Udemy Quiz Questions Dev Associate Real Exam Questions With 100% Well Detailed Answers.

What are the four X-Ray Features? - correct answers1) Annotations - are simple key-value pairs that are indexed for use with filter expressions. Use annotations to record data that you want to use to group traces in the console, or when calling the Get Trace Summaries API. Hence, the correct answer is: Annotations. 2) Metadata - is incorrect because you can not group traces with it. Metadata are key-value pairs with values of any type, including objects and lists, but that is not indexed. You commonly use metadata to record data that you want to store in the trace but don't need to search for traces. 3) Sampling - is incorrect because it is just used to ensure efficient tracing and to provide a representative sample of the requests that your application serves. Additionally, sampling will help you save money by reducing the amount of traces for high-volume and unimportant requests. 4) Subsegment - is incorrect because it is only used to provide more granular timing information and details about downstream calls that your application made to fulfill the original request. It cannot group traces from recorded data. are simple key-value pairs that are indexed for use with filter expressions. X-Ray - Where are Annotations and metadata are aggregated? - correct answers At the trace level and can be added to any segment or subsegment. What is the API Gateway Stage Variable used for? - correct answersA stage variable is simply used for changing the behavior of your API Gateway methods for each deployment stage; for example, making it possible to reach a different backend depending on which stage the API is running on. How can you obtain all values of identical query parameters key that is supplied in a request? - correct answers Application Load Balancers provide two advanced options that you may want to configure when you use ALBs with AWS Lambda: 1) support for multi-value headers and 2) health check configurations. You can set up these options in Target Groups section on the Amazon EC2 console. If requests from a client or responses from a Lambda function contain headers with multiple values or contains the same header multiple times, or query parameters with multiple values for the same key, you can enable support for multi-value header syntax. After you enable multi-value headers, the headers and query parameters exchanged between the load balancer and the Lambda function use arrays instead of strings. ALB applies the same processing to duplicate HTTP headers. If you do not enable multi-value header syntax and a header or query parameter has multiple values, the load balancer uses the last value that it receives. What features are supported when using AWS KMS? - correct answers- Create symmetric and asymmetric keys where the key material is only ever used within the service - Create symmetric keys where the key material is generated and used within a custom key store under your control. - Import your own symmetric key for use within the service. - Create both symmetric and asymmetric data key pairs for local use within your applications. - Define which IAM users and roles can manage keys. - Define which IAM users and roles can use keys to encrypt and decrypt data. - Choose to have keys that were generated by the service to be automatically rotated on an annual basis. - Temporarily disable keys so they cannot be used by anyone. - Re-enable disabled keys. - Schedule the deletion of keys that you no longer use. - Audit the use of keys by inspecting logs in AWS CloudTrail. By default, AWS KMS creates the key material for a CMK. You cannot extract, export, view, or manage this key material. Also, you cannot delete this key material; you must delete the CMK. However, you can import your own key material into a CMK or create the key material for a CMK in the AWS CloudHSM cluster associated with an AWS KMS custom key store. There are also types of CMKs that are not eligible for automatic key rotation such as asymmetric CMKs, CMKs in custom key stores, and CMKs with imported key material. Can you import your own key material to an asymmetric CMK? - correct answersThe option that says: Use AWS Certificate Manager as a custom key store is incorrect because you can only use AWS CloudHSM as a custom key store for AWS KMS. The option that says: Import your own key material to an asymmetric CMK is incorrect because you can only import your own key material to symmetric CMKs and not for asymmetric types. The option that says: Automatic key rotation for CMKs in custom key stores is incorrect because automatic key rotation is only supported in symmetric CMKs. Automatic key rotation is not available for asymmetric CMKs, CMKs in custom key stores, and CMKs with imported key material. What could be possible errors when running Code Build with a proxy server? - correct answers1. ssl-bump is not configured properly. 2. Your organization's security policy does not allow you to use ssl-bump. 3. Your build file does not have proxy settings specified using a proxy element. 4.If you do not use ssl-bump for an explicit proxy server, add a proxy configuration to your builds using a proxy element. version: 0.2proxy:upload-artifacts: yeslogs: yes IAM service supports only one type of resource-based policy which is called what? - correct answers The IAM service supports only one type of resource-based policy called a role trust policy, which is attached to an IAM role. An IAM role is both an identity and a resource that supports resource-based policies. For that reason, you must attach both a trust policy and an identity-based policy to an IAM role. Trust policies define which principal entities (accounts, users, roles, and federated users) can assume the role. In a trust policy, the Principal attribute defines the AWS services or users that can assume the IAM role. Here's an example trust policy for a role designed for an Amazon EC2 instance to assume. You can see that the principal provided is the service: The option that says: Add the EC2 service under the Principal field of the Inline policy is incorrect because the Inline policy is just an embedded policy that you can attach to an IAM entity to grant permissions. The option that says: Add the EC2 service under the Resource field of the Trust policy is incorrect because the EC2 service must be added