AWS Associate Developer(DVA-C01) Practice set-1


        
                    

        QUIZ START
        
            #1. The development team at a company creates serverless solutions using AWS Lambda. Functions are invoked by clients via AWS API Gateway which anyone can access. The team lead would like to control access using a 3rd party authorization mechanism.  As a Developer Associate, which of the following options would you recommend for the given use-case? 
			
				
					
						
						Lambda Authorizer			
					
					Lambda Authorizer				
			
				
				
					
						
						IAM permissions with sigv4			
					
					IAM permissions with sigv4				
			
				
				
					
						
						Cognito User Pools			
					
					Cognito User Pools				
			
				
				
					
						
						API Gateway User Pools			
					
					API Gateway User Pools				
			
	
#2. A company uses Elastic Beanstalk to manage its IT infrastructure on AWS Cloud and it would like to deploy the new application version to the EC2 instances. When the deployment is executed, some instances should serve requests with the old application version, while other instances should serve requests using the new application version until the deployment is completed.  Which deployment meets this requirement without incurring additional costs? 
			
				
					
						
						Immutable 			
					
					Immutable 				
			
				
				
					
						
						Rolling			
					
					Rolling				
			
				
				
					
						
						All at once 			
					
					All at once 				
			
				
				
					
						
						Rolling with additional batches			
					
					Rolling with additional batches				
			
	
#3. You have deployed a Java application to an EC2 instance where it uses the X-Ray SDK. When testing from your personal computer, the application sends data to X-Ray but when the application runs from within EC2, the application fails to send data to X-Ray.  Which of the following does NOT help with debugging the issue? 
			
				
					
						
						EC2 X-Ray Daemon 			
					
					EC2 X-Ray Daemon 				
			
				
				
					
						
						EC2 Instance Role			
					
					EC2 Instance Role				
			
				
				
					
						
						CloudTrail			
					
					CloudTrail				
			
				
				
					
						
						X-Ray sampling			
					
					X-Ray sampling				
			
	
#4. A firm runs its technology operations on a fleet of Amazon EC2 instances. The firm needs a certain software to be available on the instances to support their daily workflows. The developer team has been told to use the user data feature of EC2 instances.  Which of the following are true about the user data EC2 configuration? ( Select two) 
Select all that apply:
			
				
					
						
						By default, user data is executed every time an EC2 instance is re-started						
					
				By default, user data is executed every time an EC2 instance is re-started				
			
				
				
					
						
						When an instance is running, you can update user data by using root user credentials						
					
				When an instance is running, you can update user data by using root user credentials				
			
				
				
					
						
						By default, scripts entered as user data are executed with root user privileges						
					
				By default, scripts entered as user data are executed with root user privileges				
			
				
				
					
						
						By default, user data runs only during the boot cycle when you first launch an instance 						
					
				By default, user data runs only during the boot cycle when you first launch an instance 				
			
				
				
					
						
						By default, scripts entered as user data do not have root user privileges for executing						
					
				By default, scripts entered as user data do not have root user privileges for executing				
			
	
#5. A company has hired you as an AWS Certified Developer Associate to help with redesigning a real-time data processor. The company wants to build custom applications that process and analyze the streaming data for its specialized needs.  Which solution will you recommend to address this use-case? 
			
				
					
						
						Use SNS to process the data streams as well as decouple the producers and consumers for the real-time data processor			
					
					Use SNS to process the data streams as well as decouple the producers and consumers for the real-time data processor				
			
				
				
					
						
						Use SQS to process the data streams as well as decouple the producers and consumers for the real-time data processor 			
					
					Use SQS to process the data streams as well as decouple the producers and consumers for the real-time data processor 				
			
				
				
					
						
						Use Kinesis Data Streams to process the data streams as well as decouple the producers and consumers for the real-time data processor			
					
					Use Kinesis Data Streams to process the data streams as well as decouple the producers and consumers for the real-time data processor				
			
				
				
					
						
						Use SQS to process the data streams as well as decouple the producers and consumers for the real-time data processor 			
					
					Use SQS to process the data streams as well as decouple the producers and consumers for the real-time data processor 				
			
	
#6. A SaaS company runs a HealthCare web application that is used worldwide by users. There have been requests by mobile developers to expose public APIs for the application-specific functionality. You decide to make the APIs available to mobile developers as product offerings.  Which of the following options will allow you to do that? 
			
				
					
						
						Use API Gateway Usage Plans			
					
					Use API Gateway Usage Plans				
			
				
				
					
						
						Use AWS Billing Usage Plans			
					
					Use AWS Billing Usage Plans				
			
				
				
					
						
						Use CloudFront Usage Plans			
					
					Use CloudFront Usage Plans				
			
				
				
					
						
						Use AWS Lambda Custom Authorizers			
					
					Use AWS Lambda Custom Authorizers				
			
	
#7. You are a developer in a manufacturing company that has several servers on-site. The company decides to move new development to the cloud using serverless technology. You decide to use the AWS Serverless Application Model (AWS SAM) and work with an AWS SAM template file to represent your serverless architecture.  Which of the following is NOT a valid serverless resource type? 
			
				
					
						
						AWS::Serverless::Api			
					
					AWS::Serverless::Api				
			
				
				
					
						
						AWS::Serverless::Function 			
					
					AWS::Serverless::Function 				
			
				
				
					
						
						AWS::Serverless::UserPool			
					
					AWS::Serverless::UserPool				
			
				
				
					
						
						AWS::Serverless::SimpleTable 			
					
					AWS::Serverless::SimpleTable 				
			
	
#8. You are running workloads on AWS and have embedded RDS database connection strings within each web server hosting your applications. After failing a security audit, you are looking at a different approach to store your secrets securely and automatically rotate the database credentials.  Which AWS service can you use to address this use-case? 
			
				
					
						
						Secrets Manager			
					
					Secrets Manager				
			
				
				
					
						
						SSM Parameter Store			
					
					SSM Parameter Store				
			
				
				
					
						
						Systems Manager 			
					
					Systems Manager 				
			
				
				
					
						
						KMS 			
					
					KMS 				
			
	
#9. A developer is configuring a bucket policy that denies upload object permission to any requests that do not include the x-amz-server-side-encryption header requesting server-side encryption with SSE-KMS for an Amazon S3 bucket - examplebucket.  Which of the following policies is the right fit for the given requirement? 
			
