Free AWS-Certified-Developer-Associate Exam Files Downloaded Instantly UPDATED [2023]
100% Pass Guaranteed Free AWS-Certified-Developer-Associate Exam Dumps
NEW QUESTION # 39
A company has developed a new serverless application using AWS Lambda functions that will be deployed using the AWS Serverless Application Model (AWS SAM) CLI Which step should the developer complete prior to deploying the application?
- A. Bundle the serverless application using a SAM package
- B. Compress the application to a zip file and upload it into AWS Lambda
- C. Test the new AWS Lambda function by first tracing it in AWS X-Ray.
- D. Create the application environment using the eb create my-env command.
Answer: C
NEW QUESTION # 40
For a deployment using AWS CodeDeploy, what is the run order of the hooks for in-place deployments?
- A. Before Install -> Application Stop -> Validate Service -> Application Start
- B. Application Stop -> Before Install -> Validate Service -> Application Start
- C. Application Stop -> Before Install -> After Install -> Application Start
- D. Before Install -> Application Stop -> Application Start -> After Install
Answer: C
NEW QUESTION # 41
A Developer is receiving HTTP 400: ThrottlingException errors intermittently when calling the Amazon CloudWatch API. When a call fails, no data is retrieved.
What best practice should first be applied to address this issue?
- A. Use the AWS CLI to get the metrics
- B. Retry the call with exponential backoff
- C. Contact AWS Support for a limit increase.
- D. Analyze the applications and remove the API call
Answer: C
Explanation:
Explanation
CloudWatch allows you to GetMetricData at 50 transactions per second (TPS). The maximum number of operation requests you can make per second without being throttled. If you need more you need to increase the limit.
Refer AWS documentation - CloudWatch Limits
GetMetricData
50 transactions per second (TPS). The maximum number of operation requests you can make per second without being throttled.
180,000 Datapoints Per Second (DPS) if the used in the API request is less than or equal to three hours from current time. 90,000 DPS if the is more than three hours from current time. This is the maximum number of datapoints you can request per second using one or more API calls without being throttled.
You can request a limit increase for both of these limits.
NEW QUESTION # 42
A root AWS account owner has created three IAM users: Bob, John and Michael. Michael is the IAM administrator. Bob and John are not the superpower users, but users with some pre-defined policies. John does not have access to modify his password. Thus, he asks Bob to change his password. How can Bob change John's password?
- A. Provided Bob is the manager of John
- B. This statement is false. It should be Michael who changes the password for John
- C. It is not possible that John cannot modify his password
- D. Provided Michael has added Bob to a group, which has permissions to modify the IAM passwords
Answer: D
Explanation:
Generally with IAM users, the password can be modified in two ways. The first option is to define the IAM level policy which allows each user to modify their own passwords. The other option is to create a group and create a policy for the group which can change the passwords of various IAM users.
http://docs.aws.amazon.com/IAM/latest/UserGuide/HowToPwdIAMUser.html
NEW QUESTION # 43
A Development team decides to adopt a continuous integration/continuous delivery (CI/CD) process using AWS CodePipeline and AWS CodeCommit for a new application. However, management wants a person to review and approve the code before it is deployed to production.
How can the Development team add a manual approver to the CI/CD pipeline?
- A. If approved, add an approved tag when pushing changes to the CodeCommit repository. CodePipeline will proceed to build and deploy approved commits without interruption.
- B. Use AWS SES to send an email to approvers when their action is required. Develop a simple application that allows approvers to accept or reject a build. Invoke an AWS Lambda function to advance the pipeline when a build is accepted.
- C. Add an approval action to the pipeline. Configure the approval action to publish to an Amazon SNS topic when approval is required. The pipeline execution will stop and wait for an approval.
- D. Add an approval step to CodeCommit. Commits will not be saved until approved.
Answer: C
Explanation:
Explanation/Reference: https://docs.aws.amazon.com/codepipeline/latest/userguide/approvals-action-add.html
NEW QUESTION # 44
A startup s photo-sharing site is deployed in a VPC. An ELB distributes web traffic across two subnets. ELB session stickiness is configured to use the AWS-generated session cookie, with a session TTL of 5 minutes. The webserver Auto Scaling Group is configured as: min-size=4, max-size=4.
