Free Printable Desarrollador prueba 2

Worksheets

Desarrollador prueba 2

Total questions: 65

Worksheet time: 2hrs 10mins

Name

Class

Date

A developer is troubleshooting an application on EC2 that writes logs to CloudWatch Logs. The company needs to receive SNS notifications when the number of error messages exceeds a defined threshold in a 5‑minute period. Which solution meets these requirements?

Rewrite the application to stream logs directly to SNS.

Configure a subscription filter on the CloudWatch Logs group to trigger SNS notifications.

Install Amazon Inspector on the EC2 instances and configure it to send SNS notifications.

Create a CloudWatch metric filter to detect error patterns; set up a CloudWatch alarm on the metric; configure the alarm to send an SNS notification.

A developer registers a Lambda function as a target for an Application Load Balancer (ALB) using the CLI, but the function is not invoked when requests are sent through the ALB.

Lambda functions cannot be registered as ALB targets.

Lambda functions can only be registered via the AWS Console.

The permissions to invoke the Lambda function are missing.

Cross‑zone load balancing is not enabled on the ALB.

A company wants to deploy static websites on AWS with phased releases (development, staging, UAT, production) triggered by code merges from various version control systems (CodeCommit, Bitbucket, GitHub), ensuring HTTPS sin servidores en ejecución continua. Which solution meets these requirements with minimal operational overhead?

Use AWS Amplify with a serverless backend, connecting repository branches to the respective environments, and trigger deployments via code merges.

Deploy each website using AWS Elastic Beanstalk with multiple environments linked via the EB CLI and automate deployments using CodePipeline.

Host each website in separate Amazon S3 buckets for each environment, with deployments managed by CodePipeline and CodeBuild.

Deploy each website on individual Amazon EC2 instances using custom deployment scripts triggered by code merges.

A company is building a web application that generates reports on demand. Reports are available within one hour, remain accessible for 8 hours, and are deleted after 2 days. Which solution meets these requirements with minimal operational overhead?

Generate reports and store them as items in DynamoDB with TTL; generate a URL for retrieval.

Generate reports and store them in an S3 bucket with server‑side encryption; generate presigned URLs; add S3 Lifecycle rules to delete reports older than 2 days.

Generate reports and store them in an RDS database; generate a URL for retrieval; schedule a Lambda function to delete old records.

Generate reports and store them in an RDS database; attach reports to SNS messages and notify customers.

A developer is creating an application that processes transaction data asynchronously with a Lambda function. The application sometimes fails, and the developer wants a second Lambda function to be invoked automatically to handle errors and log details when a failure occurs.

Configure a Lambda function destination for failures; specify the error-handling Lambda function’s ARN.

Enable AWS X‑Ray tracing and have the function send stack traces to a second Lambda function.

Configure a Lambda function trigger with a failure condition; specify the error-handling function’s ARN.

Create a CloudWatch alarm that triggers the error-handling Lambda function when failures occur.

A company receives food orders from various partners through a microservices architecture using API Gateway and AWS Lambda. Each partner calls a customized API that triggers a shared Lambda function to process orders. Partners must be notified only for their own orders, and the solution should allow easy addition of new partners with minimal code changes. Which approach is the most scalable?

Create separate SNS topics for each partner and have the Lambda function publish order updates to the respective SNS topic.

Develop distinct Lambda functions for each partner to send notifications directly to their service endpoints.

Create a single SNS topic, have the Lambda function publish messages with partner‑specific attributes, and subscribe each partner with an SNS filter policy to receive only their messages.

Use a single SNS topic and subscribe all partners to it without filtering.

A developer is processing clickstream data using Amazon Kinesis Data Streams. The data experiences periodic spikes, and PutRecords API calls sometimes fail with capacity errors. Which techniques will help mitigate these exceptions? (Choose two.)

Implement retries with exponential backoff.

Use a PutRecord API instead of PutRecords.

Reduce the frequency and/or size of the requests.

Use Amazon SNS instead of Kinesis.

Reduce the number of KCL consumers.

A company is migrating its legacy database to Amazon Aurora PostgreSQL. The company requires that database credentials be stored securely and rotated automatically without extra programming overhead. Which solution meets these requirements?