				
					
						
						{ "Version":"2012-10-17", "Id":"PutObjectPolicy", "Statement":[{ "Sid":"DenyUnEncryptedObjectUploads", "Effect":"Deny", "Principal":"", "Action":"s3:PutObject", "Resource":"arn:aws:s3:::examplebucket/", "Condition":{ "StringEquals":{ "s3:x-amz-server-side-encryption":"aws:kms" } } } ] }			
					
					{ "Version":"2012-10-17", "Id":"PutObjectPolicy", "Statement":[{ "Sid":"DenyUnEncryptedObjectUploads", "Effect":"Deny", "Principal":"", "Action":"s3:PutObject", "Resource":"arn:aws:s3:::examplebucket/", "Condition":{ "StringEquals":{ "s3:x-amz-server-side-encryption":"aws:kms" } } } ] }				
			
				
				
					
						
						{ "Version":"2012-10-17", "Id":"PutObjectPolicy", "Statement":[{ "Sid":"DenyUnEncryptedObjectUploads", "Effect":"Deny", "Principal":"", "Action":"s3:PutObject", "Resource":"arn:aws:s3:::examplebucket/", "Condition":{ "StringNotEquals":{ "s3:x-amz-server-side-encryption":"aws:kms" } } } ] }			
					
					{ "Version":"2012-10-17", "Id":"PutObjectPolicy", "Statement":[{ "Sid":"DenyUnEncryptedObjectUploads", "Effect":"Deny", "Principal":"", "Action":"s3:PutObject", "Resource":"arn:aws:s3:::examplebucket/", "Condition":{ "StringNotEquals":{ "s3:x-amz-server-side-encryption":"aws:kms" } } } ] }				
			
				
				
					
						
						{ "Version":"2012-10-17", "Id":"PutObjectPolicy", "Statement":[{ "Sid":"DenyUnEncryptedObjectUploads", "Effect":"Deny", "Principal":"", "Action":"s3:GetObject", "Resource":"arn:aws:s3:::examplebucket/", "Condition":{ "StringNotEquals":{ "s3:x-amz-server-side-encryption":"aws:AES256" } } } ] }			
					
					{ "Version":"2012-10-17", "Id":"PutObjectPolicy", "Statement":[{ "Sid":"DenyUnEncryptedObjectUploads", "Effect":"Deny", "Principal":"", "Action":"s3:GetObject", "Resource":"arn:aws:s3:::examplebucket/", "Condition":{ "StringNotEquals":{ "s3:x-amz-server-side-encryption":"aws:AES256" } } } ] }				
			
				
				
					
						
						{ "Version":"2012-10-17", "Id":"PutObjectPolicy", "Statement":[{ "Sid":"DenyUnEncryptedObjectUploads", "Effect":"Deny", "Principal":"", "Action":"s3:PutObject", "Resource":"arn:aws:s3:::examplebucket/", "Condition":{ "StringNotEquals":{ "s3:x-amz-server-side-encryption":"false" } } } ] } 			
					
					{ "Version":"2012-10-17", "Id":"PutObjectPolicy", "Statement":[{ "Sid":"DenyUnEncryptedObjectUploads", "Effect":"Deny", "Principal":"", "Action":"s3:PutObject", "Resource":"arn:aws:s3:::examplebucket/", "Condition":{ "StringNotEquals":{ "s3:x-amz-server-side-encryption":"false" } } } ] } 				
			
	
#10. You have chosen AWS Elastic Beanstalk to upload your application code and allow it to handle details such as provisioning resources and monitoring.  When creating configuration files for AWS Elastic Beanstalk which naming convention should you follow? 
			
				
					
						
						.ebextensions_.config			
					
					.ebextensions_.config				
			
				
				
					
						
						.config/.ebextensions			
					
					.config/.ebextensions				
			
				
				
					
						
						.config_.ebextensions			
					
					.config_.ebextensions				
			
				
				
					
						
						.ebextensions/.config			
					
					.ebextensions/.config				
			
	
#11. You are a developer for a web application written in .NET which uses the AWS SDK. You need to implement an authentication mechanism that returns a JWT (JSON Web Token).  Which AWS service will help you with token handling and management? 
			
				
					
						
						Cognito User Pools			
					
					Cognito User Pools				
			
				
				
					
						
						API Gateway			
					
					API Gateway				
			
				
				
					
						
						Cognito Identity Pools			
					
					Cognito Identity Pools				
			
				
				
					
						
						Cognito Sync			
					
					Cognito Sync				
			
	
#12. Your company has stored all application secrets in SSM Parameter Store. The audit team has requested to get a report to better understand when and who has issued API calls against SSM Parameter Store.  Which of the following options can be used to produce your report? 
			
				
					
						
						Use SSM Parameter Store Access Logs in S3 to get a record of actions taken by a user 			
					
					Use SSM Parameter Store Access Logs in S3 to get a record of actions taken by a user 				
			
				
				
					
						
						Use SSM Parameter Store Access Logs in CloudWatch Logs to get a record of actions taken by a user			
					
					Use SSM Parameter Store Access Logs in CloudWatch Logs to get a record of actions taken by a user				
			
				
				
					
						
						Use SSM Parameter Store List feature to get a record of actions taken by a user			
					
					Use SSM Parameter Store List feature to get a record of actions taken by a user				
			
				
				
					
						
						Use AWS CloudTrail to get a record of actions taken by a user			
					
					Use AWS CloudTrail to get a record of actions taken by a user				
			
	
#13. ECS Fargate container tasks are usually spread across Availability Zones (AZs) and the underlying workloads need persistent cross-AZ shared access to the data volumes configured for the container tasks.  Which of the following solutions is the best choice for these workloads? 
			
				
					
						
						Docker volumes			
					
					Docker volumes				
			
				
				
					
						
						Bind mounts			
					
					Bind mounts				
			
				
				
					
						
						AWS Storage Gateway volumes			
					
					AWS Storage Gateway volumes				
			
				
				
					
						
						Amazon EFS volumes			
					
					Amazon EFS volumes				
			
	
#14. To enable HTTPS connections for his web application deployed on the AWS Cloud, a developer is in the process of creating server certificate.  Which AWS entities can be used to deploy SSL/TLS server certificates? (Select two) 
Select all that apply:
			
				
					
						
						AWS Secrets Manager						
					
				AWS Secrets Manager				
			
				
				
					
						
						AWS Systems Manager 						
					
				AWS Systems Manager 				
			
				
				
					
						
						AWS Certificate Manager						
					
				AWS Certificate Manager				
			
				
				
					
						
						AWS CloudFormation 						
					
				AWS CloudFormation 				
			
				
				
					
						
						IAM 						
					
				IAM 				
			
	
#15. As part of his development work, an AWS Certified Developer Associate is creating policies and attaching them to IAM identities. After creating necessary Identity-based policies, he is now creating Resource-based policies.  Which is the only resource-based policy that the IAM service supports? 
			
				
					
						
						AWS Organizations Service Control Policies (SCP) 			
					
					AWS Organizations Service Control Policies (SCP) 				
			
				
				
					
						
						Trust policy 			
					
					Trust policy 				
			
				
				
					
						
						Access control list (ACL) 			
					
					Access control list (ACL) 				
			
				
				
					
						
						Permissions boundary			
					
					Permissions boundary				
			
	
#16. In addition to regular sign-in credentials, AWS supports Multi-Factor Authentication (MFA) for accounts with privileged access.  Which of the following MFA mechanisms is NOT for root user authentication? 
			
				
					
						
						Hardware MFA device 			
					
					Hardware MFA device 				
			
				
				
					
						
						U2F security key 			
					
					U2F security key 				
			
				
				
					
						
						SMS text message-based MFA 			
					
					SMS text message-based MFA 				
			
				
				
					
						
						Virtual MFA devices			
					
					Virtual MFA devices				
			
	
#17. A multi-national company has just moved to AWS Cloud and it has configured forecast-based AWS Budgets alerts for cost management. However, no alerts have been received even though the account and the budgets have been created almost three weeks ago.  What could be the issue with the AWS Budgets configuration? 
			
