Questions

On this page you can find 50 random questions.

To get prepared for exam you can use cloud-exam-prepare.com

Q1 - Q10

Q1

You are developing an API in Amazon API Gateway that several mobile applications will use to interface with a back end service in AWS being written by another developer. You can use a(n)____ integration for your API methods to develop and test your client applications before the other developer has completed work on the back end.

1. HTTP proxy
2. mock
3. AWS service proxy
4. Lambda function

Q2

You are creating multiple resources using multiple CloudFormation templates. One of the resources (Resource B) needs the ARN value of another resource (resource A) before it is created.

What steps can you take in this situation? (Choose 2 answers)

1. Use a template to first create Resource A with the ARN as an output value.
2. Use a template to create Resource B and reference the ARN of Resource A using Fn::GetAtt.
3. Hard code the ARN value output from creating Resource A into the second template.
4. Just create Resource B.

Q3

A company with global users is using a content delivery network service to ensure low latency for all customers. The company has several applications that require similar cache behavior.

Which API command can a developer use to ensure cache storage consistency with minimal duplication?

1. CreateReusableDelegationSet with Route 53
2. CreateStackSet with CloudFormation
3. CreateGlobalReplicationGroup with ElastiCache
4. CreateCachePolicy with CloudFront

Q4

You are creating a few test functions to demonstrate the ease of developing serverless applications. You want to use the command line to deploy AWS Lambda functions, an Amazon API Gateway, and Amazon DynamoDB tables.

What is the easiest way to develop these simple applications?

1. Install AWS SAM CLI and run “sam init [options]” with the templates’ data.
2. Use AWS step function visual workflow and insert your templates in the states
3. Save your template in the Serverless Application Repository and use AWS SAM

Q5

What will happen if you delete an unused custom deployment configuration in AWS CodeDeploy?

1. You will no longer be able to associate the deleted deployment configuration with new deployments and new deployment groups.
2. Nothing will happen, as the custom deployment configuration was unused.
3. All deployment groups associated with the custom deployment configuration will also be deleted.
4. All deployments associated with the custom deployment configuration will be terminated.

Q6

What happens when you delete a deployment group with the AWS CLI in AWS CodeDeploy?

1. All details associated with that deployment group will be moved from AWS CodeDeploy to AWS OpsWorks.
2. The instances used in the deployment group will change.
3. All details associated with that deployment group will also be deleted from AWS CodeDeploy.
4. The instances that were participating in the deployment group will run once again.

Q7

You are configuring a Jenkins project that is installed on an Amazon EC2 instance running a Windows operating system. You want this Jenkins project to integrate with AWS CodePipeline.

Which actions should you take to make this function perform correctly? (2 answers)

1. Restart all Amazon EC2 instances that are running a Windows operating system.
2. Provide the IAM user credentials to integrate AWS CodePipeline.
3. Fill out the required fields for your proxy host.
4. Modify the PATH variable to include the directory where you installed Jenkins on all Amazon EC2 instance that are running a Windows operating system.

Q8

You are deploying Multi-Factor Authentication (MFA) on Amazon Cognito. You have set the verification message to be by SMS. However, during testing, you do not receive the MFA SMS on your device.

What action will best solve this issue?

1. Use AWS Lambda to send the time-based one-time password by SMS
2. Increase the complexity of the password
3. Create and assign a role with a policy that enables Cognito to send SMS messages to users
4. Create and assign a role with a policy that enables Cognito to send Email messages to users

Q9

A developer is adding sign-up and sign-in functionality to an application. The application is required to make an API call to a custom analytics solution to log user sign-in events

Which combination of actions should the developer take to satisfy these requirements? (Select TWO.)

1. Use Amazon Cognito to provide the sign-up and sign-in functionality
2. Use AWS IAM to provide the sign-up and sign-in functionality
3. Configure an AWS Config rule to make the API call triggered by the post-authentication event
4. Invoke an Amazon API Gateway method to make the API call triggered by the post-authentication event
5. Execute an AWS Lambda function to make the API call triggered by the post-authentication event

Q10

A developer is designing a web application that allows the users to post comments and receive in a real-time feedback.

