront option Restrict Viewer Access.
100An application is using Amazon DynamoDB as its data store, and should be able to read 100 items per second as strongly consistent reads. Each item is 5 KB in size.
To what value should the table's provisioned read throughput be set?- AA. 50 read capacity units
- BB. 100 read capacity units
- CC. 200 read capacity units
- DD. 500 read capacity units B
101A web application is designed to allow new users to create accounts using their email addresses. The application will store attributes for each user, and is expecting millions of user to sign up.
What should the Developer implement to achieve the design goals?- AA. Amazon Cognito user pools
- BB. AWS Mobile Hub user data storage
- CC. Amazon Cognito Sync
- DD. AWS Mobile Hub cloud logic
102A company needs a new REST API that can return information about the contents of an Amazon S3 bucket, such as a count of the objects stored in it. The company has decided that the new API should be written as a microservice using AWS Lambda and Amazon API Gateway.
How should the Developer ensure that the microservice has the necessary access to the Amazon S3 bucket, while adhering to security best practices?- AA. Create an IAM user that has permissions to access the Amazon S3 bucket, and store the IAM user credentials in the Lambda function source code.
- BB. Create an IAM role that has permissions to access the Amazon S3 bucket and assign it to the Lambda function as its execution role.
- CC. Create an Amazon S3 bucket policy that specifies the Lambda service as its principal and assign it to the Amazon S3 bucket.
- DD. Create an IAM role, attach the AmazonS3FullAccess managed policy to it, and assign the role to the Lambda function as its execution role.
103An application is running on an EC2 instance. The Developer wants to store an application metric in Amazon CloudWatch.
What is the best practice for implementing this requirement?- AA. Use the PUT Object API call to send data to an S3 bucket. Use an event notification to invoke a Lambda function to publish data to CloudWatch.
- BB. Publish the metric data to an Amazon Kinesis Stream using a PutRecord API call. Subscribe a Lambda function that publishes data to CloudWatch.
- CC. Use the CloudWatch PutMetricData API call to submit a custom metric to CloudWatch. Provide the required credentials to enable the API call.
- DD. Use the CloudWatch PutMetricData API call to submit a custom metric to CloudWatch. Launch the EC2 instance with the required IAM role to enable the API call.
104Queries to an Amazon DynamoDB table are consuming a large amount of read capacity. The table has a significant number of large attributes. The application does not need all of the attribute data.
How can DynamoDB costs be minimized while maximizing application performance?- AA. Batch all the writes, and perform the write operations when no or few reads are being performed.
- BB. Create a global secondary index with a minimum set of projected attributes.
- CC. Implement exponential backoffs in the application.
- DD. Load balance the reads to the table using an Application Load Balancer. C
105AWS CodeBuild builds code for an application, creates the Docker image, pushes the image to Amazon Elastic Container Registry (Amazon ECR), and tags the image with a unique identifier.
If the Developers already have AWS CLI configured on their workstations, how can the Docker images be pulled to the workstations?- AA. Run the following: docker pull REPOSITORY URI : TAG
- BB. Run the output of the following: aws ecr get-login and then run: docker pull REPOSITORY URI : TAG
- CC. Run the following: aws ecr get-login and then run: docker pull REPOSITORY URI : TAG
- DD. Run the output of the following: aws ecr get-download-url-for-layer and then run: docker pull REPOSITORY URI : TAG
106A company caches session information for a web application in an Amazon DynamoDB table. The company wants an automated way to delete old items from the table.
What is the simplest way to do this?- AA. Write a script that deletes old records; schedule the scripts as a cron job on an Amazon EC2 instance.
- BB. Add an attribute with the expiration time; enable the Time To Live feature based on that attribute.
- CC. Each day, create a new table to hold session data; delete the previous day's table.
- DD. Add an attribute with the expiration time; name the attribute ItemExpiration.
107An application is expected to process many files. Each file takes four minutes to process each AWS Lambda invocation. The Lambda function does not return any important data.
What is the fastest way to process all the files?- AA. First split the files to make them smaller, then process with synchronous RequestResponse Lambda invocations.
- BB. Make synchronous RequestResponse Lambda invocations and process the files one by one.
- CC. Make asynchronous Event Lambda invocations and process the files in parallel.
- DD. First join all the files, then process it all at once with an asynchronous Event Lambda invocation.
108The upload of a 15 GB object to Amazon S3 fails. The error message reads: "Your proposed upload exceeds the maximum allowed object size."