Use IAM database authentication for token-based access.

Store the credentials in AWS Secrets Manager and enable automatic rotation.

Store the credentials in AWS Systems Manager Parameter Store and manually rotate them.

Use an on‑premises HSM to generate and manage credentials.

An application running in an EC2 Auto Scaling group experiences long instance startup times due to a slow‑running UserData script. The solution must ensure that instances become available quickly, always run the latest validated application version with all security patches, and minimize the number of images created. Which two steps should be taken?

Use EC2 Image Builder to create an AMI with all required patches and agents, and update the Auto Scaling launch configuration to use this AMI.

Use EC2 Image Builder to create an AMI with the latest application version and patches, and update the Auto Scaling launch configuration to use this AMI.

Set up AWS CodeDeploy to deploy the latest application version at runtime.

Set up AWS CodePipeline to deploy the latest application version at runtime.

Remove OS patching commands from the UserData script.

10.

A business operates Amazon EC2 instances across several AWS accounts. A developer is tasked with creating an application that aggregates lifecycle events from these instances. These events must be consolidated into a single Amazon SQS queue in the primary AWS account for further processing.

Set up Amazon EC2 to forward lifecycle events from every account to the primary account’s EventBridge event bus. Then, create an EventBridge rule in that bus to capture all lifecycle events, using the SQS queue as the designated target.

Apply resource policies on the main account’s SQS queue to grant write permissions to each account. In each account’s EventBridge event bus, set up a rule that filters for EC2 lifecycle events and directs them to the SQS queue in the primary account.

Develop an AWS Lambda function that periodically reviews all EC2 instances across accounts to detect lifecycle changes, sending a notification to the SQS queue in the main account whenever a change is found. A scheduled EventBridge rule triggers this function every minute.

Adjust the primary account’s event bus permissions to accept events from other accounts. In every account, establish an EventBridge rule to forward all EC2 lifecycle events to the main account’s event bus. Finally, in the main account, create an EventBridge rule that filters these events and designates the SQS queue as its target.

11.

A developer is writing a CloudFormation template in YAML to deploy a serverless application that uses API Gateway, DynamoDB, and Lambda. Which AWS service or tool should be used to define the serverless resources?

Use CloudFormation serverless intrinsic functions.

Use AWS Elastic Beanstalk.

Use AWS Serverless Application Model (AWS SAM).

Use AWS Cloud Development Kit (AWS CDK).

12.

A financial company must retain original customer records containing PII for 10 years, while ensuring that only authorized personnel can access the PII and third parties receive statistical data without it. A developer has stored the immutable record in Amazon S3 and written a Lambda function named removePii to strip PII when needed. How should the solution be configured to meet these requirements with a single copy of the document?

Configure an S3 event notification to trigger the removePii function on each GET request, returning the object without PII.

Configure an S3 event notification to trigger the removePii function on each PUT request, and use PUT requests to access the sanitized object.

Create an S3 Object Lambda access point, associate it with the removePii function, and use this access point to retrieve the object without PII.

Create a standard S3 access point and use the GetObjectLegalHold API with the removePii function to access the object without PII.

13.

A developer is creating an application that processes changes in a DynamoDB table using a Lambda function. How should the developer configure the Lambda function to detect these changes?

Create a Kinesis data stream, attach it to the table, and create a trigger.

Create an EventBridge rule to invoke the Lambda function on a schedule.

Enable DynamoDB Streams on the table and create a trigger to connect the stream to the Lambda function.

Create a Kinesis Data Firehose delivery stream, attach it to the table, and set the Lambda function as the destination.

14.

A developer is creating a new REST API using API Gateway and Lambda. The API has been tested in a staging environment, and the developer wants to make it available for local testing using API Gateway.

sam local invoke.

sam local generate-event.

sam local start-lambda.

sam local start-api.

15.

A developer is creating a social media application that stores reviews in a DynamoDB table. Each review includes a Review ID, Product ID, User ID, a Product Rating (1–5), and an optional comment. The table’s partition key is Review ID, but the most common query retrieves the top 10 reviews with the highest rating for a given product. Which index will provide the fastest response?

Create a global secondary index (GSI) with Product ID as the partition key and Product Rating as the sort key.

