Question 1

When using a large Scan operation in DynamoDB, what technique can be used to minimize the impact of a scan on a table's provisioned throughput?

Accepted Answer

A)  Set a smaller page size for the scan 
B)  Use parallel scans 
C)  Define a range index on the table 
D)  Prewarm the table by updating all items 
A)  Set a smaller page size for the scan 
B)  Use parallel scans 
C)  Define a range index on the table 
D)  Prewarm the table by updating all items

Question 2

An ecommerce startup is preparing for an annual sales event. As the traffic to the company's application increases, the development team wants to be notified when the Amazon EC2 instance's CPU utilization exceeds 80%. Which solution will meet this requirement?

Accepted Answer

A)  Create a custom Amazon CloudWatch alarm that sends a notification to an Amazon SNS topic when the CPU utilization exceeds 80%. 
B)  Create a custom AWS Cloud Trail alarm that sends a notification to an Amazon SNS topic when the CPU utilization exceeds 80%. 
C)  Create a cron job on the EC2 instance that executes the --describe-instance-information command on the host instance every 15 minutes and sends the results to an Amazon SNS topic. 
D)  Create an AWS Lambda function that queries the AWS CloudTrail logs for the CPUUtilization metric every 15 minutes and sends a notification to an Amazon SNS topic when the CPU utilization exceeds 80%. 
A)  Create a custom Amazon CloudWatch alarm that sends a notification to an Amazon SNS topic when the CPU utilization exceeds 80%. 
B)  Create a custom AWS Cloud Trail alarm that sends a notification to an Amazon SNS topic when the CPU utilization exceeds 80%. 
C)  Create a cron job on the EC2 instance that executes the --describe-instance-information command on the host instance every 15 minutes and sends the results to an Amazon SNS topic. 
D)  Create an AWS Lambda function that queries the AWS CloudTrail logs for the CPUUtilization metric every 15 minutes and sends a notification to an Amazon SNS topic when the CPU utilization exceeds 80%.

Question 3

A developer tested an application locally and then deployed it to AWS Lambda. While testing the application remotely, the Lambda function fails with an access denied message. How can this issue be addressed?

Accepted Answer

A)  Update the Lambda function's execution role to include the missing permissions. 
B)  Update the Lambda function's resource policy to include the missing permissions. 
C)  Include an IAM policy document at the root of the deployment package and redeploy the Lambda function. 
D)  Redeploy the Lambda function using an account with access to the AdministratorAccess policy. 
A)  Update the Lambda function's execution role to include the missing permissions. 
B)  Update the Lambda function's resource policy to include the missing permissions. 
C)  Include an IAM policy document at the root of the deployment package and redeploy the Lambda function. 
D)  Redeploy the Lambda function using an account with access to the AdministratorAccess policy.

Question 4

An AWS Lambda function generates a 3MB JSON file and then uploads it to an Amazon S3 bucket daily. The file contains sensitive information, so the Developer must ensure that it is encrypted before uploading to the bucket. Which of the following modifications should the Developer make to ensure that the data is encrypted before uploading it to the bucket?

Accepted Answer

A)  Use the default AWS KMS customer master key for S3 in the Lambda function code. 
B)  Use the S3 managed key and call the GenerateDataKey API to encrypt the file. Use the S3 managed key and call the GenerateDataKey API to encrypt the file. 
C)  Use the GenerateDateKey API, then use that data key to encrypt the file in the Lambda function code. Use the GenerateDateKey API, then use that data key to encrypt the file in the Lambda function code. 
D)  Use a custom KMS customer master key created for S3 in the Lambda function code. 
A)  Use the default AWS KMS customer master key for S3 in the Lambda function code. 
B)  Use the S3 managed key and call the GenerateDataKey API to encrypt the file. Use the S3 managed key and call the GenerateDataKey API to encrypt the file. 
C)  Use the GenerateDateKey API, then use that data key to encrypt the file in the Lambda function code. Use the GenerateDateKey API, then use that data key to encrypt the file in the Lambda function code. 
D)  Use a custom KMS customer master key created for S3 in the Lambda function code.

Question 5

What is required to trace Lambda-based applications with AWS X-Ray?

