AWS CERTIFIED DEVELOPER ASSOCIATE QUIZ 1 21 Created on January 06, 2021 By Sirjana GhimireAcharya AWS CERTIFIED DEVELOPER ASSOCIATE Quiz 1 1 / 20 In regard to AWS CloudFormation, the template is _____, text-based file that describes all the AWS resources you need to deploy to run your application. A HTML-format A XML-format A CSV-format A JSON-format 2 / 20 A user has hosted a website on AWS and uses ELB to load balance the multiple instances. The user application does not have any cookie management. How can the user bind the session of the requestor with a particular instance? Bind the IP address with a sticky cookie Let ELB generate a cookie for a specified duration Create a cookie at the application level to set at ELB Use session synchronization with ELB 3 / 20 Your tech lead wants you to configure AutoScaling which scales up when the CPU utilization is above 70% and scales down when the CPU utilization is below 30%. How can you configure AutoScaling for the above mentioned condition? Use dynamic AutoScaling with a policy Configure ELB to notify AutoScaling on load increase or decrease Use AutoScaling by manually modifying the desired capacity during a condition Use AutoScaling with a schedule 4 / 20 A user is running a webserver on EC2. The user wants to receive the SMS when the EC2 instance utilization is above the threshold limit. Which AWS services should the user configure in this case? AWS EC2 and AWS Cloudwatch. AWS CloudWatch and AWS SQS. AWS CloudWatch and AWS SES. AWS CloudWatch and AWS SNS. 5 / 20 A user is trying to create a policy for an IAM user from the AWS console. Which of the below mentioned options is not available to the user while configuring policy? Use policy simulator to create policy Assign No permission Use policy generator to create policy Use custom policy to create policy 6 / 20 An organization has 500 employees. The organization wants to set up AWS access for each department. Which of the below mentioned options is a possible solution? Create IAM users and provide individual permission to each Create IAM roles based on the permission and assign users to each role Create IAM groups based on the permission and assign IAM users to the groups It is not possible to manage more than 100 IAM users with AWS 7 / 20 KnowledgeHut is running an Amazon Redshift cluster with four nodes running 24/7/365 and expects, potentially, to add one on-demand node for one to two days once during the year. Which architecture would have the lowest possible cost for the cluster requirement? Purchase 5 reserved nodes to cover all possible node usage during the year Purchase 4 reserved nodes and rely on on-demand instances for the fifth node, if required Purchase 2 reserved nodes and utilize 3 on-demand nodes only for peak usage times Purchase 4 reserved nodes and bid on spot instances for the extra node usage required 8 / 20 A user plans to use RDS as a managed DB platform. Which of the below mentioned features is not supported by RDS? Automated software patching Automated backup Automated failure detection and recovery Automated scaling to manage a higher load 9 / 20 In Amazon SWF, which of the below represents a logical unit of work that is performed by a component of your application. a method a task a schedule a worker 10 / 20 Amazon SNS can also deliver notifications by SMS text message or email, to which of the below: Amazon SQS Amazon SES Amazon FPS Amazon Glacier 11 / 20 Knowledge Hut has placed a set of on-premise resources with an AWS Direct Connect provider. After establishing connections to a local AWS region in the US, Knowledge Hut needs to establish a low latency dedicated connection to an S3 public endpoint over the Direct Connect dedicated low latency connection. What steps need to be taken to accomplish configuring a direct connection to a public S3 endpoint?” Add a BGP route as part of the on-premise router; this will route S3 related traffic to the public S3 endpoint to dedicated AWS region. Configure a private virtual interface to connect to the public S3 endpoint via the Direct Connect connection. Configure a public virtual interface to connect to a public S3 endpoint resource. Establish a VPN connection from the VPC to the public S3 endpoint. 12 / 20 A user has attached one RDS security group with 5 RDS instances. The user has changed the ingress rule for the security group. What will be the initial status of the ingress rule? Approving It is not possible to assign a single group to multiple DB instances Implementing Authorizing 13 / 20 A user is creating multiple IAM users. What advice should be given to him to enhance the security? Grant less privileges for user, but higher privileges for the group Grant more privileges to the user, but least privileges to the group Grant least privileges to the individual user Grant all higher privileges to the group 14 / 20 KnowledgeHut has two batch processing applications that consume financial data about the day’s stock transactions. Each transaction needs to be stored durably and guarantee that a record of each application is delivered so the audit and billing batch processing applications can process the data. However, the two applications run separately and several hours apart and need access to the same transaction information. After reviewing the transaction information for the day, the information no longer needs to be stored. What is the best way to architect this application? Use Kinesis to store the transaction information. The billing application will consume data from the stream, the audit application can consume the same data several hours later. Use SQS for storing the transaction messages. When the billing batch process consumes each message, have the application create an identical message and place it in a different SQS for the audit application to use several hours later Store the transaction information in a DynamoDB table. The billing application can read the rows while the audit application will read the rows them remove the data. Use SQS for storing the transaction messages; when the billing batch process performs first and consumes the message, write the code in a way that does not remove the message after consumed, so it is available for the audit application several hours later. The audit application can consume the SQS message and remove it from the queue when completed. 15 / 20 When AutoScaling is launching a new instance based on condition, which of the below mentioned policies will it follow? Launch an instance which has the highest load distribution Launch an instance in the AZ which has the highest instances Launch an instance in the AZ with the fewest instances Based on the criteria defined with cross zone Load balancing 16 / 20 An organization has 11000 employees. The organization wants to give restricted AWS access to each employee. How can the organization achieve this? It is not recommended to support 11000 users with IAM Create an IAM user for each employee and make them a part of the group Use Identity federation with SSO Use STS and create the users’ run time 17 / 20 A cloud developer has created a MySQL RDS instance with PIOPS. Which of the below mentioned statements will help the developer to understand the advantage of PIOPS? It uses optimized EBS volumes and optimized configuration stacks The user can achieve additional dedicated capacity for the EBS I/O with an enhanced RDS option It provides a dedicated network bandwidth between EBS and RDS It uses a standard EBS volume with optimized configuration the stacks 18 / 20 John is an architect and he has developed an application which is required to send the data to a NoSQL database. John now wants to decouple the data sending such that the application keeps processing and sending data but does not wait for an acknowledgement of DB. Which of the below mentioned applications helps in this scenario? AWS Simple Workflow AWS Simple Queue Service AWS Simple Query Service AWS Simple Notification Service 19 / 20 A user has created an RDS instance with MySQL. The user is using the SQL client to connect with the RDS DB. The client is unable to connect to DB from his home machine. What is a possible reason for the failure? The user has to open port 22 in the RDS security group to connect with RDS DNS The security group is not configured to allow a request from the user’s IP on port 3306 The user has to open port 80 in the RDS security group to connect with RDS DNS You can never connect to RDS from your desktop 20 / 20 Mary is a developer and she has an S3 object in the US Standard region with the content “colour=red”. Mary now updates the object with the content as “colour=”white”. If Mary tries to read the value 1 minute after it was uploaded, what will S3 return? It will return “colour=red” It will return an error saying that the object was not found It will return “colour=white” It may return either “colour=red” or “colour=white” i.e. any of the value Your score is The average score is 46% LinkedIn Facebook Twitter 0% Restart quiz