AWS Certified Developer - Associate

• #241

  Company D is running their corporate website on Amazon S3 accessed from http://www.companyd.com. Their marketing team has published new web fonts to a separate S3 bucket accessed by the S3 endpoint https://s3-us-west-1.amazonaws.com/cdfonts. While testing the new web fonts, Company D recognized the web fonts are being blocked by the browser. What should Company D do to prevent the web fonts from being blocked by the browser?

  • AEnable versioning on the cdfonts bucket for each web font.
  • BCreate a policy on the cdfonts bucket to enable access to everyone.
  • CAdd the Content-MD5 header to the request for webfonts in the cdfonts bucket from the website.
  • DConfigure the cdfonts bucket to allow cross-origin requests by creating a CORS configuration.
  Show answer
• #242

  A developer is provided with an HTTPS clone URL for an AWS CodeCommit repository. What needs to be configured before cloning this repository?

  • AUse AWS KMS to set up public and private keys for use with AWS CodeCommit.
  • BSet up the Git credential helper to use an AWS credential profile, and enable the helper to send the path to the repositories.
  • CUse AWS Certificate Manager to provision public and private SSL/TLS certificates.
  • DGenerate encryption keys using AWS CloudHSM, then export the key for use with AWS CodeCommit.
  Show answer
• #243

  A company is using Amazon API Gateway to manage access to a set of microservices implemented as AWS Lambda functions. Following a bug report, the company makes a minor breaking change to one of the APIs. In order to avoid impacting existing clients when the new API is deployed, the company wants to allow clients six months to migrate from v1 to v2. Which approach should the Developer use to handle this change?

  • AUpdate the underlying Lambda function and provide clients with the new Lambda invocation URL.
  • BUse API Gateway to automatically propagate the change to clients, specifying 180 days in the phased deployment parameter.
  • CUse API Gateway to deploy a new stage named v2 to the API and provide users with its URL.
  • DUpdate the underlying Lambda function, create an Amazon CloudFront distribution with the updated Lambda function as its origin.
  Show answer
• #244

  A Developer is migrating an on-premises application to AWS. The application currently takes user uploads and saves them to a local directory on the server. All uploads must be saved and made immediately available to all instances in an Auto Scaling group. Which approach will meet these requirements?

  • AUse Amazon EBS and configure the application AMI to use a snapshot of the same EBS instance on boot.
  • BUse Amazon S3 and rearchitect the application so all uploads are placed in S3.
  • CUse instance storage and share it between instances launched from the same Amazon Machine Image (AMI).
  • DUse Amazon EBS and file synchronization software to achieve eventual consistency among the Auto Scaling group.
  Show answer
• #245

  A company is building an application to track athlete performance using an Amazon DynamoDB table. Each item in the table is identified by a partition key (user_id) and a sort key (sport_name). The table design is shown below. (Note: Not all table attributes are shown) A Developer is asked to write a leaderboard application to display the top performers (user_id) based on the score for each sport_name. What process will allow the Developer to extract results MOST efficiently from the DynamoDB table?

  • AUse a DynamoDB query operation with the key attributes of user_id and sport_name and order the results based on the score attribute.
  • BCreate a global secondary index with a partition key of sport_name and a sort key of score, and get the results.
  • CUse a DynamoDB scan operation to retrieve scores and user_id based on sport_name, and order the results based on the score attribute.
  • DCreate a local secondary index with a primary key of sport_name and a sort key of score and get the results based on the score attribute.
  Show answer
• #246

  A software company needs to make sure user-uploaded documents are securely stored in Amazon S3. The documents must be encrypted at rest in Amazon S3. The company does not want to manage the security infrastructure in-house, but the company still needs extra protection to ensure it has control over its encryption keys due to industry regulations. Which encryption strategy should a developer use to meet these requirements?

  • AServer-side encryption with Amazon S3 managed keys (SSE-S3).
  • BServer-side encryption with customer-provided encryption keys (SSE-C).
  • CServer-side encryption with AWS KMS managed keys (SSE-KMS).
  • DClient-side encryption.
  Show answer
• #247

  A company needs to ingest terabytes of data each hour from thousands of sources that are delivered almost continually throughout the day. The volume of messages generated varies over the course of the day. Messages must be delivered in real time for fraud detection and live operational dashboards. Which approach will meet these requirements?

