DVA-C01 AWS Certified Developer (03)

Question 1

A developer is building an application that needs to store date in Amazon S3. Managementre quires that the data be encrypted before is it sent to Amazon S3 for storage. The encryption keys need to be managed by the security team.
Which approach should the developer take to meet these requirements?

Accepted Answer

C. Implement client-side encryption using an AWS KMS managed customer master key (CMK).

Answer

A. Implement server-side encryption using customer-provided encryption keys (SSE-C).

Answer

B. Implement server-side encryption by using client-side master key.

Answer

D. Implement Client-side encryption using Amazon S3 managed keys.

Question 2

A developer has a legacy application that is hosted on-premises Other applications hosted on AWS depend on the on-premises application for proper functioning In case of any application errors, the developer wants to be able to use Amazon CloudWatch to monitor and troubleshoot all applications from one place.
How can the developer accomplish this?

Accepted Answer

B. Download the CloudWatch agent to the on-premises server Configure the agent to use IAM user credentials with permissions for CloudWatch.

Answer

A. Install an AWS SDK on the on-premises server to automatically send logs to CloudWatch.

Answer

C. Upload log files from the on-premises server to Amazon S3 and have CloudWatch read the files.

Answer

D. Upload log files from the on-premises server to an Amazon EC2 instance and have the instance forward the logs to CloudWatch.

Question 3

When writing a Lambda function, what is the benefit of instantiating AWS clients outside
the scope of the handler?

Accepted Answer

B. Taking advantage of connection re-use.

Answer

A. Legibility and stylistic convention.

Answer

C. Better error handling.

Answer

D. Creating a new instance per invocation.

Question 4

An application stops working with the following error: The specified bucket does not exist. Where is the BEST place to start the root cause analysis?

Accepted Answer

D. Check AWS CloudTrail for a DeleteBucket event.

Answer

A. Check the Elastic Load Balancer logs for DeleteBucket requests.

Answer

B. Check the application logs in Amazon CloudWatch Logs for Amazon S3 DeleteBucket errors.

Answer

C. Check AWS X-Ray for Amazon S3 DeleteBucket alarms.

Question 5

A Developer is creating a template that uses AWS CloudFormation to deploy an
application. This application is serverless and uses Amazon API Gateway, Amazon
DynamoDB, and AWS Lambda. Which tool should the Developer use to define simplified syntax for expressing serverless resources?

Accepted Answer

A. CloudFormation serverless intrinsic functions.

Answer

B. AWS serverless express.

Answer

C. An AWS serverless application model.

Answer

D. A CloudFormation serverless plugin.

Question 6

A company wants to migrate an imaging service to Amazon EC2 while following security
best practices. The images are sourced and read from a non-public Amazon S3 bucket.
What should a developer do to meet these requirements?

Accepted Answer

A. Create an IAM user with read-only permissions for the S3 bucket Temporarily store the user credentials in the Amazon EBS volume of the EC2 instance.

Answer

B. Create an IAM user with read-only permissions for the S3 bucket. Temporarily store the user credentials in the user data of the EC2 instance.

Answer

C. Create an EC2 service role with read-only permissions for the S3 bucket Attach the role to the EC2 instance.

Answer

D. Create an S3 service role with read-only permissions for the S3 bucket Attach the role to the EC2 instance.

Question 7

A company wants to implement a continuous integration for its workloads on AWS. The company wants to trigger unit test in its pipeline for commits-on its code repository, and wants to be notified of failure events in the pipeline.
How can these requirements be met?

Accepted Answer

D. Store the source code in AWS CodeCommit. Create a CodePipeline to automate unit testing. Use Amazon
CloudWatch to trigger notification of failure events.

Answer

A. Store the source code in AWS CodeCommit. Create a CodePipeline to automate unit testing. Use Amazon SNS to trigger notifications of failure events.

Answer

B. Store the source code in GitHub. Create a CodePipeline to automate unit testing. Use Amazon SES to trigger notifications of failure events.

Answer

C. Store the source code on GitHub. Create a CodePipeline to automate unit testing. Use Amazon CloudWatch to trigger notifications of failure events.

Question 8

A development team is migrating a monolithic application to Amazon API Gateway with AWS Lambda integrations using the AWS CD. The zip deployment package exceeds the Lambda direct upload deployment package size limit. 
How should the Lambda function be deployed?

