AWS Cloud Developer Practice Test

These questions are part of the practice quiz. Start practicing

• In serverless development, how does debugging differ from traditional servers?
• In an IAM policy, what does the Action field specify?
• What does increasing the visibility timeout do in Amazon SQS?
• For an online bidding application, how should you assess caching potential?
• What is the purpose of the AWS Lambda execution role?
• Which Docker CLI command creates a container named my_app_1 from the image named node_app?
• Which statement about the Lambda function handler is true?
• In AWS Lambda, what does an alias represent?
• Which task is performed during the develop stage of the SDLC?
• Which statement about Amazon Cognito identity pools is true?
• A developer makes an API call to access an Amazon S3 bucket that doesn't exist. Which HTTP response code does AWS return?
• Which AWS service is used to share resources across AWS accounts?
• Which option suggests the use of WebSocket APIs?
• Which issue might be addressed by adding provisioned concurrency to a Lambda function?
• A video game developer who uses DynamoDB wants to ensure that players' profiles are updated correctly when they make in-game purchases. What is the best choice to write this application to manage these complex, all-or-nothing changes?
• Transform declaration in AWS SAM templates — which statement is true?
• Which statement describes how publish/subscribe (pub/sub) messaging works?
• Which AWS tool is commonly used to model and deploy serverless applications?
• What is the typical read path flow when using a cache with a database?
• Which statement is true about service client APIs relative to resource APIs?
• Which AWS service provides a browser-based integrated development environment (IDE) that supports real-time collaboration?
• Which statement about a simple primary key is true?
• Why must a developer rename a bucket if the desired name is unavailable?
• Which state would you use to apply the same action to every item in a list?
• An Amazon SNS topic receives messages about orders. An AWS Lambda function that processes canceled orders is subscribed to the topic. How might the developer reduce costs by only invoking the Lambda function for canceled orders?
• What is the primary difference between federated users and IAM users when authenticating with AWS STS?
• What does the Docker command 'docker run --name my_app_1 node_app' accomplish?
• Which parameter controls the maximum number of messages retrieved in a single ReceiveMessage call?
• A developer wants to use a single AWS CloudFormation template for both the test and production environments. Which section of the template might they use to support this approach?
• Which Amazon SQS operation is used to remove a message from the queue after processing?
• Which statement about AWS Step Functions is true?
• Which AWS service implements a publish/subscribe messaging pattern with topics that can have multiple subscribers?
• A function's Amazon Resource Name (ARN) is as follows: arn:aws:lambda:aws-region:acct-id:function:helloworld:PROD. Which statement about this function is correct, based on its ARN?
• Which of the following is a component of a container?
• How far back in a day can an Amazon DynamoDB table be restored by using point-in-time recovery?
• A developer wants to use infrastructure as code for their Java-based web application on AWS. Which task might be part of their work?
• Which AWS service would you use to create a group and attach policies for developers?
• An application that processes order returns must complete different steps depending on whether the return is within 30 days of purchase. Which state should be used to implement this conditional logic?
• Which Amazon Cognito feature helps reduce security risk from compromised credentials?
• What is the function of a dead-letter queue in Amazon SQS?
• Which of the following best describes the DynamoDB data model used by the service?
• Which option describes a benefit that led the shipping industry and the software industry to adopt containers?
• For an in-memory key-value store that needs to support read replicas with simple setup, which AWS service should you choose?
• Which option describes the philosophy of DevOps?
• How might a developer use AWS CodePipeline in their CI/CD process?
• Which type of policy enables granting access to resources in a different AWS account?
• Which statement about CloudFront cached file expiration is true?
• A developer is setting up their development environment. They need an integrated development environment (IDE) that enables them to code with other people in real time. Which AWS service should they use?
• A zipped deployment package of 75 MB is too large to upload directly in the console. Which deployment option should you use?
• Which statement about the Amazon Elastic Container Service (Amazon ECS) is true?
• How does an AWS Serverless Application Model (AWS SAM) template differ from an AWS CloudFormation template?
• Which statement describes Amazon DynamoDB API control operations that can be invoked by an application?
• What is a best practice for security credentials?
• Using AWS::Serverless::SimpleTable in a SAM template creates which resource?
• A developer wants to decouple incoming order requests from a backend database using an Amazon Simple Queue Service (SQS) queue. Which SQS operation might be part of this update?
• What is the correct term for the process of verifying a user's identity?
• Which statement about a container registry is true?
• In containerization, what is a stated benefit regarding dependencies and libraries?
• In a DynamoDB table called SensorReadings that uses sensorID as the partition key and timestamp as the sort key, which statement is true?
• In a Step Functions workflow that includes a manual approval step, how is a taskToken used?
• Which of the following endpoint patterns correctly represents the virtual-hosted-style endpoint for a static website hosted in the us-east-1 region for a bucket named 'example-bucket'?
• Which statement about DynamoDB partitions is true?
• Which is a use case for Amazon Simple Storage Service (Amazon S3)?
• Which factor determines the CloudFront TTL for cached objects?
• Which statement about Amazon SNS is true?
• A systems administrator must grant a new developer permissions associated with the developer role. Which AWS service should be used to assign the new developer to the developer group?
• A developer wants to do canary testing on a new deployment. Which AWS Elastic Beanstalk deployment policy option should the developer use?
• Which option describes how Amazon API Gateway invokes AWS Lambda?
• Which sequence correctly lists the first three phases of the SDLC?
• Which AWS service can be used to expose Step Functions APIs to HTTP clients?
• Which term describes a portable template that includes the filesystem and runtime needed to run a container?
• Given this snippet: aws apigatewayv2 create-route ... Which option could replace the <?> to create an API route that returns an individual product value from an online catalog?
• Which statement accurately describes Cognito identity pools?
• What is the effect of the following policy statement? NotResource example for IAM policies. Denies actions on DynamoDB or Amazon S3 resources except for the resources that are listed in the NotResource element. Which statement best describes this effect?
• What is the name for a logical collection of AWS Elastic Beanstalk components, which is conceptually similar to a folder?
• Which statement about AWS Certificate Manager (ACM) is true?
• Which statement about DynamoDB global tables is true?
• What is the format of IAM policies that define the allowable API calls an entity can invoke?
• Which phase is the final phase in the SDLC as described in the material?
• Is it best practice to use the root user for routine administrative tasks?
• After versioning is enabled on an Amazon S3 bucket, can it be disabled?
• Which mechanism should be applied to an S3 bucket to grant a user permission to perform any S3 operation on that bucket and its objects?
• A developer wants to improve web app performance for users in London. Which approach is appropriate?
• Which step in the certificate lifecycle is the responsibility of the certificate authority (CA)?
• A developer wants to migrate a monolithic shopping website to a microservice-based application. Which option reflects a reason to choose containers?
• Which statement best describes Amazon DynamoDB?
• To fetch a specific product value from an online catalog via API Gateway, which route key would you use?
• Which use case best illustrates CloudFront Functions?
• According to the material, which file type is used to authenticate programmatically to the AWS API?
• Which option is recommended to protect internet-facing APIs from common web exploits?
• Which statement best describes AWS Lambda execution environments?
• Which elements are part of the base URI that AWS generates for an Amazon APIGateway API?
• A composite primary key in DynamoDB consists of which components?
• Which statement about SSL and TLS is true?
• Which Amazon Cognito feature should be used to add sign-up and sign-in service to an application?
• Users of a serverless application have reported errors that occur when they try to retrieve order information. Assuming that AWS X-Ray is enabled, what is the first step the developer might take in X-Ray to start troubleshooting the reported issues quickly?
• Which use case suggests using Amazon API Gateway HTTP APIs?
• The following lines are in the Resources section of an AWS Serverless Application Model (AWS SAM) template. What would these lines create? Resources: Orders: Type: AWS::Serverless::SimpleTable
• With AWS X-Ray enabled, which feature helps quickly identify where errors occur across services?
• Which policy type is attached to identities such as users, groups, or roles and defines access within the same AWS account?
• In an application using ElastiCache in front of an RDS backend, how does the client typically connect to a cache node?
• Which Elastic Beanstalk deployment policy option corresponds to a blue/green deployment?
• Which statement about Docker containers is true?
• Which AWS service is designed to log and monitor account activity for actions across AWS services, such as S3 delete events?
• Which statement describes the relationship between resource APIs and service client APIs?
• A developer needs to build a custom application to put customer application log records onto an Amazon Kinesis data stream. What should they use to build the application?
• Which URL is the virtual-hosted-style URL for an S3 static website hosted in the us-east-1 region for a bucket named frank-martha-cafe?
• DynamoDB scales by distributing data across multiple partitions; what kind of scaling is this?
• In AWS SAM templates, which section is unique compared to standard CloudFormation?
• Which phrase best describes a RESTful API?
• Which service can directly trigger a Lambda function via a synchronous invocation?
• Under the AWS shared responsibility model, which option is the customer responsible for?
• What is the default behavior of IAM policy evaluation for requests with no explicit allow or deny statements?
• A developer recently built a proof-of-concept application using containers, and the business owner wants to roll it out to production. Which option reflects a primary reason that the developer might use a container orchestration service?
• How should a developer investigate who deleted files from an S3 bucket?
• What is a key benefit of the lazy loading caching strategy?
• In a flow where a mobile app uses Cognito User Pools with API Gateway, what happens after the user signs in?