				
					
						
						AWS requires approximately 5 weeks of usage data to generate budget forecasts			
					
					AWS requires approximately 5 weeks of usage data to generate budget forecasts				
			
				
				
					
						
						Budget forecast has been created from an account that does not have enough privileges 			
					
					Budget forecast has been created from an account that does not have enough privileges 				
			
				
				
					
						
						Amazon CloudWatch could be down and hence alerts are not being sent			
					
					Amazon CloudWatch could be down and hence alerts are not being sent				
			
				
				
					
						
						Account has to be part of AWS Organizations to receive AWS Budget alerts			
					
					Account has to be part of AWS Organizations to receive AWS Budget alerts				
			
	
#18. A Developer has been entrusted with the job of securing certain S3 buckets that are shared by a large team of users. Last time, a bucket policy was changed, the bucket was erroneously available for everyone, outside the organization too.  Which feature/service will help the developer identify similar security issues with minimum effort? 
			
				
					
						
						Access Advisor feature on IAM console			
					
					Access Advisor feature on IAM console				
			
				
				
					
						
						IAM Access Analyzer 			
					
					IAM Access Analyzer 				
			
				
				
					
						
						S3 Object Lock 			
					
					S3 Object Lock 				
			
				
				
					
						
						S3 Analytics			
					
					S3 Analytics				
			
	
#19. A startup with newly created AWS account is testing different EC2 instances. They have used Burstable performance instance - T2.micro - for 35 seconds and stopped the instance.  At the end of the month, what is the instance usage duration that the company is charged for? 
			
				
					
						
						0 seconds			
					
					0 seconds				
			
				
				
					
						
						35 seconds			
					
					35 seconds				
			
				
				
					
						
						60 seconds			
					
					60 seconds				
			
				
				
					
						
						30 seconds			
					
					30 seconds				
			
	
#20. You are creating a Cloud Formation template to deploy your CMS application running on an EC2 instance within your AWS account. Since the application will be deployed across multiple regions, you need to create a map of all the possible values for the base AMI.  How will you invoke the !FindInMap function to fulfill this use case? 
			
				
					
						
						!FindInMap [ MapName, TopLevelKey ]			
					
					!FindInMap [ MapName, TopLevelKey ]				
			
				
				
					
						
						!FindInMap [ MapName ]			
					
					!FindInMap [ MapName ]				
			
				
				
					
						
						!FindInMap [ MapName, TopLevelKey, SecondLevelKey ]			
					
					!FindInMap [ MapName, TopLevelKey, SecondLevelKey ]				
			
				
				
					
						
						!FindInMap [ MapName, TopLevelKey, SecondLevelKey, ThirdLevelKey ]			
					
					!FindInMap [ MapName, TopLevelKey, SecondLevelKey, ThirdLevelKey ]				
			
	
#21. Your company has configured AWS Organizations to manage multiple AWS accounts. Within each AWS account, there are many CloudFormation scripts running. Your manager has requested that each script output the account number of the account the script was executed in.  Which Pseudo parameter will you use to get this information? 
			
				
					
						
						AWS::NoValue 			
					
					AWS::NoValue 				
			
				
				
					
						
						AWS::AccountId			
					
					AWS::AccountId				
			
				
				
					
						
						AWS::Region			
					
					AWS::Region				
			
				
				
					
						
						AWS::StackName 			
					
					AWS::StackName 				
			
	
#22. As an AWS Certified Developer Associate, you been asked to create an AWS Elastic Beanstalk environment to handle deployment for an application that has high traffic and high availability needs. You need to deploy the new version using Beanstalk while making sure that performance and availability are not affected.  Which of the following is the MOST optimal way to do this while keeping the solution cost-effective? 
			
				
					
						
						Deploy using 'Rolling' deployment policy			
					
					Deploy using 'Rolling' deployment policy				
			
				
				
					
						
						Deploy using 'Immutable' deployment policy			
					
					Deploy using 'Immutable' deployment policy				
			
				
				
					
						
						Deploy using 'All at once' deployment policy			
					
					Deploy using 'All at once' deployment policy				
			
				
				
					
						
						Deploy using 'Rolling with additional batch' deployment policy 			
					
					Deploy using 'Rolling with additional batch' deployment policy 				
			
	
#23. An IT company is configuring Auto Scaling for its Amazon EC2 instances spread across different AZs and Regions.  Which of the following scenarios are NOT correct about EC2 Auto Scaling? (Select two) 
Select all that apply:
			
				
					
						
						Auto Scaling groups that span across multiple Regions need to be enabled for all the Regions specified 						
					
				Auto Scaling groups that span across multiple Regions need to be enabled for all the Regions specified 				
			
				
				
					
						
						An Auto Scaling group can contain EC2 instances in one or more Availability Zones within the same Region						
					
				An Auto Scaling group can contain EC2 instances in one or more Availability Zones within the same Region				
			
				
				
					
						
						Amazon EC2 Auto Scaling attempts to distribute instances evenly between the Availability Zones that are enabled for your Auto Scaling group						
					
				Amazon EC2 Auto Scaling attempts to distribute instances evenly between the Availability Zones that are enabled for your Auto Scaling group				
			
				
				
					
						
						For Auto Scaling groups in a VPC, the EC2 instances are launched in subnets						
					
				For Auto Scaling groups in a VPC, the EC2 instances are launched in subnets				
			
				
				
					
						
						An Auto Scaling group can contain EC2 instances in only one Availability Zone of a Region						
					
				An Auto Scaling group can contain EC2 instances in only one Availability Zone of a Region				
			
	
#24. A company is looking at optimizing their Amazon EC2 instance costs. Few instances are sure to run for a few years, but the instance type might change based on business requirements.  Which EC2 instance purchasing option should they opt to meet the reduced cost criteria? 
			
				
					
						
						Convertible Reserved instances			
					
					Convertible Reserved instances				
			
				
				
					
						
						Elastic Reserved instances 			
					
					Elastic Reserved instances 				
			
				
				
					
						
						Standard Reserved instances			
					
					Standard Reserved instances				
			
				
				
					
						
						Scheduled Reserved instances 			
					
					Scheduled Reserved instances 				
			
	
#25. An organization has hosted its EC2 instances in two AZs. AZ1 has two instances and AZ2 has 8 instances. The Elastic Load Balancer managing the instances in the two AZs has cross-zone load balancing enabled in its configuration.  What percentage traffic will each of the instances in AZ1 receive? 
			
				
					
						
						25 			
					
					25 				
			
				
				
					
						
						20 			
					
					20 				
			
				
				
					
						
						10 			
					
					10 				
			
				
				
					
						
						15 			
					
					15 				
			
	
#26. A company has built its technology stack on AWS serverless architecture for managing all its business functions. To expedite development for a new business requirement, the company is looking at using pre-built serverless applications.  Which AWS service represents the easiest solution to address this use-case? 
			