Accepted Answer

D. Upload a deployment package to Amazon S3 and reference Amazon S3 using the -- code CLI parameter.

Answer

A. Use the zip tile to create a Lambda layer and reference it using the -code CLI parameter.

Answer

B. Create a Docker image and reference the image using the --docker-image CLI parameter.

Answer

C. Upload a deployment package using the --zp-file CLI parameter.

Question 9

A development team is building a new application that will run on Amazon EC2 and use Amazon DynamoDB as a storage layer The developers all have assigned IAM user
accounts in the same IAM group The developers currently can launch EC2 instances and they need to be able to launch EC2 instances with an instance role allowing access to Amazon DynamoDB Which AWS I AM changes are needed when creating an instance role to provide this functionality.

Accepted Answer

C. Create an IAM permission policy attached to the role that allows access to Amazon EC2 Add a trust policy to the role that allows DynamoDB to assume the role Attach a permissions policy to the development group in AWS IAM that allows developers to use the
IAM PassRole permission for the role.

Answer

A. Create an IAM permission policy attached to the role that allows access to DynamoDB Add a trust policy to the role that allows DynamoDB to assume the role Attach a permissions policy to the development group in AWS IAM that allows developers to use the IAM GetRole and IAM PassRole permissions for the role.

Answer

B. Create an IAM permissions policy attached to the role that allows access to DynamoDB Add a trust policy to the role that allows Amazon EC2 to assume the role Attach a permissions policy to the development group in AWS IAM that allows developers to use the IAM PassRole permission for the role.

Answer

D. Create an IAM permissions policy attached to the role that allows access to DynamoDB Add a trust policy to the role that allows Amazon EC2 to assume the role Attach a permissions policy to the development group in AWS IAM that allows developers to use the iam GetRole permission for the role.

Question 10

What does an Amazon SQS delay queue accomplish?

Accepted Answer

A. Messages are hidden for a configurable amount of time when they are first added to the queue.

Answer

B. Messages are hidden for a configurable amount of time after they are consumed from the queue.

Answer

C. The consumer can poll the queue for a configurable amount of time before retrieving a message.

Answer

D. Message cannot be deleted for a configurable amount of time after they are consumed from the queue.

Question 11

A developer is writing an application in AWS Lambda To simplify testing and deployments, the developer needs the database connection string to be easily changed without modifying the Lambda code. How can this requirement be met?

Accepted Answer

A. Store the connection string as a secret in AWS Secrets Manager.

Answer

B. Store the connection string in an IAM user account.

Answer

C. Store the connection string in AWS KMS.

Answer

D. Store the connection string as a Lambda layer.

Question 12

A corporate web application is deployed within an Amazon VPC, and is connected to the corporate data center via IPSec VPN. The application must authenticate against the onpremise LDAP server. Once authenticated, logged-in users can only access an S3 keyspace specific to the user. 
Which two approaches can satisfy the objectives? Choose 2 answers

Accepted Answer

B. The application authenticates against LDAP, and retrieves the name of an IAM role associated with the user. The application then calls the IAM Security Token Service to assume that IAM Role. The application can use the temporary credentials to access the
appropriate S3 bucket.

Accepted Answer

D. Develop an identity broker which authenticates against LDAP, and then calls IAM Security Token Service to get IAM federated user credentials. The application calls the identity broker to get IAM federated user credentials with access to the appropriate S3
bucket.

Answer

A. The application authenticates against LDAP. The application then calls the IAM Security
Service to login to IAM using the LDAP credentials. The application can use the IAM temporary credentials to access the appropriate S3 bucket.

Answer

C. The application authenticates against IAM Security Token Service using the LDAP credentials. The application uses those temporary AWS security credentials to access the appropriate S3 bucket.

Answer

E. Develop an identity broker which authenticates against IAM Security Token Service to assume an IAM Role to get temporary AWS security credentials. The application calls the identity broker to get AWS temporary security credentials with access to the appropriate S3 bucket.

Question 13

A large company has its application components distributed across.. company needs to
collect and visualize trace data across these accounts.
What should be used to meet these requirements?

Accepted Answer

A. AWS X-Ray

Answer

B. Amazon CloudWatch

Answer

C. Amazon VPC flow logs

Answer

D. Amazon Elasticsearch Service

Question 14

When using a large Scan operation in DynamoDB, what technique can be used to minimize the impact of a scan on a table's provisioned throughput?

Accepted Answer

A. Set a smaller page size for the scan.

Answer

B. Use parallel scans.

Answer

C. Define a range index on the table.

Answer

D. Prewarm the table by updating all items.

Question 15

A Developer is writing a REST service that will add items to a shopping list. The service is built on Amazon API Gateway with AWS Lambda integrations. The shopping list items are send as query string parameters in the method request.
How should the Developer convert the query string parameters to arguments for the Lambda function?

