Font size
WorksheetsNMN123
Total questions: 60
Worksheet time: 32mins
The systems development lifecycle (SDLC) has six phases. The first three phases are plan, define, and design. What are the last three phases of the SDLC?
Test, deploy, and maintain
Code, build, and maintain
Develop, deploy, and maintain
Code, build, and test
Which task is performed during the develop stage of the systems development lifecycle (SDLC)?
New components are obtained and installed.
Deficiencies are identified.
New system requirements are defined.
The system is put into use.
A systems administrator must grant a new developer permissions that are associated with the developer role. This role is associated with the developer group. Which AWS service should the administrator use to assign the new developer to the developer group?
Amazon Simple Storage Service (Amazon S3)
AWS Resource Access Manager (AWS RAM)
Amazon Elastic Compute Cloud (Amazon EC2)
AWS Identity and Access Management (IAM)
A developer is setting up their development environment. They need an integrated development environment (IDE) that enables them to code with other people in real time. Which AWS service should they use?
AWS CloudShell
Amazon CloudFront
Amazon CloudWatch
AWS Cloud9
What are three ways to interact with AWS service application programming interfaces (APIs)? (Select the THREE best options.)
AWS X-Ray
AWS software development kits (SDKs)
AWS Command Line Interface (AWS CLI)
AWS Management Console
AWS CloudTrail
Which tools enable users to control their AWS services from the command line and automate service management with scripts? (Select THREE.)
AWS X-Ray
AWS Tools for PowerShell
AWS CodeCommit
AWS Serverles Application Model (AWS SAM)
AWS Amplify
The service client application programming interfaces (APIs) provide a lower level of abstraction than the higher-level calls that are made by resource APIs.
True
False
Which statements describe AWS resource application programming interfaces (APIs)? (Select TWO.)
They provide a higher-level abstraction than the low-level calls made by service client APIs.
They provide a lower-level abstraction than the higher-level calls made by service client APIs.
They provide access to resources through objects and collections.
They have at least one class per conceptual resource.
They have objects for request and result data
A developer is using the AWS software development kit (SDK) for Python (Boto3) and must specify the Region. Which method enables the developer specify the Region?
By setting the AWS_PROFILE environment variable
Users cannot specify the AWS Region in the service client
By associating a default Region with their profile in the credentials file in the aws folder within their "home" folder
By setting the Region when they instantiate the service client
A developer makes an application programming interface (API) call to access an Amazon Simple Storage Service (Amazon S3) bucket that doesn't exist. Which HTTP response code does the developer receive from the AWS service?
300 series
500 series
200 series
400 series
A student is learning about Amazon Simple Storage Service (Amazon S3). During an interview, a potential employer asks the student to explain how Amazon S3 can be used as a storage solution. Which option is a use case for Amazon S3?
Shared file systems
Hosting active databases
Block-level storage
Data lake
A _____ organizes the Amazon Simple Storage Service (Amazon S3) namespace at the highest level.
Container
Region
Group
Bucket
A developer wants to store image files in a bucket that is called images-bucket, but receives the error BucketAlreadyExists. Which action must the developer take to resolve this error?
The developer must contact AWS Support to request approval to use the same bucket name.
Bucket names are globally unique. If the requested bucket name is not available, the developer ma rename the bucket.
Bucket names are unique to the Region that they are created in. If the requested bucket name is not available, the developer must create the images-bucket in a different Region.
Bucket names go to the highest bidder. The developer must outbid the current bucket owner.
A developer is using Amazon Simple Storage Service (Amazon S3) to host a static website in a bucket that is called frank-martha-cafe. This bucket is in the us-east-1 Region. Which URL is the virtual-hosted-style URL for the website?
After versioning is enabled on an Amazon Simple Storage Service (Amazon S3) bucket, it can be disabled.
True
False
What is the largest size of an object that a user can upload to Amazon Simple Storage Service (Amazon S3) in a single PUT operation?
1 GB
5 TB
100 MB
5 GB
A developer uses an Amazon Simple Storage Service (Amazon S3) bucket. They want to allow a certain AWS Identity and Access Management (IAM) user to perform any S3 operations on the bucket and its objects. They also want to follow AWS recommendations for granting permissions. Which mechanism should the developer apply to the bucket?
Bucket access control list (ACL)
Bucket policy
IAM policy
Cross-Origin resource Sharing (CORS)
A developer wants to allow a user to download private objects directly from an Amazon Simple Storage Service (Amazon S3) bucket without needing AWS security credentials or permissions. What can the developer share with the user to grant them time-limited access to the objects?
A tem
The bu
A pres
Their A
Which method can be used to encrypt Amazon Simple Storage Service (Amazon S3) objects in transit?
