cad6

Question 1

A developer has created a Docker image and uploaded it to an Amazon Elastic Container Registry (ECR) repository. How can the
developer pull the image to his workstation using the docker client?

Accepted Answer

Run aws ecr get-login-password use the output to login in then issue a docker pull command specifying the image
name using registry/repository[:tag]

Answer

Run the docker pull command specifying the image name using registry/repository[:tag]

Answer

Run aws ecr describe-images --repository-name repositoryname

Answer

Run docker login with an IAM key pair then issue a docker pull command specifying the image name using
registry/repository[@digest]

Question 2

A company is designing a new application that will store thousands of terabytes of data. They need a fully managed NoSQL data
store that provides low-latency and can store key-value pairs. Which type of database should they use?

Accepted Answer

Amazon DynamoDB

Answer

Amazon RDS

Answer

Amazon ElastiCache

Answer

Amazon S3

Question 3

The manager of a development team is setting up a shared S3 bucket for team members. The manager would like to use a
single policy to allow each user to have access to their objects in the S3 bucket. Which feature can be used to generalize the
policy?

Accepted Answer

Variable

Answer

Principal

Answer

Condition

Answer

Resource

Question 4

An independent software vendor (ISV) uses Amazon S3 and Amazon CloudFront to distribute software updates. They would like
to provide their premium customers with access to updates faster. What is the MOST efficient way to distribute these updates
only to the premium customers? (Select TWO.)

Accepted Answer

Create a signed URL with access to the content and distribute it to the premium customers

Accepted Answer

Create an origin access identity (OAI) and associate it with the distribution and configure permissions

Answer

Create a signed cookie and associate it with the Amazon S3 distribution

Answer

Use an access control list (ACL) on the Amazon S3 bucket to restrict access based on IP address

Answer

Use an IAM policy to restrict access to the content using a condition attribute and specify the IP addresses of the
premium customers

Question 5

An Amazon RDS database is experiencing a high volume of read requests that are slowing down the database. Which fully
managed, in-memory AWS database service can assist with offloading reads from the RDS database?

Accepted Answer

Amazon ElastiCache Redis

Answer

Amazon RDS Read Replica

Answer

Amazon Aurora Serverless

Answer

Memcached on Amazon EC2

Question 6

A developer is creating a multi-tier web application. The front-end will place messages in an Amazon SQS queue for the backend
to process. Each job includes a file that is 1GB in size. What MUST the developer do to ensure this works as expected?

Accepted Answer

Store the large files in Amazon S3 and use the SQS Extended Client Library for Java to manage SQS messages

Answer

Increase the maximum message size of the queue from 256KB to 1GB

Answer

Store the large files in DynamoDB and use the SQS Extended Client Library for Java to manage SQS messages

Answer

Create a FIFO queue that supports large files

Question 7

A serverless application composed of multiple Lambda functions has been deployed. A developer is setting up AWS CodeDeploy
to manage the deployment of code updates. The developer would like a 10% of the traffic to be shifted to the new version in
equal increments, 10 minutes apart.
Which setting should be chosen for configuring how traffic is shifted?

Accepted Answer

Linear

Answer

Canary

Answer

All-at-once

Answer

Blue/green

Question 8

A company has a global presence and managers must submit large quantities of reporting data to an Amazon S3 bucket located
in the us-east-1 region on weekly basis. Uploads have been slow recently, how can you improve data throughput and upload
times?

Accepted Answer

Enable S3 Transfer Acceleration on the S3 bucket

Answer

Use S3 Multi-part upload

Answer

Create an AWS Direct Connect connection from each remote office

Answer

Use an AWS Managed VPN

Question 9

A developer is building a Docker application on Amazon ECS that will use an Application Load Balancer (ALB). The developer
needs to configure the port mapping between the host port and container port. Where is this setting configured?

Accepted Answer

Task definition

Answer

Host definition

Answer

Service scheduler

Answer

Container instance

Question 10

A developer is designing a web application that will be used by thousands of users. The users will sign up using their email
addresses and the application will store attributes for each user.
Which service should the developer use to enable users to sign-up for the web application?