Create a GSI with Product ID as the partition key and Review ID as the sort key.

Create a local secondary index (LSI) with Product ID as the partition key and Product Rating as the sort key.

Create an LSI with Review ID as the partition key and Product ID as the sort key.

16.

A company’s application runs on EC2 and stores objects in an S3 bucket. After enabling S3 Block Public Access, users cannot download objects. The developer must implement a solution so that only signed‑in users can access S3 objects securely.

Create an EC2 instance profile with an appropriate IAM role and associate it with the instances.

Create an IAM user with the necessary policy and store the access keys on the instance.

Modify the application to use S3 GeneratePresignedUrl API calls.

Modify the application to use S3 GetObject and return the object handle.

17.

A developer is creating an application that stores files in an S3 bucket and must provide secure access to mobile users without requiring them to log in. Which solution meets these requirements?

Create an IAM user for each mobile user and store credentials locally.

Create a bucket policy that allows public read access.

Store files encrypted and require a password prompt for access.

Use Amazon Cognito to assign unauthenticated users an IAM role with limited permissions.

18.

A developer is maintaining a web application deployed via a CloudFormation template that includes web servers and an RDS database. A recent deployment caused the primary development database to be dropped and recreated, resulting in data loss. Which solution(s) will prevent accidental database deletion in future deployments? (Choose two.)

Add a CloudFormation DeletionPolicy attribute with Retain to the database resource.

Update the CloudFormation stack policy to prevent updates to the database.

Modify the database to use Multi‑AZ deployment.

Create a CloudFormation stack set for deployments.

Add a DeletionPolicy attribute with Retain to the entire stack.

19.

A developer is creating an application that reads and writes to multiple S3 buckets from an EC2 instance. To securely make API requests without managing credentials manually and following the principle of least privilege, what should be done?

Create an IAM user, generate access keys, and attach a policy granting s3:* on the buckets.

Associate the EC2 instance with an IAM role that grants s3:ListBucket and s3:*Object permissions for specific buckets.

Associate the EC2 instance with an IAM role using the AmazonS3FullAccess managed policy.

Create a bucket policy that allows access for the EC2 instance.

20.

A developer is creating an application that stores customer orders in a DynamoDB table. The company requires that all customer data be encrypted at rest using a key that the company generates. Which solution meets these requirements most securely?

Create the DynamoDB table with encryption disabled and implement client‑side encryption.

Store the key using AWS KMS by choosing a customer managed key during table creation and providing its ARN.

Use default encryption and specify the kms:Encrypt parameter when using the SDK.

Use an AWS managed KMS key during table creation and provide its ARN.

21.

A developer is designing an application that retrieves data from a third‑party system and encrypts it before storing on disk using AWS KMS with a symmetric customer managed key. The developer uses GenerateDataKey to obtain a plaintext key and its encrypted copy. Which solution ensures that the file can be decrypted later?

Write the encrypted key from GenerateDataKey to disk for later use; use the plaintext key to encrypt the file.

Write the plaintext key to disk; use the encrypted key to encrypt the file.

Write the encrypted key to disk; then use the plaintext key with the KMS Encrypt API.

Write the plaintext key to disk; then use the encrypted key with the KMS Encrypt API.

22.

A company is developing a scalable data management system using AWS services to accelerate development and increase agility. The system must ingest large volumes of data from diverse sources and process it through sequential business rules and transformations, with the ability to reprocess data if errors occur. The goal is to achieve scalability with minimal maintenance overhead.

Utilize AWS Batch to process tasks in batches.

Employ AWS Step Functions to orchestrate and sequence business rules and transformations, with built-in error handling and retry capabilities.

Leverage AWS Glue for data ingestion and transformation tasks.

Rely on AWS Lambda functions triggered by events to execute processing tasks.

23.

A developer is deploying a new version of an AWS Lambda function that processes orders. The developer wants to roll out the update gradually so that initially only 10% of production traffic is directed to the new version. Which solution meets this requirement with minimal operational overhead?

Update the function code and deploy without traffic splitting.

Create a separate Lambda function and use API Gateway to split traffic.

Use the AWS Lambda console to update the function’s alias without traffic control.

Configure a Lambda alias with weighted routing to direct 10% of traffic to the new version.

