Certified Developer Associate Flashcards

1
Q

When would you use high-resolution CloudWatch metric?

A

When application needs monitoring with frequency of 10 or 30 seconds.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

When working on AWS CodeBuild you want to override build command to test the change. You have access to run the build but not to edit code build project. What process can be used to override build command?

A

Run the start build AWS CLI command with buildspecOverride property set to the new buildspec.yml file

aws codebuild start-build –generate-cli-skeleton

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Explain lazy loading strategy in Elastic Cache cluster

A

When data requested doesn’t exists or is expired in the cache, lookup into db is performed and result stored in the cache after.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Explain write through strategy in Elastic Cache cluster

A

adds data or updates data in the cache whenever data is written to the database.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which API call should a developer used when application is trying to access S3 bucket?

A

STS:AssumeRole

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Which service should developer use when migrating an application that uses Microsoft SQL with Transparent Data Encryption?

A

RDS supports TDE for SQL servers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How we can we route traffic to API gateway for different stages without creating separate API for each?

A

make use of stage variables as configuration attributes that are associated with deployment stage of an API. They act as environment variables and can be used with stage API setup.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is required to set CloudWatch alarm?

A

Period - length of time to evaluate the metric to create individual data point.
Evaluation Period - number of most recent data points to evaluate when determining alarm state.
Datapoints to Alarm - number of datapoints within the evaluation period that must be breached to cause alarm state.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How can developer change the instance size of the Elastic Beanstalk?

A

during environment creation, creating configuration file in S3. Configuration files are applied from different source with different precedence.

  • applied directly to environment
  • saved configurations
  • configuration files (.ebextensions)
  • default values
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Which deployment methods will deploy Elastic Beanstalk code to only new instances?

A

Immutable deployment - deploys new set of instances with new version of application code in separate auto scaling group.
Blue/Green deployments - allows separate deployment environment too.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Ratio of Read and Write operations in DynamoDb is 1000 : 1. What can be enabled on dynamoDb table to optimize performance and minimize costs?

A

DynamoDb Accelerator - DAX is DynamoDb caching service for read heavy or bursty workloads while keeping latency at minimal.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What rates can S3 support?

A

3,500 requests per second to add data and 5,500 requests per second to retrieve data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

How do you control API front-end and back-end interactions via API Gateway?

A

Modify method request/response for FE and

Integration request/response for BE.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

AWS Lambda functions is interacting with DynamoDb table and results and being returned with a delay. What is the best way to debug and identify this performance issue?

A

Use AWS X-Ray to see where the downstream delay could be. Can also be used to investigate latency issues.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

How to configure server side encryption for S3 artefacts?

A

server side encryption is enabled on bucket level.

KMS custom key and use it for S3 encryption.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How would you develop AWS application to compensate for network delays?

A

Retries in my application code with exponential backoff algorithm (progressively longer waits between retries for consecutive error responses).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What does user pools in AWS Cognito provide?

A
  • Web UI to sign in users and social sign via Facebook, Google etc.
  • User directory management and profile.
  • Security such MFA, phone email verification.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

You have application that stored data in DynamoDb table. How can you achieve encryption at rest?

A

DynamoDb offers encryption during a table creation using KMS managed encryption key for DynamoDb.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Different deployment strategies for Elastic Beanstalk?

A
All at once
Rolling
Rolling with additional batch
Immutable
Blue/Green
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Your application process data from multiple devices and some preprocessing needs to happen before it can be analysed by Analytics tool. What can be used to carry this activity?

A

AWS lambda can be used to preprocess data from Kinesis Analytics. It give you flexibility in terms of what data could actually be analysed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

You are required to customise a content that Cloudfront (content delivery framework) Distribution delivers, the content origin is S3. How could this be achieved?

A

Lambda@Edge allows you to execute functions that Cloudfront delivers. Functions are executed globally and are closer to the viewer reducing latency and improving user experience.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What tool in AWS will let you managed whole project life cycle

A

AWS CodeStar

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

How can you deliver new version of application to a portion of user when using Route 53 DNS

A

Use Route 53 weighted routing policies, you can select how much traffic is routed to each resource.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

You need to automate deployment different Lambda functions to multiple accounts, what can be used to automate deployment?

A

AWS CloudFormation is a service that can deploy infrastructure as code, with ability to deploy into different accounts.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

When deploying lambda function with multiple version using AWS CodeDeploy what needs to be done in order to deploy correct version?

