AWS Certified Developer – Associate QUIZ – SET 5 Author: CloudVikas Published Date: 2 March 2020 Welcome to AWS Certified Developer - Associate QUIZ - SET 5. Please enter your email details to get QUIZ Details on your email id. Click on Next Button to proceed. Enter your email ID details to get QUIZ Result 1. ######QUESTION#########You have set up an internet facing load balancer to route requests to virtual machines inside a private VPC. The virtual machines will be launched from a single custom Amazon Machine Image (AMI), private to your organization, with pre-installed software. Which of the following AWS services will help you create your virtual machines?RDSEC22. ######QUESTION#########Jason is a Developer working with data on an EC2 instance running Windows. He installed Kinesis Agent for Windows to stream JSON-formatted log files to Amazon Simple Storage Service (S3) via Amazon Kinesis Data Firehose. Also he gathered a list of all available sink types to change the destination of the log if needed. Which of the following sink types is not supported by Kinesis Firehose?ElastiCacheElasticSearch3. ######QUESTION#########Ben is working in a company and was just promoted to Developer and will be in charge of code deployment using AWS CodeCommit and AWS CodeDeploy. New requirements have been given to control deployment details by changing file permissions when applications are deployed and verifying the deployment success. Which of the following actions should the he take?define a .buildspec file in the root directorydefine a .appspec file in the root directory4. ######QUESTION#########Which of the following option is correct?"DynamoDB" - DynamoDB takes away one of the main stumbling blocks of scaling databases: the management of database software and the provisioning of the hardware needed to run it."ElastiCache " - Amazon ElastiCache improves the performance of web applications by allowing you to retrieve information from a fast, managed, in-memory system, instead of relying entirely on slower disk-based databases"RDS" - RDS is a managed service that makes it easy to set up, operate, and scale which does not allow you to install softwareAmazon Elastic Compute Cloud (Amazon EC2) is a web service that provides secure, resizable compute capacity in the cloud. It is designed to make web-scale cloud computing easier for developers. These virtual machines in the cloud are called 'instances'.all of them5. ######QUESTION#########John is working on a project, a pipeline was created from the AWS Management Console using service AWS CodePipeline. The process consists of pulling code changes committed to GitHub, generating a build with AWS CodeBuild and deploying to an AWS Elastic Beanstalk environment. Unexpectedly, John's unchanged CodePipeline broke because it cannot find or use the target Elastic Beanstalk environment to deploy his application to. What should he do to find the root cause of this problem? (select three) Look in IAM for Policy changes Look in CodePipeline for changes Look in CloudFormation for deletions Look in CloudTrail for a 'delete' event in Elastic Beanstalk6. ######QUESTION#########AWS X-Ray SDK was bundled into each function to record outgoing calls for tracing purposes. When your team lead goes to the X-Ray service in the AWS Management Console to get an overview of the information collected, they discover that no data is available. What is the most likely reason for this?X-Ray only works with AWS Lambda aliasesFix the IAM Role7. ######QUESTION#########You are trying to configure X-Ray to monitor Java applications running on your EC2 instances. Which of the following will be required in order to get X-Ray working? (Choose 3) You will need to restart your instance The X-Ray daemon will need to be installed and running on your EC2 instances You will need to restart your application You will need to install the CloudWatch agent You will need to Instrument your application The X-Ray SDK will need to be installed on your EC2 instances8. ######QUESTION#########You are a Developer at a company and are responsible for the data management of the AWS Kinesis streams. The security team has required stricter requirements by leveraging security mechanisms available with the Kinesis Data Streams service that won't require code changes on your end. Which of the following features meet the requirements? Encryption in flight with HTTPS endpoint,KMS encryption for data at restClient Side EncryptionKMS encryption for data at rest9. ######QUESTION#########Jason has been hired to work for a mnc that produces open-source software. In the last year, the company has been working with its cloud engineers to build server applications. Jason's task will be to work with other developers in creating a REST API following the serverless approach. All the developers in the company only develop in the Node.Js language. Which of the following technologies should he choose?API Gateway + LambdaELB + EC210. ######QUESTION#########Which of the following option is correct?"DynamoDB" - DynamoDB takes away one of the main stumbling blocks of scaling databases: the management of database software and the provisioning of