DVA-C01 AWS Certified Developer (06)

Question 1

A company wants to make sure that only one user from its Admin group has the permanent right to delete an Amazon EC2 resource There should be no changes in the existing policy under the Admin group.

What should a developer use to meet these requirements?

Accepted Answer

B. Inline policy

Answer

A. AWS managed policy

Answer

C. IAM trust relationship

Answer

D. AWS Security Token Service (AWS STS)

Question 2

An on-premises application is implemented using a Linux, Apache, MySQL and PHP
(LAMP) stack. The Developer wants to run this application in AWS.

Which of the following sets of AWS services can be used to run this stack?

Accepted Answer

C. Amazon EC2, Amazon Aurora

Answer

A. Amazon API Gateway, Amazon S3

Answer

B. AWS Lambda, Amazon DynamoDB

Answer

D. Amazon Cognito, Amazon RDS

Answer

E. Amazon ECS, Amazon EBS

Question 3

A Developer is writing transactions into a DynamoDB table called “SystemUpdates” that has 5 write capacity units.

Which option has the highest read throughput?

Accepted Answer

B. Strongly consistent reads of 5 read capacity units reading items that are 4 KB in size.

Answer

A. Eventually consistent reads of 5 read capacity units reading items that are 4 KB in size.

Answer

C. Eventually consistent reads of 15 read capacity units reading items that are 1 KB in size.

Answer

D. Strongly consistent reads of 15 read capacity units reading items that are 1 KB in size.

Question 4

An on-premises legacy application is caching data files locally and writing shared images to local disks.

What is necessary to allow for horizontal scaling when migrating the application to AWS?

Accepted Answer

C. Modify the application to use Amazon S3 for serving shared images; cache data can then be written to local disks.

Answer

A. Modify the application to have both shared images and caching data written to Amazon EBS.

Answer

B. Modify the application to read and write cache data on Amazon S3, and also store shared images on S3.

Answer

D. Modify the application to read and write cache data on Amazon S3, while continuing to write shared images to local disks.

Question 5

A Developer must re-implement the business logic for an order fulfilment system. The
business logic has to make requests to multiple vendors to decide where to purchase an item. The whole process can take up to a week to complete.

What is the MOST efficient and SIMPLEST way to implement a system that meets these
requirements?

Accepted Answer

A. Use AWS Step Functions to execute parallel Lambda functions, and join the results.

Answer

B. Create an AWS SQS for each vendor, poll the queue from a worker instance, and joint the results.

Answer

C. Use AWS Lambda to asynchronously call a Lambda function for each vendor, and join the results.

Answer

D. Use Amazon CloudWatch Events to orchestrate the Lambda functions.

Question 6

A Developer is working on an application that tracks hundreds of millions of product
reviews in an Amazon DynamoDB table. The records include the data elements shown in the table:

Which field, when used as the partition key, would result in the MOST consistent
performance using DynamoDB?

Accepted Answer

B. reviewID

Answer

A. starRating

Answer

C. comment

Answer

D. productID

Question 7

A company is launching an ecommerce website and will host the static data in Amazon S3. The company expects approximately 1 000 transactions per second (TPS) for GET and PUT requests in total. Logging must be enabled to track all requests and must be retained for auditing purposes. What is the MOST cost-effective solution?

Accepted Answer

C. Enable AWS CloudTrail logging for the S3 bucket-level action and create a lifecycle policy to expire the data in 90 days.

Answer

A. Enable AWS CloudTrail logging for the S3 bucket-level action and create a lifecycle policy to move the data from the log bucket to Amazon S3 Glacier in 90 days.

Answer

B. Enable S3 server access logging and create a lifecycle policy to expire the data in 90 days.

Answer

D. Enable S3 server access logging and create a lifecycle policy to move the data to Amazon S3 Glacier in 90 days.

Question 8

Queries to an Amazon DynamoDB table are consuming a large amount of read capacity. The table has a significant number of large attributes. The application does not need all of the attribute data.

How can DynamoDB costs be minimized while maximizing application performance?

Accepted Answer

C. Implement exponential backoffs in the application.

Answer

A. Batch all the writes, and perform the write operations when no or few reads are being performed.

Answer

B. Create a global secondary index with a minimum set of projected attributes.

Answer

D. Load balance the reads to the table using an Application Load Balancer.

Question 9

Which of the following services are included at no additional cost with the use of the AWS platform?

