exam questions

Exam AWS Certified Developer Associate All Questions

View all questions & answers for the AWS Certified Developer Associate exam

Exam AWS Certified Developer Associate topic 1 question 150 discussion

Exam question from Amazon's AWS Certified Developer Associate
Question #: 150
Topic #: 1
[All AWS Certified Developer Associate Questions]

A banking application processes thousands of transactions each second. Each transaction payload must have end-to-end encryption. The application encrypts each transaction locally by using the AWS Key Management Service (AWS KMS) GenerateDataKey operation. A developer is testing the application and receives a ThrottlingException error.

Which actions are best practices to resolve this error? (Choose two.)

  • A. Use the LocalCryptoMatenalsCache feature of the AWS Encryption SDK encryption library.
  • B. Call the AWS KMS Encrypt operation directly to allow AWS KMS to encrypt the data.
  • C. Create a case in the AWS Support Center to increase the quota for the account.
  • D. Use Amazon Simple Queue Service (Amazon SQS) to queue the requests to AWS KMS.
  • E. Switch to an AWS KMS custom key store.
Show Suggested Answer Hide Answer
Suggested Answer: AC 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
a_win
1 year, 4 months ago
Selected Answer: CE
Option A is not generic solution for application written in different language with different versions: "Data key caching is not supported by the AWS Encryption SDK for .NET. Version 3.x of the AWS Encryption SDK for Java deprecates the caching CMM. However, version 4.x of the AWS Encryption SDK for .NET and version 3.x of the AWS Encryption SDK for Java support the AWS KMS Hierarchical keyring, an alternative cryptographic materials caching solution." (Ref : https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/data-key-caching.html)
upvoted 1 times
...
rcaliandro
1 year, 10 months ago
Selected Answer: AC
If ThrottlingException is received then the quota for the account has been reached and it's possible to request to support to increase the quota for the account (answer C). Furthemore, "Data key caching stores data keys and related cryptographic material in a cache. When you encrypt or decrypt data, the AWS Encryption SDK looks for a matching data key in the cache. If it finds a match, it uses the cached data key rather than generating a new one. Data key caching can improve performance, reduce cost, and help you stay within service limits as your application scales." by AWS documentation: https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/data-key-caching.html. Also A is a correct option
upvoted 2 times
...
sichilam
2 years, 3 months ago
Use the data key caching feature with the AWS Encryption SDK encryption library. Data key caching reduces the rate of API requests by caching and reusing the data keys for encryption to meet cost and performance requirements.
upvoted 2 times
...
ayoubmk
2 years, 3 months ago
Selected Answer: AC
https://aws.amazon.com/premiumsupport/knowledge-center/kms-throttlingexception-error/
upvoted 3 times
...
SBoksh
2 years, 4 months ago
Selected Answer: AC
https://aws.amazon.com/premiumsupport/knowledge-center/kms-throttlingexception-error/
upvoted 2 times
...
dark_cherrymon
2 years, 5 months ago
and A "Use the data key caching feature with the AWS Encryption SDK encryption library. Data key caching reduces the rate of API requests by caching and reusing the data keys for encryption to meet cost and performance requirements." https://aws.amazon.com/premiumsupport/knowledge-center/kms-throttlingexception-error/#:~:text=The%20ThrottlingException%20error%20code%20indicates,KMS%20service%20throttles%20the%20request. which leads me to https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/data-caching-details.html#simplecache " To create an instance of the local cache, use the LocalCryptoMaterialsCache constructor in Java and Python, the"
upvoted 2 times
...
dark_cherrymon
2 years, 5 months ago
Selected Answer: C
it's definately C "Request an AWS KMS quota increase to exceed the request quota." https://aws.amazon.com/premiumsupport/knowledge-center/kms-throttlingexception-error/#:~:text=The%20ThrottlingException%20error%20code%20indicates,KMS%20service%20throttles%20the%20request.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago