AWS Developer

A developer is configuring an AWS Lambda function to process images uploaded to Amazon S3. The function needs to access an Amazon RDS database in a private subnet. What configuration is required?

• AEnable public access on the RDS database
• BConfigure the Lambda function with VPC access and appropriate security groups
• CUse AWS Direct Connect to connect Lambda to the RDS instance
• DStore database credentials in the Lambda function code

A Lambda function is experiencing cold starts that are impacting user experience. Which approach will help reduce cold start latency?

• AIncrease the function timeout to maximum
• BUse provisioned concurrency to keep functions initialized
• CDeploy the function in multiple regions
• DEnable AWS X-Ray tracing

What is the maximum execution timeout for an AWS Lambda function?

• A5 minutes (300 seconds)
• B15 minutes (900 seconds)
• C30 minutes (1800 seconds)
• D1 hour (3600 seconds)

A developer needs to pass environment-specific configuration to a Lambda function without modifying the deployment package. What is the best approach?

• AHardcode the values in the function code
• BUse Lambda environment variables
• CStore configuration in the function description
• DCreate separate function versions for each environment

An API Gateway endpoint needs to throttle requests to prevent overloading a backend Lambda function. What feature should be used?

• AAWS WAF rate limiting rules
• BAPI Gateway usage plans and API keys
• CEnable caching on the API Gateway
• DUse a Network Load Balancer in front of API Gateway

Which API Gateway endpoint type is best for a public-facing REST API that needs to be accessed from the internet with the lowest latency?

• APrivate API endpoint
• BRegional API endpoint
• CEdge-optimized API endpoint
• DVPC endpoint

A developer needs to transform an XML response from a backend service to JSON before returning it to the client using API Gateway. What feature should be used?

• ALambda authorizer
• BMapping templates
• CAPI Gateway caching
• DProxy integration

A DynamoDB table is experiencing throttling errors during peak traffic. The table is using on-demand capacity. What is the most effective solution?

• ASwitch to provisioned capacity with auto scaling
• BImplement exponential backoff with jitter in the application
• CIncrease the read and write capacity units manually
• DEnable DynamoDB Streams

Which DynamoDB feature provides a fully managed in-memory cache for microsecond latency?

• ADynamoDB Streams
• BDynamoDB Accelerator (DAX)
• CGlobal Tables
• DOn-demand capacity

An application needs to retrieve items from a DynamoDB table using attributes other than the primary key. What should the developer implement?

• AUse the GetItem API with a filter expression
• BCreate a Global Secondary Index (GSI)
• CPerform a full table scan with pagination
• DChange the primary key structure

An application needs to generate a temporary URL that allows a user to upload a file directly to a specific S3 bucket. Which feature should be used?

• AS3 Bucket Policy with public write access
• BS3 Pre-Signed URL
• CS3 Cross-Region Replication
• DS3 Transfer Acceleration

A developer needs to ensure that S3 objects are encrypted before they are stored. Which approach enforces this requirement?

• AUse client-side encryption only
• BConfigure a bucket policy that denies PUT requests without encryption headers
• CEnable S3 versioning on the bucket
• DUse S3 Transfer Acceleration

An application needs to send messages to multiple microservices for parallel processing. Each message should be processed by all services. Which service is most appropriate?

• AAmazon SQS standard queue
• BAmazon SNS topic with multiple subscribers
• CAmazon SQS FIFO queue
• DAWS Step Functions

A developer needs to ensure that messages are processed exactly once and in the order they were sent. Which SQS feature meets this requirement?

• ASQS standard queue with visibility timeout
• BSQS FIFO queue with deduplication enabled
• CSQS dead-letter queue
• DSQS with AWS Lambda trigger

An application needs to react to changes in a DynamoDB table in real-time. Which pattern should the developer implement?

• APoll the table periodically using Scan operations
• BEnable DynamoDB Streams and trigger a Lambda function
• CUse S3 event notifications on the DynamoDB backup
• DImplement a custom webhook system

A developer is using the AWS SDK for JavaScript to make API calls. To improve performance and reduce latency, what should be implemented?

• ACreate a new service client for each API call
• BReuse the same service client instance across requests
• CDisable SSL certificate verification
• DUse the synchronous API methods exclusively

A Lambda function needs to access both S3 and DynamoDB. What is the most secure way to grant these permissions?

• AUse IAM user credentials hardcoded in the function
• BAttach an IAM role with the necessary permissions to the Lambda function
• CUse the root account credentials with full access
• DMake the S3 bucket and DynamoDB table publicly accessible

An application uses temporary credentials obtained through STS AssumeRole. What component is used to validate these credentials when making AWS API calls?

• AIAM Access Key ID only
• BSession Token
• CAWS Account ID
• DRole ARN

Which IAM policy element is used to explicitly deny access regardless of other permissions granted?

• AAllow statement
• BDeny statement
• CCondition element
• DResource element

A developer needs to grant a third-party SaaS application limited access to an S3 bucket. What is the most secure approach?

• AShare IAM user credentials with the third party
• BCreate an IAM role that the third party can assume via cross-account access
• CMake the S3 bucket public with a bucket policy
• DUse the root account for the integration

A mobile application needs user authentication with social identity providers like Google and Facebook. Which service should be used?

• AIAM users for each application user
• BAmazon Cognito Identity Pools
• CAWS Directory Service
• DAWS Single Sign-On

What is the difference between Amazon Cognito User Pools and Identity Pools?

• AUser Pools are for authorization; Identity Pools are for authentication
• BUser Pools are for authentication; Identity Pools are for authorization
• CThey are the same service with different names
• DUser Pools are deprecated in favor of Identity Pools