What technique will allow the Developer to upload this object?- AA. Upload the object using the multi-part upload API.
- BB. Upload the object over an AWS Direct Connect connection.
- CC. Contact AWS Support to increase the object size limit.
- DD. Upload the object to another AWS region.
109A company has an AWS CloudFormation template that is stored as a single file. The template is able to launch and create a full infrastructure stack.
Which best practice would increase the maintainability of the template?- AA. Use nested stacks for common template patterns.
- BB. Embed credentials to prevent typos.
- CC. Remove mappings to decrease the number of variables.
- DD. Use AWS::Include to reference publicly-hosted template files.
110A Developer wants to encrypt new objects that are being uploaded to an Amazon S3 bucket by an application. There must be an audit trail of who has used the key during this process. There should be no change to the performance of the application.
Which type of encryption meets these requirements?- AA. Server-side encryption using S3-managed keys
- BB. Server-side encryption with AWS KMS-managed keys
- CC. Client-side encryption with a client-side symmetric master key
- DD. Client-side encryption with AWS KMS-managed keys
111An on-premises application makes repeated calls to store files to Amazon S3. As usage of the application has increased, "LimitExceeded" errors are being logged.
What should be changed to fix this error?- AA. Implement exponential backoffs in the application.
- BB. Load balance the application to multiple servers.
- CC. Move the application to Amazon EC2.
- DD. Add a one second delay to each API call.
112An organization is storing large files in Amazon S3, and is writing a web application to display meta-data about the files to end-users. Based on the metadata a user selects an object to download. The organization needs a mechanism to index the files and provide single-digit millisecond latency retrieval for the metadata.
What AWS service should be used to accomplish this?- AA. Amazon DynamoDB
- BB. Amazon EC2
- CC. AWS Lambda
- DD. Amazon RDS
113While developing an application that runs on Amazon EC2 in an Amazon VPC, a Developer identifies the need for centralized storage of application-level logs.
Which AWS service can be used to securely store these logs?- AA. Amazon EC2 VPC Flow Logs
- BB. Amazon CloudWatch Logs
- CC. Amazon CloudSearch
- DD. AWS CloudTrail
114A stock market monitoring application uses Amazon Kinesis for data ingestion. During simulated tests of peak data rates, the Kinesis stream cannot keep up with the incoming data.
What step will allow Kinesis to accommodate the traffic during peak hours?- AA. Install the Kinesis Producer Library (KPL) for ingesting data into the stream.
- BB. Reduce the data retention period to allow for more data ingestion using DecreaseStreamRetentionPeriod.
- CC. Increase the shard count of the stream using UpdateShardCount.
- DD. Ingest multiple records into the stream in a single call using PutRecords.
115Where can PortMapping be defined when launching containers in Amazon ECS?
- AA. Security groups
- BB. Amazon Elastic Container Registry (Amzon ECR)
- CC. Container agent
- DD. Task definition
116An application uses Amazon Kinesis Data Streams to ingest and process large streams of data records in real time. Amazon EC2 instances consume and process the data from the shards of the Kinesis data stream by using Amazon Kinesis Client Library (KCL). The application handles the failure scenarios and does not require standby workers. The application reports that a specific shard is receiving more data than expected. To adapt to the changes in the rate of data flow, the "hot" shard is resharded.
Assuming that the initial number of shards in the Kinesis data stream is 4, and after resharding the number of shards increased to 6, what is the maximum number of EC2 instances that can be deployed to process data from all the shards?- AA. 12
- BB. 6
- CC. 4
- DD. 1
117A Development team is working on a case management solution that allows medical claims to be processed and reviewed. Users log in to provide information related to their medical and financial situations.
As part of the application, sensitive documents such as medical records, medical imaging, bank statements, and receipts are uploaded to Amazon S3. All documents must be securely transmitted and stored. All access to the documents must be recorded for auditing.
What is the MOST secure approach?- AA. Use S3 default encryption using Advanced Encryption Standard-256 (AES-256) on the destination bucket.
- BB. Use Amazon Cognito for authorization and authentication to ensure the security of the application and documents.
- CC. Use AWS Lambda to encrypt and decrypt objects as they are placed into the S3 bucket.
- DD. Use client-side encryption/decryption with Amazon S3 and AWS KMS.
118A company has an internet-facing application that uses Web Identity Federation to obtain a temporary credential from AWS Security Token Service (AWS STS).
The app then uses the token to access AWS services.