Accepted Answer

Amazon Cognito user pool

Answer

Amazon Cognito Sync

Answer

AWS Inspector

Answer

AWS AppSync

Question 11

An application resizes images that are uploaded to an Amazon S3 bucket. Amazon S3 event notifications are used to trigger an
AWS Lambda function that resizes the images. The processing time for each image is less than one second. A large amount of
images are expected to be received in a short burst of traffic. How will AWS Lambda accommodate the workload?

Accepted Answer

Lambda will scale out and execute the requests concurrently

Answer

Lambda will process the images sequentially in the order they are received

Answer

Lambda will collect and then batch process the images in a single execution

Answer

Lambda will scale the memory allocated to the function to increase the amount of CPU available to process many
images

Question 12

A Developer is creating multiple AWS Lambda functions that will be using an external library that is not included in the standard
Lambda libraries. What is the BEST way to make these libraries available to the functions?

Accepted Answer

Create a layer in Lambda that includes the external library

Answer

Include the external library with the function code

Answer

Create a deployment package that includes the external library

Answer

Store the files in Amazon S3 and reference them from your function code

Question 13

A Developer is creating a social networking app for games that uses a single Amazon DynamoDB table. All users’ saved game
data is stored in the single table, but users should not be able to view each other’s data.
How can the Developer restrict user access so they can only view their own data?

Accepted Answer

Restrict access to specific items based on certain primary key values

Answer

Use separate access keys for each user to call the API and restrict access to specific items based on access key ID

Answer

Use an identity-based policy that restricts read access to the table to specific principals

Answer

Read records from DynamoDB and discard irrelevant data client-side

Question 14

A Development team are developing a micro-services application that will use Docker containers on Amazon ECS. There will be
6 distinct services included in the architecture. Each service requires specific permissions to various AWS services.
What is the MOST secure way to grant the services the necessary permissions?

Accepted Answer

Create six separate IAM roles, each containing the required permissions for the associated ECS service, then configure
each ECS task definition to reference the associated IAM role

Answer

Create a new Identity and Access Management (IAM) instance profile containing the required permissions for the
various ECS services, then associate that instance role with the underlying EC2 instances

Answer

Create six separate IAM roles, each containing the required permissions for the associated ECS service, then create an
IAM group and configure the ECS cluster to reference that group

Answer

Create a single IAM policy and use principal statements referencing the ECS tasks and assigning the required
permissions, then apply the policy to the ECS service

Question 15

A company is reviewing their security practices. According to AWS best practice, how should access keys be managed to
improve security? (Select TWO.)

Accepted Answer

Delete all access keys for the root account IAM user

Accepted Answer

Use different access keys for different applications

Answer

Embed access keys directly into code

Answer

Rotate access keys daily

Answer

Use the same access key in all applications for consistency

Question 16

A Developer is creating an application that will utilize an Amazon DynamoDB table for storing session data. The data being
stored is expected to be around 4.5KB in size and the application will make 20 eventually consistent reads/sec, and 12 standard
writes/sec.
How many RCUs/WCUs are required?

Accepted Answer

20 RCU and 60 WCU

Answer

40 RCU and 60 WCU

Answer

40 RCU and 120 WCU

Answer

10 RCU and 24 WCU

Question 17

A monitoring application that keeps track of a large eCommerce website uses Amazon Kinesis for data ingestion. During periods
of peak data rates, the producers are not making best use of the available shards.
What step will allow the producers to better utilize the available shards and increase write throughput to the Kinesis data
stream?

Accepted Answer

Install the Kinesis Producer Library (KPL) for ingesting data into the stream

Answer

Create an SQS queue and decouple the producers from the Kinesis data stream

Answer

Increase the shard count of the stream using UpdateShardCount

Answer

Ingest multiple records into the stream in a single call using BatchWriteItem

Question 18

A Developer is creating an AWS Lambda function that will process medical images. The function is dependent on several
libraries that are not available in the Lambda runtime environment. Which strategy should be used to create the Lambda
deployment package?

