Font size
WorksheetsAWS Certified Developer - Associate (DVA-C02) - Exam 1
Total questions: 65
Worksheet time: 16hrs 15mins
You are building a web application that uses API Gateway to expose a Lambda function to process requests from clients over the internet. While testing, the API Gateway frequently times out; however, when calling the Lambda function directly, it completes successfully every time.
Which of the following API Gateway metrics in Amazon CloudWatch should you check in order to troubleshoot the issue?
(Choose 2)
Latency
IntegrationLatency
CacheMissCount
Count
You are developing a web application that has been deployed using Lambda. Today, you updated the code and uploaded the new version of your code to the Lambda console. Your test team has begun their testing, and has reported that the application seems to still be using the original code. What could be the reason for this?
Your application is referencing the function using $LATEST.
Your application is referencing the function using an alias that points to a previous version of the code.
Your application is referencing the function using an unqualified ARN.
After deploying the function, there is usually a delay in which the new function is initialized. During this time, the application is directed to the previous version of the function.
What does the following snippet from an IAM policy do?
Allows full access to the bucket named mycustomerdata, including the objects it contains.
Denies the ability to delete any objects with log in the name from the mycustomerdata bucket, while allowing all other S3 actions.
Allows the ability to delete any objects with log in the name from the mycustomerdata bucket.
Denies the ability to read objects contained in the bucket named mycustomerdata.
Allows only read access for all objects contained in the bucket named mycustomerdata.
You have a simple, stateless Python application that processes the contents of an S3 bucket once an hour and takes about six minutes to complete once started. Which AWS service should you run this application on in order to provide the most reliable and cost-effective solution?
Make the application a Lambda function, and create a scheduled event trigger set to one hour.
Create a CloudFront endpoint, and point it to an S3 bucket. Run the application from that bucket.
Create an Auto Scaling group for an EC2 instance. Run the application on that instance with crontab set to 1 hour.
Create an ECS cluster and run the application as a service on that cluster.
You are deploying a new version of your application using a CodeDeploy in-place upgrade. At the end of the deployment, you test the application and discover that something has gone wrong. You need to roll back your changes as quickly as possible. What do you do?
Use the CodeDeploy roll back feature to seamlessly roll back to the previous version.
Use CodeDeploy to redeploy the previous version of the application.
Point all incoming requests to your development environment while you fix the problem with the failed deployment.
Configure your load balancer to send all incoming requests to the original instances running the old version of the application.
You've created an online forum where your users can post questions and comments. The thread table has many users, and each user has many posts, each marked by a timestamp. Which primary key configuration would be best suited to see all posts by a particular user in chronological order?
A composite key with UserID as the sort key and timestamp as the hash key.
A composite key with UserID as the sort key and timestamp as the partition key.
A composite key with UserID as the partition key and timestamp as the sort key.
A composite key with UserID as the range key and timestamp as the sort key.
You are designing an application that consumes a large amount of unstructured streaming data. The data needs to be processed and then stored persistently so that a team of analysts can generate reports by running SQL queries on the data. How would you design this application?
Use Kinesis Firehose to capture the streaming data, use Lambda to process the data, and store the processed data in DynamoDB.
Use Kinesis Firehose to capture the streaming data, use Lambda to process the data, and store the processed data in S3. Use Athena to run the SQL queries.
Use EventBridge to capture the streaming data, use Lambda to process the data, and store the processed data in DynamoDB.
Use Kinesis Firehose to capture the streaming data, use EventBridge to process the data, and store the processed data in S3. Use Athena to run the SQL queries.
You are designing a serverless online banking application that uses a Lambda function to process a credit check for new customers. The Lambda function makes an API call to an external third-party credit checking agency that performs the credit check and returns a response.
During performance testing, you discover that under peak load conditions, the third-party credit check API sometimes times out or returns an error, causing your function to fail. The support team has requested to receive notifications if the credit check API error rate exceeds 10% of the total number of transactions in any given hour. Which solution will meet these requirements?
Publish custom metrics to CloudWatch that record the failures of the credit check API calls. Configure a CloudWatch alarm to notify an SNS topic when the error rate exceeds the specified rate.
Publish the failed credit check API calls to an SQS queue for further processing. Configure a CloudWatch alarm to send a message to the SQS queue when error rate exceeds the specified rate.
