AWS Developer Associate Exam Questions Dumps Free

AWS Developer - Associate Exam Dumps

Domain	Weightage%
Domain 1: Development with AWS Services	32%
Domain 2: Security	26%
Domain 3: Deployment	24%
Domain 4: Troubleshooting and Optimization	18%

1 / 65

1. A developer wants to deploy an AWS Serverless Application Model (AWS SAM) application with the AWS SAM CLI. The developer is using the AWS CLI in an AWS Cloud9 environment for deployment and has run the sam build command to prepare the application for deployment. The next day, the developer connects to the same AWS Cloud9 environment and attempts to deploy the application. The sam deploy command returns the following error:

Invalid (or missing) template file (path must be workspace-relative, or absolute)

How can the developer resolve this error?

A) Rename the template.yaml file that was created by the sam build command to deploy.yaml.

B) Place the template.yaml file that was created by the sam build command into the .deploy directory.

C) Change the working directory to the root of the AWS SAM application.

D) Reinitialize the AWS SAM application with the sam init comment.

2 / 65

2. A developer migrates a web application from an on-premises data center to the AWS Cloud. Authenticated customers use the application from many different clients simultaneously, including laptops, smartphones, and tablets. The application runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an Amazon EC2 Auto Scaling group. Upon initial testing, users report that they have to reenter information when they use the web application on their laptops and then switch to using their smartphones.

Which solution will make the session state information persist across devices?

A) Implement sticky sessions at the Application Load Balancer.

B) Store session state information in an Amazon ElastiCache for Redis cluster.

C) Implement session state information storage in a local file on the webserver.

D) Store session state information in AWS Systems Manager State Manager.

3 / 65

3. A user wants to launch an EC2 Instance for testing and tries to create a new EC2 Key pair also with name "test." But the test key pair is already present. What among the following options can happen?

A) The user will get an exception

B) It will override the existing the key pair

C) Key pairs cannot be created using AWS SDK

D) You can create multiple key-pair using the same name

4 / 65

4. A developer tests code running on the developer's laptop. The code is using the AWS SDK for Python (Boto3) to access AWS services. The .aws/credentials file is set up with the user's IAM user name and password. The developer runs the code and receives this error message:

An error occurred (InvalidAccessKeyId)

Which action will resolve this error?

A) Move the IAM user name and password to the .aws/config file.

B) Place the Amazon Resource Name (ARN) of a valid IAM role in the AWS_PROFILE environment variable.

C) Move the user name and password to environment variables.

D) Replace the IAM user name and password with an access key ID and a secret access key.

5 / 65

5. What can be used in DynamoDB as a part of the Query API call for the filtration of results based on the primary keys’ values? Choose an answer from the options below

A) Expressions

B) Conditions

C) Query API

D) Scan API

6 / 65

A developer writes an AWS Lambda function in Java that calls a third-party API by using an API key. The developer must keep the API key encrypted and secure from casual observation. The API key can change over time.

How can the developer meet these requirements in the MOST operationally efficient manner?

A) Store the API key directly in the Lambda function’s program code.

B) Store the API key in a file on an Amazon Elastic Block Store (Amazon EBS) volume. Include code to read the file when the Lambda function starts.

C) Store the API key in a property file that is deployed with the Java archive. Include code to read the property file when the Lambda function starts.

D) Store the API key as a secure string in the AWS Systems Manager Parameter Store. Include code to read the parameter when the Lambda function starts.

7 / 65

7. As an API developer, you have just configured an API with the AWS API gateway service. You are testing out the API and getting the below response whenever an action is made to an undefined API resource.
{ “message”: “Missing Authentication Token” }
You want to customize the error response and make it more user-readable. How can you achieve this?

A) By setting up the appropriate method in the API gateway

B) By setting up the appropriate method integration request in the API gateway

C) By setting up the appropriate gateway request in the API gateway

D) By setting up the appropriate gateway response in the API gateway

8 / 65

8. A developer is building a web application that uses Amazon API Gateway. The developer wants to maintain different environments for development (dev) and production (prod) workloads. The API will be backed by an AWS Lambda function with two aliases: one for dev and one for prod. How can the developer maintain these environments with the LEAST amount of configuration?

A) Create a REST API for each environment. Integrate the APIs with the corresponding dev and prod aliases of the Lambda function. Deploy the APIs to their respective stages. Access the APIs by using the stage URLs.

B) Create one REST API. Integrate the API with the Lambda function by using a stage variable in place of an alias. Deploy the API to two different stages: dev and prod. Create a stage variable in each stage with different aliases as the values. Access the API by using the different stage URLs.

C) Create one REST API. Integrate the API with the dev alias of the Lambda function. Deploy the API to the dev environment. Configure a canary release deployment for the prod environment where the canary will integrate with the Lambda prod alias.

D) Create one REST API. Integrate the API with the prod alias of the Lambda function. Deploy the API to the prod environment. Configure a canary release deployment for the dev environment where the canary will integrate with the Lambda dev alias.

9 / 65

9. Each time a developer publishes a new version of an AWS Lambda function, all the dependent event source mappings need to be updated with the reference to the new version’s Amazon Resource Name (ARN). These updates are time consuming and error-prone.

Which combination of actions should the developer take to avoid performing these updates when publishing a new Lambda version? (Select TWO.)

A) Update event source mappings with the ARN of the Lambda layer.

B) Point a Lambda alias to a new version of the Lambda function.

C) Create a Lambda alias for each published version of the Lambda function.

