AWS-Certified-Developer-Associate Free Practice Test

- (Exam Topic 4)
What are the MINIMUM properties required in the resources section of the AppSpace file for CodeDeploy to deploy the ECS service successfully?

1. A. name, alias, currentversion, and targetversion
2. B. TaskDefinition, ContainerName, and PlartformVersion
3. C. TaskDefinitionContainerName, ContainerPort
4. D. name, Currentversion, NetworkConfiguration, and Platform Version

Correct Answer: A

- (Exam Topic 1)
A Developer has setup an Amazon Kinesis Stream with 4 shards to ingest a maximum of 2500 records per second. A Lambda function has been configured to process these records.
In which order will these records be processed?

1. A. Lambda will receive each record in the reverse order it was placed into the stream following a LIFO (last-in, first-out) method
2. B. Lambda will receive each record in the exact order it was placed into the stream following a FIFO (first-in, first-out) method.
3. C. Lambda will receive each record in the exact order it was placed into the shard following a FIFO (first-in, first-out) metho
4. D. There is no guarantee of order across shards.
5. E. The Developer can select FIFO, (first-in, first-out), LIFO (last-in, last-out), random, or request specific record using the getRecords API.

Correct Answer: C

- (Exam Topic 3)
A developer has written an AWS Lambda function using Java as the runtime environment. The developer wants to isolate a performance bottleneck in the code.
Which steps should be taken to reveal the bottleneck?

1. A. Use the Amazon CloudWatch API to write timestamps to a custom CloudWatch metric Use the CloudWatch console to analyze the resulting data
2. B. Use the AWS X-Ray API to write trace data into X-Ray from strategic places within the code Use the Amazon CloudWatch console to analyze the resulting data
3. C. Use the AWS X-Ray API to write trace data into X-Ray from strategic places within the cod
4. D. Use the X-Ray console to analyze the resulting data
5. E. Use the Amazon CloudWatch API to write timestamps to a custom CloudWatch metric Use the AWS X-Ray console to analyze the resulting data

Correct Answer: C

- (Exam Topic 1)
A corporate web application is deployed within an Amazon VPC, and is connected to the corporate data center via IPSec VPN. The application must authenticate against the on-premise LDAP server. Once authenticated, logged-in users can only access an S3 keyspace specific to the user.
Which two approaches can satisfy the objectives? Choose 2 answers

1. A. The application authenticates against LDA
2. B. The application then calls the IAM Security Service to login to IAM using the LDAP credential
3. C. The application can use the IAM temporary credentials to access the appropriate S3 bucket.
4. D. The application authenticates against LDAP, and retrieves the name of an IAM role associated with the use
5. E. The application then calls the IAM Security Token Service to assume that IAM Rol
6. F. The application can use the temporary credentials to access the appropriate S3 bucket.
7. G. The application authenticates against IAM Security Token Service using the LDAP credential
8. H. The application uses those temporary AWS security credentials to access the appropriate S3 bucket.
9. I. Develop an identity broker which authenticates against LDAP, and then calls IAM Security Token Service to get IAM federated user credential
10. J. The application calls the identity broker to get IAM federated user credentials with access to the appropriate S3 bucket.
11. K. Develop an identity broker which authenticates against IAM Security Token Service to assume an IAM Role to get temporary AWS security credential
12. L. The application calls the identity broker to get AWS temporary security credentials with access to the appropriate S3 bucket.

Correct Answer: BD
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html

- (Exam Topic 2)
A developer has created a new AWS IAM user that has s3 putobject permission to write to a specific Amazon bucket. This S3 bucket uses server-side encryption with AWS KMS managed keys (SEE-KMS) as the encryption. Using the access key and secret key of the IAM user, the application received an access denied error when calling the PutObject API.
How can this issue be resolved?

1. A. Update the policy of the IAM user to allow the s3 Encrypt action.
2. B. Update the bucket policy of the S3 bucket to allow the IAM user to upload objects
3. C. Update the policy of the IAM user to allow the kms GenerateDatakey action
4. D. Update the ACL of the bucket to allow the IAM user to upload objects

Correct Answer: C