Publish the Lambda errors to CloudWatch Logs. Configure a Lambda function to query the CloudWatch Logs and notify an SNS topic when the error rate exceeds the specified rate.
Publish the results of the credit check to a DynamoDB table. Configure a Lambda function to query the table for failed invocations and notify an SNS topic when the error rate exceeds the specified rate.
Your application needs to store RDS database credentials that need rotating automatically, as well as license keys. Which of the following services can you use to achieve this?
(Choose2)
Use Parameter Store to store the database credentials.
Use IAM to store the database credentials.
Use Systems Manager Parameter Store to store the license keys.
Use S3 to store the license keys.
Use Secrets Manager to store the database credentials.
Which HTTP response code indicates that an API call was successful?
200
500
400
300
You want to create a continuous delivery pipeline with a build tool recommended by your project manager; however, you anticipate your build project to be large and complex. Which of the following AWS services will enable you to orchestrate complex pipelines and automate your software build, test, and release processes?
AWS CodeDeploy
AWS CodeBuild
AWS CodePipeline
Jenkins
Your team is developing an application that will run on EC2 instances. You have been asked to recommend a secure source control solution that will enable your team to collaborate while developing the code. Which of the following AWS services provides this ability?
Git
CodeCommit
CodePipeline
CodeBuild
A developer is running an application on an EC2 instance that requires access to an S3 bucket. When the application tries to access objects in the bucket, the request is denied. What additional steps are required for the application running on the instance to access the objects in the bucket?
The administrator must grant the developer permissions to access the bucket.
Create an instance role that includes policies that grant read permissions to the bucket. Attach the role to the instance.
The developer must share their credentials with the bucket policy.
Update the bucket policy to enable the EC2 instance to access the contents of the bucket.
You are planning to use CodeDeploy to deploy an application for the first time to a brand-new fleet of EC2 instances. Which deployment approach would you recommend?
Blue/Green
Rolling with additional batch
In-place
Canary
You are about to work on a brand-new feature that you wish to propose for the upcoming second release of a job search engine application. However, you do not want to use the production-ready code. How will you keep your work separate from it?
Create a branch from your default branch in AWS CodeCommit.
Create a pull request in AWS CodeCommit.
Create a branch from your default branch in AWS CodeBuild.
Create a delineator between your code for the new feature and the production-ready code in AWS CodeCommit.
Your application is running on EC2 and on Linux virtual machines in your own data center. You would like to configure your application to send data to X-Ray for troubleshooting and performance analysis. Which of the following steps will you need to complete?
Install the X-Ray SDK and the X-Ray daemon, then instrument your application to send data to X-Ray.
Install the X-Ray daemon, then instrument your application to send data to X-Ray.
Install the AWS SDK and the X-Ray CLI, then instrument your application to send data to X-Ray.
Install the AWS CLI, then instrument your application to send data to X-Ray.
You are working on an application for an online training company that stores product data in DynamoDB. This week, the company is running a big promotion on a few courses, and this is bringing lots of new traffic to your website, causing an increased number of queries to the database. Database queries are now running much slower than usual, and the operations team is concerned that the DynamoDB table is being throttled. Which of the following approaches would you recommend to improve read performance?
Redesign your table to use a more distinct partition key to enable the I/O load to be more evenly distributed across partitions.
Configure the application to use scans rather than queries and run multiple scans in parallel.
Configure a DAX cluster and point the DynamoDB API calls at the DAX cluster.
Add a read replica and point the DynamoDB API calls at the read replica.
Your Lambda function is taking too long to complete. After checking CloudWatch, you noticed that memory consumption is acceptable, so you have reached the conclusion that the function is CPU bound. What should you do to improve the performance of this function so that it completes faster?
Increase the size of the underlying instance that the function is running on.
Increase the function memory allocation.
Increase the function /tmp allocation.
Increase the function CPU allocation.
Your application is running in Lambda and is written in Node.js. The purpose of the application is to process social media feeds in near real time and save related metadata to a DynamoDB table for further analysis. During processing, the function needs a place to store around 250 MB of temporary data that is created, read, and updated while the function completes its processing, before saving the end result to DynamoDB. Which of the following data stores is the most suitable for this use case?
EFS
Elastic Block Store
/tmp
S3
Your website is hosted in AWS, and you have recently configured CloudFront to help improve performance. The website includes some basic interactive functionality, including the ability to complete a form to submit product reviews. After configuring CloudFront, you discover that visitors to your site are no longer able to submit reviews. Which of the following CloudFront-allowed HTTP methods should you enable?