Server-Side Encryption with AWS KMS-Managed Keys (SSE-KMS)
Secure Sockets Layer/Transport Layer Security (SSL/TLS)
Server-Side Encryption with Amazon S3-Managed Keys (SSE-S3)
Server-Side Encryption with Customer-Provided Keys (SSE-C)
A developer hosts a static website in an Amazon Simple Storage Service (Amazon S3) bucket. The website references image objects in another S3 bucket. However, these images do not display on the website. What could be the problem?
Amazon S3 does not support object sharing between buckets.
The security group of the S3 bucket does not include an inbound rule to allow HTTP traffic on port 80.
Cross-Origin Resource Sharing (CORS) has not been enabled on the bucket where the assets are stored.
Cross-Region Replication (CRR) has not been enabled on the bucket where the assets are stored.
Which option is the Amazon Web Services (AWS) customer responsible for under the AWS shared responsibility model? (Select TWO)
Security group configuration
Physical servers
Client-side data
Edge location infrastructure
Availability Zone security
Which AWS Identity and Access Management (IAM) resource explicitly grants or denies permissions to a user or group of users?
IAM roles
IAM users
IAM groups
IAM policies
What is the correct term for the process of verifying a user's identity as a developer?
Endorsement
Authentication
Confirmation
Authorization
Which statements about IAM user authentication are true? (Select TWO.)
AWS credentials to authenticate with any supported services must be provided.
A user name and password to authenticate to the console must be provided.
A.pem or .ppk file is used to authenticate programmatically to the AWS application programming interface (API).
It is a best practice to use the account root user credentials to authenticate programmatically by using the AWS Command Line Interface (AWS CLI).
Each AWS account can have only one administrator who manages other IAM users.
Which suggestion is an Amazon Web Services (AWS) recommendation for securing AWS credentials for applications that run on Amazon Elastic Compute Cloud (Amazon EC2) instances?
Embed AWS credentials in the software development kit (SDK) client code.
Store credentials in local AWS configuration files.
Create an AWS Identity and Access Management (IAM) role and attach it to the EC2 instance.
Create an AWS Identity and Access Management (IAM) user and attach it to the EC2 instance.
What is the format of AWS Identity and Access Management (IAM) policies that define the allowable API calls an entity can invoke?
YAML Ain't Markup Language (YAML)
Security Assertion Markup Language (SAML)
Comma-separated values (CSV)
JavaScript Object Notation (JSON)
An administrator created an AWS Identity and Access Management (IAM) group called managers within an AWS account. A policy is attached to the managers group. It allows managers to read from and write to an Amazon Simple Storage Service (Amazon S3) bucket in the same AWS account. What is this type of policy?
Identity-based
Resource-based
Cross-account access
AdministratorAccess managed
Which statement reflects best practices when granting permissions to users, groups, roles, and resources?
Create policies that allow broad access and then limit permissions as needed, based on usage
Use the account root user for routine tasks that the administrator performs.
Create policies that follow the principle of least privilege
Do not set policies for individual resources
What is the effect of the following policy statement?
Denies actions on DynamoDB or Amazon S3 resources except for the resources that are listed in the NotResource element
Denies the ability to write to the pollynotes DynamoDB table
Denies the ability to read from the polly-notes-web S3 bucket
Denies actions on the DynamoDB table or S3 buckets that are listed in the NotResources element
Which statements are true about evaluation logic for AWS Identity and Access Management (IAM) policies? (Select TWO.)
You cannot have deny and allow statements in the same policy.
An explicit allow overrides an explicit deny.
An explicit deny overrides an explicit allow.
By default, all requests are denied.
By default, all requests are allowed.
Which statement best describes Amazon DynamoDB?
An in-memory data store that can boost the performance of databases
A graph database engine that is optimized for storing billions of relationships
A relational database that is built for the cloud and is compatible with MySQL and PostgreSQL
A key-value and document database that scales horizontally and works well for internet-scale applications
Which component is part of an Amazon DynamoDB table?
Predefined schema
SQL-based queries
Attributes
Columns
An Amazon DynamoDB table called SensorReadings captures sensor readings. These readings include a sensor ID attribute that acts as the partition key, and a timestamp attribute that is the sort key. Which statement is trup?
The sensor ID together with the timestamp represent a simple primary key.
It is impossible for two items in the SensorReadings table to have the same partition key.
It is impossible for two items in the SensorReadings table to have the same sort key.
It is impossible for two items in the SensorReadings table to have the same primary key.
Which statement about Amazon DynamoDB partitions is true?
DynamoDB stores data in partitions and chooses the partition based on the range attribute.