Which architectures meet these requirements? (Select TWO.)

1. Create an AWS AppSync schema and corresponding APIs. Use an Amazon DynamoDB table as the data store.
2. Create a WebSocket API in Amazon API Gateway. Use an AWS Lambda function as the backend and an Amazon DynamoDB table as the data store
3. Create an AWS Elastic Beanstalk application backed by an Amazon RDS database. Configure the application to allow long-lived TCP/IP sockets.
4. Create a GraphQL endpoint in Amazon API Gateway. Use an Amazon DynamoDB table as the data store.
5. Enable WebSocket on Amazon CloudFront. Use an AWS Lambda function as the origin and an Amazon Aurora DB cluster as the data store

Q11 - Q20

1

You are asked to establish a baseline for normal Amazon ECS performance in your environment by measuring performance at various times and under different load conditions. To establish a baseline, Amazon recommends that you should at a minimum monitor the CPU and ____ for your Amazon ECS clusters and the CPU and ____ metrics for your Amazon ECS services.

1. memory reservation and utilization; concurrent connections
2. memory utilization; memory reservation and utilization
3. concurrent connections; memory reservation and utilization
4. memory reservation and utilization; memory utilization

2

What is one reason that AWS does not recommend that you configure your ElastiCache so that it can be accessed from outside AWS?

1. The metrics reported by CloudWatch are more difficult to report.
2. Security concerns and network latency over the public internet.
3. The ElastiCache cluster becomes more prone to failures.
4. The performance of the ElastiCache cluster is no longer controllable.

3

You are building a web application that will run in an AWS ElasticBeanstalk environment. You need to add and configure an Amazon ElastiCache cluster into the environment immediately after the application is deployed.

What is the most efficient method to ensure that the cluster is deployed immediately after the EB application is deployed?

1. Use the AWS Management Console to create and configure the cluster.
2. Create a cron job to schedule the cluster deployment using the aws cloudformation deploy command
3. Create a configuration file with the .config extension and place it into the .ebextensions folder in the application package.
4. Build an AWS Lambda function that polls to the ElasticBeanstalk environment deployments and create and configure the Amazon ElastiCache cluster.

4

Emily is building a web application using AWS ElasticBeanstalk. The application uses static images like icons, buttons and logos. Emily is looking for a way to serve these static images in a performant way that will not disrupt user sessions.

Which of the following options would meet this requirement?

1. Use an Amazon Elastic File System (EFS) volume to serve the static image files.
2. Configure the AWS ElasticBeanstalk proxy server to serve the static image files.
3. Use an Amazon S3 bucket to serve the static image files.
4. Use an Amazon Elastic Block Store (EBS) volume to serve the static image files.

5

A company is providing services to many downstream consumers. Each consumer may connect to one or more services. This has resulted in complex architecture that is difficult to manage and does not scale well. The company needs a single interface to manage these services to consumers

Which AWS service should be used to refactor this architecture?

1. AWS X-Ray
2. Amazon SQS
3. AWS Lambda
4. Amazon API Gateway

6

Which load balancer would you use for services which use HTTP or HTTPS traffic?

7

What are possible target groups for ALB (Application Load Balancer)?

8

Your would like to optimize the performance of their web application by routing inbound traffic to api.mysite.com to Compute Optimized EC2 instances and inbound traffic to mobile.mysite.com to Memory Optimized EC2 instances.

Which solution below would be best to implement for this?

1. Enable X-Forwarded For on the web servers and use a Classic Load Balancer
2. Configure proxy servers to forward the traffic to the correct instances
3. Use Classic Load Balancer with path-based routing rules to forward the traffic to the correct instances
4. Use Application Load Balancer with host-based routing rules to forward the traffic to the correct instances

9

A company uses Amazon DynamoDB for managing and tracking orders. DynamoDB table is partitioned based on the order date. The company receives a huge increase in orders during a sales event, causing DynamoDB writes to throttle, and the consumed throughput is below the provisioned throughput.