24.

A developer is creating a static website that uses Amazon CloudFront to deliver content from a private S3 bucket. Users can access pages like /products/index.html but receive errors when accessing directories (e.g., /products/) without specifying a file name. Which solution meets these requirements without exposing the S3 bucket publicly?

Update the CloudFront distribution’s default root object to index.html

Enable S3 static website hosting and change the CloudFront origin to the S3 website endpoint

Create a CloudFront function that appends "index.html" to requests for directories

Configure a custom error response in CloudFront to redirect 404 errors to /index.html

25.

A developer is building an application using API Gateway and a Lambda backend. The frontend team needs endpoints that return predefined HTTP status codes and JSON responses to facilitate UI development.

Set integration type to AWS_PROXY and provision Lambda functions returning hardcoded JSON.

Set integration type to MOCK; configure integration requests/responses to return predefined HTTP statuses and JSON responses.

Set integration type to HTTP_PROXY and forward requests to an external placeholder API.

Set integration type to MOCK and use method request to define HTTP statuses.

26.

A company is migrating a multi‑node Windows legacy application to Amazon EC2. The application uses a network shared folder to store XML configuration files. To ensure high availability for the configuration repository cost‑effectively, which solution should be implemented?

Attach an EBS volume to an EC2 instance, set up a file system, share a folder via the OS, and modify the application to use the shared folder.

Deploy a micro EC2 instance with an instance store volume, share a folder via the OS, and update the application accordingly.

Use an Amazon S3 bucket to host the repository, migrate the XML files, and update the application to access the files using the AWS SDK.

Use an Amazon S3 bucket, migrate the XML files, and mount the S3 bucket as a local volume on the EC2 instances.

27.

A company operates a custom application on on-premises Linux servers accessed via Amazon API Gateway, with AWS X-Ray tracing enabled on the API test stage. What is the simplest method to enable X-Ray tracing on these on-premises servers?

Install and run the X-Ray SDK on the servers to capture and send trace data to X-Ray.

Deploy and run the X-Ray daemon on the servers to collect and forward trace data to the X-Ray service.

Intercept incoming requests on-premises and set up an AWS Lambda function to extract, process, and forward trace segments using the PutTraceSegments API.

Intercept incoming requests on-premises and configure an AWS Lambda function to extract, process, and forward telemetry records using the PutTelemetryRecords API.

28.

A developer has created a Lambda function that queries an Aurora MySQL DB instance. The function fails with “too many connections” errors. Which solution meets these requirements with the least operational effort?

Create a read replica for the DB instance and query the replica.

Migrate the data to Amazon DynamoDB.

Configure Aurora for Multi‑AZ deployment.

Create an RDS Proxy and have the Lambda function query the proxy.

29.

A company uses AWS CloudFormation to deploy an application that uses an Amazon API Gateway REST API with AWS Lambda function integration and Amazon DynamoDB for data persistence. The application has three stages (development, testing, production), each with its own DynamoDB table. When promoting changes to production, unexpected issues occur. A developer needs to route 20% of production traffic to the new API version while routing 80% to the existing production API, minimizing errors per customer.

Incrementally update 20% of the changes and deploy repeatedly.

Update the Amazon Route 53 DNS record with a weighted routing policy (80% to production, 20% to testing stage alias).

Deploy an Application Load Balancer in front of the API, registering production and testing stages as targets with weights 80% and 20%.

Configure canary settings for the production stage API to direct 20% of traffic to the new deployment and deploy the changes.

30.

A developer is building a serverless photo processing application with two Lambda functions that both use the same Python library for complex computations, resulting in large deployment packages. What should be done to reduce the deployment package size with minimal operational overhead?

Package the Python library separately for each Lambda function, including a copy in each deployment package.

Create a Lambda layer containing the required Python library and use this layer in both functions.

Merge the two Lambda functions into one and deploy as a single package.

Store the Python library in an S3 bucket and reference it via object URLs in the Lambda functions.

31.

A company needs to securely manage one‑time fixed license keys in AWS that must be accessed by automation scripts on EC2 instances and in CloudFormation stacks. Which solution is the most cost‑effective?

Store encrypted files in Amazon S3 with a "config" prefix.