Choose 2 answers

Accepted Answer

C. Auto Scaling

Accepted Answer

E. CloudFormation

Answer

A. Simple Storage Service

Answer

B. Elastic Compute Cloud

Answer

D. Elastic Load Balancing

Answer

F. Simple Workflow Service

Question 10

A developer has written an Amazon Kinesis Data Streams application. As usage grows and traffic increases over time, the application is regularly receiving
Provisioned Throughput Exceeded Exception error messages

Which steps should the developer take to resolve the error? (Select TWO.)

Accepted Answer

B. Increase the delay between the GetRecords call and the PutRecords call.

Accepted Answer

C. Increase the number of shards in the data stream

Answer

A. Use Auto Scaling to scale the stream for better performance.

Answer

D. Specify a shard iterator using the Shardlterator parameter.

Answer

E. Implement exponential backoff on the GetRecords call and the PutRecords call.

Question 11

A photo sharing website gets millions of new images every week The images are stored in Amazon S3 under a formatted date prefix A developer wants to move images to a few S3 buckets for analysis and further processing Images are not required to be moved in real time.

What is the MOST efficient method for performing this task?

What is the MOST efficient method for performing this task?

Accepted Answer

D. Use Amazon EC2 to batch pull images from multiple days and copy them to the other buckets.

Answer

A. Use S3 PutObject events to Invoke AWS Lambda Then Lambda will copy the files to the other objects.

Answer

B. Create an AWS Lambda function that will pull a day of Images from the origin bucket and copy them to the other buckets.

Answer

C. Use S3 Batch Operations to create jobs for images to be copied to each Individual bucket.

Question 12

A Developer is designing a new application that uses Amazon S3. To satisfy compliance
requirements, the Developer must encrypt the data at rest.
How can the Developer accomplish this?

Accepted Answer

D. Turn on S3 default encryption for the S3 bucket.

Answer

A. Use s3:x-amz-acl as a condition in the S3 bucket policy.

Answer

B. Use Amazon RDS with default encryption.

Answer

C. Use aws:SecureTransport as a condition in the S3 bucket policy.

Question 13

A developer must allow guest users without logins to access an Amazon Cognito-enabled
site to view files stored within an Amazon S3 bucket
How should the developer meet these requirements'?

Accepted Answer

C. Create a new user pool, enable access to unauthenticated identities, and grant access to AWS resources.

Answer

A. Create a blank user ID in a user pool, add to the user group, and grant access to AWS resources.

Answer

B. Create a new identity pool, enable access to unauthenticated identities and grant access to AWS resources.

Answer

D. Create a new user pool disable authentication access, and grant access to AWS resources.

Question 14

A company caches session information for a web application in an Amazon DynamoDB table. The company wants an automated way to delete old items from the table. 
What is the simplest way to do this?

Accepted Answer

B. Add an attribute with the expiration time; enable the Time To Live feature based on that attribute.

Answer

A. Write a script that deletes old records; schedule the scripts as a cron job on an Amazon EC2 instance.

Answer

C. Each day, create a new table to hold session data; delete the previous day’s table.

Answer

D. Add an attribute with the expiration time; name the attribute ItemExpiration.

Question 15

A developer is testing a Docker-based application that uses the AWS SDK to interact with Amazon DynamoDB In the local development environment, the application has used IAM access keys The application is now ready for deployment onto an ECS duster.

How should the application authenticate with AWS services in production?

How should the application authenticate with AWS services in production?

Accepted Answer

A. Configure an ECS task IAM role for the application to use.

Answer

B. Refactor the application to call AWS STS AssumeRole based on an instance role.

Answer

C. Configure AWS access key/secret access key environment variables with new credentials.

Answer

D. Configure the credentials file with a new access key/secret access key.

Question 16

A Developer is designing a fault-tolerant environment where client sessions will be saved.
How can the Developer ensure that no sessions are lost if an Amazon EC2 instance fails?

Accepted Answer

C. Use Amazon DynamoDB to perform scalable session hadling.

Answer

A. Use sticky sessions with an Elastic Load Balancer target group.

Answer

B. Use Amazon SQS to save session data.

Answer

D. Use Elastic Load Balancer connection draining to stop sending requests to failing instances.

Question 17

A Developer has created an S3 bucket s3://mycoolapp and has enabled server across
logging that points to the folder s3://mycoolapp/logs. The Developer moved 100 KB of
Cascading Style Sheets (CSS) documents to the folder s3://mycoolapp/css, and then
stopped work. When the developer came back a few days later, the bucket was 50 GB.
What is the MOST likely cause of this situation?

