DVA-C01 AWS Certified Developer (01)

Question 1

A developer from AnyCompany's AWS account needs access to the Example Corp AWS
account AnyCompany uses an identity provider that is compatible with OpenID Connect.
What is the MOST secure way for Example Corp to allow developer access?

Accepted Answer

B. Create a user in the Example Corp account and provide the access keys

Answer

A. Create a cross-account role and call the AssumeRole API operation

Answer

C. Create a user in the Example Corp account and provide the credentials

Answer

D. Create a cross-account role and call the AssumeRoleWithWebldentity API operation

Question 2

A developer registered an AWS Lambda function as a target for an Application Load Balancer (ALB) using a CLI command. However, the Lambda function is not being invoked
when the client sends requests through the ALB.
Why is the Lambda function not being invoked?

Accepted Answer

C. The permissions to invoke the Lambda function are missing

Answer

A. A Lambda function cannot be registered as a target for an ALB

Answer

B. A Lambda function can be registered with an ALB using AWS Management Console
only

Answer

D. Cross-zone is not enabled on the ALB

Question 3

You have written an application that uses the Elastic Load Balancing service to spread traffic to several web servers. Your users complain that they are sometimes forced to login
again in the middle of using your application, after they have already logged in. This is not behavior you have designed.
What is a possible solution to prevent this happening?

Accepted Answer

D. Use ElastiCache to save session state

Answer

A. Use instance memory to save session state.

Answer

B. Use instance storage to save session state.

Answer

C. Use EBS to save session state

Answer

E. Use Glacier to save session slate

Question 4

A Developer has published an update to an application that is served to a global user base using Amazon CloudFront. After deploying the application, users are not able to see the updated changes.
How can the Developer resolve this issue?

Accepted Answer

C. Invalidate all the application objects from the edge caches.

Answer

A. Remove the origin from the CloudFront configuration and add it again.

Answer

B. Disable forwarding of query strings and request headers from the CloudFront distribution configuration.

Answer

D. Disable the CloudFront distribution and enable it again to update all the edge locations

Question 5

An application is running on an EC2 instance. The Developer wants to store an application metric in Amazon CloudWatch.
What is the best practice for implementing this requirement?

Accepted Answer

D. Use the CloudWatch PutMetricData API call to submit a custom metric to CloudWatch.
Launch the EC2 instance with the required IAM role to enable the API call.

Answer

A. Use the PUT Object API call to send data to an S3 bucket. Use an event notification to
invoke a Lambda function to publish data to CloudWatch.

Answer

B. Publish the metric data to an Amazon Kinesis Stream using a PutRecord API call.
Subscribe a Lambda function that publishes data to CloudWatch

Answer

C. Use the CloudWatch PutMetricData API call to submit a custom metric to CloudWatch.
Provide the required credentials to enable the API call.

Question 6

A developer has written a serverless application and wants to deploy it to AWS Lambda to leverage the function's multi-threaded execution to improve performance. Which action
should the developer take to achieve these requirements?

Accepted Answer

C. Increase the memory allocation of the Lambda function

Answer

A. increase the Lambda function execution timeout

Answer

B. Use unreserved account concurrency.

Answer

D. Set the reserved concurrency of the Lambda function to a higher number

Question 7

A Developer executed a AWS CLI command and received the error shown below:

What action should the Developer perform to make this error human-readable?

Accepted Answer

B. Use the AWS STS decode-authorization-message API to decode the message

Answer

A. Make a call to AWS KMS to decode the message

Answer

C. Use an open source decoding library to decode the message.

Answer

D. Use the AWS IAM decode-authorization-message API to decode this message.

Question 8

An application running on an Amazon Linux EC2 instance needs to manage the AWS infrastructure.

How can the EC2 instance be configured to make AWS API calls securely?

Accepted Answer

C. Specify a role for the EC2 instance with the necessary privileges.

Answer

A. Sign the AWS CLI command using the signature version 4 process.

Answer

B. Run the aws configure AWS CLI command and specify the access key id and secret access key.

Answer

D. Pass the access key id and secret access key as parameters for each AWS CLI command.

Question 9

A developer is implementing authentication and authorization for an application. The developer needs to ensure that the user credentials are never exposed. Which approach should the developer take to meet this requirement?

Accepted Answer

A. Store the user credentials In Amazon DynamoDB Build an AWS Lambda function to
validate the credentials and authorize users.

Answer

B. Deploy a custom authentication and authorization API on an Amazon EC2 instance.
Store the user credentials in Amazon S3 and encrypt the credentials using Amazon S3
server-side encryption.