D) Point a Lambda alias to a new Lambda function alias.

E) Update the event source mappings with the Lambda alias ARN.

10 / 65

10. A company maintains an application responsible for processing several thousand external
callbacks each day. The company's System administrators want to know how many callbacks are being received on a rolling basis, and they want this data available for 10 days. The company also wants the ability to issue automated alerts if the number of callbacks exceeds the defined thresholds.
What is the MOST cost-effective way to address the need to track and alert on these statistics?

A) Push callback data to an Amazon RDS database that can be queried to show historical data and to alert on exceeded thresholds.

B) Push callback data to AWS X-Ray and use AWS Lambda to query, display, and alert on exceeded thresholds.

C) Push callback data to Amazon Kinesis Data Streams and invoke an AWS Lambda function that stores data in Amazon DynamoDB and sends the required alerts.

D) Push callback data to Amazon CloudWatch as a custom metric and use the CloudWatch alerting mechanisms to alert System Administrators.

11 / 65

11.

A developer needs to query a relational database from an AWS Lambda function. The Lambda function will be called frequently. The developer needs to avoid the latency introduced by the initial JDBC connection to the database in subsequent invocations of the Lambda function.

How can the developer ensure the database connection is reused by Lambda?

A) Initialize the database connection outside the Lambda function code as a Lambda function environment variable.

B) Initialize the database connection within the Lambda function code but outside the handler method.

C) Store the database connection string in AWS Systems Manager Parameter Store. Ensure the Lambda function handler initializes the database connection within the handler method.

D) Store the database connection string in the Lambda function code. Ensure the function handler initializes the database connection within the handler method.

12 / 65

12. A developer has written several custom applications that read and write to the same Amazon DynamoDB table. Each time the data in the DynamoDB table is modified, this change should be sent to an external API.

Which combination of steps should the developer perform to accomplish this task? (Select TWO.)

A) Configure an AWS Lambda function to poll the stream and call the external API.

B) Configure an event in Amazon EventBridge (Amazon CloudWatch Events) that publishes the change to an Amazon Managed Streaming for Apache Kafka (Amazon MSK) data stream.

C) Create a trigger in the DynamoDB table to publish the change to an Amazon Kinesis data stream.

D) Deliver the stream to an Amazon Simple Notification Service (Amazon SNS) topic and subscribe the API to the topic.

E) Enable DynamoDB Streams on the table.

13 / 65

13.

A developer has recently completed a new version of a serverless application that is ready to be deployed using AWS SAM. There is a requirement that the traffic should shift from the previous Lambda function to the new version in the shortest time possible, but you still don’t want to shift traffic all-at-once immediately.

Which deployment configuration is the MOST suitable one to use in this scenario?

A) CodeDeployDefault.HalfAtATime

B) CodeDeployDefault.LambdaLinear10PercentEvery1Minute

C) CodeDeployDefault.LambdaLinear10PercentEvery2Minutes

D) CodeDeployDefault.LambdaCanary10Percent5Minutes

14 / 65

14. According to best practice, how should access keys be managed in AWS? (Choose two.)

A) Use the same access key in all applications for consistency.

B) Delete all access keys for the account root user.

C) Leave unused access keys in the account for tracking purposes.

D) Embed and encrypt access keys in code for continuous deployment.

E) Use Amazon IAM roles instead of access keys where possible.

15 / 65

15. A software development team is working on a web application that consists of front-end and back-end components. They want to automate the process of building, testing, and deploying their application using AWS services.
Which stage in the AWS CodePipeline would typically be responsible for running unit tests and integration tests to ensure the quality of the application before deployment?

A) Source Stage

B) Build Stage

C) Test Stage

D) Deploy Stage

16 / 65

16. A developer builds an application that uses the AWS SDK for Python (Boto3) to query an Amazon DynamoDB table. When the application is tested on an Amazon EC2 instance, the application returns this error message:

"An error occurred (AccessDenied) when calling the operation"

The EC2 instance is associated with an existing IAM role named myRole.

Which set of actions would resolve this error?

A) Create a new IAM role with the necessary Amazon DynamoDB permissions. Attach this IAM role as an additional role on the EC2 instance.

B) Create a new IAM policy with the necessary Amazon DynamoDB permissions. Attach this policy to the myRole IAM role.

C) Run the aws sts assume-role command by using the myRole Amazon Resource Name (ARN). Obtain the access key ID and the secret access key from the output. Run the aws configure command to store these values on the EC2 instance.

D) Query http://169.254.169.254/latest/meta-data/iam/security-credentials/myRole to obtain the access key ID and the secret access key. Run the aws configure command to store these values on the EC2 instance.

17 / 65

17. A company has an inventory system that receives sporadic inventory updates from a fulfillment system in the form of large JSON files. While many files can be sent in a short time period, days can pass when no files are sent. The company wants to process these files as soon as they arrive.

Which solution will meet these requirements?

A) Send the JSON files to Amazon Elastic File System (Amazon EFS). Configure an AWS Lambda function with an Amazon EFS event source to process the files.

B) Send the JSON files to Amazon Elastic File System (Amazon EFS). Schedule an AWS Lambda function to process the files once each hour.

C) Send the JSON files to an Amazon S3 bucket. Configure an AWS Lambda function with an S3 event source to process the S3 objects.

D) Send the JSON files to an Amazon S3 bucket. Schedule an AWS Lambda function to process the S3 objects once each hour.