GET, HEAD, OPTIONS
GET, HEAD, OPTIONS, PUT, POST, PATCH, DELETE
GET, HEAD, OPTIONS, PUT, POST, PATCH
GET, HEAD
You are working on a Lambda function that needs to access data in RDS. Which of the below is the current best AWS service to use to securely provide rotated database credentials to Lambda functions?
Use Systems Manager Parameter Store.
AWS Secrets Manager
Use Lambda environment variables.
Store the encrypted connection string and other secrets in S3.
Use DynamoDB to store the encrypted connection string and secrets.
You are building a new serverless web application that allows customers to search for last-minute hotel deals. The application is written in Node.js, with shared data persisted in an EFS file system. After writing your code on your local machine, you are ready to test it and would like to upload the code to Lambda. Which of the following are supported ways to upload and deploy your code?
(Choose3)
Copy and paste your code to the integrated development environment (IDE) inside Lambda.
Create a .zip file archive deployment package, and upload it via the Lambda console.
Create a .zip file archive deployment package, upload it to the EFS file system, and have Lambda download it from EFS.
Create a .zip file archive deployment package, upload it to Elastic Beanstalk, then deploy your environment using Elastic Beanstalk.
Create a .zip file archive deployment package, upload it to an S3 bucket, and have Lambda download it from S3.
You are working as a developer for an online retailer. Your security architect has requested that any files stored in S3 must be encrypted. However, some teams are continuing to upload their files without encrypting them. Which of the following will ensure that only encrypted data is uploaded?
Create a bucket ACL that only allows PUT operations, which include the x-amz-encryption parameter in the request header.
Select the Encrypted Files Only checkbox in the S3 Permissions tab in the AWS console.
Tell all team members to include the x-amz-encryption parameter in the request header.
Use a bucket policy that only allows PUT operations, which include the x-amz-server-side-encryption parameter in the request header.
Which of the following specifies the correct run order for lifecycle hooks for an in-place deployment using CodeDeploy?
ApplicationStop, BeforeInstall, ApplicationStart, AfterInstall, ValidateService
BeforeInstall, AfterInstall, ApplicationStop, ApplicationStart, ValidateService
ApplicationStop, BeforeInstall, AfterInstall, ApplicationStart, ValidateService
BeforeInstall, ApplicationStop, AfterInstall, ApplicationStart, ValidateService
You are creating a DynamoDB table to store data for a discussion forum. Your forums table has a primary key of comment_id. Using DynamoDB, you're able to query the data based on the comment_id primary key. On occasion, you need to be able to query the forums table by userId as well. What would you need to do during table creation to permit this query?
Add a secondary index to the table.
Configure DynamoDB Accelerator (DAX) for your table.
It is not possible to query the table by userId if comment_id is used as the primary key.
Create a new table ordered by userId.
You are planning to deploy a new version of your EC2 application using CodeDeploy. You only have a window of two hours to complete the deployment and test it. Your team lead is concerned about the time it could take to roll back the upgrade if it should fail. Which deployment approach would you recommend?
Blue/Green
In-place
Rolling with additional batch
Canary
You are building a simple banking system using serverless technologies. The workflow to authorize a new bank account includes two Lambda functions: one that confirms the customer identity and another that confirms the customer address. Together, these processes should complete in under five minutes. You would like to execute these tasks independently and, in parallel, you also need the ability to handle errors and retries. After the checks are successfully completed, the customer will be approved for a new bank account and a second workflow will be invoked to create the account and inform the customer. You would like to orchestrate everything using Step Functions. Which of the following workflows would be the most suitable?
Standard workflow
Asynchronous Express workflow
Step Functions workflow
Synchronous Express workflow
You are leading a software development team that is working on an application that uses API Gateway to expose API methods to a backend that is being developed by another team. Your team needs to test the integration, but the API that is being developed by the other team is not available for testing yet. Which of the following strategies do you suggest to allow the team to test the integration without the backend API being available to use?
Use a mock integration.
Use a stage variable.
Create a test stage.
Use a GET method.
You are storing user profile data for a mobile gaming application in a DynamoDB table. The product owner asks you to generate a list of all registered users that are located in the USA. As you retrieve the information from DynamoDB, you receive a
ProvisionedThroughputExceededException error. What does the error ProvisionedThroughputExceededException mean in DynamoDB?
