AWS Certified Developer - Associate

• #141

  An application on AWS is using third-party APIs. The Developer needs to monitor API errors in the code, and wants to receive notifications if failures go above a set threshold value. How can the Developer achieve these requirements?

  • APublish a custom metric on Amazon CloudWatch and use Amazon Simple Email Service (SES) for notification.
  • BUse an Amazon CloudWatch API-error metric and use Amazon Simple Notification Service (SNS) for notification.
  • CUse an Amazon CloudWatch API-error metric and use Amazon SES for notification.
  • DPublish a custom metric on Amazon CloudWatch and use Amazon SNS for notification.
  解答を表示
• #142

  You have an environment that consists of a public subnet using Amazon VPC and 3 instances that are running in this subnet. These three instances can successfully communicate with other hosts on the Internet. You launch a fourth instance in the same subnet, using the same AMI and security group configuration you used for the others, but find that this instance cannot be accessed from the Internet. What should you do to enable internet access?

  • ADeploy a NAT instance into the public subnet.
  • BModify the routing table for the public subnet.
  • CConfigure a publically routable IP Address In the host OS of the fourth instance.
  • DAssign an Elastic IP address to the fourth instance.
  解答を表示
• #143

  EC2 instances are launched from Amazon Machine images (AMIs). A given public AMI can:

  • ABe used to launch EC2 Instances in any AWS region.
  • BOnly be used to launch EC2 instances in the same country as the AMI is stored.
  • COnly be used to launch EC2 instances in the same AWS region as the AMI is stored.
  • DOnly be used to launch EC2 instances in the same AWS availability zone as the AMI is stored.
  解答を表示
• #144

  A Developer wants access to make the log data of an application running on an EC2 instance available to systems administrators. Which of the following enables monitoring of this metric in Amazon CloudWatch?

  • ARetrieve the log data from CloudWatch using the GetMetricData API call.
  • BRetrieve the log data from AWS CloudTrail using the LookupEvents API call.
  • CLaunch a new EC2 instance, configure Amazon CloudWatch Events, and then install the application.
  • DInstall the Amazon CloudWatch Logs agent on the EC2 instance that the application is running on.
  解答を表示
• #145

  A development team is working on a mobile app that allows users to upload pictures to Amazon S3. The team expects the app will be used by hundreds of thousands of users during a single event simultaneously. Once the pictures are uploaded, the backend service will scan and parse the pictures for inappropriate content. Which approach is the MOST resilient way to achieve this goal, which also smooths out temporary volume spikes for the backend service?

  • ADevelop an AWS Lambda function to check the upload folder in the S3 bucket. If new uploaded pictures are detected, the Lambda function will scan and parse them.
  • BOnce a picture is uploaded to Amazon S3, publish the event to an Amazon SQS queue. Use the queue as an event source to trigger an AWS Lambda function. In the Lambda function, scan and parse the picture.
  • CWhen the user uploads a picture, invoke an API hosted in Amazon API Gateway. The API will invoke an AWS Lambda function to scan and parse the picture.
  • DCreate a state machine in AWS Step Functions to check the upload folder in the S3 bucket. If a new picture is detected, invoke an AWS Lambda function to scan and parse it.
  解答を表示
• #1462 つ選択

  Which statements about DynamoDB are true? (Choose TWO)

  • ADynamoDB uses a pessimistic locking model.
  • BDynamoDB uses optimistic concurrency control.
  • CDynamoDB uses conditional writes for consistency.
  • DDynamoDB restricts item access during reads.
  • EDynamoDB restricts item access during writes.
  解答を表示
• #147

  A Developer is asked to implement a caching layer in front of Amazon RDS. Cached content is expensive to regenerate in case of service failure. Which implementation below would work while maintaining maximum uptime?

  • AImplement Amazon ElastiCache Redis in Cluster Mode.
  • BInstall Redis on an Amazon EC2 instance.
  • CImplement Amazon ElastiCache Memcached.
  • DMigrate the database to Amazon Redshift.
  解答を表示
• #148

  The release process workflow of an application requires a manual approval before the code is deployed into the production environment. What is the BEST way to achieve this using AWS CodePipeline?

  • AUse multiple pipelines to allow approval.
  • BUse an approval action in a stage.
  • CDisable the stage transition to allow manual approval.
  • DDisable a stage just prior the deployment stage.
  解答を表示
• #1492 つ選択

  A company is using AWS CodePipeline to deliver one of its applications. The delivery pipeline is triggered by changes to the master branch of an AWS CodeCommit repository and uses AWS CodeBuild to implement the test and build stages of the process and AWS CodeDeploy to deploy the application. The pipeline has been operating successfully for several months and there have been no modifications. Following a recent change to the application's source code, AWS CodeDeploy has not deployed the updates application as expected. What are the possible causes? (Choose TWO)

  • AThe change was not made in the master branch of the AWS CodeCommit repository.
  • BOne of the earlier stages in the pipeline failed and the pipeline has terminated.
  • COne of the Amazon EC2 instances in the company's AWS CodePipeline cluster is inactive.
  • DThe AWS CodePipeline is incorrectly configured and is not executing AWS CodeDeploy.
  • EAWS CodePipeline does not have permissions to access AWS CodeCommit.
  解答を表示
• #150

  A development team wants to run their container workloads on Amazon ECS. Each application container needs to share data with another container to collect logs and metrics. What should the developer team do to meet these requirements?