Answer

C. Use Amazon Cognito to configure a user pool, and use the Cognito API to authenticate and authorize the user.

Answer

D. Store the user credentials In Amazon RDS Enable the encryption option for the Amazon
RDS D8 instances Build an API using AWS Lambda to validate the credentials and
authorize users.

Question 10

A Developer is creating a Lambda function that will generate and export a file. The function requires 100 MB of temporary storage for temporary files while executing. These files will
not be needed after the function is complete.

How can the Developer MOST efficiently handle the temporary files?

Accepted Answer

C. Store the files in the /tmp directory and delete the files at the end of the Lambda
function.

Answer

A. Store the files in EBS and delete the files at the end of the Lambda function.

Answer

B. Copy the files to EFS and delete the files at the end of the Lambda function.

Answer

D. Copy the files to an S3 bucket with a lifecycle policy to delete the files

Question 11

A developer is building an application on Amazon EC2 The developer encountered an "Access Denied" error on some of the API calls to AWS services while testing. The
developer needs to modify permissions that have been already given to the instance How can these requirements be met with minimal changes and minimum downtime?

Accepted Answer

D. Update the attached IAM role adding the needed permissions

Answer

A. Make a new 1AM role with the needed permissions Stop the instance. Attach the new
1AM role to the instance Start the instance.

Answer

B. Delete the existing 1AM role Attach a new 1AM role with the needed permissions.

Answer

C. Stop the instance Update the attached 1AM role adding the needed permissions. Start
the instance.

Question 12

Company C has recently launched an online commerce site for bicycles on AWS. They
have a "Product" DynamoDB table that stores details for each bicycle, such as, manufacturer, color, price, quantity and size to display in the online store. Due to customer demand, they want to include an image for each bicycle along with the existing details. Which approach below provides the least impact to provisioned throughput on the "Product" table?

Accepted Answer

D. Store the images in Amazon S3 and add an S3 URL pointer to the "Product" table item
for each image.

Answer

A. Serialize the image and store it in multiple DynamoDB tables.

Answer

B. Create an "Images" DynamoDB table to store the Image with a foreign key constraint to
the "Product” table.

Answer

C. Add an image data type to the "Product" table to store the images in binary format.

Question 13

Which of the following platforms are supported by Elastic Beanstalk? Choose 2 answers

Accepted Answer

A. Apache Tomcat

Accepted Answer

B. .NET

Answer

C. IBM Websphere

Answer

D. Oracle JBoss

Answer

E. Jetty

Question 14

An application is being developed to audit several AWS accounts. The application will run in Account A and must access AWS services in Accounts B and C.

What is the MOST secure way to allow the application to call AWS services in each audited account?

Accepted Answer

A. Configure cross-account roles in each audited account. Write code in Account A that assumes those roles.

Answer

B. Use S3 cross-region replication to communicate among accounts, with Amazon S3
event notifications to trigger Lambda functions.

Answer

C. Deploy an application in each audited account with its own role. Have Account A
authenticate with the application.

Answer

D. Create an IAM user with an access key in each audited account. Write code in Account
A that uses those access keys.

Question 15

Company D is running their corporate website on Amazon S3 accessed from http//www.companyd.com. Their marketing team has published new web fonts to a separate S3 bucket accessed by the S3 endpoint https://s3-us-west1.amazonaws.com/cdfonts. While testing the new web fonts, Company D recognized the web fonts are being blocked by the browser. 
What should Company D do to prevent the web fonts from being blocked by the browser?

Accepted Answer

D. Configure the cdfonts bucket to allow cross-origin requests by creating a CORS
configuration

Answer

A. Enable versioning on the cdfonts bucket for each web font

Answer

B. Create a policy on the cdfonts bucket to enable access to everyone

Answer

C. Add the Content-MD5 header to the request for webfonts in the cdfonts bucket from the
website

Question 16

A Developer is going to deploy an AWS Lambda function that requires significant CPU utilization. Which approach will MINIMIZE the average runtime of the function?

Accepted Answer

D. Deploy the function with its memory allocation set to the maximum amount.

Answer

A. Deploy the function into multiple AWS Regions.

Answer

B. Deploy the function into multiple Availability .

Answer

C. Deploy the function using Lambda layers.

Question 17

What is required to trace Lambda-based applications with AWS X-Ray?

Accepted Answer

D. Update and add AWS X-ray daemon code to relevant parts of the Lambda function to
set up the trace

Answer

A. Send logs from the Lambda application to an S3 bucket trigger a Lambda function from
that bucket to send data to AWS X-Ray

Answer

B. Trigger a Lambda function from the application logs in Amazon CloudWatch to submit tracing data to AWS X-Ray

Answer

C. Use an IAM execution role to give the Lambda function permissions and enabled
tracing

Question 18

Your application is trying to upload a 6 GB file to Simple Storage Service and receive a “Your proposed upload exceeds the maximum allowed object size." error message. What is a possible solution for this?