Accepted Answer

Create a ZIP file with the source code and all dependent libraries

Answer

Create a ZIP file with the source code and a script that installs the dependent libraries at runtime

Answer

Create a ZIP file with the source code. Stage the dependent libraries on an Amazon S3 bucket indicated by the
Lambda environment variable LIBRARY_PATH

Answer

Create a ZIP file with the source code and a buildspec.yaml file that installs the dependent libraries on AWS Lambda

Question 19

A company use Amazon CloudFront to deliver application content to users around the world. A Developer has made an update
to some files in the origin however users have reported that they are still getting the old files.
How can the Developer ensure that the old files are replaced in the cache with the LEAST disruption?

Accepted Answer

Invalidate the files from the edge caches

Answer

Create a new origin with the new files and remove the old origin

Answer

Disable the CloudFront distribution and enable it again to update all the edge locations

Answer

Add code to Lambda@Edge that updates the files in the cache

Question 20

A Developer is creating a serverless website with content that includes HTML files, images, videos, and JavaScript (client-side
scripts).
Which combination of services should the Developer use to create the website?

Accepted Answer

Amazon S3 and Amazon CloudFront

Answer

Amazon EC2 and Amazon ElastiCache

Answer

Amazon ECS and Redis

Answer

AWS Lambda and Amazon API Gateway

Question 21

A Developer needs to update an Amazon ECS application that was deployed using AWS CodeDeploy. What file does the
Developer need to update to push the change through CodeDeploy?

Accepted Answer

appspec.yml

Answer

dockerrun.aws.json

Answer

buildspec.yml

Answer

ebextensions.config

Question 22

A Development team wants to instrument their code to provide more detailed information to AWS X-Ray than simple outgoing
and incoming requests. This will generate large amounts of data, so the Development team wants to implement indexing so
they can filter the data.
What should the Development team do to achieve this?

Accepted Answer

Add annotations to the segment document

Answer

Add metadata to the segment document

Answer

Configure the necessary X-Ray environment variables

Answer

Install required plugins for the appropriate AWS SDK

Question 23

An organization has an Amazon S3 bucket containing premier content that they intend to make available to only paid
subscribers of their website. The objects in the S3 bucket are private to prevent inadvertent exposure of the premier content to
non-paying website visitors.
How can the organization provide only paid subscribers the ability to download the premier content in the S3 bucket?

Accepted Answer

Generate a pre-signed object URL for the premier content file when a paid subscriber requests a download

Answer

Apply a bucket policy that grants anonymous users to download the content from the S3 bucket

Answer

Add a bucket policy that requires Multi-Factor Authentication for requests to access the S3 bucket objects

Answer

Enable server-side encryption on the S3 bucket for data protection against the non-paying website visitors

Question 24

A serverless application uses Amazon API Gateway, AWS Lambda and DynamoDB. The application writes statistical data that is
constantly received from sensors. The data is analyzed soon after it is written to the database and is then not required.
What is the EASIEST method to remove stale data and optimize database size?

Accepted Answer

Enable the TTL attribute and add expiry timestamps to items

Answer

Use atomic counters to decrement the data when it becomes stale

Answer

Scan the table for stale data and delete it once every hour

Answer

Delete the table and recreate it every hour

Question 25

A Development team are creating a financial trading application. The application requires sub-millisecond latency for processing
trading requests. Amazon DynamoDB is used to store the trading data. During load testing the Development team found that in
periods of high utilization the latency is too high and read capacity must be significantly over-provisioned to avoid throttling.
How can the Developers meet the latency requirements of the application?

Accepted Answer

Use Amazon DynamoDB Accelerator (DAX) to cache the data

Answer

Create a Global Secondary Index (GSI) for the trading data

Answer

Use exponential backoff in the application code for DynamoDB queries

Answer

Store the trading data in Amazon S3 and use Transfer Acceleration

Question 26

A Developer is deploying an Amazon EC2 update using AWS CodeDeploy. In the appspec.yml file, which of the following is a
valid structure for the order of hooks that should be specified?

Accepted Answer

BeforeInstall > AfterInstall > ApplicationStart > ValidateService

Answer

BeforeInstall > AfterInstall > AfterAllowTestTraffic > BeforeAllowTraffic > AfterAllowTraffic

Answer

BeforeAllowTraffic > AfterAllowTraffic

Answer

BeforeBlockTraffic > AfterBlockTraffic > BeforeAllowTraffic > AfterAllowTraffic

Question 27

An application will ingest data at a very high throughput from several sources and stored in an Amazon S3 bucket for
subsequent analysis. Which AWS service should a Developer choose for this requirement?