If a table has a simple primary key (partition key only), DynamoDB stores and retrieves each item based on its hash attribute.
If a table has a composite primary key, DynamoDB will sort the items based on the sort key before selecting the partition for the item.
A developer writes a hash function to tell DynamoDB how to partition the items.
Suppose that a developer has a restaurants database table that can be queried by name (the partition key), or by name and location (the sort key), What should the developer do if they also want to query by type of cuisine and average customer rating?
Set up a local secondary index on cuisine and customer rating
Set up a global secondary index on cuisine and customer rating.
Change the primary key on the restaurant table to be a complex primary key based on cuisine and customer rating.
Perform a query that uses the cuisine and average customer rating attributes.
A video game developer who uses Amazon DynamoDB wants to ensure that players' profiles are updated correctly when they make in-game purchases. This process requires multiple updates as part of a single user action. What is the best choice to write this developer's application to manage these complex, all-or-nothing changes?
Add an Amazon DynamoDB Accelerator (DAX) cluster
Implement global tables.
Create application code to check that all parts of the transaction were written successfully, and then roll back the update if any part failed.
Use DynamoDB transactions
Which scenarios are example use cases for Amazon DynamoDB Streams? (Select TWO.)
An application that requires the fastest possible response time for reads to support real-time bidding
An application that requires repeated reads against a large set of regional weather data to perform a long-running analysis
An application that automatically sends notifications to the mobile devices of all friends in a group when one friend uploads a new picture
An application that must monitor changes to a DynamoDB table and take action on specific changes when a value reaches a certain threshold
An application that requires an in-memory data store
Which statement about global tables is true?
Global tables provide a managed solution for replicating tables within a single AWS Region.
Global tables use Amazon Simple Storage Service (Amazon S3) to propagate changes between replicas.
When a global table is created, Amazon DynamoDB performs all necessary tasks to create identical tables and propagate ongoing data changes to specified Regions.
With a global table. Amazon DynamoDB supports partial replication of some of the items in a tanle.
How far back in days can an Amazon DynamoDB table be restored by using point-in- time recovery?
The last week
The last 10 days
The last 35 days
The last calendar month
Which statement describes Amazon DynamoDB application programming interface (API) control operations that can be invoked by an application?
Create and manage DynamoDB tables.
Create, read, update, and delete data in a table.
Get and write batches of items in a DynamoDB table.
Make coordinated all-or-nothing changes to multiple items both within and across tables.
Which phrase best describes a RESTful API?
An API that uses HTTP to communicate between client and server
A proxy that exists between client and server to handle common problems that occur with API-driven applications
An API that follows the principles of the Representational State Transfer style
An API that resides on the web server
Which option suggests the use of WebSocket APIs?
An order processing application returns an order number to each customer when they submit an order.
A batch process bundles orders and sends them to a fulfillment center application.
A real-time chat application lets customers talk to customer support about their orders.
A reporting application gives the sally team access to static daily reports from their phones.
Which use case suggests using Amazon API Gateway HTTP APIs?
An application needs an API proxy in front of an AWS Lambda function.
An application must transform a response from an AWS Lambda function before returning the response to the client.
A developer wants to use mock endpoints to test their API.
A developer wants to assign different API quotas by client.
Which statement about Amazon API Gateway integrations is true?
A first-class integration connects an API Gateway HTTP API route to an external third-party service API.
A developer can use HTTP proxy integrations to direct a route to a resource on the internet.
API Gateway cannot access resources within a virtual private cloud (VPC).
An API integration request encapsulates an HTTP request that the backend receives and is always different from the method request that the client submits.
An application that uses Amazon API Gateway must capture contact information from a third-party client application. The client application sends given name, surname, business phone, and cell phone. The harkend application database has only two fields: name and mobile phone. Which option requires the fewest application changes?
Export the API definition and use it to update the client.
Use a mapping template to transform the request before it is sent to the database.
Create a usage plan that describes the fields and applies only to this client
Use a first-class integration to connect the client to the database
Which elements are part of the base URI that AWS generates for an Amazon API Gateway API?
Region and stage name
API identifier and version
Account ID and stage name
Region and version
Given this snippet:
aws apigatewayv2 create-route\
--api-id 03z501670a \
--target arn:aws:lambda:us-east-2:AcctID:function.readFn
Which option could replace the <?> to create an API route that returns an individual product value from an online catalog?
route-key 'GET /products/product_id}\
route-key 'PUT/products'
route-selection-expression '$GET/product'
route-selection-expression 'PUT/products/proxy+}\
Which statement about Amazon API Gateway stages is true?
Stage names are sequentially assigned based on the API version.
