2024 New AWS-Developer Dumps - Real Amazon Exam Questions
Dependable AWS-Developer Exam Dumps to Become Amazon Certified
NEW QUESTION # 28
How is provisioned throughput affected by the chosen consistency model when reading data from a
DynamoDB table?
- A. Strongly consistent reads use more throughput than eventually consistent reads.
- B. Strongly consistent reads use the same amount of throughput as eventually consistent reads
- C. Strongly consistent reads use variable throughput depending on read activity
- D. Strongly consistent reads use less throughput than eventually consistent reads
Answer: A
NEW QUESTION # 29
A company wants to migrate its web application to AWS and leverage Auto Scaling to handle pear workloads.
The Solutions Architect determined that the best metric for an Auto Scaling event is the number of concurrent users.
Based on this information, what should the Developer use to autoscale based on concurrent users?
- A. An Amazon Cloudwatch Networkin metric
- B. Amazon CloudFront to leverage AWS Edge Locations
- C. An Amazon SNS topic to be triggered when a concurrent user threshold is met
- D. A Custom Amazon CloudWatch metric for concurrent users.
Answer: D
NEW QUESTION # 30
A Developer wants to use AWS X-Ray to trace a user request end-to-end throughput the software stack. The Developer made the necessary changes in the application tested it, and found that the application is able to send the traces to AWS X-Ray. However, when the application is deployed to an EC2 instance, the traces are not available.
Which of the following could create this situation? (Select two.)
- A. The X-Ray endpoint specified in the application configuration is incorrect.
- B. The X-Ray daemon is not installed on the EC2 instance.
- C. The traces are reaching X-Ray, but the Developer does not have access to view the records.
- D. The instance role does not have "xray:PutTraceSegments" and "xray:PutTelemetryRecords" permissions.
- E. The instance role does not have "xray:BatchGetTraces" and "xray:GetTraceGraph" permissions.
Answer: B,D
NEW QUESTION # 31
A developer has an application container, an AWS Lambda function, and an Amazon Simple Queue Sen/ice (Amazon SOS) queue. The Lambda function uses the SOS queue as an event source. The Lambda function makes a call to a third-party machine learning API when the function is invoked. The response from the third-party API can take up to 60 seconds to return.
the Lambda function's timeout value is currently 65 seconds. The developer has noticed that the Lambda function sometimes processes duplicate messages from the SOS queue.
What should the developer do to ensure that the Lambda function does not process duplicate messages?
- A. Configure the SOS queue's visibility timeout value to be greater than the maximum time it takes to call the third-party API.
- B. Configure the Lambda function with a larger amount of memory.
- C. Configure an increase in the Lambda function's timeout value.
- D. Configure the SOS queue's delivery delay value to be greater than the maximum time it takes to call the third-party API.
Answer: B
NEW QUESTION # 32
EC2 instances are launched from Amazon Machine images (AMIS).
A given public AMI can:
- A. only be used to launch EC2 instances in the same country as the AMI is stored.
- B. only be used to launch EC2 instances in the same AWS region as the AMI is stored.
- C. only be used to launch EC2 instances in the same AWS availability zone as the AMI is stored
- D. be used to launch EC2 Instances in any AWS region.
Answer: B
NEW QUESTION # 33
A Developer wants to use AWS X-Ray to trace a user request end-to-end throughput the software stack. The Developer made the necessary changes in the application tested it, and found that the application is able to send the traces to AWS X-Ray. However, when the application is deployed to an EC2 instance, the traces are not available.
Which of the following could create this situation? (Select two.)
- A. The X-Ray endpoint specified in the application configuration is incorrect.
- B. The X-Ray daemon is not installed on the EC2 instance.
- C. The traces are reaching X-Ray, but the Developer does not have access to view the records.
- D. The instance role does not have "xray:PutTraceSegments" and "xray:PutTelemetryRecords" permissions.
- E. The instance role does not have "xray:BatchGetTraces" and "xray:GetTraceGraph" permissions.
Answer: B,D
NEW QUESTION # 34
A developer wants to modify the following AWS Cloud Formation template to embed another CloudFormation stack:
Which syntax should the developer add to the blank line of the CloudFormation template to meet this requirement?
- A. "Mapping" : "AWS::CloudFormation::Stack",
- B. "Typ©" : "AWS::CloudFormation::Stack",
- C. "Mapping" : "AWS::CloudFormation::NestedStack",
- D. "Type" : "AWS;:CloudFcrmation::NestedStack",
Answer: A
NEW QUESTION # 35
A company is developing an application that will run on several Amazon EC2 instances in an Auto Scaling group and can access a database running on Amazon EC2. The application needs to store secrets required to connect to the database. The application must allow for periodic secret rotation, and there should be no changes to the application when a secret changes.
