Latest [Jul 07, 2025] Amazon AWS-Certified-Developer-Associate Exam Practice Test To Gain Brilliante Result
Take a Leap Forward in Your Career by Earning Amazon AWS-Certified-Developer-Associate
The AWS-Developer certification is highly valued in the industry, as it demonstrates a developer's knowledge and expertise in working with AWS technologies. AWS Certified Developer - Associate certification is recognized by many employers and can help developers advance their careers. According to the AWS website, individuals who hold the AWS-Developer certification earn an average salary of $130,000 per year.
NEW QUESTION # 23
A Developer has created an S3 bucket s3://mycoolapp and has enabled server across logging that points to the folder s3://mycoolapp/logs. The Developer moved 100 KB of Cascading Style Sheets (CSS) documents to the folder s3://mycoolapp/css, and then stopped work. When the developer came back a few days later, the bucket was 50 GB.
What is the MOST likely cause of this situation?
- A. S3 replication was enabled on the bucket.
- B. The CSS files were not compressed and S3 versioning was enabled.
- C. Logging into the same bucket caused exponential log growth.
- D. An S3 lifecycle policy has moved the entire CSS file to S3 Infrequent Access.
Answer: C
Explanation:
Explanation
Refer AWS documentation - S3 Server logs
To turn on log delivery, you provide the following logging configuration information:
* The name of the target bucket where you want Amazon S3 to save the access logs as objects. You can have logs delivered to any bucket that you own that is in the same Region as the source bucket, including the source bucket itself.We recommend that you save access logs in a different bucket so that you can easily manage the logs. If you choose to save access logs in the source bucket, we recommend that you specify a prefix for all log object keys so that the object names begin with a common string and
* the log objects are easier to identify.When your source bucket and target bucket are the same bucket, additional logs are created for the logs that are written to the bucket. This behavior might not be ideal for your use case because it could result in a small increase in your storage billing. In addition, the extra logs about logs might make it harder to find the log that you're looking for.
NEW QUESTION # 24
Which of the following is chosen as the default region when making an API call with an AWS SDK?
- A. us-east-1
- B. eu-west-1
- C. ap-northeast-1
- D. us-west-2
- E. us-central-1
Answer: A
Explanation:
Explanation
https://docs.aws.amazon.com/sdk-for-java/v1/developer-guide/java-dg-region-selection.html. This section applies only when using a client builder to access AWS services. AWS clients created by using the client constructor will not automatically determine region from the environment and will, instead, use the default SDK region (USEast1).
NEW QUESTION # 25
A developer needs temporary access to resources in a second account
What is the MOST secure way to achieve this?
- A. Establish trust, and add an SSH key for the second account to the IAM user
- B. Create a dedicated IAM access key for the second account, and send it by mail.
- C. Use the Amazon Cognito user pools to get short-lived credentials for the second account
- D. Create a cross-account access role, and use sts:AssumeRcie API to get short-lived credentials
Answer: D
NEW QUESTION # 26
A Developer needs temporary access to resources in a second account.
What is the MOST secure way to achieve this?
- A. Establish trust, and add an SSH key for the second account to the IAM user.
- B. Create a dedicated IAM access key for the second account, and send it by mail.
- C. Create a cross-account access role, and use sts:AssumeRole API to get short-lived credentials.
- D. Use the Amazon Cognito user pools to get short-lived credentials for the second account.
Answer: C
Explanation:
https://docs.aws.amazon.com/IAM/latest/UserGuide/tutorial_cross-account-with-roles.html
NEW QUESTION # 27
A user has launched 10 instances from the same AMI ID using Auto Scaling. The user is trying to see the average CPU utilization across all instances of the last 2 weeks under the CloudWatch console. How can the user achieve this?
- A. View the Auto Scaling CPU metrics
- B. The user has to use the CloudWatchanalyser to find the average data across instances
- C. Aggregate the data over the instance AMI ID
- D. It is not possible to see the average CPU utilization of the same AMI ID since the instance ID is different
Answer: A
NEW QUESTION # 28
A company caches session information for a web application in an Amazon DynamoDB table. The company wants an automated way to delete old items from the table.
What is the simplest way to do this?
- A. Add an attribute with the expiration time; name the attribute ItemExpiration.
- B. Add an attribute with the expiration time; enable the Time To Live feature based on that attribute.