Use AWS Secrets Manager to store secrets tagged with "SecretString".

Use AWS Systems Manager Parameter Store SecureString parameters to store the license keys.

Use CloudFormation NoEcho parameters to store the keys.

32.

A developer is designing an application that uses Amazon S3 to store objects. The company must ensure that all data transferred to S3 is encrypted in transit. Which solution meets this requirement?

Require all clients to use HTTPS when accessing S3 by configuring a bucket policy that denies non‑secure requests.

Enable server‑side encryption on S3.

Encrypt data on the client side before uploading to S3.

Use Amazon CloudFront to deliver content over HTTPS.

33.

A developer is designing a Lambda function that logs key events during its execution. The developer wants to include a unique identifier to associate events with a specific invocation. Given a code snippet that obtains the AWS request ID from the context object, which solution meets this requirement?

Obtain the request ID from the context object's AWS request ID field; write logs to standard output.

Obtain the request ID from the event object; write logs to a file.

Obtain the request ID from the event object; write logs to standard output.

Obtain the request ID from the context object; write logs to a file.

34.

A developer created a Lambda function that is triggered by DynamoDB Streams when items in a DynamoDB table are updated. However, the function is not being invoked. What must be done to enable invocations from the DynamoDB table updates?

Change the StreamViewType to NEW_AND_OLD_IMAGES.

Configure an event source mapping for the Lambda function.

Map an SNS topic to the DynamoDB stream.

Increase the Lambda function’s timeout.

35.

A developer is troubleshooting an API Gateway API that returns HTTP 400 errors. Which solution provides detailed information to diagnose the issue?

Use a Kinesis Data Firehose stream to send API logs to CloudWatch Logs.

Enable CloudTrail Insights for the API stage.

Enable AWS X‑Ray tracing for the API stage.

Enable execution and access logging in CloudWatch Logs for the API stage.

36.

A developer is troubleshooting an application that invokes a Lambda function asynchronously. The function fails after two retries without producing error logs. Which solution will help troubleshoot these failures?

Configure CloudTrail logging to capture API calls.

Configure a dead‑letter queue (DLQ) for the Lambda function to capture failed events.

Use Amazon Simple Workflow Service (SWF) to process unhandled events.

Configure AWS Config to track function invocations.

37.

A company hosts a client‑side web application on Amazon S3 delivered via CloudFront. To support additional subsidiaries, common JavaScript files and web fonts were moved to a central S3 bucket, but browsers block these resources. What should the developer do to prevent this issue?

Create four S3 access points for the central bucket, assigning one per web application.

Create and attach a bucket policy to the central S3 bucket to allow access.

Configure a CORS policy on the central S3 bucket to permit cross‑origin access for the web applications.

Implement a Content‑MD5 header for each request to the central S3 bucket to ensure message integrity.

38.

A developer has built a data collection application where users upload files and await a validation status on a dashboard. Since validating large files takes time, the developer must refactor the app so that the validation result is pushed immediately to the user’s dashboard without reloading the page.

Integrate the client with an API Gateway WebSocket API; store the file with the connection ID and push the status when processing is complete.

Set up a WebSocket server on an EC2 micro instance to push updates.

Email the user when validation is complete.

Use DynamoDB Streams with SNS to trigger dashboard updates.

39.

A developer wants to create a Lambda function that is invoked every 10 minutes in a fully serverless and automated manner. Which solution meets these requirements?

Deploy an EC2 instance with a cron job.

Configure an environment variable named PERIOD with value 600.

Create an EventBridge rule with a rate expression to invoke the Lambda function every 10 minutes.

Create an SNS topic with a 600‑second timer subscription to the Lambda function.

40.

A developer is launching a new application on Amazon ECS and must manage various configuration variables, including remote API authentication details, the API URL, and credentials. The authentication details and API URL should be available across all current and future deployments in development, testing, and production. Which method allows the developer to retrieve these variables with minimal application changes?

Modify the application to fetch variables from AWS Systems Manager Parameter Store using unique paths for each variable per environment, while storing credentials in AWS Secrets Manager for each environment.

Adjust the application to obtain variables from AWS KMS by storing the API URL and credentials as distinct keys for each environment.

