Quiz
AWS_151~300
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (150)
1In a multi-container Docker environment in AWS Elastic Beanstalk, what is required to configure container instances in the environment?
- AA. An Amazon ECS task definition
- BB. An Amazon ECS cluster
- CC. A Docker in an application package
- DD. A CLI for Elastic Beanstalk
2An application that runs on an Amazon EC2 instance needs to access and make API calls to multiple AWS services.
What is the MOST secure way to provide access to the AWS services with MINIMAL management overhead?- AA. Use AWS KMS to store and retrieve credentials.
- BB. Use EC2 instance profiles.
- CC. Use AWS root user to make requests to the application.
- DD. Store and retrieve credentials from AWS CodeCommit.
3A company is creating an application that will require users to access AWS services and allow them to reset their own passwords.
Which of the following would allow the company to manage users and authorization while allowing users to reset their own passwords?- AA. Amazon Cognito identify pools and AWS STS
- BB. Amazon Cognito identity pools and AWS IAM
- CC. Amazon Cognito user pools and AWS KMS
- DD. Amazon Cognito user pools and identity pools
4A company has three different environments: Development, QA, and Production. The company wants to deploy its code first in the Development environment, then QA, and then Production.
Which AWS service can be used to meet this requirement?- AA. Use AWS CodeCommit to create multiple repositories to deploy the application.
- BB. Use AWS CodeBuild to create, configure, and deploy multiple build application projects.
- CC. Use AWS Data Pipeline to create multiple data pipeline provisions to deploy the application.
- DD. Use AWS CodeDeploy to create multiple deployment groups.
5A company uses Amazon DynamoDB for managing and tracking orders. The DynamoDB table is partitioned based on the order date. The company receives a huge increase in orders during a sales event, causing DynamoDB writes to throttle, and the consumed throughput is far below the provisioned throughput.
According to AWS best practices, how can this issue be resolved with MINIMAL costs?- AA. Create a new DynamoDB table for every order date.
- BB. Increase the read and write capacity units of the DynamoDB table.
- CC. Add a random number suffix to the partition key values.
- DD. Add a global secondary index to the DynamoDB table.
6A company is providing services to many downstream consumers. Each consumer may connect to one or more services. This has resulted in a complex architecture that is difficult to manage and does not scale well. The company needs a single interface to manage these services to consumers.
Which AWS service should be used to refactor this architecture?- AA. AWS Lambda
- BB. AWS X-Ray
- CC. Amazon SQS
- DD. Amazon API Gateway
7A Developer is creating a serverless website with content that includes HTML files, images, videos, and JavaScript (client-side scripts).
Which combination of services should the Developer use to create the website?- AA. Amazon S3 and Amazon CloudFront
- BB. Amazon EC2 and Amazon ElastiCache
- CC. Amazon ECS and Redis
- DD. AWS Lambda and Amazon API Gateway
8A Development team has pushed out 10 applications running on several Amazon EC2 instances. The Operations team is asking for a graphical representation of one key performance metric for each application. These metrics should be available on one screen for easy monitoring.
Which steps should the Developer take to accomplish this using Amazon CloudWatch?- AA. Create a custom namespace with a unique metric name for each application.
- BB. Create a custom dimension with a unique metric name for each application.
- CC. Create a custom event with a unique metric name for each application.
- DD. Create a custom alarm with a unique metric name for each application.
9A Developer wants access to make the log data of an application running on an EC2 instance available to systems administrators.
Which of the following enables monitoring of this metric in Amazon CloudWatch?- AA. Retrieve the log data from CloudWatch using the GetMetricData API call
- BB. Retrieve the log data from AWS CloudTrail using the LookupEvents API call.
- CC. Launch a new EC2 instance, configure Amazon CloudWatch Events, and then install the application.
- DD. Install the Amazon CloudWatch Logs agent on the EC2 instance that the application is running on.
10A nightly batch job loads 1 million new records into a DynamoDB table. The records are only needed for one hour, and the table needs to be empty by the next night's batch job.
Which is the MOST efficient and cost-effective method to provide an empty table?- AA. Use DeleteItem using a ConditionExpression.
- BB. Use BatchWriteItem to empty all of the rows.
- CC. Write a recursive function that scans and calls out DeleteItem.
- DD. Create and then delete the table after the task has completed.
11A company has an application that logs all information to Amazon S3. Whenever there is a new log file, an AWS Lambda function is invoked to process the log files. The code works, gathering all of the necessary information. However, when checking the Lambda function logs, duplicate entries with the same request ID are found.
What is causing the duplicate entries?- AA. The S3 bucket name was specified incorrectly.
- BB. The Lambda function failed, and the Lambda service retired the invocation with a delay.
- CC. There was an S3 outage, which caused duplicate entries of the sale log file.
- DD. The application stopped intermittently and then resumed.
12A company maintains a REST service using Amazon API Gateway and the API Gateway native API key validation. The company recently launched a new registration page, which allows users to sign up for the service. The registration page creates a new API key using CreateApiKey and sends the new key to the user. When the user attempts to call the API using this key, the user receives a 403 Forbidden error. Existing users are unaffected and can still call the API.
What code updates will grant these new users access to the API?- AA. The createDeployment method must be called so the API can be redeployed to include the newly created API key.
- BB. The updateAuthorizer method must be called to update the API's authorizer to include the newly created API key.
- CC. The importApiKeys method must be called to import all newly created API keys into the current stage of the API.
- DD. The createUsagePlanKey method must be called to associate the newly created API key with the correct usage plan. C
13A Developer is writing a mobile application that allows users to view images from an S3 bucket. The users must be able to log in with their Amazon login, as well as Facebook® and/or Google® accounts.
How can the Developer provide this authentication functionality?- AA. Use Amazon Cognito with web identity federation.
- BB. Use Amazon Cognito with SAML-based identity federation.
- CC. Use AWS IAM Access/Secret keys in the application code to allow Get* on the S3 bucket.
- DD. Use AWS STS AssumeRole in the application code and assume a role with Get* permissions on the S3 bucket.
14A Developer has created a Lambda function and is finding that the function is taking longer to complete than expected. After some debugging, the Developer has discovered that increasing compute capacity would improve performance.
How can the Developer increase the Lambda compute resources?- AA. Run on a larger instance size with more compute capacity.
- BB. Increase the maximum execution time.
- CC. Specify a larger compute capacity when calling the Lambda function.
- DD. Increase the allocated memory for the Lambda function.
15An e-commerce site allows returning users to log in to display customized web pages. The workflow is shown in the image below:
An application is running on EC2 instances. Amazon RDS is used for the database that stores user accounts and preferences. The website freezes or is slow to load while waiting for the login step to complete. The remaining components of the site are well-optimized.
Which of the following techniques will resolve this issue? (Select Two.)- AA. Implement the user login page as an asynchronous Lambda function.
- BB. Use Amazon ElastiCache for MemCached to cache user data.
- CC. Use Amazon Application Load Balancer to load balance the traffic to the website.
- DD. Call the database asynchronously so the code can continue executing.
- EE. Batch login requests from hundreds of users together as a single read request to the database. BD
16A Developer is building a mobile application and needs any update to user profile data to be pushed to all devices accessing the specific identity. The Developer does not want to manage a back end to maintain the user profile data.
What is the MOST efficient way for the Developer to achieve these requirements using Amazon Cognito?- AA. Use Cognito federated identities.
- BB. Use a Cognito user pool.
- CC. Use Cognito Sync.
- DD. Use Cognito events.
17A company is migrating a single-server, on-premises web application to AWS. The company intends to use multiple servers behind an Elastic Load Balancer
(ELB) to balance the load, and will also store session data in memory on the web server. The company does not want to lose that session data if a server fails or goes offline, and it wants to minimize user's downtime.
Where should the company move session data to MOST effectively reduce downtime and make users' session data more fault tolerant?- AA. An Amazon ElastiCache for Redis cluster
- BB. A second Amazon EBS volume
- CC. The web server's primary disk
- DD. An Amazon EC2 instance dedicated to session data
18A Developer created configuration specifications for an AWS Elastic Beanstalk application in a file named healthcheckurl.yaml in the .ebextensions/directory of their application source bundle. The file contains the following:
After the application launches, the health check is not being run on the correct path, event though it is valid.