Review the following response:
Based on the response displayed what permissions are associated with the call from the application?- AA. Permissions associated with the role AROACLKWSDQRAOEXAMPLE:app1
- BB. Permissions associated with the default role used when the AWS service was built
- CC. Permission associated with the IAM principal that owns the AccessKeyID ASgeIAIOSFODNN7EXAMPLE
- DD. Permissions associated with the account that owns the AWS service
119A Developer is using AWS CLI, but when running list commands on a large number of resources, it is timing out.
What can be done to avoid this time-out?- AA. Use pagination
- BB. Use shorthand syntax
- CC. Use parameter values
- DD. Use quoting strings
120What does an Amazon SQS delay queue accomplish?
- AA. Messages are hidden for a configurable amount of time when they are first added to the queue.
- BB. Messages are hidden for a configurable amount of time after they are consumed from the queue.
- CC. The consumer can poll the queue for a configurable amount of time before retrieving a message.
- DD. Message cannot be deleted for a configurable amount of time after they are consumed from the queue.
121A company has multiple Developers located across the globe who are updating code incrementally for a development project. When Developers upload code concurrently, internet connectivity is slow and it is taking a long time to upload code for deployment in AWS Elastic Beanstalk.
Which step will result in minimized upload and deployment time with the LEAST amount of administrative effort?- AA. Allow the Developers to upload the code to an Amazon S3 bucket, and deploy it directly to Elastic Beanstalk.
- BB. Allow the Developers to upload the code to a central FTP server to deploy the application to Elastic Beanstalk.
- CC. Create an AWS CodeCommit repository, allow the Developers to commit code to it, and then directly deploy the code to Elastic Beanstalk.
- DD. Create a code repository on an Amazon EC2 instance so that all Developers can update the code, and deploy the application from the instance to Elastic Beanstalk.
122A company recently migrated its web, application and NoSQL database tiers to AWS. The company is using Auto Scaling to scale the web and application tiers.
More than 95 percent of the Amazon DynamoDB requests are repeated read-requests.
How can the DynamoDB NoSQL tier be scaled up to cache these repeated requests?- AA. Amazon EMR
- BB. Amazon DynamoDB Accelerator
- CC. Amazon SQS
- DD. Amazon CloudFront
123A company is building an application to track athlete performance using an Amazon DynamoDB table. Each item in the table is identified by a partition key
(user_id) and a sort key (sport_name). The table design is shown below:
A Developer is asked to write a leaderboard application to display the top performers (user_id) based on the score for each sport_name.
What process will allow the Developer to extract results MOST efficiently from the DynamoDB table?- AA. Use a DynamoDB query operation with the key attributes of user_id and sport_name and order the results based on the score attribute.
- BB. Create a global secondary index with a partition key of sport_name and a sort key of score, and get the results
- CC. Use a DynamoDB scan operation to retrieve scores and user_id based on sport_name, and order the results based on the score attribute.
- DD. Create a local secondary index with a primary key of sport_name and a sort key of score and get the results based on the score attribute.
124A Developer is creating a mobile application that will not require users to log in.
What is the MOST efficient method to grant users access to AWS resources?- AA. Use an identity provider to securely authenticate with the application.
- BB. Create an AWS Lambda function to create an IAM user when a user accesses the application.
- CC. Create credentials using AWS KMS and apply these credentials to users when using the application.
- DD. Use Amazon Cognito to associate unauthenticated users with an IAM role that has limited access to resources.
125An application running on Amazon EC2 instances must access objects within an Amaon S3 busket that are encrypted using server-side encryption using AWS
KMS encryption keys (SSE-KMS). The application must have access to the customer master key (CMK) to decrypt the objects.
Which combination of steps will grant the application access? (Select TWO.)- AA. Write an S3 bucket policy that grants the bucket access to the key.
- BB. Grant access to the key in the IAM EC2 role attached to the application's EC2 instances.
- CC. Write a key policy that enables IAM policies to grant access to the key.
- DD. Grant access to the key in the S3 bucket's ACL
- EE. Create a Systems Manager parameter that exposes the KMS key to the EC2 instances. AE
126A company needs a fully-managed source control service that will work in AWS. The service must ensure that revision control synchronizes multiple distributed repositories by exchanging sets of changes peer-to-peer. All users need to work productively even when not connected to a network.