  • ACreate two pod specifications. Make one to include the application container and the other to include the other container. Link the two pods together.
  • BCreate two task definitions. Make one to include the application container and the other to include the other container. Mount a shared volume between the two tasks.
  • CCreate one task definition. Specify both containers in the definition. Mount a shared volume between those two containers.
  • DCreate a single pod specification. Include both containers in the specification. Mount a persistent volume to both containers.
  解答を表示
• #151

  A developer converted an existing program to an AWS Lambda function in the console. The program runs properly on a local laptop, but shows an Unable to import module error when tested in the Lambda console. Which of the following can fix the error?

  • AInstall the missing module and specify the current directory as the target. Create a ZIP file to include all files under the current directory, and upload the ZIP file.
  • BInstall the missing module in a lib directory. Create a ZIP file to include all files under the lib directory, and upload the ZIP file as dependency file.
  • CIn the Lambda code, invoke a Linux command to install the missing modules under the /usr/lib directory.
  • DIn the Lambda console, create a LB_LIBRARY_PATH environment and specify the value for the system library plan.
  解答を表示
• #152

  A Developer executed a AWS CLI command and received the error shown below. What action should the Developer perform to make this error human-readable?

  • AMake a call to AWS KMS to decode the message.
  • BUse the AWS STS decode-authorization-message API to decode the message.
  • CUse an open source decoding library to decode the message.
  • DUse the AWS IAM decode-authorization-message API to decode this message.
  解答を表示
• #153

  A Developer is building an application that needs to store data in Amazon S3. Management requires that the data be encrypted before it is sent to Amazon S3 for storage. The encryption keys need to be managed by the Security team. Which approach should the Developer take to meet these requirements?

  • AImplement server-side encryption using customer-provided encryption keys (SSE-C).
  • BImplement server-side encryption by using a client-side master key.
  • CImplement client-side encryption using an AWS KMS managed customer master key (CMK).
  • DImplement client-side encryption using Amazon S3 managed keys.
  解答を表示
• #154

  When uploading an object, what request header can be explicitly specified in a request to Amazon S3 to encrypt object data when saved on the server side?

  • Ax-amz-storage-class.
  • BContent-MD5.
  • Cx-amz-security-token.
  • Dx-amz-server-side-encryption.
  解答を表示
• #1552 つ選択

  According to best practice, how should access keys be managed in AWS? (Choose TWO)

  • AUse the same access key in all applications for consistency.
  • BDelete all access keys for the account root user.
  • CLeave unused access keys in the account for tracking purposes.
  • DEmbed and encrypt access keys in code for continuous deployment.
  • EUse Amazon IAM roles instead of access keys where possible.
  解答を表示
• #156

  A meteorological system monitors 600 temperature gauges, obtaining temperature samples every minute and saving each sample to a DynamoDB table Each sample involves writing 1K of data and the writes are evenly distributed over time. How much write throughput is required for the target table?

  • A1 write capacity unit.
  • B10 write capacity units.
  • C60 write capacity units.
  • D600 write capacity units.
  • E3600 write capacity units.
  解答を表示
• #157

  An application will ingest data at a very high throughput from many sources and must store the data in an Amazon S3 bucket. Which service would BEST accomplish this task?

  • AAmazon Kinesis Firehose.
  • BAmazon S3 Acceleration Transfer.
  • CAmazon SQS.
  • DAmazon SNS.
  解答を表示
• #1582 つ選択

  An application running on Amazon EC2 instances must access objects within an Amazon S3 bucket that are encrypted using server-side encryption using AWS KMS encryption keys (SSE-KMS). The application must have access to the customer master key (CMK) to decrypt the objects. Which combination of steps will grant the application access? (Select TWO)

  • AWrite an S3 bucket policy that grants the bucket access to the key.
  • BGrant access to the key in the IAM EC2 role attached to the application's EC2 instances.
  • CWrite a key policy that enables IAM policies to grant access to the key.
  • DGrant access to the key in the S3 bucket's ACL.
  • ECreate a Systems Manager parameter that exposes the KMS key to the EC2 instances.
  解答を表示
• #159

  A Developer is developing an application that manages financial transactions. To improve security, multi-factor authentication (MFA) will be required as part of the login protocol. What services can the Developer use to meet these requirements?

  • AAmazon DynamoDB to store MFA session data, and Amazon SNS to send MFA codes.
  • BAmazon Cognito with MFA.
  • CAWS Directory Service.
  • DAWS IAM with MFA enabled.
  解答を表示
• #1602 つ選択

  A Developer is making changes to a custom application that is currently using AWS Elastic Beanstalk. After the Developer completes the changes, what solutions will update the Elastic Beanstalk environment with the new application version? (Choose TWO)

  • APackage the application code into a .zip file, and upload, then deploy the packaged application from the AWS Management Console.
  • BPackage the application code into a .tar file, create a new application version from the AWS Management Console, then update the environment by using AWS CLI.
  • CPackage the application code into a .tar file, and upload and deploy the packaged application from the AWS Management Console.
  • DPackage the application code into a .zip file, create a new application version from the packaged application by using AWS CLI, then update the environment by using AWS CLI.
  • EPackage the application code into a .zip file, create a new application version from the AWS Management Console, then rebuild the environment by using AWS CLI.
  解答を表示

スコアの記録、時間制限付き模擬試験、AI解説をご利用になりますか？ 無料アカウントを作成