Udemy Tests Flashcards
Unsupported cloudfront protocol
UDP
Your Elastic Beanstalk application must encrypt payloads of up to 10MB. Which method will help you achieve that?
Use the encryption SDK
Default visibility timeout for SQS
30 seconds
You have configured the AWS CLI on your workstation. Your default region is us-east-1 and your IAM user has permissions to operate commands on services such as EC2, S3, and RDS in any region. You would like to execute a command to stop an EC2 instance in the us-east-2 region. What must you do to achieve this?
use the –region parameter
Is STS supported with API Gateway?
No
You are a Developer working with AWS CloudFormation templates. Your templates provision a VPC with one subnet and would like other stacks to use the output value of the subnet created. What must you do to provide this information to another stack?
- Export
- Output
Correct answer - “Export” & “Output” : To export a stack’s output value, use the Export field in the Output section of the stack’s template.
What is the maximum data size supported by AWS KMS?
4KB
One of your deployments failed and was rolled back by AWS CodeDeploy to the last known good application revision. During rollback which of the following instances did AWS CodeDeploy deploy first to?
To the failed instances
A team lead has asked you to create an AWS CloudFormation template that creates EC2 instances and RDS databases. The template should be reusable by allowing the user to input a parameter value for an Amazon EC2 AMI ID.
Which of the following intrinsic function should you choose to reference the parameter?
!Ref
Correct answer - !Ref : The intrinsic function Ref returns the value of the specified parameter or resource. When you specify a parameter’s logical name, it returns the value of the parameter, when you specify a resource’s logical name, it returns a value that you can typically use to refer to that resource such as a physical ID.
Incorrect:
!GetAtt - A function returns the value of an attribute from a resource in the template
!Param - Not a valid function name
!Join - A function that appends a set of values into a single value, separated by the specified delimite
Of the following values, which is not a valid CF section?
- MetaData
- Parameters
- Mappings
- Groups
Groups
You have created an AWS CodePipeline pipeline through the AWS Management Console. You would like to view a list of API calls performed by your pipeline because many changes have been made by you and other administrators. Which AWS service will provide this information?
Cloudtrail (not Cloudwatch Logs)
Explanation: When activity occurs in AWS CodePipeline, that activity is recorded in a CloudTrail event along with other AWS service events in Event history. CloudTrail can be used as an auditing tool which provides event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services. This event history simplifies security analysis, resource change tracking, and troubleshooting.
On the AWS Management Console, you created a dev group where new developers will be added to and on your workstation you configured a developer profile. You would like to test that this user cannot terminate instances. Which of the following options would you execute?
AWS CLI –dry-run option
Many companies in the city have mobile apps that capture and send data to Amazon Kinesis Data Streams. They have been getting a ProvisionedThroughputExceededException exception. You have been contacted to help and upon careful analysis, you are seeing that messages are being sent one by one, while being sent at a high rate. Which of the following options will help with the exception while keeping costs at a minimum?
Batch messages
You’re in charge of code deployment using AWS CodeCommit and AWS CodeDeploy. New requirements have been given to control deployment details by changing file permissions when applications are deployed and verifying the deployment success. Which of the following actions should the new Developer take?
define appspec.yml at root directory
Does the order in which resources are created in CF need to be specified?
no
Which of the following sink types is not supported by Kinesis Firehose?
- ElasticSearch
- S3
- Redshift
- ElasticCache
ElasticCache
You are a Developer working with Amazon ECS container instances and would like to isolate credentials so that a container never has access to credentials intended for another container belonging to another task. What action must you take to achieve that?
Create an IAM Role for ECS and assign it to the tasks.
Not ‘Use Paramter Store to pass in AWS credentials’ b/c A container can only retrieve credentials for the IAM role that is defined in the task definition to which it belongs