Which source control service should be used?- AA. Subversion
- BB. AWS CodeBuild
- CC. AWS CodeCommit
- DD. AWS CodeStar
127A Developer is writing a serverless application that requires that an AWS Lambda function be invoked every 10 minutes.
What is an automated and serverless way to trigger the function?- AA. Deploy an Amazon EC2 instance based on Linux, and edit its /etc/crontab file by adding a command to periodically invoke the Lambda function.
- BB. Configure an environment variable named PERIOD for the Lambda function. Set the value to 600.
- CC. Create an Amazon CloudWatch Events rule that triggers on a regular schedule to invoke the Lambda function.
- DD. Create an Amazon SNS topic that has a subscription to the Lambda function with a 600-second timer.
128A Developer is writing an imaging micro service on AWS Lambda. The service is dependent on several libraries that are not available in the Lambda runtime environment.
Which strategy should the Developer follow to create the Lambda deployment package?- AA. Create a ZIP file with the source code and all dependent libraries.
- BB. Create a ZIP file with the source code and a script that installs the dependent libraries at runtime.
- CC. Create a ZIP file with the source code. Stage the dependent libraries on an Amazon S3 bucket indicated by the Lambda environment variable LD_LIBRARY_PATH
- DD. Create a ZIP file with the source code and a buildspec.yaml file that installs the dependent libraries on AWS Lambda.
129A Developer is designing a fault-tolerant environment where client sessions will be saved.
How can the Developer ensure that no sessions are lost if an Amazon EC2 instance fails?- AA. Use sticky sessions with an Elastic Load Balancer target group.
- BB. Use Amazon SQS to save session data.
- CC. Use Amazon DynamoDB to perform scalable session hadling.
- DD. Use Elastic Load Balancer connection draining to stop sending requests to failing instances.
130In a move toward using microservices, a company's Management team has asked all Development teams to build their services so that API requests depend only on that service's data store. One team is building a Payments service which has its own database; the service needs data that originates in the Accounts database. Both are using Amazon DynamoDB.
What approach will result in the simplest, decoupled, and reliable method to get near-real time updates from the Accounts database?- AA. Use Amazon Glue to perform frequent ETL updates from the Accounts database to the Payments database.
- BB. Use Amazon ElastiCache in Payments, with the cache updated by triggers in the Accounts database.
- CC. Use Amazon Kinesis Data Firehouse to deliver all changes from the Accounts database to the Payments database.
- DD. Use Amazon DynamoDB Streams to deliver all changes from the Accounts database to the Payments database.
131How should custom libraries be utilized in AWS Lambda?
- AA. Host the library on Amazon S3 and reference to it from the Lambda function.
- BB. Install the library locally and upload a ZIP file of the Lambda function.
- CC. Import the necessary Lambda blueprint when creating the function.
- DD. Modify the function runtime to include the necessary library.
132A company needs to secure its existing website running behind an Elastic Load Balancer. The website's Amazon EC2 instances are CPU-constrained.
What should be done to secure the website while not increasing the CPU load on the EC2 web servers? (Select TWO.)- AA. Configure an Elastic Load Balancer with SSL pass-through.
- BB. Configure SSL certificates on an Elastic Load Balancer.
- CC. Configure an Elastic Load Balancer with a Loadable Storage System.
- DD. Install SSL certificates on the EC2 instances.
- EE. Configure an Elastic Load Balancer with SSL termination.
133An AWS Lambda function generates a 3MB JSON file and then uploads it to an Amazon S3 bucket daily. The file contains sensitive information, so the Developer must ensure that it is encrypted before uploading to the bucket.
Which of the following modifications should the Developer make to ensure that the data is encrypted before uploading it to the bucket?- AA. Use the default AWS KMS customer master key for S3 in the Lambda function code.
- BB. Use the S3 managed key and call the GenerateDataKey API to encrypt the file.
- CC. Use the GenerateDateKey API, then use that data key to encrypt the file in the Lambda function code.
- DD. Use a custom KMS customer master key created for S3 in the Lambda function code.
134A Developer wants to find a list of items in a global secondary index from an Amazon DynamoDB table.
Which DynamoDB API call can the Developer use in order to consume the LEAST number of read capacity units?- AA. Scan operation using eventually-consistent reads
- BB. Query operation using strongly-consistent reads
- CC. Query operation using eventually-consistent reads
- DD. Scan operation using strongly-consistent reads
135A Developer has published an update to an application that is served to a global user base using Amazon CloudFront. After deploying the application, users are not able to see the updated changes.