- C. Write a script that deletes old records; schedule the scripts as a cron job on an Amazon EC2 instance.
- D. Each day, create a new table to hold session data; delete the previous day's table.
Answer: B
Explanation:
https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/time-to-live-ttl-how-to.html
NEW QUESTION # 29
A developer is developing an application that uses signed requests (Signature Version 4) to call other AWS services The developer has created a canonical request has created the string to sign, and has calculated signing information Which methods could the developer use to complete a signed request? (Select TWO )
- A. Add the signature to an HTTP header that is named WWW-Authenticate
- B. Add the signature to an HTTP header that is named Authorization
- C. Add the signature to an HTTP header that is named Authentication
- D. Add the signature to a query string parameter that is named X-Amz-Signature
- E. Add the signature to a session cookie
Answer: D,E
NEW QUESTION # 30
A Development team would like to migrate their existing application code from a GitHub repository to AWS CodeCommit.
What needs to be created before they can migrate a cloned repository to CodeCommit over HTTPS?
- A. An Amazon EC2 IAM role with CodeCommit permissions
- B. A public and private SSH key file
- C. A GitHub secure authentication token
- D. A set of Git credentials generated from IAM
Answer: D
Explanation:
Explanation/Reference: https://docs.aws.amazon.com/codecommit/latest/userguide/how-to-migrate-repository-existing.html
NEW QUESTION # 31
An e-commerce site allows returning users to log in to display customized web pages. The workflow is shown in the image below:
An application is running on EC2 instances. Amazon RDS is used for the database that stores user accounts and preferences. The website freezes or is slow to load while waiting for the login step to complete. The remaining components of the site are well-optimized.
Which of the following techniques will resolve this issue? (Select Two.)
- A. Use Amazon ElastiCache for MemCached to cache user data.
- B. Batch login requests from hundreds of users together as a single read request to the database.
- C. Implement the user login page as an asynchronous Lambda function.
- D. Call the database asynchronously so the code can continue executing.
- E. Use Amazon Application Load Balancer to load balance the traffic to the website.
Answer: A,D
NEW QUESTION # 32
A company has an internet-facing application that uses Web Identity Federation to obtain a temporary credential from AWS Security Token Service (AWS STS). The app then uses the token to access AWS services.
Review the following response:
Based on the response displayed what permissions are associated with the call from the application?
- A. Permission associated with the IAM principal that owns the AccessKeyID ASgeIAIOSFODNN7EXAMPLE
- B. Permissions associated with the account that owns the AWS service
- C. Permissions associated with the default role used when the AWS service was built
- D. Permissions associated with the role AROACLKWSDQRAOEXAMPLE:app1
Answer: A
NEW QUESTION # 33
A Developer has a stateful web server on-premises that is being migrated to AWS. The Developer must have greater elasticity in the new design.
How should the Developer re-factor the application to make it more elastic? (Choose two.)
- A. Use pessimistic concurrency on Amazon DynamoDB
- B. Use Amazon CloudFront with an Auto Scaling group
- C. Store session state data in an Amazon DynamoDB table
- D. Use Amazon CloudFront with an AWS Web Application Firewall
- E. Use an ELB with an Auto Scaling group
Answer: C,E
NEW QUESTION # 34
A user has created an RDS instance with MySQL. The user is using the HeidiSQL client to connect with
the RDS DB. The client is unable to connect to DB from his home machine. What is a possible reason for
the failure?
- A. The user has to open port 80 in the RDS security group to connect with RDS DNS
- B. The security group is not configured to allow a request from the user's IP on port 3306
- C. You can never connect to RDS from your desktop
- D. The user has to open port 22 in the RDS security group to connect with RDS DNS
Answer: B
Explanation:
If the user needs to connect to RDS then he has to open port 3306 in the RDS security group for his IP
address.
Reference: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Welcome.html
NEW QUESTION # 35
A developer is building an application that needs to store date in Amazon S3. Management requires that the data be encrypted before is it sent to Amazon S3 for storage. The encryption keys need to be managed by the security team.
Which approach should the developer take to meet these requirements?
- A. Implement server-side encryption by using client-side master key.
- B. Implement server-side encryption using customer-provided encryption keys (SSE-C).
- C. Implement Client-side encryption using Amazon S3 managed keys.
- D. Implement client-side encryption using an AWS KMS managed customer master key (CMK).