What is the SAFEST way to meet these requirements?
- A. Configure the application to store secrets in Amazon S3 object metadata.
- B. Hard code the database secrets in the application code itself.
- C. Associate an IAM role to the EC2 instance where the application is running with permission to access the database.
- D. Use AWS Systems Manager Parameter Store with the SecureString data type to store secrets.
Answer: D
NEW QUESTION # 36
A developer is creating a mobile app that calls a backend service by using an Amazon API Gateway REST API. For integration testing during the development phase, the developer wants to simulate different backend responses without invoking the backend service.
Which solution will meet these requirements with the LEAST operational overhead?
- A. Create an Amazon EC2 instance that serves the backend REST API by using an AWS CloudFormation template.
- B. Create an AWS Lambda function. Use API Gateway proxy integration to return constant HTTP responses.
- C. Customize the API Gateway stage to select a response type based on the request.
- D. Use a request mapping template to select the mock integration response.
Answer: A
NEW QUESTION # 37
A developer is designing a distributed application built using a microservices architecture spanning multiple AWS accounts. The company's operations team wants to analyze and debug application issues from a centralized account.
How can the developer meet these requirements?
- A. Use Amazon X-Ray and create a new IAM user to publish the access keys into the centralized account.
- B. Enable AWS CloudTrail to publish the trails in an Amazon S3 bucket in the centralized account.
- C. Use an Amazon X-Ray agent with role assumption to publish data into the centralized account.
- D. Use VPC Flow Logs to collect applications logs across different accounts.
Answer: C
Explanation:
Explanation/Reference: https://aws.amazon.com/xray/faqs/#:~:text=Yes%2C%20the%20X-Ray%20agent,application%
20into%20a%20central%20account.
NEW QUESTION # 38
A company has 25:000 employees and is growing The company is creating an application that will be accessible to its employees only A developer is using Amazon S3 to store images and Amazon RDS to store application data. The company requires that all employee information remain in the legacy Security Assertion Markup Language (SAML) employee directory only and is not interested in mirroring any employee information on AWS How can the developer provide authorized access for the employees who will be using this application so each employee can access their own application data only?
- A. Use an Amazon Cognito identity pool, federate with the SAML provider, and use an IAM condition key with a value for the cognito-identity.amazonaws com sub variable to grant access to the employees.
- B. Create a unique IAM role for each employee and have each employee assume the role to access the application so they can access their personal data only.
- C. Use Amazon Cognito user pools, federate with the SAML provider and use user pool groups with an IAM policy
- D. Use Amazon VPC and keep all resources inside the VPC. and use a VPC link for the S3 bucket with the bucket policy.
Answer: C
NEW QUESTION # 39
Company B provides an online image recognition service and utilizes SOS to decouple system components for scalability The SQS consumers poll the imaging queue as often as possible to keep end-to-end throughput as high as possible. However, Company B is realizing that polling in tight loops is burning CPU cycles and increasing costs with empty responses.
How can Company B reduce the number of empty responses?
- A. Set the Imaging queue ReceiveMessageWaitTimeSeconds attribute to 20 seconds
- B. Set the imaging queue MessageRetentionPeriod attribute to 20 seconds
- C. Set the DelaySeconds parameter of a message to 20 seconds
- D. Set the imaging queue visibility Timeout attribute to 20 seconds
Answer: A
NEW QUESTION # 40
A development team wants to immediately build and deploy an application whenever there is a change to the source code. Which approaches could be used to trigger the deployment? (Select TWO.)
- A. Store the source code in an Amazon EC2 instance's ephemeral storage. Configure the instance to start AWS CodePipeline whenever there are changes to the source code
- B. Store the source code in an Amazon S3 bucket Configure AWS CodePipeline to start whenever a file in the bucket changes
- C. Store the source code in an AWS CodeCommit repository Configure AWS CodePipeline to start whenever a change is committed to the repository.
- D. Store the source code in an Amazon S3 bucket Configure AWS CodePipeline to start every 15 minutes
- E. Store the source code in an encrypted Amazon EBS volume Configure AWS CodePipeline to start whenever a file in the volume changes
Answer: C,E
Explanation:
Reference:
https://docs.aws.amazon.com/codepipeline/latest/userguide/tutorials-ecs-ecr-codedeploy.html
NEW QUESTION # 41
An organization has 10 departments. The organization wants to track the AWS usage of each department.
