Authentic Best resources for AWS-Developer Test Engine Practice Exam
[2021] AWS-Developer PDF Questions - Perfect Prospect To Go With TestPassed Practice Exam
NEW QUESTION 241
Which of the following device names is reserved for the root device for Linux instances of Amazon EC2?
- A. xvd[a-e]
- B. /dev/sd[b-e]
- C. /dev/sd[f-p][1-6]
- D. /dev/sda1
Answer: D
Explanation:
/dev/sda1 is the name of the device reserved for the root device for Linux instances.
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/device_naming.html
NEW QUESTION 242
For a deployment using AWS CodeDeploy, what is the run order of the hooks for in-place deployments?
- A. Before Install -> Application Stop -> Application Start -> After Install
- B. Before Install -> Application Stop -> Validate Service -> Application Start
- C. Application Stop -> Before Install -> Validate Service -> Application Start
- D. Application Stop -> Before Install -> After Install -> Application Start
Answer: D
NEW QUESTION 243
To include objects defined by the AWS Serverless Application Model (SAM) in an AWS CloudFormation template, in addition to Resources, what section MUST be included in the document root?
- A. Transform
- B. Globals
- C. Conditions
- D. Properties
Answer: A
Explanation:
Explanation
https://github.com/awslabs/serverless-application-model/blob/master/versions/2016-10-31.md
https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/sam-specification-template-ana
NEW QUESTION 244
You need to set up an Amazon Elastic Compute Cloud (EC2) instance for an application that requires the
lowest latency and the highest packet-per-second network performance. The application will talk to other
servers in a peered VPC.
Which two of the following components should be part of the design? (Select two.)
- A. Select an instance with support for single root I/O virtualization.
- B. Select an instance with Amazon Elastic Block Store (EBS)-optimization.
- C. Ensure that the instance supports jumbo frames and set 9001 MTU.
- D. Select an instance that has support for multiple ENIs.
- E. Ensure that proper OS drivers are installed.
Answer: A,D
Explanation:
Explanation/Reference:
References: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/enhanced-networking.html
NEW QUESTION 245
A legacy service has an XML-based SOAP interface. The Developer wants to expose the functionality of the service to external clients with the Amazon API Gateway. Which technique will accomplish this?
- A. Create a RESTful API with the API Gateway; transform the incoming XML into a valid message for the SOAP interface using mapping templates.
- B. Create a RESTful API with the API Gateway; transform the incoming JSON into a valid XML message for the SOAP interface using mapping templates.
- C. Create a RESTful API with the API Gateway; pass the incoming XML to the SOAP interface through an Application Load Balancer.
- D. Create a RESTful API with the API Gateway; pass the incoming JSON to the SOAP interface through an Application Load Balancer.
Answer: B
Explanation:
Explanation
https://blog.codecentric.de/en/2016/12/serverless-soap-legacy-api-integration-java-aws-lambda-aws-api-gateway
NEW QUESTION 246
An organization has created multiple components of a single application for compartmentalization.
Currently all the components are hosted on a single EC2 instance. Due to security reasons the
organization wants to implement two separate SSLs for the separate modules although it is already using
VPC. How can the organization achieve this with a single instance?
- A. You have to launch two instances each in a separate subnet and allow VPC peering for a single IP.
- B. Create a VPC instance which will have multiple network interfaces with multiple elastic IP addresses.
- C. Create a VPC instance which will have both the ACL and the security group attached to it and have
separate rules for each IP address. - D. Create a VPC instance which will have multiple subnets attached to it and each will have a separate IP
address.
Answer: B
Explanation:
A Virtual Private Cloud (VPC) is a virtual network dedicated to the user's AWS account. It enables the
user to launch AWS resources into a virtual network that the user has defined. With VPC the user can
specify multiple private IP addresses for his instances.
The number of network interfaces and private IP addresses that a user can specify for an instance
depends on the instance type. With each network interface the organization can assign an EIP. This
scenario helps when the user wants to host multiple websites on a single EC2 instance by using multiple
SSL certificates on a single server and associating each certificate with a specific EIP address. It also
helps in scenarios for operating network appliances, such as firewalls or load balancers that have multiple
private IP addresses for each network interface.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/MultipleIP.html
NEW QUESTION 247
Regarding Amazon SQS, are there restrictions on the names of Amazon SQS queues?