18 / 65

18. Which of the below functions is used in Cloudformation to retrieve an object from a set of objects? Choose an answer from the options below

A) Fn::GetAtt

B) Fn::Combine

C) Fn::Join

D) Fn::Select

19 / 65

19. A company is migrating a legacy application to Amazon EC2 instances. The application uses a user name and password that are stored in the source code to connect to a MySQL database. The company will migrate the database to an Amazon RDS for MySQL DB instance. As part of the migration, the company needs to implement a secure way to store and automatically rotate the database credentials. Which solution will meet these requirements?

A) Store the database credentials in environment variables in an Amazon Machine Image (AMI). Rotate the credentials by replacing the AMI.

B) Store the database credentials in AWS Systems Manager Parameter Store. Configure Parameter Store to automatically rotate the credentials.

C) Store the database credentials in environment variables on the EC2 instances. Rotate the credentials by relaunching the EC2 instances.

D) Store the database credentials in AWS Secrets Manager. Configure Secrets Manager to automatically rotate the credentials.

20 / 65

20. Your team has currently developed an application using Docker containers. As the development lead, you now need to host this application in AWS. You also need to ensure that the AWS service has orchestration services built-in. Which of the following can be used for this purpose?

A) Consider building a Kubernetes cluster on EC2 Instances

B) Consider building a Kubernetes cluster on your on-premise infrastructure

C) Consider using the Elastic Container Service

D) Consider using the Simple Storage service to store your docker containers

21 / 65

21. A company is writing a Lambda function that will run in multiple stages, such a dev, test, and production. The function is dependent upon several external services, and it must call different endpoints for these services based on the function’s deployment stage.
What Lambda feature will enable the developer to ensure that the code references the correct endpoints when running in each stage?

A) Tagging

B) Concurrency

C) Aliases

D) Environment variables

22 / 65

22. A company notices performance degradation in one of its production web applications. The application is running on AWS services and uses a microservices architecture. The company suspects that one of these microservices is causing the performance issue.

Which AWS solution should the company use to identify the service that is contributing to higher application latency?

A) AWS X-Ray service map

B) AWS CloudTrail event history

C) Amazon EventBridge (Amazon CloudWatch Events) events

D) AWS Trusted Advisor performance report

23 / 65

23. A developer is working on an ecommerce website. The developer wants to review server logs without logging in to each of the application servers individually. The website runs on multiple Amazon EC2 instances, is written in Python, and needs to be highly available.
How can the developer update the application to meet these requirements with MINIMUM changes?

A) Rewrite the application to be cloud native and to run on AWS Lambda where the logs can be reviewed in Amazon CloudWatch.

B) Set up centralized logging by using Amazon Elasticsearch Service (Amazon ES), Logstash, and Kibana

C) Scale down the application to one larger EC2 instance where only one instance is recording logs.

D) Install the unified Amazon CloudWatch agent on the EC2 instances. Configure the agent to push the application logs to CloudWatch.

24 / 65

24.

A company runs continuous integration/continuous delivery (CI/CD) pipeline for its application on AWS CodePipeline. A developer must write unit tests and run them as part of the pipelines before staging the artifacts for testing.
How should the Developer incorporate unit tests as part of CI/CD pipeline?

A) Create a separate codePipline pipline to run unit tests.

B) Update the AWS codeBuild build specification to include a phase for running unit tests.

C) Install the AWS CodeDeploy agent on an Amazon EC2 instance to run unit tests.

D) Create a testing branch in AWS CodeCommit to run unit tests.

25 / 65

25. A developer is creating a serverless web application and maintains different branches of code The developer wants to avoid updating the Amazon API Gateway target endpoint each time a new code push is performed What solution would allow me developer to perform a code push efficiently, without the need to update the API Gateway?

A) Associate different AWS Lambda functions to an API Gateway target endpoint

B) Create different stages in API Gateway, then associate API Gateway with aws Lambda

C) Create aliases and versions In AWS Lambda.

D) Tag the AWS Lambda functions with different names

26 / 65

26.

A programmer is developing a Node.js application that will be run on a Linux server in their on-premises data center. The application will access various AWS services such as S3, DynamoDB, and ElastiCache using the AWS SDK.

Which of the following is the MOST suitable way to provide access for the developer to accomplish the specified task?

A) Create an IAM role with the appropriate permissions to access the required AWS services. Assign the role to the on-premises Linux server.

B) Go to the AWS Console and create a new IAM user with programmatic access. In the application server, create the credentials file at ~/.aws/credentials with the access keys of the IAM user.

C) Create an IAM role with the appropriate permissions to access the required AWS services and assign the role to the on-premises Linux server. Whenever the application needs to access any AWS services, request temporary security credentials from STS using the AssumeRole API.

D) Go to the AWS Console and create a new IAM User with the appropriate permissions. In the application server, create the credentials file at ~/.aws/credentials with the username and the hashed password of the IAM User.

27 / 65

27.

A company is developing a Python application that submits data to an Amazon DynamoDB table. The company requires client-side encryption of specific data items and end-to-end protection for the encrypted data in transit and at rest.

Which combination of steps will meet the requirement to encrypt specific data items? (Select TWO.)

A) Generate symmetric encryption keys with AWS Key Management Service (AWS KMS).

B) Generate asymmetric encryption keys with AWS Key Management Service (AWS KMS).

C) Use generated keys with the DynamoDB Encryption Client.

D) Use generated keys to configure DynamoDB table encryption with AWS managed KMS keys.

E) Use generated keys to configure DynamoDB table encryption with AWS owned KMS keys.

