AWS Certified Developer Associate - Practice Exam 2

A company has an on-premise application that uses Linux servers and a PostgreSQL relational database. They plan to migrate the application to AWS and want a managed service that can handle capacity provisioning, load balancing, and auto-scaling. Which combination of services should the Developer use? (Select TWO.)

When publishing custom metrics for Amazon EC2 using the Amazon CloudWatch CLI, a Developer wants to provide additional context to the metrics by organizing them based on the EC2 instance and Auto Scaling Group. When publishing the metrics, what parameter should be added to the put-metric-data command in the CLI?

What is the best PaaS service provided by AWS to quickly deploy a .NET application while maintaining full control of the underlying resources?

An application exports files which must be saved for future use but are not frequently accessed. Which solution is the MOST cost-effective if the company needs to implement redundant data retention across AWS regions?

A company has an application that sends all logs to Amazon S3. Whenever a new log file is created, an AWS Lambda function is invoked to process it. The code for the Lambda function works properly and collects all the required information. However, after reviewing the Lambda function logs, they found that duplicate entries with the same request ID were created. What is the BEST explanation for the duplicate entries?

Which AWS services are supported for Lambda event source mappings?

A company has three different environments: Development, Staging, and Production – and it wants to deploy its code sequentially, starting with the Development environment, then Staging, and eventually Production. Which AWS service can be used to fulfill this requirement?

Which AWS caching solution should a Developer choose if he requires a multi-threaded in-memory cache to place in front of an Amazon RDS database?

An application receives malicious traffic from some suspicious IP addresses under the same CIDR range. What should we do to solve this problem?

An application uses Amazon EC2 instances, an Application Load Balancer, and Amazon CloudFront to serve content. The security team has reported malicious activity from a specific range of IP addresses. How can a Developer prevent the application from being targeted by these addresses in the future?

A Lambda function written in Python reads data from objects in Amazon S3 and writes data to an Amazon DynamoDB table. The function is successfully invoked from an S3 event notification when an object is created. However, the function fails when it attempts to write to the DynamoDB table. What is the MOST likely cause of this issue?

A company is migrating an application with a website and MySQL database to the AWS Cloud. How should a Developer refactor the application to ensure high availability and fault tolerance? (Select TWO.)

A developer has an application that stores data in an Amazon S3 bucket. The application uses an HTTP API to store and retrieve objects. When the PutObject API operation adds objects to the S3 bucket, the developer must encrypt these objects at rest by using server-side encryption with Amazon S3 managed keys (SSE-S3). Which solution will meet this requirement?

A company uses Amazon SQS to decouple an online application. SQS consumers frequently poll the queue to maintain high throughput, resulting in significant resource usage and high costs. To reduce costs and the number of empty responses, what would be the BEST approach to MINIMIZING cost?

When deploying infrastructure in multiple regions worldwide using a CloudFormation template, which section of the template file can be used to set values based on a region?

Which AWS fully-managed source control service that is compatible with Git can a developer team use?

A Developer is deploying an application that uses a microservices architecture on Amazon ECS. The developer’s objective is to choose the best task placement strategy to use the LEAST possible number of instances that are used. Which task placement strategy should be the most suitable choice?

An application using a Classic Load Balancer (CLB) wants to be migrated to use an Application Load Balancer (ALB). After monitoring the application, the developer realized that customers need to re-authenticate every time they connect instead of being able to reconnect without re-authenticating for several hours. How can the developer resolve this issue?

What is the main function of Amazon SQS Delay Queues?

A development team sets up a project's file directory structure in AWS CodeCommit. The team plans to use AWS CodeBuild and AWS CodeDeploy. The team creates the necessary configuration files for CodeBuild and CodeDeploy. The team wants to name and place these files according to service defaults. Where should the team place the CodeBuild and CodeDeploy files?

A Developer has completed some code updates and needs to deploy the updates to an Amazon Elastic Beanstalk environment. There is no tolerance for downtime if the update fails, and rollback should be fast. What is the SAFEST deployment method to use?

