AWS Cloud Developer Practice Test

These questions are part of the practice quiz. Start practicing

• After versioning is enabled on an Amazon S3 bucket, can it be disabled?
• Which Amazon SQS operation is used to remove a message from the queue after processing?
• Which statement about Amazon SNS is true?
• In an application using ElastiCache in front of an RDS backend, how does the client typically connect to a cache node?
• How far back in a day can an Amazon DynamoDB table be restored by using point-in-time recovery?
• Which of the following endpoint patterns correctly represents the virtual-hosted-style endpoint for a static website hosted in the us-east-1 region for a bucket named 'example-bucket'?
• With AWS X-Ray enabled, which feature helps quickly identify where errors occur across services?
• Which Elastic Beanstalk deployment policy option corresponds to a blue/green deployment?
• Which statement best describes AWS Lambda execution environments?
• Which option describes how a message queue processes messages?
• Which IAM resource explicitly grants or denies permissions to a user or group?
• When using Amazon Cognito user pools with Amazon API Gateway, which step is part of the user pool authentication flow?
• In a DynamoDB table called SensorReadings that uses sensorID as the partition key and timestamp as the sort key, which statement is true?
• How are DevOps practices reflected in the software development lifecycle for cloud architectures?
• An administrator created an IAM group called managers within an AWS account. A policy is attached that allows read from and write to an Amazon S3 bucket in the same account. What is this type of policy?
• What controls the duration that CloudFront caches an object?
• What is a key benefit of the lazy loading caching strategy?
• Which feature allows connecting different environments to different backends without changing client code?
• Which AWS service should you use to grant new user access and permissions associated with a developer group?
• Which Docker CLI command creates a container named my_app_1 from the image named node_app?
• Which statement describes when AWS Lambda executes code?
• Which Cognito feature enables risk-based authentication to challenge users on anomalous sign-in attempts?
• A security team wants to know how to protect APIs in their internet application from common web exploits, like SQL injection or cross-scripting. Which solution most directly addresses their specific concern?
• Which elements are part of the base URI that AWS generates for an Amazon APIGateway API?
• A zipped deployment package of 75 MB is too large to upload directly in the console. Which deployment option should you use?
• In a Step Functions workflow that includes a manual approval step, how is a taskToken used?
• What is a best practice for security credentials?
• For an online bidding application, how should you assess caching potential?
• Which endpoint pattern represents the virtual-hosted-style endpoint for a static website hosted in the us-east-1 region for a bucket named 'example-bucket'?
• An application that uses Amazon API Gateway must capture contact information from a third-party client application. The client application sends given name, surname, business phone, and cell phone. The backend application database has only two fields: name and mobile phone. Which option requires the fewest application changes?
• Which statement about Amazon API Gateway stages is true?
• An application that processes order returns must run two independent audit checks, and only when both succeed should the return authorization run. Which state type would implement this logic?
• How would you describe AWS Lambda execution environments with respect to reuse and creation?
• In an IAM policy, what does the Action field specify?
• Which statement about S3 bucket names is true?
• In the SensorReadings example, which attribute acts as the partition key?
• A function's Amazon Resource Name (ARN) is as follows: arn:aws:lambda:aws-region:acct-id:function:helloworld:PROD. Which statement about this function is correct, based on its ARN?
• Which option is used to test an API without hitting the backend by providing a mock response?
• A developer wants to use a single AWS CloudFormation template for both the test and production environments. Which section of the template might they use to support this approach?
• Which option is used to ensure atomic multi-item updates in DynamoDB?
• Transform declaration in AWS SAM templates — which statement is true?
• What is the primary difference between federated users and IAM users when authenticating with AWS STS?
• Which task is performed during the develop stage of the SDLC?
• Which statement about Amazon SQS polling options is true?
• Which statement accurately describes Cognito identity pools?
• What is the AWS recommended approach for securing credentials used by applications on EC2?
• Which statement about API Gateway integrations is true?
• To reduce impact of failed records due to an older client version, what strategy might help?
• Which mechanism can be used to enable cross-origin requests to S3 resources?
• NotResource in an IAM policy is used to specify resources that are not affected by the policy statement. True or False?
• A composite primary key in DynamoDB consists of which components?
• Which policy type is attached to identities such as users, groups, or roles and defines access within the same AWS account?
• What is the typical read path flow when using a cache with a database?
• For an in-memory key-value store that needs to support read replicas with simple setup, which AWS service should you choose?
• What are the last three phases of the systems development lifecycle (SDLC)?
• In a flow where a mobile app uses Cognito User Pools with API Gateway, what happens after the user signs in?
• Which use case suggests using Amazon API Gateway HTTP APIs?
• Which of the following is a component of a container?
• Which option describes how Amazon API Gateway invokes AWS Lambda?
