AWS Certified Developer Associate - Practice Exam 3

You are planning to deploy a number of EC2 instances in your VPC. You will deploy the EC2 instances across several subnets and multiple AZs. What AWS feature can act as an instance-level firewall to control traffic between your EC2 instances?

A static website is hosted on Amazon S3 using the bucket name fullcertified.com. Some HTML pages on the site use JavaScript to download images that are located in the bucket "https://fullcertifiedimages.s3.amazonaws.com/". Users have reported that the images are not being displayed. What is the MOST likely cause?

A company is building a scalable data management system using AWS services to accelerate development and scalability. The solution will take in large amounts of data from diverse sources, process it through various business rules, and require the ability to manage errors and reprocess data. The company needs a service to manage and automate the data flow orchestration while being scalable and low maintenance. Which AWS service is best for these requirements?

A developer is creating a template that uses AWS CloudFormation to deploy a serverless application. The application uses Amazon API Gateway, Amazon DynamoDB, and AWS Lambda. Which AWS service or tool should the developer use to define serverless resources in YAML?

A company wants to securely store documents uploaded by customers on Amazon S3 with encryption at rest. A Developer needs to choose an encryption strategy allowing the company to maintain control over its encryption keys following industry regulations. However, the company does not want to manage the security infrastructure in-house. Which encryption strategy should a Developer use to meet these requirements?

A developer wants to update the code for a Lambda function and test it by routing a small portion of traffic to a new version. He'll gradually increase the traffic over time. It is essential to be able to roll back if there are any issues reported. What is the most effective way to SAFELY accomplish this goal?

A developer is building a Docker application on Amazon ECS that will use an Application Load Balancer (ALB). Where should the developer configure the setting where he specifies the port mapping between the host and container ports?

A Developer is creating an application that uses Amazon EC2 instances and must be highly available and fault tolerant. How should the Developer configure the VPC?

Which AWS service can assist the Developers with automating the build, test, and deploy phases of the release process every time there is a code change?

A company runs an application on a fleet of web servers running on Amazon EC2 instances. The web servers are behind an Elastic Load Balancer (ELB) and use an Amazon DynamoDB table for some statistical data. The data is analyzed soon after it is written to the database and is not required after 24 hours. What is the EASIEST method to remove stale data and optimize database size?

A company needs to provide a developer access to some AWS resources for one week. Which element of an IAM policy statement can be used to allow access only on or before a specific date?

An application uses Lambda functions to extract metadata from files uploaded to an S3 bucket; the metadata is stored in Amazon DynamoDB. The application starts behaving unexpectedly, and the developer wants to examine the logs of the Lambda function code for errors. Based on this system configuration, where would the developer find the logs?

A company needs to provide additional security for their APIs deployed on Amazon API Gateway. They would like to be able to authenticate their customers with a token. What is the SAFEST way to do this?

A Developer has completed some code updates and needs to deploy the updates to an Amazon Elastic Beanstalk environment. The developer needs to perform the deployment with a minimal outage and should only use existing instances to retain the application access log. What deployment policy would satisfy these requirements?

A developer is designing an AWS Lambda function that creates temporary files of less than 10 MB during invocation. The temporary files will be accessed and modified multiple times during invocation. The developer does not need to save or retrieve these files in the future. Where should the temporary files be stored?

A company requires a solution to collect and process a massive volume (terabytes) of data from many sources distributed across various locations. The data is delivered continuously, 24 hours a day, and needs to be processed in real-time for security analysis and live operational dashboards. Which approach will meet these requirements?

A company is migrating an application from a monolithic architecture to a microservices-based architecture, and the developers need to refactor the application to allow many microservices to communicate with each other asynchronously in a decoupled way. Which AWS services can be used for asynchronous message passing? (Select TWO.)

An application that requires sub-millisecond latency for processing trading requests uses Amazon DynamoDB to store the trading data. During load testing, the Development team found that the latency is too high in periods of high utilization, and read capacity must be significantly over-provisioned to avoid throttling. How can the Developers meet the latency requirements of the application?

A Developer needs to capture information about the IP traffic that enters and leaves the network interfaces in a VPC. The application is hosted on an Auto Scaling group of EC2 instances with an Elastic Load Balancer. How can the Developer achieve this task?