Change the application to load variables from an encrypted file packaged with the application, with separate files for each environment.

Configure the application to pull variables from the deployment environment, defining the authentication details and API URL as unique identifiers in the ECS task definition during deployment.

41.

An application hosted on an EC2 instance needs to list and display files from an S3 bucket, but testing shows that no objects are listed. What is the most secure way to resolve this issue?

Update the IAM instance profile attached to the EC2 instance to include S3:* permissions for the S3 bucket.

Update the IAM instance profile attached to the EC2 instance to include only the S3:ListBucket permission for the S3 bucket.

Update the developer's user permissions to include S3:ListBucket for the S3 bucket.

Update the S3 bucket policy to include S3:ListBucket permission with the EC2 instance's account specified as the principal.

42.

A developer's AWS Lambda function is CPU‑bound and must return results faster. How can its performance be enhanced with minimal changes?

Increase the number of CPU cores for the function.

Increase the function's memory allocation.

Increase the function's reserved concurrency.

Increase the function's timeout duration.

43.

A company intends to share data with a third party that provides an HTTP API endpoint, and it possesses the necessary API key. The company needs to manage this API key via code without affecting application performance. Which solution is the most secure?

Store the API credentials in AWS Secrets Manager and retrieve them at runtime using the AWS SDK to make the API call.

Embed the API credentials directly in a local code variable, commit the code to a secure Git repository, and use the variable at runtime.

Save the API credentials as an object in a private Amazon S3 bucket secured by IAM policies, retrieving them at runtime via the AWS SDK.

Store the API credentials in an Amazon DynamoDB table with resource-based policies, and retrieve them at runtime using the AWS SDK.

44.

A developer creates a Lambda function that writes logs to CloudWatch Logs. The log group is defined in a CloudFormation template. The developer needs to make the log group’s name available to the function at runtime.

Use the AWS::Include transform to provide the log group’s name.

Pass the log group’s name in the user data section.

Use the Mappings section to specify the log group’s name.

Pass the log group’s ARN as an environment variable to the Lambda function.

45.

A developer is creating an application where users authenticate via federated credentials from a third‑party IdP through Amazon Cognito. The application uses a custom Lambda authorizer that maps a “Department” attribute from the IdP. However, when testing, even after updating the department to Sales, the access token still shows Engineering.

Authorization caching is enabled in the custom Lambda authorizer.

Authorization caching is enabled on the Cognito user pool.

The IAM role for the Lambda authorizer lacks a Department tag.

The IAM role for the Cognito user pool lacks a Department tag.

46.

A company has built a new application on AWS using CloudFormation templates to bootstrap resources with an Auto Scaling group. The bootstrap scripts contain sensitive data. Which solution, integrated with CloudFormation, will manage the sensitive data most securely?

Place sensitive data in a CloudFormation parameter and encrypt the templates with a KMS key.

Place sensitive data in an S3 bucket and update the template to download the object during bootstrap.

Place sensitive data in AWS Systems Manager Parameter Store as a SecureString parameter and use dynamic references in CloudFormation.

Place sensitive data in Amazon EFS and retrieve it during bootstrap.

47.

A developer has created a data collection application using Amazon API Gateway, AWS Lambda, and Amazon S3. Users periodically upload data files and wait for a validation status on a processing dashboard. For large files, validation is complex and time‑consuming, causing users to refresh the dashboard repeatedly. Which solution will immediately update the validation result on the user’s dashboard without reloading the full page, with minimal operational effort?

Integrate the client with an API Gateway WebSocket API; store files with the WebSocket connection ID and push validation status to that connection when processing completes.

Launch an EC2 micro instance to host a WebSocket server that sends updates after file processing.

Save the user’s email with the file and, upon validation completion, send an email notification via Amazon SNS.

Store file and user details in DynamoDB; use DynamoDB Streams with SNS to push updates to the browser.

48.

A developer is building an application using Amazon API Gateway. The company wants to restrict usage to only users in the Sales department. Users authenticate via federated credentials from a third‑party IdP through Amazon Cognito, with an attribute mapping that passes the “Department” attribute to a custom Lambda authorizer. However, even after updating the department in the IdP, the access token still shows “Engineering.” Which of the following is a possible reason for this behavior?