The DynamoDB table is unavailable.
You exceeded your maximum allowed provisioned throughput for a table or for one or more global secondary indexes.
The DynamoDB table has exceeded the allocated space.
The size of the query you tried to perform is too large. Find a way to split the query into a set of smaller queries.
A developer wants to use CodeBuild to set up continuous integration for their project. They would like to ensure the project is integrated with the latest code and that the DevOps team is automatically notified of a failure in the build process by receiving an SMS message. Which of the following should the developer implement?
(Choose2)
Use CloudWatch Events and an SNS topic to notify subscribers of build events.
Use CloudWatch Events and SES notifications to send a message to the DevOps team.
Add the name of the email group to the notifications section of the CodeBuild console.
Use the CodePipeline dashboard to view the CodeBuild events log.
Store the source code in CodeCommit.
You are deploying an application that runs in Lambda and processes messages from a Simple Queue Service (SQS) queue. During testing, you discover that occasionally the same SQS messages are received multiple times, causing Lambda to process the same message multiple times and creating problems for the application support team. Which of the following should you do to prevent duplicate messages from being processed?
Disable the automated retry for your function to prevent it from re-processing messages that are already processed.
Configure an on-failure destination to prevent your function from processing messages that are already processed.
Configure a dead-letter queue to prevent your function from processing messages that are already processed.
Create a DynamoDB table to store the SQS message IDs of the messages that have been successfully processed. Configure the Lambda function to check the DynamoDB table to see if a message has already been successfully processed and only process messages that are not already processed.
Your Lambda function needs to add an item to a DynamoDB table; however, when you configure a test event and test the function, the invocation fails, and you receive an access denied message. What could be the reason for this?
The item already exists in the table.
DynamoDB needs to be configured as a trigger for the Lambda function.
Your IAM user account does not have permission to write to the DynamoDB table.
The function execution role does not have permission to write to the DynamoDB table.
You have three separate environments in your AWS account and three corresponding stages in the API Gateway. You are using the API Gateway as a HTTP proxy to a backend endpoint. How do you direct traffic for each environment without creating separate API Gateways?
Update the integration response to update the backend endpoints.
Use a request transformation to transform the backend endpoint responses.
Use custom authorizers for each stage.
Use stage variables and configure the stage variables in the HTTP integration request to interact with different backend endpoints.
You are running a CI/CD pipeline using CodePipeline to deploy containers to Elastic Kubernetes Service (EKS). Container images are stored in Elastic Container Registry (ECR), for deployment to EKS. Before the image is deployed, you want to run a security check on the image, with the ability to fail the pipeline if the security check fails. How do you do this in CodePipeline?
Create a test stage with a test action that will happen before the deployment stage.
Create a test action in the deployment stage to perform security scanning after deploying the image.
Build the container image locally and perform a security scan before beginning the CD/CD pipeline. Push any changes to the source code repository.
Create a test action in the deployment stage to perform security scanning prior to deploying the image.
You are working on an application that uses infrastructure as code templates and consists of a number of Lambda functions and API Gateway endpoints. Which service or framework can help you to provision your serverless application components, using an infrastructure as code approach?
(Choose2)
AWS Elastic Beanstalk
AWS OpsWorks
AWS CloudFormation
AWS Serverless Application Model (AWS SAM)
AWS CodeDeploy
A cloud engineer is working on deploying a new CloudFront distribution for the subdomain learn.acloud.guru. They have been instructed to enforce HTTPS connections using a custom TLS certificate. After researching, they have decided to leverage AWS ACM for the certificate management portion. What else should the engineer do to make use of the certificate within CloudFront?
Use ACM to create the certificate in a Region of your choice.
Create the certificate in the us-east-1 (N. Virginia) Region.
Use ACM to create the certificate in the Region where the majority of your customers are located.
Use ACM to create the certificate in the Region where the CloudFront origin is located.
You are using CodeCommit to store the source code for your application. Whenever a team member creates or updates a pull request, you would like to trigger a Lambda function to save details of the pull request in a DynamoDB table. Which of the following should you implement in order to achieve this?
Use EventBridge to trigger the Lambda function whenever a pullRequestCreated event or a pullRequestSourceBranchUpdated event is detected.
Use SNS to trigger the Lambda function whenever a pullRequestSourceBranchUpdated event is detected.