Accepted Answer

D. Create a mapping template.

Answer

A. Enable request validation.

Answer

B. Include the Amazon Resource Name (ARN) of the Lambda function.

Answer

C. Change the integration type.

Question 16

A company is managing a NoSQL database on-premises to host a critical component of an application, which is starting to have scaling issues. The company wants to migrate the application to Amazon DynamoDB with the following considerations:
• Optimize frequent queries 
• Reduce read latencies
• Plan for frequent queries on certain key attributes of the table
Which solution would help achieve these objectives?

Accepted Answer

A. Create global secondary indexes on keys that are frequently queried Add the necessary attributes into the indexes.

Answer

B. Create local secondary indexes on keys that are frequently queried DynamoDB will fetch needed attributes from the table.

Answer

C. Create DynamoDB global tables to speed up query responses Use a scan to fetch data from the table.

Answer

D. Create an AWS Auto Scaling policy for the DynamoDB table.

Question 17

A developer is planning to use an Amazon API Gateway and AWS Lambda to provide a
REST API The developer will have three distinct environments to manage development, test, and production. How should the application be deployed while minimizing the number of resources to manage?

Accepted Answer

C. Create one API Gateway with multiple stages with one Lambda function with multiple aliases.

Answer

A. Create a separate API Gateway and separate Lambda function for each environment in the same Region.

Answer

B. Assign a Region for each environment and deploy API Gateway and Lambda to each Region.

Answer

D. Create one API Gateway and one Lambda function, and use a REST parameter to identify tne environment.

Question 18

An application that runs on an Amazon EC2 instance needs to access and make API calls to multiple AWS services.

What is the MOST secure way to provide access to the AWS services with MINIMAL management overhead?

Accepted Answer

B. Use EC2 instance profiles.

Answer

A. Use AWS KMS to store and retrieve credentials.

Answer

C. Use AWS root user to make requests to the application.

Answer

D. Store and retrieve credentials from AWS CodeCommit.

Question 19

How can you secure data at rest on an EBS volume?

Accepted Answer

C. Use an encrypted file system on top of the BBS volume.

Answer

A. Attach the volume to an instance using EC2's SSL interface.

Answer

B. Write the data randomly instead of sequentially.

Answer

D. Encrypt the volume using the S3 server-side encryption service.

Answer

E. Create an IAM policy that restricts read and write access to the volume.

Question 20

A developer is working on a serverless project based in Java. Initial testing shows a cold
start takes about 8 seconds on average for AWS Lambda functions.
What should the developer do to reduce the cold start time'' (Select TWO)

Accepted Answer

B. Reduce the deployment package by including only the needed modules from the AWS SDK for Java.

Accepted Answer

C. Increase the memory allocation setting for the Lambda function.

Answer

A. Add the Spring Framework to the project and enable dependency injection.

Answer

D. Increase the timeout setting for the Lambda function.

Answer

E. Change the Lambda invocation mode from synchronous to asynchronous.

Question 21

What is one key difference between an Amazon EBS-backed and an instance-store backed instance?

Accepted Answer

B. Amazon EBS-backed instances can be stopped and restarted.

Answer

A. Virtual Private Cloud requires EBS backed instances.

Answer

C. Auto scaling requires using Amazon EBS-backed instances.

Answer

D. Instance-store backed instances can be stopped and restarted.

Question 22

A company has a REST application comprised of an Amazon API Gateway and several
AWS Lambda functions. A developer is responding to an alert that the API Gateway’s
HTTP response error rate has unexpectedly increased. The developer must determine
must which Lambda function is malfunctioning.

Which method would help the developer make this determination while minimizing delays?

Accepted Answer

D. Download the API Gateway and Lambda execution logs from Amazon CloudWatch Events, and perform line-by-line search against them.

Answer

A. Execute an Amazon Athena query against the API Gateway and Lambda execution logs.

Answer

B. Execute an Amazon CloudWatch Logs Insights query against the API Gateway and Lambda execution logs.

Answer

C. Download the API Gateway and Lambda execution logs from Amazon S3, and perform a line-by-line search against them.

Question 23

An application is using a custom library to make HTTP calls directly to AWS service
endpoints. The application is experiencing transient errors that are causing processes to stop when each error is first encountered A request has been made to make the application more resilient by adding error retries and exponential backoff.
How should a developer implement the changes with MINIMAL custom code?