				
					
						
						AWS Marketplace 			
					
					AWS Marketplace 				
			
				
				
					
						
						AWS AppSync 			
					
					AWS AppSync 				
			
				
				
					
						
						AWS Service Catalog 			
					
					AWS Service Catalog 				
			
				
				
					
						
						AWS Serverless Application Repository (SAR)			
					
					AWS Serverless Application Repository (SAR)				
			
	
#27. You have created a Java application that uses RDS for its main data storage and ElastiCache for user session storage. The application needs to be deployed using Elastic Beanstalk and every new deployment should allow the application servers to reuse the RDS database. On the other hand, user session data stored in ElastiCache can be re-created for every deployment.  Which of the following configurations will allow you to achieve this? (Select two) 
Select all that apply:
			
				
					
						
						ElastiCache defined in .ebextensions/ 						
					
				ElastiCache defined in .ebextensions/ 				
			
				
				
					
						
						RDS database defined externally and referenced through environment variables 						
					
				RDS database defined externally and referenced through environment variables 				
			
				
				
					
						
						ElastiCache bundled with the application source code						
					
				ElastiCache bundled with the application source code				
			
				
				
					
						
						RDS database defined in .ebextensions/						
					
				RDS database defined in .ebextensions/				
			
				
				
					
						
						ElastiCache database defined externally and referenced through environment variables 						
					
				ElastiCache database defined externally and referenced through environment variables 				
			
	
#28. A developer has been asked to create an application that can be deployed across a fleet of EC2 instances. The configuration must allow for full control over the deployment steps using the blue-green deployment.  Which service will help you achieve that? 
			
				
					
						
						CodeDeploy			
					
					CodeDeploy				
			
				
				
					
						
						CodeBuild 			
					
					CodeBuild 				
			
				
				
					
						
						Elastic Beanstalk 			
					
					Elastic Beanstalk 				
			
				
				
					
						
						CodePipeline 			
					
					CodePipeline 				
			
	
#29. A development team wants to deploy an AWS Lambda function that requires significant CPU utilization.  As a Developer Associate, which of the following would you suggest for reducing the average runtime of the function? 
			
				
					
						
						Deploy the function with its CPU allocation set to the maximum amount 			
					
					Deploy the function with its CPU allocation set to the maximum amount 				
			
				
				
					
						
						Deploy the function with its memory allocation set to the maximum amount			
					
					Deploy the function with its memory allocation set to the maximum amount				
			
				
				
					
						
						Deploy the function into multiple AWS Regions 			
					
					Deploy the function into multiple AWS Regions 				
			
				
				
					
						
						Deploy the function using Lambda layers			
					
					Deploy the function using Lambda layers				
			
	
#30. An organization has offices across multiple locations and the technology team has configured an Application Load Balancer across targets in multiple Availability Zones. The team wants to analyze the incoming requests for latencies and the client's IP address patterns.  Which feature of the Load Balancer will help collect the required information? 
			
				
					
						
						CloudTrail logs 			
					
					CloudTrail logs 				
			
				
				
					
						
						CloudWatch metrics 			
					
					CloudWatch metrics 				
			
				
				
					
						
						ALB request tracing 			
					
					ALB request tracing 				
			
				
				
					
						
						ALB access logs			
					
					ALB access logs				
			
	
#31. An e-commerce company has developed an API that is hosted on Amazon ECS. Variable traffic spikes on the application are causing order processing to take too long. The application processes orders using Amazon SQS queues. The ApproximateNumberOfMessagesVisible metric spikes at very high values throughout the day which triggers the CloudWatch alarm. Other ECS metrics for the API containers are well within limits.  As a Developer Associate, which of the following will you recommend for improving performance while keeping costs low? 
			
				
					
						
						Use ECS step scaling policy			
					
					Use ECS step scaling policy				
			
				
				
					
						
						Use Docker swarm			
					
					Use Docker swarm				
			
				
				
					
						
						Use backlog per instance metric with target tracking scaling policy			
					
					Use backlog per instance metric with target tracking scaling policy				
			
				
				
					
						
						Use ECS service scheduler			
					
					Use ECS service scheduler				
			
	
#32. Which of the following best describes how KMS Encryption works? 
			
				
					
						
						KMS receives CMK from the client at every encrypt call, and encrypts the data with that			
					
					KMS receives CMK from the client at every encrypt call, and encrypts the data with that				
			
				
				
					
						
						KMS stores the CMK, and receives data from the clients, which it encrypts and sends back			
					
					KMS stores the CMK, and receives data from the clients, which it encrypts and sends back				
			
				
				
					
						
						KMS sends the CMK to the client, which performs the encryption and then deletes the CMK 			
					
					KMS sends the CMK to the client, which performs the encryption and then deletes the CMK 				
			
				
				
					
						
						KMS generates a new CMK for each Encrypt call and encrypts the data with it 			
					
					KMS generates a new CMK for each Encrypt call and encrypts the data with it 				
			
	
#33. Your global organization has an IT infrastructure that is deployed using CloudFormation on AWS Cloud. One employee, in us-east-1 Region, has created a stack 'Application1' and made an exported output with the name 'ELBDNSName'. Another employee has created a stack for a different application 'Application2' in us-east-2 Region and also exported an output with the name 'ELBDNSName'. The first employee wanted to deploy the CloudFormation stack 'Application1' in us-east-2, but it got an error. What is the cause of the error? 
			
				
					
						
						Exported Output Values in CloudFormation must have unique names within a single Region			
					
					Exported Output Values in CloudFormation must have unique names within a single Region				
			
				
				
					
						
						Output Values in CloudFormation must have unique names across all Regions			
					
					Output Values in CloudFormation must have unique names across all Regions				
			
				
				
					
						
						Exported Output Values in CloudFormation must have unique names across all Regions			
					
					Exported Output Values in CloudFormation must have unique names across all Regions				
			
				
				
					
						
						Output Values in CloudFormation must have unique names within a single Region			
					
					Output Values in CloudFormation must have unique names within a single Region				
			
	
#34. A Developer at a company is working on a CloudFormation template to set up resources. Resources will be defined using code and provisioned based on certain conditions.  Which section of a CloudFormation template does not allow for conditions? 
			
				
					
						
						Conditions 			
					
					Conditions 				
			
				
				
					
						
						Resources 			
					
					Resources 				
			
				
				
					
						
						Parameters			
					
					Parameters				
			
				
				
					
						
						Outputs 			
					
					Outputs 				
			
	
#35. You're a developer doing contract work for the media sector. Since you work alone, you opt for technologies that require little maintenance, which allows you to focus more on your coding. You have chosen AWS Elastic Beanstalk to assist with the deployment of your applications. While reading online documentation you find that Elastic Beanstalk relies on another AWS service to provision your resources.  Which of the following represents this AWS service? 
			
				
					
						
						CodeCommit			
					
					CodeCommit				
			
				
				
					
						
						CloudFormation			
					
					CloudFormation				
			
				
				
					
						
						CodeDeploy 			
					
					CodeDeploy 				
			
				
				
					
						
						Systems Manager			
					
					Systems Manager				
			
	
#36. A developer has been asked to create a web application to be deployed on EC2 instances. The developer just wants to focus on writing application code without worrying about server provisioning, configuration and deployment.  As a Developer Associate, which AWS service would you recommend for the given use-case? 
			
				
					
						
						Elastic Beanstalk			
					
					Elastic Beanstalk				
			
				
				
					
						
						CloudFormation 			
					
					CloudFormation 				
			
				
				
					
						
						CodeDeploy 			
					
					CodeDeploy 				
			
				
				
					
						
						Serverless Application Model 			
					
					Serverless Application Model 				
			
	
#37. As an AWS Certified Developer Associate, you are given a document written in YAML that represents the architecture of a serverless application. The first line of the document contains Transform: 'AWS::Serverless-2016-10-31'.  What does the Transform section in the document represent? 
			