What can be done to correct this configuration file?- AA. Convert the file to JSON format.
- BB. Rename the file to a .config extension.
- CC. Change the configuration section from options_settings to resources.
- DD. Change the namespace of the option settings to a custom namespace.
19A Developer is making changes to a custom application that is currently using AWS Elastic Beanstalk.
After the Developer completes the changes, what solutions will update the Elastic Beanstalk environment with the new application version? (Choose two.)- AA. Package the application code into a .zip file, and upload, then deploy the packaged application from the AWS Management Console
- BB. Package the application code into a .tar file, create a new application version from the AWS Management Console, then update the environment by using AWS CLI
- CC. Package the application code into a .tar file, and upload and deploy the packaged application from the AWS Management Console
- DD. Package the application code into a .zip file, create a new application version from the packaged application by using AWS CLI, then update the environment by using AWS CLI
- EE. Package the application code into a .zip file, create a new application version from the AWS Management Console, then rebuild the environment by using AWS CLI
20To include objects defined by the AWS Serverless Application Model (SAM) in an AWS CloudFormation template, in addition to Resources, what section MUST be included in the document root?
- AA. Conditions
- BB. Globals
- CC. Transform
- DD. Properties
21A company is using Amazon RDS MySQL instances for its application database tier and Apache Tomcat servers for its web tier. Most of the database queries from web applications are repeated read requests.
Use of which AWS service would increase in performance by adding in-memory store for repeated read queries?- AA. Amazon RDS Multi-AZ
- BB. Amazon SQS
- CC. Amazon ElastiCache
- DD. Amazon RDS read replica
22A Developer is investigating an issue whereby certain requests are passing through an Amazon API Gateway endpoint /MyAPI, but the requests do not reach the
AWS Lambda function backing /MyAPI. The Developer found that a second Lambda function sometimes runs at maximum concurrency allowed for the given AWS account.
How can the Developer address this issue?- AA. Manually reduce the concurrent execution limit at the account level
- BB. Add another API Gateway stage for /MyAPI, and shard the requests
- CC. Configure the second Lambda function's concurrency execution limit
- DD. Reduce the throttling limits in the API Gateway /MyAPI endpoint
23A Developer must analyze performance issues with production-distributed applications written as AWS Lambda functions. These distributed Lambda applications invoke other components that make up the applications.
How should the Developer identify and troubleshoot the root cause of the performance issues in production?- AA. Add logging statements to the Lambda functions, then use Amazon CloudWatch to view the logs.
- BB. Use AWS Cloud Trail and then examine the logs
- CC. Use AWS X-Ray, then examine the segments and errors
- DD. Run Amazon Inspector agents and then analyze performance
24A Developer wants to debug an application by searching and filtering log data. The application logs are stored in Amazon CloudWatch Logs. The Developer creates a new metric filter to count exceptions in the application logs. However, no results are returned from the logs.
What is the reason that no filtered results are being returned?- AA. A setup of the Amazon CloudWatch interface VPC endpoint is required for filtering the CloudWatch Logs in the VPC
- BB. CloudWatch Logs only publishes metric data for events that happen after the filter is created
- CC. The log group for CloudWatch Logs should be first streamed to Amazon Elasticsearch Service before metric filtering returns the results
- DD. Metric data points for logs groups can be filtered only after they are exported to an Amazon S3 bucket
25An e-commerce web application that shares session state on-premises is being migrated to AWS. The application must be fault tolerant, natively highly scalable, and any service interruption should not affect the user experience.
What is the best option to store the session state?- AA. Store the session state in Amazon ElastiCache
- BB. Store the session state in Amazon CloudFront
- CC. Store the session state in Amazon S3
- DD. Enable session stickiness using elastic load balancers
26A Developer is creating a template that uses AWS CloudFormation to deploy an application. This application is serverless and uses Amazon API Gateway,
Amazon DynamoDB, and AWS Lambda.
Which tool should the Developer use to define simplified syntax for expressing serverless resources?- AA. CloudFormation serverless intrinsic functions
- BB. AWS serverless express
- CC. An AWS serverless application model
- DD. A CloudFormation serverless plugin
27A Developer has a stateful web server on-premises that is being migrated to AWS. The Developer must have greater elasticity in the new design.
How should the Developer re-factor the application to make it more elastic? (Choose two.)- AA. Use pessimistic concurrency on Amazon DynamoDB
- BB. Use Amazon CloudFront with an Auto Scaling group
- CC. Use Amazon CloudFront with an AWS Web Application Firewall
- DD. Store session state data in an Amazon DynamoDB table
- EE. Use an ELB with an Auto Scaling group
28A company needs to distribute firmware updates to its customers around the world.
Which service will allow easy and secure control of the access to the downloads at the lowest cost?- AA. Use Amazon CloudFront with signed URLs for Amazon S3
- BB. Create a dedicated Amazon CloudFront Distribution for each customer
- CC. Use Amazon CloudFront with AWS Lambda@Edge
- DD. Use Amazon API Gateway and AWS Lambda to control access to an S3 bucket
29A company is running an application built on AWS Lambda functions. One Lambda function has performance issues when it has to download a 50MB file from the
Internet in every execution. This function is called multiple times a second.
What solution would give the BEST performance increase?- AA. Cache the file in the /tmp directory
- BB. Increase the Lambda maximum execution time
- CC. Put an Elastic Load Balancer in front of the Lambda function
- DD. Cache the file in Amazon S3 D
30An application writes items to an Amazon DynamoDB table. As the application scales to thousands of instances, calls to the DynamoDB API generate occasional
ThrottlingException errors. The application is coded in a language incompatible with the AWS SDK.
How should the error be handled?- AA. Add exponential backoff to the application logic
- BB. Use Amazon SQS as an API message bus
- CC. Pass API calls through Amazon API Gateway
- DD. Send the items to DynamoDB through Amazon Kinesis Data Firehose
31An application deployed on AWS Elastic Beanstalk experiences increased error rates during deployments of new application versions, resulting in service degradation for users. The Development team believes that this is because of the reduction in capacity during the deployment steps. The team would like to change the deployment policy configuration of the environment to an option that maintains full capacity during deployment while using the existing instances.
Which deployment policy will meet these requirements while using the existing instances?- AA. All at once
- BB. Rolling
- CC. Rolling with additional batch
- DD. Immutable
32A Developer is working on an application that handles 10MB documents that contain highly-sensitive data. The application will use AWS KMS to perform client- side encryption.
What steps must be followed?- AA. Invoke the Encrypt API passing the plaintext data that must be encrypted, then reference the customer managed key ARN in the KeyId parameter
- BB. Invoke the GenerateRandom API to get a data encryption key, then use the data encryption key to encrypt the data
- CC. Invoke the GenerateDataKey API to retrieve the encrypted version of the data encryption key to encrypt the data
- DD. Invoke the GenerateDataKey API to retrieve the plaintext version of the data encryption key to encrypt the data
33A Developer is building a web application that uses Amazon API Gateway to expose an AWS Lambda function to process requests from clients. During testing, the Developer notices that the API Gateway times out even though the Lambda function finishes under the set time limit.
Which of the following API Gateway metrics in Amazon CloudWatch can help the Developer troubleshoot the issue? (Choose two.)- AA. CacheHitCount
- BB. IntegrationLatency
- CC. CacheMissCount
- DD. Latency
- EE. Count AD
34An AWS Lambda function must access an external site by using a regularly rotated user name and password. These items must be kept securely and cannot be stored in the function code.
What combination of AWS services can be used to accomplish this? (Choose two.)- AA. AWS Certificate Manager (ACM)
- BB. AWS Systems Manager Parameter Store
- CC. AWS Trusted Advisor
- DD. AWS KMS
- EE. Amazon GuardDuty
35A Developer is trying to deploy a serverless application using AWS CodeDeploy. The application was updated and needs to be redeployed.
What file does the Developer need to update to push that change through CodeDeploy?- AA. dockerrun.aws.json
- BB. buildspec.yml
- CC. appspec.yml
- DD. ebextensions.config
36A Developer wants to upload data to Amazon S3 and must encrypt the data in transit.