Accepted Answer

D. Use an AWS SDK and set retry-specific configurations.

Answer

A. Add a Retry-After HTTP header to API requests.

Answer

B. Use the AWS CLI to configure the retry settings in a named profile.

Answer

C. Change the custom library to retry on 5xx errors only.

Question 24

A developer is creating as AWS lambda function that generates a new file each time it runs. Each new file must be checked into an AWS CodeCommit repository hosted in the same AWS account.
How should the developer accomplish this?

Accepted Answer

D. Upload the new file to an Amazon S3 bucket. Create an AWS step Function to accept S3 events. In the step Function, add the new file to the repository.

Answer

A. When the Lambda function starts, use the Git CLI to Clone the repository. Check the new file into the cloned repository and push the change.

Answer

B. After the new file is created in Lambda, use cURL to invoke the CodeCommit API. Send the file to the repository.

Answer

C. Use an AWS SDK to instantiate a CodeCommit Client. Invoke the put _ file method to add the file to the repository.

Question 25

Which of the following are good use cases for how Amazon ElastiCache can help an
application? (Select TWO.)

Accepted Answer

C. Improve latency and throughput for read-heavy application workloads.

Accepted Answer

E. Improve performance of compute-intensive applications.

Answer

A. Improve the performance of S3 PUT operations.

Answer

B. Improve the latency of deployments performed by AWS CodeDeploy

Answer

D. Reduce the time required to merge AWS CodeCommit branches.

Question 26

Which of the following items are required to allow an application deployed on an EC2
instance to write data to a DynamoDB table?
Assume that no security Keys are allowed to be stored on the EC2 instance. Choose 2
answers

Accepted Answer

B. Add an IAM Role to a running EC2 instance.

Accepted Answer

E. Create an IAM Role that allows write access to the DynamoDB table.

Answer

A. Create an IAM User that allows write access to the DynamoDB table.

Answer

C. Add an IAM User to a running EC2 Instance.

Answer

D. Launch an EC2 Instance with the IAM Role included in the launch .

Answer

F. Launch an EC2 Instance with the IAM User included in the launch configuration.

Question 27

EC2 instances are launched from Amazon Machine images (AMIs). A given public AMI
can:

Accepted Answer

C. only be used to launch EC2 instances in the same AWS region as the AMI is stored.

Answer

A. be used to launch EC2 Instances in any AWS region.

Answer

B. only be used to launch EC2 instances in the same country as the AMI is stored.

Answer

D. only be used to launch EC2 instances in the same AWS availability zone as the AMI is stored.

Question 28

During non-peak hours, a Developer wants to minimize the execution time of a full Amazon DynamoDB table scan without affecting normal workloads. The workloads average half of the strongly consistent read capacity units during non-peak hours.
How would the Developer optimize this scan?

Accepted Answer

A. Use parallel scans while limiting the rate.

Answer

B. Use sequential scans.

Answer

C. Increase read capacity units during the scan operation.

Answer

D. Change consistency to eventually consistent during the scan operation.

Question 29

An Amazon RDS database instance is used by many applications to look up historical data. The query rate is relatively constant. When the historical data is updated each day, the resulting write traffic slows the read query performance and affects all application users.
What can be done to eliminate the performance impact on application users?

Accepted Answer

B. Create an RDS Read Replica and direct all read traffic to the replica.

Answer

A. Make sure Amazon RDS is Multi-AZ so it can better absorb increased traffic.

Answer

C. Implement Amazon ElastiCache in front of Amazon RDS to buffer the write traffic.

Answer

D. Use Amazon DynamoDB instead of Amazon RDS to buffer the read traffic.

Question 30

While developing an application that runs on Amazon EC2 in an Amazon VPC, a
Developer identifies the need for centralized storage of application-level logs.
Which AWS service can be used to securely store these logs?

Accepted Answer

B. Amazon CloudWatch Logs.

Answer

A. Amazon EC2 VPC Flow Logs.

Answer

C. Amazon CloudSearch.

Answer

D. AWS CloudTrail.

Question 31

A global company has an application running on Amazon EC2 instances that serves image files from Amazon S3. User requests from the browser are causing high traffic, which results in degraded performance.
Which optimization solution should a Developer implement to increase application
performance?