  • ASend the messages to an Amazon SQS queue, then process the messages by using a fleet of Amazon EC2 instances.
  • BUse the Amazon S3 API to write messages to an S3 bucket, then process the messages by using Amazon Redshift.
  • CUse AWS Data Pipeline to automate the movement and transformation of data.
  • DUse Amazon Kinesis Data Streams with Kinesis Client Library to ingest and deliver messages.
  Show answer
• #248Choose 2

  An application is running on a cluster of Amazon EC2 instances. While trying to read objects stored within a single Amazon S3 bucket that are encrypted with server-side encryption with AWS KMS managed keys (SSE-KMS), the application receives the following error. Which combination of steps should be taken to prevent this failure? (Choose TWO)

  • AContact AWS Support to request an AWS KMS rate limit increase.
  • BPerform error retries with exponential backoff in the application code.
  • CContact AWS Support to request a S3 rate limit increase.
  • DImport a customer master key (CMK) with a larger key size.
  • EUse more than one customer master key (CMK) to encrypt S3 data.
  Show answer
• #249

  An application is designed to use Amazon SQS to manage messages from many independent senders. Each sender's messages must be processed in the order they are received. Which SQS feature should be implemented by the Developer?

  • AConfigure each sender with a unique MessageGroupId.
  • BEnable MessageDeduplicationIds on the SQS queue.
  • CConfigure each message with unique MessageGroupIds.
  • DEnable ContentBasedDeduplication on the SQS queue.
  Show answer
• #250Choose 2

  A Developer has created a software package to be deployed on multiple EC2 instances using IAM roles. What actions could be performed to verify IAM access to get records from Amazon Kinesis Streams? (Select TWO)

  • AUse the AWS CLI to retrieve the IAM group.
  • BQuery Amazon EC2 metadata for in-line IAM policies.
  • CRequest a token from AWS STS, and perform a describe action.
  • DPerform a get action using the --dry-run argument.
  • EValidate the IAM role policy with the IAM policy simulator.
  Show answer
• #251

  A Developer uses AWS CodeDeploy to automate application deployment that connects to an external MySQL database. The Developer wants to securely access the encrypted secrets, such as API keys and database passwords. Which of the following solutions would involve the LEAST administrative effort?

  • ASave the secrets in Amazon S3 with AWS KMS server-side encryption, and use a signed URL to access them by using the IAM role from Amazon EC2 instances.
  • BUse the instance metadata to store the secrets and to programmatically access the secrets from EC2 instances.
  • CUse the Amazon DynamoDB client-side encryption library to save the secrets in DynamoDB and to programmatically access the secrets from EC2 instances.
  • DUse AWS SSM Parameter Store to store the secrets and to programmatically access them by using the IAM role from EC2 instances.
  Show answer
• #252

  A Developer must analyze performance issues with production-distributed applications written as AWS Lambda functions. These distributed Lambda applications invoke other components that make up the applications. How should the Developer identify and troubleshoot the root cause of the performance issues in production?

  • AAdd logging statements to the Lambda functions, then use Amazon CloudWatch to view the logs.
  • BUse AWS Cloud Trail and then examine the logs.
  • CUse AWS X-Ray, then examine the segments and errors.
  • DRun Amazon Inspector agents and then analyze performance.
  Show answer
• #253

  During non-peak hours, a Developer wants to minimize the execution time of a full Amazon DynamoDB table scan without affecting normal workloads. The workloads average half of the strongly consistent read capacity units during non-peak hours. How would the Developer optimize this scan?

  • AUse parallel scans while limiting the rate.
  • BUse sequential scans.
  • CIncrease read capacity units during the scan operation.
  • DChange consistency to eventually consistent during the scan operation.
  Show answer
• #254

  A team of Developers must migrate an application running inside an AWS Elastic Beanstalk environment from a Classic Load Balancer to an Application Load Balancer. Which steps should be taken to accomplish the task using the AWS Management Console?

