(Jan-2025) AWS-Developer Exam Dumps Contains FREE Real Quesions from the Actual Exam
Free Test Engine Verified By AWS Certified Developer Certified Experts
The AWS-Developer exam is an important certification for developers who want to demonstrate their expertise in working with AWS. By passing AWS-Developer exam, developers can demonstrate to potential employers or clients that they have the skills and knowledge necessary to build and maintain applications on AWS. In addition, the certification can help developers advance their careers and increase their earning potential. Overall, the AWS-Developer exam is an important credential for any developer who is working with AWS and wants to showcase their expertise in this area.
NEW QUESTION # 33
During non-peak hours, a Developer wants to minimize the execution time of a full Amazon DynamoDB table scan without affecting normal workloads. The workloads average half of the strongly consistent read capacity units during non-peak hours.
How would the Developer optimize this scan?
- A. Increase read capacity units during the scan operation
- B. Change consistency to eventually consistent during the scan operation
- C. Use sequential scans
- D. Use parallel scans while limiting the rate
Answer: C
NEW QUESTION # 34
A company needs to ingest terabytes of data each hour from thousands of sources that are delivered almost continually throughout the day. The volume of messages generated varies over the course of the day.
Messages must be delivered in real time for fraud detection and live operational dashboards.
Which approach will meet these requirements?
- A. Use AWS Data Pipeline to automate the movement and transformation of data
- B. Use Amazon Kinesis Data Streams with Kinesis Client Library to ingest and deliver messages
- C. Send the messages to an Amazon SQS queue, then process the messages by using a fleet of Amazon EC2 instances
- D. Use the Amazon S3 API to write messages to an S3 bucket, then process the messages by using Amazon Redshift
Answer: B
Explanation:
Explanation
https://aws.amazon.com/streaming-data/
NEW QUESTION # 35
A Developer has created a Lambda function and is finding that the function is taking longer to complete than expected. After some debugging, the Developer has discovered that increasing compute capacity would improve performance.
How can the Developer increase the Lambda compute resources?
- A. Specify a larger compute capacity when calling the Lambda function.
- B. Run on a larger instance size with more compute capacity.
- C. Increase the allocated memory for the Lambda function.
- D. Increase the maximum execution time.
Answer: C
NEW QUESTION # 36
A security engineer is designing an incident response plan to address the risk of a compromised Amazon EC2 instance. The plan must recommend a solution to meet the following requirements:
* A trusted forensic environment must be provisioned.
* Automated response processes must be orchestrated.
Which AWS services should be included in the plan? (Choose two.)
- A. Amazon GuardDuty
- B. AWS Step Functions
- C. Amazon Macie
- D. Amazon Inspector
- E. AWS CloudFormation
Answer: A,E
Explanation:
Explanation/Reference: https://aws.amazon.com/blogs/security/how-to-automate-incident-response-in-aws-cloud-for- ec2-instances/
NEW QUESTION # 37
A Developer created configuration specifications for an AWS Elastic Beanstalk application in a file named healthcheckurl.yaml in the .ebextensions/directory of their application source bundle. The file contains the following:
After the application launches, the health check is not being run on the correct path, event though it is valid.
What can be done to correct this configuration file?
- A. Convert the file to JSON format.
- B. Change the namespace of the option settings to a cusom namespace.
- C. Change the configuration section from options_settings to resources.
- D. Rename the file to a .config extension.
Answer: C
NEW QUESTION # 38
AWS CodeBuild builds code for an application, creates the Docker image, pushes the image to Amazon Elastic Container Registry (Amazon ECR), and tags the image with a unique identifier.
If the Developers already have AWS CLI configured on their workstations, how can the Docker images be pulled to the workstations?
- A. Run the following:docker pull REPOSITORY URI : TAG
- B. Run the output of the following:aws ecr get-loginand then run:docker pull REPOSITORY URI : TAG
- C. Run the following:aws ecr get-loginand then run:docker pull REPOSITORY URI : TAG
- D. Run the output of the following:aws ecr get-download-url-for-layerand then run:docker pull REPOSITORY URI : TAG
Answer: B
Explanation:
Explanation
https://docs.aws.amazon.com/cli/latest/reference/ecr/get-login.html
NEW QUESTION # 39
When developing an AWS Lambda function that processes Amazon Kinesis Data Streams, Administrators within the company must receive a notice that includes the processed data.
