AWS Certified Developer Associate - Practice Exam 1

An admin has created a resource-based policy in an S3 bucket. The admin wants to give access to a small team of developers to the Amazon S3 bucket. Which policy element should be used to specify the ARNs of the user accounts that will be granted access?

A Developer is writing a web application that allows users to view images from an Amazon S3 bucket. The users will log in with their Amazon login, as well as Facebook and/or Google accounts. How can the developer provide this authentication capability?

The data scientists in your company are looking for a service that can process and analyze real-time streaming data, using standard SQL queries to query the streaming data. Which combination of AWS services would deliver these requirements?

Which AWS service can be used to automate the deployment of a software package to Amazon EC2 instances and on-premises virtual servers?

A company is creating an application that will require users to access AWS services and allow them to reset their own passwords. Which of the following would allow the company to manage users and authorization while allowing users to reset their own passwords?

Some suspicious activity has been reported in the AWS account of a developer. The developer is concerned that the access keys associated with his IAM user account may have been compromised. What is the first thing the Developer do in should do in this situation?

Which of these services does Amazon Route 53 provide? (Select TWO)

Which APIs can be used to read, write and modify individual items in a DynamoDB table?

Which service can a Developer use to protect a customer-facing web application that runs on Amazon EC2 with an Application Load Balancer and an Amazon RDS database against SQL injection and cross-site scripting attacks?

A company needs to encrypt a large quantity of data and generate data encryption keys from a dedicated, tamper-resistant hardware device. Which AWS service would be most suitable for the company's needs?

A legacy service has an XML-based SOAP interface. The developer wants to expose the service's functionality to external clients with the Amazon API Gateway. How can the developer accomplish this?

A Developer needs to modify an AWS Lambda function that processes customer information and generates a JSON file, which is then stored in an Amazon S3 bucket. The data handled by the Lambda function is sensitive and requires encryption before being uploaded to the S3 bucket. How can the developer modify the Lambda function to ensure this requirement?

What is the BEST possible way to push to multiple Amazon SQS queues the messages that an application has produced?

A Developer is writing a REST service that will be built on Amazon API Gateway with AWS Lambda integrations. The service adds data to an external database, and the data is sent as query string parameters in the method request. How should the developer convert the query string parameters to arguments for the Lambda function?

Which command should we use to invoke a Lambda function asynchronously using the AWS CLI?

Using Route 53 Alias records, what targets can you specify to make them publicly addressable? (Select TWO)

A mobile application runs as a serverless application on AWS. Which AWS service can the Developer use to send push notifications to the application's subscribers?

A company is using AWS CloudFormation templates to deploy AWS resources. The company needs to update one of its AWS CloudFormation stacks. What can the company do to view a summary of proposed changes to an AWS CloudFormation stack without implementing the changes in production?

A developer has written the following IAM policy to provide access to an Amazon S3 bucket:

Which access does the policy allow regarding the s3:GetObject and s3:PutObject actions?

A company wants to host four client-side web applications on three separate S3 buckets. The developer moves all the common JavaScript files and web fonts to a central S3 bucket that serves the web applications to achieve this goal. However, during testing, the developer notices that the browser blocks the JavaScript files and web fonts. What should the developer do to prevent the browser from blocking the JavaScript files and web fonts?

A developer using X-Ray on an Amazon ECS cluster requires more detailed timing information and data related to downstream calls to AWS services. What should the developer use to obtain this extra detail?

Which service supports the resolution of public domain names to IP addresses or AWS resources?

How can a Developer execute a Lambda function in response to an event and forward the execution result to another application through pub/sub notification?

A developer has developed an application using an AWS Lambda function, an Amazon DynamoDB table, and Amazon SNS. However, the application is not performing as expected, and the developer needs to analyze what is happening across all application components. Which AWS Service can we use to investigate the issue?

A company manages an application that stores data in an Amazon DynamoDB table. The company needs to send an email every time a new change is made to the DynamoDB table. They are thinking about using AWS Lambda to send this email. What is the MOST suitable way to deliver this requirement?

A company runs a popular website behind an Amazon CloudFront distribution that uses an Application Load Balancer as the origin. The developer needs to manipulate the request and response that reaches CloudFront, and he needs a function that can scale to millions of requests per second, with a maximum execution time of < 1 ms. Which technology can the developer use to accomplish it?

To include objects defined by the AWS Serverless Application Model (SAM) in an AWS CloudFormation template, what sections MUST be included in the document root?

A Developer has completed some code updates and needs to deploy the updates to an Amazon Elastic Beanstalk environment. The environment includes ten Amazon EC2 instances, and the application performance must maintain full performance and availability during the update. Which deployment policy is the most cost-effective choice to suit these requirements?

A developer created a static website and hosted it on Amazon S3. The website requests web services hosted in Amazon API Gateway and AWS Lambda. However, the following error message appears on the site: "No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'null' is therefore not allowed access." What should the developer do to resolve this issue?

Which Amazon EC2 billing option gives you low cost, maximum flexibility, no upfront costs or commitment, and you only pay for what you use?

To increase its benefits, a company would like to create a new type of customer, the premium customer. They will have access to software updates faster. This company currently uses Amazon S3 and Amazon CloudFront to distribute software updates. What is the MOST efficient way to distribute these updates only to premium customers? (Select TWO.)