• Which AWS service should you use to grant new user access and permissions associated with a developer group?
• A security team wants to know how to protect APIs in their internet application from common web exploits, like SQL injection or cross-scripting. Which solution most directly addresses their specific concern?
• Cross-Origin Resource Sharing (CORS) has to be enabled on which bucket when a website in one bucket references assets in another bucket?
• An application that processes order returns must run the same AWS Lambda function for each item in an order. Which state should be used?
• If a developer receives a BucketAlreadyExists error when trying to create a bucket named images-bucket, what should they do?
• When deciding where to add caching in an existing application, which factor should you consider?
• When using Amazon Cognito user pools with Amazon API Gateway, which step is part of the user pool authentication flow?
• To reduce impact of failed records due to an older client version, what strategy might help?
• An administrator created an IAM group called managers within an AWS account. A policy is attached that allows read from and write to an Amazon S3 bucket in the same account. What is this type of policy?
• In the SensorReadings example, which attribute acts as the partition key?
• Which feature allows connecting different environments to different backends without changing client code?
• Which mechanism can be used to enable cross-origin requests to S3 resources?
• Which statement about a Dockerfile is true?
• Which option describes how a message queue processes messages?
• Which term designates the top-level namespace container in Amazon S3?
• Which AWS service is used to retrieve temporary security credentials when using federated identities?
• Which constraint cannot be modified in AWS Lambda?
• Which state is used to pause a workflow for a specified time or until a condition is met?
• Which statement about Amazon Kinesis Data Streams is true?
• What is the AWS recommended approach for securing credentials used by applications on EC2?
• Which statement about CI/CD is true?
• An application that processes order returns must run two independent audit checks, and only when both succeed should the return authorization run. Which state type would implement this logic?
• To reduce duplicate processing when processing servers are slower than messages, which option might help by increasing the time before a message becomes available again?
• How would you describe AWS Lambda execution environments with respect to reuse and creation?
• Suppose that a restaurants database table can be queried by name (the sort key). What should the developer do if they also want to query by type of cuisine and average customer rating?
• An application that uses Amazon API Gateway must capture contact information from a third-party client application. The client application sends given name, surname, business phone, and cell phone. The backend application database has only two fields: name and mobile phone. Which option requires the fewest application changes?
• Which option is used to ensure atomic multi-item updates in DynamoDB?
• Which statement about AWS CloudFormation stacks is true?
• What does the Amazon API Gateway integration Latency metric tell the user?
• Which component is part of an Amazon DynamoDB table?
• With ElastiCache added to an application that uses RDS as the backend, what is typically the responsibility of the application developer?
• Which option encrypts data in transit for S3 communications?
• Which statement about API Gateway integrations is true?
• Which method can be used to grant time-limited access to private objects in S3 without sharing credentials?
• What does the event object provided to a Lambda function contain?
• Which statement about Amazon API Gateway stages is true?
• What are the last three phases of the systems development lifecycle (SDLC)?
• To increase CloudFront cache hit ratio, which action is most effective?
• What is the best practice when granting permissions to users, groups, roles, and resources?
• What describes a benefit of using AWS Step Functions for an application?
• Which state type is used to implement branching logic based on conditions?
• How are DevOps practices reflected in the software development lifecycle for cloud architectures?
• Which practice about caching is NOT recommended?
• Which mechanism allows different environments to connect to different backends without changing client code?
• Which statement about Amazon SQS polling options is true?
• A developer using the AWS SDK for Python (Boto3) must specify the Region. Which method enables the developer to specify the Region?
• A developer is building their first serverless application on AWS. What must they think about differently with respect to deploying the application?
• What is the role of the Task state type in AWS Step Functions?
• Which option is used to test an API without hitting the backend by providing a mock response?
• What controls the duration that CloudFront caches an object?
• Which Cognito feature enables risk-based authentication to challenge users on anomalous sign-in attempts?
• Which statement describes when AWS Lambda executes code?
• Which statement is true for both Succeed states and Fail states in a Step Functions state machine?
• Which use case is a good fit for AWS Step Functions Express workflows?
• What happens to resources when you delete a CloudFormation stack?
• Which scenario indicates a need for a task coordination service like AWS Step Functions?
• Which state would you use to coordinate multiple parallel tasks and wait for all of them to complete?
• Which IAM resource explicitly grants or denies permissions to a user or group?
• Which statement about S3 bucket names is true?
• Which URL pattern represents the virtual-hosted-style endpoint for a static website hosted in the us-east-1 region for a bucket named 'frank-martha-cafe'?
• NotResource in an IAM policy is used to specify resources that are not affected by the policy statement. True or False?
• Which endpoint pattern represents the virtual-hosted-style endpoint for a static website hosted in the us-east-1 region for a bucket named 'example-bucket'?