The startups preparing for a public launch, by running load-testing software installed on a single EC2 instance running in us-west-2a. After 60 minutes of load-testing, the webserver logs show:
Which recommendations can help ensure load-testing HTTP requests are evenly distributed across the four webservers? Choose 2 answers
- A. Re-configure the load-testing software to re-resolve DNS for each web request.
- B. Use a 3rd-party load-testing service which offers globally-distributed test clients.
- C. Configure ELB and Auto Scaling to distribute across us-west-2a and us-west-2c.
- D. Launch and run the load-tester EC2 instance from us-east-1 instead.
- E. Configure ELB session stickiness to use the app-specific session cookie.
Answer: A,E
NEW QUESTION # 45
A company with branch offices in Portland, New York, and Singapore has a three-tier web application that leverages a shared database. The database runs on Amazon RDS for MySQL and is hosted in the us-west-2 Region. The application has a distributed front end deployed in the us-west-2, ap-southheast-1, and us-east-2 Regions.
This front end is used as a dashboard for Sales Managers in each branch office to see current sales statistics.
There are complaints that the dashboard performs more slowly in the Singapore location than it does in Portland or New York. A solution is needed to provide consistent performance for all users in each location.
Which set of actions will meet these requirements?
- A. Create an RDS read replica in the us-west-2 Region where the primary instance resides. Create a read replica in the ap-southeast-1 Region from the read replica located on the us-west-2 Region. Reconfigure the ap-southeast-1 front-end dashboard to access this instance.
- B. Create a new RDS instance in the ap-southeast-1 Region. Use AWS DMS and change data capture (CDC) to update the new instance in the ap-southeast-1 Region. Reconfigure the ap-southeast-1 front-end dashboard to access this instance.
- C. Create an RDS read replica in the ap-southeast-1 Region from the primary RDS DB instance in the us- west-2 Region. Reconfigure the ap-southeast-1 front-end dashboard to access this instance.
- D. Take a snapshot of the instance in the us-west-2 Region. Create a new instance from the snapshot in the ap-southeast-1 Region. Reconfigure the ap-southeast-1 front-end dashboard to access this instance.
Answer: D
NEW QUESTION # 46
A legacy service has an XML-based SOAP interface. The Developer wants to expose the functionality of the service to external clients with the Amazon API Gateway. Which technique will accomplish this?
- A. Create a RESTful API with the API Gateway; transform the incoming JSON into a valid XML message for the SOAP interface using mapping templates.
- B. Create a RESTful API with the API Gateway; pass the incoming JSON to the SOAP interface through an Application Load Balancer.
- C. Create a RESTful API with the API Gateway; transform the incoming XML into a valid message for the SOAP interface using mapping templates.
- D. Create a RESTful API with the API Gateway; pass the incoming XML to the SOAP interface through an Application Load Balancer.
Answer: B
NEW QUESTION # 47
An IAM role is attached to an Amazon EC2 instance that explicitly denies access to all Amazon S3 API actions. The EC2 instance credentials file specifies the IAM access key and secret access key, which allow full administrative access.
Given that multiple modes of IAM access are present for this EC2 instance, which of the following is correct?
- A. The EC2 instance will be able to perform all actions on any S3 bucket.
- B. The EC2 instance will not be able to perform any S3 action on any S3 bucket.
- C. The EC2 instance will only be able to list the contents of one S3 bucket at a time.
- D. The EC2 instance will only be able to list the S3 buckets.
Answer: D
NEW QUESTION # 48
An application is using single -node Amazon ElastiCache for Redis instance to improve read performance.
Over time, demand for the application has increased exponentially, which has increased the load on the ElastiCache instance. It is critical that this cache layer handles the load and is resilient in case of node failures.
What can the Developer do to address the load and resiliency requirements?
- A. Migrate to a Memcached cluster.
- B. Vertically scale the ElastiCache instance.
- C. Migrate to an Amazon ElastiCache service cluster.
- D. Add a read replica instance.