According to AWS best practices, how can this issue be resolved with MINIMAL costs?

1. Create a new Dynamo DB table for every order date
2. Add a random number suffix to the partition key values
3. Add a global secondary index to the DynamoDB table
4. Increase the read and write capacity units of the DynamoDB table

10

A food delivery company is building a feature that requests reviews from customers after their orders are delivered. The solution should be a short-running process that can message customers simultaneously at various contact points including email, text, and mobile push notifications.

Which approach best meets these requirements?

1. Use EventBridge with Kinesis Data Streams to send messages.
2. Use a Step Function to send SQS messages.
3. Use Lambda function to send SNS messages.
4. Use AWS Batch and SNS to send messages.

Q21 - Q30

1

How AWS Fargate different from AWS ECS?

2

What is Chaos Engineering?

3

A client has contracted you to review their existing AWS environment and recommend and implement best practice changes. You begin by reviewing existing users and Identity Access Management. You found out improvements that can be made with the use of the root account and Identity Access Management.

What are the best practice guidelines for use of the root account?

1. Never use the root account.
2. Use the root account only to create administrator accounts.
3. Use the root account to create your first IAM user and then lock away the root account.
4. Use the root account to create all other accounts, and share the root account with one backup administrator.

4

Veronika is writing a REST service that will add items to a shopping list. The service is built on Amazon API Gateway with AWS Lambda integrations. The shopping list stems are sent as query string parameters in the method request.

How should Veronika convert the query string parameters to arguments for the Lambda function?

1. Enable request validation
2. Include the Amazon Resource Name (ARN) of the Lambda function
3. Change the integration type
4. Create a mapping template

5

Your organization has an AWS setup and planning to build Single Sign-On for users to authenticate with on-premise Microsoft Active Directory Federation Services (ADFS) and let users log in to the AWS console using AWS STS Enterprise Identity Federation.

Which of the following services do you need to call from AWS STS service after you authenticate with your on-premise?

1. AssumeRoleWithSAML
2. GetFederationToken
3. AssumeRoleWithWebIdentity
4. GetCallerIdentity

6

Alice is building a mobile application. She planned to use Multi-Factor Authentication (MFA) when accessing some AWS resources.

Which of the following APIs will be leveraged to provide temporary security credentials?

1. AssumeRoleWithSAML
2. GetFederationToken
3. GetSessionToken
4. AssumeRoleWithWebIdentity

7

You built a data analysis application to collect and process real-time data from smart meters. Amazon Kinesis Data Streams is the backbone of your design. You received an alert that a few shards are hot.

What steps will you take to keep a strong performance?

1. Remove the hot shards
2. Merge the hot shards
3. Split the hot shards
4. Increase the shard capacity

8

Jasmin needs to perform ad-hoc business analytics queries on well-structured dat1. Data comes in constantly at a high velocity. Jasmin’s team can understand SQL.

What AWS service(s) should Jasmin look to first?

1. EMR using Hive
2. EMR running Apache Spark
3. Kinesis Firehose + RDS
4. Kinesis Firehose + RedShift

9

Key rotation is an important concept of key management. How does Key Management Service (KMS) implement key rotation?

1. KMS supports manual Key Rotation only; you can create new keys any time you want and all data will be re-encrypted with the new key.
2. KMS creates new cryptographic material for your KMS keys every rotation period, and uses the new keys for any upcoming encryption; it also maintains old keys to be able to decrypt data encrypted with those keys.
3. Key rotation is the process of synchronizing keys between configured regions; KMS will synchronize key changes in near-real time once keys are changed.
4. Key rotation is supported through the re-importing of new KMS keys; once you import a new key all data keys will be re-encrypted with the new KMS key.

10

Alan is managing an environment with regulation and compliance requirements that mandate encryption at rest and in transit. The environment covers multiple accounts (Management, Development, and Production) and at some point in time, Alan might need to move encrypted snapshots and AMIs with encrypted volumes across accounts.