Which of the below mentioned options meets the requirement?
- A. Setup IAM users for each department and track their usage
- B. Setup IAM groups for each department and track their usage
- C. Create separate accounts for each department, but use consolidated billing for payment and tracking
- D. Create separate accounts for each department and track them separately
Answer: C
Explanation:
The cost of an IAM user or groups can never be tracked separately for the purpose of billing. The best
solution in this case is to create a separate account for each department and use consolidated billing.
Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/IAM_Introduction.html
NEW QUESTION # 42
A company is running an Amazon RDS for MySQL Multi-AZ DB instance for a business-critical workload. RDS encryption for the DB instance is disabled. A recent security audit concluded that all business-critical applications must encrypt data at rest. The company has asked its database specialist to formulate a plan to accomplish this for the DB instance.
Which process should the database specialist recommend?
- A. Create a snapshot of the unencrypted DB instance. Create an encrypted copy of the snapshot. Restore the DB instance from the encrypted snapshot.
- B. Create an encrypted snapshot of the unencrypted DB instance. Copy the encrypted snapshot to Amazon S3. Restore the DB instance from the encrypted snapshot using Amazon S3.
- C. Temporarily shut down the unencrypted DB instance. Enable AWS KMS encryption in the AWS Management Console using an AWS managed CMK. Restart the DB instance in an encrypted state.
- D. Create a new RDS for MySQL DB instance with encryption enabled. Restore the unencrypted snapshot to this DB instance.
Answer: B
Explanation:
Explanation/Reference: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.Encryption.html
NEW QUESTION # 43
A company is developing an application that will be accessed through the Amazon API Gateway REST API Registered users should be the only ones who can access certain resources of this API. The token being used should expire automatically and needs to be refreshed periodically.
How can a developer meet these requirements'?
- A. Create and maintain a database record for each user with a corresponding token and use an AWS Lambda authorizer m API Gateway
- B. Create an IAM user for each API user, attach an invoke permissions policy to the API. and use an IAM authorizer in API Gateway.
- C. Create an Amazon Cognito user pool, configure the Cognito Authorizer in API Gateway, and use the identity or access token
- D. Create an Amazon Cognito identity pool, configure the Amazon Cognito Authorizer in API Gateway, and use the temporary credentials generated by the identity pool
Answer: C
Explanation:
Reference: https://aws.amazon.com/premiumsupport/knowledge-center/cognito-custom-scopes-api-gateway/
NEW QUESTION # 44
An online gaming site asked you if you can deploy a database that is a fast, highly scalable NoSQL database service in AWS for a new site that he wants to build. Which database should you recommend?
- A. Amazon SimpleDB
- B. Amazon DynamoDB
- C. Amazon Redshift
- D. Amazon RDS
Answer: B
Explanation:
Amazon DynamoDB is ideal for database applications that require very low latency and predictable performance at any scale but don't need complex querying capabilities like joins or transactions. Amazon DynamoDB is a fully-managed NoSQL database service that offers high performance, predictable throughput and low cost. It is easy to set up, operate, and scale.
With Amazon DynamoDB, you can start small, specify the throughput and storage you need, and easily scale your capacity requirements on the fly. Amazon DynamoDB automatically partitions data over a number of servers to meet your request capacity. In addition, DynamoDB automatically replicates your data synchronously across multiple Availability Zones within an AWS Region to ensure high-availability and data durability.
Reference: https://aws.amazon.com/running_databases/#dynamodb_anchor
NEW QUESTION # 45
A user has created an EBS instance in the US-East-1a AZ. The user has a volume of 30 GB in the US-East-1b zone. How can the user attach the volume to an instance?
- A. Use the volume replicate function to create a new volume in the US-East-1a and attach that to the volume
- B. Since both the volume and the instance are in the same region, the user can attach the volume
- C. Take a snapshot of the volume. Create a new volume in the USEast-1a and attach that to the instance
- D. Use the volume migrate function to move the volume from one AZ to another and attach to the instance
Answer: C
Explanation:
If an EBS volume is not in the same AZ of an EC2 instance, it cannot be attached to the instance. The only option is to take a snapshot of the volume and create a new volume in the instance's AZ.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSSnapshots.html
NEW QUESTION # 46
An online retail company has deployed a serverless application with AWS Lambda, Amazon API Gateway, Amazon S3, and Amazon DynamoDB using AWS CloudFormation. The company rolled out a new release with major upgrades to the Lambda function and deployed the release to production. Subsequently, the application stopped working.