28 / 65

28. A web application is uploading large files, which are over 4 GB in size, in an S3 bucket called http://data.tutorialsdojo.com every 30 minutes. You want to minimize the time required to upload each file. Which of the following should you do to minimize upload time?

A) Use the Multipart upload API.

B) Enable Transfer Acceleration in the bucket.

C) Use the BatchWriteItem API.

D) Use the Putltem API.

29 / 65

29. A developer configures AWS CodeDeploy to install an application on Amazon EC2 instances in an Amazon EC2 Auto Scaling group.

Where should the developer place the appspec.yml file?

A) In the root of the directory structure of the application's source code

B) Directly into the CodeDeploy console

C) In the .ebextensions folder in the application's source code

D) In the same Amazon S3 bucket as the application source code bundle

30 / 65

30. A software development team is using AWS services to automate their software release process. They have set up a CodePipeline to manage the build, test, and deployment stages of their application.
Which of the following statements best describes the purpose of AWS CodePipeline in this scenario?

A) CodePipeline is used to store and version control the source code of the application.

B) CodePipeline is used to monitor the performance of the application in production.

C) CodePipeline is used to automate the build, test, and deployment stages of the application.

D) CodePipeline is used to manage the configuration of the underlying cloud infrastructure.

31 / 65

31. Your application is developed to pick up metrics from several servers and push them off to CloudWatch. At times, the application gets client 429 errors. Which of the following can be done from the programming side to resolve such errors?

A) Use the AWS CLI instead of the SDK to push the metrics

B) Ensure that all metrics have a timestamp before sending them across

C) Use exponential backoff in your requests

D) Enable encryption for the requests

32 / 65

32. A developer is creating a web application that must give users the ability to post comments and receive feedback in near real time. Which solutions will meet these requirements? (Select TWO.)

A) Create an AWS AppSync schema and corresponding APIs. Use an Amazon DynamoDB table as the data store

B) Create a WebSocket API in Amazon API Gateway. Use an AWS Lambda function as the backend. Use an Amazon DynamoDB table as the data store.

C) Create an AWS Elastic Beanstalk application that is backed by an Amazon RDS database. Configure the application to allow long-lived TCP/IP sockets.

D) Create a GraphQL endpoint in Amazon API Gateway. Use an Amazon DynamoDB table as the data store.

E) Establish WebSocket connections to Amazon CloudFront. Use an AWS Lambda function as the CloudFront distribution’s origin. Use an Amazon Aurora DB cluster as the data store.

33 / 65

33. A development team is using AWS Elastic Beanstalk to deploy a two-tier application that consists of a load-balanced web tier and an Amazon RDS database tier in production. The team would like to separate the RDS instance from the Elastic Beanstalk.
How can this be accomplished?

A) Use the Elastic Beanstalk CLI to disassociate the database.

B) Use the AWS CLI to disassociate the database.

C) Change the deployment policy to disassociate the database.

D) Recreate a new Elastic Beanstalk environment without Amazon RDS.

34 / 65

34. An ecommerce company deploys more than 20 services behind Amazon API Gateway. The interaction between services is complex. Each service can potentially call several others, making performance issues and errors difficult to identify. Some individual API calls have experienced slow response times. The development team needs to quickly identify the underlying causes of the slowdowns.

Which approach would MOST quickly identify the underlying cause of performance issues?

A) Use Amazon CloudWatch metrics to find the service invocations with slow response times. Configure and use AWS X-Ray to examine these services to discover their performance issues.

B) Use AWS CloudWatch Logs to find the service invocations with slow response times. Use AWS CloudTrail to examine these services to discover their performance issues.

C) Configure and use AWS X-Ray to find the service invocations with slow response times. Use Amazon CloudWatch metrics and logs to examine these services to discover their performance issues.

D) Use AWS CloudTrail to find the service invocations with slow response times. Configure and use AWS X-Ray to examine these services to discover their performance issues.

35 / 65

35. A developer is adding Amazon ElastiCache for Memcached to a company's existing record storage application. The developer has decided to use lazy loading based on an analysis of common record handling patterns. Which pseudocode example will correctly implement lazy loading?

A) record_value = db.query("UPDATE Records SET Details = {1} WHERE ID == {0}", record_key, record_value) cache.set (record_key, record_value)

B) record_value = cache.get(record_key) if (record_value == NULL) record_value = db.query("SELECT Details FROM Records WHERE ID == {0}", record_key) cache.set (record_key, record_value)

C) record_value = cache.get (record_key) db.query("UPDATE Records SET Details = {1} WHERE ID == {0}", record_key, record_value)

D) record_value = db.query("SELECT Details FROM Records WHERE ID == {0}", record_key) if (record_value != NULL) cache.set (record_key, record_value)

36 / 65

36.

A developer is using Amazon DynamoDB to store application data . The developer wants to further improve application performance by reducing response limes for read and write operations.
Which DynamoDB feature should be used to meet these requirement?

A) Amazon DynamoDB Streams

B) Amazon DynamoDB Accelerator

C) Amazon DynamoDB global tables

D) Amazon DynamoDB transactions

37 / 65

37. A developer is using Amazon S3 as the event source that invokes a Lambda function when new objects are created in the bucket The event source mapping Information Is stored in the bucket notification configuration The developer is working with different versions of the Lambda function, and has a constant need to update notification configuration so that Amazon S3 invokes the correct version.
What is the MOST efficient and effective way to achieve mapping Between the S3 event and Lambda?

