Amazon AWS Certified Developer Associate Exam Practice Questions (P. 5)
- Full Access (443 questions)
- Six months of Premium Access
- Access to one million comments
- Seamless ChatGPT Integration
- Ability to download PDF files
- Anki Flashcard files for revision
- No Captcha & No AdSense
- Advanced Exam Configuration
Question #41
An application uses Amazon Kinesis Data Streams to ingest and process large streams of data records in real time. Amazon EC2 instances consume and process the data from the shards of the Kinesis data stream by using Amazon Kinesis Client Library (KCL). The application handles the failure scenarios and does not require standby workers. The application reports that a specific shard is receiving more data than expected. To adapt to the changes in the rate of data flow, the
`hot` shard is resharded.
Assuming that the initial number of shards in the Kinesis data stream is 4, and after resharding the number of shards increased to 6, what is the maximum number of EC2 instances that can be deployed to process data from all the shards?
`hot` shard is resharded.
Assuming that the initial number of shards in the Kinesis data stream is 4, and after resharding the number of shards increased to 6, what is the maximum number of EC2 instances that can be deployed to process data from all the shards?
send
light_mode
delete
Question #42
A Company runs continuous integration/continuous delivery (CI/CD) pipelines for its application on AWS CodePipeline. A Developer must write unit tests and run them as part of the pipelines before staging the artifacts for testing.
How should the Developer incorporate unit tests as part of CI/CD pipelines?
How should the Developer incorporate unit tests as part of CI/CD pipelines?
- ACreate a separate CodePipeline pipeline to run unit tests
- BUpdate the AWS CodeBuild specification to include a phase for running unit testsMost Voted
- CInstall the AWS CodeDeploy agent on an Amazon EC2 instance to run unit tests
- DCreate a testing branch in AWS CodeCommit to run unit tests
Correct Answer:
D
D
send
light_mode
delete
Question #43
A Developer has written an application that runs on Amazon EC2 instances and generates a value every minute. The Developer wants to monitor and graph the values generated over time without logging in to the instance each time.
Which approach should the Developer use to achieve this goal?
Which approach should the Developer use to achieve this goal?
- AUse the Amazon CloudWatch metrics reported by default for all EC2 instances. View each value from the CloudWatch console.
- BDevelop the application to store each value in a file on Amazon S3 every minute with the timestamp as the name.
- CPublish each generated value as a custom metric to Amazon CloudWatch using available AWS SDKs.Most Voted
- DStore each value as a variable and add the variable to the list of EC2 metrics that should be reported to the Amazon CloudWatch console.
Correct Answer:
C
C
send
light_mode
delete
Question #44
A developer is trying to get data from an Amazon DynamoDB table called demoman-table. The developer configured the AWS CLI to use a specific IAM user's credentials and executed the following command:

The command returned errors and no rows were returned.
What is the MOST likely cause of these issues?