The Development team is responsible for a hybrid cloud environment composed of EC2 instances and an on-premise server. The application hosted on the EC2 instances depends on the on-premises application for proper functioning. In case of any application errors, the developer wants to be able to use Amazon CloudWatch to monitor and troubleshoot all applications from one place. How can the Development team collect this information MOST efficiently?

An application performs a scan on an Amazon DynamoDB table once per day during non-peak hours. This operation generates a report. How can you MINIMIZE the time it takes to produce the report without affecting production workloads? (Select TWO.)

Your company’s security team would like to gain visibility into user activity by recording API calls made within the company’s AWS account (all AWS regions). The information that is logged must be encrypted. How will you implement this request? (Select TWO)

What is the optimal approach for securely granting temporary access to a developer who has a user account in the Development AWS account, allowing them to make modifications to resources within the Production AWS account?

A Developer wants to publish a website running on a single Amazon EC2 instance on the Internet, and it requires ongoing connectivity, even if the instance restarts. To do that, he is creating an A record on Amazon Route 53 for the website’s public DNS name. What IP address MUST the developer assign to the EC2 instance and use in the A record?

An Amazon DynamoDB table uses a Global Secondary Index (GSI) to support read queries. The primary table is extremely write-intensive. Looking at Amazon CloudWatch metrics, the Developer notices that write operations to the primary table are throttled frequently under heavy write activity. However, the write capacity units on the primary table are not fully utilized. Why is the table being throttled?

A Development team needs to deploy some code updates to an AWS Elastic Beanstalk environment. The business SLA states that the application must maintain full performance capabilities during updates whilst minimizing cost. Which deployment policy should the Developer team choose?

A company runs a custom application on a set of on-premises Linux servers accessed using Amazon API Gateway. AWS X-Ray tracing has been enabled on the API test stage. How can a developer enable X-Ray tracing on the on-premises servers with the LEAST amount of configuration?

What is the BEST way to grant permissions to authenticate to AWS services for an on-premise application server that needs to connect with multiple AWS services?

An Amazon Kinesis Data Stream with six shards is set up to ingest a maximum of 2000 records per second. In which order will these records be processed by a Lambda function configured to process them?

A Developer is creating an AWS Lambda function that generates a new file each time it runs. Each new file must be checked into an AWS CodeCommit repository hosted in the same AWS account. How should the Developer accomplish this?

A Developer is creating multiple AWS Lambda functions that will be using an external library not included in the standard Lambda libraries. What is the BEST way to make these libraries available to the functions?

We want to apply encryption to an Amazon RDS MySQL for all new and existing data. How can we do that?

The AWS Lambda function downloads a 50MB file from an object storage system whenever it is invoked. This implementation slows down the function's completion and causes intermittent timeouts, negatively impacting the application's performance. What changes can be made to the application's design to resolve the timeout?

What is the SIMPLEST way to secure the database connection string and enable automatic rotation every 30 days for an application that utilizes AWS Lambda and an Amazon RDS database?

A company with read-heavy workloads is migrating an on-premises database to Amazon RDS for MySQL. The company wants to refactor the code to achieve optimum read performance for queries. Which solution will meet this requirement with the LEAST current and future effort?

A developer has written an AWS Lambda function. The function is CPU-bound. The developer wants to ensure that the function returns responses quickly. How can the developer improve the function's performance?

What are the allowed build phase names in a buildspec.yml file?

A DynamoDB table is used to store order information for a busy online store and uses the order date as the partition key. During busy periods writes to the table are being throttled despite the consumed throughput being well below the provisioned throughput. According to AWS best practices, how can the Developer resolve the issue at the LOWEST cost?

A Developer has created a software package on his on-premise system using a third-party tool. This package is stored in a local file system and needs to be deployed to Amazon EC2 instances. How can the developer deploy the software onto the EC2 instances?

When deploying an Amazon EC2 update with AWS CodeDeploy, which of the following represents a valid structure for the hooks order in the appspec.yml file?

