AWS Certified Developer - Associate

• #1

  A developer is writing an AWS Lambda function. The developer wants to log key events that occur during the Lambda function and include a unique identifier to associate the events with a specific function invocation. Which of the following will help the developer accomplish this objective?

  • AObtain the request identifier from the Lambda context object. Architect the application to write logs to the console.
  • BObtain the request identifier from the Lambda event object. Architect the application to write logs to a file.
  • CObtain the request identifier from the Lambda event object. Architect the application to write logs to the console.
  • DObtain the request identifier from the Lambda context object. Architect the application to write logs to a file.
  Show answer
• #2Choose 2

  A corporate web application is deployed within an Amazon VPC, and is connected to the corporate data center via IPSec VPN. The application must authenticate against the on-premise LDAP server. Once authenticated, logged-in users can only access an S3 keyspace specific to the user. Which two approaches can satisfy the objectives? (Choose TWO)

  • AThe application authenticates against LDAP. The application then calls the IAM Security Service to login to IAM using the LDAP credentials. The application can use the 1AM temporary credentials to access the appropriate S3 bucket.
  • BThe application authenticates against LDAP, and retrieves the name of an IAM role associated with the user. The application then calls the IAM Security Token Service to assume that IAM Role. The application can use the temporary credentials to access the appropriate S3 bucket.
  • CThe application authenticates against IAM Security Token Service using the LDAP credentials. The application uses those temporary AWS security credentials to access the appropriate S3 bucket.
  • DDevelop an identity broker which authenticates against LDAP, and then calls IAM Security Token Service to get IAM federated user credentials. The application calls the identity broker to get IAM federated user credentials with access to the appropriate S3 bucket.
  • EDevelop an identity broker which authenticates against IAM Security Token Service to assume an IAM Role to get temporary AWS security credentials. The application calls the identity broker to get AWS temporary security credentials with access to the appropriate S3 bucket.
  Show answer
• #3

  A Developer is storing sensitive data generated by an application in Amazon S3. The Developer wants to encrypt the data at rest. A company policy requires an audit trail of when the master key was used and by whom. Which encryption option will meet these requirements?

  • AServer-side encryption with Amazon S3 managed keys (SSE-S3).
  • BServer-side encryption with AWS KMS managed keys (SSE-KMS).
  • CServer-side encryption with customer-provided keys (SSE-C).
  • DServer-side encryption with self-managed keys.
  Show answer
• #4Choose 2

  An AWS Lambda function must access an external site by using a regularly rotated user name and password. These items must be kept securely and cannot be stored in the function code. What combination of AWS services can be used to accomplish this? (Choose TWO)

  • AAWS Certificate Manager (ACM).
  • BAWS Systems Manager Parameter Store.
  • CAWS Trusted Advisor.
  • DAWS KMS.
  • EAmazon GuardDuty.
  Show answer
• #5

  A company has multiple Developers located across the globe who are updating code incrementally for a development project. When Developers upload code concurrently, internet connectivity is slow and it is taking a long time to upload code for deployment in AWS Elastic Beanstalk. Which step will result in minimized upload and deployment time with the LEAST amount of administrative effort?

  • AAllow the Developers to upload the code to an Amazon S3 bucket, and deploy it directly to Elastic Beanstalk.
  • BAllow the Developers to upload the code to a central FTP server to deploy the application to Elastic Beanstalk.
  • CCreate an AWS CodeCommit repository, allow the Developers to commit code to it, and then directly deploy the code to Elastic Beanstalk.
  • DCreate a code repository on an Amazon EC2 instance so that all Developers can update the code, and deploy the application from the instance to Elastic Beanstalk.
  Show answer
• #6

  An application stores payroll information nightly in DynamoDB for a large number of employees across hundreds of offices. Item attributes consist of individual name, office identifier, and cumulative daily hours. Managers run reports for ranges of names working in their office. One query is: Return all Items in this office for names starting with A through E. Which table configuration will result in the lowest impact on provisioned throughput for this query?

  • AConfigure the table to have a hash index on the name attribute, and a range index on the office identifier.
  • BConfigure the table to have a range index on the name attribute, and a hash index on the office identifier.
  • CConfigure a hash index on the name attribute and no range index.
  • DConfigure a hash index on the office identifier attribute and no range index.
  Show answer
• #7

  A customer wants to deploy its source code on an AWS Elastic Beanstalk environment. The customer needs to perform deployment with minimal outage and should only use existing instances to retain application access log. What deployment policy would satisfy these requirements?

  • ARolling.
  • BAll at once.
  • CRolling with an additional batch.
  • DImmutable.
  Show answer
• #8

  An on-premises application makes repeated calls to store files to Amazon S3. As usage of the application has increased, LimitExceeded errors are being logged. What should be changed to fix this error?

  • AImplement exponential backoffs in the application.
  • BLoad balance the application to multiple servers.
  • CMove the application to Amazon EC2.
  • DAdd a one second delay to each API call.
  Show answer
• #9

  A company is using Amazon API Gateway to manage its public-facing API. The CISO requires that the APIs be used by test account users only. What is the MOST secure way to restrict API access to users of this particular AWS account?

  • AClient-side SSL certificates for authentication.
  • BAPI Gateway resource policies.
  • CCross-origin resource sharing (CORS).
  • DUsage plans.
  Show answer
• #10

  A Developer is receiving HTTP 400: ThrottlingException errors intermittently when calling the Amazon CloudWatch API. When a call fails, no data is retrieved. What best practice should first be applied to address this issue?