How can the Developer resolve this issue?- AA. Remove the origin from the CloudFront configuration and add it again.
- BB. Disable forwarding of query strings and request headers from the CloudFront distribution configuration.
- CC. Invalidate all the application objects from the edge caches.
- DD. Disable the CloudFront distribution and enable it again to update all the edge locations. A
136A Developer must deploy a new AWS Lambda function using an AWS CloudFormation template.
Which procedures will deploy a Lambda function? (Select TWO.)- AA. Upload the code to an AWS CodeCommit repository, then add a reference to it in an AWS::Lambda::Function resource in the template.
- BB. Create an AWS::Lambda::Function resource in the template, then write the code directly inside the CloudFormation template.
- CC. Upload a .ZIP file containing the function code to Amazon S3, then add a reference to it in an AWS::Lambda::Function resource in the template.
- DD. Upload a .ZIP file to AWS CloudFormation containing the function code, then add a reference to it in an AWS::Lambda::Function resource in the template.
- EE. Upload the function code to a private Git repository, then add a reference to it in an AWS::Lambda::Function resource in the template. BD
137A Developer wants to enable AWS X-Ray for a secure application that runs in an Amazon ECS environment.
What combination of steps will enable X-Ray? (Select THREE.)- AA. Create a Docker image that runs the X-Ray daemon.
- BB. Add instrumentation to the application code for X-Ray.
- CC. Install the X-Ray daemon on the underlying EC2 instance.
- DD. Configure and use an IAM EC2 instance role.
- EE. Register the application with X-Ray.
- FF. Configure and use an IAM role for tasks.
138A Developer is designing a new application that uses Amazon S3. To satisfy compliance requirements, the Developer must encrypt the data at rest.
How can the Developer accomplish this?- AA. Use s3:x-amz-acl as a condition in the S3 bucket policy.
- BB. Use Amazon RDS with default encryption.
- CC. Use aws:SecureTransport as a condition in the S3 bucket policy.
- DD. Turn on S3 default encryption for the S3 bucket.
139An AWS Elastic Beanstalk application needs to be deployed in multiple regions and requires a different Amazon Machine Image (AMI) in each region.
Which AWS CloudFormation template key can be used to specify the correct AMI for each region?- AA. Parameters
- BB. Outputs
- CC. Mappings
- DD. Resources
140A Developer has been asked to make changes to the source code of an AWS Lambda function. The function is managed using an AWS CloudFormation template. The template is configured to load the source code from an Amazon S3 bucket. The Developer manually created a .ZIP file deployment package containing the changes and put the file into the correct location on Amazon S3. When the function is invoked, the code changes have not been applied.
What step is required to update the function with the changes?- AA. Delete the .ZIP file on S3, and re-upload by using a different object key name.
- BB. Update the CloudFormation stack with the correct values for the function code properties S3Bucket, S3Key, or S3ObjectVersion.
- CC. Ensure that the function source code is base64-encoded before uploading the deployment package to S3.
- DD. Modify the execution role of the Lambda function to allow S3 access permission to the deployment package .ZIP file.
141A Developer needs to design an application running on AWS that will be used to consume Amazon SQS messages that range from 1 KB up to 1GB in size.
How should the Amazon SQS messages be managed?- AA. Use Amazon S3 and the Amazon SQS CLI.
- BB. Use Amazon S3 and the Amazon SQS Extended Client Library for Java.
- CC. Use Amazon EBS and the Amazon SQS CLI.
- DD. Use Amazon EFS and the Amazon SQS CLI.
142A company is developing an application that will run on several Amazon EC2 instances in an Auto Scaling group and can access a database running on Amazon
EC2. The application needs to store secrets required to connect to the database. The application must allow for periodic secret rotation, and there should be no changes to the application when a secret changes.
What is the SAFEST way to meet these requirements?- AA. Associate an IAM role to the EC2 instance where the application is running with permission to access the database.
- BB. Use AWS Systems Manager Parameter Store with the SecureString data type to store secrets.
- CC. Configure the application to store secrets in Amazon S3 object metadata.
- DD. Hard code the database secrets in the application code itself. A
143A Developer writes an AWS Lambda function and uploads the code in a .ZIP file to Amazon S3. The Developer makes changes to the code and uploads a new
.ZIP file to Amazon S3. However, Lambda executes the earlier code.
How can the Developer fix this in the LEAST disruptive way?- AA. Create another Lambda function and specify the new .ZIP file.
- BB. Call the update-function-code API.