A database solution that uses Amazon ElastiCache as caching layer must provide strong consistency to ensure that updates to product data are consistent between the backend database and the ElastiCache cache. Which cache writing policy will satisfy these requirements considering that low latency performance is required for all items in the database?

When deploying an Amazon ECS with AWS CodeDeploy, which of the following represents a valid structure for the hooks order in the appspec.yml file?

A Developer is configuring a code update to Amazon ECS using AWS CodeDeploy. The Developer needs to complete the code update quickly. Which of the following deployment types should the Developer use?

An application runs on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB). AWS WAF is being used to protect against SQL injection attacks, but some security logs revealed an external malicious IP that must be blocked from accessing the website. How can we do it?

Where should an Elastic Beanstalk configuration file named healthcheckur1.config be placed in the application source bundle?

The average DynamoDB table’s item size is 7KB. An application will make three strongly consistent reads/sec and one standard write/sec. How many RCUs/WCUs are required?

Which actions should a developer take to address the slow processing of records in an AWS Lambda function that processes data from an Amazon Kinesis data stream? The developer has observed that the iterator age metric for the function is increasing, and the Lambda run duration is constantly above normal. (Choose two.)

A retail company with many stores and warehouses is implementing IoT sensors to gather monitoring data from devices in each location. The data will be sent to AWS in real-time. We must provide a solution that ensures that the events are received for each device, and the data is saved for future processing. Which solution would be MOST efficient?

A company has an image storage web application that runs on AWS. The company hosts the application on Amazon EC2 instances in an Auto Scaling group. The Auto Scaling group acts as the target group for an Application Load Balancer (ALB) and uses an Amazon S3 bucket to store the images for sale. The company wants to develop a feature to test system requests. The feature will direct requests to a separate target group that hosts a new beta version of the application. Which solution will meet this requirement with the LEAST effort?

A developer is creating an AWS Lambda function that needs credentials to connect to an Amazon RDS for MySQL database. An Amazon S3 bucket currently stores the credentials. The developer needs to improve the existing solution by implementing credential rotation every 30 days and secure storage. The developer also needs to provide integration with the Lambda function. Which solution should the developer use to store and retrieve the credentials with the LEAST management overhead?

A company is implementing an application on Amazon EC2 instances. The application needs to process incoming transactions. When the application detects a transaction that is not valid, the application must send a chat message to the company's support team. To send the message, the application needs to retrieve the access token to authenticate by using the chat API. A developer needs to implement a solution to store the access token. The access token must be encrypted at rest and in transit. The access token must also be accessible from other AWS accounts. Which solution will meet these requirements with the LEAST management overhead?

A developer is creating a cloud-based application that allows users to store images from their phones. The application should be able to support thousands of users, and the developer has decided to use an Amazon API Gateway REST API that is integrated with AWS Lambda to process the photos. Details about the images will be stored in Amazon DynamoDB. Users must create an account to access the application and should be able to upload and retrieve previously uploaded photos, with image sizes ranging from 300 KB to 5 MB. Which solution will meet these requirements with the LEAST operational overhead?

For legal reasons, a financial company must store original customer records (containing personally identifiable information (PII)) for ten years. According to local regulations, PII is available to only certain people in the company and must not be shared with third parties. The company needs to make the records available to third-party organizations for statistical analysis without sharing the PII. A developer wants to store the original immutable record in Amazon S3. Depending on who accesses the S3 document, the document should be returned as is or with all the PII removed. The developer has written an AWS Lambda function (removePii) to remove the PII from the document. What should the developer do so that the company can meet the PII requirements while maintaining only one copy of the document?

A static website is required to use the zone apex of a DNS domain (e.g., fullcertified.com). Which steps should we take to implement a scalable and cost-effective solution using the Amazon Route 53 service? (Select TWO)

A company that receives food orders from multiple partners has a microservices application that uses Amazon API Gateway APIs with AWS Lambda integration. Each partner sends orders by calling a customized API exposed through API Gateway. The API call invokes a shared Lambda function to process the orders. Partners need to be notified after the Lambda function processes the orders. Each partner must receive updates for only its orders. The company wants to add new partners in the future with the fewest code changes possible. Which solution will meet these requirements in the MOST scalable way?