				
					
						
						Presence of 'Transform' section indicates it is a Serverless Application Model (SAM) template 			
					
					Presence of 'Transform' section indicates it is a Serverless Application Model (SAM) template 				
			
				
				
					
						
						It represents a Lambda function definition			
					
					It represents a Lambda function definition				
			
				
				
					
						
						It represents an intrinsic function			
					
					It represents an intrinsic function				
			
				
				
					
						
						Presence of 'Transform' section indicates it is a CloudFormation Parameter 			
					
					Presence of 'Transform' section indicates it is a CloudFormation Parameter 				
			
	
#38. A financial services company is undergoing a compliance audit by the regulator. The company has hundreds of IAM users that make API calls but specifically it needs to be determined who is making KMS API calls.  Which of the following services should the audit team use? 
			
				
					
						
						CloudWatch Metrics			
					
					CloudWatch Metrics				
			
				
				
					
						
						X-Ray 			
					
					X-Ray 				
			
				
				
					
						
						CloudTrail			
					
					CloudTrail				
			
				
				
					
						
						Config 			
					
					Config 				
			
	
#39. The Technical Lead of your team has reviewed a CloudFormation YAML template written by a new recruit and specified that an invalid section has been added to the template.  Which of the following represents an invalid section of the CloudFormation template? 
			
				
					
						
						Dependencies' section of the template			
					
					Dependencies' section of the template				
			
				
				
					
						
						Conditions' section of the template 			
					
					Conditions' section of the template 				
			
				
				
					
						
						Resources' section of the template 			
					
					Resources' section of the template 				
			
				
				
					
						
						Parameters' section of the template 			
					
					Parameters' section of the template 				
			
	
#40. As a developer, you are working on creating an application using AWS Cloud Development Kit (CDK).  Which of the following represents the correct order of steps to be followed for creating an app using AWS CDK? 
			
				
					
						
						Create the app from a template provided by AWS CloudFormation -> Add code to the app to create resources within stacks -> Build the app (optional) -> Synthesize one or more stacks in the app -> Deploy stack(s) to your AWS account			
					
					Create the app from a template provided by AWS CloudFormation -> Add code to the app to create resources within stacks -> Build the app (optional) -> Synthesize one or more stacks in the app -> Deploy stack(s) to your AWS account				
			
				
				
					
						
						Create the app from a template provided by AWS CDK -> Add code to the app to create resources within stacks -> Build the app (optional) -> Synthesize one or more stacks in the app -> Deploy stack(s) to your AWS account			
					
					Create the app from a template provided by AWS CDK -> Add code to the app to create resources within stacks -> Build the app (optional) -> Synthesize one or more stacks in the app -> Deploy stack(s) to your AWS account				
			
				
				
					
						
						Create the app from a template provided by AWS CloudFormation -> Add code to the app to create resources within stacks -> Synthesize one or more stacks in the app -> Deploy stack(s) to your AWS account -> Build the app			
					
					Create the app from a template provided by AWS CloudFormation -> Add code to the app to create resources within stacks -> Synthesize one or more stacks in the app -> Deploy stack(s) to your AWS account -> Build the app				
			
				
				
					
						
						Create the app from a template provided by AWS CDK -> Add code to the app to create resources within stacks -> Synthesize one or more stacks in the app -> Deploy stack(s) to your AWS account -> Build the app 			
					
					Create the app from a template provided by AWS CDK -> Add code to the app to create resources within stacks -> Synthesize one or more stacks in the app -> Deploy stack(s) to your AWS account -> Build the app 				
			
	
#41. You're a developer working on a large scale order processing application. After developing the features, you commit your code to AWS CodeCommit and begin building the project with AWS CodeBuild before it gets deployed to the server. The build is taking too long and the error points to an issue resolving dependencies from a third-party. You would like to prevent a build running this long in the future for similar underlying reasons.  Which of the following options represents the best solution to address this use-case? 
			
				
					
						
						Use AWS Lambda			
					
					Use AWS Lambda				
			
				
				
					
						
						Use AWS CloudWatch Events			
					
					Use AWS CloudWatch Events				
			
				
				
					
						
						Enable CodeBuild timeouts			
					
					Enable CodeBuild timeouts				
			
				
				
					
						
						Use VPC Flow Logs			
					
					Use VPC Flow Logs				
			
	
#42. Amazon Simple Queue Service (SQS) has a set of APIs for various actions supported by the service.  As a developer associate, which of the following would you identify as correct regarding the CreateQueue API? (Select two) 
Select all that apply:
			
				
					
						
						You can't change the queue type after you create it						
					
				You can't change the queue type after you create it				
			
				
				
					
						
						The dead-letter queue of a FIFO queue must also be a FIFO queue. Whereas, the dead-letter queue of a standard queue can be a standard queue or a FIFO queue 						
					
				The dead-letter queue of a FIFO queue must also be a FIFO queue. Whereas, the dead-letter queue of a standard queue can be a standard queue or a FIFO queue 				
			
				
				
					
						
						The length of time, in seconds, for which the delivery of all messages in the queue is delayed is configured using MessageRetentionPeriod attribute						
					
				The length of time, in seconds, for which the delivery of all messages in the queue is delayed is configured using MessageRetentionPeriod attribute				
			
				
				
					
						
						Queue tags are case insensitive. A new tag with a key identical to that of an existing tag overwrites the existing tag						
					
				Queue tags are case insensitive. A new tag with a key identical to that of an existing tag overwrites the existing tag				
			
				
				
					
						
						The visibility timeout value for the queue is in seconds, which defaults to 30 seconds						
					
				The visibility timeout value for the queue is in seconds, which defaults to 30 seconds				
			
	
#43. After a test deployment in ElasticBeanstalk environment, a developer noticed that all accumulated Amazon EC2 burst balances were lost.  Which of the following options can lead to this behavior? 
			
				
					
						
						The deployment was either run with immutable updates or in traffic splitting mode			
					
					The deployment was either run with immutable updates or in traffic splitting mode				
			
				
				
					
						
						The deployment was run as a Rolling deployment, resulting in the resetting of EC2 burst balances			
					
					The deployment was run as a Rolling deployment, resulting in the resetting of EC2 burst balances				
			
				
				
					
						
						The deployment was run as a All-at-once deployment, flushing all the accumulated EC2 burst balances			
					
					The deployment was run as a All-at-once deployment, flushing all the accumulated EC2 burst balances				
			
				
				
					
						
						When a canary deployment fails, it resets the EC2 burst balances to zero 			
					
					When a canary deployment fails, it resets the EC2 burst balances to zero 				
			
	
#44. A multi-national company has multiple business units with each unit having its own AWS account. The development team at the company would like to debug and trace data across accounts and visualize it in a centralized account.  As a Developer Associate, which of the following solutions would you suggest for the given use-case? 
			
				
					
						
						VPC Flow Logs			
					
					VPC Flow Logs				
			
				
				
					
						
						X-Ray			
					
					X-Ray				
			
				
				
					
						
						CloudWatch Events			
					
					CloudWatch Events				
			
				
				
					
						
						CloudTrail			
					
					CloudTrail				
			
	
#45. An application is hosted by a 3rd party and exposed at yourapp.3rdparty.com. You would like to have your users access your application using http://www.mydomain.com, which you own and manage under Route 53.  What Route 53 record should you create? 
			