Authorization caching is enabled in the custom Lambda authorizer.

Authorization caching is enabled on the Amazon Cognito user pool.

The IAM role for the custom Lambda authorizer does not have a Department tag.

The IAM role for the Amazon Cognito user pool does not have a Department tag.

49.

A developer is building an application that allows new users to create accounts using federated credentials from a third‑party identity provider via Amazon Cognito. Which service should be used to manage user registration and authentication?

IAM roles

Amazon Cognito identity pools

Amazon Cognito user pools

AWS Directory Service

50.

A developer is building a web API that receives requests through an internet‑facing Application Load Balancer (ALB) with an HTTPS listener. The developer configures an Amazon Cognito user pool for authentication and must ensure every request is authenticated via Cognito.

Add a listener rule to return a fixed 401 Unauthorized response if the Authorization header is missing.

Create an authentication action for the ALB listener rules with type authenticate-cognito and set OnUnauthenticatedRequest to “deny.”

Create an API Gateway API with a Cognito authorizer and forward requests to the ALB.

Create a new target group with a Lambda function to validate the Authorization header.

51.

A company deploys an API Gateway REST API integrated with Lambda and DynamoDB across three stages. Due to issues promoting changes to production, a developer needs to shift 20% of production traffic to a new deployment while keeping 80% on the current production API to minimize customer errors.

Incrementally update 20% of the changes and deploy repeatedly.

Update the Route 53 DNS record with weighted routing between production and testing stage.

Deploy an Application Load Balancer (ALB) in front of the API with 80% traffic to production and 20% to testing.

Configure canary settings for the production stage API to route 20% of traffic to the new version.

52.

A developer is using AWS Step Functions to automate a workflow composed of Lambda function tasks. The workflow fails in the GetResource task with either an IllegalArgumentException or a TooManyRequestsException. The developer wants the state machine to stop when an IllegalArgumentException is encountered and to retry GetResource one additional time after a 10‑second delay if a TooManyRequestsException occurs; if the retry fails, the state machine should stop.

Add a Delay task after GetResource and add a catcher for TooManyRequestsException to route to the Delay, then back to GetResource.

Add a catcher to GetResource for TooManyRequestsException with a 10‑second interval and maxAttempts=1, then route back to GetResource.

Add a retrier to GetResource configured for TooManyRequestsException with an interval of 10 seconds and maxAttempts=1.

Duplicate the GetResource task as TryAgain and add a catcher to route TooManyRequestsException to TryAgain.

53.

A developer is creating a serverless application using AWS CDK and needs to deploy multiple identical copies of the infrastructure with versioning and rollback capabilities. Which approach meets these requirements?

Use AWS OpsWorks and cost allocation reports.

Use CloudWatch metrics and resource tagging.

Use Elastic Beanstalk and CodeCommit.

Use AWS CloudFormation with CodeCommit.

54.

A developer writing an AWS Lambda function needs to log key events with a unique identifier for each invocation. Which solution best meets this requirement?

Retrieve the request identifier from the AWS request ID in the context object and log to standard output.

Retrieve the request identifier from the event object and log to a file.

Retrieve the request identifier from the event object and log to standard output.

Retrieve the request identifier from the context object and log to a file.

55.

A developer needs to insert a record into an Amazon DynamoDB table immediately after a new file is added to an Amazon S3 bucket. Which set of steps should be taken to achieve this?

Set up an EventBridge event to monitor the S3 bucket and insert records into DynamoDB.

Configure an S3 event to trigger a Lambda function that inserts records into DynamoDB.

Create a Lambda function that polls the S3 bucket and then inserts records into DynamoDB.

Establish a scheduled cron job to insert records into DynamoDB.

56.

A developer is designing a solution to encrypt data at rest in an Amazon DynamoDB table with minimal management overhead.

Use server-side encryption with AWS KMS managed keys.

Implement client-side encryption before sending data.

Use server-side encryption with customer managed keys.

Use server-side encryption with customer provided keys.

57.

A developer needs to store movie information—including title, release year, genre, and various additional details with inconsistent attributes—and support queries for a movie by title and year, all movies by title, and all movies by genre. Which data store configuration meets these requirements?