the hardware needed to run it."ElastiCache " - Amazon ElastiCache improves the performance of web applications by allowing you to retrieve information from a fast, managed, in-memory system, instead of relying entirely on slower disk-based databases"RDS" - RDS is a managed service that makes it easy to set up, operate, and scale which does not allow you to install softwareAmazon Elastic Compute Cloud (Amazon EC2) is a web service that provides secure, resizable compute capacity in the cloud. It is designed to make web-scale cloud computing easier for developers. These virtual machines in the cloud are called 'instances'.all of them11. ######QUESTION#########You see a "timed out" error when using the AWS CLI to list all the files in an S3 bucket containing thousands of files. What is the reason for this?You don't have the correct permission to run the commandYou have not installed the AWS CLI correctlyToo many results are being returned which is causing the command to time outYour network connection is too slow12. ######QUESTION#########Which of the following option is correct?"CloudTrail" : When activity occurs in AWS CodePipeline, that activity is recorded in a CloudTrail event along with other AWS service events in Event history.CloudTrail can be used as an auditing tool which provides event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services. This event history simplifies security analysis, resource change tracking, and troubleshooting."CodePipeline Logs" - There are no logs for this service instead It is recommended by AWS to use CloudTrail to capture API calls made by or on behalf of AWS CodePipeline in your AWS account and deliver the log files to an Amazon S3 bucket."IAM" - IAM provides the infrastructure necessary to control authentication and authorization for your account."CloudWatch Logs" - Use Amazon CloudWatch Logs to monitor, store, and access your log files from Amazon Elastic Compute Cloud (Amazon EC2) instances, AWS CloudTrail, Route 53, and other sources but not recommended for a pipeline.all of them13. ######QUESTION#########You are a Developer working with Amazon ECS container instances and would like to isolate credentials so that a container never has access to credentials intended for another container belonging to another task. Which of the following actions must you take to achieve that?Load the credentials within the docker containerCreate an IAM Role for ECS and assign it to the tasks14. ######QUESTION#########George is a cloud architect consultant in a Silicon Valley type like city. Many companies in the city have mobile apps that capture and send data to Amazon Kinesis Data Streams. They have been getting a ProvisionedThroughputExceededException exception. George has been contacted to help and upon careful analysis, he is seeing that messages are being sent one by one, while being sent at a high rate. Which of the following options will help with the exception while keeping costs at a minimum?Batch messagesUse Exponential Backoff15. ######QUESTION#########Your team lead has asked you to learn AWS CloudFormation to create a collection of related AWS resources and provision them in an orderly fashion. You decide to provide AWS-specific parameter types to catch invalid values. When specifying parameters which of the following is not a valid Parameter type?DependentParameterCommaDelimitedList16. ######QUESTION#########What is an SQS Delay Queue?A Delay Queue is a queue that lets you postpone the delivery of new messages until a critical application function has been acknowledged as completed.A Delay Queue is a queue that lets you postpone the delivery of new messages indefinitely.A Delay Queue is a queue that lets you postpone the delivery of new messages to a queue for a number of seconds.A Delay Queue is designed to enhance messaging between applications when the order of operations and events is critical, or where duplicates can't be tolerated.17. ######QUESTION#########You are an administrator for a video on demand web application where content creators upload videos directly into S3. Recent support requests from customers state that uploading video files near 500GB size causes the website to break. After doing some investigation you find the following error: 'Your proposed upload exceeds the maximum allowed size'. What must you do to solve this error?You need to use multi-part upload for large filesYou need to place a service limit request increase with AWS18. ######QUESTION#########You have created an AWS CodePipeline pipeline through the AWS Management Console. You would like to view a list of API calls performed by your pipeline because many changes have been made by you and other administrators. Which AWS service will provide this information?CodePipeline LogsCloudTrail19. ######QUESTION#########The AWS administrator for a company gave George web access to their AWS Management Console. He need to create several API Gateway API's to assist developers in waiting to retrieve data from the company's database. His fellow developers have worked on the API in the development environment, but it seems that the changes they did are not reflected in the API. What