				
					
						
						Create an A record			
					
					Create an A record				
			
				
				
					
						
						Create a PTR record			
					
					Create a PTR record				
			
				
				
					
						
						Create an Alias Record			
					
					Create an Alias Record				
			
				
				
					
						
						Create a CNAME record			
					
					Create a CNAME record				
			
	
#46. A cybersecurity firm wants to run their applications on single-tenant hardware to meet security guidelines.  Which of the following is the MOST cost-effective way of isolating their Amazon EC2 instances to a single tenant? 
			
				
					
						
						Dedicated Instances 			
					
					Dedicated Instances 				
			
				
				
					
						
						Spot Instances			
					
					Spot Instances				
			
				
				
					
						
						Dedicated Hosts			
					
					Dedicated Hosts				
			
				
				
					
						
						On-Demand Instances			
					
					On-Demand Instances				
			
	
#47. A development team lead is configuring policies for his team at an IT company.  Which of the following policy types only limit permissions but cannot grant permissions (Select two)? 
Select all that apply:
			
				
					
						
						AWS Organizations Service Control Policy (SCP) 						
					
				AWS Organizations Service Control Policy (SCP) 				
			
				
				
					
						
						Access control list (ACL)						
					
				Access control list (ACL)				
			
				
				
					
						
						Resource-based policy						
					
				Resource-based policy				
			
				
				
					
						
						Permissions boundary						
					
				Permissions boundary				
			
				
				
					
						
						Identity-based policy						
					
				Identity-based policy				
			
	
#48. A developer at a company is trying to create a digital signature for SSH'ing into the Amazon EC2 instances.  Which of the following entities can be used to facilitate this use-case? 
			
				
					
						
						Multi-Factor Authentication (MFA) 			
					
					Multi-Factor Authentication (MFA) 				
			
				
				
					
						
						Key pairs			
					
					Key pairs				
			
				
				
					
						
						Access keys 			
					
					Access keys 				
			
				
				
					
						
						Root user credentials			
					
					Root user credentials				
			
	
#49. A development team lead is responsible for managing access for her IAM principals. At the start of the cycle, she has granted excess privileges to users to keep them motivated for trying new things. She now wants to ensure that the team has only the minimum permissions required to finish their work.  Which of the following will help her identify unused IAM roles and remove them without disrupting any service? 
			
				
					
						
						AWS Trusted Advisor			
					
					AWS Trusted Advisor				
			
				
				
					
						
						IAM Access Analyzer 			
					
					IAM Access Analyzer 				
			
				
				
					
						
						Access Advisor feature on IAM console			
					
					Access Advisor feature on IAM console				
			
				
				
					
						
						Amazon Inspector			
					
					Amazon Inspector				
			
	
#50. A development team at a social media company uses AWS Lambda for its serverless stack on AWS Cloud. For a new deployment, the Team Lead wants to send only a certain portion of the traffic to the new Lambda version. In case the deployment goes wrong, the solution should also support the ability to roll back to a previous version of the Lambda function, with MIMINUM downtime for the application.  As a Developer Associate, which of the following options would you recommend to address this use-case? 
			
				
					
						
						Set up the application to use an alias that points to the current version. Deploy the new version of the code and configure the alias to send 10% of the users to this new version. If the deployment goes wrong, reset the alias to point all traffic to the current version			
					
					Set up the application to use an alias that points to the current version. Deploy the new version of the code and configure the alias to send 10% of the users to this new version. If the deployment goes wrong, reset the alias to point all traffic to the current version				
			
				
				
					
						
						Set up the application to use an alias that points to the current version. Deploy the new version of the code and configure alias to send all users to this new version. If the deployment goes wrong, reset the alias to point to the current version 			
					
					Set up the application to use an alias that points to the current version. Deploy the new version of the code and configure alias to send all users to this new version. If the deployment goes wrong, reset the alias to point to the current version 				
			
				
				
					
						
						Set up the application to directly deploy the new Lambda version. If the deployment goes wrong, reset the application back to the current version using the version number in the ARN			
					
					Set up the application to directly deploy the new Lambda version. If the deployment goes wrong, reset the application back to the current version using the version number in the ARN				
			
				
				
					
						
						Set up the application to have multiple alias of the Lambda function. Deploy the new version of the code. Configure a new alias that points to the current alias of the Lambda function for handling 10% of the traffic. If the deployment goes wrong, reset the new alias to point all traffic to the most recent working alias of the Lambda function			
					
					Set up the application to have multiple alias of the Lambda function. Deploy the new version of the code. Configure a new alias that points to the current alias of the Lambda function for handling 10% of the traffic. If the deployment goes wrong, reset the new alias to point all traffic to the most recent working alias of the Lambda function				
			
	
#51. The development team at an IT company would like to provision their own Docker images that can be used as input sources for CodeBuild. These images will contain cached dependencies as well as special tooling for builds that are proprietary to the company.  Which of the following services can be used to store and deploy these Docker images? 
			
				
					
						
						ECR			
					
					ECR				
			
				
				
					
						
						S3 			
					
					S3 				
			
				
				
					
						
						ECS 			
					
					ECS 				
			
				
				
					
						
						EBS 			
					
					EBS 				
			
	
#52. The development team at an IT company wants to make changes to a current application written in Node.js and deployed on a Linux server. The team lead would like to decouple the application into microservices, package the application to a Docker container which is then run on the AWS infrastructure.  Which AWS service is best suited for this change? 
			
				
					
						
						ECR 			
					
					ECR 				
			
				
				
					
						
						ECS			
					
					ECS				
			
				
				
					
						
						Lambda 			
					
					Lambda 				
			
				
				
					
						
						Step Function			
					
					Step Function				
			
	
#53. The manager at an IT company wants to set up member access to user-specific folders in an Amazon S3 bucket - bucket-a. So, user x can only access files in his folder - bucket-a/user/user-x/ and user y can only access files in her folder - bucket-a/user/user-y/ and so on.  As a Developer Associate, which of the following IAM constructs would you recommend so that the policy snippet can be made generic for all team members and the manager does not need to create separate IAM policy for each team member? 
			
				
					
						
						IAM policy principal 			
					
					IAM policy principal 				
			
				
				
					
						
						IAM policy condition 			
					
					IAM policy condition 				
			
				
				
					
						
						IAM policy variables			
					
					IAM policy variables				
			
				
				
					
						
						IAM policy resource			
					
					IAM policy resource				
			
	
#54. A developer is testing Amazon Simple Queue Service (SQS) queues in a development environment. The queue along with all its contents has to be deleted after testing.  Which SQS API should be used for this requirement? 
			
				
					
						
						PurgeQueue 			
					
					PurgeQueue 				
			
				
				
					
						
						RemoveQueue 			
					
					RemoveQueue 				
			
				
				
					
						
						DeleteQueue			
					
					DeleteQueue				
			
				
				
					
						
						RemovePermission 			
					
					RemovePermission 				
			
	
#55. A media company has created a video streaming application and it would like their Brazilian users to be served by the company's Brazilian servers. Other users around the globe should not be able to access the servers through DNS queries.  Which Route 53 routing policy meets this requirement? 
			