How should the Developer write the function to send processed data to the Administrators?
- A. Separate the Lambda handler from the core logic
- B. Use Amazon CloudWatch Events to send the processed data
- C. Publish the processed data to an Amazon SNS topic
- D. Push the processed data to Amazon SQS
Answer: C
Explanation:
https://stackoverflow.com/questions/13681213/what-is-the-difference-between-amazon-sns-and-amazon-sqs
https://stackoverflow.com/questions/31484868/can-you-publish-a-message-to-an-sns-topic-using-an-aws-lambda-function-backed-by/31485168
NEW QUESTION # 40
An application is running on a cluster of Amazon EC2 instance. While trying to read objects stored within a single Amazon S3 bucket that are encrypted with server-side encryption with AWS KMS managed keys (SSE-KMS), the application receives the following error:
Service : AWSKMS: Status Code: 400: Code : ThrottlingException
Which combination of steps should be taken to prevent this failure? (Select TWO.)
- A. Contact AWS Support to request a S3 rate limit increase.
- B. Perform error retries with exponential backoff in the application code.
- C. Use more than one customer master key (CMK) to encrypt S3 data
- D. Import a customer master key (CMK) with a larger key size.
- E. Contact AWS Support to request an AWS KMS rate limit increase.
Answer: D,E
NEW QUESTION # 41
A Developer has published an update to an application that is served to a global user base using Amazon CloudFront. After deploying the application, users are not able to see the updated changes.
How can the Developer resolve this issue?
- A. Invalidate all the application objects from the edge caches.
- B. Remove the origin from the CloudFront configuration and add it again.
- C. Disable forwarding of query strings and request headers from the CloudFront distribution configuration.
- D. Disable the CloudFront distribution and enable it again to update all the edge locations.
Answer: A
Explanation:
At a cost AWS can invalidate the CloudFront caches to clear the old data. Better solution would be to reduce the TTL to 0 on CloudFront.
NEW QUESTION # 42
In regard to DynamoDB, what is the Global secondary index?
- A. An index that has the same hash key and range key as the table
- B. An index that has the same range key as the table, but a different hash key
- C. An index with a hash and range key that can be different from those on the table.
- D. An index that has the same hash key as the table, but a different range key
Answer: C
Explanation:
Global secondary index - an index with a hash and range key that can be different from those on the
table.
Reference: http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/DataModel.html
NEW QUESTION # 43
A company's security officer is concerned about the risk of AWS account root user logins and has assigned a security engineer to implement a notification solution for near-real-time alerts upon account root user logins.
How should the security engineer meet these requirements?
- A. Run AWS CloudTrail logs through Amazon CloudWatch Events to detect account root user logins and trigger an AWS Lambda function to send an Amazon SNS notification to the security team's distribution list.
- B. Save AWS CloudTrail logs to an Amazon S3 bucket in the security team's account. Process the CloudTrail logs with the security engineer's logging solution for account root user logins. Send an Amazon SNS notification to the security team upon encountering the account root user login events.
- C. Create a cron job that runs a script to download the AWS IAM security credentials file, parse the file for account root user logins, and email the security team's distribution list.
- D. Save VPC Flow Logs to an Amazon S3 bucket in the security team's account, and process the VPC Flow Logs with their logging solutions for account root user logins. Send an Amazon SNS notification to the security team upon encountering the account root user login events.
Answer: A
Explanation:
Explanation/Reference: https://aws.amazon.com/blogs/mt/monitor-and-notify-on-aws-account-root-user-activity/
NEW QUESTION # 44
A user has launched five instances with ELB. How can the user add the sixth EC2 instance to ELB?
- A. The user can add the instance and change the ELB config file.
- B. The user can add the sixth instance on the fly.
- C. The user must stop the ELB and add the sixth instance.
- D. The ELB can only have a maximum of five instances.
Answer: B
Explanation:
Elastic Load Balancing automatically distributes incoming traffic across multiple EC2 instances.
