AWS-Certified-Developer-Associate Free Practice Test

- (Exam Topic 2)
A developer is working on an AWS Lambda function that accesses Amazon DynamoDB The Lambda function must retrieve an item and update some of its attributes. or create the item if it does not exist The Lambda function has access to the primary key.
Which IAM permissions should the developer request for the Lambda function to achieve this functionality?

1. A. dynaracdb:DeleteItem dynamodb:GetItem dynamcdb:Putltem
2. B. dynamodb:Updateltem dynamcdb:Getltem dynamodb:DescribeTable
3. C. dynamcdb:GetRecords dynamcdb:Putltem dynamodb:updateTable
4. D. dynamodb:Updateltem dynamodb:Getltem dynamodb:Putltem

Correct Answer: C
Reference: https://docs.aws.amazon.com/AWSJavaScriptSDK/latest/AWS/DynamoDB.html

- (Exam Topic 4)
A developer is running an application on an Amazon EC2 instance. When the application tries to read an Amazon S3 bucket, the application fails. The developer notices that the associated IAM role is missing the S3 read permission. The developer needs to give the application the ability to read the S3 bucket.
Which solution will meet this requirement with the LEAST application disruption?

1. A. Add the permission to the rol
2. B. Terminate the existing EC2 instanc
3. C. Launch a new EC2 instance.
4. D. Add the permission to the role so that the change will take effect automatically.
5. E. Add the permission to the rol
6. F. Hibernate and restart the existing EC2 instance.
7. G. Add the permission to the S3 bucke
8. H. Restart the EC2 instance.

Correct Answer: B

- (Exam Topic 2)
n application running on an Amazon Linux EC2 instance needs to manage the AWS infrastructure. How can the EC2 instance be configured to make AWS API calls securely?

1. A. Sign the AWS CLI command using the signature version 4 process.
2. B. Run the aws configure AWS CLI command and specify the access key id and secret access key.
3. C. Specify a role for the EC2 instance with the necessary privileges.
4. D. Pass the access key id and secret access key as parameters for each AWS CLI command.

Correct Answer: C

- (Exam Topic 2)
A Developer must encrypt a 100-GB object using AWS KMS. What is the BEST approach?

1. A. Make an Encrypt API call to encrypt the plaintext data as ciphertext using a customer master key (CMK)
2. B. Make an Encrypt API call to encrypt the plaintext data as ciphertext using a customer master key (CMK) with imported key material
3. C. Make a GenerateDataKey API call that returns a plaintext key and an encrypted copy of a data ke
4. D. Use a plaintext key to encrypt the data
5. E. Make a GenerateDataKeyWithoutPlaintext API call that returns an encrypted copy of a data ke
6. F. Use an encrypted key to encrypt the data

Correct Answer: D
https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKey.html

- (Exam Topic 3)
A developer at a company writes an AWS ClojdForination template. The template refers to subnets that were created by a separate AWS Cloud Formation template that the company's network team wrote. When the developer attempts to launch the stack for the first time, the launch fails.
Which template coding mistakes could have caused this failure? (Select TWO.)

1. A. The developer's template does not use the Ref intrinsic function to refer to the subnets
2. B. The developer's template does not use the ImportValue intrinsic function to refer to the subnets
3. C. The Mappings section of the developer's template does not refer to the subnets.
4. D. The network team's template does not export the subnets in the Outputs section
5. E. The network team's template does not export the subnets in the Mappings section

Correct Answer: BD