Pass AWS-Developer Brain Dump Updated Certification Sample Questions
Online AWS-Developer Test Brain Dump Question and Test Engine
NEW QUESTION # 34
A Developer is migrating an on-premises application to AWS. The application currently takes user uploads and saves them to a local directory on the server. All uploads must be saved and made immediately available to all instances in an Auto scaling group.
Which approach will meet these requirements?
- A. Use Amazon EBS and file synchronization software to achieve eventual consistency among the auto scaling group.
- B. Use Amazon S3 and rearchitect the application so all uploads are placed in S3.
- C. Use Amazon EBS and configure the application AMI to use a snapshot of the same EBS instance on boot.
- D. Use instance storage and share it between instances launched from the same Amazon machine image (AMI).
Answer: B
Explanation:
Explanation
Use Amazon S3 and rearchitect the application so all uploads are placed in S3. Even though you could do EBS attachment to ASG launch config userdata for ec2 instances going to serve , But you need to select the ASG in single AZ where your EBS is located otherwise it will not work since EBS is AZ locked.
NEW QUESTION # 35
A company needs a version control system for collaborative software development. Features of the system must include the following:
* Support for batches of changes across multiple files
* Parallel branching
* Version tracking
Which AWS service will meet these requirements?
- A. Amazon S3
- B. AWS Code Build
- C. AWS CodePipeline
- D. AWS CodeCommit
Answer: D
Explanation:
Explanation
https://docs.aws.amazon.com/codecommit/latest/userguide/welcome.html
NEW QUESTION # 36
A security engineer is designing an incident response plan to address the risk of a compromised Amazon EC2 instance. The plan must recommend a solution to meet the following requirements:
* A trusted forensic environment must be provisioned.
* Automated response processes must be orchestrated.
Which AWS services should be included in the plan? (Choose two.)
- A. Amazon GuardDuty
- B. Amazon Inspector
- C. AWS CloudFormation
- D. AWS Step Functions
- E. Amazon Macie
Answer: A,C
Explanation:
Explanation/Reference: https://aws.amazon.com/blogs/security/how-to-automate-incident-response-in-aws-cloud-for- ec2-instances/
NEW QUESTION # 37
A development team consists of 10 team members. Similar to a home directory for each team member the manager wants to grant access to user-specific folders in an Amazon S3 bucket. For the team member with the username "TeamMemberX", the snippet of the IAM policy looks like this:
Instead of creating distinct policies for each team member, what approach can be used to make this policy snippet generic for all team members?
- A. Use IAM policy variables
- B. Use IAM policy condition
- C. Use IAM policy resource
- D. Use IAM policy principal
Answer: A
Explanation:
Explanation
> https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_variables.html > Use AWS Identity and Access Management (IAM) policy variables as placeholders when you don't know the exact value of a resource or condition key when you write the policy.
NEW QUESTION # 38
A company is developing an application that will be accessed through the Amazon API Gateway REST API Registered users should be the only ones who can access certain resources of this API. The token being used should expire automatically and needs to be refreshed periodically.
How can a developer meet these requirements'?
- A. Create an IAM user for each API user, attach an invoke permissions policy to the API. and use an IAM authorizer in API Gateway.
- B. Create an Amazon Cognito user pool, configure the Cognito Authorizer in API Gateway, and use the identity or access token
- C. Create an Amazon Cognito identity pool, configure the Amazon Cognito Authorizer in API Gateway, and use the temporary credentials generated by the identity pool
- D. Create and maintain a database record for each user with a corresponding token and use an AWS Lambda authorizer m API Gateway
Answer: B
NEW QUESTION # 39
When using a large Scan operation in DynamoDB, what technique can be used to minimize the impact of a scan on a table's provisioned throughput?
- A. Define a range index on the table
- B. Use parallel scans
- C. Prewarm the table by updating all items
- D. Set a smaller page size for the scan
Answer: D
Explanation:
Explanation
https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/bp-query-scan.html Because a Scan operation reads an entire page (by default, 1 MB), you can reduce the impact of the scan operation by setting a smaller page size. The Scan operation provides a Limit parameter that you can use to set the page size for your request. Each Scan or Query request that has a smaller page size uses fewer read operations and creates a "pause" between each request. For example, if each item is 4 KB and you set the page size to 40 items, then a Query request would consume only 40 strongly consistent read operations or 20 eventually consistent read operations. A larger number of smaller Scan or Query operations would allow your other critical requests to succeed without throttling.
