AWS Certified Developer – Associate548 questions across 55 pages are complete and free, with no account or card.
548 questions in this bank
Free access · progress saved on this device
A developer is troubleshooting an application that uses Amazon DynamoDB in the us-west-2 Region. The application is deployed to an Amazon EC2 instance. The application requires read-only permissions to a table that is named Cars. The EC2 instance has an attached IAM role that contains the following IAM policy:
When the application tries to read from the Cars table, an Access Denied error occurs. How can the developer resolve this error?
Answer: C
When using the AWS Encryption SDK, how does the developer keep track of the data encryption keys used to encrypt data?
Answer: B
In the AWS Encryption SDK, data is encrypted using a DEK. This DEK is then encrypted with a Key Encryption Key (KEK), usually managed by AWS Key Management Service (AWS KMS) or another key management infrastructure. The encrypted DEK is stored alongside the encrypted data (ciphertext). This allows the SDK to manage the DEKs seamlessly.
Source: Adapted from community discussion — SerialiDr
An application that runs on AWS Lambda requires access to specific highly confidential objects in an Amazon S3 bucket. In accordance with the principle of least privilege, a company grants access to the S3 bucket by using only temporary credentials. How can a developer configure access to the S3 bucket in the MOST secure way?
Answer: C
C. Create a Lambda function execution role. Attach a policy to the role that grants access to specific objects in the S3 bucket.
Source: Adapted from community discussion — LemonGremlin
A developer has code that is stored in an Amazon S3 bucket. The code must be deployed as an AWS Lambda function across multiple accounts in the same AWS Region as the S3 bucket. An AWS CloudFormation template that runs for each account will deploy the Lambda function. What is the MOST secure way to allow CloudFormation to access the Lambda code in the S3 bucket?
Answer: A
This approach is secure and provides a granular level of control. By granting the CloudFormation service role in each account the necessary S3 permissions and specifying the account numbers in the S3 bucket policy, you ensure that only the specified accounts can access the Lambda code. However, the ListBucket permission is not necessary if the CloudFormation template already knows the exact S3 object key.
Source: Adapted from community discussion — SerialiDr
A developer at a company needs to create a small application that makes the same API call once each day at a designated time. The company does not have infrastructure in the AWS Cloud yet, but the company wants to implement this functionality on AWS. Which solution meets these requirements in the MOST operationally efficient manner?
Answer: C
A developer is building a serverless application that is based on AWS Lambda. The developer initializes the AWS software development kit (SDK) outside of the Lambda handler function. What is the PRIMARY benefit of this action?
Answer: B
The correct answer is (B). Initializing the AWS SDK outside of the Lambda handler function takes advantage of runtime environment reuse. This means that the SDK only needs to be initialized once for all Lambda function invocations. This can improve application performance and efficiency.
Source: Adapted from community discussion — Digo30sp
A company is using Amazon RDS as the backend database for its application. After a recent marketing campaign, a surge of read requests to the database increased the latency of data retrieval from the database. The company has decided to implement a caching layer in front of the database. The cached content must be encrypted and must be highly available. Which solution will meet these requirements?
Answer: C
Should be C since ElastiCache for Redis supports encryption at rest and in transit. ElastiCache for Memcached does not support encryption at rest. DynamoDB Accelerator is for DynamoDB and does not fit this case.
Source: Adapted from community discussion — dilleman
For a deployment using AWS Code Deploy, what is the run order of the hooks for in-place deployments?
Answer: B
B In AWS CodeDeploy for in-place deployments, the hooks run in the following order: ApplicationStop: Executed before the new application revision is downloaded. DownloadBundle: The new application revision is downloaded. BeforeInstall: Executed after the new revision is downloaded but before the new version is installed. Install: The application revision specified in the deployment is installed. AfterInstall: Executed after the application revision is installed. ApplicationStart: Invoked to start any services that were stopped during ApplicationStop. ValidateService: Ensures the service is operating correctly after the new deployment. This sequence ensures a smooth deployment process by systematically stopping, updating, and restarting the application.
Source: Adapted from community discussion — ez_24
A developer at a company recently created a serverless application to process and show data from business reports. The application’s user interface (UI) allows users to select and start processing the files. The UI displays a message when the result is available to view. The application uses AWS Step Functions with AWS Lambda functions to process the files. The developer used Amazon API Gateway and Lambda functions to create an API to support the UI. The company’s UI team reports that the request to process a file is often returning timeout errors because of the size or complexity of the files. The UI team wants the API to provide an immediate response so that the UI can display a message while the files are being processed. The backend process that is invoked by the API needs to send an email message when the report processing is complete. What should the developer do to configure the API to meet these requirements?
Answer: A
Change the API Gateway route to add an X-Amz-Invocation-Type header with a static value of ‘Event’ in the integration request: This is the correct approach. By setting the X-Amz-Invocation-Type header to Event in the API Gateway integration request, the API Gateway will invoke the Lambda function asynchronously. In asynchronous execution, the Lambda function returns an immediate response (202 or Accepted status) to API Gateway, which can then relay it back to the UI. Meanwhile, the Lambda function processes the file in the background.
Source: Adapted from community discussion — SerialiDr
A developer has an application that is composed of many different AWS Lambda functions. The Lambda functions all use some of the same dependencies. To avoid security issues, the developer is constantly updating the dependencies of all of the Lambda functions. The result is duplicated effort for each function. How can the developer keep the dependencies of the Lambda functions up to date with the LEAST additional complexity?
Answer: C
To share dependencies across multiple functions. After you create a layer, you can apply it to any number of functions in your account. Without layers, you need to include the same dependencies in each individual deployment package. https://docs.aws.amazon.com/lambda/latest/dg/chapter-layers.html
Source: Adapted from community discussion — TanTran04
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
DVA-C02 practice, question 71. 548 questions available.
Version 1.0.0. How we source questions