• A developer wants to improve web app performance for users in London. Which approach is appropriate?
• What is the format of IAM policies that define the allowable API calls an entity can invoke?
• Which phrase best describes a RESTful API?
• A developer wants to migrate a monolithic shopping website to a microservice-based application. Which option reflects a reason to choose containers?
• In AWS Lambda, what does an alias represent?
• What happens to resources when you delete a CloudFormation stack?
• When deciding where to add caching in an existing application, which factor should you consider?
• Which state type is used to implement branching logic based on conditions?
• Which AWS service implements a publish/subscribe messaging pattern with topics that can have multiple subscribers?
• Which statement about a Dockerfile is true?
• A developer wants to decouple incoming order requests from a backend database using an Amazon Simple Queue Service (SQS) queue. Which SQS operation might be part of this update?
• DynamoDB scales by distributing data across multiple partitions; what kind of scaling is this?
• If a developer receives a BucketAlreadyExists error when trying to create a bucket named images-bucket, what should they do?
• Users of a serverless application have reported errors that occur when they try to retrieve order information. Assuming that AWS X-Ray is enabled, what is the first step the developer might take in X-Ray to start troubleshooting the reported issues quickly?
• Which statement about AWS CloudFormation stacks is true?
• Which option is recommended to protect internet-facing APIs from common web exploits?
• How might a developer use AWS CodePipeline in their CI/CD process?
• Which scenario indicates a need for a task coordination service like AWS Step Functions?
• A developer needs to build a custom application to put customer application log records onto an Amazon Kinesis data stream. What should they use to build the application?
• Which statement about a container registry is true?
• What is the default behavior of IAM policy evaluation for requests with no explicit allow or deny statements?
• Which statement about the Lambda function handler is true?
• According to the material, which file type is used to authenticate programmatically to the AWS API?
• What does the Amazon API Gateway integration Latency metric tell the user?
• Which statement is true for both Succeed states and Fail states in a Step Functions state machine?
• The following lines are in the Resources section of an AWS Serverless Application Model (AWS SAM) template. What would these lines create? Resources: Orders: Type: AWS::Serverless::SimpleTable
• Cross-Origin Resource Sharing (CORS) has to be enabled on which bucket when a website in one bucket references assets in another bucket?
• Which mechanism allows different environments to connect to different backends without changing client code?
• Which statement about Amazon Kinesis Data Streams is true?
• What is the best practice when granting permissions to users, groups, roles, and resources?
• A developer is setting up their development environment. They need an integrated development environment (IDE) that enables them to code with other people in real time. Which AWS service should they use?
• Which state would you use to apply the same action to every item in a list?
• Which statement about AWS Certificate Manager (ACM) is true?
• Which AWS service is designed to log and monitor account activity for actions across AWS services, such as S3 delete events?
• Which state would you use to coordinate multiple parallel tasks and wait for all of them to complete?
• Under the AWS shared responsibility model, which option is the customer responsible for?
• Which is a use case for Amazon Simple Storage Service (Amazon S3)?
• Suppose that a restaurants database table can be queried by name (the sort key). What should the developer do if they also want to query by type of cuisine and average customer rating?
• A systems administrator must grant a new developer permissions associated with the developer role. Which AWS service should be used to assign the new developer to the developer group?
• Which constraint cannot be modified in AWS Lambda?
• Which statement about Amazon Cognito identity pools is true?
• Which AWS service provides a browser-based integrated development environment (IDE) that supports real-time collaboration?
• In serverless development, how does debugging differ from traditional servers?
• Which AWS service would you use to create a group and attach policies for developers?
• Which method can be used to grant time-limited access to private objects in S3 without sharing credentials?
• Which mechanism should be applied to an S3 bucket to grant a user permission to perform any S3 operation on that bucket and its objects?
• Which statement about DynamoDB partitions is true?
• Which practice about caching is NOT recommended?
• How does an AWS Serverless Application Model (AWS SAM) template differ from an AWS CloudFormation template?
• Which statement about the Amazon Elastic Container Service (Amazon ECS) is true?
• What is the role of the Task state type in AWS Step Functions?
• Which option suggests the use of WebSocket APIs?
• Which option describes a benefit that led the shipping industry and the software industry to adopt containers?
• What describes a benefit of using AWS Step Functions for an application?
• Which statement about DynamoDB global tables is true?
• Which AWS service is used to retrieve temporary security credentials when using federated identities?
• Which statement about AWS Step Functions is true?
• Which state is used to pause a workflow for a specified time or until a condition is met?
• Which sequence correctly lists the first three phases of the SDLC?
• To fetch a specific product value from an online catalog via API Gateway, which route key would you use?
• With ElastiCache added to an application that uses RDS as the backend, what is typically the responsibility of the application developer?
