AWS-Certified-Developer-Associate Free Practice Test

A company is building a scalable data management solution by using AWS services to improve the speed and agility of development. The solution will ingest large volumes of data from various sources and will process this data through multiple business rules and transformations.
The solution requires business rules to run in sequence and to handle reprocessing of data if errors occur when the business rules run. The company needs the solution to be scalable and to require the least possible maintenance.
Which AWS service should the company use to manage and automate the orchestration of the data flows to meet these requirements?

1. A. AWS Batch
2. B. AWS Step Functions
3. C. AWS Glue
4. D. AWS Lambda

Correct Answer: B
https://docs.aws.amazon.com/step-functions/latest/dg/welcome.html

A developer wants to store information about movies. Each movie has a title, release year, and genre. The movie information also can include additional properties about the cast and production crew. This additional information is inconsistent across movies. For example, one movie might have an assistant director, and another movie might have an animal trainer.
The developer needs to implement a solution to support the following use cases:
For a given title and release year, get all details about the movie that has that title and release year.
For a given title, get all details about all movies that have that title. For a given genre, get all details about all movies in that genre. Which data store configuration will meet these requirements?

1. A. Create an Amazon DynamoDB tabl
2. B. Configure the table with a primary key that consists of the title as the partition key and the release year as the sort ke
3. C. Create a global secondary index that uses the genre as the partition key and the title as the sort key.
4. D. Create an Amazon DynamoDB tabl
5. E. Configure the table with a primary key that consists of the genre as the partition key and the release year as the sort ke
6. F. Create a global secondary index that uses the title as the partition key.
7. G. On an Amazon RDS DB instance, create a table that contains columns for title, release year, and genr
8. H. Configure the title as the primary key.
9. I. On an Amazon RDS DB instance, create a table where the primary key is the title and all other data is encoded into JSON format as one additional column.

Correct Answer: A
Amazon DynamoDB is a fully managed NoSQL database service that provides fast and consistent performance with seamless scalability. The developer can create a DynamoDB table and configure the table with a primary key that consists of the title as the partition key and the release year as the sort key. This will enable querying for a given title and release year efficiently. The developer can also create a global secondary index that uses the genre as the partition key and the title as the sort key. This will enable querying for a given genre efficiently. The developer can store additional properties about the cast and production crew as attributes in the DynamoDB table. These attributes can have different data types and structures, and they do not need to be consistent across items.
References:
✑ [Amazon DynamoDB]
✑ [Working with Queries - Amazon DynamoDB]
✑ [Working with Global Secondary Indexes - Amazon DynamoDB]

A developer deployed an application to an Amazon EC2 instance The application needs to know the public IPv4 address of the instance
How can the application find this information?

1. A. Query the instance metadata from http./M69.254.169.254. latestmeta-data/.
2. B. Query the instance user data from http '169 254.169 254. latest/user-data/
3. C. Query the Amazon Machine Image (AMI) information from http://169.254.169.254/latest/meta-data/ami/.
4. D. Check the hosts file of the operating system

Correct Answer: A
The instance metadata service provides information about the EC2 instance, including the public IPv4 address, which can be obtained by querying the endpoint http://169.254.169.254/latest/meta-data/public-ipv4. References
✑ Instance metadata and user data
✑ Get Public IP Address on current EC2 Instance
✑ Get the public ip address of your EC2 instance quickly

A developer is building an application that gives users the ability to view bank account from multiple sources in a single dashboard. The developer has automated the process to retrieve API credentials for these sources. The process invokes an AWS Lambda function that is associated with an AWS CloudFormation cotton resource.
The developer wants a solution that will store the API credentials with minimal operational overhead.
When solution will meet these requirements?

1. A. Add an AWS Secrets Manager GenerateSecretString resource to the CloudFormation templat
2. B. Set the value to reference new credentials to the Cloudformation resource.
3. C. Use the AWS SDK ssm PutParameter operation in the Lambda function from the existing, custom resource to store the credentials as a paramete
4. D. Set the parameter value to reference the new credential
5. E. Set ma parameter type to SecureString.
6. F. Add an AWS Systems Manager Parameter Store resource to the CloudFormation templat
7. G. Set the CloudFormation resource value to reference the new credentials Set the resource NoEcho attribute to true.
8. H. Use the AWS SDK ssm PutParameter operation in the Lambda function from the existing custom resources to store the credentials as a paramete
9. I. Set the parameter value to reference the new credential
10. J. Set the parameter NoEcho attribute to true.

Correct Answer: B
The solution that will meet the requirements is to use the AWS SDK ssm PutParameter operation in the Lambda function from the existing custom resource to store the credentials as a parameter. Set the parameter value to reference the new credentials. Set the parameter type to SecureString. This way, the developer can store the API credentials with minimal operational overhead, as AWS Systems Manager Parameter Store provides secure and scalable storage for configuration data. The SecureString parameter type encrypts the parameter value with AWS Key Management Service (AWS KMS). The other options either involve adding additional resources to the CloudFormation template, which increases complexity and cost, or do not encrypt the parameter value, which reduces security.
Reference: Creating Systems Manager parameters

A developer has written the following IAM policy to provide access to an Amazon S3 bucket:

Which access does the policy allow regarding the s3:GetObject and s3:PutObject actions?

1. A. Access on all buckets except the “DOC-EXAMPLE-BUCKET” bucket
2. B. Access on all buckets that start with “DOC-EXAMPLE-BUCKET” except the “DOC-EXAMPLE-BUCKET/secrets” bucket
3. C. Access on all objects in the “DOC-EXAMPLE-BUCKET” bucket along with access to all S3 actions for objects in the “DOC-EXAMPLE-BUCKET” bucket that start with “secrets”
4. D. Access on all objects in the “DOC-EXAMPLE-BUCKET” bucket except on objects that start with “secrets”

Correct Answer: D
The IAM policy shown in the image is a resource-based policy that grants or denies access to an S3 bucket based on certain conditions. The first statement allows access to any S3 action on any object in the “DOC-EXAMPLE-BUCKET” bucket when the request is made over HTTPS (the value of aws:SecureTransport is true). The second statement denies access to the s3:GetObject and s3:PutObject actions on any object in the “DOC-EXAMPLE-BUCKET/secrets” prefix when the request is made over HTTP (the value of aws:SecureTransport is false). Therefore, the policy allows access on all objects in the “DOC-EXAMPLE-BUCKET” bucket except on objects that start with “secrets”.
Reference: Using IAM policies for Amazon S3