A) Use a different Lambda trigger

B) Use Lambda environment variables

C) Use a Lambda alias

D) Use Lambda tags.

38 / 65

38. A Developer is building a web application that uses Amazon API Gateway to expose an AWS Lambda function to process requests from clients. During testing, the Developer notices that the API Gateway times out even though the Lambda function finishes under the set time limit.

Which of the following API Gateway metrics in Amazon CloudWatch can help the Developer troubleshoot the issue? (Choose two.)

A) CacheHitCount

B) IntegrationLatency

C) CacheMissCount

D) Latency

E) Count

39 / 65

39. A developer needs to modify an application architecture to meet new functional requirements. Application data is stored in Amazon DynamoDB and processed for analysis in a rightly batch. The system analysts do not want to wait unit the next day to view the processed data and have asked to have it available in near-real time.

Which application architect pattern would enables the data to be processed as it is received?

A) Evert driven

B) Client served driven

C) Fan-out driven

D) Schedule driven

40 / 65

40. A company is using Amazon API Gateway for its REST APIs in an AWS account. A developer wants to allow only IAM users from another AWS account to access the APIs. Which combination of steps should the developer take to meet these requirements? (Select TWO.)

A) Create an IAM permission policy. Attach the policy to each IAM user. Set the method authorization type for the APIs to AWS_IAM. Use Signature Version 4 to sign the API requests.

B) Create an Amazon Cognito user pool. Add each IAM user to the user pool. Set the method authorization type for the APIs to COGNITO_USER_POOLS. Authenticate by using the IAM credentials in Amazon Cognito. Add the ID token to the request headers.

C) Create an Amazon Cognito identity pool. Add each IAM user to the identity pool. Set the method authorization type for the APIs to COGNITO_USER_POOLS. Authenticate by using the IAM credentials in Amazon Cognito. Add the access token to the request headers.

D) Create a resource policy for the APIs to allow access for each IAM user only

E) Create an Amazon Cognito authorizer for the APIs to allow access for each IAM user only. Set the method authorization type for the APIs to COGNITO_USER_POOLS.

41 / 65

41. A developer uses the AWS SDK for C++ to retrieve data from an Amazon DynamoDB table. The data is sometimes retrieved using a known key, and sometimes the key is not known, resulting in multiple items being returned. The developer wants to ensure the code returns only one item when retrieving data without keys.

Which DynamoDB setting will meet these requirements?

A) Set the parallel scan operation to 1.

B) Set the query filter expression to 1.

C) Set the scan limit parameter to 1.

D) Set the query page-size value to 1.

42 / 65

42. A developer is testing an application locally and has deployed the application to an AWS Lambda function. To avoid exceeding the deployment package size quota, the developer did not include the dependencies in the deployment file. When the developer tests the application remotely, the Lambda function does not run because of missing dependencies. Which solution will resolve this issue?

A) Use the Lambda console editor to update the code and include the missing dependencies.

B) Create an additional .zip file that contains the missing dependencies. Include the .zip file in the original Lambda deployment package.

C) Add references to the missing dependencies in the Lambda function's environment variables.

D) Create a layer that contains the missing dependencies. Attach the layer to the Lambda function.

43 / 65

43. A company developed a warehouse fulfillment application by using AWS Step Functions. The Step Functions activity workers run on tablets that warehouse employees use. Some long-running activities fail because of problems with individual tablets. These problems include loss of battery power. The application must re-assign interrupted activities to another worker as soon as possible. If an activity fails three times, the state machine should fail.

Which Step Functions configuration will meet these requirements?

A) Set the state machine's States.Timeout attribute to 30 seconds. Set the state machine's Retry.MaxAttempts attribute to 3.

B) Set the task's HeartbeatSeconds attribute to 30. Set the state machine's States.TaskFailed attribute to 3.

C) Set the task's TimeoutSeconds attribute to 30. Set the Retry.MaxAttempts attribute to 3.

D) Set the task's HeartbeatSeconds attribute to 30 seconds. Set the Retry.MaxAttempts attribute to 3.

44 / 65

44. An application will ingest data at a very high throughput from many sources and must store the data in an Amazon S3 bucket.
Which service would BEST accomplish this task?

A) Amazon Kinesis Firehose

B) Amazon S3 Acceleration Transfer

C) Amazon SQS

D) Amazon SNS

45 / 65

45. An administrator is getting an error while trying to create a new bucket in S3? You feel that bucket limit has been crossed. What is the bucket limit per account in AWS? Choose the correct answer from the options below

A) 100

B) 50

C) 150

D) 200

46 / 65

46.

To improve their information security management system (ISMS), a company recently released a new policy which requires all database credentials to be encrypted and be automatically rotated to avoid unauthorized access.

Which of the following is the MOST appropriate solution to secure the credentials?

A) Create a parameter to the Systems Manager Parameter Store using the PutParameter API with a type of SecureString.

B) Enable IAM DB authentication which rotates the credentials by default.

C) Create an IAM Role which has full access to the database. Attach the role to the services which require access.

D) Create a secret in AWS Secrets Manager and enable automatic rotation of the database credentials.

47 / 65

47. A developer is adding sign-up and sign-in functionality to an application. The application must make an API call to a custom analytics solution to log user sign-in events. Which combination of actions should the developer perform to meet these requirements? (Select TWO.)

A) Use Amazon Cognito to provide the sign-up and sign-in functionality

B) Use AWS Identity and Access Management (IAM) to provide the sign-up and sign-in functionality

C) Configure an AWS Config rule to make the API call when a user is authenticated.

