Practice Exam 5

Question 1

What is an instance profile?

Answer 1

A container for an IAM role that you can use to pass role information to an EC2 instance when the instance starts

Question 2

What do manual approval actions in a CodePipeline publish to?

Answer 2

An SNS topic

Question 3

Can CodeBuild trigger a Lambda function directly?

Answer 3

No, you have to use CloudWatch Events

Question 4

What does SAML stand for?

Answer 4

Security Assertion Markup Language

Question 5

What do you need to create in order to provide AWS credentials to the users of your enterprise if your corporate identity store is not SAML compatible?

Answer 5

A custom broker, which is going to authenticate the users with your corporate identity store, and then retrieve temporary AWS creds from STS

Question 6

What RDS feature (for Microsoft SQL Server) encrypts data before it is written to storage, and automatically decrypts data when the data is read from storage

Answer 6

Transparent Data Encryption

Question 7

You have a CLB in front of your EC2 instances. One died, then got manually rebooted, and the health check passed. What do you have to do to attach it back to the ELB?

Answer 7

Nothing, the ELB will direct traffic to it after the health check treshold is passed

Question 8

Which runtime allow you to pass directly the function code inline to the function resource in a CloudFormation template?
Code:
ZipFile: “XXX”

Answer 8

Nodejs and Python

Question 9

What should you use to install the xray daemon on EC2 instances?

Answer 9

A user data script

Question 10

Where are event source mapping created when making a lambda function which processes all events in a DynamoDB stream?

Answer 10

In Lambda

Question 11

Which task placement strategy takes the least amount of configuration?

Answer 11

random

Question 12

What is the only read consistency available for global secondary indexes?

Answer 12

Eventual consistency

Question 13

What are the 4 python helper scripts that you can use in CloudFormation?

Answer 13

cfn-init
cfn-signal
cfn-get-metadata
cfn-hup

Question 14

What CloudFormation helper script is used to signal with a CreationPolicy or WaitCondition, so you can synchronize other resources in the stack when the prerequisite resource or application is ready?

Answer 14

cfn-signal

Question 15

What CloudFormation helper script is used to retrieve metadata for a resource or path to a specific key?

Answer 15

cfn-get-metadata

Question 16

What CloudFormation helper script is used to check for updates to metadata and execute custom hooks when changes are detected?

Answer 16

cfn-hup

Question 17

What CloudFormation helper script is used to retrieve and interpret resource metadata, install packages, create files, and start services?

Answer 17

cfn-init

Question 18

What are the two types of event source in Lambda?

Answer 18

Poll-based (ex: Kinesis)

Push-based (ex: API Gateway, S3)

Question 19

What is Amazon Pinpoint?

Answer 19

A service which simply allows you to engage with your customers across multiple messaging channels

Question 20

Why use AWS Secrets Manager over the Systems Manager Parameter Store to store your secrets for a secured service/database?

Answer 20

Because you can configure AWS Secrets Manager to automatically rotate the secrets. It natively knows how to rotate secrets for supported RDS DBs.

Question 21

What is AWS Batch used for?

Answer 21

Run hundreds of thousands of batch computing jobs in AWS

Question 22

What are markers used for in SWF?

Answer 22

Record events in the workflow execution history for application specific purposes (record custom information to help implement decider logic)

Question 23

What are signals used for in SWF?

Answer 23

Inject information into a running workflow execution

Question 24

What are timers used for in SWF?

Answer 24

Notify your decider when a certain amount of time has elapsed and does not meet the requirement in this scenario

Question 25

What are tags used for in SWF?

Answer 25

Filter the listing of the executions when you use the visibility operations

Question 26

What is Amazon Lightsail?

Answer 26

Virtual servers, storage, databases, and networking for a low, predictable price

Question 27

What API allows you to retrieve traces ID and annotations?

Answer 27

GetTraceSummaries

Question 28

What does the consolidated billing feature in AWS Organization allows you to do?

Answer 28

To consolidate payment for multiple AWS accounts or multiple AISPL accounts

Question 29

What do all organizations in AWS Organizations have?

Answer 29

A master account that pays the charges for all the member accounts

Question 30

What does a Cross-Account Lambda Authorizer allows?

Answer 30

Enables you to use an AWS Lambda function from a different AWS account as your API authorizer

Question 31

Where should add information about the SQL calls to an RDS DB?

Answer 31

Subsegment section of the segment document since you want to trace the downstream call to RDS and not the actual request to your application

Question 32

In front of what can an AWS WAF be installed?

Answer 32

CloudFront
API Gateway
ALB

Question 33

What is Amazon GuardDuty?

Answer 33

A threat detection service that continuously monitors for malicious activity and unauthorized behavior

Question 34

What is AWS Firewall Manager?

Answer 34

A service which simplifies your AWS WAF and AWS Shield Advanced administration and maintenance tasks across multiple accounts and resources

Question 35

What RDS feature allows us to get the percentage of the CPU bandwidth and total memory consumed by each database process in our RDS instance?

Answer 35

Enhanced Monitoring in RDS

Question 36

Should you put your core logic in your Lambda function handler?

Answer 36

No!

Question 37

What should you use to pass operational parameters to your function?

Answer 37

Environment variables

Question 38

Should you use recursive code in your Lambda function?

Answer 38

No

Question 39

Where should you put your Lambda function if it needs access to RDS/ElastiCache/other AWS resources?

Answer 39

In a VPC

Question 40

What should you set up if your Lambda function needs access to private AWS resources (RDS, ElastiCache, etc.) AND other resources accessible through the Internet?

Answer 40

Set up a VPC and make sure NAT works

Question 41

What is the maximum total size of all indexed items in LSI for each partition key value?

Answer 41

10 GB