[Sep-2023] Latest Amazon AWS-Developer exam dumps and online Test Engine [Q33-Q48]

Share

[Sep-2023] Latest Amazon AWS-Developer exam dumps and online Test Engine

Amazon AWS-Developer: Selling AWS Certified Developer Products and Solutions


The AWS-Developer certification exam consists of 65 multiple-choice and multiple-answer questions that must be completed within 130 minutes. AWS-Developer exam covers a wide range of topics, including AWS core services and their use cases, AWS development and deployment best practices, deployment automation, security on AWS, and troubleshooting.

 

NEW QUESTION # 33
A Developer is writing a serverless application that requires that an AWS Lambda function be invoked every
10 minutes.
What is an automated and serverless way to trigger the function?

  • A. Create an Amazon CloudWatch Events rule that triggers on a regular schedule to invoke the Lambda function.
  • B. Deploy an Amazon EC2 instance based on Linux, and edit its /etc/crontab file by adding a command to periodically invoke the Lambda function.
  • C. Configure an environment variable named PERIOD for the Lambda function. Set the value to 600.
  • D. Create an Amazon SNS topic that has a subscription to the Lambda function with a 600-second timer.

Answer: A


NEW QUESTION # 34
A developer Is working with a Docker application that needs to be quickly deployed using AWS without changing the infrastructure or configuring health checks. The application should be configured so that changes and updates can be made automatically without any downtime Which solution will meet these requirements?

  • A. Deploy the Docker container using AWS Lambda and enable Amazon CloudWatch monitoring
  • B. Use AWS Elastic Beanstalk for application deployment and select a rolling deployment policy.
  • C. Deploy the Docker container on an Amazon EC2 instance in an Auto Scaling group and configure a health check on the EC2 instance
  • D. Use AWS Elastic Beanstalk for application deployment and select an all-at-once update policy.

Answer: D


NEW QUESTION # 35
A developer has code stored in an Amazon S3 bucket The code must be deployed as an AWS Lambda function across multiple accounts in the same Region as the S3 bucket The Lambda function will be deployed using an AWS CloudFormation template that is run for each account What is the MOST secure approach to allow access to the Lambda code in the S3 bucket?

  • A. Use a service-based link to grant the Lambda function S3 list and get permissions by explicitly adding the S3 bucket's account number in the resource
  • B. Grant the CloudFormation execution role S3 get permissions Add a bucket policy to Amazon S3 with the Principal of "".
  • C. Use a service-based link to grant the Lambda function S3 get permissions and add a Resource of "*" to allow access to the S3 bucket.
  • D. Grant the CloudFormation execution role S3 list and get permissions Add a bucket policy to Amazon S3 with the Pnncipal of "AWS": [account numbers].

Answer: D


NEW QUESTION # 36
Where should an Elastic Beanstalk configuration file named healthcheckur1.config be placed in the application source bundle?

  • A. In the root of the application
  • B. In healthcheckur1.config.ebextension under root
  • C. In the bin folder
  • D. In the .ebextensions folder

Answer: D


NEW QUESTION # 37
In Amazon EC2, which of the following is the type of monitoring data for Amazon EBS volumes that is
available automatically in 5-minute periods at no charge?

  • A. Primary
  • B. Detailed
  • C. Basic
  • D. Initial

Answer: C

Explanation:
Basic is the type of monitoring data (for Amazon EBS volumes) which is available automatically in
5 -minute periods at no charge called.
Reference:
http://docs.amazonwebservices.com/AWSEC2/latest/UserGuide/monitoring-volume-status.html


NEW QUESTION # 38
A user has enabled the automated backup, but not specified the backup window. What will RDS do in this
case?