  • AContact AWS Support for a limit increase.
  • BUse the AWS CLI to get the metrics.
  • CAnalyze the applications and remove the API call.
  • DRetry the call with exponential backoff.
  Show answer
• #11Choose 3

  What AWS products and features can be deployed by Elastic Beanstalk? (Choose THREE)

  • AAuto scaling groups.
  • BRoute 53 hosted zones.
  • CElastic Load Balancers.
  • DRDS Instances.
  • EElastic IP addresses.
  • FSQS Queues.
  Show answer
• #12

  A Developer is publishing critical log data to a log group in Amazon CloudWatch Logs, which was created 2 months ago. The Developer must encrypt the log data using an AWS KMS customer master key (CMK) so future data can be encrypted to comply with the company's security policy. How can the Developer meet this requirement?

  • AUse the CloudWatch Logs console and enable the encrypt feature on the log group.
  • BUse the AWS CLI create-log-group command and specify the key Amazon Resource Name (ARN).
  • CUse the KMS console and associate the CMK with the log group.
  • DUse the AWS CLI associate-kms-key command and specify the key Amazon Resource Name (ARN)
  Show answer
• #13

  How is provisioned throughput affected by the chosen consistency model when reading data from a DynamoDB table?

  • AStrongly consistent reads use the same amount of throughput as eventually consistent reads.
  • BStrongly consistent reads use more throughput than eventually consistent reads.
  • CStrongly consistent reads use less throughput than eventually consistent reads.
  • DStrongly consistent reads use variable throughput depending on read activity.
  Show answer
• #14

  A Developer is creating a serverless website with content that includes HTML files, images, videos, and JavaScript (client-side scripts). Which combination of services should the Developer use to create the website?

  • AAmazon S3 and Amazon CloudFront.
  • BAmazon EC2 and Amazon ElastiCache.
  • CAmazon ECS and Redis.
  • DAWS Lambda and Amazon API Gateway.
  Show answer
• #15

  A developer has built a market application that stores pricing data in Amazon DynamoDB with Amazon ElastiCache in front. The prices of items in the market change frequently. Sellers have begun complaining that, after they update the price of an item, the price does not actually change in the product listing. What could be causing this issue?

  • AThe cache is not being invalidated when the price of the item is changed.
  • BThe price of the item is being retrieved using a write-through ElastiCache cluster.
  • CThe DynamoDB table was provisioned with insufficient read capacity.
  • DThe DynamoDB table was provisioned with insufficient write capacity.
  Show answer
• #16Choose 2

  An e-commerce site allows returning users to log in to display customized web pages. The workflow is shown in the image below. An application is running on EC2 instances. Amazon RDS is used for the database that stores user accounts and preferences. The website freezes or is slow to load while waiting for the login step to complete. The remaining components of the site are well-optimized. Which of the following techniques will resolve this issue? (Select TWO)

  • AImplement the user login page as an asynchronous Lambda function.
  • BUse Amazon ElastiCache for MemCached to cache user data.
  • CUse Amazon Application Load Balancer to load balance the traffic to the website.
  • DCall the database asynchronously so the code can continue executing.
  • EBatch login requests from hundreds of users together as a single read request to the database.
  Show answer
• #17

  An application displays a status dashboard. The status is updated by 1 KB messages from an SQS queue. Although the status changes infrequently, the Developer must minimize the time between the message arrival in the queue and the dashboard update. What technique provides the shortest delay in updating the dashboard?

  • ARetrieve the messages from the queue using long polling every 20 seconds.
  • BReduce the size of the messages by compressing them before sending.
  • CRetrieve the messages from the queue using short polling every 10 seconds.
  • DReduce the size of each message payload by sending it in two parts.
  Show answer
• #18

  A Developer uses Amazon S3 buckets for static website hosting. The Developer creates one S3 bucket for the code and another S3 bucket for the assets, such as image and video files. Access is denied when a user attempts to access the assets bucket from the code bucket, with the website application showing a 403 error. How should the Developer solve this issue?

  • ACreate an IAM role and apply it to the assets bucket for the code bucket to be granted access.
  • BEdit the bucket policy of the assets bucket to allow access from the code bucket.
  • CEdit the bucket policy of the assets bucket to open access to all principals.
  • DChange the code bucket to use AWS Lambda functions instead of static website hosting.
  Show answer
• #19

  A Developer needs to deploy an application running on AWS Fargate using Amazon ECS. The application has environment variables that must be passed to a container for the application to initialize. How should the environment variables be passed to the container?

  • ADefine an array that includes the environment variables under the environment parameter within the service definition.
  • BDefine an array that includes the environment variables under the environment parameter within the task definition.
  • CDefine an array that includes the environment variables under the entryPoint parameter within the task definition.
  • DDefine an array that includes the environment variables under the entryPoint parameter within the service definition.
  Show answer
• #20

  How can software determine the public and private IP addresses of the Amazon EC2 instance that it is running on?

  • AQuery the appropriate Amazon CloudWatch metric.
  • BUse ipconfig or ifconfig command.
  • CQuery the local instance userdata.
  • DQuery the local instance metadata.
  Show answer

Want to track your score, take timed mock exams and get AI explanations? Create a free account