Answer: C
Explanation:
Reference:
https://aws.amazon.com/s3/faqs/
NEW QUESTION # 36
A company is building an application to track athlete performance using an Amazon DynamoDB table. Each item in the table is identified by a partition key (user_id) and a sort key (sport_name). The table design is shown below:
(Note: Not all table attributes are shown)
A Developer is asked to write a leaderboard application to display the top performers (user_id) based on the score for each sport_name.
What process will allow the Developer to extract results MOST efficiently from the DynamoDB table?
- A. Use a DynamoDB query operation with the key attributes of user_idand sport_nameand order the results based on the score attribute.
- B. Create a global secondary index with a partition key of sport_nameand a sort key of score, and get the results
- C. Create a local secondary index with a primary key of sport_nameand a sort key of score and get the results based on the scoreattribute.
- D. Use a DynamoDB scanoperation to retrieve scores and user_idbased on sport_name, and order the results based on the scoreattribute.
Answer: C
NEW QUESTION # 37
A user has launched an EC2 instance and installed a website with the Apache webserver. The webserver is running but the user is not able to access the website from the internet. What can be the possible reason for this failure?
- A. The instance is not configured with the proper key-pairs.
- B. The security group of the instance is not configured properly.
- C. The Apache website cannot be accessed from the internet.
- D. Instance is not configured with an elastic IP.
Answer: B
Explanation:
In Amazon Web Services, when a user has configured an instance with Apache, the user needs to ensure that the ports in the security group are opened as configured in Apache config. E.g.
If Apache is running on port 80, the user should open port 80 in the security group.
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-network-security.html
NEW QUESTION # 38
A Security Engineer is implementing a solution to allow users to seamlessly encrypt Amazon S3 objects without having to touch the keys directly. The solution must be highly scalable without requiring continual management. Additionally, the organization must be able to immediately delete the encryption keys.
Which solution meets these requirements?
- A. Use AWS CloudHSM to store the keys and then use the CloudHSM API or the PKCS11 library to delete the keys if necessary.
- B. Use AWS KMS with AWS managed keys and the ScheduleKeyDeletion API with a PendingWindowInDays set to 0 to remove the keys if necessary.
- C. Use the Systems Manager Parameter Store to store the keys and then use the service API operations to delete the key if necessary.
- D. Use KMS with AWS imported key material and then use the DeletelmportedKeyMaterial API to remove the key material if necessary.
Answer: D
NEW QUESTION # 39
A user is creating an EBS volume. He asks for your advice. Which advice mentioned below should you not give to the user for creating an EBS volume?
- A. Create an AMI from the attached volume
- B. Take the snapshot of the volume when the instance is stopped
- C. Stripe multiple volumes attached to the same instance
- D. Attach multiple volumes to the same instance
Answer: A
Explanation:
When a user creates an EBS volume, the user can attach it to a running instance. The user can attach multiple volumes to the same instance and stripe them together to increase the I/O. The user can take a snapshot from the existing volume but cannot create an AMI from the volume. However, the user can create an AMI from a snapshot.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumes.html
NEW QUESTION # 40
A Development team wants to instrument their code to provide more detailed information to AWS X-Ray than simple outgoing and incoming requests. This will generate large amounts of data, so the Development team wants to implement indexing so they can filter the data.
What should the Development team do to achieve this?
- A. Install required plugins for the appropriate AWS SDK
- B. Configure the necessary X-Ray environment variables
- C. Add annotations to the segment document and the code
- D. Add metadata to the segment document and the code
Answer: D
Explanation:
Explanation
https://docs.aws.amazon.com/xray/latest/devguide/xray-sdk-python-segment.html
NEW QUESTION # 41
A user has launched an RDS instance. The user has created 3 databases on the same server.
What can the maximum size be for each database?
- A. The size of each DB cannot be more than 3 TB
- B. The size of each DB cannot be more than 1 TB
- C. It is not possible to have more than one DB on a single instance
- D. The total instance storage size cannot be more than 3 TB
Answer: D
Explanation:
The AWS RDS DB instance is an isolated DB environment provided by AWS in which the user can create more than 1 database. The maximum size of the instance should be between 5 GB and 3 TB. The size of each DB can be anything in this range.
http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Welcome.html
NEW QUESTION # 42
A Developer is storing sensitive documents in Amazon S3 that will require encryption at rest. The encryption keys must be rotated annually, at least.