Accepted Answer

B. Create an Amazon ElastiCache cluster to cache and serve frequently accessed items.

Answer

A. Create multiple prefix in the S3 bucket to increase the request rate.

Answer

C. Use Amazon CloudFront to serve the content of images stored in Amazon S3.

Answer

D. Submit a ticket to AWS support to request a rate limit increase for the S3 bucket.

Question 32

A company is developing a new web application in Python A developer must deploy the application using AWS Elastic Beanstalk from the AWS Management Console The
developer creates an Elastic Beanstalk source bundle to upload using the console
Which of the following are requirements when creating the source bundle'' 
(Select TWO.)

Accepted Answer

B. The source bundle must not include a top-level directory.

Accepted Answer

D. The source bundle must be created as a single zip or war file.

Answer

A. The source bundle must include the ebextensions.yaml file.

Answer

C. The source bundle must be compressed with any required dependencies in a top-level parent folder.

Answer

E. The source bundle must be uploaded into Amazon EFS.

Question 33

A company has developed a new serverless application using AWS Lambda functions that
will be deployed using the AWS Serverless Application Model (AWS SAM) CLI.
Which step should the developer complete prior to deploying the application?

Accepted Answer

B. Test the new AWS Lambda function by first tracing it in AWS X-Ray.

Answer

A. Compress the application to a zip file and upload it into AWS Lambda.

Answer

C. Bundle the serverless application using a SAM package.

Answer

D. Create the application environment using the eb create my-env command.

Question 34

A Development team has pushed out 10 applications running on several Amazon EC2
instances. The Operations team is asking for a graphical representation of one key
performance metric for each application. These metrics should be available on one screen for easy monitoring.
Which steps should the Developer take to accomplish this using Amazon CloudWatch?

Accepted Answer

A. Create a custom namespace with a unique metric name for each application.

Answer

B. Create a custom dimension with a unique metric name for each application.

Answer

C. Create a custom event with a unique metric name for each application.

Answer

D. Create a custom alarm with a unique metric name for each application.

Question 35

A Developer wants to find a list of items in a global secondary index from an Amazon
DynamoDB table. Which DynamoDB API call can the Developer use in order to consume the LEAST number of read capacity units?

Accepted Answer

C. Query operation using eventually-consistent reads.

Answer

A. Scan operation using eventually-consistent reads.

Answer

B. Query operation using strongly-consistent reads.

Answer

D. Scan operation using strongly-consistent reads

Question 36

If an application is storing hourly log files from thousands of instances from a high traffic
web site, which naming scheme would give optimal performance on S3?

Accepted Answer

B. instanceID_log-HH-DD-MM-YYYY

Answer

A. Sequential

Answer

C. instanceID_log-YYYY-MM-DD-HH

Answer

D. HH-DD-MM-YYYY-log_instanceID

Answer

E. YYYY-MM-DD-HH-log_instanceID

Question 37

A Developer must trigger an AWS Lambda function based on the item lifecycle activity in
an Amazon DynamoDB table. How can the Developer create the solution?

Accepted Answer

C. Enable a DynamoDB stream, and trigger the Lambda function synchronously from the stream.

Answer

A. Enable a DynamoDB stream that publishes an Amazon SNS message. Trigger the Lambda function synchronously from the SNS message.

Answer

B. Enable a DynamoDB stream that publishes an SNS message. Trigger the Lambda function asynchronously from the SNS message.

Answer

D. Enable a DynamoDB stream, and trigger the Lambda function asynchronously from the stream.

Question 38

An application on AWS is using third-party APIs. The Developer needs to monitor API
errors in the code, and wants to receive notifications if failures go above a set threshold
value. How can the Developer achieve these requirements?

Accepted Answer

D. Publish a custom metric on Amazon CloudWatch and use Amazon SNS for notification.

Answer

A. Publish a custom metric on Amazon CloudWatch and use Amazon SES for notification.

Answer

B. Use an Amazon CloudWatch API-error metric and use Amazon SNS for notification.

Answer

C. Use an Amazon CloudWatch API-error metric and use Amazon SES for notification.

Question 39

To include objects defined by the AWS Serverless Application Model (SAM) in an AWS
CloudFormation template, in addition to Resources, what section MUST be included in the document root?

Accepted Answer

C. Transform.

Answer

A. Conditions.

Answer

B. Globals.

Answer

D. Properties.

Question 40

A company wants to containerize an existing three-tier web application and deploy it to
Amazon ECS Fargate. The application is using session data to keep track of user activities.
Which approach would provide the BEST user experience?

