Missed Review Questions March 2020

Question 1

How do you output build artifacts from AWS CodeBuild to AWS CodePipeline?

Answer 1

Specify artifact files in the buildspec.yml configuration file.

Question 2

Which operating systems does AWS Elastic Beanstalk support?

Answer 2

Amazon Linux, Windows Server

Question 3

Which components are required in an encryption system? (Select THREE.)

Answer 3

1. Data to encrypt
2. Method to Encrypt
3. Cryptographic algorithm

Note: There is NO database to store encryption keys. That is stored in an HSM.

Question 4

If an instance is running low on storage, and you find that there are a large number of deployment revisions stored by AWS CodeDeploy, what can be done to free up this space permanently?

Answer 4

Configure the AWS CodeDeploy agent to store fewer revisions.

Question 5

How does AWS Lambda support in-place deployments?

Answer 5

Lambda does not support in place deployments

Question 6

Which are the components of key management infrastructure (KMI)? (Select TWO.)

Answer 6

Storage layer and management layer

Question 7

What does a service token represent in a custom resource declaration?

Answer 7

The Amazon Simple Notification Service (Amazon SNS) or AWS Lambda resource Amazon Resource Name (ARN) that receives the request

Question 8

Can data passed to build projects using environment variables be encrypted or protected?

Answer 8

No, but possible with other AWS services.

Question 9

If a single pipeline contains multiple sources, such as an AWS CodeCommit repository and an Amazon S3 archive, under what circumstances will the pipeline be triggered?

Answer 9

When either a commit is pushed to the repository or the archive is updated, regardless of timing

Question 10

Immutable updates

Answer 10

the fastest deployment for the lowest cost. In an immutable update, a new Auto Scaling group is created and registered with the load balancer. Once health checks pass, the existing Auto Scaling group is terminated.

Question 11

Which of these options allows you to specify a required number of signals to mark the resource as CREATE_COMPLETE?

Answer 11

CreationPolicy

Question 12

If your AWS CodeDeploy configuration includes creation of a file, nginx.conf, but the file already exists on the server (prior to the use of AWS CodeDeploy), what is the default behavior that will occur during deployment?

Answer 12

The deployment will fail.

Question 13

What is the only deployment type supported by on-premises instances?

Answer 13

In-Place

Question 14

Which AWS encryption service provides asymmetric encryption capabilities?

Answer 14

Cloud HSM

Question 15

Which feature of AWS Key Management Service (AWS KMS) enables you to use an AWS CloudHSM cluster for the storage of your encryption keys?

Answer 15

custom key stores

Question 16

Which account is billed for user-accessed AWS resources allocated by AWS Elastic Beanstalk?

Answer 16

All accounts involved

Question 17

How can you connect to an AWS CodeCommit repository without Git credentials?

Answer 17

AWS CodeCommit credential helper. You can use the CodeCommit credential helper to convert an IAM access key and secret access key to valid Git credentials for SSH and HTTPS authentication.

Question 18

You are creating a custom resource associated with AWS Lambda that will execute several database functions in an Amazon Relational Database Service (Amazon RDS) database instance. As part of this, the functions will return data you would like to use in other resources declared in your AWS CloudFormation template.
How would you best pass this data to the other resources declared in the template?

Answer 18

Use custom resource outputs to declare the returned data as resource properties. Then, query the properties using the Fn::GetAtt intrinsic function.