Accepted Answer

C. Logging into the same bucket caused exponential log growth.

Answer

A. The CSS files were not compressed and S3 versioning was enabled.

Answer

B. S3 replication was enabled on the bucket.

Answer

D. An S3 lifecycle policy has moved the entire CSS file to S3 Infrequent Access.

Question 18

How does Envelope Encryption work in AWS KMS?

Accepted Answer

A. The Customer Master Key is used to encrypidecrypt a data key The Plaintext Data Key is used to encrypt customer data.

Answer

B. Two encryption keys are used The Customer Master Key encrypts customer data. The Data Key is used to re-encrypt the encrypted data.

Answer

C. Two encryption keys are used The Data Key encrypts customer data The Customer Master Key is used to re-encrypt the encrypted data.

Answer

D. The Customer Master Key is used to encrypt'decrypt a data key. The Encrypted Data Key is used to encrypt customer data.

Question 19

A Developer must deploy a new AWS Lambda function using an AWS CloudFormation
template.
Which procedures will deploy a Lambda function? (Select TWO.)

Accepted Answer

B. Create an AWS::Lambda::Function resource in the template, then write the code directly inside the CloudFormation template.

Accepted Answer

C. Upload a .ZIP file containing the function code to Amazon S3, then add a reference to it in an AWS::Lambda::Function resource in the template.

Answer

A. Upload the code to an AWS CodeCommit repository, then add a reference to it in an AWS::Lambda::Function resource in the template.

Answer

D. Upload a .ZIP file to AWS CloudFormation containing the function code, then add a reference to it in an AWS::Lambda::Function resource in the template.

Answer

E. Upload the function code to a private Git repository, then add a reference to it in an AWS::Lambda::Function resource in the template.

Question 20

A Developer is developing an application that manages financial transactions. To improve
security, multi-factor authentication (MFA) will be required as part of the login protocol.
What services can the Developer use to meet these requirements?

Accepted Answer

B. Amazon Cognito with MFA.

Answer

A. Amazon DynamoDB to store MFA session data, and Amazon SNS to send MFA codes.

Answer

C. AWS Directory Service.

Answer

D. AWS IAM with MFA enabled.

Question 21

A company is creating an application that will require users to access AWS services and allow them to reset their own passwords.

Which of the following would allow the company to manage users and authorization while allowing users to reset their own passwords?

Accepted Answer

D. Amazon Cognito user pools and identity pools

Answer

A. Amazon Cognito identify pools and AWS STS

Answer

B. Amazon Cognito identity pools and AWS IAM

Answer

C. Amazon Cognito user pools and AWS KMS

Question 22

An application needs to encrypt data that is written to Amazon S3 where the keys are
managed in an on-premises data center and the encryption is handled by S3. Which type
of encryption should be used?

Accepted Answer

A. Use server-side encryption with Amazon S3-managed keys

Answer

B. Use server-side encryption with AWS KMS-managed keys.

Answer

C. Use client-side encryption with customer master keys.

Answer

D. Use server-side encryption with customer-provided keys.

Question 23

A Developer is creating a mobile application that will not require users to log in. What is the MOST efficient method to grant users access to AWS resources?

Accepted Answer

D. Use Amazon Cognito to associate unauthenticated users with an IAM role that has limited access to resources.

Answer

A. Use an identity provider to securely authenticate with the application.

Answer

B. Create an AWS Lambda function to create an IAM user when a user accesses the application.

Answer

C. Create credentials using AWS KMS and apply these credentials to users when using the application.

Question 24

A developer is leveraging a Border Gateway Protocol (BGP)-based AWS VPN connection
to connect from on-premises to Amazon EC2 instances in the developer's account The
developer is able to access an EC2 instance in subnet A, but is unable to access an EC2
instance in subnet B in the same VPC.

Which logs can the developer use to verify whether the traffic is reaching subnet B?

Accepted Answer

C. VPC Flow Logs

Answer

A. VPN logs

Answer

B. BGP logs

Answer

D. AWS CloudTrail logs

Question 25

A company is using continuous integration and continuous delivery systems. A Developer now needs to automate a software package deployment to both Amazon EC2 instances and virtual servers running on-premises.

Which AWS service should be used to accomplish this?

Which AWS service should be used to accomplish this?