Accepted Answer

C. Enable session stickness in the existing Network Load Balancer and manage the session data in the container

Answer

A. Provision a Redic cluster in Amazon ElasticCache and save the session data in the cluster.

Answer

B. Create a session table in Amazon Redshift and save the session data in the database table.

Answer

D. Use an Amazon S3 bucket as data store and save the session data in the bucket.

Question 41

A developer is creating a new application that will be accessed by users through an API
created using Amazon API Gateway The users need to be authenticated by a third-party Security Assertion Markup Language (SAML) identity provider Once authenticated, users will need access to other AWS services such as Amazon S3 and Amazon DynamoDB  How can these requirements be met?

Accepted Answer

B. Use Amazon Cognito Identity pools with a SAML identity provider as one of the authentication providers.

Answer

A. Use an Amazon Cognito user pool with SAML as the resource server.

Answer

C. Use the AWS IAM service to provide the sign-up and sign-in functionality.

Answer

D. Use Amazon CloudFront signed URLs to connect with the SAML identity provider.

Question 42

According to best practice, how should access keys be managed in AWS? (Choose two.)

Accepted Answer

B. Delete all access keys for the account root user.

Accepted Answer

E. Use Amazon IAM roles instead of access keys where possible.

Answer

A. Use the same access key in all applications for consistency.

Answer

C. Leave unused access keys in the account for tracking purposes.

Answer

D. Embed and encrypt access keys in code for continuous deployment.

Question 43

A web application is using Amazon Kinesis Streams for clickstream data that may not be consumed for up to 12 hours.

How can the Developer implement encryption at rest for data within the Kinesis Streams?

Accepted Answer

D. Enable server-side encryption in Kinesis Streams.

Answer

A. Enable SSL connections to Kinesis.

Answer

B. Use Amazon Kinesis Consumer Library.

Answer

C. Encrypt the data once it is at rest with a Lambda function.

Question 44

An e-commerce web application that shares session state on-premises is being migrated to AWS. The application must be fault tolerant, natively highly scalable, and any service interruption should not affect the user experience.
What is the best option to store the session state?

Accepted Answer

A. Store the session state in Amazon ElastiCache.

Answer

B. Store the session state in Amazon CloudFront.

Answer

C. Store the session state in Amazon S3.

Answer

D. Enable session stickiness using elastic load balancers.

Question 45

Games-R-Us is launching a new game app for mobile devices. Users will log into the game using their existing Facebook account and the game will record player data and scoring information directly to a DynamoDB table.
What is the most secure approach for signing requests to the DynamoDB API?

Accepted Answer

C. Request temporary security credentials using web identity federation to sign the requests.

Answer

A. Create an IAM user with access credentials that are distributed with the mobile app to sign the requests.

Answer

B. Distribute the AWS root account access credentials with the mobile app to sign the requests.

Answer

D. Establish cross account access between the mobile app and the DynamoDB table to sign the requests.

Question 46

When a Simple Queue Service message triggers a task that takes 5 minutes to complete,
which process below will result in successful processing of the message and remove it
from the queue while minimizing the chances of duplicate processing?

Accepted Answer

A. Retrieve the message with an increased visibility timeout, process the message, delete the message from the queue.

Answer

B. Retrieve the message with an increased visibility timeout, delete the message from the queue, process the message.

Answer

C. Retrieve the message with increased DelaySeconds, process the message, delete the message from the queue.

Answer

D. Retrieve the message with increased DelaySeconds, delete the message from the queue, process the message.

Question 47

A developer is designing a distributed application built using a microservices architect
spanning multiple AWS accounts. The company's operations team wants to analyze and debug application issues from a centralized account.
How can the developer meet these requirements?

Accepted Answer

A. Use an Amazon X-Ray agent with role assumption on to publish data into the centralized account.

Answer

Use Amazon X-Ray and create a new IAM user to publish the access keys into the centralized account.

Answer

C. Use VPC Flow Logs to collect application logs across different accounts.

Answer

D. Enable AWS CloudTrail to publish the trails in an Amazon S3 bucket in the centralized account.

Question 48

The development team is working on an API that will be served from Amazon API gateway. The API will be served from three environments: development, test, and production. The API Gateway is configured to use 237 GB of cache in all three stages.
Which is the MOST cost-efficient deployment strategy?

Accepted Answer

D. Enable the cache for development and test environments only when needed.

Answer

A. Create a single API Gateway with all three stages.

Answer

B. Create three API Gateways, one for each stage in a single AWS account.

Answer

C. Create an API Gateway in three separate AWS accounts.

Question 49

A company has an application that logs all information to Amazon S3. Whenever there is a new log file, an AWS Lambda function is invoked to process the log files. The code works, gathering all of the necessary information. However, when checking the Lambda function logs, duplicate entries with the same request ID are found.
What is causing the duplicate entries?

