Udemy Tests Flashcards
Unsupported cloudfront protocol
UDP
Your Elastic Beanstalk application must encrypt payloads of up to 10MB. Which method will help you achieve that?
Use the encryption SDK
Default visibility timeout for SQS
30 seconds
You have configured the AWS CLI on your workstation. Your default region is us-east-1 and your IAM user has permissions to operate commands on services such as EC2, S3, and RDS in any region. You would like to execute a command to stop an EC2 instance in the us-east-2 region. What must you do to achieve this?
use the –region parameter
Is STS supported with API Gateway?
No
You are a Developer working with AWS CloudFormation templates. Your templates provision a VPC with one subnet and would like other stacks to use the output value of the subnet created. What must you do to provide this information to another stack?
- Export
- Output
Correct answer - “Export” & “Output” : To export a stack’s output value, use the Export field in the Output section of the stack’s template.
What is the maximum data size supported by AWS KMS?
4KB
One of your deployments failed and was rolled back by AWS CodeDeploy to the last known good application revision. During rollback which of the following instances did AWS CodeDeploy deploy first to?
To the failed instances
A team lead has asked you to create an AWS CloudFormation template that creates EC2 instances and RDS databases. The template should be reusable by allowing the user to input a parameter value for an Amazon EC2 AMI ID.
Which of the following intrinsic function should you choose to reference the parameter?
!Ref
Correct answer - !Ref : The intrinsic function Ref returns the value of the specified parameter or resource. When you specify a parameter’s logical name, it returns the value of the parameter, when you specify a resource’s logical name, it returns a value that you can typically use to refer to that resource such as a physical ID.
Incorrect:
!GetAtt - A function returns the value of an attribute from a resource in the template
!Param - Not a valid function name
!Join - A function that appends a set of values into a single value, separated by the specified delimite
Of the following values, which is not a valid CF section?
- MetaData
- Parameters
- Mappings
- Groups
Groups
You have created an AWS CodePipeline pipeline through the AWS Management Console. You would like to view a list of API calls performed by your pipeline because many changes have been made by you and other administrators. Which AWS service will provide this information?
Cloudtrail (not Cloudwatch Logs)
Explanation: When activity occurs in AWS CodePipeline, that activity is recorded in a CloudTrail event along with other AWS service events in Event history. CloudTrail can be used as an auditing tool which provides event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services. This event history simplifies security analysis, resource change tracking, and troubleshooting.
On the AWS Management Console, you created a dev group where new developers will be added to and on your workstation you configured a developer profile. You would like to test that this user cannot terminate instances. Which of the following options would you execute?
AWS CLI –dry-run option
Many companies in the city have mobile apps that capture and send data to Amazon Kinesis Data Streams. They have been getting a ProvisionedThroughputExceededException exception. You have been contacted to help and upon careful analysis, you are seeing that messages are being sent one by one, while being sent at a high rate. Which of the following options will help with the exception while keeping costs at a minimum?
Batch messages
You’re in charge of code deployment using AWS CodeCommit and AWS CodeDeploy. New requirements have been given to control deployment details by changing file permissions when applications are deployed and verifying the deployment success. Which of the following actions should the new Developer take?
define appspec.yml at root directory
Does the order in which resources are created in CF need to be specified?
no
Which of the following sink types is not supported by Kinesis Firehose?
- ElasticSearch
- S3
- Redshift
- ElasticCache
ElasticCache
You are a Developer working with Amazon ECS container instances and would like to isolate credentials so that a container never has access to credentials intended for another container belonging to another task. What action must you take to achieve that?
Create an IAM Role for ECS and assign it to the tasks.
Not ‘Use Paramter Store to pass in AWS credentials’ b/c A container can only retrieve credentials for the IAM role that is defined in the task definition to which it belongs
You are producing data to AWS Kinesis using AWS Lambda which sits behind an API Gateway. Data represents a clickstream from the users navigating your website. What in case you want to make sure your Kinesis stream can scale over time due to increased volume, what would you need to do?
- Add shards
2. Partition key must take a greater number of different values
You have launched several AWS Lambda functions written in Java. A new requirement was given that over 1MB of data should be passed to the functions and should be encrypted and decrypted at runtime. Which of the following methods is suitable for encrypting the data?
Envelope Encryption and store as file within the code (vis Encryption SDK)
Not KMS w/ environment variable b/c KMS limit is 4kb and environment variable limit is 4kb.
When resolving a lot of dependencies to many Beanstalk EC2 instances via CodePipeline, how do you improve deployment time?
Bundle dependencies into your source code bundle as last stage of CodeBuild.
You would like to be able to retrieve the CodeBuild logs for failed builds and analyze them in Athena. Which steps should you take to extract the logs out of CodeBuild?
Enable S3 and CloudWatch Logs integration
Difference b/t X-ray and CloudWatch Logs for serverless?
X-Ray for debugging, CloudWatcch Logs for logging/metrics
X-Ray helps developers analyze and debug production, distributed applications, such as those built using a microservices architecture. With X-Ray, you can understand how your application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors. X-Ray provides an end-to-end view of requests as they travel through your application, and shows a map of your application’s underlying components.
CloudWatch Logs” - AWS Lambda leverages Amazon CloudWatch to automatically emit metrics and logs for all invocations of your function
T:F EBS volumes are AZ locked
true
SQS limit?
no limit
