AWS Certified Developer - Associate

• #21

  A Developer is writing a mobile application that allows users to view images from an S3 bucket. The users must be able to log in with their Amazon login, as well as Facebook and/or Google accounts. How can the Developer provide this authentication functionality?

  • AUse Amazon Cognito with web identity federation.
  • BUse Amazon Cognito with SAML-based identity federation.
  • CUse AWS IAM Access/Secret keys in the application code to allow Get on the S3 bucket.
  • DUse AWS STS AssumeRole in the application code and assume a role with Get permissions on the S3 bucket.
  Show answer
• #22

  A social media company is using Amazon Cognito in order to synchronize profiles across different mobile devices, to enable end users to have a seamless experience. Which of the following configurations can be used to silently notify users whenever an update is available on all other devices?

  • AModify the user pool to include all the devices which keep them in sync.
  • BUse the SyncCallback interface to receive notifications on the application.
  • CUse an Amazon Cognito stream to analyze the data and push the notifications.
  • DUse the push synchronization feature with the appropriate IAM role.
  Show answer
• #23Choose 2

  An AWS Lambda function must read data from an Amazon RDS MySQL database in a VPC and also reach a public endpoint over the internet to get additional data. Which steps must be taken to allow the function to access both the RDS resource and the public endpoint? (Select TWO)

  • AModify the default configuration for the Lambda function to associate it with an Amazon VPC private subnet.
  • BModify the default network access control list to allow outbound traffic.
  • CAdd a NAT Gateway to the VPC.
  • DModify the default configuration of the Lambda function to associate it with a VPC public subnet.
  • EAdd an environmental variable to the Lambda function to allow outbound internet access.
  Show answer
• #24

  A development team is using AWS Elastic Beanstalk to deploy a two-tier application that consists of a load-balanced web tier and an Amazon RDS database tier in production. The team would like to separate the RDS instance from the Elastic Beanstalk. How can this be accomplished?

  • AUse the Elastic Beanstalk CLI to disassociate the database.
  • BUse the AWS CLI to disassociate the database.
  • CChange the deployment policy to disassociate the database.
  • DRecreate a new Elastic Beanstalk environment without Amazon RDS.
  Show answer
• #25

  A website's page load times are gradually increasing as more users access the system at the same time. Analysis indicates that a user profile is being loaded from a database in all the web pages being visited by each user and this is increasing the database load and the page load latency. To address this issue the Developer decides to cache the user profile data. Which caching strategy will address this situation MOST efficiently?

  • ACreate a new Amazon EC2 Instance and run a NoSQL database on it. Cache the profile data within this database using the write-through caching strategy.
  • BCreate an Amazon ElastiCache cluster to cache the user profile data. Use a cache-aside caching strategy.
  • CUse a dedicated Amazon RDS instance for caching profile data. Use a write-through caching strategy.
  • DCreate an ElastiCache cluster to cache the user profile data. Use a write-through caching strategy.
  Show answer
• #26

  Which of the following statements about SQS is true?

  • AMessages will be delivered exactly once and messages will be delivered in First in, First out order.
  • BMessages will be delivered exactly once and message delivery order is indeterminate.
  • CMessages will be delivered one or more times and messages will be delivered in First in, First out order.
  • DMessages will be delivered one or more times and message delivery order is indeterminate.
  Show answer
• #27

  An application uses Lambda functions to extract metadata from files uploaded to an S3 bucket; the metadata is stored in Amazon DynamoDB. The application starts behaving unexpectedly, and the Developer wants to examine the logs of the Lambda function code for errors. Based on this system configuration, where would the Developer find the logs?

  • AAmazon S3.
  • BAWS CloudTrail.
  • CAmazon CloudWatch.
  • DAmazon DynamoDB
  Show answer
• #28

  A company wants to containerize an existing three-tier web application and deploy it to Amazon ECS Fargate. The application is using session data to keep track of user activities. Which approach would provide the BEST user experience?

  • AProvision a Redis cluster in Amazon ElastiCache and save the session data in the cluster.
  • BCreate a session table in Amazon Redshift and save the session data in the database table.
  • CEnable session stickiness in the existing Network Load Balancer and manage the session data in the container.
  • DUse an Amazon S3 bucket as data store and save the session data in the bucket.
  Show answer
• #29

  An application is using Amazon DynamoDB as its data store, and should be able to read 100 items per second as strongly consistent reads. Each item is 5 KB in size. To what value should the table's provisioned read throughput be set?

  • A50 read capacity units.
  • B100 read capacity units.
  • C200 read capacity units.
  • D500 read capacity units.
  Show answer
• #30

  A Development team wants to instrument their code to provide more detailed information to AWS X-Ray than simple outgoing and incoming requests. This will generate large amounts of data, so the Development team wants to implement indexing so they can filter the data. What should the Development team do to achieve this?

  • AAdd annotations to the segment document and the code.
  • BAdd metadata to the segment document and the code.
  • CConfigure the necessary X-Ray environment variables.
  • DInstall required plugins for the appropriate AWS SDK.
  Show answer
• #31

  How can you secure data at rest on an EBS volume?

  • AAttach the volume to an instance using EC2's SSL interface.
  • BWrite the data randomly instead of sequentially.
  • CUse an encrypted file system on top of the EBS volume.
  • DEncrypt the volume using the S3 server-side encryption service.
  • ECreate an IAM policy that restricts read and write access to the volume.
  Show answer
• #32

  Two containerized microservices are hosted on Amazon EC2 ECS. The first microservice reads an Amazon RDS Aurora database instance, and the second microservice reads an Amazon DynamoDB table. How can each microservice be granted the minimum privileges?