• What is the function of a dead-letter queue in Amazon SQS?
• What is the effect of the following policy statement? NotResource example for IAM policies. Denies actions on DynamoDB or Amazon S3 resources except for the resources that are listed in the NotResource element. Which statement best describes this effect?
• Using AWS::Serverless::SimpleTable in a SAM template creates which resource?
• Which statement about CloudFront cached file expiration is true?
• Which statement about CI/CD is true?
• An Amazon SNS topic receives messages about orders. An AWS Lambda function that processes canceled orders is subscribed to the topic. How might the developer reduce costs by only invoking the Lambda function for canceled orders?
• A developer recently built a proof-of-concept application using containers, and the business owner wants to roll it out to production. Which option reflects a primary reason that the developer might use a container orchestration service?
• Which phase is the final phase in the SDLC as described in the material?
• Given this snippet: aws apigatewayv2 create-route ... Which option could replace the <?> to create an API route that returns an individual product value from an online catalog?
• What is the name for a logical collection of AWS Elastic Beanstalk components, which is conceptually similar to a folder?
• Which statement about a simple primary key is true?
• What is the correct term for the process of verifying a user's identity?
• What does the Docker command 'docker run --name my_app_1 node_app' accomplish?
• Which of the following best describes the DynamoDB data model used by the service?
• To reduce duplicate processing when processing servers are slower than messages, which option might help by increasing the time before a message becomes available again?
• Which statement is true about service client APIs relative to resource APIs?
• Which AWS tool is commonly used to model and deploy serverless applications?
• A developer is building their first serverless application on AWS. What must they think about differently with respect to deploying the application?
• A developer using the AWS SDK for Python (Boto3) must specify the Region. Which method enables the developer to specify the Region?
• Which parameter controls the maximum number of messages retrieved in a single ReceiveMessage call?
• Which factor determines the CloudFront TTL for cached objects?
• What is the purpose of the AWS Lambda execution role?
• Which statement best describes Amazon DynamoDB?
• Which use case is a good fit for AWS Step Functions Express workflows?
• Why must a developer rename a bucket if the desired name is unavailable?
• Which option describes the philosophy of DevOps?
• Which type of policy enables granting access to resources in a different AWS account?
• Which statement about Docker containers is true?
• Which statement describes how publish/subscribe (pub/sub) messaging works?
• Is it best practice to use the root user for routine administrative tasks?
• To increase CloudFront cache hit ratio, which action is most effective?
• Which AWS service can be used to expose Step Functions APIs to HTTP clients?
• A developer wants to use infrastructure as code for their Java-based web application on AWS. Which task might be part of their work?
• An application that processes order returns must complete different steps depending on whether the return is within 30 days of purchase. Which state should be used to implement this conditional logic?
• Which Amazon Cognito feature helps reduce security risk from compromised credentials?
• Which AWS service is used to share resources across AWS accounts?
• Which Amazon Cognito feature should be used to add sign-up and sign-in service to an application?
• Which service can directly trigger a Lambda function via a synchronous invocation?
• What does increasing the visibility timeout do in Amazon SQS?
• Which URL is the virtual-hosted-style URL for an S3 static website hosted in the us-east-1 region for a bucket named frank-martha-cafe?
• Which issue might be addressed by adding provisioned concurrency to a Lambda function?
• How should a developer investigate who deleted files from an S3 bucket?
• Which use case best illustrates CloudFront Functions?
• A developer makes an API call to access an Amazon S3 bucket that doesn't exist. Which HTTP response code does AWS return?
• Which term designates the top-level namespace container in Amazon S3?
• In containerization, what is a stated benefit regarding dependencies and libraries?
• Which statement describes Amazon DynamoDB API control operations that can be invoked by an application?
• What does the event object provided to a Lambda function contain?
• An application that processes order returns must run the same AWS Lambda function for each item in an order. Which state should be used?
• A developer wants to do canary testing on a new deployment. Which AWS Elastic Beanstalk deployment policy option should the developer use?
• A video game developer who uses DynamoDB wants to ensure that players' profiles are updated correctly when they make in-game purchases. What is the best choice to write this application to manage these complex, all-or-nothing changes?
• In AWS SAM templates, which section is unique compared to standard CloudFormation?
• Which term describes a portable template that includes the filesystem and runtime needed to run a container?
• Which statement about SSL and TLS is true?
• Which statement describes the relationship between resource APIs and service client APIs?
• Which step in the certificate lifecycle is the responsibility of the certificate authority (CA)?
• Which option encrypts data in transit for S3 communications?
• Which URL pattern represents the virtual-hosted-style endpoint for a static website hosted in the us-east-1 region for a bucket named 'frank-martha-cafe'?
• Which component is part of an Amazon DynamoDB table?