Answer: D
NEW QUESTION # 49
A company maintains a REST service using Amazon API Gateway and the API Gateway native API key validation. The company recently launched a new registration page, which allows users to sign up for the service. The registration page creates a new API key using CreateApiKey and sends the new key to the user.
When the user attempts to call the API using this key, the user receives a 403 Forbidden error. Existing users are unaffected and can still call the API.
What code updates will grant these new users access to the API?
- A. The createUsagePlanKey method must be called to associate the newly created API key with the correct usage plan.
- B. The updateAuthorizer method must be called to update the API's authorizer to include the newly created API key.
- C. The importApiKeys method must be called to import all newly created API keys into the current stage of the API.
- D. The createDeployment method must be called so the API can be redeployed to include the newly created API key.
Answer: A
Explanation:
Explanation
https://stackoverflow.com/questions/39061041/using-an-api-key-in-amazon-api-gateway
NEW QUESTION # 50
A developer has written the following IAM policy to provide access to an Amazon S3 bucket:
Which access does the policy allow regarding the s3:GetObject and s3:PutObject actions?
- A. Access on all buckets that start with "DOC-EXAMPLE-BUCKET" except the
"DOC-EXAMPLE-BUCKET/secrets" bucket - B. Access on all objects in the "DOC-EXAMPLE-BUCKET" bucket along with access to all S3 actions for objects in the "DOC-EXAMPLE-BUCKET" bucket that start with "secrets"
- C. Access on all buckets except the "DOC-EXAMPLE-BUCKET" bucket
- D. Access on all objects in the "DOC-EXAMPLE-BUCKET" bucket except on objects that start with
"secrets"
Answer: D
NEW QUESTION # 51
In relation to Amazon SQS, how many queues and messages can you have per queue for each user?
- A. 0
- B. Unlimited
- C. 1
- D. 2
Answer: B
Explanation:
Amazon SQS supports an unlimited number of queues and unlimited number of messages per queue for each user. Please be aware that Amazon SQS automatically deletes messages that have been in the queue for more than 4 days.
https://aws.amazon.com/items/1343?externalID=1343
NEW QUESTION # 52
A Developer registered an AWS Lambda function as a target for an Application Load Balancer (ALB) using a CLI command. However, the Lambda function is not being invoked when the client sends requests through the ALB.
Why is the Lambda function not being invoked?
- A. Cross-zone is not enabled on the ALB.
- B. A Lambda function can be registered with an ALB using AWS Management Console only.
- C. The permissions to invoke the Lambda function are missing.
- D. A Lambda function cannot be registered as a target for an ALB.
Answer: C
Explanation:
Explanation/Reference: https://docs.aws.amazon.com/elasticloadbalancing/latest/application/lambda-functions.html
NEW QUESTION # 53
A software engineer developed an AWS Lambda function in Node.js to do some CPU-intensive data processing. With the default settings, the Lambda function takes about 5 minutes to complete.
Which approach should a developer take to increase the speed of completion''
- A. Instead of using Node js. rewrite the Lambda function using Python
- B. Allocate the maximum available CPU units lo the function
- C. Increase the available memory to the function.
- D. Instead of packaging the libraries in the ZIP file with the function move them to a Lambda layer and use the layer with the function.
Answer: C
NEW QUESTION # 54
An AWS customer is deploying a web application that is composed of a front-end running on Amazon EC2 and of confidential data that is stored on Amazon S3. The customer security policy that all access operations to this sensitive data must be authenticated and authorized by a centralized access management system that is operated by a separate security team. In addition, the web application team that owns and administers the EC2 web front-end instances is prohibited from having any ability to access the data that circumvents this centralized access management system. Which of the following configurations will support these requirements?
- A. Encrypt the data on Amazon S3 using a CloudHSM that is operated by the separate security team.
Configure the web application to integrate with the CloudHSM for decrypting approved data access operations for trusted end-users. - B. Configure the web application to authenticate end-users against the centralized access management system. Have the web application provision trusted users STS tokens entitling the download of approved data directly from Amazon S3
- C. Configure the web application to authenticate end-users against the centralized access management system using SAML. Have the end-users authenticate to IAM using their SAML token and download the approved data directly from S3.