NEW QUESTION # 40
The Development team recently executed a database script containing several data definition language (DDL) and data manipulation language (DML) statements on an Amazon Aurora MySQL DB cluster. The release accidentally deleted thousands of rows from an important table and broke some application functionality. This was discovered 4 hours after the release. Upon investigation, a Database Specialist tracked the issue to a DELETE command in the script with an incorrect WHERE clause filtering the wrong set of rows.
The Aurora DB cluster has Backtrack enabled with an 8-hour backtrack window. The Database Administrator also took a manual snapshot of the DB cluster before the release started. The database needs to be returned to the correct state as quickly as possible to resume full application functionality. Data loss must be minimal.
How can the Database Specialist accomplish this?
- A. Quickly rewind the DB cluster to a point in time before the release using Backtrack.
- B. Perform a point-in-time recovery (PITR) of the DB cluster to a time before the release and copy the deleted rows from the restored database to the original database.
- C. Restore the DB cluster using the manual backup snapshot created before the release and change the application configuration settings to point to the new DB cluster.
- D. Create a clone of the DB cluster with Backtrack enabled. Rewind the cloned cluster to a point in time before the release. Copy deleted rows from the clone to the original database.
Answer: D
NEW QUESTION # 41
During non-peak hours, a Developer wants to minimize the execution time of a full Amazon DynamoDB table scan without affecting normal workloads. The workloads average half of the strongly consistent read capacity units during non-peak hours.
How would the Developer optimize this scan?
- A. Use parallel scans while limiting the rate
- B. Increase read capacity units during the scan operation
- C. Use sequential scans
- D. Change consistency to eventually consistent during the scan operation
Answer: A
Explanation:
https://aws.amazon.com/blogs/developer/rate-limited-scans-in-amazon-dynamodb/
NEW QUESTION # 42
A company is building an application to track athlete performance using an Amazon DynamoDB table. Each item in the table is identified by a partition key (user_id) and a sort key (sport_name).
The table design is shown below:
(Note: Not all table attributes are shown)
A Developer is asked to write a leaderboard application to display the top performers (user_id) based on the score for each sport_name.
What process will allow the Developer to extract results MOST efficiently from the DynamoDB table?
- A. Use a DynamoDB scan operation to retrieve scores and user_id based on sport_name, and order the results based on the score attribute.
- B. Create a local secondary index with a primary key of sport_name and a sort key of score and get the results based on the score attribute.
- C. Create a global secondary index with a partition key of sport_name and a sort key of score, and get the results
- D. Use a DynamoDB query operation with the key attributes of user_id and sport_name and order the results based on the score attribute.
Answer: C
Explanation:
https://docs.aws.amazon.com/zh_cn/amazondynamodb/latest/developerguide/GSI.html
NEW QUESTION # 43
An application running on Amazon EC2 opens connections to an Amazon RDS SQL Server database. The developer does not want to store the user name and password for the database in the code. The developer would also like to automatically rotate the credentials.
What is the MOST secure way to store and access the database credentials?
- A. Use AWS Secrets Manager to store the credentials. Retrieve the credentials from Secrets Manager as needed.
- B. Store the credentials in an encrypted text file in an Amazon S3 bucket. Configure the EC2 instance's user data to download the credentials from Amazon S3 as the instance boots.
- C. Create an IAM role that has permissions to access the database. Attach the role to the EC2 instance.
- D. Store the user name and password credentials directly in the source code. No further action is needed because the source code is stored in a private repository.
Answer: A
Explanation:
Explanation/Reference: https://aws.amazon.com/blogs/security/rotate-amazon-rds-database-credentials-automatically-with- aws-secrets-manager/
NEW QUESTION # 44
A company's fleet of Amazon EC2 instances receives data from millions of users through an API.
The servers batch the data, add an object for each user, and upload the objects to an S3 bucket to ensure high access rates. The object attributes are Customer ID, Server ID, TS-Server (TimeStamp and Server ID), the size of the object, and a timestamp. A Developer wants to find all the objects for a given user collected during a specified time range.
After creating an S3 object created event, how can the Developer achieve this requirement?
- A. Execute an AWS Lambda function in response to the S3 object creation events that creates an Amazon DynamoDB record for every object with the Customer ID as the partition key and the Server ID as the sort key. Retrieve all the records using the Customer ID and Server ID attributes.
- B. Execute an AWS Lambda function in response to the S3 object creation events that creates an Amazon Redshift record for every object with the Customer ID as the partition key and TS-Server as the sort key. Retrieve all the records using the Customer ID and TS-Server attributes.