Which of the following solutions will accomplish this task? (Choose two.)- AA. Set up hardware VPN tunnels to a VPC and access S3 through a VPC endpoint
- BB. Set up Client-Side Encryption with an AWS KMS-Managed Customer Master Key
- CC. Set up Server-Side Encryption with AWS KMS-Managed Keys
- DD. Transfer the data over an SSL connection
- EE. Set up Server-Side Encryption with S3-Managed Keys
37A company is running a Docker application on Amazon ECS. The application must scale based on user load in the last 15 seconds.
How should a Developer instrument the code so that the requirement can be met?- AA. Create a high-resolution custom Amazon CloudWatch metric for user activity data, then publish data every 30 seconds
- BB. Create a high-resolution custom Amazon CloudWatch metric for user activity data, then publish data every 5 seconds
- CC. Create a standard-resolution custom Amazon CloudWatch metric for user activity data, then publish data every 30 seconds
- DD. Create a standard-resolution custom Amazon CloudWatch metric for user activity data, then publish data every 5 seconds
38A company needs to ingest terabytes of data each hour from thousands of sources that are delivered almost continually throughout the day. The volume of messages generated varies over the course of the day. Messages must be delivered in real time for fraud detection and live operational dashboards.
Which approach will meet these requirements?- AA. Send the messages to an Amazon SQS queue, then process the messages by using a fleet of Amazon EC2 instances
- BB. Use the Amazon S3 API to write messages to an S3 bucket, then process the messages by using Amazon Redshift
- CC. Use AWS Data Pipeline to automate the movement and transformation of data
- DD. Use Amazon Kinesis Data Streams with Kinesis Client Library to ingest and deliver messages
39A Developer accesses AWS CodeCommit over SSH. The SSH keys configured to access AWS CodeCommit are tied to a user with the following permissions:
The Developer needs to create/delete branches.
Which specific IAM permissions need to be added, based on the principle of least privilege?- AA. "codecommit:CreateBranch" "codecommit:DeleteBranch"
- BB. "codecommit:Put*"
- CC. "codecommit:Update*"
- DD. "codecommit:*"
40A Developer has been asked to create an AWS Lambda function that is triggered any time updates are made to items in an Amazon DynamoDB table. The function has been created, and appropriate permissions have been added to the Lambda execution role. Amazon DynamoDB streams have been enabled for the table, but the function is still not being triggered.
Which option would enable DynamoDB table updates to trigger the Lambda function?- AA. Change the StreamViewType parameter value to NEW_AND_OLD_IMAGES for the DynamoDB table
- BB. Configure event source mapping for the Lambda function
- CC. Map an Amazon SNS topic to the DynamoDB streams
- DD. increase the maximum execution time (timeout) setting of the Lambda function
41An application is being developed to audit several AWS accounts. The application will run in Account A and must access AWS services in Accounts B and C.
What is the MOST secure way to allow the application to call AWS services in each audited account?- AA. Configure cross-account roles in each audited account. Write code in Account a that assumes those roles
- BB. Use S3 cross-region replication to communicate among accounts, with Amazon S3 event notifications to trigger Lambda functions
- CC. Deploy an application in each audited account with its own role. Have Account A authenticate with the application
- DD. Create an IAM user with an access key in each audited account. Write code in Account A that uses those access keys
42A Developer is building a three-tier web application that should be able to handle a minimum of 5000 requests per minute. Requirements state that the web tier should be completely stateless while the application maintains session state for the users.
How can session data be externalized, keeping latency at the LOWEST possible value?- AA. Create an Amazon RDS instance, then implement session handling at the application level to leverage a database inside the RDS database instance for session data storage
- BB. Implement a shared file system solution across the underlying Amazon EC2 instances, then implement session handling at the application level to leverage the shared file system for session data storage
- CC. Create an Amazon ElastiCache Memcached cluster, then implement session handling at the application level to leverage the cluster for session data storage
- DD. Create an Amazon DynamoDB table, then implement session handling at the application level to leverage the table for session data storage
43An Amazon DynamoDB table uses a Global Secondary Index (GSI) to support read queries. The primary table is write-heavy, whereas the GSI is used for read operations. Looking at Amazon CloudWatch metrics, the Developer notices that write operations to the primary table are throttled frequently under heavy write activity. However, write capacity units to the primary table are available and not fully consumed.
Why is the table being throttled?- AA. The GSI write capacity units are underprovisioned
- BB. There are not enough read capacity units on the primary table
- CC. Amazon DynamoDB Streams is not enabled on the table
- DD. A large write operation is being performed against another table
44A company runs an e-commerce website that uses Amazon DynamoDB where pricing for items is dynamically updated in real time. At any given time, multiple updates may occur simultaneously for pricing information on a particular product. This is causing the original editor's changes to be overwritten without a proper review process.
Which DynamoDB write option should be selected to prevent this overwriting?- AA. Concurrent writes
- BB. Conditional writes
- CC. Atomic writes
- DD. Batch writes B
45A company needs a version control system for collaborative software development. Features of the system must include the following:
✑ Support for batches of changes across multiple files
✑ Parallel branching
✑ Version tracking
Which AWS service will meet these requirements?- AA. AWS CodePipeline
- BB. Amazon S3
- CC. AWS Code Build
- DD. AWS CodeCommit D
46A company is using continuous integration and continuous delivery systems. A Developer now needs to automate a software package deployment to both
Amazon EC2 instances and virtual servers running on-premises.
Which AWS service should be used to accomplish this?- AA. AWS CodePipeline
- BB. AWS CodeBuild
- CC. AWS Elastic Beanstalk
- DD. AWS CodeDeploy
47A Developer created a new AWS account and must create a scalable AWS Lambda function that meets the following requirements for concurrent execution:
✑ Average execution time of 100 seconds
✑ 50 requests per second
Which step must be taken prior to deployment to prevent errors?- AA. Implement dead-letter queues to capture invocation errors
- BB. Add an event source from Amazon API Gateway to the Lambda function
- CC. Implement error handling within the application code
- DD. Contact AWS Support to increase the concurrent execution limits
48A Development team wants to instrument their code to provide more detailed information to AWS X-Ray than simple outgoing and incoming requests. This will generate large amounts of data, so the Development team wants to implement indexing so they can filter the data.
What should the Development team do to achieve this?- AA. Add annotations to the segment document and the code
- BB. Add metadata to the segment document and the code
- CC. Configure the necessary X-Ray environment variables
- DD. Install required plugins for the appropriate AWS SDK A
49A team of Developers must migrate an application running inside an AWS Elastic Beanstalk environment from a Classic Load Balancer to an Application Load
Balancer.
Which steps should be taken to accomplish the task using the AWS Management Console?- AA. 1. Update the application code in the existing deployment. 2. Select a new load balancer type before running the deployment. 3. Deploy the new version of the application code to the environment.
- BB. 1. Create a new environment with the same configurations except for the load balancer type. 2. Deploy the same application version as used in the original environment. 3. Run the swap-environment-cnames action.
- CC. 1. Clone the existing environment, changing the associated load balancer type. 2. Deploy the same application version as used in the original environment. 3. Run the swap-environment-cnames action.
- DD. 1. Edit the environment definitions in the existing deployment. 2. Change the associated load balancer type according to the requirements. 3. Rebuild the environment with the new load balancer type.
50A Developer must encrypt a 100-GB object using AWS KMS.
What is the BEST approach?- AA. Make an Encrypt API call to encrypt the plaintext data as ciphertext using a customer master key (CMK)
- BB. Make an Encrypt API call to encrypt the plaintext data as ciphertext using a customer master key (CMK) with imported key material
- CC. Make an GenerateDataKey API call that returns a plaintext key and an encrypted copy of a data key. Use a plaintext key to encrypt the data
- DD. Make an GenerateDataKeyWithoutPlaintext API call that returns an encrypted copy of a data key. Use an encrypted key to encrypt the data D
51A Development team would like to migrate their existing application code from a GitHub repository to AWS CodeCommit.