Accepted Answer

B. The Lambda function failed, and the Lambda service retired the invocation with a delay.

Answer

A. The S3 bucket name was specified incorrectly.

Answer

C. There was an S3 outage, which caused duplicate entries of the sale log file.

Answer

D. The application stopped intermittently and then resumed.

Question 50

A developer has written an application that writes data to Amazon DynamoDB- The
DynamoDB table has been configured to use conditional writes During peak usage times, writes are failing due to a CondittonatCheckFailedException error.

How can the developer increase the application's reliability when multiple clients are attempting to write to the same record?

Accepted Answer

C. Implement a caching solution, such as DynamoDB Accelerator or Amazon ElastiCache.

Answer

A. Write the data to an Amazon SNS topic.

Answer

B. Increase the amount of write capacity for the table to anticipate short-term spikes or bursts m write operations.

Answer

D. Implement error retries and exponential backoff with jitter.

Question 51

A serverless application uses an API Gateway and AWS Lambda.
Where should the Lambda function store its session information across function calls?

Accepted Answer

A. In an Amazon DynamoDB table.

Answer

B. In an Amazon SQS queue.

Answer

C. In the local filesystem.

Answer

D. In an SQLite session table using –DSQLITE_ENABLE_SESSION.

Question 52

A developer implemented a static website hosted in amazon s3 that makes web service requests in amazon api gateway and aws lambda. The site is showing an error that reads. ''No 'access control-allow-origin'header' header is present on the requested resource. Origin 'null is therefore not allowed access ''

What should the developer do to resolve this issue?

What should the developer do to resolve this issue?

Accepted Answer

A. Enable cross-origin resource sharing (cors) on the s3 bucket.

Answer

B. Enable cross-origin resource sharing (cors) for the method in api gateway.

Answer

C. Add the access control-request-method header to the request.

Answer

D. Add the access-control inquest headers header to the request.

Question 53

A developer needs to modify an application architecture to meet new functional
requirements. Application data is stored in Amazon DynamoDB and processed for analysis in a rightly batch. The system analysts do not want to wait unit the next day to view the processed data and have asked to have it available in near-real time.
Which application architect pattern would enables the data to be processed as it is
received?

Accepted Answer

A. Evert driven.

Answer

B. Client served driven.

Answer

C. Fan-out driven.

Answer

D. Schedule driven.

Question 54

An application displays a status dashboard. The status is updated by 1 KB messages from an SQS queue. Although the status changes infrequently, the Developer must minimize the time between the message arrival in the queue and the dashboard update.

What technique provides the shortest delay in updating the dashboard?

What technique provides the shortest delay in updating the dashboard?

Accepted Answer

A. Retrieve the messages from the queue using long polling every 20 seconds.

Answer

B. Reduce the size of the messages by compressing them before sending.

Answer

C. Retrieve the messages from the queue using short polling every 10 seconds.

Answer

D. Reduce the size of each message payload by sending it in two parts.

Question 55

A Developer is working on an application that handles 10MB documents that containhighly-sensitive data. The application will use AWS KMS to perform client-side encryption. What steps must be followed?

Accepted Answer

D. Invoke the GenerateDataKey API to retrieve the plaintext version of the data encryption key to encrypt the data.

Answer

A. Invoke the Encrypt API passing the plaintext data that must be encrypted, then reference the customer managed key ARN in the KeyId parameter.

Answer

B. Invoke the GenerateRandom API to get a data encryption key, then use the data encryption key to encrypt the data.

Answer

C. Invoke the GenerateDataKey API to retrieve the encrypted version of the data encryption key to encrypt the data.

Question 56

An application running on multiple Amazon EC2 instances pulls messages ...SQS queue. A requirement for the application is that all messages must be encrypted at rest. Developers are instructed to use methods that allow for centralized .. possible support requirements whenever possible. Which of the following solution supports these requirements?

Accepted Answer

C. Create an SQS queue, and encrypt the queue by using server-side encryption with AWS KMS.

Answer

A. Encrypt individual messages by using client-side encryption with customer managed keys, then write to the SQS queue.

Answer

B. Encrypt individual messages by using SQS Extended Client and the Amazon S3 encryption client.

Answer

D. Create an SQS queue and encrypt the queue by using client-side encryption.

Question 57

A company wants to migrate its web application to AWS and leverage Auto Scaling to
handle pear workloads. The Solutions Architect determined that the best metric for an Auto Scaling event is the number of concurrent users. Based on this information, what should the Developer use to autoscale based on concurrent users?