Accepted Answer

Amazon Kinesis Data Firehose

Answer

Amazon S3 Transfer Acceleration

Answer

Amazon Kinesis Data Analytics

Answer

Amazon Simple Queue Service (SQS)

Question 28

A mobile application has thousands of users. Each user may use multiple devices to access the application. The Developer wants
to assign unique identifiers to these users regardless of the device they use.
Which of the below is the BEST method to obtain unique identifiers?

Accepted Answer

Implement developer-authenticated identities by using Amazon Cognito and get credentials for these identities

Answer

Create a user table in Amazon DynamoDB with key-value pairs of users and their devices. Use these keys as unique
identifiers

Answer

Use IAM-generated access key IDs for the users as the unique identifier, but do not store secret keys

Answer

Assign IAM users and roles to the users. Use the unique IAM resource ID as the unique identifier

Question 29

A manufacturing company is creating a new RESTful API that their customers can use to query the status of orders. The
endpoint for customer queries will be https://www.manufacturerdomain.com/status/customerID Which of the following application designs will meet the requirements? (Select TWO.)

Accepted Answer

Elastic Load Balancing; Amazon EC2

Accepted Answer

Amazon API Gateway; AWS Lambda

Answer

Amazon SQS; Amazon SNS

Answer

Amazon ElastiCache; Amazon Elacticsearch Service

Answer

Amazon S3; Amazon CloudFront

Question 30

A solution requires a serverless service for receiving streaming data and loading it directly into an Amazon Elasticsearch
datastore. Which AWS service would be suitable for this requirement?

Accepted Answer

Amazon Kinesis Data Firehose

Answer

Amazon Kinesis Data Streams

Answer

Amazon Kinesis Data Analytics

Answer

Amazon Simple Queue Service (SQS)

Question 31

A serverless application uses an AWS Lambda function, Amazon API Gateway API and an Amazon DynamoDB table. The Lambda
function executes 10 times per second and takes 3 seconds to complete each execution.
How many concurrent executions will the Lambda function require?

Accepted Answer

30

Answer

3

Answer

12

Answer

10

Question 32

An application that is being migrated to AWS and refactored requires a storage service. The storage service should provide a
standards-based REST web service interface and store objects based on keys.
Which AWS service would be MOST suitable?

Accepted Answer

Amazon S3

Answer

Amazon DynamoDB

Answer

Amazon EBS

Answer

Amazon EFS

Question 33

A company will be hiring a large number of Developers for a series of projects. The Develops will bring their own devices to
work and the company want to ensure consistency in tooling. The Developers must be able to write, run, and debug
applications with just a browser, without needing to install or maintain a local Integrated Development Environment (IDE).
Which AWS service should the Developers use?

Accepted Answer

AWS Cloud9

Answer

AWS CodeCommit

Answer

AWS X-Ray

Answer

AWS CodeDeploy

Question 34

Development team manage a hybrid cloud environment. They would like to collect system-level metrics from on-premises servers and Amazon EC2 instances. How can the Development team collect this information MOST efficiently?

Accepted Answer

Install the CloudWatch agent on the on-premises servers and EC2 instances

Answer

Use CloudWatch for monitoring EC2 instances and custom AWS CLI scripts using the put-metric-data API

Answer

Install the CloudWatch agent on the EC2 instances and use a cron job on the on-premises servers

Answer

Use CloudWatch detailed monitoring for both EC2 instances and on-premises servers

Question 35

A Developer is migrating Docker containers to Amazon ECS. A large number of containers will be deployed onto an existing ECS
cluster that uses container instances of different instance types.
Which task placement strategy can be used to minimize the number of container instances used based on available memory?

Accepted Answer

binpack

Answer

random

Answer

spread

Answer

distinctInstance

Question 36

An organization has encrypted a large quantity of data. To protect their data encryption keys they are planning to use envelope
encryption. Which of the following processes is a correct implementation of envelope encryption?