What needs to be created before they can migrate a cloned repository to CodeCommit over HTTPS?- AA. A GitHub secure authentication token
- BB. A public and private SSH key file
- CC. A set of Git credentials generated from IAM
- DD. An Amazon EC2 IAM role with CodeCommit permissions
52A Developer is writing a REST service that will add items to a shopping list. The service is built on Amazon API Gateway with AWS Lambda integrations. The shopping list items are send as query string parameters in the method request.
How should the Developer convert the query string parameters to arguments for the Lambda function?- AA. Enable request validation
- BB. Include the Amazon Resource Name (ARN) of the Lambda function
- CC. Change the integration type
- DD. Create a mapping template C
53When developing an AWS Lambda function that processes Amazon Kinesis Data Streams, Administrators within the company must receive a notice that includes the processed data.
How should the Developer write the function to send processed data to the Administrators?- AA. Separate the Lambda handler from the core logic
- BB. Use Amazon CloudWatch Events to send the processed data
- CC. Publish the processed data to an Amazon SNS topic
- DD. Push the processed data to Amazon SQS
54A Developer is storing documents in Amazon S3 that will require encryption at rest. The encryption keys must be rotated annually, at least.
What is the easiest way to achieve this?- AA. Encrypt the data before sending it to Amazon S3
- BB. Import a custom key into AWS KMS with annual rotation enabled
- CC. Use AWS KMS with automatic key rotation
- DD. Export a key from AWS KMS to encrypt the data
55A company is creating a REST service using an Amazon API Gateway with AWS Lambda integration. The service run different versions for testing purposes.
What would be the BEST way to accomplish this?- AA. Use an x-Version header to denote which version is being called and pass that header to the Lambda function(s)
- BB. Create an API Gateway Lambda authorizer to route API clients to the correct API version
- CC. Create an API Gateway resource policy to isolate versions and provide context to the Lambda function(s)
- DD. Deploy the API versions as unique stages with unique endpoints and use stage variables to provide further context
56A company wants to implement authentication for its new REST service using Amazon API Gateway. To authenticate the calls, each request must include HTTP headers with a client ID and user ID. These credentials must be compared to authentication data in an Amazon DynamoDB table.
What MUST the company do to implement this authentication in API Gateway?- AA. Implement an AWS Lambda authorizer that references the DynamoDB authentication table
- BB. Create a model that requires the credentials, then grant API Gateway access to the authentication table
- CC. Modify the integration requests to require the credentials, then grant API Gateway access to the authentication table
- DD. Implement an Amazon Cognito authorizer that references the DynamoDB authentication table
57An Amazon RDS database instance is used by many applications to look up historical data. The query rate is relatively constant. When the historical data is updated each day, the resulting write traffic slows the read query performance and affects all application users.
What can be done to eliminate the performance impact on application users?- AA. Make sure Amazon RDS is Multi-AZ so it can better absorb increased traffic.
- BB. Create an RDS Read Replica and direct all read traffic to the replica.
- CC. Implement Amazon ElastiCache in front of Amazon RDS to buffer the write traffic.
- DD. Use Amazon DynamoDB instead of Amazon RDS to buffer the read traffic.
58Company C is currently hosting their corporate site in an Amazon S3 bucket with Static Website Hosting enabled. Currently, when visitors go to http://www.companyc.com the index.html page is returned. Company C now would like a new page welcome.html to be returned when a visitor enters http://www.companyc.com in the browser.
Which of the following steps will allow Company C to meet this requirement? (Choose two.)- AA. Upload an html page named welcome.html to their S3 bucket
- BB. Create a welcome subfolder in their S3 bucket
- CC. Set the Index Document property to welcome.html
- DD. Move the index.html page to a welcome subfolder
- EE. Set the Error Document property to welcome.html
59What type of block cipher does Amazon S3 offer for server side encryption?
- AA. Triple DES
- BB. Advanced Encryption Standard
- CC. Blowfish
- DD. RC5
60If an application is storing hourly log files from thousands of instances from a high traffic web site, which naming scheme would give optimal performance on S3?
- AA. Sequential
- BB. instanceID_log-HH-DD-MM-YYYY
- CC. instanceID_log-YYYY-MM-DD-HH
- DD. HH-DD-MM-YYYY-log_instanceID
- EE. YYYY-MM-DD-HH-log_instanceID
61Which of the following statements about SQS is true?
- AA. Messages will be delivered exactly once and messages will be delivered in First in, First out order
- BB. Messages will be delivered exactly once and message delivery order is indeterminate
- CC. Messages will be delivered one or more times and messages will be delivered in First in, First out order
- DD. Messages will be delivered one or more times and message delivery order is indeterminate
62A corporate web application is deployed within an Amazon VPC, and is connected to the corporate data center via IPSec VPN. The application must authenticate against the on-premise LDAP server. Once authenticated, logged-in users can only access an S3 keyspace specific to the user.
Which two approaches can satisfy the objectives? (Choose two.)- AA. The application authenticates against LDAP. The application then calls the IAM Security Service to login to IAM using the LDAP credentials. The application can use the IAM temporary credentials to access the appropriate S3 bucket.
- BB. The application authenticates against LDAP, and retrieves the name of an IAM role associated with the user. The application then calls the IAM Security Token Service to assume that IAM Role. The application can use the temporary credentials to access the appropriate S3 bucket.
- CC. The application authenticates against IAM Security Token Service using the LDAP credentials. The application uses those temporary AWS security credentials to access the appropriate S3 bucket.
- DD. Develop an identity broker which authenticates against LDAP, and then calls IAM Security Token Service to get IAM federated user credentials. The application calls the identity broker to get IAM federated user credentials with access to the appropriate S3 bucket.
- EE. Develop an identity broker which authenticates against IAM Security Token Service to assume an IAM Role to get temporary AWS security credentials. The application calls the identity broker to get AWS
63Company B provides an online image recognition service and utilizes SQS to decouple system components for scalability The SQS consumers poll the imaging queue as often as possible to keep end-to-end throughput as high as possible. However, Company B is realizing that polling in tight loops is burning CPU cycles and increasing costs with empty responses.
How can Company B reduce the number of empty responses?- AA. Set the imaging queue visibility Timeout attribute to 20 seconds
- BB. Set the Imaging queue ReceiveMessageWaitTimeSeconds attribute to 20 seconds
- CC. Set the imaging queue MessageRetentionPeriod attribute to 20 seconds
- DD. Set the DelaySeconds parameter of a message to 20 seconds
64An Amazon S3 bucket, "myawsbucket" is configured with website hosting in Tokyo region, what is the region- specific website endpoint?
- AA. www.myawsbucket.ap-northeast-1.amazonaws.com
- BB. myawsbucket.s3-website-ap-northeast-1.amazonaws.com
- CC. myawsbucket.amazonaws.com
- DD. myawsbucket.tokyo.amazonaws.com
65You are inserting 1000 new items every second in a DynamoDB table. Once an hour these items are analyzed and then are no longer needed. You need to minimize provisioned throughput, storage, and API calls.
Given these requirements, what is the most efficient way to manage these Items after the analysis?- AA. Retain the items in a single table
- BB. Delete items individually over a 24 hour period
- CC. Delete the table and create a new table per hour
- DD. Create a new table per hour
66You have written an application that uses the Elastic Load Balancing service to spread traffic to several web servers. Your users complain that they are sometimes forced to login again in the middle of using your application, after they have already logged in. This is not behavior you have designed.
What is a possible solution to prevent this happening?- AA. Use instance memory to save session state.
- BB. Use instance storage to save session state.
- CC. Use EBS to save session state
- DD. Use ElastiCache to save session state.
- EE. Use Glacier to save session slate.
67You run an ad-supported photo sharing website using S3 to serve photos to visitors of your site. At some point you find out that other sites have been linking to the photos on your site, causing loss to your business.
What is an effective method to mitigate this?- AA. Store photos on an EBS volume of the web server
- BB. Remove public read access and use signed URLs with expiry dates.
- CC. Use CloudFront distributions for static content.
- DD. Block the IPs of the offending websites in Security Groups.
68Which statements about DynamoDB are true? (Choose two.)
