AWS Certified Developer Associate

AWS Certified Developer Associate practice questions, page 8 of 18, with answer review and explanations.

Question 36

A company maintains a REST service using Amazon API Gateway and the API Gateway native API key validation. The company recently launched a new registration page, which allows users to sign up for the service. The registration page creates a new API key using CreateApiKey and sends the new key to the user. When the user attempts to call the API using this key, the user receives a 403 Forbidden error. Existing users are unaffected and can still call the API. What code updates will grant these new users access to the API?

  1. The createDeployment method must be called so the API can be redeployed to include the newly created API key.
  2. The updateAuthorizer method must be called to update the API's authorizer to include the newly created API key.
  3. The importApiKeys method must be called to import all newly created API keys into the current stage of the API.
  4. The createUsagePlanKey method must be called to associate the newly created API key with the correct usage plan.

Question 37

An application uploads photos to an Amazon S3 bucket. Each photo that is uploaded to the S3 bucket must be resized to a thumbnail image by the application. Each thumbnail image is uploaded with a new name in the same S3 bucket. Which AWS service can a developer configure to directly process each single S3 event for each S3 object upload?

  1. Amazon EC2
  2. Amazon Elastic Container Service (Amazon ECS)
  3. AWS Elastic Beanstalk
  4. AWS Lambda

Question 38

A company is running a Docker application on Amazon ECS. The application must scale based on user load in the last 15 seconds. How should a Developer instrument the code so that the requirement can be met?

  1. Create a high-resolution custom Amazon CloudWatch metric for user activity data, then publish data every 30 seconds
  2. Create a high-resolution custom Amazon CloudWatch metric for user activity data, then publish data every 5 seconds
  3. Create a standard-resolution custom Amazon CloudWatch metric for user activity data, then publish data every 30 seconds
  4. Create a standard-resolution custom Amazon CloudWatch metric for user activity data, then publish data every 5 seconds

Question 39

Where should the appspec.yml file be placed in order for AWS CodeDeploy to work?

  1. In the root of the application source code directory structure
  2. In the bin folder along with all the complied code
  3. In an S3 bucket
  4. In the same folder as the application configuration files

Question 40

A Developer is working on an application that handles 10MB documents that contain highly-sensitive data. The application will use AWS KMS to perform client- side encryption. What steps must be followed?

  1. Invoke the Encrypt API passing the plaintext data that must be encrypted, then reference the customer managed key ARN in the KeyId parameter
  2. Invoke the GenerateRandom API to get a data encryption key, then use the data encryption key to encrypt the data
  3. Invoke the GenerateDataKey API to retrieve the encrypted version of the data encryption key to encrypt the data
  4. Invoke the GenerateDataKey API to retrieve the plaintext version of the data encryption key to encrypt the data