needs to happen?Enable Custom AuthorizerDeploy to a stage20. ######QUESTION#########Which of the following can you use to test that an IAM policy attached to a user, group or role works as expected?Trusted AdvisorIAM TesterIAM Policy SimulatorLambda21. ######QUESTION#########A MNC has hired Jacob as a team lead over a group of developers working on security applications. Developers will work within Linux executing commands with the AWS CLI. When developers receive authorization exceptions which of the following services will not assist in resolving the issue?CloudTrailCloudWatch22. ######QUESTION#########Which of the following statements is true about AWS CloudFormation?CloudFormation templates can only be valid for one region and accountThe order in which resources are created does not need to be specified.23. ######QUESTION#########Which of the following option is correct?"Use the parameter store to pass in AWS credentials" - A container can only retrieve credentials for the IAM role that is defined in the task definition to which it belongs"Assign an IAM role to the EC2 instance" - To limit permissions a container does not need access to credentials that are intended for another container that belongs to another taskall of them24. ######QUESTION#########Your application relies on a number of Lambda functions. During testing, you would like to make sure you are always using the the latest version of the function. How can you ensure that your application always launches the very latest version of your code?Create a qualified ARN which points to the specific version of code that you would like to useCreate an alias and reference the function using the aliasPublish a new version of your function based on the specific version of code that you would like to useReference the function using the $LATEST suffix25. ######QUESTION#########Your web application is running on Lambda, API Gateway, DynamoDB and S3 and you have recently seen a significant increase in traffic to your website. The application support team are now reporting that Lambda invocations are being rejected with a 429 HTTP status code. What could be causing this?You have reached the default concurrent executions limit for LambdaYou have reached the default concurrent requests limit for DynamoDBYou have reached the default concurrent requests limit for API GatewayYou have reached the default concurrent requests limit for S326. ######QUESTION#########A weather reporting app for the Android mobile phones assists citizens with preparation tips for Hurricanes in Florida before hurricanes land. The next version of the weather reporting app will include notification messages directly to mobile apps notifying of updates and of upcoming developing storms. Which of the following technologies will help for the second version?KinesisSNS27. ######QUESTION#########Which of the following option is correct?"RDS" - RDS is an AWS managed service which means you do not have access to an EC2 instance to detach and mount data"FTP" - File Transfer Protocol (FTP) is a standard network protocol used for the transfer of computer files between a client and server on a computer network"S3" - S3 is an object storage that does not attach to EC2 instances but can be used by EC2 instances to get and put objectsAmazon Elastic Block Store (Amazon EBS) provides persistent block storage volumes for use with Amazon EC2 instances in the AWS Cloud. Each Amazon EBS volume is automatically replicated within its Availability Zone to protect you from component failure, offering high availability and durability.all of them28. ######QUESTION#########Ben is working on a application, the application is deployed by AWS Elastic Beanstalk to EC2 instances in two availability zones. The application makes API requests to AWS API Gateway and the security team requested that authentication be added to these requests. Which of the following authentication methods will fulfill the requirement?IAM permissions with sigv4API Gateway User Pools29. ######QUESTION#########You are running your application using Docker provisioned with Elastic Beanstalk. You would like to upgrade the application to a new version. How should you approach this?Create a new Docker image using the latest code, deploy it using Elastic Beanstalk, then terminate your old environmentBundle your code into a zip file, upload and deploy it using the Elastic Beanstalk consoleCreate a new Docker image using the latest code, log in to the underlying EC2 instance and install the new Docker imageBundle your code into a zip file, upload and deploy it using Cloud Formation30. ######QUESTION#########You would like to enable your Lambda function to access EC2 instances in your own private VPC. How can you configure Lambda to allow this?Update the permissions in your VPC to allow Lambda to access the EC2 instancesUpdate the EC2 instance role to allow Lambda to access the EC2 instancesLaunch the Lambda function inside the VPC so that it can access the EC2 instancesProvide VPC config information using the Lambda console or CLI31. ######QUESTION#########You would like to use X-Ray to monitor your application which runs on a number of Docker