- AA. DynamoDB uses a pessimistic locking model
- BB. DynamoDB uses optimistic concurrency control
- CC. DynamoDB uses conditional writes for consistency
- DD. DynamoDB restricts item access during reads
- EE. DynamoDB restricts item access during writes
69You are providing AWS consulting services for a company developing a new mobile application that will be leveraging Amazon SNS Mobile Push for push notifications. In order to send direct notification messages to individual devices each device registration identifier or token needs to be registered with SNS; however the developers are not sure of the best way to do this.
You advise them to:- AA. Bulk upload the device tokens contained in a CSV file via the AWS Management Console.
- BB. Let the push notification service (e.g. Amazon Device Messaging) handle the registration.
- CC. Implement a token vending service to handle the registration.
- DD. Call the CreatePlatformEndPoint API function to register multiple device tokens.
70You are writing to a DynamoDB table and receive the following exception:"
ProvisionedThroughputExceededException". though according to your Cloudwatch metrics for the table, you are not exceeding your provisioned throughput.
What could be an explanation for this?- AA. You haven't provisioned enough DynamoDB storage instances
- BB. You're exceeding your capacity on a particular Range Key
- CC. You're exceeding your capacity on a particular Hash Key
- DD. You're exceeding your capacity on a particular Sort Key
- EE. You haven't configured DynamoDB Auto Scaling triggers
71Which of the following services are included at no additional cost with the use of the AWS platform? (Choose two.)
- AA. Simple Storage Service
- BB. Elastic Compute Cloud
- CC. Auto Scaling
- DD. Elastic Load Balancing
- EE. CloudFormation
- FF. Simple Workflow Service
72Your application is trying to upload a 6 GB file to Simple Storage Service and receive a "Your proposed upload exceeds the maximum allowed object size." error message.
What is a possible solution for this?- AA. None, Simple Storage Service objects are limited to 5 GB
- BB. Use the multi-part upload API for this object
- CC. Use the large object upload API for this object
- DD. Contact support to increase your object size limit
- EE. Upload to a different region
73What AWS products and features can be deployed by Elastic Beanstalk? (Choose three.)
- AA. Auto scaling groups
- BB. Route 53 hosted zones
- CC. Elastic Load Balancers
- DD. RDS Instances
- EE. Elastic IP addresses
- FF. SQS Queues
74Games-R-Us is launching a new game app for mobile devices. Users will log into the game using their existing
Facebook account and the game will record player data and scoring information directly to a DynamoDB table.
What is the most secure approach for signing requests to the DynamoDB API?- AA. Create an IAM user with access credentials that are distributed with the mobile app to sign the requests
- BB. Distribute the AWS root account access credentials with the mobile app to sign the requests
- CC. Request temporary security credentials using web identity federation to sign the requests
- DD. Establish cross account access between the mobile app and the DynamoDB table to sign the requests
75Which of the following programming languages have an officially supported AWS SDK? (Choose two.)
- AA. Perl
- BB. PHP
- CC. Pascal
- DD. Java
- EE. SQL
76A meteorological system monitors 600 temperature gauges, obtaining temperature samples every minute and saving each sample to a DynamoDB table. Each sample involves writing 1K of data and the writes are evenly distributed over time.
How much write throughput is required for the target table?- AA. 1 write capacity unit
- BB. 10 write capacity units
- CC. 60 write capacity units
- DD. 600 write capacity units
- EE. 3600 write capacity units
77In DynamoDB, what type of HTTP response codes indicate that a problem was found with the client request sent to the service?
- AA. 5xx HTTP response code
- BB. 200 HTTP response code
- CC. 306 HTTP response code
- DD. 4xx HTTP response code
78Company C has recently launched an online commerce site for bicycles on AWS. They have a "Product"
DynamoDB table that stores details for each bicycle, such as, manufacturer, color, price, quantity and size to display in the online store. Due to customer demand, they want to include an image for each bicycle along with the existing details.
Which approach below provides the least impact to provisioned throughput on the "Product" table?- AA. Serialize the image and store it in multiple DynamoDB tables
- BB. Create an "Images" DynamoDB table to store the Image with a foreign key constraint to the "Product" table
- CC. Add an image data type to the "Product" table to store the images in binary format
- DD. Store the images in Amazon S3 and add an S3 URL pointer to the "Product" table item for each image
79Which DynamoDB limits can be raised by contacting AWS support? (Choose two.)
- AA. The number of hash keys per account
- BB. The maximum storage used per account
- CC. The number of tables per account
- DD. The number of local secondary indexes per account
- EE. The number of provisioned throughput units per account
80When a Simple Queue Service message triggers a task that takes 5 minutes to complete, which process below will result in successful processing of the message and remove it from the queue while minimizing the chances of duplicate processing?
- AA. Retrieve the message with an increased visibility timeout, process the message, delete the message from the queue
- BB. Retrieve the message with an increased visibility timeout, delete the message from the queue, process the message
- CC. Retrieve the message with increased DelaySeconds, process the message, delete the message from the queue
- DD. Retrieve the message with increased DelaySeconds, delete the message from the queue, process the
81Company A has an S3 bucket containing premier content that they intend to make available to only paid subscribers of their website. The S3 bucket currently has default permissions of all objects being private to prevent inadvertent exposure of the premier content to non-paying website visitors.
How can Company A provide only paid subscribers the ability to download a premier content file in the S3 bucket?- AA. Apply a bucket policy that grants anonymous users to download the content from the S3 bucket
- BB. Generate a pre-signed object URL for the premier content file when a paid subscriber requests a download
- CC. Add a bucket policy that requires Multi-Factor Authentication for requests to access the S3 bucket objects
- DD. Enable server side encryption on the S3 bucket for data protection against the non-paying website visitors
82Which of the following is an example of a good DynamoDB hash key schema for provisioned throughput efficiency?
- AA. User ID, where the application has many different users.
- BB. Status Code where most status codes are the same
- CC. Device ID, where one is by far more popular than all the others.
- DD. Game Type, where there are three possible game types
83An application stores payroll information nightly in DynamoDB for a large number of employees across hundreds of offices. Item attributes consist of individual name, office identifier, and cumulative daily hours.
Managers run reports for ranges of names working in their office. One query is. "Return all Items in this office for names starting with A through E".
Which table configuration will result in the lowest impact on provisioned throughput for this query?- AA. Configure the table to have a hash index on the name attribute, and a range index on the office identifier
- BB. Configure the table to have a range index on the name attribute, and a hash index on the office identifier
- CC. Configure a hash index on the name attribute and no range index
- DD. Configure a hash index on the office Identifier attribute and no range index
84What is one key difference between an Amazon EBS-backed and an instance-store backed instance?
- AA. Virtual Private Cloud requires EBS backed instances
- BB. Amazon EBS-backed instances can be stopped and restarted
- CC. Auto scaling requires using Amazon EBS-backed instances.
- DD. Instance-store backed instances can be stopped and restarted.
85How can you secure data at rest on an EBS volume?
- AA. Attach the volume to an instance using EC2's SSL interface.
- BB. Write the data randomly instead of sequentially.
- CC. Use an encrypted file system on top of the BBS volume.
- DD. Encrypt the volume using the S3 server-side encryption service.
- EE. Create an IAM policy that restricts read and write access to the volume.
86Which of the following is chosen as the default region when making an API call with an AWS SDK?
- AA. ap-northeast-1
- BB. us-west-2
- CC. us-east-1
- DD. eu-west-1
- EE. us-central-1
87Which of the following statements about SWF are true? (Choose three.)
- AA. SWF tasks are assigned once and never duplicated
- BB. SWF requires an S3 bucket for workflow storage
- CC. SWF workflow executions can last up to a year
- DD. SWF triggers SNS notifications on task assignment
- EE. SWF uses deciders and workers to complete tasks
- FF. SWF requires at least 1 EC2 instance per domain
88Which of the following are valid SNS delivery transports? (Choose two.)
- AA. HTTP
- BB. UDP
- CC. SMS
- DD. DynamoDB
- EE. Named Pipes
89How is provisioned throughput affected by the chosen consistency model when reading data from a
DynamoDB table?- AA. Strongly consistent reads use the same amount of throughput as eventually consistent reads
- BB. Strongly consistent reads use more throughput than eventually consistent reads.