The command returned errors and no rows were returned.
What is the MOST likely cause of these issues?
- AThe command is incorrect; it should be rewritten to use put-item with a string argument.
- BThe developer needs to log a ticket with AWS Support to enable access to the demoman-table.
- CAmazon DynamoDB cannot be accessed from the AWS CLI and needs to be called via the REST API.
- DThe IAM user needs an associated policy with read access to demoman-table.Most Voted
Correct Answer:
D
D
send
light_mode
delete
Question #45
A Development team is working on a case management solution that allows medical claims to be processed and reviewed. Users log in to provide information related to their medical and financial situations.
As part of the application, sensitive documents such as medical records, medical imaging, bank statements, and receipts are uploaded to Amazon S3. All documents must be securely transmitted and stored. All access to the documents must be recorded for auditing.
What is the MOST secure approach?
As part of the application, sensitive documents such as medical records, medical imaging, bank statements, and receipts are uploaded to Amazon S3. All documents must be securely transmitted and stored. All access to the documents must be recorded for auditing.
What is the MOST secure approach?
- AUse S3 default encryption using Advanced Encryption Standard-256 (AES-256) on the destination bucket.
- BUse Amazon Cognito for authorization and authentication to ensure the security of the application and documents.
- CUse AWS Lambda to encrypt and decrypt objects as they are placed into the S3 bucket.
- DUse client-side encryption/decryption with Amazon S3 and AWS KMS.Most Voted
Correct Answer:
D
D
send
light_mode
delete
Question #46
A developer is planning to use an Amazon API Gateway and AWS Lambda to provide a REST API. The developer will have three distinct environments to manage: development, test, and production.
How should the application be deployed while minimizing the number of resources to manage?
How should the application be deployed while minimizing the number of resources to manage?
- ACreate a separate API Gateway and separate Lambda function for each environment in the same Region.
- BAssign a Region for each environment and deploy API Gateway and Lambda to each Region.
- CCreate one API Gateway with multiple stages with one Lambda function with multiple aliases.Most Voted
- DCreate one API Gateway and one Lambda function, and use a REST parameter to identify the environment.
Correct Answer:
C
Reference:
https://aws.amazon.com/blogs/compute/using-api-gateway-stage-variables-to-manage-lambda-functions/
C
Reference:
https://aws.amazon.com/blogs/compute/using-api-gateway-stage-variables-to-manage-lambda-functions/
send
light_mode
delete
Question #47
An application needs to use the IP address of the client in its processing. The application has been moved into AWS and has been placed behind an Application
Load Balancer (ALB). However, all the client IP addresses now appear to be the same. The application must maintain the ability to scale horizontally.
Based on this scenario, what is the MOST cost-effective solution to this problem?
Load Balancer (ALB). However, all the client IP addresses now appear to be the same. The application must maintain the ability to scale horizontally.
Based on this scenario, what is the MOST cost-effective solution to this problem?
- ARemove the application from the ALB. Delete the ALB and change Amazon Route 53 to direct traffic to the instance running the application.
- BRemove the application from the ALB. Create a Classic Load Balancer in its place. Direct traffic to the application using the HTTP protocol.
- CAlter the application code to inspect the X-Forwarded-For header. Ensure that the code can work properly if a list of IP addresses is passed in the header.Most Voted
- DAlter the application code to inspect a custom header. Alter the client code to pass the IP address in the custom header.
Correct Answer:
C
C
send
light_mode
delete
Question #48
A developer tested an application locally and then deployed it to AWS Lambda. While testing the application remotely, the Lambda function fails with an access denied message.
How can this issue be addressed?
How can this issue be addressed?
- AUpdate the Lambda function's execution role to include the missing permissions.Most Voted
- BUpdate the Lambda function's resource policy to include the missing permissions.
- CInclude an IAM policy document at the root of the deployment package and redeploy the Lambda function.
- DRedeploy the Lambda function using an account with access to the AdministratorAccess policy.
Correct Answer:
A
Reference:
https://aws.amazon.com/premiumsupport/knowledge-center/access-denied-lambda-s3-bucket/
A
Reference:
https://aws.amazon.com/premiumsupport/knowledge-center/access-denied-lambda-s3-bucket/
send
light_mode
delete
Question #49
A Developer must analyze performance issues with production-distributed applications written as AWS Lambda functions. These distributed Lambda applications invoke other components that make up the applications.
How should the Developer identify and troubleshoot the root cause of the performance issues in production?
How should the Developer identify and troubleshoot the root cause of the performance issues in production?
- AAdd logging statements to the Lambda functions, then use Amazon CloudWatch to view the logs.
- BUse AWS CloudTrail and then examine the logs.
- CUse AWS X-Ray, then examine the segments and errors.Most Voted
- DRun Amazon Inspector agents and then analyze performance.
Correct Answer:
C
C
send
light_mode
delete
Question #50
A company is building a compute-intensive application that will run on a fleet of Amazon EC2 instances. The application uses attached Amazon EBS disks for storing data. The application will process sensitive information and all the data must be encrypted.
What should a Developer do to ensure the data is encrypted on disk without impacting performance?
What should a Developer do to ensure the data is encrypted on disk without impacting performance?
- AConfigure the Amazon EC2 instance fleet to use encrypted EBS volumes for storing data.Most Voted
- BAdd logic to write all data to an encrypted Amazon S3 bucket.
- CAdd a custom encryption algorithm to the application that will encrypt and decrypt all data.
- DCreate a new Amazon Machine Image (AMI) with an encrypted root volume and store the data to ephemeral disks.
Correct Answer:
A
Reference:
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html
A
Reference:
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html

send
light_mode
delete
All Pages