Accepted Answer

Encrypt plaintext data with a data key and then encrypt the data key with a top-level plaintext master key.

Answer

Encrypt plaintext data with a master key and then encrypt the master key with a top-level plaintext data key

Answer

Encrypt plaintext data with a data key and then encrypt the data key with a top-level encrypted master key

Answer

Encrypt plaintext data with a master key and then encrypt the master key with a top-level encrypted data key

Question 37

A mobile application runs as a serverless application on AWS. A Developer needs to create a push notification feature that
sends periodic message to subscribers. How can the Developer send the notification from the application?

Accepted Answer

Publish a notification to an Amazon SNS Topic

Answer

Publish a message to an Amazon SQS Queue

Answer

Publish a notification to Amazon CloudWatch Events

Answer

Publish a message to an Amazon SWF Workflow

Question 38

An Amazon ElastiCache cluster has been placed in front of a large Amazon RDS database. To reduce cost the ElastiCache cluster
should only cache items that are actually requested. How should ElastiCache be optimized?

Accepted Answer

Use a lazy loading caching strategy

Answer

Only cache database writes

Answer

Enable a TTL on cached data

Answer

Use a write-through caching strategy

Question 39

A retail organization stores stock information in an Amazon RDS database. An application reads and writes data to the
database. A Developer has been asked to provide read access to the database from a reporting application in another region.
Which configuration would provide BEST performance for the reporting application without impacting the performance of the
main database?

Accepted Answer

Implement a cross-region read replica in the region where the reporting application will run

Answer

Implement a cross-region multi-AZ deployment in the region where the reporting application will run

Answer

Create a snapshot of the database and create a new database from the snapshot in the region where the reporting
application will run

Answer

Implement a read replica in another AZ and configure the reporting application to connect to the read replica using a
VPN connection

Question 40

An Auto Scaling Group (ASG) of Amazon EC2 instances is being created for processing messages from an Amazon SQS queue. To
ensure the EC2 instances are cost-effective a Developer would like to configure the ASG to maintain aggregate CPU utilization
at 70%.
Which type of scaling policy should the Developer choose?

Accepted Answer

Target Tracking Scaling Policy

Answer

Step Scaling Policy

Answer

Simple Scaling Policy

Answer

Scheduled Scaling Policy

Question 41

An application collects data from sensors in a manufacturing facility. The data is stored in an Amazon SQS Standard queue by an
AWS Lambda function and an Amazon EC2 instance processes the data and stores it in an Amazon RedShift data warehouse. A
fault in the sensors’ software is causing occasional duplicate messages to be sent. Timestamps on the duplicate messages show
they are generated within a few seconds of the primary message.
How a can a Developer prevent duplicate data being stored in the data warehouse?

Accepted Answer

Use a FIFO queue and configure the Lambda function to add a message deduplication token to the message body

Answer

Use a FIFO queue and configure the Lambda function to add a message group ID to the messages generated by each
individual sensor

Answer

Send a ChangeMessageVisibility call with VisibilityTimeout set to 30 seconds after the receipt of every message from
the queue

Answer

Configure a redrive policy, specify a destination Dead-Letter queue, and set the maxReceiveCount to 1

Question 42

A Developer is publishing custom metrics for Amazon EC2 using the Amazon CloudWatch CLI. The Developer needs to add
further context to the metrics being published by organizing them by EC2 instance and Auto Scaling Group.
What should the Developer add to the CLI command when publishing the metrics using put-metric-data

Accepted Answer

The --dimensions parameter

Answer

The --namespace parameter

Answer

The --statistic-values parameter

Answer

The --metric-name parameter

Question 43

A legacy application is being refactored into a microservices architecture running on AWS. The microservice will include several
AWS Lambda functions. A Developer will use AWS Step Functions to coordinate function execution.
How should the Developer proceed?

Accepted Answer

Create a state machine using the Amazon States Language

Answer

Create an AWS CloudFormation stack using a YAML-formatted template

Answer

Create a workflow using the StartExecution API action

Answer

Create a layer in AWS Lambda and add the functions to the layer

Question 44

A company has sensitive data that must be encrypted. The data is made up of 1 GB objects and there is a total of 150 GB of
data.
What is the BEST approach for a Developer to encrypt the data using AWS KMS?