				
					
						
						Failover 			
					
					Failover 				
			
				
				
					
						
						Geolocation			
					
					Geolocation				
			
				
				
					
						
						Latency 			
					
					Latency 				
			
				
				
					
						
						Weighted 			
					
					Weighted 				
			
	
#56. When running a Rolling deployment in Elastic Beanstalk environment, only two batches completed the deployment successfully, while rest of the batches failed to deploy the updated version. Following this, the development team terminated the instances from the failed deployment.  What will be the status of these failed instances post termination? 
			
				
					
						
						Elastic Beanstalk will not replace the failed instances			
					
					Elastic Beanstalk will not replace the failed instances				
			
				
				
					
						
						Elastic Beanstalk will replace them with instances running the application version from the most recent successful deployment			
					
					Elastic Beanstalk will replace them with instances running the application version from the most recent successful deployment				
			
				
				
					
						
						Elastic Beanstalk will replace the failed instances with instances running the application version from the oldest successful deployment			
					
					Elastic Beanstalk will replace the failed instances with instances running the application version from the oldest successful deployment				
			
				
				
					
						
						Elastic Beanstalk will replace the failed instances after the application version to be installed is manually chosen from AWS Console			
					
					Elastic Beanstalk will replace the failed instances after the application version to be installed is manually chosen from AWS Console				
			
	
#57. Which of the following security credentials can only be created by the AWS Account root user? 
			
				
					
						
						EC2 Instance Key Pairs			
					
					EC2 Instance Key Pairs				
			
				
				
					
						
						IAM User Access Keys 			
					
					IAM User Access Keys 				
			
				
				
					
						
						IAM User passwords			
					
					IAM User passwords				
			
				
				
					
						
						CloudFront Key Pairs			
					
					CloudFront Key Pairs				
			
	
#58. An E-commerce business, has its applications built on a fleet of Amazon EC2 instances, spread across various Regions and AZs. The technical team has suggested using Elastic Load Balancers for better architectural design.  What characteristics of an Elastic Load Balancer make it a winning choice? (Select two) 
Select all that apply:
			
				
					
						
						Separate public traffic from private traffic 						
					
				Separate public traffic from private traffic 				
			
				
				
					
						
						The Load Balancer communicates with the underlying EC2 instances using their public IPs						
					
				The Load Balancer communicates with the underlying EC2 instances using their public IPs				
			
				
				
					
						
						Improve vertical scalability of the system						
					
				Improve vertical scalability of the system				
			
				
				
					
						
						Deploy EC2 instances across multiple AWS Regions 						
					
				Deploy EC2 instances across multiple AWS Regions 				
			
				
				
					
						
						Build a highly available system						
					
				Build a highly available system				
			
	
#59. You have created an Elastic Load Balancer that has marked all the EC2 instances in the target group as unhealthy. Surprisingly, when you enter the IP address of the EC2 instances in your web browser, you can access your website.  What could be the reason your instances are being marked as unhealthy? (Select two) 
Select all that apply:
			
				
					
						
						The security group of the EC2 instance does not allow for traffic from the security group of the Application Load Balancer						
					
				The security group of the EC2 instance does not allow for traffic from the security group of the Application Load Balancer				
			
				
				
					
						
						The EBS volumes have been improperly mounted						
					
				The EBS volumes have been improperly mounted				
			
				
				
					
						
						The route for the health check is misconfigured						
					
				The route for the health check is misconfigured				
			
				
				
					
						
						Your web-app has a runtime that is not supported by the Application Load Balancer						
					
				Your web-app has a runtime that is not supported by the Application Load Balancer				
			
				
				
					
						
						You need to attach Elastic IP to the EC2 instances						
					
				You need to attach Elastic IP to the EC2 instances				
			
	
#60. A development team wants to build an application using serverless architecture. The team plans to use AWS Lambda functions extensively to achieve this goal. The developers of the team work on different programming languages like Python, .NET and Javascript. The team wants to model the cloud infrastructure using any of these programming languages.  Which AWS service/tool should the team use for the given use-case? 
			
				
					
						
						AWS Cloud Development Kit (CDK)			
					
					AWS Cloud Development Kit (CDK)				
			
				
				
					
						
						AWS CloudFormation 			
					
					AWS CloudFormation 				
			
				
				
					
						
						AWS Serverless Application Model (SAM) 			
					
					AWS Serverless Application Model (SAM) 				
			
				
				
					
						
						AWS CodeDeploy 			
					
					AWS CodeDeploy 				
			
	
#61. As an AWS Certified Developer Associate, you have configured the AWS CLI on your workstation. Your default region is us-east-1 and your IAM user has permissions to operate commands on services such as EC2, S3 and RDS in any region. You would like to execute a command to stop an EC2 instance in the us-east-2 region.  What of the following is the MOST optimal solution to address this use-case? 
			
				
					
						
						You need to override the default region by using aws configure 			
					
					You need to override the default region by using aws configure 				
			
				
				
					
						
						You should create a new IAM user just for that other region			
					
					You should create a new IAM user just for that other region				
			
				
				
					
						
						Use boto3 dependency injection			
					
					Use boto3 dependency injection				
			
				
				
					
						
						Use the --region paramete			
					
					Use the --region paramete				
			
	
#62. A development team has configured inbound traffic for the relevant ports in both the Security Group of the EC2 instance as well as the Network Access Control List (NACL) of the subnet for the EC2 instance. The team is, however, unable to connect to the service running on the Amazon EC2 instance.  As a developer associate, which of the following will you recommend to fix this issue? 
			
				
					
						
						Security Groups are stateful, so allowing inbound traffic to the necessary ports enables the connection. Network ACLs are stateless, so you must allow both inbound and outbound traffic			
					
					Security Groups are stateful, so allowing inbound traffic to the necessary ports enables the connection. Network ACLs are stateless, so you must allow both inbound and outbound traffic				
			
				
				
					
						
						Network ACLs are stateful, so allowing inbound traffic to the necessary ports enables the connection. Security Groups are stateless, so you must allow both inbound and outbound traffic 			
					
					Network ACLs are stateful, so allowing inbound traffic to the necessary ports enables the connection. Security Groups are stateless, so you must allow both inbound and outbound traffic 				
			
				
				
					
						
						IAM Role defined in the Security Group is different from the IAM Role that is given access in the Network ACLs			
					
					IAM Role defined in the Security Group is different from the IAM Role that is given access in the Network ACLs				
			
				
				
					
						
						Rules associated with Network ACLs should never be modified from the command line. An attempt to modify rules from the command line blocks the rule and results in an erratic behavior			
					
					Rules associated with Network ACLs should never be modified from the command line. An attempt to modify rules from the command line blocks the rule and results in an erratic behavior				
			
	
#63. You are a developer working on AWS Lambda functions that are invoked via REST API's using Amazon API Gateway. Currently, when a GET request is invoked by the consumer, the entire data-set returned by the Lambda function is visible. Your team lead asked you to format the data response.  Which feature of the API Gateway can be used to solve this issue? 
			
				
					
						
						Deploy an interceptor shell script 			
					
					Deploy an interceptor shell script 				
			
				
				
					
						
						Use an API Gateway stage variable			
					
					Use an API Gateway stage variable				
			
				
				
					
						
						Use API Gateway Mapping Templates 			
					
					Use API Gateway Mapping Templates 				
			
				
				
					
						
						Use a Lambda custom interceptor			
					
					Use a Lambda custom interceptor				
			
	
#64. The development team has just configured and attached the IAM policy needed to access AWS Billing and Cost Management for all users under the Finance department. But, the users are unable to see AWS Billing and Cost Management service in the AWS console.  What could be the reason for this issue? 
			