Any stage on any API type can be set to autodeploy
Developers can use stage variables to connect different stages to different backends.
Developers should avoid creating different stages for each development environment
A security team wants to know how to protect APIs in their internet application from common web exploits, like SQL injection or cross-site scripting. Which solution most directly addresses their specific concem?
Set throttling limits on their API methods in Amazon API Gateway.
Set all of their APIs to use private endpoints.
Configure a ISON Web Token (IWT)-based authorizer for Amazon API Gateway.
Use AWS WAF with Amazon API Gateway.
What does the Amazon API Gateway integration Latency metric tell the user?
Frequency of server-side errors that affect latency
Speed of the API response back to the client
Responsiveness of the backend
How often requests are throttled
Which statement describes a characteristic of AWS Lambda?
Lambda runs code only when it is activated by an event and uses only the compute resources that are needed.
A developer's methods and configuration options for ensuring high availability with Lambda are similar to their approach with Amazon Elastic Compute Cloud (Amazon EC2).
Lambda functions run in on-demand, temporary environments, and the developer controls when new environments are created or shut down.
A developer must write Lambda functions that use one of the runtimes that the Lambda service provides
Which constraint cannot be modified?
Function timeout
Reserved concurrency
Burst quota
Regional quota
Which option describes how Amazon API Gateway invokes AWS Lambda?
API Gateway directly invokes a function with a synchronous invocation.
Lambda processes API Gateway requests asynchronously and retries each request up to two times.
Lambda uses an event source mapping and polls API Gateway for requests.
API Gateway directly invokes a function and retries the request until it succeeds or expires
Which actions require permissions that are defined in the AWS Lambda execution role? (Select TWO.)
A Lambda function writes to an Amazon DynamoDB table
An object that is written to an Amazon Simple Storage Service (Amazon S3) bucket initiates invocation of a Lambda function.
Lambda polls an Amazon Simple Queue Service (Amazon SQS) queue for messages that initiate invocation of a Lambda function.
An Amazon API Gateway GET route initiates invocation of a Lambda function.
A message that is posted to an Amazon Simple Notification Service (Amazon SNS) topic initiates invocation of a Lambda function
Which statement about the function handler in an AWS Lambda function is true?
The function handler is the entry point that Lambda calls to start running the Lambda function
The function handler method might take an event object or a context object.
The event object provides information about the event that invoked the Lambda function. It must be a predefined object that an AWS service generates.
The context object provides runtime information, and the developer must create a context object that matches the runtime that was selected for the function
Which issue might be addressed by adding provisioned concurrency to an AWS Lambda function?
Another Lambda function runs in the same account and Region. It sometimes spikes and consumes all available concurrency, causing the function to fail.
An application that uses the Lambda function responds slowly for the first few users who sign in each day. Lamfija metrics show higher latency for those initial requests.
A legacy backend system fails intermittently when the developer connects to it. To avoid extra costs, they want to reduce the function's wait time when the backend fails.
The developer wants more visibility into transactions that use the Lambda function to identify bottlenecks
Which AWS Lambda configuration setting might a developer use to manage function errors when configuring an Amazon Simple Notification Service (Amazon SNS) topic as the event source for a Lambda function? (Select TWO.)
State machines.
File systems
Destinations
Virtual private cloud
Asynchronous invocations
A zipped deployment package including code and custom libraries is 75 MB in size. Which AWS Lambda deployment option should be used?
Copy the code into the Lambda console editor to create and deploy the Function.
Upload a zip file from an integrated development environment (IDE) to load the deployment package directly into the Lambda console.
Upload the deployment package to an Amazon Simple Storage Service (Amazon S3) bucket, and specify the bucket name and object key on the Lambda console
Upload the deployment package to an Amazon Elastic Block Store (Amazon EBS) volume, and use the File Systems configuration to reference it.
A Function's Amazon Resource Name (ARN) is as follows: arn:aws:lambda:aws-region:acct-id:function:helloworld:PROD Which statement about this function is correct, based on its ARN?
This ARN will invoke the immutable PROD version of the function.
This ARN will invoke the version of the function that is currently associated with the PROD alias
This ARN will invoke the function and include the AWS Lambda layer that is named PROD.
This ARN will deploy the helloworld function into the PROD account.
Users of a serverless application have reported errors that occur when they try to retrieve order information. Assuming that AWS X-Ray is enabled, what is the first step the developer might take in X-Ray to start troubleshooting the reported issues quickly?
Drill down into the most recent traces to look for errors.
Search for metadate that is related to the users who are repor Ling issues.
Add annotations that the developer can use to start grouping and filtering traces
Use the service map to visually locate errors across the application.