Accepted Answer

B. Use the multi-part upload API for this object.

Answer

A. None, Simple Storage Service objects are limited to 5 GB.

Answer

C. Use the large object upload API for this object.

Answer

D. Contact support to increase your object size limit.

Answer

E. Upload to a different region.

Question 19

Which of the following are correct statements with policy evaluation logic in AWS Identity and Access Management? Choose 2 answers

Accepted Answer

A. By default, all requests are denied.

Accepted Answer

C. An explicit allow overrides default deny.

Answer

B. An explicit allow overrides an explicit deny

Answer

D. An explicit deny does not override an explicit allow

Answer

E. By default, all request are allowed

Question 20

How can software determine the public and private IP addresses of the Amazon EC2 instance that it is running on?

Accepted Answer

D. Query the local instance metadata

Answer

A. Query the appropriate Amazon CloudWatch metric

Answer

B. Use ipconfig or ifconfig command.

Answer

C. Query the local instance userdata.

Question 21

A Developer is migrating an on-premises application to AWS. The application currently takes user uploads and saves them to a local directory on the server. All uploads must be
saved and made immediately available to all instances in an Auto scaling group. Which approach will meet these requirements?

Accepted Answer

B. Use Amazon S3 and rearchitect the application so all uploads are placed in S3

Answer

A. Use Amazon EBS and configure the application AMI to use a snapshot of the same EBS instance on boot

Answer

C. Use instance storage and share it between instances launched from the same Amazon
machine image (AMI).

Answer

D. Use Amazon EBS and file synchronization software to achieve eventual consistency
among the auto scaling group.

Question 22

A company developed a set of APIs that are being served through the Amazon API
Gateway. The API calls need to be authenticated based on OpenID identity providers such as Amazon or Facebook. The APIs should allow access based on a custom authorizatio model. Which is the simplest and MOST secure design to use to build an authentication and authorization model for the APIs?

Accepted Answer

A. Use Amazon Cognito user pools and a custom authorizer to authenticate and authorize users based on JSON Web Tokens.

Answer

B. Build a OpenID token broker with Amazon and Facebook. Users will authenticate with
these identify providers and pass the JSON Web Token to the API to authenticate each API call.

Answer

C. Store user credentials in Amazon DynamoDB and have the application retrieve temporary credentials from AWS STS. Make API calls by passing user credentials to the APIs for authentication and authorization.

Answer

D. Use Amazon RDS to store user credentials and pass them to the APIs for authentications and authorization.

Question 23

You are inserting 1000 new items every second in a DynamoDB table. Once an hour these items are analyzed and then are no longer needed. You need to minimize provisioned throughput, storage, and API calls.

Given these requirements, what is the most efficient way to manage these Items after the analysis?

Given these requirements, what is the most efficient way to manage these Items after the analysis?

Accepted Answer

C. Delete the table and create a new table per hour

Answer

A. Retain the items in a single table

Answer

B. Delete items individually over a 24 hour period

Answer

D. Create a new table per hour

Question 24

An application is running on a cluster of Amazon EC2 instance. While trying to read objects stored within a single Amazon S3 bucket that are encrypted with server-side encryption with AWS KMS managed keys (SSE-KMS), the application receives the following error:

Service : AWSKMS: Status Code: 400: Code : ThrottlingException
Which combination of steps should be taken to prevent this failure? (Select TWO).

Service : AWSKMS: Status Code: 400: Code : ThrottlingException
Which combination of steps should be taken to prevent this failure? (Select TWO).

Accepted Answer

A. Contact AWS Support to request an AWS KMS rate limit increase.

Accepted Answer

D. Import a customer master key (CMK) with a larger key size.

Answer

B. Perform error retries with exponential backoff in the application code.

Answer

C. Contact AWS Support to request a S3 rate limit increase.

Answer

E. Use more than one customer master key (CMK) to encrypt S3 data

Question 25

A Developer has a stateful web server on-premises that is being migrated to AWS. The
Developer must have greater elasticity in the new design.
How should the Developer re-factor the application to make it more elastic? (Choose two.)

Accepted Answer

D. Store session state data in an Amazon DynamoDB table

Accepted Answer

E. Use an ELB with an Auto Scaling group

Answer

A. Use pessimistic concurrency on Amazon DynamoDB.

Answer

B. Use Amazon CloudFront with an Auto Scaling group.

Answer

C. Use Amazon CloudFront with an AWS Web Application Firewall

Question 26

An application deployed on AWS Elastic Beanstalk experiences increased error rates
during deployments of new application versions, resulting in service degradation for users. The Development team believes that this is because of the reduction in capacity during the deployment steps. The team would like to change the deployment policy configuration of the environment to an option that maintains full capacity during deployment while using the existing instances.
Which deployment policy will meet these requirements while using the existing instances?