  • A1. Update the application code in the existing deployment. 2. Select a new load balancer type before running the deployment. 3. Deploy the new version of the application code to the environment.
  • B1. Create a new environment with the same configurations except for the load balancer type. 2. Deploy the same application version as used in the original environment. 3. Run the swap-environment-cnames action.
  • C1. Clone the existing environment, changing the associated load balancer type. 2. Deploy the same application version as used in the original environment. 3. Run the swap-environment-cnames action.
  • D1. Edit the environment definitions in the existing deployment. 2. Change the associated load balancer type according to the requirements. 3. Rebuild the environment with the new load balancer type.
  Show answer
• #255

  A developer is updating an application deployed on AWS Elastic Beanstalk. The new version is incompatible with the old version. To successfully deploy the update, a full cutover to the new, updated version must be performed on all instances at one time, with the ability to roll back changes in case of a deployment failure in the new version. How can this be performed with the LEAST amount of downtime?

  • AUse the Elastic Beanstalk All at once deployment policy to update all instances simultaneously.
  • BPerform an Elastic Beanstalk Rolling with additional batch deployment.
  • CDeploy the new version in a new Elastic Beanstalk environment and swap environment URLs.
  • DPerform an Elastic Beanstalk Rolling deployment.
  Show answer
• #256

  A Developer must build an application that uses Amazon DynamoDB. The requirements state that the items being stored in the DynamoDB table will be 7KB in size and that reads must be strongly consistent. The maximum read rate is 3 items per second, and the maximum write rate is 10 items per second. How should the Developer size the DynamoDB table to meet these requirements?

  • ARead: 3 read capacity. unitsWrite: 70 write capacity units.
  • BRead: 6 read capacity. unitsWrite: 70 write capacity units.
  • CRead: 6 read capacity. unitsWrite: 10 write capacity units.
  • DRead: 3 read capacity. unitsWrite: 10 write capacity units.
  Show answer
• #257

  A gaming application stores scores for players in an Amazon DynamoDB table that has four attributes: user_id, user_name, user_score, and user_rank. The users are allowed to update their names only if a user is authenticated by web identity federation. Which set of conditions should be added in the policy attached to the role for the dynamodb:PutItem API call?

  • AOption A.
  • BOption B.
  • COption C.
  • DOption D.
  Show answer
• #258

  A company is developing an application that will be accessed through the Amazon API Gateway REST API. Registered users should be the only ones who can access certain resources of this API. The token being used should expire automatically and needs to be refreshed periodically. How can a Developer meet these requirements?

  • ACreate an Amazon Cognito identity pool, configure the Amazon Cognito Authorizer in API Gateway, and use the temporary credentials generated by the identity pool.
  • BCreate and maintain a database record for each user with a corresponding token and use an AWS Lambda authorizer in API Gateway.
  • CCreate an Amazon Cognito user pool, configure the Cognito Authorizer in API Gateway, and use the identity or access token.
  • DCreate an IAM user for each API user, attach an invoke permissions policy to the API, and use an IAM authorizer in API Gateway.
  Show answer
• #259

  An application uses Amazon Kinesis Data Streams to ingest and process large streams of data records in real time. Amazon EC2 instances consume and process the data from the shards of the Kinesis data stream by using Amazon Kinesis Client Library (KCL). The application handles the failure scenarios and does not require standby workers. The application reports that a specific shard is receiving more data than expected. To adapt to the changes in the rate of data flow, the hot shard is resharded. Assuming that the initial number of shards in the Kinesis data stream is 4, and after resharding the number of shards increased to 6, what is the maximum number of EC2 instances that can be deployed to process data from all the shards?

  • A12.
  • B6.
  • C4.
  • D1.
  Show answer
• #260Choose 2

  Which of the following platforms are supported by Elastic Beanstalk? (Choose TWO)

  • AApache Tomcat.
  • B.NET.
  • CIBM Websphere.
  • DOracle JBoss.
  • EJetty.
  Show answer

Want to track your score, take timed mock exams and get AI explanations? Create a free account