  • ASet ECS_ENABLE_TASK_IAM_ROLE to false on EC2 instance boot in ECS agent configuration file. Run the first microservice with an IAM role for ECS tasks with read-only access for the Aurora database. Run the second microservice with an IAM role for ECS tasks with read-only access to DynamoDB.
  • BSet ECS_ENABLE_TASK_IAM_ROLE to false on EC2 instance boot in the ECS agent configuration file. Grant the instance profile role read-only access to the Aurora database and DynamoDB.
  • CSet ECS_ENABLE_TASK_IAM_ROLE to true on EC2 instance boot in the ECS agent configuration file. Run the first microservice with an IAM role for ECS tasks with read-only access for the Aurora database. Run the secondmicroservice with an IAM role for ECS tasks with read-only access to DynamoDB.
  • DSet ECS_ENABLE_TASK_IAM_ROLE to true on EC2 instance boot in the ECS agent configuration file. Grant the instance profile role read-only access to the Aurora database and DynamoDB.
  Show answer
• #33

  A set of APIs are exposed to customers using the Amazon API Gateway. These APIs have caching enabled on the API Gateway. Customers have asked for an option to invalidate this cache for each of the APIs. What action can be taken to allow API customers to invalidate the API Cache?

  • AAsk customers to use AWS credentials to call the InvalidateCache API.
  • BAsk customers to invoke an AWS API endpoint which invalidates the cache.
  • CAsk customers to pass an HTTP header called Cache-Control:max-age=0.
  • DAsk customers to add a query string parameter called INVALIDATE_CACHE when making an API call.
  Show answer
• #34

  A Developer has written an application that runs on Amazon EC2 instances and generates a value every minute. The Developer wants to monitor and graph the values generated over time without logging in to the instance each time. Which approach should the Developer use to achieve this goal?

  • AUse the Amazon CloudWatch metrics reported by default for all EC2 instances. View each value from the CloudWatch console.
  • BDevelop the application to store each value in a file on Amazon S3 every minute with the timestamp as the name.
  • CPublish each generated value as a custom metric to Amazon CloudWatch using available AWS SDKs.
  • DStore each value as a variable and add the variable to the list of EC2 metrics that should be reported to the Amazon CloudWatch console.
  Show answer
• #35

  A Development team would like to migrate their existing application code from a GitHub repository to AWS CodeCommit. What needs to be created before they can migrate a cloned repository to CodeCommit over HTTPS?

  • AA GitHub secure authentication token.
  • BA public and private SSH key file.
  • CA set of Git credentials generated from IAM.
  • DAn Amazon EC2 IAM role with CodeCommit permissions.
  Show answer
• #36

  A developer receives the following error message when trying to launch or terminate an Amazon EC2 instance using a boto3 script. What should the developer do to correct this error message?

  • AAssign an IAM role to the EC2 instance to allow necessary API calls on behalf of the client.
  • BImplement an exponential backoff algorithm for optimizing the number of API requests made to Amazon EC2.
  • CIncrease the overall network bandwidth to handle higher API request rates.
  • DUpgrade to the latest AWS CLI version so that boto3 can handle higher request rates.
  Show answer
• #37

  An application reads data from an Amazon DynamoDB table. Several times a day, for a period of 15 seconds, the application receives multiple ProvisionedThroughputExceeded errors. How should this exception be handled?

  • ACreate a new global secondary index for the table to help with the additional requests.
  • BRetry the failed read requests with exponential backoff.
  • CImmediately retry the failed read requests.
  • DUse the DynamoDB UpdateItem API to increase the provisioned throughput capacity of the table.
  Show answer
• #38

  A Developer has code running on Amazon EC2 instances that needs read-only access to an Amazon DynamoDB table. What is the MOST secure approach the Developer should take to accomplish this task?

  • ACreate a user access key for each EC2 instance with read-only access to DynamoDB. Place the keys in the code. Redeploy the code as keys rotate.
  • BUse an IAM role with an AmazonDynamoDBReadOnlyAccess policy applied to the EC2 instances.
  • CRun all code with only AWS account root user access keys to ensure maximum access to services.
  • DUse an IAM role with Administrator access applied to the EC2 instance.
  Show answer
• #39

  You are writing to a DynamoDB table and receive the following exception: ProvisionedThroughputExceededException. though according to your Cloudwatch metrics for the table, you are not exceeding your provisioned throughput. What could be an explanation for this?

  • AYou haven't provisioned enough DynamoDB storage instances.
  • BYou're exceeding your capacity on a particular Range Key.
  • CYou're exceeding your capacity on a particular Hash Key.
  • DYou're exceeding your capacity on a particular Sort Key.
  • EYou haven't configured DynamoDB Auto Scaling triggers.
  Show answer
• #40

  An application ingests a large number of small messages and stores them in a database. The application uses AWS Lambda. A Development team is making changes to the application's processing logic. In testing, it is taking more than 15 minutes to process each message. The team is concerned the current backend may time out. Which changes should be made to the backend system to ensure each message is processed in the MOST scalable way?

  • AAdd the messages to an Amazon SQS queue. Set up and Amazon EC2 instance to poll the queue and process messages as they arrive.
  • BAdd the messages to an Amazon SQS queue. Set up Amazon EC2 instances in an Auto Scaling group to poll the queue and process the messages as they arrive.
  • CCreate a support ticket to increase the Lambda timeout to 60 minutes to allow for increased processing time.
  • DChange the application to directly insert the body of the message into an Amazon RDS database.
  Show answer

Want to track your score, take timed mock exams and get AI explanations? Create a free account