Use EventBridge to send a notification to SNS whenever a pullRequestCreated event or a pullRequestSourceBranchUpdated event is detected. Use SNS to trigger the Lambda function to save the data to DynamoDB.
Use CloudWatch Logs Insights to trigger the Lambda function whenever a pullRequestCreated event or a pullRequestSourceBranchUpdated event is detected.
You are developing a Java application that runs in Lambda. However, you are experiencing performance issues, particularly when the function initializes. In order to work properly, your application depends on a number of library files that are contained in the AWS SDK library. You need to find a way to reduce the deployment footprint so that you can decrease the time it takes for your function to complete the static initialization phase. Which of the following can you do to improve the performance of this function?
Only include the libraries that are necessary in order for the function to run, instead of the entire AWS SDK library.
Create a .zip file containing the deployment package to reduce its size.
Add the libraries as a Lambda layer.
Cache the required libraries in /tmp.
Your EC2 instance needs to access files located in an S3 bucket. What is the best way to enable access?
Configure a bucket policy that grants read access based on the EC2 instance name.
Create an IAM role with read access to S3, and assign the role to the EC2 instance
Create a new IAM user and grant read access to S3. Store the user's credentials locally on the EC2 instance, and configure your application to supply the credentials with each API request.
Create a new IAM role and grant read access to S3. Store the role's credentials locally on the EC2 instance, and configure your application to supply the credentials with each API request.
You are building a serverless web application that will serve both static and dynamic content. Which of the following services would you use to create your application?
(Choose3)
Lambda
S3
API Gateway
RDS
EC2
You are working on a mobile phone app for an online retailer that stores its customer data in DynamoDB. You would like to enable new users to sign up using Facebook or Google credentials. What is the recommended approach?
Write your own custom code that allows the user to log in via a web identity provider and receive an authentication token, which then calls the AssumeRoleWithWebIdentity API and exchanges the authentication tokens for temporary access to DynamoDB.
Once the user has logged in to the web identity provider, use Cognito to exchange the authentication tokens for temporary access to DynamoDB.
After the user has authenticated with Facebook, allow them to download encrypted AWS credentials to their device so that the mobile app can access DynamoDB.
Embed encrypted AWS credentials into the application code, so that the application can access DynamoDB on the user's behalf.
Which of the following protocols are used to set up secure connections to AWS CodeCommit repositories?
(Choose2)
HTTPS
HTTP
RDP
SSH
Your application uses Kinesis to collect customer data from various sources, including web forms, mobile apps, and IoT devices. This data is analyzed in real time in order to gain insights and improve customer experience. Following a recent Black Friday event, your website experienced unprecedented traffic, and sales have doubled over the last quarter. This increase in traffic caused some issues, and your Kinesis stream is frequently throwing a ProvisionedThroughputExceededException error. What should you do to fix this problem?
(Choose2)
Increase the number of consumers.
Retry the operation immediately.
Provision a second Kinesis stream to handle the additional load. Use a Lambda function to merge the processed data from the two streams.
Reduce the frequency or size of your requests.
Reshard your stream.
Your company is reaching the end of the financial year, and the finance team is running a lot of large database queries and scans against your DynamoDB tables. The database queries and scans are taking much longer to complete than expected. How can you make them more efficient?
(Choose2)
Run parallel scans.
Filter your results based on the primary key and sort key.
Reduce the page size to return fewer items per results page.
Set your queries to be eventually consistent.
An IT auditor has started on your security team. They will need access to read files in S3 and DynamoDB, as well as the ability to describe EC2 instances. You want to ensure that only the auditor is granted this access and that the IAM policy you create cannot mistakenly be attached to any other user. Which IAM policy type should you use?
Custom policy
AWS-managed policy
Customer-managed policy
Inline policy
Your application needs to process a large amount of job requests. You need to ensure that they are processed in order and that each request is processed only once. How would you deploy Amazon Simple Queue Service (SQS) to achieve this end?
Convert your standard queue to a First-In-First-Out (FIFO) queue by renaming your standard queue with the .fifo suffix.
Configure First-In-First-Out (FIFO) delivery in a standard SQS queue.
Use an SQS First-In-First-Out (FIFO) queue to process the jobs.
Use the SetOrder attribute to ensure sequential job processing.
You are working on a web application that needs somewhere to store user session state across a fleet of instances. Which of the following options could you use to deal with user session state?
(Choose 2)
Store session state in DynamoDB.
Store session state locally on the EC2 instance.
