AWS-Certified-Developer-Associate Free Practice Test

- (Exam Topic 1)
A static website is hosted in an Amazon S3 bucket. Several HTML pages on the site use JavaScript to download images from another Amazon S3 bucket. These images are not displayed when users browse the site.
What is the possible cause for the issue?

1. A. The referenced Amazon S3 bucket is in another region.
2. B. The images must be stored in the same Amazon S3 bucket.
3. C. Port 80 must be opened on the security group in which the Amazon S3 bucket is located.
4. D. Cross Origin Resource Sharing must be enabled on the Amazon S3 bucket.

Correct Answer: D

- (Exam Topic 2)
A developer is working on an AWS Lambda function that accesses Amazon DynamoDB The Lambda function must retrieve an item and update some of its attributes. or create the item if it does not exist The Lambda function has access to the primary key.
Which IAM permissions should the developer request for the Lambda function to achieve this functionality?

1. A. dynaracdb:DeleteItem dynamodb:GetItem dynamcdb:Putltem
2. B. dynamodb:Updateltem dynamcdb:Getltem dynamodb:DescribeTable
3. C. dynamcdb:GetRecords dynamcdb:Putltem dynamodb:updateTable
4. D. dynamodb:Updateltem dynamodb:Getltem dynamodb:Putltem

Correct Answer: C
Reference: https://docs.aws.amazon.com/AWSJavaScriptSDK/latest/AWS/DynamoDB.html

- (Exam Topic 4)
A developer is running an application on an Amazon EC2 instance. When the application tries to read an Amazon S3 bucket, the application fails. The developer notices that the associated IAM role is missing the S3 read permission. The developer needs to give the application the ability to read the S3 bucket.
Which solution will meet this requirement with the LEAST application disruption?

1. A. Add the permission to the rol
2. B. Terminate the existing EC2 instanc
3. C. Launch a new EC2 instance.
4. D. Add the permission to the role so that the change will take effect automatically.
5. E. Add the permission to the rol
6. F. Hibernate and restart the existing EC2 instance.
7. G. Add the permission to the S3 bucke
8. H. Restart the EC2 instance.

Correct Answer: B

- (Exam Topic 2)
n application running on an Amazon Linux EC2 instance needs to manage the AWS infrastructure. How can the EC2 instance be configured to make AWS API calls securely?

1. A. Sign the AWS CLI command using the signature version 4 process.
2. B. Run the aws configure AWS CLI command and specify the access key id and secret access key.
3. C. Specify a role for the EC2 instance with the necessary privileges.
4. D. Pass the access key id and secret access key as parameters for each AWS CLI command.

Correct Answer: C

- (Exam Topic 2)
A Developer must encrypt a 100-GB object using AWS KMS. What is the BEST approach?

1. A. Make an Encrypt API call to encrypt the plaintext data as ciphertext using a customer master key (CMK)
2. B. Make an Encrypt API call to encrypt the plaintext data as ciphertext using a customer master key (CMK) with imported key material
3. C. Make a GenerateDataKey API call that returns a plaintext key and an encrypted copy of a data ke
4. D. Use a plaintext key to encrypt the data
5. E. Make a GenerateDataKeyWithoutPlaintext API call that returns an encrypted copy of a data ke
6. F. Use an encrypted key to encrypt the data

Correct Answer: D
https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKey.html