You create a load balancer and register instances with the load balancer in one or more Availability Zones. The load balancer serves as a single point of contact for clients. This enables you to increase the availability of your application. You can add and remove EC2 instances from your load balancer as your needs change, without disrupting the overall flow of information.
http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/SvcIntro.html
NEW QUESTION # 45
A Developer wants access to make the log data of an application running on an EC2 instance available to systems administrators.
Which of the following enables monitoring of this metric in Amazon CloudWatch?
- A. Install the Amazon CloudWatch Logs agent on the EC2 instance that the application is running on.
- B. Launch a new EC2 instance, configure Amazon CloudWatch Events, and then install the application.
- C. Retrieve the log data from CloudWatch using the GetMetricData API call
- D. Retrieve the log data from AWS CloudTrail using the LookupEvents API call.
Answer: A
NEW QUESTION # 46
AWS Elastic Beanstalk will change the health status of a web server environment tier to gray color when:
- A. Your application hasn't responded to the application health check URL within the last one hour.
- B. AWS Elastic Beanstalk detects other problems with the environment that are known to make the application unavailable
- C. Your application hasn't responded to the application health check URL within the last five minutes.
- D. Your application's health status is unknown because status is reported when the application is not in the ready state.
Answer: D
Explanation:
AWS Elastic Beanstalk will change the health status of a web server environment tier to gray color when your application's health status is unknown (because status is reported when the application is not in the ready state).
Reference: http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/using-features.healthstatus.html
NEW QUESTION # 47
A development team is building a new application that will run on Amazon EC2 and use Amazon DynamoDB as a storage layer. The developers all have assigned IAM user accounts in the same IAM group. The developers currently can launch EC2 instances, and they need to be able to launch EC2 instances with an instance role allowing access to Amazon DynamoDB.
Which AWS IAM changes are needed when creating an instance role to provide this functionality?
- A. Create an IAM permission policy attached to the role that allows access to DynamoDB. Add a trust policy to the role that allows DynamoDB to assume the role. Attach a permissions policy to the development group in AWS IAM that allows developers to use the iam:GetRole and iam:PassRole permissions for the role.
- B. Create an IAM permissions policy attached to the role that allows access to DynamoDB. Add a trust policy to the role that allows Amazon EC2 to assume the role. Attach a permissions policy to the development group in AWS IAM that allows developers to use the iam:PassRole permission for the role.
- C. Create an IAM permission policy attached to the role that allows access to Amazon EC2. Add a trust policy to the role that allows DynamoDB to assume the role. Attach a permissions policy to the development group in AWS IAM that allows developers to use the iam:PassRole permission for the role.
- D. Create an IAM permissions policy attached to the role that allows access to DynamoDB. Add a trust policy to the role that allows Amazon EC2 to assume the role. Attach a permissions policy to the development group in AWS IAM that allows developers to use the iam:GetRole permission for the role.
Answer: B
Explanation:
https://docs.aws.amazon.com/glue/latest/dg/attach-policy-iam-user.html
NEW QUESTION # 48
An on-premises application is implemented using a Linux, Apache, MySQL and PHP (LAMP) stack. The Developer wants to run this application in AWS.
Which of the following sets of AWS services can be used to run this stack?
- A. AWS Lambda, Amazon DynamoDB
- B. Amazon Cognito, Amazon RDS
- C. Amazon ECS, Amazon EBS
- D. Amazon EC2, Amazon Aurora
- E. Amazon API Gateway, Amazon S3
Answer: D
NEW QUESTION # 49
Bob is an IAM user who has access to the EC2 services. Admin is an IAM user who has access to all the AWS services including IAM. Can Bob change his password?
- A. Yes, provided Admin has given Bob access to change his password
- B. Yes, only from the AWS console
- C. Yes, only from AWS CLI
- D. No, the IAM user can never change the password
Answer: A
Explanation:
The IAM users by default cannot change their password. The root owner or IAM administrator needs to set the policy in the password policy page, which should allow the user to change their password. Once it is enabled, the IAM user can always change their passwords from the AWS console or CLI.
Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/Using_ManagingUserPwdSelf.html
NEW QUESTION # 50
A company has three AWS Lambda functions that are written in Node js. The Lambda functions include a mix of custom code and open-source modules When bugs are occasionally detected in the open-source modules, all three Lambda functions must be patched.