Store session state in memory.
Use an ElastiCache cluster.
Store session state in memory.
Your small company is looking to create a simple static website. Your company wants the website to be hosted on Amazon S3 in order to take advantage of S3's ability to scale. Which of the following steps are needed to setup your website on S3?
(Choose4)
Enable static website hosting.
Edit the bucket's Block Public Access settings and add a public bucket policy.
Create an S3 bucket in the region nearest to most of your users, using a bucket name that matches with your domain name.
Create an index and error document.
Enable versioning for the S3 bucket.
You have developed a Lambda function, which is not running as performant as expected. Which of the following approaches can improve the performance of your function?
(Choose2)
Only include the libraries you need to minimize the size of your deployment package.
Package all dependencies with your deployment package.
Store environment variables outside the function.
Establish your database connections from within the Lambda execution environment to enable connection reuse.
You are developing an online banking website that will be accessed by a global customer base. You are planning to use CloudFront to ensure users experience good performance regardless of their location. The security architect working on the project asks you to ensure that all requests to CloudFront are encrypted using HTTPS. How can you configure this?
Set the viewer protocol policy to redirect HTTP to HTTPS.
Set the session protocol policy to redirect HTTP to HTTPS.
Set the request protocol policy to redirect HTTP to HTTPS.
Set the user protocol policy to redirect HTTP to HTTPS.
Which of the following statements are true regarding the concept of blue/green deployment when it comes to the development and deployment of your application?
In blue/green deployment, the 'blue' environment is a staging area where new features are tested. The 'green' environment is the live production environment. Once testing is complete, the 'green' environment is updated to include the new features.
In blue/green deployment, the 'green' environment is used for all backend processes and data storage. The 'blue' environment is dedicated solely to front-end user interactions and interfaces. This separation helps in isolating front-end and back-end operations during updates.
In blue/green deployment, the 'blue' environment is the current live production environment serving user traffic. The 'green' environment is a replica of the production environment but with a different (usually newer) version of the application.
In blue/green deployment, the 'blue' environment refers to the development phase of the application, where developers are actively writing and testing new code. The 'green' environment is the final, stable release of the application that is available to the application consumers.
You have been asked to provision a new environment in a single Region using CloudFormation. Your team lead has provided you with a CloudFormation template that should be used to build the infrastructure. Which of the following API calls would you use to create the new CloudFormation stack?
update-stack
deploy
create-stack
create-stack-set
You are creating a DynamoDB table to manage your customer orders. You would like to have the ability to easily report the latest order from each customer. Which of the following attributes would make a good composite primary key?
(Choose2)
CustomerID
ProductID
OrderNumber
OrderTimestamp
What is the recommended approach to configuring a mobile application to allow users to sign in and sign up to your application via Facebook?
Use encrypted AWS credentials within your application code, and store them locally on the device.
Use Cognito as an identity broker between your application and the web identity provider.
Use IAM as an identity broker between your application and the web identity provider.
Use a custom Lambda function to act as an identity broker between your application and the web identity provider.
You have deployed a MySQL RDS database cluster to store customer transaction data that needs to be queried and updated by a recommendation engine application for an online retailer. Each week, the recommendation engine runs extensive queries on the customer transaction data to identify products that should be marketed to customers, based on their shopping habits. The product owner has asked you to find a solution to improve performance of the weekly queries, including the ability to rank and sort the data to quickly identify the most relevant data for a given query. Which of the following solutions do you recommend?
Use ElastiCache for Redis to improve read performance and sort and rank the results.
Use RDS Proxy connection pooling to improve read performance, and sort and rank the relevant data.
Scale your RDS instances to improve read performance, and refine the SQL query so that the data is properly sorted and ranked for relevance.
Use ElastiCache for Memcached to improve read performance and sort and rank the relevant data.
You are developing a new database-intensive application that runs on multiple EC2 instances that connect to an existing shared RDS cluster. A typical workflow requires many database connections to be opened and closed, and each time the application re-establishes a connection to the database, additional latency is added while the connection is established. You are also concerned that the application will not scale well due to the number of connections that are frequently being opened and closed. What can you do to improve the time taken to establish the connections and improve the performance and scalability of the application?
Use RDS Proxy to pool the connections.
Use ElastiCache to cache frequently accessed data in memory.
Use RDS Multi-AZ to improve database performance.
Modify the RDS instance class to use an instance with greater CPU and memory capacity.