Which statements are true with regard to this scenario? (Choose 2 answers)

1. Create Master keys in management account and assign Development and Production accounts as users of these keys, then any media encrypted using these keys can be shared between the three accounts.
2. Can share AMIs with encrypted volumes across accounts, even with the use of custom encryption keys.
3. Make encryption keys for development and production accounts then anything encrypted using these keys can be moved across accounts.
4. You can not move encrypted snapshots across accounts if data migration is required some third-party tools must be used.

Q31 - Q40

1

When working with a published version of the AWS Lambda function, you should note that the _____.

1. Use the AWS Management Console to create and configure the cluster.
2. Create a cron job to schedule the cluster deployment using the _aws cloudformation deploy_ command
3. Create a configuration file with the .config extension and place it into the .ebextensions folder in the application package.
4. Build an AWS Lambda function that polls to the ElasticBeanstalk environment deployments and create and configure the Amazon ElastiCache cluster.

2

A Developer wants access to the log data of an application running on an EC2 instance available to systems administrators.

Which of the following enables monitoring of the metric in Amazon CloudWatch?

1. Retrieve the log data from AWS CloudTrail using the LookupEvents API Call
2. Retrieve the log data from CloudWatch using the GetMetricData API call
3. Launch a new EC2 instance, configure Amazon CloudWatch Events, and then install the application
4. Install the Amazon CloudWatch logs agent on the EC2 instance that the application is running on

3

A developer is building a streamlined development process for Lambda functions related to S3 storage. The developer needs a consistent, reusable code blueprint that can be easily customized to manage Lambda function definition and deployment, the S3 events to be managed and the Identity Access Management (IAM) policies definition.

Which of the following AWS solutions offers is best suited for this objective?

1. AWS Software Development Kits (SDKs)
2. AWS Serverless Application Model (SAM) templates
3. AWS Systems Manager
4. AWS Step Functions

4

Explain RDS Multi Availability Zone

5

Developer wants to implement a more fine-grained control of developers S3 buckets by restricting access to S3 buckets on a case-by-case basis using S3 bucket policies.

Which methods of access control can developer implement using S3 bucket policies? (Choose 3 answers)

1. Control access based on the time of day
2. Control access based on IP Address
3. Control access based on Active Directory group
4. Control access based on CIDR block

6

To ensure that an encryption key was not corrupted in transit, Elastic Transcoder uses a(n) ____ digest of the decryption key as a checksum.

1. BLAKE2
2. SHA-1
3. SHA-2
4. MD5

7

Dan is responsible for supporting your company’s AWS infrastructure, consisting of multiple EC2 instances running in a VPC, DynamoDB, SQS, and S3. You are working on provisioning a new S3 bucket, which will ultimately contain sensitive data.

What are two separate ways to ensure data is encrypted in-flight both into and out of S3? (Choose 2 answers)

1. Use the encrypted SSL/TLS endpoint.
2. Enable encryption in the bucket policy.
3. Encrypt it on the client-side before uploading.
4. Set the server-side encryption option on upload.

8

In a move toward using microservices, a company’s Management team has asked all Development teams to build their services so that API requests depend only on that services data store. One team is building a Payments service that has its own database. The service floods data that originates in the Accounts database. Both are using Amazon DynamoDB.

What approach will result in the simplest, decoupled, and reliable method to get near-real-time updates from the Accounts database?

1. Use Amazon Glue to perform frequent updates from the Accounts database to the Payments database
2. Use Amazon Kinesis Data Firehose to deliver all changes from the Accounts database to the Payments database.
3. Use Amazon DynamoDB Streams to deliver all changes from the Accounts database to the Payments database.
4. Use Amazon ElastiCache in Payments, with the cache updated by triggers in the Accounts database.

9

You’ve decided to use autoscaling in conjunction with SNS to alert you when your auto-scaling group scales. Notifications can be delivered using SNS in several ways.

Which options are supported notification methods? (Choose 3 answers)

1. HTTP or HTTPS POST notifications
2. Email using SMTP or plain text
3. Kinesis Stream
4. Invoking of a Lambda function

10

Which endpoint is considered to be best practice when analyzing data within a Configuration Stream of AWS Config?

