Questions & Answers
1. The development team at an IT company would like to provision their own
Docker images that can be used as input sources for CodeBuild. These
images will contain cached dependencies as well as special tooling for
builds that are proprietary to the company.
Which of the following services can be used to store and deploy these Docke
images?
- ECR
- ECS
- EBS
- S3
ANS ECR (Elastic Container Registry)
2.A developer in your company has configured a build using AWS
CodeBuild. The build fails and the developer needs to quickly troubleshoot
the issue to see which commands or settings located in the BuildSpec file
are causing an issue.
Which approach will help them accomplish this?
ANS Run AWS CodeBuild locally
3.A company is looking at optimizing their Amazon EC2 instance costs.
,Few instances are sure to run for a few years, but the instance type might
change based on business requirements.
Which EC2 instance purchasing option should they opt to meet the
reduced cost criteria?
ANS Convertible Reserved Instances
4.A developer has been asked to create an application that can be
deployed across a fleet of EC2 instances. The configuration must allow for
full control over the deployment steps using the blue-green deployment.
Which service will help you achieve that?
ANS CodeDeploy
5.As an AWS Certified Developer Associate, you been asked to create an
AWS Elastic Beanstalk environment to handle deployment for an application
that has high traffic and high availability needs. You need to deploy the new
version using Beanstalk while making sure that performance and availability
are not affected.
Which of the following is the MOST optimal way to do this while keeping the
solution cost-effective?
ANS Deploy using "Rolling with additional batch" deployment policy
6.Which of the following security credentials can only be created by the
AWS Account root user?
- IAM User Passwords
- CloudFront Key Pairs
, - EC2 Instance Key Pairs
- IAM User Access Keys
ANS CloudFront Key pairs
7.An IT company has a HealthCare application with data security require-
ments such that the encryption key must be stored in a custom application
running on-premises. The company wants to offload the data storage as
well as the encryption process to Amazon S3 but continue to use the
existing encryption keys.
Which of the following S3 encryption options allows the company to leverage
Amazon S3 for storing data with given constraints?
ANS Server-Side Encryption with Customer-Provided Keys (SSE-C)
8.A cybersecurity firm wants to run their applications on single-tenant
hard- ware to meet security guidelines.
Which of the following is the MOST cost-effective way of isolating their Ama-
zon EC2 instances to a single tenant?
ANS Dedicated Instances
9.A development team at a social media company uses AWS Lambda for its
serverless stack on AWS Cloud. For a new deployment, the Team Lead
wants to send only a certain portion of the traffic to the new Lambda
version. In case the deployment goes wrong, the solution should also
support the ability to roll back to a previous version of the Lambda function,
with MIMINUM downtime for the application.