AWS-Certified-Developer-Associate Free Practice Test

- (Exam Topic 2)
A developer needs temporary access to resources in a second account What is the MOST secure way to achieve this?

1. A. Use the Amazon Cognito user pools to get short-lived credentials for the second account
2. B. Create a dedicated IAM access key for the second account, and send it by mail.
3. C. Create a cross-account access role, and use sts:AssumeRcie API to get short-lived credentials
4. D. Establish trust, and add an SSH key for the second account to the IAM user

Correct Answer: C
Reference: https://docs.aws.amazon.com/IAM/latest/UserGuide/tutorial_cross-account-with-roles.html

- (Exam Topic 1)
A Developer must re-implement the business logic for an order fulfilment system. The business logic has to make requests to multiple vendors to decide where to purchase an item. The whole process can take up to a week to complete.
What is the MOST efficient and SIMPLEST way to implement a system that meets these requirements?

1. A. Use AWS Step Functions to execute parallel Lambda functions, and join the results.
2. B. Create an AWS SQS for each vendor, poll the queue from a worker instance, and joint the results.
3. C. Use AWS Lambda to asynchronously call a Lambda function for each vendor, and join the results.
4. D. Use Amazon CloudWatch Events to orchestrate the Lambda functions.

Correct Answer: A
https://aws.amazon.com/step-functions/

- (Exam Topic 1)
A Developer has created a large Lambda function, and deployment is failing with the following error: ClientError: An error occurred (InvalidParameterValueException) when calling the CreateFunction operation: Unzipped size must be smaller than XXXXXXXXX bytes’, where XXXXXXXXX is the current Lambda limit
What can the Developer do to fix this problem?

1. A. Submit a limit increase request to AWS Support to increase the function to the size needed.
2. B. Use a compression algorithm that is more efficient than ZIP.
3. C. Break the function into multiple smaller Lambda functions.
4. D. ZIP the ZIP file twice to compress it further.

Correct Answer: C

- (Exam Topic 1)
A company developed a set of APIs that are being served through the Amazon API Gateway. The API calls need to be authenticated based on OpenID identity providers such as Amazon or Facebook. The APIs should allow access based on a custom authorization model.
Which is the simplest and MOST secure design to use to build an authentication and authorization model for the APIs?

1. A. Use Amazon Cognito user pools and a custom authorizer to authenticate and authorize users based on JSON Web Tokens.
2. B. Build a OpenID token broker with Amazon and Faceboo
3. C. Users will authenticate with these identifyproviders and pass the JSON Web Token to the API to authenticate each API call.
4. D. Store user credentials in Amazon DynamoDB and have the application retrieve temporary credentials from AWS ST
5. E. Make API calls by passing user credentials to the APIs for authentication and authorization.
6. F. Use Amazon RDS to store user credentials and pass them to the APIs for authentications and authorization.

Correct Answer: A

- (Exam Topic 4)
A banking application processes thousands of transactions each second. Each transaction payload must have end-to-end encryption. The application encrypts each transaction locally by using the AWS Key Management Service (AWS KMS) GenerateDataKey operation. A developer is testing the application and receives a Throttling Except ion error.
Which actions are best practices to resolve this error? (Select TWO.)

1. A. Use the LocalCryptoMaterialsCache feature of the AWS Encryption SDK encryption library.
2. B. Call the AWS KMS Encrypt operation directly to allow AWS KMS to encrypt the data.
3. C. Create a case in the AWS Support Center to increase the quota for the account.
4. D. Use Amazon Simple Queue Service (Amazon SQS) to queue the requests to AWS KMS.
5. E. Switch to an AWS KMS custom key store.

Correct Answer: AC
https://aws.amazon.com/premiumsupport/knowledge-center/kms-throttlingexception-error/