AWS-Certified-Developer-Associate Free Practice Test

- (Exam Topic 3)
A company has a large number of documents that are stored securely in Amazon S3 The company is creating an application that occasionally will read these documents The application will be deployed on Amazon EC2 instances.
The company's security requirements mandate that no long-term credentials can be stored on the EC2 instances and that only the needed documents can be accessed Only authorized users and applications can access the documents access must be logged by Amazon S3, and each document must follow S3 Lifecycle policies for archival and destruction
What should a developer do to meet these requirements?

1. A. Create an event to invoke an AWS Lambda function when a document is uploaded Configure the function to write thedocuments to an Amazon Elastic File System (Amazon EFS) file system Configure the EC2 instances to mount the EFS file system Configure the application to access the documents that are stored m the file system as needed
2. B. Create a user that has programmatic credentials, and attach a policy that allows read access to the S3 bucket Use the AWS CLI to configure those credentials for the EC2 instances to use Create an Amazon Machine Image (AMI), and add the access key and secret access key to the user data section to create environment variables Use the AMI to launch each EC2 instance that runs the application Add application code to use the keys that are stored in the environment variables to access the S3 bucket objects as needed.
3. C. Modify the S3 bucket, make the bucket public, and make each object public Add application code to make REST calls to access the objects in the S3 bucket as needed
4. D. Create an IAM role with permissions to read objects from Amazon S3 Attach the role to the EC2 instances as an instance profile Add application code to access the objects in the S3 bucket as needed.

Correct Answer: D

- (Exam Topic 2)
A Development team wants to instrument their code to provide more detailed information to AWS X-Ray than simple outgoing and incoming requests. This will generate large amounts of data, so the Development team wants to implement indexing so they can filter the data.
What should the Development team do to achieve this?

1. A. Add annotations to the segment document and the code
2. B. Add metadata to the segment document and the code
3. C. Configure the necessary X-Ray environment variables
4. D. Install required plugins for the appropriate AWS SDK

Correct Answer: A
https://docs.aws.amazon.com/xray/latest/devguide/xray-sdk-python-segment.html https://docs.aws.amazon.com/xray/latest/devguide/xray-concepts.html#xray-concepts-annotations

- (Exam Topic 3)
A developer has created an AWS Lambda function that is written in Python The Lambda function reads data from objects in Amazon S3 and writes data to an Amazon DynamoDB table
The function is successfully invoked from an S3 event notification when an object is created However, the function fails when if attempts to write to the DynamoDB table
What is the MOST likely cause of this issue?

1. A. The Lambda function's concurrency limit has been exceeded
2. B. The DynamoDB table requires a global secondary index (GSI) to support writes.
3. C. The Lambda function does not have 1AM permissions to write to DynamoDB ID.
4. D. The DynamoDB table is not running in the same Availability Zone as the Lambda function.

Correct Answer: C

- (Exam Topic 1)
Which of the following are valid arguments for an SNS Publish request? Choose 3 answers

1. A. TopicAm
2. B. Subject
3. C. Destination
4. D. Format
5. E. Message
6. F. Language

Correct Answer: ABE
https://docs.aws.amazon.com/sns/latest/api/API_Publish.html Message
MessageAttributes MessageStructure PhoneNumber Subject
TargetArn TopicArn

- (Exam Topic 2)
An application running on Amazon EC2 opens connections to an Amazon RDS SQL Server database The developer does not want to store the user name and password for the database in the code. The developer would also like to automatically rotate the credentials.
What is the MOST secure way to store and access the database credentials?

1. A. Create an IAM role that has permissions to access the database Attach the role to the EC2 instance
2. B. Use AWS Secrets Manager to store the credential
3. C. Retrieve the credentials from Secrets Manager as needed
4. D. Store the credentials in an encrypted text file in an Amazon S3 bucket Configure the EC2 instance's user data to download the credentials from Amazon S3 as the instance boots
5. E. Store the user name and password credentials directly in the source cod
6. F. No further action is needed because the source code is stored in a private repository.

Correct Answer: B