D) Invoke an Amazon API Gateway method to make the API call when a user is authenticated

E) Invoke an AWS Lambda function to make the API call when a user is authenticated.

48 / 65

48. A developer is building a new application that transforms text files to .pdf files. A separate application writes the text files to a source Amazon S3 bucket. The new application must read the files as they arrive in Amazon S3 and must convert the files to .pdf files by using an AWS Lambda function. The developer has written an IAM policy to allow access to Amazon S3 and Amazon CloudWatch Logs. What should the developer do to ensure that the Lambda function has the correct permissions?

A) Create a Lambda execution role by using AWS Identity and Access Management (IAM). Attach the IAM policy to the role. Assign the Lambda execution role to the Lambda function.

B) Create a Lambda execution user by using AWS Identity and Access Management (IAM). Attach the IAM policy to the user. Assign the Lambda execution user to the Lambda function.

C) Create a Lambda execution role by using AWS Identity and Access Management (IAM). Attach the IAM policy to the role. Store the IAM role as an environment variable in the Lambda function.

D) Create a Lambda execution user by using AWS Identity and Access Management (IAM). Attach the IAM policy to the user. Store the IAM user credentials as environment variables in the Lambda function.

49 / 65

49. A developer built an application that stores data in an Amazon RDS Multi-AZ DB instance. The database performs reads and writes constantly and is responding slowly. The intensive read requests are received unpredictably several times each hour. The application cannot tolerate reading stale data. The developer must increase the retrieval speed for the intensive read requests.

Which strategy will meet these requirements?

A) Use an Amazon ElastiCache cluster with a write-through strategy. Configure the application to direct the intensive read operations to ElastiCache.

B) Use an Amazon DynamoDB Accelerator (DAX) cluster with a write-through strategy. Configure the application to direct the intensive read operations to the DAX cluster.

C) Configure the application to direct the intensive read operations to the Multi-AZ standby replica in the second Availability Zone.

D) Add an RDS read replica. Configure the application to direct the intensive read operations to the read replica.

50 / 65

50.

A developer works in an environment with multiple AWS accounts that have AWS Lambda functions processing the same 100 KB payloads. The developer wants to centralize the point of origin of the payloads to one account and have all the Lambda functions be invoked whenever the initiating event occurs in the parent account.
How can the developer design the workflow in the MOST efficient way, so all the multi- account Lambda functions get invoked when the event occurs?

A) Create a Lambda function in the parent account and use cross-account IAM roles with the AWS Security Token Service (AWS STS) AssumeRole API call to make AWS Lambda invoke the API call to invoke all the cross-account Lambda functions.

B) Subscribe all the multi-account Lambda functions to an Amazon SNS topic and make a SNS Publish API call with the payload to the SNS topic.

C) Set up an Amazon SQS queue with the queue policy permitting the ReceiveMessage action for multi-account Lambda functions. Then send the payload to the SQS queue using the sqs:SendMessage permission and poll the queue using multi-account Lambda functions.

D) Use a worker on an Amazon EC2 instance to poll for the payload event. Invoke all Lambda functions using the Lambda Invoke API after using cross-account IAM roles with the AWS Security Token Service (AWS STS) AssumeRole API call.

51 / 65

51. A developer wants to monitor invocations of an AWS Lambda function by using Amazon CloudWatch Logs. The developer added a number of print statements to the function code that write the logging information to the stdout stream. After running the function, the developer does not see any log data being generated.

Why does the log data NOT appear in the CloudWatch logs?

A) The log data is not written to the stderr stream.

B) Lambda function logging is not automatically enabled.

C) The execution role for the Lambda function did not grant permissions to write log data to CloudWatch Logs.

D) The Lambda function outputs the logs to an Amazon S3 bucket.

52 / 65

52. After launching an instance that you intend to serve as a NAT (Network Address Translation) device in a public subnet you modify your route tables to have the NAT device be the target of internet bound traffic of your private subnet. When you try and make an outbound connection to the Internet from an instance in the private subnet, you are not successful.
Which of the following steps could resolve the issue?

A) Attaching a second Elastic Network interface (ENI) to the NAT instance, and placing it in the private subnet

B) Attaching a second Elastic Network Interface (ENI) to the instance in the private subnet, and placing it in the public subnet

C) Disabling the Source/Destination Check attribute on the NAT instance

D) Attaching an Elastic IP address to the instance in the private subnet

53 / 65

53. A Lambda function processes data before sending it to a downstream service Each piece of data is approximately 1 MB in size After a security audit, the function t]is now required to encrypt the data before sending it downstream Which API call is required to perform the encryption?

A) Pass the data to the KMS ReEncrypi API for encryption

B) Use the KMS GenerateDataKey API to get an encryption key

C) Use the KMS GenerateDataKeyWithoutPlain.Text API to get an encryption key

D) Pass the data to KMS as part of the Encrypt API for encryption

54 / 65

54. A company hosts its web application backend on Amazon Elastic Container Service (Amazon ECS). The application's Amazon ECS tasks run behind an Application Load Balancer (ALB). The application supports three environments: production, testing, and development. The application uses the ALB to route traffic to the correct environment.

The company has configured three listener rules for the ALB to forward traffic to a different target group based on the port number (Port 80 for production target group, Port 8080 for testing target group, and Port 8081 for development target group).

The company decides to migrate the application backend to a serverless architecture by using an Amazon API Gateway API backed by AWS Lambda functions. The company plans to use the URI path pattern to access the desired environment instead of the port number. The company has created the Lambda functions for the application backend. Each Lambda function has three aliases (production, testing, and development).