  • A. Will throw an error on instance launch
  • B. Will not allow to launch a DB instance
  • C. RDS assigns a random time period based on the region
  • D. RDS will take 3 AM - 3:30 AM as the default window

Answer: C

Explanation:
If the user does not specify a preferred backup window while enabling an automated backup, Amazon
RDS assigns a default 30-minute backup window which is selected at random from an 8-hour block of
time per region.
Reference:
http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.BackingUpAndRestoringAmazonR
DSInstances.html


NEW QUESTION # 39
According to best practice, how should access keys be managed in AWS? (Choose two.)

  • A. Embed and encrypt access keys in code for continuous deployment.
  • B. Use the same access key in all applications for consistency.
  • C. Delete all access keys for the account root user.
  • D. Use Amazon IAM roles instead of access keys where possible.
  • E. Leave unused access keys in the account for tracking purposes.

Answer: C,D

Explanation:
Explanation/Reference: https://docs.aws.amazon.com/general/latest/gr/aws-access-keys-best-practices.html#iam-user- access-keys


NEW QUESTION # 40
A company is developing a web application that allows its employees to upload a profile picture to a private Amazon S3 bucket There is no size limit for the profile pictures, which should be displayed every time an employee logs in. For security reasons, the pictures cannot be publicly accessible.
What is a viable long-term solution for this scenario''

  • A. Save the picture's S3 key in an Amazon DynamoDB table Create an Amazon S3 VPC endpoint to allow the employees to download pictures once they log in.
  • B. Generate a presigned URL when a picture is uploaded Save the URL in an Amazon DynamoDB table Return the URL to the browser when the employee logs in
  • C. Encode a picture using base64 Save the base64 string in an Amazon DynamoDB table Allow the browser to retrieve the string and convert it to a picture
  • D. Save the picture's S3 key in an Amazon DynamoDB table. Use a function to generate a presigned URL every time an employee logs in. Return the URL to the browser.

Answer: A

Explanation:
Reference:
https://aws.amazon.com/premiumsupport/knowledge-center/s3-private-connection-noauthentication/


NEW QUESTION # 41
A Developer has written a serverless application using multiple AWS services. The business logic is written as a Lambda function which has dependencies on third-party libraries. The Lambda function endpoints will be exposed using Amazon API Gateway. The Lambda function will write the information to Amazon DynamoDB. The Developer is ready to deploy the application but must have the ability to rollback. How can this deployment be automated, based on these requirements?

  • A. Deploy using Amazon Lambda API operations to create the Lambda function by providing a deployment package.
  • B. Use syntax conforming to the Serverless Application Model in the AWS CloudFormation template to define the Lambda function resource.
  • C. Create a bash script which uses AWS CLI to package and deploy the application.
  • D. Use an AWS CloudFormation template and use CloudFormation syntax to define the Lambda function resource in the template.

Answer: B

Explanation:
https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/automating- updates-to-serverless-apps.html


NEW QUESTION # 42
A Developer is writing a Linux-based application to run on AWS Elastic Beanstalk. Application requirements state that the application must maintain full capacity during updates while minimizing cost. Which type of Elastic Beanstalk deployment policy should the Developer specify for the environment?

  • A. Rolling
  • B. All at Once
  • C. Rolling with additional batch
  • D. Immutable

Answer: D

Explanation:
https://aws.amazon.com/about-aws/whats-new/2016/04/aws-elastic-beanstalk-adds-two-new- deployment-policies-and-amazon-linux-ami-2016-03-update/


NEW QUESTION # 43
Regarding Amazon SWF, the coordination logic in a workflow is contained in a software program called a ________.