A developer is building an application to keep personal health information (PHI), which always requires data encryption. The PHI is currently stored in an encrypted Amazon RDS for MySQL DB instance. The developer wants to improve the application's performance by caching frequently accessed data and enabling the ability to sort or rank the cached data. Which solution should the developer use to meet these requirements?

A developer team wants to migrate a Microsoft SQL Server database to an Amazon RDS instance. How can they perform this migration with minimal administrative effort and downtime?

An application receives and processes files of around 4GB in size. The application extracts metadata from the files, typically taking a few seconds for each file, with times of little activity and multiple uploads within a short period. What architecture should we use to have the most cost-efficient solution?

A serverless application will accept images uploaded by users from around the world. The application will make API calls to back-end services and save the session state data of the user to a database. Which combination of services would provide a cost-effective solution while delivering the least latency?

How can a Developer enable an Amazon ECS Service scaling with Auto Scaling to scale the tasks based on the user load in the past 20 seconds?

An Amazon EC2 application is facing intermittent technical difficulties. How can a Developer easily track errors in the application logs and receive notifications when the error rate exceeds a certain threshold with the LEAST complexity?

An Amazon DynamoDB table has a Primary partition key (userid). After trying to add two items for userid “user155” with unique timestamps, the developer received an error for the second item stating: “The conditional request failed”. What MUST the Developer do to resolve the issue?

A team of data scientists performs complex queries on a data warehouse that take several hours to complete. Another team of scientists needs to run fast, repeat queries and update BI dashboards. Which service delivers these requirements MOST cost-effectively for the two use cases?

An Amazon Kinesis Data Firehose delivery stream receives customer data containing personally identifiable information. A developer needs to remove pattern-based customer identifiers from the data and store the modified data in an Amazon S3 bucket. What should the developer do to meet these requirements?

A company runs a popular website behind an Amazon CloudFront distribution that uses an Application Load Balancer as the origin. The developer's objective is to create customized HTTP responses for 404 errors when content is no longer available on the origin server and redirect users to an alternative page. To achieve this, the developer intends to utilize an AWS Lambda@Edge function associated with the existing CloudFront distribution, minimizing resource consumption. Which type of CloudFront event should the Developer use to trigger the Lambda@Edge function that includes the redirect logic?

A company is developing a new online game that will run on top of Amazon ECS. Four different Amazon ECS services will be part of the architecture, each requiring specific permissions for various AWS services. The company wants to optimize the use of the underlying Amazon EC2 instances by bin-packing the containers based on memory reservation. Which configuration would allow the Development team to meet these requirements MOST securely?

A set of APIs exposed using API Gateway have caching enabled. Customers have asked for an option to invalidate this cache for each of the APIs. What action can be taken to allow API customers to invalidate the API Cache?

An application is processing clickstream data using Amazon Kinesis. The clickstream data feed into Kinesis experiences periodic spikes. The PutRecords API call occasionally fails, and the logs show that the failed call returns the response shown below:

Which techniques will help mitigate this exception? (Choose two.)

An application gathers data from sensors, which is stored in an Amazon SQS Standard queue by an AWS Lambda function, and an Amazon EC2 instance processes the data and stores it in an Amazon RedShift data warehouse. However, duplicate messages are occasionally sent due to a flaw in the sensors' software. The timestamps on these duplicate messages indicate that they were generated within seconds of the primary message. As a developer, what can be done to prevent redundant data from being stored in the data warehouse?

A company wants to deploy and manage static websites on AWS. Each website's source code is hosted in different version control systems such as AWS CodeCommit, Bitbucket, and GitHub. They aim to implement phased releases using development, staging, testing, and production environments in the AWS Cloud. For each environment, deployments should be initiated through code merges on the relevant Git branch. Additionally, the company wants to ensure that HTTPS is utilized for all data exchange. The company needs a solution that does not require servers to run continuously. Which solution will meet these requirements with the LEAST operational overhead?

A developer is building an application to run on IoT devices that sends data to an AWS Lambda function acting as a RESTful API. The application will assign a unique identifier to each API request, and the number of requests might increase unexpectedly at any given. During periods of request throttling, the application might need to retry requests, and the API must be able to handle these duplicate requests without data loss or inconsistencies. What solution can meet these requirements?

A company has an application that uses Amazon Cognito user pools as an identity provider. The company must secure access to user records. The company has set up multi-factor authentication (MFA). The company also wants to send a login activity notification by email every time a user logs in. What is the MOST operationally efficient solution that meets this requirement?

A developer creates a VPC named VPC-A that has public and private subnets. The developer also creates an Amazon RDS database inside the private subnet of VPC-A. The developer creates an AWS Lambda function in the default VPC to perform some queries containing code to access the RDS database. When the Lambda function runs, an error message indicates that the function cannot connect to the RDS database. How can the developer solve this problem?

An application is using Amazon Cognito user pools and identity pools for secure access. A developer wants to integrate the user-specific file upload and download features in the application with Amazon S3. The developer must ensure that the files are saved and retrieved securely and that users can access only their own files. The file sizes range from 3 KB to 300 MB. Which option will meet these requirements with the HIGHEST level of security?