- CC. Remove the earlier .ZIP file first, then add the new .ZIP file.
- DD. Call the create-alias API. B
144An AWS Lambda function must read data from an Amazon RDS MySQL database in a VPC and also reach a public endpoint over the internet to get additional data.
Which steps must be taken to allow the function to access both the RDS resource and the public endpoint? (Select TWO.)- AA. Modify the default configuration for the Lambda function to associate it with an Amazon VPC private subnet.
- BB. Modify the default network access control list to allow outbound traffic.
- CC. Add a NAT Gateway to the VPC.
- DD. Modify the default configuration of the Lambda function to associate it with a VPC public subnet.
- EE. Add an environmental variable to the Lambda function to allow outbound internet access.
145A Developer must build an application that uses Amazon DynamoDB. The requirements state that items being stored in the DynamoDB table will be 7KB in size and that reads must be strongly consistent. The maximum read rate is 3 items per second, and the maximum write rate is 10 items per second.
How should the Developer size the DynamoDB table to meet these requirements?- AA. Read: 3 read capacity units Write: 70 write capacity units
- BB. Read: 6 read capacity units Write: 70 write capacity units
- CC. Read: 6 read capacity units Write: 10 write capacity units
- DD. Read: 3 read capacity units Write: 10 write capacity units
146A Developer is creating an AWS Lambda function to process a stream of data from an Amazon Kinesis Data Stream. When the Lambda function parses the data and encounters a missing field, it exits the function with an error. The function is generating duplicate records from the Kinesis stream. When the Developer looks at the stream output without the Lambda function, there are no duplicate records.
What is the reason for the duplicates?- AA. The Lambda function did not advance the Kinesis stream pointer to the next record after the error.
- BB. The Lambda event source used asynchronous invocation, resulting in duplicate records.
- CC. The Lambda function did not handle the error, and the Lambda service attempted to reprocess the data.
- DD. The Lambda function is not keeping up with the amount of data coming from the stream.
147A company maintains an application responsible for processing several thousand external callbacks each day. The company's System administrators want to know how many callbacks are being received on a rolling basis, and they want this data available for 10 days.
The company also wants the ability to issue automated alerts if the number of callbacks exceeds the defined thresholds.
What is the MOST cost-effective way to address the need to track and alert on these statistics?- AA. Push callback data to an Amazon RDS database that can be queried to show historical data and to alert on exceeded thresholds.
- BB. Push callback data to AWS X-Ray and use AWS Lambda to query, display, and alert on exceeded thresholds.
- CC. Push callback data to Amazon Kinesis Data Streams and invoke an AWS Lambda function that stores data in Amazon DynamoDB and sends the required alerts.
- DD. Push callback data to Amazon CloudWatch as a custom metric and use the CloudWatch alerting mechanisms to alert System Administrators. C
148A company has a website that is developed in PHP and WordPress and is launched using AWS Elastic Beanstalk. There is a new version of the website that needs to be deployed in the Elastic Beanstalk environment. The company cannot tolerate having the website offline if an update fails. Deployments must have minimal impact and rollback as soon as possible.
What deployment method should be used?- AA. All at once
- BB. Rolling
- CC. Snapshots
- DD. Immutable
149A company has a multi-tiered web application on AWS. During a recent spike in traffic, one of the primary relational databases on Amazon RDS could not serve all the traffic. Some read queries for repeatedly accessed items failed, so users received error messages.
What can be done to minimize the impact on database read queries MOST efficiently during future traffic spikes?- AA. Use Amazon S3 to cache database query results.
- BB. Use Amazon RDS as a custom origin for Amazon CloudFront.
- CC. Use local storage and memory on Amazon EC2 instances to cache data.
- DD. Use Amazon ElastiCache in front of the primary database to cache data.
150A Development team currently supports an application that uses an in-memory store to save accumulated game results. Individual results are stored in a database. As part of migrating to AWS, the team needs to use automatic scaling. The team knows this will yield inconsistent results.
Where should the team store these accumulated game results to BEST allow for consistent results without impacting performance?- AA. Amazon S3
- BB. Amazon RDS
- CC. Amazon ElastiCache
- DD. Amazon Kinesis C
Information
- Description
- Computer Science Quiz on AWS_1~150, created by Nguyen Nhan on 07/09/2020.
- Author
- Nguyen Nhan
- Language
- English
- Views
- 21
- Tags
- Rating
- No ratings yet Rate this quiz