- A. No
- B. Yes. Queue names must be unique within an AWS account and you cannot use hyphens (-) and
underscores (_) - C. Yes. Queue names are limited to 80 characters and queue names must be unique within an AWS
account - D. Yes. Queue names are limited to 80 characters but queue names do not need to be unique within an
AWS account
Answer: C
Explanation:
Queue names are limited to 80 characters. Alphanumeric characters plus hyphens (-) and underscores (_)
are allowed. Queue names must be unique within an AWS account. After you delete a queue, you can
reuse the queue name.
Reference: https://aws.amazon.com/sqs/faqs/
NEW QUESTION 248
n on-premises application makes repeated calls to store files to Amazon S3. As usage of the application has increased, "LimitExceeded" errors are being logged.
What should be changed to fix this error?
- A. Add a one second delay to each API call.
- B. Load balance the application to multiple servers.
- C. Implement exponential backoffs in the application.
- D. Move the application to Amazon EC2.
Answer: C
NEW QUESTION 249
A Developer wants to upload data to Amazon S3 and must encrypt the data in transit.
Which of the following solutions will accomplish this task? (Choose two.)
- A. Set up Client-Side Encryption with an AWS KMS-Managed Customer Master Key
- B. Transfer the data over an SSL connection
- C. Set up hardware VPN tunnels to a VPC and access S3 through a VPC endpoint
- D. Set up Server-Side Encryption with AWS KMS-Managed Keys
- E. Set up Server-Side Encryption with S3-Managed Keys
Answer: A,B
Explanation:
Explanation
https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingEncryption.html
NEW QUESTION 250
A user is creating a new EBS volume from an existing snapshot. The snapshot size shows 10 GB. Can
the user create a volume of 30 GB from that snapshot?
- A. No
- B. Yes
- C. Provided the snapshot has the modify size attribute set as true
- D. Provided the original volume has set the change size attribute to true
Answer: B
Explanation:
A user can always create a new EBS volume of a higher size than the original snapshot size. The user
cannot create a volume of a lower size. When the new volume is created the size in the instance will be
shown as the original size. The user needs to change the size of the device with resize2fs or other OS
specific commands.
Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-expand-volume.html
NEW QUESTION 251
In DynamoDB, a secondary index is a data structure that contains a subset of attributes from a table, along with an alternate key to support ____ operations.
- A. Scan
- B. Query
- C. None of the above
- D. Both
Answer: B
NEW QUESTION 252
Regarding Amazon SNS, to send messages to a queue through a topic, you must subscribe the queue to
the Amazon SNS topic. You specify the queue by its _______.
- A. URL
- B. ARN
- C. Registration ID
- D. Token
Answer: B
Explanation:
In Amazon SNS, to send messages to a queue through a topic, you must subscribe the queue to the
Amazon SNS topic. You specify the queue by its ARN.
Reference: http://docs.aws.amazon.com/sns/latest/dg/SendMessageToSQS.html
NEW QUESTION 253
A user has an S3 object in the US Standard region with the content "color=red". The user updates the object with the content as "color="white". If the user tries to read the value 1 minute after it was uploaded, what will S3 return?
- A. It will return "color=white"
- B. It will return an error saying that the object was not found
- C. It may return either "color=red" or "color=white" i.e. any of the value
- D. It will return "color=red"
Answer: C
Explanation:
AWS S3 follows the eventual consistent model in the US Standard Region. Once the object is updated it may return the new value or the old value based on whether all the content is replicated across multiple servers until it becomes consistent (eventual).
Reference: http://docs.aws.amazon.com/AmazonS3/latest/dev/Introduction.html
NEW QUESTION 254
Which EC2 API call would you use to retrieve a list of Amazon Machine Images (AMIs)?
- A. DescnbeInstances
- B. You cannot retrieve a list of AMIs as there are over 10,000 AMIs
- C. DescribeAMls
- D. DescribeImages
- E. GetAMls
Answer: D
NEW QUESTION 255
A Security Architect is evaluating managed solutions for storage of encryption keys. The requirements are:
-Storage is accessible by using only VPCs.