Accepted Answer

D. AWS CodeDeploy

Answer

A. AWS CodePipeline

Answer

B. AWS CodeBuild

Answer

C. AWS Elastic Beanstalk

Question 26

A front-end web application is using Amazon Cognito user pools to handle the user
authentication flow. A developer is integrating Amazon DynamoDB into the application
using the AWS SDK for JavaScript.

How would the developer securely call the API without exposing the access or secret keys?

Accepted Answer

C. Hardcode the credentials use Amazon S3 to host the web application, and enable server-side encryption.

Answer

A. Configure Amazon Cognito identity pools and exchange the JSON Web Token (JWT) for temporary credentials.

Answer

B. Run the web application in an Amazon EC2 instance with the instance profile configured.

Answer

D. Use Amazon Cognito user pool JSON Web Tokens (JWTs) to access the DynamoDB APIs.

Question 27

After installing the AWS CLI, a Developer tries to run the command aws configure but
receives the following error: Error: aws: command not found.

What is the most likely cause of this error?

Accepted Answer

A. The aws executable is not in the PATH environment variable.

Answer

B. Access to the aws executable has been denied to the installer.

Answer

C. Incorrect AWS credentials were provided

Answer

D. The aws script does not have an executable file mode.

Question 28

A Developer must build an application that uses Amazon DynamoDB. The requirements state that items being stored in the DynamoDB table will be 7KB in size and that reads must be strongly consistent. The maximum read rate is 3 items per second, and the maximum write rate is 10 items per second.

How should the Developer size the DynamoDB table to meet these requirements?

How should the Developer size the DynamoDB table to meet these requirements?

Accepted Answer

B. Read: 6 read capacity units
Write: 70 write capacity units

Answer

A. Read: 3 read capacity units
Write: 70 write capacity units

Answer

C. Read: 6 read capacity units
Write: 10 write capacity units

Answer

D. Read: 3 read capacity units
Write: 10 write capacity units

Question 29

Given the following AWS CloudFormation template:

What is the MOST efficient way to reference the new Amazon S3 bucket from another
AWS CloudFormation template?

Accepted Answer

D. Use Fn: : Include to include the existing template in other template and use the ContentBucket resource directly

Answer

A. Add an Export declaration to the outputs section of the original template and use ImportValue in other templates.

Answer

B. Add Exported: True to the ContentBucket in the original template and use ImportResource in other templates.

Answer

C. Create a custom AWS CloudFormation resource that gets the bucket name from the ContentBucket resource of the first stack.

Question 30

A developer is building an application that reads 90 Items of data each second from an
Amazon DynamoDB table. Each item Is 3 KB m size. The table is configured to use
eventually consistent reads.

How many read capacity units should the developer provision for the table?

Accepted Answer

C. 45

Answer

A. 25

Answer

B. 35

Answer

D. 85

Question 31

A development team decides to adopt a continuous integration/continuous delivery (CI/CD) process using AWS CodePipehne and AWS CodeCommit for a new application. However, management wants a person to review and approve the code before it is deployed to production.

How can the development team add a manual approver to the CI/CD pipeline?

How can the development team add a manual approver to the CI/CD pipeline?

Accepted Answer

D. Add an approval action to the pipeline. Configure the approval action to publish to an Amazon SNS topic when approval is required. The pipeline execution will stop and wait for an approval.

Answer

A. Use AWS SES to send an email to approvers when their action is required Develop a
simple application that allows approvers to accept or reject a build Invoke an AWS Lambda function to advance the pipeline when a build is accepted.

Answer

B. If approved, add an approved tag when pushing changes to the CodeCommit repository. CodePipeiine will proceed to build and deploy approved commits without interruption.

Answer

C. Add an approval step to CodeCommit Commits will not be saved until approved.

Question 32

A Developer wants to enable AWS X-Ray for a secure application that runs in an Amazon
ECS environment. What combination of steps will enable X-Ray? (Select THREE.)

Accepted Answer

A. Create a Docker image that runs the X-Ray daemon.

Accepted Answer

B. Add instrumentation to the application code for X-Ray.

Accepted Answer

F. Configure and use an IAM role for tasks.

Answer

C. Install the X-Ray daemon on the underlying EC2 instance.

Answer

D. Configure and use an IAM EC2 instance role

Answer

E. Register the application with X-Ray.

Question 33

A developer Is designing an AWS Lambda function that create temporary files that are less than 10 MB during execution. The temporary files will be accessed and modified multiple times during execution.