Accepted Answer

A)  Send logs from the Lambda application to an S3 bucket; trigger a Lambda function from the bucket to send data to AWS X-Ray. 
B)  Trigger a Lambda function from the application logs in Amazon CloudWatch to submit tracing data to AWS X-Ray. 
C)  Use an IAM execution role to give the Lambda function permissions and enable tracing. 
D)  Update and add AWS X-Ray daemon code to relevant parts of the Lambda function to set up the trace. 
A)  Send logs from the Lambda application to an S3 bucket; trigger a Lambda function from the bucket to send data to AWS X-Ray. 
B)  Trigger a Lambda function from the application logs in Amazon CloudWatch to submit tracing data to AWS X-Ray. 
C)  Use an IAM execution role to give the Lambda function permissions and enable tracing. 
D)  Update and add AWS X-Ray daemon code to relevant parts of the Lambda function to set up the trace.

Question 6

You have written an application that uses the Elastic Load Balancing service to spread traffic to several web servers. Your users complain that they are sometimes forced to login again in the middle of using your application, after they have already logged in. This is not behavior you have designed. What is a possible solution to prevent this happening?

Accepted Answer

A)  Use instance memory to save session state. 
B)  Use instance storage to save session state. 
C)  Use EBS to save session state 
D)  Use ElastiCache to save session state. 
E)  Use Glacier to save session slate. 
A)  Use instance memory to save session state. 
B)  Use instance storage to save session state. 
C)  Use EBS to save session state 
D)  Use ElastiCache to save session state. 
E)  Use Glacier to save session slate.

Question 7

A game stores user game data in an Amazon DynamoDB table. Individual users should not have access to other users' game data. How can this be accomplished?

Accepted Answer

A)  Encrypt the game data with individual user keys. 
B)  Restrict access to specific items based on certain primary key values. 
C)  Stage data in SQS queues to inject metadata before accessing DynamoDB. 
D)  Read records from DynamoDB and discard irrelevant data client-side. 
A)  Encrypt the game data with individual user keys. 
B)  Restrict access to specific items based on certain primary key values. 
C)  Stage data in SQS queues to inject metadata before accessing DynamoDB. 
D)  Read records from DynamoDB and discard irrelevant data client-side.

Question 8

A Developer wants to use AWS X-Ray to trace a user request end-to-end throughput the software stack. The Developer made the necessary changes in the application tested it, and found that the application is able to send the traces to AWS X-Ray. However, when the application is deployed to an EC2 instance, the traces are not available. Which of the following could create this situation? (Choose two.)

Accepted Answer

A)  The traces are reaching X-Ray, but the Developer does not have access to view the records. 
B)  The X-Ray daemon is not installed on the EC2 instance. 
C)  The X-Ray endpoint specified in the application configuration is incorrect. 
D)  The instance role does not have "xray:BatchGetTraces" and "xray:GetTraceGraph" permissions. 
E)  The instance role does not have "xray:PutTraceSegments" and "xray:PutTelemetryRecords" permissions. 
A)  The traces are reaching X-Ray, but the Developer does not have access to view the records. 
B)  The X-Ray daemon is not installed on the EC2 instance. 
C)  The X-Ray endpoint specified in the application configuration is incorrect. 
D)  The instance role does not have "xray:BatchGetTraces" and "xray:GetTraceGraph" permissions. 
E)  The instance role does not have "xray:PutTraceSegments" and "xray:PutTelemetryRecords" permissions.

Question 9

A development team wants to run their container workloads on Amazon ECS. Each application container needs to share data with another container to collect logs and metrics. What should the development team do to meet these requirements?

Accepted Answer

A)  Create two pod specifications. Make one to include the application container and the other to include the other container. Link the two pods together. 
B)  Create two task definitions. Make one to include the application container and the other to include the other container. Mount a shared volume between the two tasks. 
C)  Create one task definition. Specify both containers in the definition. Mount a shared volume between those two containers. 
D)  Create a single pod specification. Include both containers in the specification. Mount a persistent volume to both containers. 
A)  Create two pod specifications. Make one to include the application container and the other to include the other container. Link the two pods together. 
B)  Create two task definitions. Make one to include the application container and the other to include the other container. Mount a shared volume between the two tasks. 
C)  Create one task definition. Specify both containers in the definition. Mount a shared volume between those two containers. 
D)  Create a single pod specification. Include both containers in the specification. Mount a persistent volume to both containers.