- C. Execute an AWS Lambda function in response to the S3 object creation events that creates an Amazon Redshift record for every object with the Customer ID as the partition key and the Server ID as the sort key. Retrieve all the records using the Customer ID and Server ID attributes.
- D. Execute an AWS Lambda function in response to the S3 object creation events that creates an Amazon DynamoDB record for every object with the Customer ID as the partition key and TS- Server as the sort key. Retrieve all the records using the Customer ID and TS-Server attributes.
Answer: D
NEW QUESTION # 45
A company recently migrated its web, application and NoSQL database tiers to AWS. The company is using Auto Scaling to scale the web and application tiers. More than 95 percent of the Amazon DynamoDB requests are repeated read-requests.
How can the DynamoDB NoSQL tier be scaled up to cache these repeated requests?
- A. Amazon SQS
- B. Amazon DynamoDB Accelerator
- C. Amazon CloudFront
- D. Amazon EMR
Answer: B
Explanation:
Explanation/Reference: https://aws.amazon.com/dynamodb/dax/
NEW QUESTION # 46
- A. Include the AssumeRole API in the application code logic to obtain credentials to access the PlI table
- B. Ask an Administrator in Account A to allow the EG2 IAM role permission to assume the AccessPII role with predefined service control policies.
- C. An application running on Amazon EC2 instances in Account B requires access to the PII table. An administrators in Account A created an IAM role named AccessPII with privileges to access the PII table, and made account B a trusted entity.
Which combination of actional steps should Developers take to access the table? (Select TWO ) - D. Ask an Administrator in Account B to allow the EC2 IAM role permission to assume the AccessPII role
- E. Include the GetSession token API in the application code logic to obtain credentials to access the Pll table
- F. Ask an Administrator in Account B to allow the EC2 IAM role permission to assume the AccessPll role with predefined service control policies
Answer: E,F
NEW QUESTION # 47
Regarding Amazon SWF, at times you might want to record information in the workflow history of a workflow execution that is specific to your use case. _________ enable you to record information in the workflow execution history that you can use for any custom or scenario-specific purpose.
- A. Tags
- B. Markers
- C. Hash keys
- D. Events
Answer: B
Explanation:
In Amazon SWF, at times you might want to record information in the workflow history of a workflow execution that is specific to your use case. Markers enable you to record information in the workflow execution history that you can use for any custom or scenario-specific purpose.
http://docs.aws.amazon.com/amazonswf/latest/developerguide/swf-dg-adv.html
NEW QUESTION # 48
After restoring an Amazon RDS snapshot from 3 days ago, a company's Development team cannot connect to the restored RDS DB instance. What is the likely cause of this problem?
- A. The restored DB instance is using the default security group
- B. The restored DB instance does not have Enhanced Monitoring enabled
- C. The production DB instance is using a custom option group
- D. The production DB instance is using a custom parameter group
Answer: D
NEW QUESTION # 49
A company has a two-tier application running on an Amazon EC2 server that handles all of its AWS based e- commerce activity. During peak times, the backend servers that process orders are overloaded with requests.
This results in some orders failing to process. A developer needs to create a solution that will re-factor the application.
Which steps will allow for more flexibility during peak times, while still remaining cost-effective? (Choose two.)
- A. Use an Amazon SNS queue to decouple the front-end and backend servers.
- B. Implement an Amazon SQS queue to decouple the front-end and backend servers.
- C. Increase the backend T2 EC2 instance sizes to x1 to handle the largest possible load throughout the year.
- D. Migrate the backend servers to on-premises and pull from an Amazon SNS queue.
- E. Modify the backend servers to pull from an Amazon SQS queue.
Answer: B,E
Explanation:
Explanation/Reference:
NEW QUESTION # 50
A developer is creating an application that will store personal health information (PHI). The PHI needs to be encrypted at all times. An encrypted Amazon RDS for MySQL DB instance is storing the data. The developer wants to increase the performance of the application by caching frequently accessed data while adding the ability to sort or rank the cached datasets.
Which solution will meet these requirements?
- A. Create an Amazon DynamoDB table and a DynamoDB Accelerator (DAX) cluster for the table. Store frequently accessed data in the DynamoDB table.
- B. Create an Amazon ElastiCache for Memcached instance. Enable encryption of data in transit and at rest.
Store frequently accessed data in the cache. - C. Create an Amazon RDS for MySQL read replica. Connect to the read replica by using SSL. Configure the read replica to store frequently accessed data.