The developer has no need to save or retrieve these files in the future.
Where should the temporary file be stored?

The developer has no need to save or retrieve these files in the future.
Where should the temporary file be stored?

Accepted Answer

A. the /tmp directory

Answer

B. Amazon EFS

Answer

C. Amazon EBS

Answer

D. Amazon S3

Question 34

Which statements about DynamoDB are true? Choose 2 answers

Accepted Answer

B. DynamoDB uses optimistic concurrency control

Accepted Answer

C. DynamoDB uses conditional writes for consistency

Answer

A. DynamoDB uses a pessimistic locking model

Answer

D. DynamoDB restricts item access during reads

Answer

E. DynamoDB restricts item access during writes

Question 35

A company is using AWS CodeBuild to compile a website from source code stored in AWS CodeCommit. A recent change to the source code has resulted in the CodeBuild project being unable to successfully compile the website.
How should the Developer identify the cause of the failures?

Accepted Answer

A. Modify the buildspec.yml file to include steps to send the output of build commands to Amazon CloudWatch.

Answer

B. Use a custom Docker image that includes the AWS X-Ray agent in the AWS CodeBuild project configuration.

Answer

C. Check the build logs of the failed phase in the last build attempt in the AWS CodeBuild project build history.

Answer

D. Manually re-run the build process on a local machine so that the output can be visualized.

Question 36

A company s website runs on an Amazon EC2 instance and uses Auto Scale the
environment during peak times Website users across the world are experiencing high to sea latency due to static content on the EC2 instance, even during non-peak hours.

Which combination of steps will resolve the latency issue? (Select TWO )

Accepted Answer

C. Scale vertically by resizing the EC2 instances.

Accepted Answer

E. Store the application's static content in Amazon S3.

Answer

A. Double the Auto Scaling group's maximum number of servers.

Answer

B. Host the application code on AWS Lambda.

Answer

D. Create an Amazon CloudFront distribution to cache the static content.

Question 37

A Developer is using AWS CLI, but when running list commands on a large number of
resources, it is timing out. What can be done to avoid this time-out?

Accepted Answer

A. Use pagination

Answer

B. Use shorthand syntax

Answer

C. Use parameter values

Answer

D. Use quoting strings

Question 38

A company is running a Docker application on Amazon ECS. The application must scale based on user load in the last 15 seconds.

How should a Developer instrument the code so that the requirement can be met?

Accepted Answer

B. Create a high-resolution custom Amazon CloudWatch metric for user activity data, then publish data every 5 seconds.

Answer

A. Create a high-resolution custom Amazon CloudWatch metric for user activity data, then publish data every 30 seconds.

Answer

C. Create a standard-resolution custom Amazon CloudWatch metric for user activity data, then publish data every 30 seconds.

Answer

D. Create a standard-resolution custom Amazon CloudWatch metric for user activity data, then publish data every 5 seconds.

Question 39

A Developer wants to debug an application by searching and filtering log data. The
application logs are stored in Amazon CloudWatch Logs. The Developer creates a new
metric filter to count exceptions in the application logs. However, no results are returned from the logs.

What is the reason that no filtered results are being returned?

Accepted Answer

B. CloudWatch Logs only publishes metric data for events that happen after the filter is created.

Answer

A. A setup of the Amazon CloudWatch interface VPC endpoint is required for filtering the CloudWatch Logs in the VPC.

Answer

C. The log group for CloudWatch Logs should be first streamed to Amazon Elasticsearch Service before metric filtering returns the results.

Answer

D. Metric data points for logs groups can be filtered only after they are exported to an Amazon S3 bucket.

Question 40

A company needs to ingest terabytes of data each hour from thousands of sources that are delivered almost continually throughout the day. The volume of messages generated varies over the course of the day. Messages must be delivered in real time for fraud detection and live operational dashboards.

Which approach will meet these requirements?

Which approach will meet these requirements?

Accepted Answer

D. Use Amazon Kinesis Data Streams with Kinesis Client Library to ingest and deliver messages.

Answer

A. Send the messages to an Amazon SQS queue, then process the messages by using a fleet of Amazon EC2 instances.

Answer

B. Use the Amazon S3 API to write messages to an S3 bucket, then process the messages by using Amazon Redshift.

Answer

C. Use AWS Data Pipeline to automate the movement and transformation of data.

Question 41

A company runs continuous integration/continuous delivery (CI/CD) pipeline for its
application on AWS CodePipeline. A developer must write unit tests and run them as part of the pipelines before staging the artifacts for testing.