What is the easiest way to achieve this?
- A. Use AWS KMS with automatic key rotation
- B. Import a custom key into AWS KMS with annual rotation enabled
- C. Export a key from AWS KMS to encrypt the data
- D. Encrypt the data before sending it to Amazon S3
Answer: A
Explanation:
Explanation
https://docs.aws.amazon.com/kms/latest/developerguide/rotate-keys.html
https://docs.aws.amazon.com/kms/latest/developerguide/custom-key-store-overview.html You can use the same techniques to view and manage the CMKs in your custom key store that you use for CMKs in the AWS KMS key store. You can control access with IAM and key policies, create tags and aliases, enable and disable the CMKs, and schedule key deletion. You can use the CMKs for cryptographic operations and use them with AWS services that integrate with AWS KMS. However, you cannot enable automatic key rotation and you cannot import key material into a CMK in a custom key store.
Q: Can I rotate my keys? Yes. You can choose to have AWS KMS automatically rotate CMKs every year, provided that those keys were generated within AWS KMS HSMs. Automatic key rotation is not supported for imported keys, asymmetric keys, or keys generated in an AWS CloudHSM cluster using the AWS KMS custom key store feature. If you choose to import keys to AWS KMS or asymmetric keys or use a custom key store, you can manually rotate them by creating a new CMK and mapping an existing key alias from the old CMK to the new CMK. https://aws.amazon.com/kms/faqs/
NEW QUESTION # 43
A Developer created a Lambda function for a web application backend. When testing the Lambda function from the AWS Lambda console, the Developer can see that the function is being executed, but there is no log data being generated in Amazon CloudWatch Logs, even after several minutes.
What could cause this situation?
- A. The Lambda function does not have any explicit log statements for the log data to send it to CloudWatch Logs.
- B. The Lambda function is missing CloudWatch Logs as a source trigger to send log data.
- C. The Lambda function is missing a target CloudWatch Log group.
- D. The execution role for the Lambda function is missing permissions to write log data to the CloudWatch Logs.
Answer: D
Explanation:
https://docs.aws.amazon.com/lambda/latest/dg/lambda-monitoring.html
NEW QUESTION # 44
A set of APIs are exposed to customers using the Amazon API Gateway. These APIs have caching enabled on the API Gateway. Customers have asked for an option to invalidate this cache for each of the APIs.
What action can be taken to allow API customers to invalidate the API Cache?
- A. Ask customers to use AWS credentials to call the InvalidateCache API.
- B. Ask customers to pass an HTTP header called Cache-Control:max-age=0.
- C. Ask customers to add a query string parameter called "INVALIDATE_CACHE" when making an API call.
- D. Ask customers to invoke an AWS API endpoint which invalidates the cache.
Answer: B
Explanation:
Explanation
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cache-Control
https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-caching.html Invalidate an API Gateway Cache Entry A client of your API can invalidate an existing cache entry and reload it from the integration endpoint for individual requests. The client must send a request that contains the Cache-Control: max-age=0 header. The client receives the response directly from the integration endpoint instead of the cache, provided that the client is authorized to do so. This replaces the existing cache entry with the new response, which is fetched from the integration endpoint.
NEW QUESTION # 45
Which DynamoDB limits can be raised by contacting AWS support? Choose 2 answers
- A. The number of local secondary indexes per account
- B. The number of tables per account
- C. The number of hash keys per account
- D. The maximum storage used per account
- E. The number of provisioned throughput units per account
Answer: B,E
NEW QUESTION # 46
......
What is the duration, language, and format of Amazon AWS-Developer: AWS Certified Developer-Associate Exam
- Passing score: 72%
- Language of Exam: English, Korean, and Simplified Chinese
- Duration of Exam: 130 minutes
- No negative marking for wrong answers
- Unanswered questions will be scored as incorrect
- Type of Questions: Multiple choice (MCQs), multiple answers
Authentic Best resources for AWS-Certified-Developer-Associate Online Practice Exam: https://www.preppdf.com/Amazon/AWS-Certified-Developer-Associate-prepaway-exam-dumps.html
Updates Up to 365 days On Developing AWS-Certified-Developer-Associate Braindumps: https://drive.google.com/open?id=1YlUkgaZIRcI5SKie6Cx0IMPoavOA_fz6