- CC. Strongly consistent reads use less throughput than eventually consistent reads
- DD. Strongly consistent reads use variable throughput depending on read activity
90Which of the following are valid arguments for an SNS Publish request? (Choose three.)
- AA. TopicAm
- BB. Subject
- CC. Destination
- DD. Format
- EE. Message
- FF. Language
91How can software determine the public and private IP addresses of the Amazon EC2 instance that it is running on?
- AA. Query the appropriate Amazon CloudWatch metric.
- BB. Use ipconfig or ifconfig command.
- CC. Query the local instance userdata.
- DD. Query the local instance metadata.
92EC2 instances are launched from Amazon Machine images (AMIs). A given public AMI can:
- AA. be used to launch EC2 Instances in any AWS region.
- BB. only be used to launch EC2 instances in the same country as the AMI is stored.
- CC. only be used to launch EC2 instances in the same AWS region as the AMI is stored.
- DD. only be used to launch EC2 instances in the same AWS availability zone as the AMI is stored
93Which EC2 API call would you use to retrieve a list of Amazon Machine Images (AMIs)?
- AA. DescnbeInstances
- BB. DescribeAMls
- CC. DescribeImages
- DD. GetAMls
- EE. You cannot retrieve a list of AMIs as there are over 10,000 AMIs
94In AWS, which security aspects are the customer’s responsibility? (Choose four.)
- AA. Life-cycle management of IAM credentials
- BB. Decommissioning storage devices
- CC. Security Group and ACL (Access Control List) settings
- DD. Encryption of EBS (Elastic Block Storage) volumes
- EE. Controlling physical access to compute resources
- FF. Patch management on the EC2 instance’s operating system
95When using a large Scan operation in DynamoDB, what technique can be used to minimize the impact of a scan on a table's provisioned throughput?
- AA. Set a smaller page size for the scan
- BB. Use parallel scans
- CC. Define a range index on the table
- DD. Prewarm the table by updating all items
96Company D is running their corporate website on Amazon S3 accessed from http//www.companyd.com. Their marketing team has published new web fonts to a separate S3 bucket accessed by the S3 endpoint https://s3- us-west-1.amazonaws.com/cdfonts. While testing the new web fonts, Company D recognized the web fonts are being blocked by the browser.
What should Company D do to prevent the web fonts from being blocked by the browser?- AA. Enable versioning on the cdfonts bucket for each web font
- BB. Create a policy on the cdfonts bucket to enable access to everyone
- CC. Add the Content-MD5 header to the request for webfonts in the cdfonts bucket from the website
- DD. Configure the cdfonts bucket to allow cross-origin requests by creating a CORS configuration
97Which of the following platforms are supported by Elastic Beanstalk? (Choose two.)
- AA. Apache Tomcat
- BB. .NET
- CC. IBM Websphere
- DD. Oracle JBoss
- EE. Jetty
98Which code snippet below returns the URL of a load balanced web site created in CloudFormation with an
AWS::ElasticLoadBalancing::LoadBalancer resource name "ElasticLoad Balancer"?- AA. "Fn::Join" : ["". [ "http://", {"Fn::GetAtr" : [ "ElasticLoadBalancer","DNSName"]}]]
- BB. "Fn::Join" : ["". [ "http://", {"Fn::GetAtr" : [ "ElasticLoadBalancer","Url"]}]]
- CC. "Fn::Join" : ["". [ "http://", {"Ref" : "ElasticLoadBalancerUrl"}]]
- DD. "Fn::Join" : [".", [ "http://", {"Ref" : "ElasticLoadBalancerDNSName"}]]
99Which features can be used to restrict access to data in S3? (Choose two.)
- AA. Use S3 Virtual Hosting
- BB. Set an S3 Bucket policy.
- CC. Enable IAM Identity Federation.
- DD. Set an S3 ACL on the bucket or the object.
- EE. Create a CloudFront distribution for the bucket
100What happens, by default, when one of the resources in a CloudFormation stack cannot be created?
- AA. Previously-created resources are kept but the stack creation terminates.
- BB. Previously-created resources are deleted and the stack creation terminates.
- CC. The stack creation continues, and the final results indicate which steps failed.
- DD. CloudFormation templates are parsed in advance so stack creation is guaranteed to succeed.
101Which of the following are correct statements with policy evaluation logic in AWS Identity and Access
Management? (Choose two.)- AA. By default, all requests are denied
- BB. An explicit allow overrides an explicit deny
- CC. An explicit allow overrides default deny.
- DD. An explicit deny does not override an explicit allow
- EE. By default, all request are allowed
102You have an environment that consists of a public subnet using Amazon VPC and 3 instances that are running in this subnet. These three instances can successfully communicate with other hosts on the Internet. You launch a fourth instance in the same subnet, using the same AMI and security group configuration you used for the others, but find that this instance cannot be accessed from the Internet.
What should you do to enable internet access?- AA. Deploy a NAT instance into the public subnet.
- BB. Modify the routing table for the public subnet
- CC. Configure a publically routable IP Address In the host OS of the fourth instance.
- DD. Assign an Elastic IP address to the fourth instance.
103If a message is retrieved from a queue in Amazon SQS, how long is the message inaccessible to other users by default?
- AA. 0 seconds
- BB. 1 hour
- CC. 1 day
- DD. forever
- EE. 30 seconds
104What is the format of structured notification messages sent by Amazon SNS?
- AA. An XML object containing MessageId, UnsubscribeURL, Subject, Message and other values
- BB. An JSON object containing MessageId, DuplicateFlag, Message and other values
- CC. An XML object containing MessageId, DuplicateFlag, Message and other values
- DD. An JSON object containing MessageId, unsubscribeURL, Subject, Message and other values
105Which of the following services are key/value stores? (Choose three.)
- AA. Amazon ElastiCache
- BB. Simple Notification Service
- CC. DynamoDB
- DD. Simple Workflow Service
- EE. Simple Storage Service
106When uploading an object, what request header can be explicitly specified in a request to Amazon S3 to encrypt object data when saved on the server side?
- AA. x-amz-storage-class
- BB. Content-MD5
- CC. x-amz-security-token
- DD. x-amz-server-side-encryption
107What item operation allows the retrieval of multiple items from a DynamoDB table in a single API call?
- AA. GetItem
- BB. BatchGetItem
- CC. GetMultipleItems
- DD. GetItemRange
108After launching an instance that you intend to serve as a NAT (Network Address Translation) device in a public subnet you modify your route tables to have the NAT device be the target of internet bound traffic of your private subnet. When you try and make an outbound connection to the Internet from an instance in the private subnet, you are not successful.
Which of the following steps could resolve the issue?- AA. Attaching a second Elastic Network interface (ENI) to the NAT instance, and placing it in the private subnet
- BB. Attaching a second Elastic Network Interface (ENI) to the instance in the private subnet, and placing it in the public subnet
- CC. Disabling the Source/Destination Check attribute on the NAT instance
- DD. Attaching an Elastic IP address to the instance in the private subnet
109You attempt to store an object in the US-STANDARD region in Amazon S3, and receive a confirmation that it has been successfully stored. You then immediately make another API call and attempt to read this object. S3 tells you that the object does not exist.
What could explain this behavior?- AA. US-STANDARD uses eventual consistency and it can take time for an object to be readable in a bucket
- BB. Objects in Amazon S3 do not become visible until they are replicated to a second region.
- CC. US-STANDARD imposes a 1 second delay before new objects are readable.
- DD. You exceeded the bucket object limit, and once this limit is raised the object will be visible.
110What is the maximum number of S3 Buckets available per AWS account?
- AA. 100 per region
- BB. there is no limit
- CC. 100 per account
- DD. 500 per account
- EE. 100 per IAM user
111Which of the following items are required to allow an application deployed on an EC2 instance to write data to a DynamoDB table?
Assume that no security Keys are allowed to be stored on the EC2 instance. (Choose two.)- AA. Create an IAM User that allows write access to the DynamoDB table.
- BB. Add an IAM Role to a running EC2 instance.
- CC. Add an IAM User to a running EC2 Instance.
- DD. Launch an EC2 Instance with the IAM Role included in the launch configuration.
- EE. Create an IAM Role that allows write access to the DynamoDB table.