under the Principal field. Also, you can't add a Resource field in the Trust Policy. The option that says: Add the EC2 service under the Resource field of the Inline policy is incorrect because an Inline Policy can't control what AWS services can assume a Role. A developer wants to expose a legacy web service that uses an XML-based Simple Object Access Protocol (SOAP) interface through API Gateway. However, there is a compatibility issue since most modern applications communicate data in JSON format. - correct answers API Gateway lets you use mapping templates to map the payload from a method request to the corresponding integration request and from an integration response to the corresponding method response. Use API Gateway to create a RESTful API. Transform the incoming JSON into XML using mapping templates. Forward the request into the SOAP interface by using a Lambda function and parse the response (XML) into JSON before sending back to API Gateway. The option that says: Use API Gateway to create a Web Socket API. Transform the incoming JSON into XML using mapping templates. Forward the request into the SOAP interface by using a Lambda function and parse the response (XML) into JSON before sending back to API Gateway is incorrect. The Web Socket protocol is mainly used for applications that require bidirectional persistent connection such as push notifications and chat messaging applications. For this scenario, using a REST-based approach is the more appropriate solution. The option that says: Use API Gateway to create a RESTful API. Transform the incoming JSON into XML for the SOAP interface through an Application Load Balancer and vice versa. Put the legacy web service behind the ALB is incorrect because ALB is not capable of transforming data. The option that says: Use API Gateway to create a RESTful API. Send the incoming JSON to an HTTP server hosted on an EC2 instance and have it transform the data into XML and vice versa before sending it to the legacy application is incorrect. Although this could work, this means that you'll have to provision and run an EC2 instance 24/7, which is more expensive than just using a Lambda Function. A Development team is building a fault-tolerant solution for a web application hosted on Amazon EC2. The solution aims to ensure no session data are lost even if an EC2 instance is terminated or has failed a health check. Which solution best fits the requirement with the least effort? - correct answers sticky sessions on the load balancer What should you use to manage large Amazon Simple Queue Service (Amazon SQS) messages? - correct answersuse Amazon Simple Storage Service (Amazon S3) and the Amazon SQS Extended Client Library for Java. This is especially useful for storing and consuming messages up to 2 GB. Unless your application requires repeatedly creating queues and leaving them inactive or storing large amounts of data in your queues, consider using Amazon S3 for storing your data. You can use the Amazon SQS Extended Client Library for Java to do the following: - Specify whether messages are always stored in Amazon S3 or only when the size of a message exceeds 256 KB - Send a message that references a single message object stored in an S3 bucket - Retrieve the message object from an S3 bucket - Delete the message object from an S3 bucket You can use the Amazon SQS Extended Client Library for Java to manage Amazon SQS messages using Amazon S3 only with the AWS SDK for Java. You can't do this with the AWS CLI, the Amazon SQS console, the Amazon SQS HTTP API, or any of the other AWS SDKs. Download Bundle deployment lifecycle event will throw an error whenever: - correct answers- The EC2 instance's IAM profile does not have permission to access the application code in the Amazon S3. - An Amazon S3 internal error occurs. - The instances you deploy to are associated with one AWS Region (for example, US West Oregon), but the Amazon S3 bucket that contains the application revision is related to another AWS Region (for example, US East N. Virginia). A company is running an e-commerce application on an Amazon EC2 instance. A newly hired developer has been tasked to monitor and handle the necessary updates on the EC2 instance every Saturday. The developer is working from home and needs remote access to the webserver. As the system administrator, you're looking to use the AWS STS API to give the developer temporary credentials and enforce Multi-factor Authentication (MFA) to protect specific programmatic calls against the instance that could adversely affect the server. Which of the following STS API should you use? - correct answers Assume Role - is useful for allowing existing IAM users to access AWS resources that they don't already have access to. For example, the user might need access to resources in another AWS account. It is also useful as a means to temporarily gain privileged access—for example, to provide multi-factor authentication (MFA). You must call this API using existing IAM user credentials. AssumeRoleWithWebIdentity - returns a set of temporary security credentials for federated users who are authenticated through a public identity provider. Examples of public identity providers include Login with Amazon, Facebook, Google, or any OpenID Connect (OIDC)-compatible identity provider. AssumeRoleWithSAML - returns a set of temporary security credentials for federated users who are authenticated by your organization's existing identity system. The users must also use SAML 2.0 (Security Assertion Markup Language) to pass authentication and authorization information to AWS. This API operation is useful in organizations that have integrated their identity systems (such as Windows Active Directory or OpenLDAP) with software that can produce SAML assertions. GetFederationToken - returns a set of temporary security credentials (consisting of an access key ID, a secret access key, and a security token) for a federated user. A typical use is in a proxy application that gets temporary security credentials on behalf of distributed applications inside a corporate network. You must call the GetFederationToken operation using the long-term security credentials of an IAM user. GetSessionToken - returns a set of temporary security credentials to an existing IAM user. This is useful for providing enhanced security, such as allowing AWS requests only when MFA is enabled for the IAM