AWS Certified Developer - Associate

• #341

  A Developer has created a new AWS IAM user that has s3:putObject permission to write to a specific Amazon S3 bucket. This S3 bucket uses server-side encryption with AWS KMS managed keys (SSE-KMS) as the default encryption. Using the access key and secret key of the IAM user, the application received an access denied error when calling the PutObject API. How can this issue be resolved?

  • AUpdate the policy of the IAM user to allow the s3:EncryptionConfiguration action.
  • BUpdate the bucket policy of the S3 bucket to allow the IAM user to upload objects.
  • CUpdate the policy of the IAM user to allow the kms:GenerateDataKey action.
  • DUpdate the ACL of the S3 bucket to allow the IAM user to upload objects.
  उत्तर दिखाएँ
  💬चर्चा
• #342

  A company is developing an application that will run on several Amazon EC2 instances in an Auto Scaling group and can access a database running on Amazon EC2. The application needs to store secrets required to connect to the database. The application must allow for periodic secret rotation, and there should be no changes to the application when a secret changes. What is the SAFEST way to meet these requirements?

  • AAssociate an IAM role to the EC2 instance where the application is running with permission to access the database.
  • BUse AWS Systems Manager Parameter Store with the SecureString data type to store secrets.
  • CConfigure the application to store secrets in Amazon S3 object metadata.
  • DHard code the database secrets in the application code itself.
  उत्तर दिखाएँ
  💬चर्चा
• #343

  A company is developing a report executed by AWS Step Functions, Amazon CloudWatch shows errors in the Step Functions task state machine. To troubleshoot each task, the state input needs to be included along with the error message in the state output. Which coding practice can preserve both the original input and the error for the state?

  • AUse ResultPath in a Catch statement to include the error with the original input.
  • BUse InputPath in a Catch statement and set the value to null.
  • CUse Error Equals in a Retry statement to include the error with the original input.
  • DUse OutputPath in a Retry statement and set the value to $.
  उत्तर दिखाएँ
  💬चर्चा
• #344

  A Development team is working on a case management solution that allows medical claims to be processed and reviewed. Users log in to provide information related to their medical and financial situations. As part of the application, sensitive documents such as medical records, medical imaging, bank statements, and receipts are uploaded to Amazon S3. All documents must be securely transmitted and stored. All access to the documents must be recorded for auditing. What is the MOST secure approach?

  • AUse S3 default encryption using Advanced Encryption Standard-256 (AES-256) on the destination bucket.
  • BUse Amazon Cognito for authorization and authentication to ensure the security of the application and documents.
  • CUse AWS Lambda to encrypt and decrypt objects as they are placed into the S3 bucket.
  • DUse client-side encryption/decryption with Amazon S3 and AWS KMS.
  उत्तर दिखाएँ
  💬चर्चा
• #345

  A Developer migrated a web application to AWS. As part of the migration, the Developer implemented an automated continuous integration/continuous improvement (CI/CD) process using a blue/green deployment. The deployment provisions new Amazon EC2 instances in an Auto Scaling group behind a new Application Load Balancer. After the migration was completed, the Developer began receiving complaints from users getting booted out of the system. The system also requires users to log in after every new deployment. How can these issues be resolved?

  • AUse rolling updates instead of a blue/green deployment.
  • BExternalize the user sessions to Amazon ElastiCache.
  • CTurn on sticky sessions in the Application Load Balancer.
  • DUse multicast to replicate session information.
  उत्तर दिखाएँ
  💬चर्चा
• #346

  Given the following AWS CloudFormation template. What is the MOST efficient way to reference the new Amazon S3 bucket from another AWS CloudFormation template?

  • AAdd an Export declaration to the Outputs section of the original template and use ImportValue in other templates.
  • BAdd Exported: true to the Content.Bucket in the original template and use ImportResource in other templates.
  • CCreate a custom AWS CloudFormation resource that gets the bucket name from the ContentBucket resource of the first stack.
  • DUse Fn::Include to include the existing template in other templates and use the ContentBucket resource directly.
  उत्तर दिखाएँ
  💬चर्चा
• #347

  What are the steps to using the AWS CLI to launch a templatized serverless application?