- FF. Launch an EC2 Instance with the IAM User included in the launch configuration.
112Company C is currently hosting their corporate site in an Amazon S3 bucket with Static Website Hosting enabled. Currently, when visitors go to http:// www.companyc.com the index.html page is returned. Company C now would like a new page welcome.html to be returned when a visitor enters http:// www.companyc.com in the browser.
Which of the following steps will allow Company C to meet this requirement? (Choose two.)- AA. Upload an html page named welcome.html to their S3 bucket
- BB. Create a welcome subfolder in their S3 bucket
- CC. Set the Index Document property to welcome.html
- DD. Move the index.html page to a welcome subfolder
- EE. Set the Error Document property to welcome.html
113What type of block cipher does Amazon S3 offer for server side encryption?
- AA. Triple DES
- BB. Advanced Encryption Standard
- CC. Blowfish
- DD. RC5
114If an application is storing hourly log files from thousands of instances from a high traffic web site, which naming scheme would give optimal performance on S3?
- AA. Sequential
- BB. instanceID_log-HH-DD-MM-YYYY
- CC. instanceID_log-YYYY-MM-DD-HH
- DD. HH-DD-MM-YYYY-log_instanceID
- EE. YYYY-MM-DD-HH-log_instanceID
115Which of the following statements about SQS is true?
- AA. Messages will be delivered exactly once and messages will be delivered in First in, First out order
- BB. Messages will be delivered exactly once and message delivery order is indeterminate
- CC. Messages will be delivered one or more times and messages will be delivered in First in, First out order
- DD. Messages will be delivered one or more times and message delivery order is indeterminate
116A corporate web application is deployed within an Amazon VPC, and is connected to the corporate data center via IPSec VPN. The application must authenticate against the on-premise LDAP server. Once authenticated, logged-in users can only access an S3 keyspace specific to the user.
Which two approaches can satisfy the objectives? (Choose two.)- AA. The application authenticates against LDAP. The application then calls the IAM Security Service to login to IAM using the LDAP credentials. The application can use the IAM temporary credentials to access the appropriate S3 bucket.
- BB. The application authenticates against LDAP, and retrieves the name of an IAM role associated with the user. The application then calls the IAM Security Token Service to assume that IAM Role. The application can use the temporary credentials to access the appropriate S3 bucket.
- CC. The application authenticates against IAM Security Token Service using the LDAP credentials. The application uses those temporary AWS security credentials to access the appropriate S3 bucket.
- DD. Develop an identity broker which authenticates against LDAP, and then calls IAM Security Token Service to get IAM federated user credentials. The application calls the identity broker to get IAM federated user credentials with access to the appropriate S3 bucket.
- EE. Develop an identity broker which authenticates against IAM Security Token Service to assume an IAM Role to get temporary AWS security credentials. The application calls the identity broker to get AWS temporary security credentials with access to the appropriate S3 bucket.
117Company B provides an online image recognition service and utilizes SQS to decouple system components for scalability The SQS consumers poll the imaging queue as often as possible to keep end-to-end throughput as high as possible. However, Company B is realizing that polling in tight loops is burning CPU cycles and increasing costs with empty responses.
How can Company B reduce the number of empty responses?- AA. Set the imaging queue visibility Timeout attribute to 20 seconds
- BB. Set the Imaging queue ReceiveMessageWaitTimeSeconds attribute to 20 seconds
- CC. Set the imaging queue MessageRetentionPeriod attribute to 20 seconds
- DD. Set the DelaySeconds parameter of a message to 20 seconds
118An Amazon S3 bucket, "myawsbucket" is configured with website hosting in Tokyo region, what is the region-specific website endpoint?
- AA. www.myawsbucket.ap-northeast-1.amazonaws.com
- BB. myawsbucket.s3-website-ap-northeast-1.amazonaws.com
- CC. myawsbucket.amazonaws.com
- DD. myawsbucket.tokyo.amazonaws.com
119You are inserting 1000 new items every second in a DynamoDB table. Once an hour these items are analyzed and then are no longer needed. You need to minimize provisioned throughput, storage, and API calls.
Given these requirements, what is the most efficient way to manage these Items after the analysis?- AA. Retain the items in a single table
- BB. Delete items individually over a 24 hour period
- CC. Delete the table and create a new table per hour
- DD. Create a new table per hour
120You have written an application that uses the Elastic Load Balancing service to spread traffic to several web servers. Your users complain that they are sometimes forced to login again in the middle of using your application, after they have already logged in. This is not behavior you have designed.
What is a possible solution to prevent this happening?- AA. Use instance memory to save session state.
- BB. Use instance storage to save session state.
- CC. Use EBS to save session state
- DD. Use ElastiCache to save session state.
- EE. Use Glacier to save session slate.
121You run an ad-supported photo sharing website using S3 to serve photos to visitors of your site. At some point you find out that other sites have been linking to the photos on your site, causing loss to your business.
What is an effective method to mitigate this?- AA. Store photos on an EBS volume of the web server
- BB. Remove public read access and use signed URLs with expiry dates.
- CC. Use CloudFront distributions for static content.
- DD. Block the IPs of the offending websites in Security Groups.
122Which statements about DynamoDB are true? (Choose two.)
- AA. DynamoDB uses a pessimistic locking model
- BB. DynamoDB uses optimistic concurrency control
- CC. DynamoDB uses conditional writes for consistency
- DD. DynamoDB restricts item access during reads
- EE. DynamoDB restricts item access during writes
123You are providing AWS consulting services for a company developing a new mobile application that will be leveraging Amazon SNS Mobile Push for push notifications. In order to send direct notification messages to individual devices each device registration identifier or token needs to be registered with SNS; however the developers are not sure of the best way to do this.
You advise them to:- AA. Bulk upload the device tokens contained in a CSV file via the AWS Management Console.
- BB. Let the push notification service (e.g. Amazon Device Messaging) handle the registration.
- CC. Implement a token vending service to handle the registration.
- DD. Call the CreatePlatformEndPoint API function to register multiple device tokens.
124You are writing to a DynamoDB table and receive the following exception:" ProvisionedThroughputExceededException". though according to your Cloudwatch metrics for the table, you are not exceeding your provisioned throughput.
What could be an explanation for this?- AA. You haven't provisioned enough DynamoDB storage instances
- BB. You're exceeding your capacity on a particular Range Key
- CC. You're exceeding your capacity on a particular Hash Key
- DD. You're exceeding your capacity on a particular Sort Key
- EE. You haven't configured DynamoDB Auto Scaling triggers
125Which of the following services are included at no additional cost with the use of the AWS platform? (Choose two.)
- AA. Simple Storage Service
- BB. Elastic Compute Cloud
- CC. Auto Scaling
- DD. Elastic Load Balancing
- EE. CloudFormation
- FF. Simple Workflow Service
126Your application is trying to upload a 6 GB file to Simple Storage Service and receive a "Your proposed upload exceeds the maximum allowed object size." error message.
What is a possible solution for this?- AA. None, Simple Storage Service objects are limited to 5 GB
- BB. Use the multi-part upload API for this object
- CC. Use the large object upload API for this object
- DD. Contact support to increase your object size limit
- EE. Upload to a different region
127What AWS products and features can be deployed by Elastic Beanstalk? (Choose three.)
- AA. Auto scaling groups
- BB. Route 53 hosted zones
- CC. Elastic Load Balancers
- DD. RDS Instances
- EE. Elastic IP addresses
- FF. SQS Queues
128Games-R-Us is launching a new game app for mobile devices. Users will log into the game using their existing Facebook account and the game will record player data and scoring information directly to a DynamoDB table.
What is the most secure approach for signing requests to the DynamoDB API?- AA. Create an IAM user with access credentials that are distributed with the mobile app to sign the requests
- BB. Distribute the AWS root account access credentials with the mobile app to sign the requests
- CC. Request temporary security credentials using web identity federation to sign the requests
- DD. Establish cross account access between the mobile app and the DynamoDB table to sign the requests
129Which of the following programming languages have an officially supported AWS SDK? (Choose two.)
- AA. Perl
- BB. PHP
- CC. Pascal
- DD. Java
- EE. SQL
130A meteorological system monitors 600 temperature gauges, obtaining temperature samples every minute and saving each sample to a DynamoDB table. Each sample involves writing 1K of data and the writes are evenly distributed over time.