- D. Create an Amazon ElastiCache for Redis instance. Enable encryption of data in transit and at rest. Store frequently accessed data in the cache.
Answer: D
NEW QUESTION # 51
To scale up the AWS resources using manual AutoScaling, which of the below mentioned parameters should the user change?
- A. Preferred capacity
- B. Maximum capacity
- C. Desired capacity
- D. Current capacity
Answer: C
Explanation:
The Manual Scaling as part of Auto Scaling allows the user to change the capacity of Auto Scaling group. The user can add / remove EC2 instances on the fly. To execute manual scaling, the user should modify the desired capacity. AutoScaling will adjust instances as per the requirements. If the user is trying to CLI, he can use command as-set-desired-capacity <Auto Scaling Group Name> --desired-capacity <New Capacity>
http://docs.aws.amazon.com/AutoScaling/latest/DeveloperGuide/as-manual-scaling.html
NEW QUESTION # 52
An application under development is required to store hundreds of video files. The data must be encrypted within the application prior to storage, with a unique key for each video file.
How should the Developer code the application?
- A. Use a cryptography library to generate an encryption key for the application. Use the encryption key to encrypt the data. Store the encrypted data.
- B. Use the KMS Encrypt API to encrypt the data. Store the encrypted data key and data.
- C. Upload the data to an S3 bucket using server side-encryption with an AWS KMS key.
- D. Use the KMS GenerateDataKey API to get a data key. Encrypt the data with the data key. Store the encrypted data key and data.
Answer: D
Explanation:
Explanation
https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKey.html
NEW QUESTION # 53
EC2 instances are launched from Amazon Machine images (AMIS). A given public AMI can:
- A. only be used to launch EC2 instances in the same AWS region as the AMI is stored.
- B. be used to launch EC2 Instances in any AWS region.
- C. only be used to launch EC2 instances in the same AWS availability zone as the AMI is stored
- D. only be used to launch EC2 instances in the same country as the AMI is stored.
Answer: A
NEW QUESTION # 54
What are the two types of licensing options available for using Amazon RDS for Oracle?
- A. BYOL and Enterprise License
- B. Enterprise License and License Included
- C. BYOL and License Included
- D. Role based License and License Included
Answer: C
NEW QUESTION # 55
A developer is migrating to Amazon Cognito from a custom user management solution that stores user information in a database. The developer has created a...... Amazon Cognito user pool. The developer needs to migrate the existing user information to the user pool without forcing users to change their passwords.
Which solution will meet these requirements?
- A. Import users from a .json file.
- B. Import users with a user migration AWS Lambda trigger.
- C. Add an OpenID Connect (OIDC) identity provider to the user pool.
- D. Import users from a .csv file.
Answer: C
NEW QUESTION # 56
A user is creating a new EBS volume from an existing snapshot. The snapshot size shows 10 GB. Can the user create a volume of 30 GB from that snapshot?
- A. Provided the original volume has set the change size attribute to true
- B. Yes
- C. Provided the snapshot has the modify size attribute set as true
- D. No
Answer: B
Explanation:
A user can always create a new EBS volume of a higher size than the original snapshot size.
The user cannot create a volume of a lower size. When the new volume is created the size in the instance will be shown as the original size. The user needs to change the size of the device with resize2fs or other OS specific commands.
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-expand-volume.html
NEW QUESTION # 57
A user has configured ELB with two instances running in separate AZs of the same region?
Which of the below mentioned statements is true?
- A. Multi AZ instances will provide scalability with ELB
- B. Multi AZ instances will provide HA with ELB
- C. The user can achieve both HA and scalability with ELB
- D. Multi AZ instances are not possible with a single ELB
Answer: B
Explanation:
If a user is running two instances in separate AZs, it will provide HA with ELB since ELB will automatically stop routing the traffic to unhealthy instances and send it to healthy instances only.
NEW QUESTION # 58
......
Having an AWS-Certified-Developer-Associate certification can be beneficial for developers in several ways. It demonstrates to employers and clients that the developer has the necessary skills and knowledge to work with AWS. Additionally, certified developers may have access to more job opportunities and higher salaries. Finally, the certification can help developers stay up-to-date with the latest AWS technologies and best practices.
Real Amazon AWS-Developer Exam Dumps with Correct 67 Questions and Answers: https://www.validbraindumps.com/AWS-Developer-exam-prep.html
Amazon AWS-Developer Certification Real 2024 Mock Exam: https://drive.google.com/open?id=1S6mzWhEwbYViuKo_WnhBpbcrWKWUd9-P