1. SNS
2. E-Mail
3. SQS
4. Kinesis

Q41 - Q50

1

A developer is adding a feedback form to a website. Upon user submission, the form should create a discount code, email the user the code and display a message on the website that tells the user to check their email. The developer wants to use separate Lambda functions to manage these processes and use a Step Function to orchestrate the interactions with minimal custom scripting.

Which of the following Step Function workflows can be used to meet requirements?

1. Asynchronous Express Workflow
2. Synchronous Express Workflow
3. Standard Workflow
4. Standard Express Workflow

2

You joined an application monitoring team. Your role focuses on finding system performance and bottlenecks in Lambda functions and providing specific solutions. Another teammate focuses on auditing the systems.

Which AWS service will be your main tool?

1. AWS X-Ray
2. AWS IAM
3. AWS CloudTrail
4. AWS Athena

3

A team of Developers must migrate an application running inside an AWS Elastic Beastalk environment from a Classic Load Balancer to an Application Load Balancer.

Which steps should be taken to accomplish the task using the AWS Management Console?

• 1
  1. Select a new load balancer type before running the deployment.
  2. Update the application code in the existing deployment.
  3. Deploy the new version of the application code to the environment.
• 2
  1. Create a new environment with the same configurations except for the load balancer type.
  2. Deploy the same application versions as used in the original environment.
  3. Run the Swap-environment-cnames action.
• 3
  1. Clone the existing environment, changing the associated load balancer type.
  2. Deploy the same application version as used in the original environment.
  3. Run the Swap-environment-cnames action.
• 4
  1. Edit the environment definitions in the existing deployment.
  2. Change the associated load balancer type according to the requirements.
  3. Rebuild the environment with the new load balancer type.

4

A developer is deploying an application that will store files in an Amazon S3 bucket. The files must be encrypted at rest. The developer wants to automatically replicate the files to an S3 bucket in a different AWS Region for disaster recovery.

How can the developer accomplish this task with the LEAST amount of configuration?

1. Encrypt the files by using server-side encryption with S3 managed encryption keys (SSE-S3). Enable S3 bucket replication.
2. Encrypt the files by using server-side encryption (SSE) with an AWS Key Management Service (AWS KMS) customer master key (CMK). Enable S3 bucket replication.
3. Use the s3 sync command to sync the files to the S3 bucket in the other Region.
4. Configure an S3 Lifecycle configuration to automatically transfer files to the S3 bucket in the other Region.

5

A serverless application is using AWS Step Functions to process data and save it to a database. The application needs to validate some data with an external service before saving the dat1. The application will call the external service from an AWS Lambda function, and the external service will take a few hours to validate the dat1. The external service will respond to a webhook when the validation is complete.

A developer needs to pause the Step Functions workflow and wait for the response from the external service.

What should the developer do to meet this requirement?

1. Use the .waitForTaskToken option in the Lambda function task state. Pass the token in the body.
2. Use the .waitForTaskToken option in the Lambda function task state. Pass the invocation request.
3. Call the Lambda function in synchronous mode. Wait for the external service to complete the processing.
4. Call the Lambda function in asynchronous mode. Use the Wait state until the external service completes the processing.

6

A company has an application that writes files to an Amazon S3 bucket. Whenever there is a new file, an S3 notification event invokes an AWS Lambda function to process the file. The Lambda function code works as expected. However, when a developer checks the Lambda function logs, the developer finds that multiple invocations occur for every file.

What is causing the duplicate entries?

1. The S3 bucket name is incorrectly specified in the application and is targeting another S3 bucket.
2. The Lambda function did not run correctly, and Lambda retried the invocation with a delay.
3. Amazon S3 is delivering the same event multiple times.
4. The application stopped intermittently and then resumed, splitting the logs into multiple smaller files.

7

An AWS Lambda function accesses two Amazon DynamoDB tables. A developer wants to improve the performance of the Lambda function by identifying bottlenecks in the function.

How can the developer inspect the timing of the DynamoDB API calls?