Which solution should bring the application back up as quickly as possible?
- A. Migrate DynamoDB to Amazon RDS and redeploy the Lambda function
- B. Redeploy the application on Amazon EC2 so the Lambda function can resolve dependencies
- C. Deploy the latest Lambda function in a different Region
- D. Roll back the Lambda function to the previous version
Answer: D
Explanation:
https://github.com/awslabs/aws-sam-cli/issues/1654
NEW QUESTION # 47
A developer is setting up Amazon API gateway for their company's products. The API will be registered developers to query and update their environments. The company wants to limit the amount of requests end users send for.bot cost and security reason management wants to offer registered the option of buying larger packages that allow for more requests.
- A. Enable Amazon CloudWatch metrics for the API Gateway stage Set up CloudWatch alarms based oft the Count metric and the ApiName, Method, Resource, and Stage dimensions to alerts when request rates pass the threshold Set the alarm action to Deny If a registered user chooses a larger package, create a user-specific alarm and adjust the values
- B. Enable throttling for the API Gateway stage Set a value tor both the rate and burst capacity If a registered larger package, create a stage for them, adjust the values, and share the new URL with them.
- C. Set up Amazon CloudWatch API logging in API Gateway Create a filter based on the user and requestTime fields and create an alarm on this filter Write an AWS Lambda function to analyze the values and requester information, and respond accordingly Set up the function as the target tor the alarm If a registered user chooses a larger package, update the Lambda code with the values
- D. Set up a default usage plan specify values for the rate and burst capacity, and associate it with a stage If a registered user chooses a larger package, create a custom plan with the appropriate values and associate the plan with the user
Answer: B
NEW QUESTION # 48
Which of the following device names is reserved for the root device for Linux instances of Amazon EC2?
- A. /dev/sda1
- B. /dev/sd[f-p][1-6]
- C. xvd[a-e]
- D. /dev/sd[b-e]
Answer: A
Explanation:
/dev/sda1 is the name of the device reserved for the root device for Linux instances.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/device_naming.html
NEW QUESTION # 49
You are building an application that provides real-time audio and video services to customers on the
Internet. The application requires high throughput. To ensure proper audio and video transmission,
minimal latency is required.
Which of the following will improve transmission quality?
- A. Use multiple elastic network interfaces
- B. Select G2 instance types
- C. Enable jumbo frames
- D. Enable enhanced networking
Answer: A
NEW QUESTION # 50
Which DynamoDB limits can be raised by contacting AWS support? Choose 2 answers
- A. The number of local secondary indexes per account
- B. The maximum storage used per account
- C. The number of provisioned throughput units per account
- D. The number of hash keys per account
- E. The number of tables per account
Answer: C,E
NEW QUESTION # 51
A developer is trying to get data from an Amazon DynamoDB table called demoman-table The developer configured the AWS CLI to use a specific 1AM user's credentials and executed the following command:
aws dynamodb get-item table-name demoman-table --key '("id": <"N''; ''1993''}} ' The command returned errors and no rows were returned What is the MOST likely cause of these issues?
- A. Amazon DynamoDB cannot be accessed from the AWS CLI and needs to be called via the REST API
- B. The 1AM user needs an associated policy with read access to demoman-table.
- C. The command is incorrect; it should be rewritten to use : ut-i t am with a string argument.
- D. The developer needs to log a ticket with AWS Support to enable access to the demoman-table.
Answer: B
NEW QUESTION # 52
Does AWS CloudFormation support Amazon EC2 tagging?
- A. It depends if the Amazon EC2 tagging has been defined in the template.
- B. No, CloudFormation doesn't support any tagging
- C. No, it doesn't support Amazon EC2 tagging.
- D. Yes, AWS CloudFormation supports Amazon EC2 tagging
Answer: D
Explanation:
In AWS CloudFormation, Amazon EC2 resources that support the tagging feature can also be tagged in an AWS template. The tag values can refer to template parameters, other resource names, resource attribute values (e.g. addresses), or values computed by simple functions (e.g., a concatenated list of strings).
http://aws.amazon.com/cloudformation/faqs/
NEW QUESTION # 53
......
The AWS-Developer certification exam is designed to validate the skills and knowledge of professionals who develop and maintain applications on the Amazon Web Services (AWS) platform. AWS Certified Developer - Associate certification is ideal for developers who have some experience with AWS services and want to demonstrate their ability to design, develop, and deploy scalable and reliable applications on AWS.
Get Ready with AWS-Developer Exam Dumps (2024): https://freedumps.validvce.com/AWS-Developer-exam-collection.html