Accepted Answer

D. Immutable

Answer

A. All at once

Answer

B. Rolling

Answer

C. Rolling with additional batch

Question 27

A developer is using Amazon DynamoDB to store application data . The developer wants to further improve application performance by reducing response limes for read and write operations.
Which DynamoDB feature should be used to meet these requirement?

Accepted Answer

B. Amazon DynamoDB Accelerator

Answer

A. Amazon DynamoDB Streams

Answer

C. Amazon DynamoDB global tables

Answer

D. Amazon DynamoDB transactions

Question 28

A developer is creating a serverless web application and maintains different branches of code The developer wants to avoid updating the Amazon API Gateway target endpoint each time a new code push is performed What solution would allow me developer to perform a code push efficiently, without the need to update the API Gateway?

Accepted Answer

B. Create different stages in API Gateway, then associate API Gateway with aws Lambda

Answer

A. Associate different AWS Lambda functions to an API Gateway target endpoint

Answer

C. Create aliases and versions In AWS Lambda.

Answer

D. Tag the AWS Lambda functions with different names

Question 29

Amazon S3 has the following structure: S3://BUCKET/FOLDERNAME/FILENAME.zip
Which S3 best practice would optimize performance with thousands of PUT request each
second to a single bucket?

Accepted Answer

D. Prefix folder names with random hex hashes; for example, s3://BUCKET/23a6- FOLDERNAME/ FILENAME.zip

Answer

A. Prefix folder names with user id; for example, s3://BUCKET/2013-
FOLDERNAME/FILENAME.zip

Answer

B. Prefix file names with timestamps; for example, s3://BUCKET/FOLDERNAME/2013-26-
05-15-00-00- FILENAME.zip

Answer

C. Prefix file names with random hex hashes; for example,
s3://BUCKET/FOLDERNAME/23a6- FILENAME.zip

Question 30

A software engineer developed an AWS Lambda function in Node.js to do some CPUintensive data processing. With the default settings, the Lambda function takes about 5 minutes to complete.
Which approach should a developer take to increase the speed of completion''

Accepted Answer

D. Increase the available memory to the function.

Answer

A. Instead of using Node js. rewrite the Lambda function using Python

Answer

B. Instead of packaging the libraries in the ZIP file with the function move them to a
Lambda layer and use the layer with the function.

Answer

C. Allocate the maximum available CPU units lo the function

Question 31

A Developer created a dashboard for an application using Amazon API Gateway, Amazon S3, AWS Lambda, and Amazon RDS. The Developer needs an authentication mechanism allowing a user to sign in and view the dashboard. It must be accessible from mobile applications, desktops, and tablets, and must remember user preferences across platforms.
Which AWS service should the Developer use to support this authentication scenario?

Accepted Answer

B. Amazon Cognito

Answer

A. AWS KMS

Answer

C. AWS Directory Service

Answer

D. Amazon IAM

Question 32

A developer is testing an application that invokes an AWS Lambda function
asynchronously During the testing phase, the Lambda function fails to process after two retries.
How can the developer troubleshoot the failure?

Accepted Answer

A. Configure AWS CloudTrail logging to investigate the invocation failures

Answer

B. Configure Dead Letter Queues by sending events to Amazon SQS for investigation.

Answer

C. Configure Amazon Simple Workflow Service to process any direct unprocessed events

Answer

D. Configure AWS Config to process any direct unprocessed events

Question 33

A Developer has written a serverless application using multiple AWS services. The
business logic is written as a Lambda function which has dependencies on third-party
libraries. The Lambda function endpoints will be exposed using Amazon API Gateway. The
Lambda function will write the information to Amazon DynamoDB.
The Developer is ready to deploy the application but must have the ability to rollback. Hoy
can this deployment be automated, based on these requirements?

Accepted Answer

C. Use syntax conforming to the Serverless Application Model in the AWS CloudFormation template to define the Lambda function resource.