How should the Developer incorporate unit tests as part of CI/CD pipeline?

Accepted Answer

B. Update the AWS codeBuild build specification to include a phase for running unit tests.

Answer

A. Create a separate codePipline pipline to run unit tests.

Answer

C. Install the AWS CodeDeploy agent on an Amazon EC2 instance to run unit tests.

Answer

D. Create a testing branch in AWS CodeCommit to run unit tests.

Question 42

Which EC2 API call would you use to retrieve a list of Amazon Machine Images (AMIs)?

Accepted Answer

C. DescribeImages

Answer

A. DescnbeInstances

Answer

B. DescribeAMls

Answer

D. GetAMls

Answer

E. You cannot retrieve a list of AMIs as there are over 10,000 AMIs

Question 43

A developer has built an application using Amazon Cognito for authentication and
authorization. After a user is successfully logged in to the application, the application
creates a user record in an Amazon DynamoDB table.
What is the correct flow to authenticate the user and create a record in the DynamoDB
table?

Accepted Answer

B. Authenticate and get a token from an Amazon Cognito identity pool. Use the token to access DynamoDB.

Answer

A. Authenticate and get a token from an Amazon Cognito user pool. Use the token to access DynamoDB.

Answer

C. Authenticate and get a token from an Amazon Cognito user pool Exchange the token for AWS credentials with an Amazon Cognito identity pool. Use the credential to access DynamoDB.

Answer

D. Authenticate and get a token from an Amazon Cognito identity pool. Exchange the token for AWS credentials with an Amazon Cognito user pool. Use the credentials to access
DynamoDB.

Question 44

A company is migrating from a monolithic architecture to a microservices-based
architecture. The Developers need to refactor the application so that the many
microservices can asynchronously communicate with each other without impacting
performance. Use of which managed AWS services will enable asynchronous message passing? (Choose two.)

Accepted Answer

A. Amazon SQS

Accepted Answer

D. Amazon SNS

Answer

B. Amazon Cognito

Answer

C. Amazon Kinesis

Answer

E. Amazon ElastiCache

Question 45

A developer has written an Amazon kinesis Data streams application. As usage grows and traffic over time, the application is regularly receiving
provisionedThroughputExceededException error messages.

Which steps should the Developer take to resolve the error? (Select Two.)

Accepted Answer

B. Increase the delay between the GetRecords call and the PutRecords call.

Accepted Answer

D. Specify a shard iterator using the shardlterator parameter.

Answer

A. Use Auto scaling to scale the stream for better performance.

Answer

C. Increase the number of shards in the data stream.

Answer

E. Implement exponential backoff on the GetRecords call and the PutRecords call.

Question 46

An ecommerce startup is preparing for an annual sales event As the traffic to the
company's application increases, the development team wants to be notified when the Amazon EC2 instance's CPU utilization exceeds 80%.
Which solution will meet this requirement?

Accepted Answer

C. Create a cron job on the EC2 instance that executes the --describe-instance-information command on the host instance every 15 minutes and sends the results to an Amazon SNS topic.

Answer

A. Create a custom Amazon CloudWatch alarm that sends a notification to an Amazon SNS topic when the CPU utilization exceeds 80%.

Answer

B. Create a custom AWS CloudTrail alarm that sends a notification to an Amazon SNS topic when the CPU utilization exceeds 80%.

Answer

D. Create an AWS Lambda function that queries the AWS CloudTrail logs for the CPUUtihzation metric every 15 minutes and sends a notification to an Amazon SNS topic when the CPU utilization exceeds 80%.

Question 47

A Developer needs to deploy an application running on AWS Fargate using Amazon ECS. The application has environment variables that must be passed to a container tor the application to initialize.

How should the environment variables be passed to the container?

Accepted Answer

B. Define an array that includes the environment variables under the environment parameter within the task definition.

Answer

A. Define an array that includes the environment variables under the environment parameter within the service definition.

Answer

C. Define an array that includes the environment variables under the entrypoint parameter within the task definition.

Answer

D. Define in array that includes the environment variables under the entryPoint parameter within the service definition.

Question 48

A developer is building a highly secure healthcare application using .. application requires
writing temporary data to /tmp storage on an AWS Lambda function.
How should the developer encrypt this data?