Which AWS service would best suit the needs of a team of developers looking to collaborate and synchronize multiple distributed code repositories? Additionally, they require a pre-configured continuous delivery toolchain for deploying their projects on AWS and a centralized project management dashboard to monitor the application activity.

A developer maintains an Amazon API Gateway REST API, accessed by customers through a frontend UI and Amazon Cognito authentication. The developer has developed a new version of the API that contains new endpoints and backward-incompatible interfaces and needs to provide beta access to other developers on the team without affecting customers. Which solution will meet these requirements with the LEAST operational overhead?

A Developer has created a serverless function that generates a report. The function should be invoked every day at 5 am, before the developers arrive at the office. How can the Developer automatically invoke the function using serverless services?

An application uses Amazon Kinesis Data Streams to process real-time data. Amazon EC2 instances running the Amazon Kinesis Client Library (KCL) consume and process the data. The application handles failure scenarios and does not require standby workers. Due to changes in the data flow, a specific shard is receiving more data than expected. As a result, the "hot" shard is resharded, increasing the initial number of shards from 6 to 10. What is the maximum number of EC2 instances that can be deployed to process data from all the shards after resharding?

When a Developer tries to run an AWS CodeBuild project, it raises an error because the length of all environment variables exceeds the limit for the combined maximum of characters. What solution should the developer do?

To build a continuous integration/continuous delivery CI/CD pipeline using AWS CodePipeline, a development team needs a reliable source control service to store their program code. Right now, AWS CodePipeline is being used to automate the code build and deployment. Which AWS service should the team use to store the program code?

A Developer needs to search and filter log data to debug an application. The application logs are stored in Amazon CloudWatch Logs. The Developer creates a new metric filter to count exceptions in the logs, but no filtered results are being returned. What could be the cause for not getting any filtered results?

A company stores product information in an Amazon RDS database. An application reads and writes data to the database, and another reporting application in another region needs read access to the same database. Which configuration would provide the BEST performance for the reporting application without impacting the performance of the main database?

How can a developer efficiently retrieve various types of variables, such as authentication information for a remote API, the URL for the API, and credentials, if they need to be securely stored and accessible to all current and future versions of the application across different environments (development, testing, and production) while minimizing the number of changes made to the application?

To increase application performance and redundancy, a company has decided to run multiple implementations in different AWS Regions behind network load balancers. The company currently advertises the application using two public IP addresses from separate /24 address ranges and would prefer not to change these. We should direct users to the closest available application endpoint. Which actions should a solutions architect take? (Select TWO)

A Developer has created a task definition that includes the following JSON code:

What is the effect of this task placement strategy?

Users will use a mobile application to access confidential data, and it’s using Amazon Cognito for authentication, authorization, and user management. Due to the sensitivity of the data, there is a requirement to add another method of authentication in addition to a username and password. What method would you recommend?

A company runs a web application on Amazon EC2 behind an Elastic Load Balancer (ELB). The company wants to add encryption in transit to the application, ensuring that the solution doesn't affect the performance of their EC2 instances. What actions should they take to secure the web application? (Choose TWO.)

The average DynamoDB table’s item size is 5KB. An application will make 20 eventually consistent reads/sec and 12 standard writes/sec. How many RCUs/WCUs are required? How many RCUs/WCUs are required?

A document submission application will use an Amazon S3 bucket for storage. The solution must prevent accidental deletion of the documents and ensure that all versions of the documents are available. Users must be able to upload and modify the documents. Which combination of actions should be taken to meet these requirements? (Select TWO)

Over 500 TB of data must be analyzed using standard SQL business intelligence tools. The dataset consists of a combination of structured data and unstructured data. The unstructured data is small and stored on Amazon S3. Which combination of AWS services is most suitable for performing analytics on the data?

A developer needs to perform geographic load testing of an API. The developer must deploy resources to multiple AWS Regions to support the load testing of the API. How can the developer meet these requirements without additional application code?