  • AUse AWS CloudFormation get-template then CloudFormation execute-change-set.
  • BUse AWS CloudFormation validate-template then CloudFormation create-change-set.
  • CUse AWS CloudFormation package then CloudFormation deploy.
  • DUse AWS CloudFormation create-stack then CloudFormation update-stack.
  उत्तर दिखाएँ
  💬चर्चा
• #348

  A global company has an application running on Amazon EC2 instances that serves image files from Amazon S3. User requests from the browser are causing high traffic, which results in degraded performance. Which optimization solution should a Developer implement to increase application performance?

  • ACreate multiple prefix in the S3 bucket to increase the request rate.
  • BCreate an Amazon ElastiCache cluster to cache and serve frequently accessed items.
  • CUse Amazon CloudFront to serve the content of images stored in Amazon S3.
  • DSubmit a ticket to AWS support to request a rate limit increase for the S3 bucket.
  उत्तर दिखाएँ
  💬चर्चा
• #349

  A company needs to encrypt data at rest, but it wants to leverage an AWS managed service using its own master key. Which of the following AWS service can be used to meet these requirements?

  • ASSE with Amazon S3.
  • BSSE with AWS KMS.
  • CClient-side encryption.
  • DAWS IAM roles and policies.
  उत्तर दिखाएँ
  💬चर्चा
• #350

  After installing the AWS CLI, a Developer tries to run the command aws configure but receives the following error: Error: aws: command not found. What is the most likely cause of this error?

  • AThe aws executable is not in the PATH environment variable.
  • BAccess to the aws executable has been denied to the installer.
  • CIncorrect AWS credentials were provided.
  • DThe aws script does not have an executable file mode.
  उत्तर दिखाएँ
  💬चर्चा
• #351

  An application has the following requirements: Performance efficiency of seconds with up to a minute of latency. The data storage size may grow up to thousands of terabytes. Per-message sizes may vary between 100 KB and 100 MB. Data can be stored as key/value stores supporting eventual consistency. What is the MOST cost-effective AWS service to meet these requirements?

  • AAmazon DynamoDB.
  • BAmazon S3.
  • CAmazon RDS (with a MySQL engine).
  • DAmazon ElastiCache.
  उत्तर दिखाएँ
  💬चर्चा
• #352

  A Developer is writing an application in AWS Lambda. To simplify testing and deployments, the Developer needs the database connection string to be easily changed without modifying the Lambda code. How can this requirement be met?

  • AStore the connection string as a secret in AWS Secrets Manager.
  • BStore the connection string in an IAM user account.
  • CStore the connection string in AWS KMS.
  • DStore the connection string as a Lambda layer.
  उत्तर दिखाएँ
  💬चर्चा
• #353

  An application overwrites an object in Amazon S3, and then immediately reads the same object. Why would the application sometimes retrieve the old version of the object?

  • AS3 overwrite PUTS are eventually consistent, so the application may read the old object.
  • BThe application needs to add extra metadata to label the latest version when uploading to Amazon S3.
  • CAll S3 PUTS are eventually consistent, so the application may read the old object.
  • DThe application needs to explicitly specify latest version when retrieving the object.
  उत्तर दिखाएँ
  💬चर्चा
• #354

  Games-R-Us is launching a new game app for mobile devices. Users will log into the game using their existing Facebook account and the game will record player data and scoring information directly to a DynamoDB table. What is the most secure approach for signing requests to the DynamoDB API?