containers. Where should you deploy and run the X-Ray daemon?Use a dedicated Docker container build from an image which includes the X-Ray daemonInstall the X-Ray daemon on LambdaInstall the X-Ray daemon on the underlying EC2 instanceThe X-Ray daemon will already be installed on the underlying EC2 instance by default32. ######QUESTION#########You are producing data to AWS Kinesis using AWS Lambda which sits behind an API Gateway. Data represents a clickstream from the users navigating your website. What in case you want to make sure your Kinesis stream can scale over time due to increased volume, what would you need to do?The partition key must take a great number of different values,You need to add shardsYou need to enable auto-scaling33. ######QUESTION#########John has created a student portal for a university that is accessible through a smartphone app and web application. The smartphone app is available in both Android and IOS and the web application works on most major browsers. Students will be able to do group study online and create forum questions. All changes made in smartphone devices should be available even when offline and should synchronize with other devices. Which of the following AWS services will help John meet these requirements?Cognito SyncCognito Identity Pools34. ######QUESTION#########Thomas is working on a project that have a workload that requires persistent block storage for Microsoft SQL Server. High availability and durability is a requirement. The solution must allow for daily snapshots and be mountable to other EC2 instances in case of instance failures. Which of the following storage options should he choose?EBSS335. ######QUESTION#########An AWS Lambda function written in Golang was deployed six months ago and recently a new version was released that included the use of the X-Ray SDK. The change called for permissions to be altered to the IAM role of the Lambda function to allow the X-Ray SDK to send data to X-Ray. While testing you find that data is not being sent to X-Ray, what is a likely reason?Lambda X-Ray active tracing must be enabledAuthorize Lambda source in the X-Ray console36. ######QUESTION#########Your application is running on EC2 and consuming click stream data from a Kinesis stream, using the Kinesis Client Library. You have recently increased the number of shards in your Kinesis stream. When should you consider increasing the number of EC2 instances consuming the stream?You should add more instances before you reshardYou should base scaling decisions on if issues are experienced after the reshardingYou should add more instances as soon as you reshardYou should base scaling decisions on appropriate metrics for your application, like CPU utilization37. ######QUESTION#########As a senior solution architect, Thomas is responsible for the development, support, maintenance and implementation of all database applications written using NoSQL technology. A new project demands a throughput requirement of 10 strongly consistent reads per second of 6KB in size each. How many read capacity units will he need when configuring the DynamoDB table?502038. ######QUESTION#########Which of the following option is correct?"Cognito Sync" : Amazon Cognito Sync is an AWS service and client library that enables cross-device syncing of application-related user data. You can use it to synchronize user profile data across mobile devices and the web without requiring your own backend"Cognito Identity Pools" - Amazon Cognito identity pools provide temporary AWS credentials for users who are guestsS3 is a storage service that can be used from different devices however when you are dealing with mobile app user data and syncing data Cognito Sync becomes a better solution as the client libraries cache data locally so your app can read and write data regardless of device connectivity status."EFS" - With Amazon EFS, you can create a file system, mount the file system on an Amazon EC2 instance, and then read and write data to and from your file systemall of them39. ######QUESTION#########You have been asked to suggest a solution for storing large SQS messages. Which of the following is the most suitable?DynamoDBRDSS3EC2ElastiCache40. ######QUESTION#########Which of the following option is correct?"You need to use multi-part upload for large files" : In general, when your object size reaches 100 MB, you should consider using multipart uploads instead of uploading the object in a single operation."The maximum file size is 5 GB" - With a single PUT operation, you can upload objects up to 5 GB in sizeall of them41. ######QUESTION#########John is working in a MNC , he is an administrator, setting permissions to other IAM users with limited permissions. On the AWS Management Console, he created a dev group where new developers will be added to and on your workstation you configured a developer profile. He would like to test that this user cannot terminate instances. Which of the following options would he execute?Retrieve the policy using the EC2 meta data service and use the IAM policy simulatorUse the AWS CLI --dry-run option1 out of Please fill in the comment box below. Author: CloudVikas