Which option includes the next steps the company must take to complete the process?

A) Create an API Gateway API and configure the routes to use Lambda proxy integration. Target the corresponding Lambda function Amazon Resource Name (ARN) that is concatenated with the expression ${stageVariables.LambdaAlias}. Modify the Lambda resource-based policy by adding the permission lambda:InvokeFunction. Create production, testing, and development stages. Add the LambdaAlias stage variable to the corresponding stage.

B) Create an API Gateway API and configure the routes to use Lambda proxy integration. Target the corresponding Lambda function Amazon Resource Name (ARN) that is concatenated with the name of the Lambda alias. Modify the Lambda resource-based policy by adding the permission lambda:InvokeFunction. Create production, testing, and development stages. Add the LambdaAlias stage variable to the corresponding stage.

C) Create an API Gateway API and configure the routes to use Lambda proxy integration. Target the corresponding Lambda function Amazon Resource Name (ARN) that is concatenated with the expression ${stageVariables.LambdaAlias}. Modify the Lambda execution role by adding the permission apigateway:*. Create production, testing, and development stages. Add the LambdaAlias stage variable to the corresponding stage.

D) Create an API Gateway API and configure the routes with Lambda proxy integration. Target the corresponding Lambda function Amazon Resource Name (ARN) that is concatenated with the name of the Lambda alias. Modify the Lambda execution role by adding the permission apigateway:*. Create production, testing, and development stages. Add the LambdaAlias stage variable to the corresponding stage.

55 / 65

55.

A company has a REST application comprised of an Amazon API Gateway and several AWS Lambda functions. A developer is responding to an alert that the API Gateway's HTTP response error rate has unexpectedly increased. The developer must determine must which Lambda function is malfunctioning.
Which method would help the developer make this determination while minimizing delays?

A) Execute an Amazon Athena query against the API Gateway and Lambda execution logs.

B) Execute an Amazon CloudWatch Logs Insights query against the API Gateway and Lambda execution logs.

C) Download the API Gateway and Lambda execution logs from Amazon S3, and perform a line-by-line search against them.

D) Download the API Gateway and Lambda execution logs from Amazon CloudWatch Events, and perform line-by-line search against them.

56 / 65

56. A developer is creating a new application that will be accessed by users through an API created using Amazon API Gateway The users need to be authenticated by a third-party Security Assertion Markup Language (SAML) identity provider Once authenticated, users will need access to other AWS services such as Amazon S3 and Amazon DynamoDB

How can these requirements be met?

A) Use an Amazon Cognito user pool with SAML as the resource server

B) Use Amazon Cognito Identity pools with a SAML identity provider as one of the authentication providers

C) Use the AWS IAM service to provide the sign-up and sign-in functionality.

D) Use Amazon CloudFront signed URLs to connect with the SAML identity provider

57 / 65

57. A company uses an AWS Lambda function to call a third-party REST endpoint. Personally identifiable information (PII) is exposed upon a successful request. The third party that manages the REST endpoint requires the company to change the API key that the company uses to invoke the endpoint every 4 months.

The company retrieves the API key by calling an endpoint that the third party owns. The endpoint uses basic authentication (username and password). The new API key is available and active one month prior to the inactivation of the old API key. When the company retrieves the new API key, the company needs to store the key for use in future invocations of the REST endpoint. The company needs a secure solution that eliminates downtime while the company sets up the new API key.

Which solution will meet these requirements?

A) Store the API key in Parameter Store, a capability of AWS Systems Manager, as a SecureString. Configure rotation to obtain the new API key from the third party and to update the parameter value.

B) Store the API key in AWS Secrets Manager. Create a Lambda function to obtain the new API key from the third party. Configure rotation in Secrets Manager to use the Lambda function to obtain a new API key. Store the new API key in Secrets Manager. Configure rotation to occur every 4 months.

C) Store the API key in an Amazon DynamoDB table. Create a Lambda function to retrieve the new API key from the third party and to update the value in DynamoDB. Use an Amazon EventBridge (Amazon CloudWatch Events) schedule rule to invoke the Lambda function every 4 months.

D) Store the API key as a Lambda environment variable. Retrieve the new API key from the third party by using open source software. Manually update the Lambda environment variable.

58 / 65

58. In a multi-container Docker environment in AWS Elastic Beanstalk, what is required to configure container instances in the environment?

A) An Amazon ECS task definition

B) An Amazon ECS cluster

C) A Docker in an application package

D) A CLI for Elastic Beanstalk

59 / 65

59. You are using AWS SAM to define a Lambda function and configure CodeDeploy to manage deployment patterns. With the new Lambda function working as per expectation which of the following will shift traffic from the original Lambda function to the new Lambda function in the shortest time frame?

A) Canary10Percent5Minutes

B) Linear10PercentEvery10Minutes

C) Canary10Percent15Minutes

D) Linear10PercentEvery5Minute

60 / 65

60.

A developer is preparing a deployment package using AWS Cloud Formation. The package consists of two separate templates: one for the infrastructure and one for the application. The application has to be inside the VPC that is created from the infrastructure template
How can the application stack refer to the VPC created from the infrastructure template?

A) Use the Ret function to import the VPC into the application stack from the infrastructure template

B) Use the export flag in the infrastructure template, and then use the Fn::lmportValue function in the application template

C) Use the DependsOn attribute to specify that the application instance depends on the VPC in the application template

D) Use the Fn::GetAtt function to include the attribute of the VPC in the application template.

