Practice Exam 3

Question 1

In EB, what is file which can be included at the root of your application source bundle to specify the environment name, solution stack and environment links?

Answer 1

env.yaml

Question 2

How to get rid of users SESSION DATA stored in a DynamoDB table?

Answer 2

Use TTL, it’s free!

Question 3

How is the traffic shifted to the new version when using the linear deployment configuration in CodeDeploy?

Answer 3

The traffic will be shifted in equal increments with an equal number of minutes between each increments.

Question 4

How do you calculate the total sampled requests per second by X-Ray?

Answer 4

reservoir size + ( (incoming requests per second - reservoir size) * fixed rate)

Question 5

When do you usually use the GetSessionToken API?

Answer 5

When you want to use MFA to protect programmatic calls to specific AWS API Operations like EC2 StopInstances

Question 6

What does AWS WAF stand for?

Answer 6

AWS Web Application Firewall

Question 7

How to get more granular timing information in X-Ray segments?

Answer 7

Use subsegments

Question 8

What does the x-amz-server-side-encryption-customer-algorithm header specifies?

Answer 8

The encryption algorithm, the value must be “AES256”

Question 9

What does the x-amz-server-side-encryption-customer-key header specefies?

Answer 9

The 256-bit, base64-encoded encryption key for Amazon S3 to use to encrypt or decrypt your data

Question 10

What does the x-amz-server-side-encryption-customer-key-MD5 header specefies?

Answer 10

The base64-encoded 128-bit MD5 digest of the encryption key according to RFC 1321
(Amazon S3 uses this header for a message integrity check to ensure the encryption key was transmitted without error)

Question 11

Each subnet in your VPC must be associated with a ___________

Answer 11

route table

Question 12

How many route tables can a subnet be associated with at a time?

Answer 12

Only one

Question 13

Can you associate multiple subnets to the same route table?

Answer 13

YES

Question 14

Can AWS Lambda compute platform use in-place deployment type?

Answer 14

No

Question 15

How can you increase/decrease the capacity of a Kinesis stream?

Answer 15

By splitting/merging shards

Question 16

What are Lambda layers?

Answer 16

ZIP archive that contains libraries, a custom runtime, or other dependencies

Question 17

What do Lambda layers allow you to do?

Answer 17

Use libraries in your function without needing to include them in your deployment package

Question 18

How many layers can a function use at a time?

Answer 18

Up to 5

Question 19

What is the max size of an unzipped Lambda function code + all of its layers?

Answer 19

250MB

Question 20

What is the minimum amount of concurrent execution that the unreserved concurrency pool in Lambda enforces?

Answer 20

100

Question 21

What is an “IAM principal” in AWS?

Answer 21

Person or application

Question 22

What does the GetTraceSummaries API returns?

Answer 22

List of trace IDs of the application

Question 23

What does the BatchGetTraces API returns?

Answer 23

List of traces specified by ID

Question 24

What is a DynamoDB item atomic counter?

Answer 24

A numeric value that increments on every UpdateItem call

Question 25

What happens with inferred segments assigned to AWS services but those are instrumented and provide their own segments?

Answer 25

The inferred segments get replaced by the segments received from the instrumented services.

Question 26

What do X-Ray inferred segments allow to see?

Answer 26

All of your downstream dependencies even if they don't support tracing, or are external

Question 27

Can you define arbitrary subsegments to instrument specific functions or lines of code in your application?

Answer 27

Yes!

Question 28

What does X-Ray uses to generate inferred segments?

Answer 28

Subsegments

Question 29

What are AWS and AWS_PROXY integrations used for in API Gateway?

Answer 29

Integrating with Lambda function

Question 30

What is the AssumeRoleWithWebIdentity API used for?

Answer 30

Returning a set of temporary security credentials for federated users who are authenticated through public identity providers such as Amazon, Facebook, Google, or OpenID

Question 31

What is the AssumeRoleWithSAML API used for?

Answer 31

Returning a set of temporary security credentials for users who have been authenticated via a SAML authentication response

Question 32

Does GetFederationToken support MFA?

Answer 32

No

Question 33

Is "x-amz-server-side-encryption" header used in SSE-C?

Answer 33

No

Question 34

Why do you have to delete the SG of the RDS db in the EB environment in order to delete it?

Answer 34

Because the SG is dependent on the env, so if the SG is still being used, the env can't be deleted

Question 35

Does AssumeRoleWithSAML support MFA?

Answer 35

No

Question 36

When can you define a task placement strategy?

Answer 36

When running a task or creating a new service