  • A. Worker
  • B. Handler
  • C. Decider
  • D. Cordinator

Answer: C

Explanation:
In Amazon SWF, the coordination logic in a workflow is contained in a software program called a decider. The decider schedules activity tasks, provides input data to the activity workers, processes events that arrive while the workflow is in progress, and ultimately ends (or closes) the workflow when the objective has been completed.
http://docs.aws.amazon.com/amazonswf/latest/developerguide/swf-dg-intro-to-swf.html


NEW QUESTION # 44
A startup s photo-sharing site is deployed in a VPC. An ELB distributes web traffic across two subnets. ELB session stickiness is configured to use the AWS-generated session cookie, with a session TTL of 5 minutes.
The webserver Auto Scaling Group is configured as: min-size=4, max-size=4.
The startups preparing for a public launch, by running load-testing software installed on a single EC2 instance running in us-west-2a. After 60 minutes of load-testing, the webserver logs show:
Which recommendations can help ensure load-testing HTTP requests are evenly distributed across the four webservers? Choose 2 answers

  • A. Launch and run the load-tester EC2 instance from us-east-1 instead.
  • B. Re-configure the load-testing software to re-resolve DNS for each web request.
  • C. Configure ELB and Auto Scaling to distribute across us-west-2a and us-west-2c.
  • D. Configure ELB session stickiness to use the app-specific session cookie.
  • E. Use a 3rd-party load-testing service which offers globally-distributed test clients.

Answer: D,E


NEW QUESTION # 45
A Developer has an application that can upload tens of thousands of objects per second to Amazon S3 in parallel within a single AWS account. As part of new requirements, data stored in S3 must use server side encryption with AWS KMS (SSE-KMS). After creating this change, performance of the application is slower.
Which of the following is MOST likely the cause of the application latency?

  • A. The client encryption of the objects is using a poor algorithm.
  • B. KMS requires that an alias be used to create an independent display name that can be mapped to a CMK.
  • C. Amazon S3 throttles the rate at which uploaded objects can be encrypted using Customer Master Keys.
  • D. The AWS KMS API calls limit is less than needed to achieve the desired performance.

Answer: D

Explanation:
Explanation
https://aws.amazon.com/about-aws/whats-new/2018/08/aws-key-management-service-increases-api-requests-per KMS API access limit is 10k/sec in us-east and some others and 5.5k/sec for the rest of the regions. Client can request this limit to be changed.


NEW QUESTION # 46
An Amazon S3 bucket is encrypted using an AWS KMS CMK. An IAM user is unable to download objects from the S3 bucket using the AWS Management Console; however, other users can download objects from the S3 bucket.
Which policies should the Security Engineer review and modify to resolve this issue? (Choose three.)

  • A. The IAM policy
  • B. The CMK policy
  • C. The S3 ACL
  • D. The VPC endpoint policy
  • E. The S3 bucket policy

Answer: A,B,E

Explanation:
Explanation/Reference: https://aws.amazon.com/premiumsupport/knowledge-center/decrypt-kms-encrypted-objects-s3/


NEW QUESTION # 47
You want to have multiple versions of your application running at the same time, with all versions launched via AWS Elastic Beanstalk. Is this possible?

  • A. Yes. AWS Elastic Beanstalk is designed to support a number of multiple running environments
  • B. Yes. However AWS Elastic Beanstalk is designed to support only 2 multiple running environments
  • C. No. AWS Elastic Beanstalk is not designed to support multiple running environments
  • D. No. However if you have 2 AWS accounts this can be done

Answer: A

Explanation:
AWS Elastic Beanstalk is designed to support multiple running environments. As an example you could have one for integration testing, one for pre-production, and one for production, with each environment independently configured and running on its own separate AWS resources.
https://aws.amazon.com/elasticbeanstalk/faqs/


NEW QUESTION # 48
......


The AWS Certified Developer – Associate exam consists of 65 multiple-choice and multiple-response questions that need to be completed in 130 minutes. AWS-Developer exam can be taken at any authorized testing center or online through Amazon's testing platform. The cost of the exam is $150, and the certification is valid for two years.

 

New 2023 AWS-Developer Test Tutorial (Updated 67 Questions): https://www.passtestking.com/Amazon/AWS-Developer-practice-exam-dumps.html

Reliable AWS-Developer Exam Tips Test Pdf Exam Material: https://drive.google.com/open?id=1edw623q3sWrUZ8YPrhrOpmXEpPAaGw0C