Answer

A. Deploy using Amazon Lambda API operations to create the Lambda function by
providing a deployment package

Answer

B. Use an AWS CloudFormation template and use CloudFormation syntax to define the
Lambda function resource in the template

Answer

D. Create a bash script which uses AWS CLI to package and deploy the application.

Question 34

A developer Is working with a Docker application that needs to be quickly deployed using
AWS without changing the infrastructure or configuring health checks. The application
should be configured so that changes and updates can be made automatically without any
downtime

Accepted Answer

A. Use AWS Elastic Beanstalk for application deployment and select an all-at-once update
policy

Answer

B. Use AWS Elastic Beanstalk for application deployment and select a rolling deployment
policy

Answer

C. Deploy the Docker container on an Amazon EC2 instance in an Auto Scaling group and
configure a health check on the EC2 instance

Answer

D. Deploy the Docker container using AWS Lambda and enable Amazon CloudWatch
monitoring

Question 35

An application takes 40 seconds to process instructions received in an Amazon SQS
message. Assuming the SQS queue is configured with the default VisibilityTimeout value, what is the BEST way, upon receiving a message, to ensure that no other instances can retrieve a message that has already been processed or is currently being processed?

Accepted Answer

A. Use the ChangeMessageVisibility API to increase the VisibilityTimeout, then use the DeleteMessage API to delete the message.

Answer

B. Use the DeleteMessage API call to delete the message from the queue, then call DeleteQueue API to remove the queue.

Answer

C. Use the ChangeMessageVisibility API to decrease the timeout value, then use the DeleteMessage API to delete the message.

Answer

D. Use the DeleteMessageVisibility API to cancel the VisibilityTimeout, then use the DeleteMessage API to delete the message.

Question 36

A developer has designed a customer, facing application that is running on an Amazon
EC2 instance. The application logs every request made to it. The application usually runs seamlessly, but a spike in traffic generates several logs that cause the disk to fill up and eventually run out of memory Company policy requires old to be centralized for analysis.

Which long-term solution should the developer employ to prevent the issue from reoccurring?

Accepted Answer

D. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to pull the logs from the instance. Configure the rule to delete the logs they have been pulled.

Answer

A. Install the Amazon CloudWatch agent on the instance to send the logs to CloudWatch. Delete the logs from the instance once they are sent to CloudWatch.

Answer

B. Enable AWS Auto Scaling on Amazon Elastic Block Store (Amazon EBS) to automatically add volumes to the instance when it reaches a specified threshold.

Answer

C. Enable AWS Auto Scaling on Amazon Elastic Block Store (Amazon EBS) a outomatically add volume to the instance when it reaches a specified threshold.

Question 37

A Developer is publishing critical log data to a log group in Amazon CloudWatch Lops,
which was created 2 months ago. The Developer must encrypt the log data using an AWS KMS customer master key (CMK) so future data can be encrypted to comply with me company's security policy How can the Developer meet this requirement?

Accepted Answer

C. Use the KMs console and associate the CMK with the log group.

Answer

A. Use the Cloud Watch Logs console and enable the encrypt feature on the log group.

Answer

B. Use the AWS CLI create-log-group command and specify the key Amazon Resource Name (ARN).

Answer

D. Use the AWS CLI associate-Kms-key command and specify the key Amazon Resource Name (ARN).

Question 38

A Developer accesses AWS CodeCommit over SSH. The SSH keys configured to access
AWS CodeCommit are tied to a user with the following permissions:

The Developer needs to create/delete branches. Which specific IAM permissions need to be added, based on the principle of least privilege?

Accepted Answer

A. “codecommit:CreateBranch”“codecommit:DeleteBranch”

Answer

B. “codecommit:Put*”

Answer

C. “codecommit:Update*”

Answer

D. “codecommit:*”

Question 39

A company needs to encrypt data at rest, but it wants to leverage an AWS managed
service using its own master key.
Which of the following AWS service can be used to meet these requirements?

Accepted Answer

B. SSE with AWS KMS.

Answer

A. SSE with Amazon S3.

Answer

C. Client-side encryption.

Answer

D. AWS IAM roles and policies.

Question 40

An application contains two components one component to handle HI IP requests, and another component to handle background processing tasks Bach component must scale independently The developer wants to deploy this application using AWS Elastic Beanstalk.

How should this application be deployed, based on these requirements?

How should this application be deployed, based on these requirements?

Accepted Answer

A. Deploy the application in a single Elastic Beanstalk environment.

Answer

B. Deploy each component in a separate Elastic Beanstalk environment.

Answer

C. Use multiple Elastic Beanstalk environments for the HTTP component but one environment for the background task component.

Answer

D. Use multiple Elastic Beanstalk environments for the background task component but one environment tor the HTTP component.

Question 41

A Developer has been asked to create an AWS Lambda function that is triggered any time updates are made to items in an Amazon DynamoDB table. The function has been created, and appropriate permissions have been added to the Lambda execution role. Amazon DynamoDB streams have been enabled for the table, but the function is still not being triggered.

Which option would enable DynamoDB table updates to trigger the Lambda function?

Which option would enable DynamoDB table updates to trigger the Lambda function?