  • ACreate an IAM user with access credentials that are distributed with the mobile app to sign the requests.
  • BDistribute the AWS root account access credentials with the mobile app to sign the requests.
  • CRequest temporary security credentials using web identity federation to sign the requests.
  • DEstablish cross account access between the mobile app and the DynamoDB table to sign the requests
  उत्तर दिखाएँ
  💬चर्चा
• #355

  A company needs a fully-managed source control service that will work in AWS. The service must ensure that revision control synchronizes multiple distributed repositories by exchanging sets of changes peer-to-peer. All users need to work productively even when not connected to a network. Which source control service should be used?

  • ASubversion.
  • BAWS CodeBuild.
  • CAWS CodeCommit.
  • DAWS CodeStar.
  उत्तर दिखाएँ
  💬चर्चा
• #3562 चुनें

  A large e-commerce site is being designed to deliver static objects from Amazon S3. The Amazon S3 bucket will server more than 300 GET requests per second. What should be done to optimize performance? (Choose TWO)

  • AIntegrate Amazon CloudFront with Amazon S3.
  • BEnable Amazon S3 cross-region replication.
  • CDelete expired Amazon S3 server log files.
  • DConfigure Amazon S3 lifecycle rules.
  • ERandomize Amazon S3 key name prefixes.
  उत्तर दिखाएँ
  💬चर्चा
• #3572 चुनें

  A company has an application where reading objects from Amazon S3 is based on the type of user. The user types are registered user and guest user. The company has 25,000 users and is growing. Information is pulled from an S3 bucket depending on the user type. Which approaches are recommended to provide access to both user types? (Choose TWO)

  • AProvide a different access key and secret access key in the application code for registered users and guest users to provide read access to the objects.
  • BUse S3 bucket policies to restrict read access to specific IAM users.
  • CUse Amazon Cognito to provide access using authenticated and unauthenticated roles.
  • DCreate a new IAM user for each user and grant read access.
  • EUse the AWS IAM service and let the application assume the different roles using the AWS Security Token Service (AWS STS) AssumeRole action depending on the type of user and provide read access to Amazon S3 using the assumed role.
  उत्तर दिखाएँ
  💬चर्चा
• #358

  A Developer created a new AWS account and must create a scalable AWS Lambda function that meets the following requirements for concurrent execution: Average execution time of 100 seconds 50 requests per second. Which step must be taken prior to deployment to prevent errors?

  • AImplement dead-letter queues to capture invocation errors.
  • BAdd an event source from Amazon API Gateway to the Lambda function.
  • CImplement error handling within the application code.
  • DContact AWS Support to increase the concurrent execution limits.
  उत्तर दिखाएँ
  💬चर्चा
• #359

  A Developer needs temporary access to resources in a second account. What is the MOST secure way to achieve this?

  • AUse the Amazon Cognito user pools to get short-lived credentials for the second account.
  • BCreate a dedicated IAM access key for the second account, and send it by mail.
  • CCreate a cross-account access role, and use sts:AssumeRole API to get short-lived credentials.
  • DEstablish trust, and add an SSH key for the second account to the IAM user.
  उत्तर दिखाएँ
  💬चर्चा
• #3602 चुनें

  A Developer must deploy a new AWS Lambda function using an AWS CloudFormation template. Which procedures will deploy a Lambda function? (Select TWO)

  • AUpload the code to an AWS CodeCommit repository, then add a reference to it in an AWS::Lambda::Function resource in the template.
  • BCreate an AWS::Lambda::Function resource in the template, then write the code directly inside the CloudFormation template.
  • CUpload a .ZIP file containing the function code to Amazon S3, then add a reference to it in an AWS::Lambda::Function resource in the template.
  • DUpload a .ZIP file to AWS CloudFormation containing the function code, then add a reference to it in an AWS::Lambda::Function resource in the template.
  • EUpload the function code to a private Git repository, then add a reference to it in an AWS::Lambda::Function resource in the template.
  उत्तर दिखाएँ
  💬चर्चा

अपना स्कोर ट्रैक करना, समयबद्ध मॉक परीक्षा देना और AI व्याख्या पाना चाहते हैं? निःशुल्क खाता बनाएँ