Accepted Answer

Make a GenerateDataKey API call that returns a plaintext key and an encrypted copy of a data key. Use the plaintext
key to encrypt the data

Answer

Make an Encrypt API call to encrypt the plaintext data as ciphertext using a customer master key (CMK)

Answer

Make an Encrypt API call to encrypt the plaintext data as ciphertext using a customer master key (CMK) with imported
key material

Answer

Make a GenerateDataKeyWithoutPlaintext API call that returns an encrypted copy of a data key. Use the encrypted
key to encrypt the data

Question 45

A nightly batch job loads 1 million new records in to a DynamoDB table. The records are only needed for one hour, and the
table needs to be empty by the next night’s batch job.
Which is the MOST efficient and cost-effective method to provide an empty table?

Accepted Answer

Create and then delete the table after the task has completed

Answer

Use DeleteItem using a ConditionExpression

Answer

Use BatchWriteItem to empty all of the rows

Answer

Write a recursive function that scans and calls out DeleteItem

Question 46

A Developer is creating an AWS Lambda function to process a stream of data from an Amazon Kinesis Data Stream. When the
Lambda function parses the data and encounters a missing field, it exits the function with an error. The function is generating
duplicate records from the Kinesis stream. When the Developer looks at the stream output without the Lambda function, there
are no duplicate records.
What is the reason for the duplicates?

Accepted Answer

The Lambda function did not handle the error, and the Lambda service attempted to reprocess the data

Answer

The Lambda function did not advance the Kinesis stream point to the next record after the error

Answer

The Lambda event source used asynchronous invocation, resulting in duplicate records

Answer

The Lambda function is not keeping up with the amount of data coming from the stream

Question 47

A Developer has code running on Amazon EC2 instances that needs read-only access to an Amazon DynamoDB table.
What is the MOST secure approach the Developer should take to accomplish this task?

Accepted Answer

Use an IAM role with an AmazonDynamoDBReadOnlyAccess policy applied to the EC2 instances

Answer

Create a user access key for each EC2 instance with read-only access to DynamoDB. Place the keys in the code.
Redeploy the code as keys rotate

Answer

Run all code with only AWS account root user access keys to ensure maximum access to services

Answer

Use an IAM role with Administrator access applied to the EC2 instance

Question 48

A company is migrating an on-premises web application to AWS. The web application runs on a single server and stores session
data in memory. On AWS the company plan to implement multiple Amazon EC2 instances behind an Elastic Load Balancer
(ELB). The company want to refactor the application so that data is resilient if an instance fails and user downtime is minimized.
Where should the company move session data to MOST effectively reduce downtime and make users’ session data more fault
tolerant?

Accepted Answer

An Amazon ElastiCache for Redis cluster

Answer

A second Amazon EBS volume

Answer

The web server’s primary disk

Answer

An Amazon EC2 instance dedicated to session data

Question 49

A Developer is creating a script to automate the deployment process for a serverless application. The Developer wants to use
an existing AWS Serverless Application Model (SAM) template for the application.
What should the Developer use for the project? (Select TWO.)

Accepted Answer

Call aws cloudformation package to create the deployment package. Call aws cloudformation deploy to deploy the
package afterward

Accepted Answer

Call sam package to create the deployment package. Call sam deploy to deploy the package afterward

Answer

Call aws s3 cp to upload the AWS SAM template to Amazon S3. Call aws lambda update-function-code to create the
application

Answer

Create a ZIP package locally and call aws serverlessrepo create-application to create the application

Answer

Create a ZIP package and upload it to Amazon S3. Call aws cloudformation create-stack to create the application

Question 50

A website delivers images stored in an Amazon S3 bucket. The site uses Amazon Cognito-enabled and guest users without
logins need to be able to view the images from the S3 bucket. How can a Developer enable access for guest users to the AWS resources?