61 / 65

61. A company is working on a project to enhance its serverless application development process. The company hosts applications on AWS Lambda. The development team regularly updates the Lambda code and wants to use stable code in production.

Which combination of steps should the development team take to configure Lambda functions to meet both development and production requirements? (Select TWO.)

A) Create a new Lambda layer every time a new code release needs testing.

B) Create a new Lambda version every time a new code release needs testing.

C) Create two Lambda function aliases. Name one as Production and the other as Development. Point the Production alias to a production-ready Lambda layer Amazon Resource Name (ARN). Point the Development alias to the $LATEST layer ARN.

D) Create two Lambda function aliases. Name one as Production and the other as Development. Point the Production alias to a production-ready unqualified Amazon Resource Name (ARN) version. Point the Development alias to the $LATEST version.

E) Create two Lambda function aliases. Name one as Production and the other as Development. Point the Production alias to the production-ready qualified Amazon Resource Name (ARN) version. Point the Development alias to the variable LAMBDA_TASK_ROOT.

62 / 65

62. A developer wants to track the performance of an application that runs on a fleet of Amazon EC2 instances. The developer wants to view and track statistics, such as the average request latency and the maximum request latency, across the fleet. The developer wants to receive immediate notification if the average response time exceeds a threshold. Which solution will meet these requirements?

A) Configure a cron job on each EC2 instance to measure the response time and update a log file stored in an Amazon S3 bucket every minute. Use an Amazon S3 event notification to invoke an AWS Lambda function that reads the log file and writes new entries to an Amazon OpenSearch Service cluster. Visualize the results in OpenSearch Dashboards. Configure OpenSearch Service to send an alert to an Amazon Simple Notification Service (Amazon SNS) topic when the response time exceeds the threshold.

B) Configure the application to write the response times to the system log. Install and configure the Amazon Inspector agent on the EC2 instances to continually read the logs and send the response times to Amazon EventBridge (Amazon CloudWatch Events). View the metrics graphs in the EventBridge (CloudWatch Events) console. Configure an EventBridge (CloudWatch Events) custom rule to send an Amazon Simple Notification Service (Amazon SNS) notification when the average of the response time metric exceeds the threshold.

C) Configure the application to write the response times to a log file. Install and configure the Amazon CloudWatch agent on the EC2 instances to stream the application log to CloudWatch Logs. Create a metric filter of the response time from the log. View the metrics graphs in the CloudWatch console. Create a CloudWatch alarm to send an Amazon Simple Notification Service (Amazon SNS) notification when the average of the response time metric exceeds the threshold.

D) Install and configure AWS Systems Manager Agent (SSM Agent) on the EC2 instances to monitor the response time and send the response time to Amazon CloudWatch as a custom metric. View the metrics graphs in Amazon QuickSight. Create a CloudWatch alarm to send an Amazon Simple Notification Service (Amazon SNS) notification when the average of the response time metric exceeds the threshold.

63 / 65

63. A developer is working on an application that stores highly confidential data in a database. The developer must use AWS Key Management Service (AWS KMS) with envelope encryption to protect the data. How should the developer configure the data encryption to meet these requirements?

A) Encrypt the data by using a KMS key. Store the encrypted data in the database.

B) Encrypt the data by using a generated data key. Store the encrypted data in the database.

C) Encrypt the data by using a generated data key. Store the encrypted data and the data key ID in the database.

D) Encrypt the data by using a generated data key. Store the encrypted data and the encrypted data key in the database.

64 / 65

64. Which of the descriptions below best describes what the following bucket policy does?

{
“Version”:”2012-10-17″,
“Id”:”Statement1”,
“Statement”:[
{
“Sid”:” Statement2″,
“Effect”:”Allow”,
“Principal”:”*”,
“Action”:[
“s3:GetObject”,
“s3:PutObject”
],
“Resource”:”arn:aws:s3:::mybucket/*”,
“Condition”:{
“StringLike”:{
“aws:Referer”:[
“http://www.example.com/*”,
“http://www.demo.com/*”
]
}
}
}
]
}

A) It allows read or write actions on the bucket ‘mybucket’

B) It allows read access to the bucket ‘mybucket’ but only if it is accessed from example.com or demo.com

C) It allows unlimited access to the bucket ‘mybucket’

D) It allows read or write access to the bucket ‘mybucket’ but only if it is accessed from example.com or demo.com

65 / 65

65. A company has an application that uses Amazon Cognito user pools as an identity provider. The company must secure access to user records. The company I up multi-factor
authentication (MFA). The company also wants to send a login activity notification by email every time a user logs in.
What is the MOST operationally efficient solution that meets this requirement?

A) Create an AWS Lambda function that uses Amazon Simple Email Service (Amazon SES) to send the email notification. Add an Amazon API Gateway to invoke the function. Call the API from the client side when login confirmation is received.

B) Create an AWS Lambda function that uses Amazon Simple Email Service (Amazon SES) to send the email notification. Add an Amazon Cognito post authentication Lambda trigger for the function.

C) Create an AWS Lambda function that uses Amazon Simple Email Service (Amazon SES) to send the email notification. Create an Amazon CloudWatch Logs log subscription filter to invoke the function based on the login status.

D) Configure Amazon Cognito to stream all logs to Amazon Kinesis Data Firehose. Create an AWS Lambda function to process the streamed logs and it send the email notification based on the login status of each user.

Your score is

The average score is 43%