Exams > Amazon > AWS Certified Developer Associate
AWS Certified Developer Associate
Page 17 out of 39 pages Questions 161-170 out of 390 questions
Question#161

A Developer accesses AWS CodeCommit over SSH. The SSH keys configured to access AWS CodeCommit are tied to a user with the following permissions:



The Developer needs to create/delete branches.

Which specific IAM permissions need to be added, based on the principle of least privilege?

  • A. “codecommit:CreateBranch”
    “codecommit:DeleteBranch”
  • B. “codecommit:Put*”
  • C. “codecommit:Update*”
  • D. “codecommit:*”
Discover Answer Hide Answer

C

Question#162

Where should an Elastic Beanstalk configuration file named healthcheckurl.config be placed in the application source bundle?

  • A. In the root of the application
  • B. In the bin folder
  • C. In healthcheckurl.config.ebextension under root
  • D. In the .ebextensions folder
Discover Answer Hide Answer

D

Question#163

A developer is writing a web application that allows users to sign in. The application will run on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances will run in an Auto Scaling group across multiple Availability Zones.

How can the developer ensure that users stay signed in when the Auto Scaling group is scaled down?

  • A. Enable sticky sessions on the ALB target group.
  • B. Create an Amazon DynamoDB table. Configure the application to use the DynamoDB table to store session state such as login status.
  • C. Create an Amazon Elastic Block Store (Amazon EBS) volume. Use EBS Multi-Attach to attach the volume to all instances in the Auto Scaling group. Configure the application to use the volume to store session state such as login status.
  • D. Enable deregistration delay on the ALB target group.
Discover Answer Hide Answer

C

Question#164

A developer is troubleshooting a new AWS Lambda function. The function should run automatically each time a new object is uploaded to an Amazon S3 bucket. The function is supposed to read the object, make modifications, and overwrite the object with the new version. The developer finds that all calls failed within the function code.

Which of the following are possible reasons for this failure? (Choose two.)

  • A. The function resource policy does not allow access from Amazon S3.
  • B. The function execution role does not allow access from Amazon S3.
  • C. The function execution role does not allow access to Amazon S3.
  • D. The S3 bucket policy does not allow access from the Lambda function.
  • E. The S3 bucket policy does not allow access to the Lambda function.
Discover Answer Hide Answer

AE

Question#165

An application is processing clickstream data using Amazon Kinesis. The clickstream data feed into Kinesis experiences periodic spikes. The PutRecords API call occasionally fails and the logs show that the failed call returns the response shown below:



Which techniques will help mitigate this exception? (Choose two.)

  • A. Implement retries with exponential backoff.
  • B. Use a PutRecord API instead of PutRecords.
  • C. Reduce the frequency and/or size of the requests.
  • D. Use Amazon SNS instead of Kinesis.
  • E. Reduce the number of KCL consumers.
Discover Answer Hide Answer

BD

Question#166

Two containerized microservices are hosted on Amazon EC2 ECS. The first microservice reads an Amazon RDS Aurora database instance, and the second microservice reads an Amazon DynamoDB table.

How can each microservice be granted the minimum privileges?

  • A. Set ECS_ENABLE_TASK_IAM_ROLE to false on EC2 instance boot in ECS agent configuration file. Run the first microservice with an IAM role for ECS tasks with read-only access for the Aurora database. Run the second microservice with an IAM role for ECS tasks with read-only access to DynamoDB.
  • B. Set ECS_ENABLE_TASK_IAM_ROLE to false on EC2 instance boot in the ECS agent configuration file. Grant the instance profile role read-only access to the Aurora database and DynamoDB.
  • C. Set ECS_ENABLE_TASK_IAM_ROLE to true on EC2 instance boot in the ECS agent configuration file. Run the first microservice with an IAM role for ECS tasks with read-only access for the Aurora database. Run the second microservice with an IAM role for ECS tasks with read-only access to DynamoDB.
  • D. Set ECS_ENABLE_TASK_IAM_ROLE to true on EC2 instance boot in the ECS agent configuration file. Grant the instance profile role read-only access to the Aurora database and DynamoDB.
Discover Answer Hide Answer

C

Question#167

A developer is writing a new serverless application for a company. Several other developers must collaborate on the code for this application, and the company expects frequent changes to the code. The developer needs to deploy the code from source control to AWS Lambda with the fewest number of manual steps.