Accepted Answer

Create a new identity pool, enable access to unauthenticated identities, and grant access to AWS resources

Answer

Create a blank user ID in a user pool, add to the user group, and grant access to AWS resources

Answer

Create a new user pool, enable access to unauthenticated identities, and grant access to AWS resources

Answer

Create a new user pool, disable authentication access, and grant access to AWS resources

Question 51

A company has a website that is developed in PHP and WordPress and is launched using AWS Elastic Beanstalk. There is a new
version of the website that needs to be deployed in the Elastic Beanstalk environment. The company cannot tolerate having the
website offline if an update fails. Deployments must have minimal impact and rollback as soon as possible.
What deployment method should be used?

Accepted Answer

Immutable

Answer

All at once

Answer

Rolling

Answer

Snapshots

Question 52

A company is building an application to track athlete performance using an Amazon DynamoDB table. Each item in the table is
identified by a partition key (user_id) and a sort key (sport_name). The table design is shown below:
• Partition key: user_id
• Sort Key: sport_name
• Attributes: score, score_datetime
A Developer is asked to write a leaderboard application to display the top performers (user_id) based on the score for each
sport_name.
What process will allow the Developer to extract results MOST efficiently from the DynamoDB table?

Accepted Answer

Create a global secondary index with a partition key of sport_name and a sort key of score, and get the results

Answer

Use a DynamoDB query operation with the key attributes of user_id and sport_name and order the results based on
the score attribute

Answer

Use a DynamoDB scan operation to retrieve scores and user_id based on sport_name, and order the results based on
the score attribute

Answer

Create a local secondary index with a primary key of sport_name and a sort key of score and get the results based on
the score attribute

Question 53

A Developer wants the ability to roll back to a previous version of an AWS Lambda function in the event of errors caused by a
new deployment.
How can the Developer achieve this with MINIMAL impact on users?

Accepted Answer

Change the application to use an alias that points to the current version. Deploy the new version of the code. Update
the alias to direct 10% of users to the newly deployed version. If too many errors are encountered, send 100% of
traffic to the previous version

Answer

Change the application to use an alias that points to the current version. Deploy the new version of the code. Update
the alias to use the newly deployed version. If too many errors are encountered, point the alias back to the previous
version

Answer

Change the application to use a version ARN that points to the latest published version. Deploy the new version of the
code. Update the application to point to the ARN of the new version of the code. If too many errors are encountered,
point the application back to the ARN of the previous version

Answer

Change the application to use the $LATEST version. Update and save code. If too many errors are encountered,
modify and save the code

Question 54

A company is migrating an application with a website and MySQL database to the AWS Cloud. The company require the
application to be refactored so it offers high availability and fault tolerance.
How should a Developer refactor the application? (Select TWO.)

Accepted Answer

Migrate the website to an Auto Scaling group of EC2 instances across multiple AZs and use an Elastic Load Balancer

Accepted Answer

Migrate the MySQL database to an Amazon RDS Multi-AZ deployment

Answer

Migrate the website to an Auto Scaling group of EC2 instances across a single AZ and use an Elastic Load Balancer

Answer

Migrate the MySQL database to an Amazon RDS instance with a Read Replica in another AZ

Answer

Migrate the MySQL database to an Amazon DynamoDB with Global Tables

Question 55

A company runs many microservices applications that use Docker containers. The company are planning to migrate the
containers to Amazon ECS. The workloads are highly variable and therefore the company prefers to be charged per running
task.
Which solution is the BEST fit for the company’s requirements?

Accepted Answer

Amazon ECS with the Fargate launch type

Answer

Amazon ECS with the EC2 launch type

Answer

An Amazon ECS Service with Auto Scaling

Answer

An Amazon ECS Cluster with Auto Scaling

Question 56

A company has hired a team of remote Developers. The Developers need to work programmatically with AWS resources from
their laptop computers.
Which security components MUST the Developers use to authenticate? (Select TWO.)

Accepted Answer

Access key ID

Accepted Answer

Secret access key

Answer

Console password

Answer

IAM user ID

Answer

MFA device

Question 57

A Developer created an AWS Lambda function and then attempted to add an on failure destination but received the following
error:
The function's execution role does not have permissions to call SendMessage on arn:aws:sqs:us-east-
1:515148212435:FailureDestination
How can the Developer resolve this issue MOST securely?