- D. Have the separate security team create and IAM role that is entitled to access the data on Amazon S3. Have the web application team provision their instances with this role while denying their IAM users access to the data on Amazon S3
Answer: B
NEW QUESTION # 55
What is the data model of DynamoDB?
- A. "Database", a collection of Tables; "Tables", with Keys and one or more Attribute; and "Attribute", with Name and Value.
- B. "Items", with Keys and one or more Attribute; and "Attribute", with Name and Value.
- C. "Database", which is a set of "Tables", which is a set of "Items", which is a set of "Attributes".
- D. "Table", a collection of Items; "Items", with Keys and one or more Attribute; and "Attribute", with Name and Value.
Answer: D
Explanation:
The data model of DynamoDB is:
"Table", a collection of Items;
"Items", with Keys and one or more Attribute;
"Attribute", with Name and Value.
Reference: http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/DataModel.html
NEW QUESTION # 56
A Developer wants to find a list of items in a global secondary index from an Amazon DynamoDB table.
Which DynamoDB API call can the Developer use in order to consume the LEAST number of read capacity units?
- A. Query operation using strongly-consistent reads
- B. Query operation using eventually-consistent reads
- C. Scan operation using eventually-consistent reads
- D. Scan operation using strongly-consistent reads
Answer: B
NEW QUESTION # 57
A company runs continuous integration/continuous delivery (CI/CD) pipeline for its application on AWS CodePipeline. A developer must write unit tests and run them as part of the pipelines before staging the artifacts for testing.
How should the Developer incorporate unit tests as part of CI/CD pipeline?
- A. Create a testing branch in AWS CodeCommit to run unit tests.
- B. Install the AWS CodeDeploy agent on an Amazon EC2 instance to run unit tests.
- C. Update the AWS codeBuild build specification to include a phase for running unit tests.
- D. Create a separate codePipline pipline to run unit tests.
Answer: C
NEW QUESTION # 58
A set of APIs are exposed to customers using the Amazon API Gateway. These APIs have caching enabled on the API Gateway. Customers have asked for an option to invalidate this cache for each of the APIs.
What action can be taken to allow API customers to invalidate the API Cache?
- A. Ask customers to pass an HTTP header called Cache-Control:max-age=0.
- B. Ask customers to add a query string parameter called "INVALIDATE_CACHE" when making an API call.
- C. Ask customers to invoke an AWS API endpoint which invalidates the cache.
- D. Ask customers to use AWS credentials to call the InvalidateCache API.
Answer: A
Explanation:
Explanation
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cache-Control
https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-caching.html Invalidate an API Gateway Cache Entry A client of your API can invalidate an existing cache entry and reload it from the integration endpoint for individual requests. The client must send a request that contains the Cache-Control: max-age=0 header. The client receives the response directly from the integration endpoint instead of the cache, provided that the client is authorized to do so. This replaces the existing cache entry with the new response, which is fetched from the integration endpoint.
NEW QUESTION # 59
An advertising company has a dynamic website with heavy traffic. The company wants to migrate the website infrastructure to AWS to handle everything except website development.
Which solution BEST meets these requirements?
- A. Use AWS VM Import to migrate a web server image to AWS Launch the image on a compute- optimized Amazon EC2 instanceLaunch.
- B. Launch multiple Amazon Lighsall instance behind a load balancer. Set up the website on those instances.
- C. Deploy the website code in an AWS Elastic Beanstalk environment. Use Auto Scaling to scale the numbers of instance
- D. Use Amazon S3 to host the website. Use Amazon CloudFornt to deliver the content at scale.
Answer: C
NEW QUESTION # 60
......
Latest AWS-Certified-Developer-Associate dumps - Instant Download PDF: https://www.surepassexams.com/AWS-Certified-Developer-Associate-exam-bootcamp.html
Verified & Latest AWS-Certified-Developer-Associate Dump Q&As with Correct Answers: https://drive.google.com/open?id=1HZ6ZYeJgypg3Kr4OxNXUiRMPS3CHvwVw