A

AWS CodeDeploy config file is called AppSpec file, there we can specify a version to be deployed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

How can you get private/public IP from EC2 instance?

A

Query the instance MetaData.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Where should you store files such as videos in AWS to ensure components are decoupled?

A

AWS Simple Storage Service (S3).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

How do you calculate read capacity in DynamoDb?

A

(items / seconds) = items per second
items / 4kb = value to whole number
items per second x value to whole number

If eventual consistency x 2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

How can you monitor incoming connections to the load balancer?

A

ELB provides access log that capture detailed information about the request coming in.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Your application stores data in DynamoDb there is a requirement that once record is inserted secondary table is also updated. What feature can be used in order to accomplish this?

A

AWS DynamoDb streams contains a time ordered sequence of item level modification stored for 24h.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What can you do to avoid throttling errors when scaling large DynamoDb table?

A

reduce scan page size which by default is 1MB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What needs to be done for a lambda function to be able to access resources in a VPC?

A

Subnet and Security group ID

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What is write capacity of dynamoDb?

A

1 items of 1kb per 1 sec

34
Q

There are sets of videos that needs to be accessed via unauthenticated identities. How can we best achieve this using AWS?

A

Use AWS Cognito with unauthenticated identities enabled

35
Q

How can you provide a cross account access to AWS Code Commit repository?

A

create cross account role with privileges and provide ARN to developers.

36
Q

Lambda is processed asynchronously if the functions fails you need a way to debug issues, how can this be achieved?

A

Use dead letter queue and direct those messages at SQS or SNS topic to analyse for failure.

37
Q

What are the limits when you upload or download objects from S3 when encrypted at rest using KMS?

A

10k, anymore will exceed throttle limits for KMS API calls.

38
Q

When maintaining application using Elastic Beanstalk how can you manage application version limit?

A

create application lifecycle policy.

39
Q

When data in DynamoDb table data is needed across multiple regions around the world. What can help to reduce latency of requests?

A

enable global tables (multi-region, multi master) for dynamoDb

40
Q

Large dataset needs to be streamed directly onto Amazon S3, what could be used for this requirement?

A

Kinesis Data Firehose can be used for real time streaming data into S3, Redshift, ElasticSearch Service and Splunk

41
Q

You access your application via API gateway and you plan to move users from older version to newer version, how can this be achieved?

A

Create another stage in API gateway.

42
Q

When deploying AWS resources using Cloudformation, how templates should be managed when there is high number of resources?

A

Break big template into smaller multiple templates.

43
Q

The application hosted on EC2 has been changed to make calls to API gateway, however there is no response and errors are being returned , how could this be fixed?

A

Enable CORS for the API gateway.

44
Q

Mobile application need to use AWS authentication where users have MFA enabled, what can be used to achieve this?

A

AWS Cognito with MFA.

45
Q

You have create some custom policies, how can you test them via CLI?

A
  1. Get context key, and aws iam sumulate-custom-policy command by passing context keys.
46
Q

Your AWS CodePipeline is using resources which are shared across multiple AWS accounts. What’s needs to be done in order to accomplish deployment?

A

Define customer master key in KMS

Add a cross account role

47
Q

How does CloudTrail works?

A

logs all authenticated requests to IAM and AWS STS APIs

logs non authenticated requests to AWS STS actions, AssumeRoleWithSAML and AssumeRoleWithWebIdentity.

48
Q

You are planning on running periodic tasks on Elastic Beanstalk using worker role. What is a must as part of the deployment?

A

cron.yaml file

49
Q

When deploying application using CloudFormation what steps needs to be carried out?

A

sam package and deploy command.

50
Q

You made a change to a Lambda function and you need to shift traffic slowly from one function to another function, what steps needs to be carried out?

A

create an ALIAS with the -routing-config parameter and update ALIAS with the -routing-config parameter.

This will enable you to shift traffic if form of % rather than everything at one go.

51
Q

Application is using DynamoDb tables and there is a requirement that user can only view certain items in table. How can this be accomplished?

A

IAM Policies with specific conditions.

52
Q

You have created Lambda function behind a API gateway, you need to control access to it. What can be used to achieve this?

