WGU D321 AWS DEVELOPER DVA C02
FINAL PAPER QUESTIONS AND
SOLUTIONS 100 PERCENT CORRECT
◉ An organization receives documents from its users, which must
be put into a SQS queue, ready for processing. The documents
range in size from 3 MB to 20 MB, and must always be encrypted
at rest. What is the best was to queue these documents?
Answer: Store the document in S3. Include a reference to the
object in a SQS message.
◉ One of your junior developers has never had AWS Access before
and needs access to an Elastic Load Balancer in your custom VPC.
This is the first and only time she will need access. Which of the
following choices is the most secure way to grant this access?
Answer: Create a new IAM user with ONLY the required
credentials and delete that IAM user after the developer has
finished her work.
◉ You need to allow another AWS account access to resources in
your AWS account, what is the recommended mechanism to
configure this?
Answer: Configure cross account access
◉ Which of the following activities are the responsibility of the
customer?
, Answer: Management of user credentials, Encryption of sensitive
Data, Security Group Configuration setting
◉ An organization is hosting their static website on S3, using a
custom domain name. Users have started reporting that their web
browsers' are alerting them to the fact that the organization's
website is "Not Secure" because it is not served via a secure
HTTPS connection. What is the easiest way to start serving the
website via HTTPS?
Answer: Add a CloudFront distribution in front of the S3 static
website, which supports HTTPS with a custom domain name.
◉ An organization has mandated that all data within its
DynamoDB tables must be encrypted at rest using an AWS owned
key. What must a developer do to ensure this?
Answer: There is no need to do anything, all DynamoDB tables are
encrypted at rest with an AWS owned key by default.
◉ You work for a large I.T. recruitment company that are
launching a mobile application which will allow job seekers to
apply for jobs online and attach their resume to their application.
Users will be able to log in to their account using Facebook and
the application stores their contact and profile details in a
DynamoDB table. Which of the following approaches would you
recommend for enabling the users to gain access to view and
update their data?
Answer: Configure Web Identity Federation with Cognito
FINAL PAPER QUESTIONS AND
SOLUTIONS 100 PERCENT CORRECT
◉ An organization receives documents from its users, which must
be put into a SQS queue, ready for processing. The documents
range in size from 3 MB to 20 MB, and must always be encrypted
at rest. What is the best was to queue these documents?
Answer: Store the document in S3. Include a reference to the
object in a SQS message.
◉ One of your junior developers has never had AWS Access before
and needs access to an Elastic Load Balancer in your custom VPC.
This is the first and only time she will need access. Which of the
following choices is the most secure way to grant this access?
Answer: Create a new IAM user with ONLY the required
credentials and delete that IAM user after the developer has
finished her work.
◉ You need to allow another AWS account access to resources in
your AWS account, what is the recommended mechanism to
configure this?
Answer: Configure cross account access
◉ Which of the following activities are the responsibility of the
customer?
, Answer: Management of user credentials, Encryption of sensitive
Data, Security Group Configuration setting
◉ An organization is hosting their static website on S3, using a
custom domain name. Users have started reporting that their web
browsers' are alerting them to the fact that the organization's
website is "Not Secure" because it is not served via a secure
HTTPS connection. What is the easiest way to start serving the
website via HTTPS?
Answer: Add a CloudFront distribution in front of the S3 static
website, which supports HTTPS with a custom domain name.
◉ An organization has mandated that all data within its
DynamoDB tables must be encrypted at rest using an AWS owned
key. What must a developer do to ensure this?
Answer: There is no need to do anything, all DynamoDB tables are
encrypted at rest with an AWS owned key by default.
◉ You work for a large I.T. recruitment company that are
launching a mobile application which will allow job seekers to
apply for jobs online and attach their resume to their application.
Users will be able to log in to their account using Facebook and
the application stores their contact and profile details in a
DynamoDB table. Which of the following approaches would you
recommend for enabling the users to gain access to view and
update their data?
Answer: Configure Web Identity Federation with Cognito