What is the MOST operationally efficient solution to deploy a patched open-source library for all three Lambda functions?
- A. Create a custom AWS CloudFormation public registry extension.
Reference a GitHub repository that hosts the open-source modules m the extension.
Configure Formation to scan the repository once each day.
Write an AWS Serverless Application Model (AWS SAM) template to redeploy the three Lambda functions upon a scan notification change. - B. Create an Amazon CloudFront distribution with an Amazon S3 bucket as the origin.
Upload the patched modules to Amazon S3 when needed.
Modify each Lambda function to download the patched modules from the CloudFront distribution during the cold start. - C. Create a Lambda layer with the open-source modules.
Modify all three Lambda functions to depend on the layer.
Remove the open-source modules from each Lambda function.
Patch the Lambda layer with the modified open-source modules when needed.
Update the Lambda functions to reference the new layer version - D. Launch an Amazon EC2 instance Host a private open-source module registry on the EC2 instance.
Upload the modified open-source modules to the private registry when needed.
Modify each Lambda function deployment script to download the modules from the private registry.
Redeploy the three new Lambda functions.
Answer: C
NEW QUESTION # 51
A large e-commerce site is being designed to deliver static objects from Amazon S3. The Amazon S3 bucket will server more than 300 GET requests per second. What should be done to optimize performance? (Choose two.)
- A. Randomize Amazon S3 key name prefixes.
- B. Integrate Amazon CloudFront with Amazon S3.
- C. Configure Amazon S3 lifecycle rules.
- D. Enable Amazon S3 cross-region replication.
- E. Delete expired Amazon S3 server log files.
Answer: B,D
Explanation:
Explanation/Reference: http://jayendrapatil.com/aws-s3-best-practices/
NEW QUESTION # 52
A Developer has written a serverless application using multiple AWS services. The business logic is written as a Lambda function which has dependencies on third-party libraries. The Lambda function endpoints will be exposed using Amazon API Gateway. The Lambda function will write the information to Amazon DynamoDB. The Developer is ready to deploy the application but must have the ability to rollback. How can this deployment be automated, based on these requirements?
- A. Use an AWS CloudFormation template and use CloudFormation syntax to define the Lambda function resource in the template.
- B. Deploy using Amazon Lambda API operations to create the Lambda function by providing a deployment package.
- C. Use syntax conforming to the Serverless Application Model in the AWS CloudFormation template to define the Lambda function resource.
- D. Create a bash script which uses AWS CLI to package and deploy the application.
Answer: B
Explanation:
https://docs.aws.amazon.com/lambda/latest/dg/automating-deployment.html
NEW QUESTION # 53
A Developer is creating an application that needs to locate the public IPv4 address of the Amazon EC2 instance on which it runs. How can the application locate this information?
- A. Get the application to run IFCONFIG to get the public IP address.
- B. Get the instance user data by retrieving http://169.254.169.254/latest/userdata/.
- C. Get the instance metadata by retrieving http://169.254.169.254/latest/metadata/.
- D. Get the application to run IPCONFIG to get the public IP address.
Answer: C
Explanation:
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-instance-addressing.html
NEW QUESTION # 54
For a deployment using AWS CodeDeploy, what is the run order of the hooks for in-place deployments?
- A. Before Install -> Application Stop -> Validate Service -> Application Start
- B. Before Install -> Application Stop -> Application Start -> After Install
- C. Application Stop -> Before Install -> Validate Service -> Application Start
- D. Application Stop -> Before Install -> After Install -> Application Start
Answer: D
NEW QUESTION # 55
A developer is building a three-tier application with an Application Load Balancer (ALB). Amazon EC2 instances, and Amazon RDS. There is an alias record in Amazon Route 53 that points to the ALB. When Ihe developer tries to access the ALB from a laptop, the request times out.
Which logs should the developer investigate to verify that the request is reaching the AWS network?
- A. Amazon CloudWatch agent logs
- B. AWS Systems Manager Agent logs
- C. Amazon Route 53 logs
- D. VPC Flow Logs
Answer: D
NEW QUESTION # 56
......
Use Real Amazon Achieve the AWS-Developer Dumps - 100% Exam Passing Guarantee: https://passleader.testpassking.com/AWS-Developer-exam-testking-pass.html