How much write throughput is required for the target table?- AA. 1 write capacity unit
- BB. 10 write capacity units
- CC. 60 write capacity units
- DD. 600 write capacity units
- EE. 3600 write capacity units
131In DynamoDB, what type of HTTP response codes indicate that a problem was found with the client request sent to the service?
- AA. 5xx HTTP response code
- BB. 200 HTTP response code
- CC. 306 HTTP response code
- DD. 4xx HTTP response code
132Company C has recently launched an online commerce site for bicycles on AWS. They have a "Product" DynamoDB table that stores details for each bicycle, such as, manufacturer, color, price, quantity and size to display in the online store. Due to customer demand, they want to include an image for each bicycle along with the existing details.
Which approach below provides the least impact to provisioned throughput on the "Product" table?- AA. Serialize the image and store it in multiple DynamoDB tables
- BB. Create an "Images" DynamoDB table to store the Image with a foreign key constraint to the "Product" table
- CC. Add an image data type to the "Product" table to store the images in binary format
- DD. Store the images in Amazon S3 and add an S3 URL pointer to the "Product" table item for each image
133Which DynamoDB limits can be raised by contacting AWS support? (Choose two.)
- AA. The number of hash keys per account
- BB. The maximum storage used per account
- CC. The number of tables per account
- DD. The number of local secondary indexes per account
- EE. The number of provisioned throughput units per account
134When a Simple Queue Service message triggers a task that takes 5 minutes to complete, which process below will result in successful processing of the message and remove it from the queue while minimizing the chances of duplicate processing?
- AA. Retrieve the message with an increased visibility timeout, process the message, delete the message from the queue
- BB. Retrieve the message with an increased visibility timeout, delete the message from the queue, process the message
- CC. Retrieve the message with increased DelaySeconds, process the message, delete the message from the queue
- DD. Retrieve the message with increased DelaySeconds, delete the message from the queue, process the message
135Company A has an S3 bucket containing premier content that they intend to make available to only paid subscribers of their website. The S3 bucket currently has default permissions of all objects being private to prevent inadvertent exposure of the premier content to non-paying website visitors.
How can Company A provide only paid subscribers the ability to download a premier content file in the S3 bucket?- AA. Apply a bucket policy that grants anonymous users to download the content from the S3 bucket
- BB. Generate a pre-signed object URL for the premier content file when a paid subscriber requests a download
- CC. Add a bucket policy that requires Multi-Factor Authentication for requests to access the S3 bucket objects
- DD. Enable server side encryption on the S3 bucket for data protection against the non-paying website visitors
136Which of the following is an example of a good DynamoDB hash key schema for provisioned throughput efficiency?
- AA. User ID, where the application has many different users.
- BB. Status Code where most status codes are the same
- CC. Device ID, where one is by far more popular than all the others.
- DD. Game Type, where there are three possible game types
137An application stores payroll information nightly in DynamoDB for a large number of employees across hundreds of offices. Item attributes consist of individual name, office identifier, and cumulative daily hours. Managers run reports for ranges of names working in their office. One query is. "Return all Items in this office for names starting with A through E".
Which table configuration will result in the lowest impact on provisioned throughput for this query?- AA. Configure the table to have a hash index on the name attribute, and a range index on the office identifier
- BB. Configure the table to have a range index on the name attribute, and a hash index on the office identifier
- CC. Configure a hash index on the name attribute and no range index
- DD. Configure a hash index on the office Identifier attribute and no range index
138What is one key difference between an Amazon EBS-backed and an instance-store backed instance?
- AA. Virtual Private Cloud requires EBS backed instances
- BB. Amazon EBS-backed instances can be stopped and restarted
- CC. Auto scaling requires using Amazon EBS-backed instances.
- DD. Instance-store backed instances can be stopped and restarted.
139How can you secure data at rest on an EBS volume?
- AA. Attach the volume to an instance using EC2's SSL interface.
- BB. Write the data randomly instead of sequentially.
- CC. Use an encrypted file system on top of the BBS volume.
- DD. Encrypt the volume using the S3 server-side encryption service.
- EE. Create an IAM policy that restricts read and write access to the volume.
140Which of the following is chosen as the default region when making an API call with an AWS SDK?
- AA. ap-northeast-1
- BB. us-west-2
- CC. us-east-1
- DD. eu-west-1
- EE. us-central-1
141Which of the following statements about SWF are true? (Choose three.)
- AA. SWF tasks are assigned once and never duplicated
- BB. SWF requires an S3 bucket for workflow storage
- CC. SWF workflow executions can last up to a year
- DD. SWF triggers SNS notifications on task assignment
- EE. SWF uses deciders and workers to complete tasks
- FF. SWF requires at least 1 EC2 instance per domain
142Which of the following are valid SNS delivery transports? (Choose two.)
- AA. HTTP
- BB. UDP
- CC. SMS
- DD. DynamoDB
- EE. Named Pipes
143How is provisioned throughput affected by the chosen consistency model when reading data from a DynamoDB table?
- AA. Strongly consistent reads use the same amount of throughput as eventually consistent reads
- BB. Strongly consistent reads use more throughput than eventually consistent reads.
- CC. Strongly consistent reads use less throughput than eventually consistent reads
- DD. Strongly consistent reads use variable throughput depending on read activity
144Which of the following are valid arguments for an SNS Publish request? (Choose three.)
- AA. TopicAm
- BB. Subject
- CC. Destination
- DD. Format
- EE. Message
- FF. Language
145How can software determine the public and private IP addresses of the Amazon EC2 instance that it is running on?
- AA. Query the appropriate Amazon CloudWatch metric.
- BB. Use ipconfig or ifconfig command.
- CC. Query the local instance userdata.
- DD. Query the local instance metadata.
146EC2 instances are launched from Amazon Machine images (AMIs). A given public AMI can:
- AA. be used to launch EC2 Instances in any AWS region.
- BB. only be used to launch EC2 instances in the same country as the AMI is stored.
- CC. only be used to launch EC2 instances in the same AWS region as the AMI is stored.
- DD. only be used to launch EC2 instances in the same AWS availability zone as the AMI is stored
147Which EC2 API call would you use to retrieve a list of Amazon Machine Images (AMIs)?
- AA. DescnbeInstances
- BB. DescribeAMls
- CC. DescribeImages
- DD. GetAMls
- EE. You cannot retrieve a list of AMIs as there are over 10,000 AMIs
148In AWS, which security aspects are the customer's responsibility? (Choose four.)
- AA. Life-cycle management of IAM credentials
- BB. Decommissioning storage devices
- CC. Security Group and ACL (Access Control List) settings
- DD. Encryption of EBS (Elastic Block Storage) volumes
- EE. Controlling physical access to compute resources
- FF. Patch management on the EC2 instance's operating system
149When using a large Scan operation in DynamoDB, what technique can be used to minimize the impact of a scan on a table's provisioned throughput?
- AA. Set a smaller page size for the scan
- BB. Use parallel scans
- CC. Define a range index on the table
- DD. Prewarm the table by updating all items
150Company D is running their corporate website on Amazon S3 accessed from http//www.companyd.com. Their marketing team has published new web fonts to a separate S3 bucket accessed by the S3 endpoint https://s3-us-west-1.amazonaws.com/cdfonts. While testing the new web fonts, Company D recognized the web fonts are being blocked by the browser.
What should Company D do to prevent the web fonts from being blocked by the browser?- AA. Enable versioning on the cdfonts bucket for each web font
- BB. Create a policy on the cdfonts bucket to enable access to everyone
- CC. Add the Content-MD5 header to the request for webfonts in the cdfonts bucket from the website
- DD. Configure the cdfonts bucket to allow cross-origin requests by creating a CORS configuration
Information
- Description
- Computer Science Quiz on AWS_151~300, created by Nguyen Nhan on 07/09/2020.
- Author
- Nguyen Nhan
- Language
- English
- Views
- 14
- History
- Created on 7 Sep 2020 · updated on 7 Sep 2020
- Tags
- Rating
- No ratings yet Rate this quiz