1. Add DynamoDB as an event source to the Lambda function. View the performance with Amazon CloudWatch metrics
2. Place an Application Load Balancer (ALB) in front of the two DynamoDB tables. Inspect the ALB logs
3. Limit Lambda to no more than five concurrent invocations. Monitor from the Lambda console.
4. Enable AWS X-Ray tracing for the function. View the traces from the X-Ray service.

8

A developer deployed an application to an Amazon EC2 instance. The application needs to know the public IPv4 address of the instance. How can the application find this information?

1. Query the instance metadata from http://169.254.169.254/latest/meta-data/.
2. Query the instance user data from http://169.254.169.254/latest/user-data/.
3. Query the Amazon Machine Image (AMI) information from http://169.254 169.254/latest/meta-data/ami/.
4. Check the hosts file of the operating system.

9

A developer is creating a serverless application that uses an AWS Lambda function The developer will use AWS CloudFormation to deploy the application. The application will write logs to Amazon CloudWatch Logs. The developer has created a log group in a CloudFormation template for the application to use. The developer needs to modify the CloudFormation template to make the name of the log group available to the application at runtime.

Which solution will meet this requirement?

1. Use the AWS::Include transform in CloudFormation to provide the log group’s name to the application.
2. Pass the log group’s name to the application in the user data section of the CloudFormation template
3. Use the CloudFormation template’s Mappings section to specify the log group’s name for the application.
4. Pass the log group’s Amazon Resource Name (ARN) as an environment variable to the Lambda function.

10

A developer needs to use the AWS CLI on an on-premises development server temporarily to access AWS services while performing maintenance. The developer needs to authenticate to AWS with their identity for several hours.

What is the MOST secure way to call AWS CLI commands with the developer’s IAM identity?

1. Specify the developer’s IAM access key ID and secret access key as parameters for each CLI command.
2. Run the AWS configure CLI command. Provide the developer’s IAM access key ID and secret access key.
3. Specify the developer’s IAM profile as a parameter for each CLI command.
4. Run the get-session-token CLI command with the developer’s IAM user. Use the returned credentials to call the CLI.

Q51 - Q60

6

A developer notices timeouts from the AWS CLI when the developer runs list commands.

What should the developer do to avoid these timeouts?

1. Use the --page-size parameter to request a smaller number of items.
2. Use shorthand syntax to separate the list by a single space.
3. Use the yaml-stream output for faster viewing of large datasets.
4. Use quotation marks around strings to enclose data structure.

7

A company is planning to use AWS CodeDeploy to deploy an application to Amazon Elastic Container Service (Amazon ECS). During the deployment of a new version of the application, the company initially must expose only 10% of live traffic to the new version of the deployed application. Then, after 15 minutes elapse, the company must route all the remaining live traffic to the new version of the deployed application.

Which CodeDeploy predefined configuration will meet these requirements?

1. CodeDeployDefault.ECSCanary10Percent15Minutes
2. CodeDeployDefault.LambdaCanary10Percent5Minutes
3. CodeDeployDefault.LambdaCanary10Percent15Minutes
4. CodeDeployDefault.ECSLinear10PercentEvery1 Minutes

8

9

A microservices application is deployed across multiple containers in Amazon Elastic Container Service (Amazon ECS). To improve performance, a developer wants to capture trace information between the microservices and visualize the microservices architecture.

Which solution will meet these requirements?

1. Build the container from the amazon/aws-xray-daemon base image. Use the AWS X-Ray SDK to instrument the application.
2. Install the Amazon CloudWatch agent on the container image. Use the CloudWatch SDK to publish custom metrics from each of the microservices.
3. Install the AWS X-Ray daemon on each of the ECS instances.
4. Configure AWS CloudTrail data events to capture the traffic between the microservices.

10

A company is running an application on Amazon Elastic Container Service (Amazon ECS). When the company deploys a new version of the application, the company initially needs to expose 10% of live traffic to the new version. After a period of time, the company needs to immediately route all the remaining live traffic to the new version.

Which ECS deployment should the company use to meet these requirements?

1. Rolling update
2. Blue/green with canary
3. Blue/green with all at once
4. Blue/green with linear