				
					
						
						The users might have another policy that restricts them from accessing the Billing information			
					
					The users might have another policy that restricts them from accessing the Billing information				
			
				
				
					
						
						Only root user has access to AWS Billing and Cost Management console 			
					
					Only root user has access to AWS Billing and Cost Management console 				
			
				
				
					
						
						You need to activate IAM user access to the Billing and Cost Management console for all the users who need access			
					
					You need to activate IAM user access to the Billing and Cost Management console for all the users who need access				
			
				
				
					
						
						IAM user should be created under AWS Billing and Cost Management and not under the AWS account to have access to Billing console 			
					
					IAM user should be created under AWS Billing and Cost Management and not under the AWS account to have access to Billing console 				
			
	
#65. CodeCommit is a managed version control service that hosts private Git repositories in the AWS cloud.  Which of the following credential types is NOT supported by IAM for CodeCommit? 
			
				
					
						
						AWS access keys 			
					
					AWS access keys 				
			
				
				
					
						
						SSH Keys			
					
					SSH Keys				
			
				
				
					
						
						Git credentials			
					
					Git credentials				
			
				
				
					
						
						IAM username and password			
					
					IAM username and password				
			
	
Finish
    
        
            Results
            
             

Keep up the good work!!!

	

            
It’s okay!!!!

QATechTools

Test Automation Interview Questions,Karate DSL testing, Postman automation, QA Automation, AWS , Cucumber , Playwright

AWS Associate Developer(DVA-C01) Practice set-1

#5. A company has hired you as an AWS Certified Developer Associate to help with redesigning a real-time data processor. The company wants to build custom applications that process and analyze the streaming data for its specialized needs. Which solution will you recommend to address this use-case?

#10. You have chosen AWS Elastic Beanstalk to upload your application code and allow it to handle details such as provisioning resources and monitoring. When creating configuration files for AWS Elastic Beanstalk which naming convention should you follow?

#11. You are a developer for a web application written in .NET which uses the AWS SDK. You need to implement an authentication mechanism that returns a JWT (JSON Web Token). Which AWS service will help you with token handling and management?

#12. Your company has stored all application secrets in SSM Parameter Store. The audit team has requested to get a report to better understand when and who has issued API calls against SSM Parameter Store. Which of the following options can be used to produce your report?

#13. ECS Fargate container tasks are usually spread across Availability Zones (AZs) and the underlying workloads need persistent cross-AZ shared access to the data volumes configured for the container tasks. Which of the following solutions is the best choice for these workloads?

#14. To enable HTTPS connections for his web application deployed on the AWS Cloud, a developer is in the process of creating server certificate. Which AWS entities can be used to deploy SSL/TLS server certificates? (Select two)

#15. As part of his development work, an AWS Certified Developer Associate is creating policies and attaching them to IAM identities. After creating necessary Identity-based policies, he is now creating Resource-based policies. Which is the only resource-based policy that the IAM service supports?

#16. In addition to regular sign-in credentials, AWS supports Multi-Factor Authentication (MFA) for accounts with privileged access. Which of the following MFA mechanisms is NOT for root user authentication?

#19. A startup with newly created AWS account is testing different EC2 instances. They have used Burstable performance instance - T2.micro - for 35 seconds and stopped the instance. At the end of the month, what is the instance usage duration that the company is charged for?

#23. An IT company is configuring Auto Scaling for its Amazon EC2 instances spread across different AZs and Regions. Which of the following scenarios are NOT correct about EC2 Auto Scaling? (Select two)

#24. A company is looking at optimizing their Amazon EC2 instance costs. Few instances are sure to run for a few years, but the instance type might change based on business requirements. Which EC2 instance purchasing option should they opt to meet the reduced cost criteria?

#25. An organization has hosted its EC2 instances in two AZs. AZ1 has two instances and AZ2 has 8 instances. The Elastic Load Balancer managing the instances in the two AZs has cross-zone load balancing enabled in its configuration. What percentage traffic will each of the instances in AZ1 receive?

#28. A developer has been asked to create an application that can be deployed across a fleet of EC2 instances. The configuration must allow for full control over the deployment steps using the blue-green deployment. Which service will help you achieve that?

#29. A development team wants to deploy an AWS Lambda function that requires significant CPU utilization. As a Developer Associate, which of the following would you suggest for reducing the average runtime of the function?

#32. Which of the following best describes how KMS Encryption works?

#34. A Developer at a company is working on a CloudFormation template to set up resources. Resources will be defined using code and provisioned based on certain conditions. Which section of a CloudFormation template does not allow for conditions?

#37. As an AWS Certified Developer Associate, you are given a document written in YAML that represents the architecture of a serverless application. The first line of the document contains Transform: 'AWS::Serverless-2016-10-31'. What does the Transform section in the document represent?

#38. A financial services company is undergoing a compliance audit by the regulator. The company has hundreds of IAM users that make API calls but specifically it needs to be determined who is making KMS API calls. Which of the following services should the audit team use?

#39. The Technical Lead of your team has reviewed a CloudFormation YAML template written by a new recruit and specified that an invalid section has been added to the template. Which of the following represents an invalid section of the CloudFormation template?

#40. As a developer, you are working on creating an application using AWS Cloud Development Kit (CDK). Which of the following represents the correct order of steps to be followed for creating an app using AWS CDK?

#42. Amazon Simple Queue Service (SQS) has a set of APIs for various actions supported by the service. As a developer associate, which of the following would you identify as correct regarding the CreateQueue API? (Select two)

#43. After a test deployment in ElasticBeanstalk environment, a developer noticed that all accumulated Amazon EC2 burst balances were lost. Which of the following options can lead to this behavior?

#45. An application is hosted by a 3rd party and exposed at yourapp.3rdparty.com. You would like to have your users access your application using http://www.mydomain.com, which you own and manage under Route 53. What Route 53 record should you create?

#46. A cybersecurity firm wants to run their applications on single-tenant hardware to meet security guidelines. Which of the following is the MOST cost-effective way of isolating their Amazon EC2 instances to a single tenant?

#47. A development team lead is configuring policies for his team at an IT company. Which of the following policy types only limit permissions but cannot grant permissions (Select two)?

#48. A developer at a company is trying to create a digital signature for SSH'ing into the Amazon EC2 instances. Which of the following entities can be used to facilitate this use-case?

#54. A developer is testing Amazon Simple Queue Service (SQS) queues in a development environment. The queue along with all its contents has to be deleted after testing. Which SQS API should be used for this requirement?

#55. A media company has created a video streaming application and it would like their Brazilian users to be served by the company's Brazilian servers. Other users around the globe should not be able to access the servers through DNS queries. Which Route 53 routing policy meets this requirement?

#57. Which of the following security credentials can only be created by the AWS Account root user?

#64. The development team has just configured and attached the IAM policy needed to access AWS Billing and Cost Management for all users under the Finance department. But, the users are unable to see AWS Billing and Cost Management service in the AWS console. What could be the reason for this issue?

#65. CodeCommit is a managed version control service that hosts private Git repositories in the AWS cloud. Which of the following credential types is NOT supported by IAM for CodeCommit?

Results

Leave a Reply Cancel reply