Accepted Answer

B. Configure event source mapping for the Lambda function.

Answer

A. Change the StreamViewType parameter value to NEW_AND_OLD_IMAGES for the DynamoDB table.

Answer

C. Map an Amazon SNS topic to the DynamoDB streams.

Answer

D. increase the maximum execution time (timeout) setting of the Lambda function.

Question 42

In DynamoDB, what type of HTTP response codes indicate that a problem was found with
the client request sent to the service?

Accepted Answer

D. 4xx HTTP response code.

Answer

A. 5xx HTTP response code.

Answer

B. 200 HTTP response code.

Answer

C. 306 HTTP response code.

Question 43

A Developer wants access to make the log data of an application running on an EC2
instance available to systems administrators.
Which of the following enables monitoring of this metric in Amazon CloudWatch?

Accepted Answer

D. Install the Amazon CloudWatch Logs agent on the EC2 instance that the application is running on.

Answer

A. Retrieve the log data from CloudWatch using the GetMetricData API call.

Answer

B. Retrieve the log data from AWS CloudTrail using the LookupEvents API call.

Answer

C. Launch a new EC2 instance, configure Amazon CloudWatch Events, and then install the application.

Question 44

Which DynamoDB limits can be raised by contacting AWS support?

Choose 2 answers.

Accepted Answer

C. The number of tables per account.

Accepted Answer

E. The number of provisioned throughput units per account.

Answer

A. The number of hash keys per account.

Answer

B. The maximum storage used per account.

Answer

D. The number of local secondary indexes per account.

Question 45

A team of Developers must migrate an application running inside an AWS Elastic
Beanstalk environment from a Classic Load Balancer to an Application Load Balancer.

Which steps should be taken to accomplish the task using the AWS Management
Console?

Accepted Answer

B.
1. Create a new environment with the same configurations except for the load balancer
type.
2. Deploy the same application version as used in the original environment.
3. Run the swap-environment-cnames action.

Answer

A.
1. Update the application code in the existing deployment.
2. Select a new load balancer type before running the deployment.
3. Deploy the new version of the application code to the environment.

Answer

C.
1. Clone the existing environment, changing the associated load balancer type.
2. Deploy the same application version as used in the original environment.
3. Run the swap-environment-cnames action.

Answer

D.
1. Edit the environment definitions in the existing deployment.
2. Change the associated load balancer type according to the requirements.
3. Rebuild the environment with the new load balancer type.

Question 46

A developer needs to create an application that supports Security Assertion Markup
Language (SAML) and Facebook authentication It must also allow access to AWS
services, such as Amazon DynamoDB.

Which AWS service or feature will meet these requirements with the LEAST amount of
additional coding?

Accepted Answer

B. Amazon Cognito identity pools.

Answer

A. AWSAppSync.

Answer

C. Amazon Cognito user pools.

Answer

D. Amazon Lambda@Edge.

Question 47

A company has a web application that uses an Amazon Cognito user pool for
authentication. The company wants to create a login page with the company logo. What
should a developer do to meet these requirements?

Accepted Answer

A. Create a hosted user interface in Amazon Cognito and customize it with the company logo.

Answer

B. Create a login page with the company logo and upload it to Amazon Cognito.

Answer

C. Create a login page in Amazon API Gateway with the logo and save the link in Amazon Cognito.

Answer

D. Upload the logo to the Amazon Cognito app settings and point to the logo on a custom login page.

Question 48

A nightly batch job loads 1 million new records into a DynamoDB table. The records are
only needed for one hour, and the table needs to be empty by the next night’s batch job.
Which is the MOST efficient and cost-effective method to provide an empty table?

Accepted Answer

D. Create and then delete the table after the task has completed.
Answer:

Answer

A. Use DeleteItem using a ConditionExpression.

Answer

B. Use BatchWriteItem to empty all of the rows.

Answer

C. With a recursive function that scans and calls out DeleteItem.

Question 49

A company is using Amazon RDS MySQL instances for its application database tier and
Apache Tomcat servers for its web tier. Most of the database queries from web
applications are repeated read requests.

Use of which AWS service would increase in performance by adding in-memory store for repeated read queries?

Accepted Answer

C. Amazon ElastiCache.

Answer

A. Amazon RDS Multi-AZ.

Answer

B. Amazon SQS.

Answer

D. Amazon RDS read replica.

Question 50

A company needs to distribute firmware updates to its customers around the world.
Which service will allow easy and secure control of the access to the downloads at the
lowest cost?