-Service has tamper-evident controls.
-Access logging is enabled.
-Storage has high availability.
Which of the following services meets these requirements?
- A. Amazon DynamoDB with server-side encryption
- B. AWS Systems Manager Parameter Store
- C. Amazon S3 with default encryption
- D. AWS CloudHSM
Answer: D
Explanation:
Explanation/Reference: https://aws.amazon.com/blogs/aws/aws-cloud-hsm-secure-key-storage-and-cryptographic- operations/
NEW QUESTION 256
A user is uploading archives to Glacier. The user is trying to understand key Glacier resources. Which of the below mentioned options is not a Glacier resource?
- A. Notification configuration
- B. Archive
- C. Archive ID
- D. Job
Answer: C
Explanation:
AWS Glacier has four resources. Vault and Archives are core data model concepts. Job is required to initiate download of archive. The notification configuration is required to send user notification when archive is available for download.
Reference: http://docs.aws.amazon.com/amazonglacier/latest/dev/amazon-glacier-data-model.html
NEW QUESTION 257
An AWS Lambda function generates a 3MB JSON file and then uploads it to an Amazon S3 bucket daily. The file contains sensitive information, so the Developer must ensure that it is encrypted before uploading to the bucket.
Which of the following modifications should the Developer make to ensure that the data is encrypted before uploading it to the bucket?
- A. Use the GenerateDateKey API, then use that data key to encrypt the file in the Lambda function code.
- B. Use the S3 managed key and call the GenerateDataKey API to encrypt the file.
- C. Use a custom KMS customer master key created for S3 in the Lambda function code.
- D. Use the default AWS KMS customer master key for S3 in the Lambda function code.
Answer: A
NEW QUESTION 258
A company is developing a new web application in Python A developer must deploy the application using AWS Elastic Beanstalk from the AWS Management Console The developer creates an Elastic Beanstalk source bundle to upload using the console Which of the following are requirements when creating the source bundle'' (Select TWO.)
- A. The source bundle must not include a top-level directory.
- B. The source bundle must include the ebextensions.yaml file.
- C. The source bundle must be compressed with any required dependencies in a top-level parent folder
- D. The source bundle must be created as a single zip or war file
- E. The source bundle must be uploaded into Amazon EFS.
Answer: A,D
NEW QUESTION 259
A company developed a set of APIs that are being served through the Amazon API Gateway. The API calls need to be authenticated based on OpenID identity providers such as Amazon or Facebook. The APIs should allow access based on a custom authorization model.
Which is the simplest and MOST secure design to use to build an authentication and authorization model for the APIs?
- A. Build a OpenID token broker with Amazon and Facebook. Users will authenticate with these identify providers and pass the JSON Web Token to the API to authenticate each API call.
- B. Use Amazon Cognito user pools and a custom authorizer to authenticate and authorize users based on JSON Web Tokens.
- C. Use Amazon RDS to store user credentials and pass them to the APIs for authentications and authorization.
- D. Store user credentials in Amazon DynamoDB and have the application retrieve temporary credentials from AWS STS. Make API calls by passing user credentials to the APIs for authentication and authorization.
Answer: B
NEW QUESTION 260
A company wants to migrate its web application to AWS and leverage Auto Scaling to handle pear workloads.
The Solutions Architect determined that the best metric for an Auto Scaling event is the number of concurrent users.
Based on this information, what should the Developer use to autoscale based on concurrent users?
- A. An Amazon SNS topic to be triggered when a concurrent user threshold is met
- B. A Custom Amazon CloudWatch metric for concurrent users.
- C. An Amazon Cloudwatch Networkin metric
- D. Amazon CloudFront to leverage AWS Edge Locations
Answer: B
NEW QUESTION 261
......
Best updated resource for AWS-Developer Online Practice Exam: https://www.testpassed.com/AWS-Developer-still-valid-exam.html
Realistic Practice AWS-Developer AWS Certified Developer - Associate Exam Braindumps: https://drive.google.com/open?id=1EXqkrYoF_cfSFrID0MslH7-Ar4PzkgkC