Question 10

A Developer has created a large Lambda function, and deployment is failing with the following error: ClientError: An error occurred (InvalidParameterValueException) when calling the CreateFunction operation: Unzipped size must be smaller than XXXXXXXXX bytes', where XXXXXXXXX is the current Lambda limit What can the Developer do to fix this problem?

Accepted Answer

A)  Submit a limit increase request to AWS Support to increase the function to the size needed. 
B)  Use a compression algorithm that is more efficient than ZIP. 
C)  Break the function into multiple smaller Lambda functions. 
D)  ZIP the ZIP file twice to compress it further. 
A)  Submit a limit increase request to AWS Support to increase the function to the size needed. 
B)  Use a compression algorithm that is more efficient than ZIP. 
C)  Break the function into multiple smaller Lambda functions. 
D)  ZIP the ZIP file twice to compress it further.

When using a large Scan operation in DynamoDB, what technique can be used to minimize the impact of a scan on a table's provisioned throughput?

An ecommerce startup is preparing for an annual sales event. As the traffic to the company's application increases, the development team wants to be notified when the Amazon EC2 instance's CPU utilization exceeds 80%. Which solution will meet this requirement?

A developer tested an application locally and then deployed it to AWS Lambda. While testing the application remotely, the Lambda function fails with an access denied message. How can this issue be addressed?

What is required to trace Lambda-based applications with AWS X-Ray?

A game stores user game data in an Amazon DynamoDB table. Individual users should not have access to other users' game data. How can this be accomplished?

A development team wants to run their container workloads on Amazon ECS. Each application container needs to share data with another container to collect logs and metrics. What should the development team do to meet these requirements?

AWS Certified Advanced Networking - Specialty (ANS-C00)

AWS Certified Alexa Skill Builder - Specialty

AWS Certified Cloud Practitioner (CLF-C01)

AWS Certified Data Analytics - Specialty (DAS-C01)

AWS Certified Database - Specialty

AWS Certified Machine Learning - Specialty (MLS-C01)

AWS Certified Security - Specialty (SCS-C01)

AWS Certified Solutions Architect - Associate SAA-C02

AWS Certified Solutions Architect - Professional (SAP-C01)

AWS Certified SysOps Administrator - Associate (SOA-C02)

AWS DevOps Engineer - Professional (DOP-C01)

AWS Certified SysOps Administrator (SOA-C01)

Filters

Exam 6: AWS Certified Developer Associate (DVA-C01)

When using a large Scan operation in DynamoDB, what technique can be used to minimize the impact of a scan on a table's provisioned throughput?

An ecommerce startup is preparing for an annual sales event. As the traffic to the company's application increases, the development team wants to be notified when the Amazon EC2 instance's CPU utilization exceeds 80%. Which solution will meet this requirement?

A developer tested an application locally and then deployed it to AWS Lambda. While testing the application remotely, the Lambda function fails with an access denied message. How can this issue be addressed?

What is required to trace Lambda-based applications with AWS X-Ray?

A game stores user game data in an Amazon DynamoDB table. Individual users should not have access to other users' game data. How can this be accomplished?

A development team wants to run their container workloads on Amazon ECS. Each application container needs to share data with another container to collect logs and metrics. What should the development team do to meet these requirements?

AWS Certified Advanced Networking - Specialty (ANS-C00)

AWS Certified Alexa Skill Builder - Specialty

AWS Certified Cloud Practitioner (CLF-C01)

AWS Certified Data Analytics - Specialty (DAS-C01)

AWS Certified Database - Specialty

AWS Certified Machine Learning - Specialty (MLS-C01)

AWS Certified Security - Specialty (SCS-C01)

AWS Certified Solutions Architect - Associate SAA-C02

AWS Certified Solutions Architect - Professional (SAP-C01)

AWS Certified SysOps Administrator - Associate (SOA-C02)

AWS DevOps Engineer - Professional (DOP-C01)

AWS Certified SysOps Administrator (SOA-C01)

Filters