Accepted Answer

D. A Custom Amazon CloudWatch metric for concurrent users.

Answer

A. An Amazon SNS topic to be triggered when a concurrent user threshold is met.

Answer

B. An Amazon Cloudwatch Networkin metric.

Answer

C. Amazon CloudFront to leverage AWS Edge Locations.

Question 58

A Developer is creating an application that needs to locate the public IPv4 address of the
Amazon EC2 instance on which it runs. How can the application locate this information?

Accepted Answer

A. Get the instance metadata by retrieving http://169.254.169.254/latest/metadata/.

Answer

B. Get the instance user data by retrieving http://169.254.169.254/latest/userdata/.

Answer

C. Get the application to run IFCONFIG to get the public IP address.

Answer

D. Get the application to run IPCONFIG to get the public IP address.

Question 59

A Developer must encrypt a 100-GB object using AWS KMS. What is the BEST approach?

Accepted Answer

D. Make a GenerateDataKeyWithoutPlaintext API call that returns an encrypted copy of a data key. Use an encrypted key to encrypt the data.

Answer

A. Make an Encrypt API call to encrypt the plaintext data as ciphertext using a customer master key (CMK)

Answer

B. Make an Encrypt API call to encrypt the plaintext data as ciphertext using a customer master key (CMK) with imported key material.

Answer

C. Make a GenerateDataKey API call that returns a plaintext key and an encrypted copy of a data key. Use a plaintext key to encrypt the data.

Question 60

A Developer uses AWS CodeDeploy to automate application deployment that connects to an external MySQL database. The Developer wants to securely access the encrypted
secrets, such as API keys and database passwords. Which of the following solutions would involve the LEAST administrative effort?

Accepted Answer

D. Use AWS SSM Parameter Store to store the secrets and to programmatically access them by using the IAM role from EC2 instances.

Answer

A. Save the secrets in Amazon S3 with AWS KMS server-side encryption, and use a signed URL to access them by using the IAM role from Amazon EC2 instances.

Answer

B. Use the instance metadata to store the secrets and to programmatically access the secrets from EC2 instances.

Answer

C. Use the Amazon DynamoDB client-side encryption library to save the secrets in DynamoDB and to programmatically access the secrets from EC2 instances.

Question 61

A Developer is creating a web application that requires authentication, but also needs to support guest access to provide users limited access without having to authenticate. What service can provide support for the application to allow guest access?

Accepted Answer

C. Amazon Cognito with unauthenticated access enabled.

Answer

A. IAM temporary credentials using AWS STS.

Answer

B. Amazon Directory Service.

Answer

D. IAM with SAML integration.

Question 62

A Developer is writing a Linux-based application to run on AWS Elastic Beanstalk.
Application requirements state that the application must maintain full capacity during
updates while minimizing cost.

Which type of Elastic Beanstalk deployment policy should the Developer specify for the environment?

Accepted Answer

D. Rolling with additional batch.

Answer

A. Immutable.

Answer

B. Rolling.

Answer

C. All at Once.

Question 63

An application is expected to process many files. Each file takes four minutes to process
each AWS Lambda invocation. The Lambda function does not return any important data.
What is the fastest way to process all the files?

Accepted Answer

C. Make asynchronous Event Lambda invocations and process the files in parallel.

Answer

A. First split the files to make them smaller, then process with synchronous RequestResponse Lambda invocations.

Answer

B. Make synchronous RequestResponse Lambda invocations and process the files one by one.

Answer

D. First join all the files, then process it all at once with an asynchronous Event Lambda invocation.

Question 64

An application is experiencing performance issues based on increased demand. This
increased demand is on read-only historical records pulled from an Amazon RDS-hosted database with custom views and queries. A developer improve performance without changing the database structure.

Which approach will improve performance and MINIMIZE management overhead?

Accepted Answer

B. Deploy Amazon ElasticCache for Redis and cache the data for the application.

Answer

A. Deploy Amazon DynamoDB, move all the data, and point to DynamoDB.

Answer

C. Deploy Memcached on Amazon EC2 and cache the data for the application.

Answer

D. Deploy Amazon DynamoDB Accelerator (DAX) on Amazon RDS to improve cache performance.

DVA-C01 AWS Certified Developer (03)

Erstelle ein kostenloses Konto, um dieses Quiz zu beenden

Fragen in diesem Quiz (65)

Informationen

Feedback

Wie gefällt dir das neue Design?