Accepted Answer

D. Use an on-premises hardware security module (HSM) to generate keys where the Lambda function requests a data key from the HSM and uses that to encrypt data on all requests to the function.

Answer

A. Enable Amazon EBS volume encryption with an AWS KMS .. configuration so that all storage attached to the Lambda function is encrypted.

Answer

B. Set up the Lambda function with a role and key policy to access an AWS KMS CMK Use the CMK to generate a data key used to encrypt all data prior to writing to /tmp storage.

Answer

C. Use OpenSSL to generate a symmetric encryption key on Lambda startup Use this key to encrypt the data prior to writing to /tmp

Question 49

Where should the appspec.yml file be placed in order for AWS CodeDeploy to work?

Accepted Answer

A. In the root of the application source code directory structure

Answer

B. In the bin folder along with all the complied code

Answer

C. In an S3 bucket

Answer

D. In the same folder as the application configuration files

Question 50

Which features can be used to restrict access to data in S3?

Choose 2 answers

Accepted Answer

B. Set an S3 Bucket policy.

Accepted Answer

D. Set an S3 ACL on the bucket or the object.

Answer

A. Use S3 Virtual Hosting

Answer

C. Enable IAM Identity Federation.

Answer

E. Create a CloudFront distribution for the bucket

Question 51

A Development team is working on a case management solution that allows medical claims to be processed and reviewed. Users log in to provide information related to their medical and financial situations.
As part of the application, sensitive documents such as medical records, medical imaging, bank statements, and receipts are uploaded to Amazon S3. All documents must be securely transmitted and stored. All access to the documents must be recorded for auditing.

What is the MOST secure approach?

Accepted Answer

A. Use S3 default encryption using Advanced Encryption Standard-256 (AES-256) on the destination bucket.

Answer

B. Use Amazon Cognito for authorization and authentication to ensure the security of the application and documents.

Answer

C. Use AWS Lambda to encrypt and decrypt objects as they are placed into the S3 bucket.

Answer

D. Use client-side encryption/decryption with Amazon S3 and AWS KMS.

Question 52

A development team consists of 10 team members. Similar to a home directory for each team member the manager wants to grant access to user-specific folders in an Amazon S3 bucket. For the team member with the username “TeamMemberX”, the snippet of the IAM policy looks like this:

Instead of creating distinct policies for each team member, what approach can be used to make this policy snippet generic for all team members?

Instead of creating distinct policies for each team member, what approach can be used to make this policy snippet generic for all team members?

Accepted Answer

C. Use IAM policy variables

Answer

A. Use IAM policy condition

Answer

B. Use IAM policy principal

Answer

D. Use IAM policy resource

Question 53

An application stores payroll information nightly in DynamoDB for a large number of
employees across hundreds of offices. Item attributes consist of individual name, office identifier, and cumulative daily hours. Managers run reports for ranges of names working in their office. One query is. "Return all Items in this office for names starting with A through E".

Which table configuration will result in the lowest impact on provisioned throughput for this query?

Accepted Answer

B. Configure the table to have a range index on the name attribute, and a hash index on the office identifier.

Answer

A. Configure the table to have a hash index on the name attribute, and a range index on the office identifier.

Answer

C. Configure a hash index on the name attribute and no range index.

Answer

D. Configure a hash index on the office Identifier attribute and no range index.

Question 54

A company runs an e-commerce website that uses Amazon DynamoDB where pricing for items is dynamically updated in real time. At any given time, multiple updates may occur simultaneously for pricing information on a particular product. This is causing the original editor’s changes to be overwritten without a proper review process.

Which DynamoDB write option should be selected to prevent this overwriting?

Which DynamoDB write option should be selected to prevent this overwriting?

Accepted Answer

B. Conditional writes

Answer

A. Concurrent writes

Answer

C. Atomic writes

Answer

D. Batch writes

Question 55

An IAM role is attached to an Amazon EC2 instance that explicitly denies access to all
Amazon S3 API actions. The EC2 instance credentials file specifies the IAM access key
and secret access key, which allow full administrative access.

Given that multiple modes of IAM access are present for this EC2 instance, which of the following is correct?

Accepted Answer

C. The EC2 instance will be able to perform all actions on any S3 bucket

Answer

A. The EC2 instance will only be able to list the S3 buckets

Answer

B. The EC2 instance will only be able to list the contents of one S3 bucket at a time

Answer

D. The EC2 instance will not be able to perform any S3 action on any S3 bucket.

Question 56

A development team is using AWS Elastic Beanstalk to deploy a two-tier application that consists of a load-balanced web tier and an Amazon RDS database tier in production. The team would like to separate the RDS instance from the Elastic Beanstalk. How can this be accomplished?