Use an Amazon DynamoDB table with a composite primary key (title as partition key and release year as sort key) and a global secondary index with genre as partition key and title as sort key.

Use an Amazon DynamoDB table with genre as the partition key and release year as the sort key, along with a global secondary index using title as the partition key.

Use an Amazon RDS instance with a table containing columns for title, release year, and genre, with title as the primary key.

Use an Amazon RDS instance with a table where the primary key is title and all additional data is stored in a JSON column.

58.

A developer is building a serverless application using AWS SAM. The application uses Lambda functions behind API Gateway and is deployed via SAM CLI. Which step must be completed before deployment?

Compress the application into a .zip file and upload it to Lambda.

Test the new Lambda function with AWS X‑Ray.

Bundle the serverless application using the sam package command.

Create the application environment with “eb create.”

59.

A developer needs to expand an application to multiple AWS Regions by copying AMIs with the latest changes. All AMIs must be encrypted in every Region, but some current AMIs are unencrypted. How can the developer meet the encryption requirement during expansion?

Create new AMIs with specified encryption parameters, copy the encrypted AMIs to the destination Region, and delete the unencrypted versions.

Use AWS KMS to enable encryption on the unencrypted AMIs and then copy them to the destination Region.

Use AWS Certificate Manager to enable encryption on the unencrypted AMIs and copy them to the destination Region.

Copy the unencrypted AMIs to the destination Region and enable encryption by default in that Region.

60.

A developer is using AWS SAM to deploy a serverless application and wants to accelerate the deployment process by deploying only incremental changes rather than redeploying the entire application for every commit. Which command meets this requirement?

sam deploy --force-upload.

sam deploy --no-execute-changeset.

sam package.

sam sync --watch.

61.

A developer builds a web application using API Gateway to expose a Lambda function, but experiences API Gateway timeouts despite the Lambda completing in time. Which two CloudWatch metrics can assist in troubleshooting this issue?

CacheHitCount.

IntegrationLatency.

CacheMissCount.

Latency.

Count.

62.

An application stores data in an Amazon S3 bucket via an HTTP API. When objects are added using PutObject, they must be encrypted at rest with SSE‑S3. Which solution meets this requirement?

Create a KMS key and assign it to the S3 bucket.

Set the x‑amz‑server‑side‑encryption header in the PutObject API request.

Include the encryption key in the HTTP header for each request.

Use TLS to encrypt traffic to the S3 bucket.

63.

An application running on a burstable nano EC2 instance writes data to a DynamoDB table using provisioned capacity and occasionally fails with ProvisionedThroughputExceededException errors.

Move the application to a larger EC2 instance.

Increase the provisioned read capacity units of the table.

Implement exponential backoff in the application to reduce request frequency.

Decrease the retry delay to increase the number of requests.

Change the table’s capacity mode to on‑demand.

64.

A company is building a new application using API Gateway to expose APIs. Different development teams work on separate components in parallel, and the company wants to publish an API without an integrated backend so that teams can continue development until the backend is complete.

Create API Gateway resources with integration type MOCK; configure integration requests/responses with fixed HTTP statuses and JSON responses; deploy the API.

Create a Lambda function that returns mocked responses and use AWS_PROXY integration.

Create an EC2 application that returns mocked responses and integrate it with API Gateway.

Create API Gateway resources with integration type HTTP_PROXY and use a Lambda layer to return status codes.

65.

A developer is building an application using AWS CloudFormation and AWS CodeCommit to manage infrastructure as code. The developer must write unit tests for the generated CDK templates and validate that critical security configurations are enabled. Which two actions will meet these requirements with minimal development overhead?

Use a unit testing framework to write custom tests against the generated cdk.out file and run them in a CI/CD pipeline.

Use the CDK assertions module to write unit tests for the constructs and run them in a CI/CD pipeline.

Use the CDK runtime context to set key-value pairs and fail synthesis if violations occur.

Write a script that searches the code for specific configuration strings and reports violations.

Use the CDK Aspects class to create custom rules to validate security configurations and fail synthesis if violations occur.

Reset

Desarrollador prueba 2

Total questions: 65

Worksheet time: 2hrs 10mins

Similar Resources on Wayground