A DynamoDB database you manage is randomly experiencing heavy read requests that are causing latency. What is the simplest way to mitigate the performance issues?

We need to connect from an office location to a Linux instance running in a public subnet in an Amazon VPC using the Internet. Which of the following items are required to enable this access? (Select TWO)

A company delivers content to subscribers distributed globally from an application that uses a fleet of Amazon EC2 instances behind an Application Load Balancer (ALB). We need to block access to the application for specific countries. What is the EASIEST method to meet this requirement?

How can a company enable authentication for its new REST service using Amazon API Gateway, requiring HTTP headers with a client ID and user ID in each request and comparing the credentials against authentication data that is stored in an Amazon DynamoDB table?

An application consists of AWS Lambda as the backend and Amazon RDS Aurora MySQL as the database. The Lambda function must use database credentials to authenticate to MySQL, but the lambda function must not store these credentials by itself. How can we securely store the database credentials and make them available to the function?

A developer is deploying an AWS Lambda function and needs the ability to return to older versions of the function quickly and seamlessly if necessary. How can the developer achieve this goal with the LEAST operational overhead?

An application that is hosted on an Amazon EC2 instance needs access to files that are stored in an Amazon S3 bucket. The application lists the objects that are stored in the S3 bucket and displays a table to the user. During testing, a developer discovers that the application shows no objects in the list. What is the MOST secure way to resolve this issue?

A company is building an application that will use an Amazon DynamoDB table. Each item in the table is identified by a partition key (user_id) and a sort key (profession_name). Apart from that, there are other attributes like starting_date or salary. A developer is asked to write to display the TOP users (user_id) based on the salary for each profession_name. What process will allow the developer to extract results MOST efficiently from the DynamoDB table?

What steps should an administrator take to grant a group of developers read-only access to a specific Amazon DynamoDB table, following the principle of least privilege?

A Developer has created a task definition that includes the following JSON code:

What will be the effect for tasks using this task definition?

A company wants to log the access to some financial reports currently stored in Amazon S3. Also, they want to detect any modifications to these log files. Which actions should they take?

The average DynamoDB table’s item size is 5KB. An application will make five transactional reads/second and three transactional writes/sec. How many RCUs & WCUs are required?

A developer is designing a serverless application with two AWS Lambda functions to process photos. Both Lambda functions use the same Python library to perform complex computations and are approaching the quota for the maximum size of zipped deployment packages. What should the developer do to reduce the size of the Lambda deployment packages with the LEAST operational overhead?

A company needs to test its applications in 3 separate VPCs. A peering topology is configured with VPC-A peered with VPC-B and VPC-B with VPC-C. The development team wants to modify the process to release code directly from VPC-A to VPC-C. How can this be accomplished?

A company has an Amazon S3 bucket that contains sensitive data. The data must be encrypted in transit and at rest. The company encrypts the data in the S3 bucket by using an AWS Key Management Service (AWS KMS) key. A developer needs to grant several other AWS accounts the permission to use the S3 GetObject operation to retrieve the data from the S3 bucket. How can the developer enforce that all requests to retrieve the data provide encryption in transit?

A developer wants to store information about movies. Each movie has a title, release year, and genre. The movie information also can include additional properties about the cast and production crew. This additional information is inconsistent across movies. For example, one movie might have an assistant director, and another movie might have an animal trainer. The developer needs to implement a solution to support the following use cases: * For a given title and release year, get all details about the movie that has that title and release year. * For a given title, get all details about all movies that have that title. * For a given genre, get all details about all movies in that genre. Which data store configuration will meet these requirements?

An engineer created an A/B test of a new feature on an Amazon CloudWatch Evidently project. The engineer configured two variations of the feature (Variation A and Variation B) for the test. The engineer wants to work exclusively with Variation A. The engineer needs to make updates so that Variation A is the only variation that appears when the engineer hits the application's endpoint. Which solution will meet this requirement?