Which strategy for the build and deployment should the developer use to meet these requirements?

  • A. Build the code locally, and then upload the code into the source control system. When a release is needed, run AWS CodePipeline to extract the uploaded build and deploy the resources.
  • B. Use the AWS Serverless Application Model (AWS SAM) CLI to build and deploy the application from the developer's local machine with the latest version checked out locally.
  • C. Use AWS CodeBuild and AWS CodePipeline to invoke builds and corresponding deployments when configured source controlled branches have pull requests merged into them
  • D. Use the Lambda console to upload a .zip file of the application that is created by the AWS Serverless Application Model (AWS SAM) CLI build command.
Discover Answer Hide Answer

A

Question#168

A developer is using an AWS CodePipeline pipeline to provide continuous integration and continuous delivery (CI/CD) support for a Java application. The developer needs to update the pipeline to support the introduction of a new application dependency .jar file. The pipeline must start a build when a new version of the .jar file becomes available.

Which solution will meet these requirements?

  • A. Create an Amazon S3 bucket to store the dependency .jar file. Publish the dependency .jar file to the S3 bucket. Use an Amazon Simple Notification Service (Amazon SNS) notification to start a CodePipeline pipeline build.
  • B. Create an Amazon Elastic Container Registry (Amazon ECR) private repository. Publish the dependency jar file to the repository. Use an ECR source action to start a CodePipeline pipeline build.
  • C. Create an Amazon Elastic Container Registry (Amazon ECR) private repository. Publish the dependency .jar file to the repository. Use an Amazon Simple Notification Service (Amazon SNS) notification to start a CodePipeline pipeline build.
  • D. Create an AWS CodeArtifact repository. Publish the dependency .jar file to the repository. Use an Amazon EventBridge (Amazon CloudWatch Events) rule to start a CodePipeline pipeline build.
Discover Answer Hide Answer

D

Question#169

A developer is writing a serverless application that requires an AWS Lambda function to be invoked every 10 minutes.

What is an automated and serverless way to invoke the function?

  • A. Deploy an Amazon EC2 instance based on Linux, and edit its /etc/crontab file by adding a command to periodically invoke the Lambda function.
  • B. Configure an environment variable named PERIOD for the Lambda function. Set the value to 600.
  • C. Create an Amazon EventBridge (Amazon CloudWatch Events) rule that runs on a regular schedule to invoke the Lambda function.
  • D. Create an Amazon Simple Notification Service (Amazon SNS) topic that has a subscription to the Lambda function with a 600-second timer.
Discover Answer Hide Answer

C

Question#170

A company is migrating legacy internal applications to AWS. Leadership wants to rewrite the internal employee directory to use native AWS services A developer needs to create a solution for storing employee contact details and high-resolution photos for use with the new application.

Which solution will enable the search and retrieval of each employee's individual details and high-resolution photos using AWS APIs?

  • A. Encode each employee s contact information and photos using Base64 Store the information in an Amazon DynamoDB table using a sort key.
  • B. Store each employee's contact information in an Amazon DynamoDB table along with the object keys for the photos stored in Amazon S3.
  • C. Use Amazon Cognito user pools to implement the employee directory in a fully managed software-as-a-service (SaaS) method.
  • D. Store employee contact information in an Amazon RDS DB instance with the photos stored in Amazon Elastic File System (Amazon EFS).
Discover Answer Hide Answer

B

chevron rightPrevious Nextchevron right