A

AWS Cognito User pool, Lambda Authorisers

53
Q

Use streaming records using Kinesis Firehose onto S3, there is a requirement to enable encryption at rest, how can this be done?

A

Enable encryption for Kinesis Data Firehose,

ensure that Kinesis streams are used to transfer data from producers.

54
Q

You need to use Jenkins in your CI/CD pipeline and other AWS services for deployment. What needs to be done in order to fulfil this requirement?

A

Configure EC2 with Jenkins installed, IAM roles for EC2 to access Code Pipeline.

55
Q

You are deploying EC2 instances using Cloudformation templates, instances need to be pre configured with with the NGINX web server to host the application. How can this be achieved?

A

Use the cfn-init helper script in Cloudformation.

56
Q

What must be done to ensure X-Ray service can be used with Lambda function?

A

Ensure IAM role assigned to the Lambda functions has access to X-Ray service.

57
Q

In AWS Lambda what is the default setting for memory and timeout?

A

128MB and 3sec

58
Q

You need to create Elastic Beanstalk environment that will use a lot of custom installed software, how can the environment be prepared?

A

Create custom AMI as if you need to install a lot of software that isn’t included in standard.

59
Q

When working with search queries in DynamoDb, what must be done in order for this to work?

A

Specify a key condition expression in the query, partition key name and value in equality condition

60
Q

What is the config name and format for AWS CodeDeploy?

A

AppSpec.json

61
Q

How can blue green deployment be implemented, give some examples?

A

Route 53 weighted routing policies, Elastic Beanstalk swap URL feature.

62
Q

What can be used to see Lambda invocation errors?

A

Cloudwatch

63
Q

What command would you use to generate data key using KMS in encrypted format?

A

GenerateDataKeyWithoutPlaintext command

64
Q

What is AWS Lambda Alias?

A

Pointer to specific lambda function version

65
Q

You are using AWS SQS queues and there is requirement that once message is added it should be invisible for 5 mins to consumers, how can this be done?

A

Implement Delay Queues is AWS, change the message timer value for each individual message.

66
Q

When working with DynamoDb and you only want to retrieve certain attributes from a table in a query, what would you use for this?

A

Projection expression let’s you identify what attributes you want in form of a string.

67
Q

What is a recommended practise when working with activity workers and tasks in StepFunctions?

A

Ensure to specify timeout in state machine definitions, if passing large payload between the states consider using s3

68
Q

You create Cloudformation templates that needs to be created across accounts with least amount of effort, which of the following would assist in accomplishing this?

A

Creating Cloudformation StacksSets

69
Q

When creating RDS database as part of Elastic Beanstalk application, how can you preserve data after environment is torn down?

A

ensure the db is created as part of environment

retention of database is marked as create snapshot

70
Q

When load testing an application that is using DynamoDb for storage, which service would you use to ensure that Consumed capacity does not go above throughout capacity?

A

AWS Cloudwatch

71
Q

What are minimum requirements to host a static website in s3?

A

enable hosting on a bucket
configure an index document
configure permission for website access

72
Q

What feature of AWS Cognito can be used to in analyse stored information inside Cognito?

A

Cognito Streams

73
Q

How to perform blue/green deployment of Elastic Beanstalk application?

A

create new environment in the application with updated application and perform a swap

74
Q

What feature of X-Ray SDK would you use in order to trace all incoming HTTP requests?

A

Interceptors

75
Q

When transferring data from Amazon S3 to Redshift you need to define source and destination location. Which part of DataPipeline allows you to define those locations?

A

Data Nodes

76
Q

When loading data to Redshift for S3, which command should you use for this activity?

A

COPY

77
Q

How can you calculate initial number of shards for the Kinesis stream when getting data from various log sources.

A

Incoming write bandwidth,

Outgoing read bandwidth

78
Q

How can you go back to previous policy if current one is not working?

A

Revert back to previous version of the policy.

79
Q

How can you encrypt connection from application to MySQL RDS instance?

A

SSL

80
Q

If you want to specify amount of time object is stored in the CloudFront cache, how can this be done?

A

Configure origin to add an Expires header field to the object
Specify a value for Minimum TTL is CloudFront cache behaviours

81
Q

What is advantage of initialising any external dependencies of your Lambda function code?

A

Ability to reuse Execution Context

82
Q

In AWS Lambda how can we solve CodeStorageExceededException?

A

Reduce the size of your code