Accepted Answer

A. Use Amazon CloudFront with signed URLs for Amazon S3.

Answer

B. Create a dedicated Amazon CloudFront Distribution for each customer.

Answer

C. Use Amazon CloudFront with AWS Lambda@Edge.

Answer

D. Use Amazon API Gateway and AWS Lambda to control access to an S3 bucket.

Question 51

A developer is building a WebSocket API using Amazon API Gateway. The payload sent to this API is JSON that includes an action key This key can have three different values
create, update, and remove The developer must integrate with different routes based on the value of the action key of the incoming JSON payload.
How can the developer accomplish this task with the LEAST amount of configuration?

Accepted Answer

D. Set the value of the route selection expression to $request.body action.

Answer

A. Deploy the WebSocket API to three stages for the respective routes create, update, and remove.

Answer

B. Create a new route key and set the name as action.

Answer

C. Set the value of the route selection expression to action.

Question 52

A Developer is receiving HTTP 400: ThrottlingException errors intermittently when calling the Amazon CloudWatch API. When a call fails, no data is retrieved.
What best practice should first be applied to address this issue?

Accepted Answer

D. Retry the call with exponential backoff.

Answer

A. Contact AWS Support for a limit increase.

Answer

B. Use the AWS CLI to get the metrics.

Answer

C. Analyze the applications and remove the API call.

Question 53

A development team wants to immediately build and deploy an application whenever there is a change to the source code. Which approaches could be used to trigger the
deployment? (Select TWO.)

Accepted Answer

B. Store the source code in an encrypted Amazon EBS volume Configure AWS CodePipeline to start whenever a file in the volume changes.

Accepted Answer

C. Store the source code in an AWS CodeCommit repository Configure AWS CodePipeline to start whenever a change is committed to the repository.

Answer

A. Store the source code in an Amazon S3 bucket Configure AWS CodePipeline to start whenever a file in the bucket changes.

Answer

D. Store the source code in an Amazon S3 bucket Configure AWS CodePipeline to start every 15 minutes.

Answer

E. Store the source code in an Amazon EC2 instance's ephemeral storage. Configure the instance to start AWS CodePipeline whenever there are changes to the source code.

Question 54

A Developer wants to encrypt new objects that are being uploaded to an Amazon S3
bucket by an application. There must be an audit trail of who has used the key during this process. There should be no change to the performance of the application.
Which type of encryption meets these requirements?

Accepted Answer

B. Server-side encryption with AWS KMS-managed keys.

Answer

A. Server-side encryption using S3-managed keys.

Answer

C. Client-side encryption with a client-side symmetric master key.

Answer

D. Client-side encryption with AWS KMS-managed keys.

Question 55

A Developer is trying to make API calls using SDK. The IAM user credentials used by the application require multi-factor authentication for all API calls.

Which method the Developer use to access the multi-factor authentication protected API?

Accepted Answer

B. GetCallerIdentity.

Answer

A. GetFederationToken.

Answer

C. GetSessionToken.

Answer

D. DecodeAutherizationMessage.

Question 56

A company is adding stored value for gift card) capability to its highly popular casual
gaming website. Users need to be able to trade this value for other users' items on the
platform. This would require both users' records be updated as a single transaction, or both users' records to be completely rolled back.

Which AWS database options can provide the transactional capability required for this new feature? (Select TWO ).

Accepted Answer

C. Amazon Aurora MySQL with operations made within a transaction block.

Accepted Answer

D. Amazon DynamoDB with reads and writes made using Transact" operations.

Answer

A. Amazon DynamoDB with operations made with the ConsistentRead parameter set to true.

Answer

B. Amazon ElastiCache for Memcached with operations made within a transaction block.

Answer

E. Amazon Redshift with operations made within a transaction block.

Question 57

A Developer has created a Lambda function and is finding that the function is taking longer to complete than expected. After some debugging, the Developer has discovered that increasing compute capacity would improve performance.

How can the Developer increase the Lambda compute resources?

How can the Developer increase the Lambda compute resources?

Accepted Answer

D. Increase the allocated memory for the Lambda function.

Answer

A. Run on a larger instance size with more compute capacity.

Answer

B. Increase the maximum execution time.

Answer

C. Specify a larger compute capacity when calling the Lambda function.

Question 58

A company recently experienced some unexpected downtime. After investigating, the
company determines that a developer mistakenly terminated several production Amazon EC2 instances. What should the company do to BEST protect against accidental terminations in the future.

Accepted Answer

A. Enable EC2 termination protection on all production instances unless approval has been given through AWS Resource Access Manager.

Answer

B. Modify the developer group’s permissions policy to deny them access to delete production instances unless approved has been given through AWS Resource Access Manager.

Answer

C. Modify the developer group’s permission policy to require multi-factor authentication (MFA) only production instances are being delete Enable EC2 termination protection on production instances.

