AWS Certified Developer Associate

AWS Certified Developer Associate practice questions, page 5 of 18, with answer review and explanations.

Question 21

A developer needs to write an AWS CloudFormation template on a local machine and deploy a CloudFormation stack to AWS. What must the developer do to complete these tasks?

  1. Install the AWS CLI. Configure the AWS CLI by using an IAM user name and password.
  2. Install the AWS CLI. Configure the AWS CLI by using an SSH key.
  3. Install the AWS CLI. Configure the AWS CLI by using an IAM user access key and secret key.
  4. Install an AWS software development kit (SDK). Configure the SDK by using an X.509 certificate.

Question 22

A developer is working on a web application that runs on Amazon Elastic Container Service (Amazon ECS) and uses an Amazon DynamoDB table to store data. The application performs a large number of read requests against a small set of the table data. How can the developer improve the performance of these requests? (Choose two.)

  1. Create an Amazon ElastiCache cluster. Configure the application to cache data in the cluster.
  2. Create a DynamoDB Accelerator (DAX) cluster. Configure the application to use the DAX cluster for DynamoDB requests.
  3. Configure the application to make strongly consistent read requests against the DynamoDB table.
  4. Increase the read capacity of the DynamoDB table.
  5. Enable DynamoDB adaptive capacity.

Question 23

A developer needs to use Amazon DynamoDB to store customer orders. The developer's company requires all customer data to be encrypted at rest with a key that the company generates. What should the developer do to meet these requirements?

  1. Create the DynamoDB table with encryption set to None. Code the application to use the key to decrypt the data when the application reads from the table. Code the application to use the key to encrypt the data when the application writes to the table.
  2. Store the key by using AWS Key Management Service (AWS KMS). Choose an AWS KMS customer managed key during creation of the DynamoDB table. Provide the Amazon Resource Name (ARN) of the AWS KMS key.
  3. Store the key by using AWS Key Management Service (AWS KMS). Create the DynamoDB table with default encryption. Include the kms:Encrypt parameter with the Amazon Resource Name (ARN) of the AWS KMS key when using the DynamoDB software development kit (SDK).
  4. Store the key by using AWS Key Management Service (AWS KMS). Choose an AWS KMS AWS managed key during creation of the DynamoDB table. Provide the Amazon Resource Name (ARN) of the AWS KMS key.

Question 24

A developer is creating a solution to track an account's Amazon S3 buckets over time. The developer has created an AWS Lambda function that will run on a schedule. The function will list the account's S3 buckets and will store the list in an Amazon DynamoDB table. The developer receives a permissions error when the developer runs the function with the AWSLambdaBasicExecutionRole AWS managed policy. Which combination of permissions should the developer use to resolve this error? (Choose two.)

  1. Cross-account IAM role
  2. Permission for the Lambda function to list buckets in Amazon S3
  3. Permission for the Lambda function to write in DynamoDB
  4. Permission for Amazon S3 to invoke the Lambda function
  5. Permission for DynamoDB to invoke the Lambda function

Question 25

A company is adding items to an Amazon DynamoDB table from an AWS Lambda function that is written in Python. A developer needs to implement a solution that inserts records in the DynamoDB table and performs automatic retry when the insert fails. Which solution meets these requirements with MINIMUM code changes?

  1. Configure the Python code to run the AWS CLI through shell to call the PutItem operation
  2. Call the PutItem operation from Python by using the DynamoDB HTTP API
  3. Queue the items in AWS Glue, which will put them into the DynamoDB table
  4. Use the AWS software development kit (SDK) for Python (boto3) to call the PutItem operation