You are planning to provision a number of new EC2 instances to a production environment. The engineering team has provided an AMI that includes all the package dependencies needed by the application. The Head of Security has asked you to ensure that for all existing and future projects, any new EC2 instances must be provisioned using an encrypted AMI; however, when you locate the AMI that is supposed to be used, you discover that is it not encrypted. What should you do to ensure that you use the correct AMI and that it is encrypted?
Provision the new instances using the unencrypted AMI, and specify that the instances will be encrypted.
Encrypt the AMI before using it to provision the new instances.
Provision the new instances using the unencrypted AMI, and specify that the AMI will be encrypted.
Create a copy of the AMI provided by the engineering team, and specify that the copy will be encrypted.
One of your junior developers has never had AWS access before and needs access to an Elastic Load Balancer in your custom VPC. This is the first and only time they will need access. Which of the following choices is the most secure way to grant this access?
Let them log in with admin credentials, and change the admin password when they are finished.
None of these.
Create a new IAM user with only the required permissions, and delete that IAM user after the developer has finished their work.
Add that developer to a group with the requisite access (although that group may have more permissions than are needed for the dev to do their job).
You are creating a DynamoDB table to store customer order data. Which of the following attributes would make a good partition key?
OrderDate
CustomerID
Size
ProductType
A developer is working on a new JavaScript web application that allows users to post opinions to a shared forum and contribute to discussions about the latest innovations in cloud computing. Users have the ability to upvote their favorite posts, and at the end of each day, the top 250 posts are displayed in a leader board. The application makes a large batch request directly to DynamoDB using the BatchGetItem API call to report the most popular 250 posts. When a large request is made, the DynamoDB table frequently returns a partial result, accompanied by a value for UnprocessedKeys. Which of the following actions are ways that the developer can enable the application to receive all the remaining items when the BatchGetItem response includes a value for UnprocessedKeys?
(Choose2)
Increase the provisioned write capacity of the DynamoDB table.
Retry the operation using an exponential backoff algorithm.
Increase the provisioned read capacity of the DynamoDB table.
Retry the batch operation immediately.
Update the application to use the AWS software development kit (AWS SDK) for JavaScript to make the API requests.
Which of the following is required in order to enable an existing Lambda function to access EC2 instances that are located in a private VPC?
Modify the function configuration, and choose the correct subnets and security groups.
Update the permissions in your VPC to allow Lambda to access the EC2 instances.
Configure the Lambda function's execution role to match the role applied to your EC2 instances.
Configure the function policy to allow EC2 to invoke the function.
Which AWS service allows you to build and model your serverless application as a visual workflow consisting of a series of steps where the output of one stage can be input into another?
Lambda
CloudFormation
Simple Workflow Service
Step Functions
Your application runs on EC2 instances in an Auto Scaling group. During peak times, when the Auto Scaling group attempts to launch new instances, you notice that the EC2 instances take too long to provision because the UserData script is taking an unexpectedly long time to complete. You have been asked by your manager to find a way to launch the EC2 instances faster so that new instances come online quickly during scale-out events. The solution that you suggest must include the latest version of the application code that is available and the latest security patches through the UserData script. All images should be validated before they are distributed to ensure that the AMI image boots successfully. Which of the following should you implement?
(Choose 2)
Create a copy of the AMI, add the UserData script to the AMI, and validate the image before it is distributed by running a simple boot test.
Remove the commands that install the application, its dependencies, and the required security patches from the UserData script.
Use Systems Manager Run Command to log in to each new EC2 instance after it has been launched to run the UserData script automatically.
Create an AMI using EC2 Image Builder. The AMI should include the latest version of the application, as well as any application dependencies, and the required security patches. Update the Auto Scaling group to use the AMI.
Use CodeDeploy to deploy the application, its dependencies, and the required security patches from the UserData script.
What is the AWS-recommended method for configuring permissions in a mobile application that allows the application to securely read data from DynamoDB?
Connect your application to an EC2 instance with permission to read from DynamoDB.
Create an IAM role for your users.
Create an IAM role that can be assumed by an app that allows federated users.
Issue an access key and secret access key to each user.
You've been asked to create a web application with an endpoint that can handle thousands of REST calls a minute. Which AWS service can be used in front of an application to assist in achieving this?
S3 Transfer Acceleration
API Gateway
CloudFront
Elastic Beanstalk