Answer

D. Enable EC2 termination protection on production instances. Deny the developer group’s permissions policy access to terminate instance. Create a new role that developer can assume when termination is necessary.

Question 59

A company uses Amazon DynamoDB for managing and tracking orders. The DynamoDB table is partitioned based on the order date. The company receives a huge increase in orders during a sales event, causing DynamoDB writes to throttle, and the consumed throughput is far below the provisioned throughput.
According to AWS best practices, how can this issue be resolved with MINIMAL costs?

Accepted Answer

C. Add a random number suffix to the partition key values.

Answer

A. Create a new DynamoDB table for every order date.

Answer

B. Increase the read and write capacity units of the DynamoDB table.

Answer

D. Add a global secondary index to the DynamoDB table.

Question 60

The Developer for a retail company must integrate a fraud detection solution into the order processing solution. The fraud detection solution takes between ten and thirty minutes to verify an order. At peak, the web site can receive one hundred orders per minute. What is the most scalable method to add the fraud detection solution to the order processing pipeline?

Accepted Answer

B. Add all new orders to an SQS queue. Configure an Auto Scaling group that uses the queue depth metric as its unit of scale to launch a dynamically-sized fleet of EC2 instances
spanning multiple AZs with the fraud detection solution installed on them to pull orders from this queue. Update the order with a pass or fails status.

Answer

A. Add all new orders to an Amazon SQS queue. Configure a fleet of 10 EC2 instances spanning multiple AZs with the fraud detection solution installed on them to pull orders from this queue. Update the order with a pass or fails status.

Answer

C. Add all new orders to an Amazon Kinesis Stream. Subscribe a Lambda function to automatically read batches of records from the Kinesis Stream. The Lambda function includes the fraud detection software and will update the order with a pass or fail status.

Answer

D. Write all new orders to Amazon DynamoDB. Configure DynamoDB Streams to include all new orders. Subscribe a Lambda function to automatically read batches of records from
the Kinesis Stream. The Lambda function includes the fraud detection software and will update the order with a pass or fail status.

Question 61

A developer is working on an AWS Lambda function that accesses Amazon DynamoDB
The Lambda function must retrieve an item and update some of its attributes. or create the item if it does not exist The Lambda function has access to the primary key.

Which IAM permissions should the developer request for the Lambda function to achieve this functionality?

Accepted Answer

C. dynamcdb:GetRecords
dynamcdb:Putltem
dynamodb:updateTable

Answer

A. dynaracdb:DeleteItem
dynamodb:GetItem
dynamcdb:Putltem

Answer

B. dynamodb:Updateltem
dynamcdb:Getltem
dynamodb:DescribeTable

Answer

D. dynamodb:Updateltem
dynamodb:Getltem
dynamodb:Putltem

Question 62

A Developer must repeatedly and consistently deploy a serverless RESTful API on AWS.
Which techniques will work? (Choose two.)

Accepted Answer

C. Deploy a SAM template with an inline Swagger definition.

Accepted Answer

D. Define a Swagger file. Deploy a SAM template that references the Swagger file.

Answer

A. Define a Swagger file. Use AWS Elastic Beanstalk to deploy the Swagger file.

Answer

B. Define a Swagger file. Use AWS CodeDeploy to deploy the Swagger file.

Answer

E. Define an inline Swagger definition in a Lambda function. Invoke the Lambda function.

Question 63

An application writes items to an Amazon DynamoDB table. As the application scales to thousands of instances, calls to the DynamoDB API generate occasional
ThrottlingException errors. The application is coded in a language incompatible with the AWS SDK.

How should the error be handled?

Accepted Answer

A. Add exponential backoff to the application logic.

Answer

B. Use Amazon SQS as an API message bus.

Answer

C. Pass API calls through Amazon API Gateway.

Answer

D. Send the items to DynamoDB through Amazon Kinesis Data Firehose.

Question 64

A developer is building an application using an Amazon API Gateway REST API backed by an AWS Lambda function that interacts with an Amazon DynamoDB table During testing, the developer observes high latency when making requests to the API
How can the developer evaluate the end-to-end latency and identify performance
bottlenecks?

Accepted Answer

B. Enable and configure AWS X-Ray tracing on API Gateway and the Lambda function Use X-Ray to trace and analyze user requests.

Answer

A. Enable AWS CloudTrail logging and use the logs to map each latency and bottleneck.

Answer

C. Enable Amazon CloudWatch Logs for the Lambda function Enable execution logs for API Gateway to view and analyze user request logs.

Answer

D. Enable VPC Flow Logs to capture and analyze network traffic within the VPC.

DVA-C01 AWS Certified Developer (01)

Create a free account to finish this quiz

Questions in this quiz (65)

Information

Feedback

What do you think of the new look?