Accepted Answer

Create a customer managed policy with all read/write permissions to SQS and attach the policy to the function’s
execution role

Answer

Add the AWSLambdaSQSQueueExecutionRole AWS managed policy to the function’s execution role

Answer

Add a permissions policy to the SQS queue allowing the SendMessage action and specify the AWS account number

Answer

Add the Lambda function to a group with administrative privileges

Question 58

A Developer is creating an application that uses Amazon EC2 instances and must be highly available and fault tolerant. How
should the Developer configure the VPC?

Accepted Answer

Create a subnet in each availability zone in the region

Answer

Create multiple subnets within a single availability zone in the region

Answer

Create an Internet Gateway for every availability zone

Answer

Create a cluster placement group for the EC2 instances

Question 59

A company has released a new application on AWS. The company are concerned about security and require a tool that can
automatically assess applications for exposure, vulnerabilities, and deviations from best practices.
Which AWS service should they use?

Accepted Answer

Amazon Inspector

Answer

AWS Shield

Answer

AWS WAF

Answer

AWS Secrets Manager

Question 60

A Developer has lost their access key ID and secret access key for programmatic access. What should the Developer do?

Accepted Answer

Disable and delete the user’s access key and generate a new set

Answer

Contact AWS support and request a password reset

Answer

Generate a new key pair from the EC2 management console

Answer

Reset the AWS account access keys

Question 61

An application includes multiple Auto Scaling groups of Amazon EC2 instances. Each group corresponds to a different
subdomain of example.com, including forum.example.com and myaccount.example.com. An Elastic Load Balancer will be used to distribute load from a single HTTPS listener.
Which type of Elastic Load Balancer MUST a Developer use in this scenario?

Accepted Answer

Application Load Balancer

Answer

Network Load Balancer

Answer

Classic Load Balancer

Answer

Task Load Balancer

Question 62

A Developer has created a task definition that includes the following JSON code:
"placementConstraints": [
{
"expression": "attribute:ecs.instance-type =~ t2.*",
"type": "memberOf"
}
]
What will be the effect for tasks using this task definition?

Accepted Answer

They will be placed only on container instances using the T2 instance type

Answer

They will be placed only on container instances of T2 or T3 instance types

Answer

They will be added to distinct instances using the T2 instance type

Answer

They will be spread across all instances except for T2 instances

Question 63

A Java based application generates email notifications to customers using Amazon SNS. The emails must contain links to access
data in a secured Amazon S3 bucket. What is the SIMPLEST way to maintain security of the bucket whilst allowing the
customers to access specific objects?

Accepted Answer

Use the AWS SDK for Java with GeneratePresignedUrlRequest to create a presigned URL

Answer

Use the AWS SDK for Java to update the bucket Access Control List to allow the customers to access the bucket

Answer

Use the AWS SDK for Java with the AWS STS service to gain temporary security credentials

Answer

Use the AWS SDK for Java to assume a role with AssumeRole to gain temporary security credentials

Question 64

An application will generate thumbnails from objects uploaded to an Amazon S3 bucket. The Developer has created the bucket
configuration and the AWS Lambda function and has formulated the following AWS CLI command:
aws lambda add-permission --function-name CreateThumbnail --principal s3.amazonaws.com --statement-id s3invoke --action
"lambda:InvokeFunction" --source-arn arn:aws:s3:::digitalcloudbucket-source --source-account 523107438921
What will be achieved by running the AWS CLI command?

Accepted Answer

The Amazon S3 service principal (s3.amazonaws.com) will be granted permissions to perform
the lambda:InvokeFunction action

Answer

The Lambda function CreateThumbnail will be granted permissions to access the objects in the digitalcloudbucketsource
bucket

Answer

The Amazon S3 service principal (s3.amazonaws.com) will be granted permissions to perform the create an eventsource
mapping with the digitalcloudbucket-source bucket

Answer

A Lambda function will be created called CreateThumbnail with an Amazon SNS event source mapping that executes
the function when objects are uploaded

cad6

Create a free account to finish this quiz

Questions in this quiz (65)

Information

Feedback

What do you think of the new look?