Accepted Answer

D. Recreate a new Elastic Beanstalk environment without Amazon RDS.

Answer

A. Use the Elastic Beanstalk CLI to disassociate the database.

Answer

B. Use the AWS CLI to disassociate the database.

Answer

C. Change the deployment policy to disassociate the database.

Question 57

An application is using Amazon DynamoDB as its data store, and should be able to read 100 items per second as strongly consistent reads. Each item is 5 KB in size.

To what value should the table’s provisioned read throughput be set?

Accepted Answer

C. 200 read capacity units

Answer

A. 50 read capacity units

Answer

B. 100 read capacity units

Answer

D. 500 read capacity unitsc

Question 58

A legacy service has an XML-based SOAP interface. The Developer wants to expose the
functionality of the service to external clients with the Amazon API Gateway. Which
technique will accomplish this?

Accepted Answer

A. Create a RESTful API with the API Gateway; transform the incoming JSON into a valid XML message for the SOAP interface using mapping templates.

Answer

B. Create a RESTful API with the API Gateway; pass the incoming JSON to the SOAP interface through an Application Load Balancer.

Answer

C. Create a RESTful API with the API Gateway; pass the incoming XML to the SOAP interface through an Application Load Balancer.

Answer

D. Create a RESTful API with the API Gateway; transform the incoming XML into a valid message for the SOAP interface using mapping templates.

Question 59

A video-hosting website has two types of members: those who pay a fee. and those who do not Each video upload places a message in Amazon SQS A fleet of Amazon EC2 instances polls Amazon SQS and processes each video.

The developer needs to ensure that the videos uploaded by the paying members are processed first

How can the developer meet this requirement?

Accepted Answer

B. Use SQS to set priorities on individual items within a single queue: give the paying members' videos the highest priority.

Answer

A. Create two SQS queues: one for paying members, and one for non-paying members Poll the paying member queue first and then poll the non-paying member queue.

Answer

C. Use SQS to set priorities on individual items within a single queue and use Amazon SNS to encode the videos.

Answer

D. Create two Amazon SNS topics: one for paying members and one for non-paying members Use SNS topic subscription priorities to differentiate between the two types of members.

Question 60

A developer has created a new AWS IAM user that has s3 putobject permission to write to a specific Amazon bucket. This S3 bucket uses server-side encryption with AWS KMS managed keys (SEE-KMS) as the encryption. Using the access key and secret key of the IAM user, the application received an access denied error when calling the PutObject API.

How can this issue be resolved?

How can this issue be resolved?

Accepted Answer

C. Update the policy of the IAM user to allow the kms GenerateDatakey action.

Answer

A. Update the policy of the IAM user to allow the s3 Encrypt action.

Answer

B. Update the bucket policy of the S3 bucket to allow the IAM user to upload objects.

Answer

D. Update the ACL of the bucket to allow the IAM user to upload objects.

Question 61

An application overwrites an object in Amazon S3, and then immediately reads the same
object. Why would the application sometimes retrieve the old version of the object?

Accepted Answer

A. S3 overwrite PUTS are eventually consistent, so the application may read the old object.

Answer

B. The application needs to add extra metadata to label the latest version when uploading to Amazon S3.

Answer

C. All S3 PUTS are eventually consistent, so the application may read the old object.

Answer

D. The application needs to explicitly specify latest version when retrieving the object.

Question 62

Which code snippet below returns the URL of a load balanced web site created in
CloudFormation with an AWS::ElasticLoadBalancing::LoadBalancer resource name
"ElasticLoad Balancer"?

Accepted Answer

A. "Fn::Join" : ["". [ "http://", {"Fn::GetAtr” : [ "ElasticLoadBalancer","DNSName"]}]]

Answer

B. "Fn::Join" : ["". [ "http://", {"Fn::GetAtr” : [ "ElasticLoadBalancer","Url"]}]]

Answer

C. "Fn::Join" : ["". [ "http://", {"Ref" : "ElasticLoadBalancerUrl"}]]

Answer

D. "Fn::Join" : [".", [ "http://", {"Ref" : "ElasticLoadBalancerDNSName"}]]

Question 63

A developer is storing sensitive data generated by an application in Amazon S3. The
developer wants to encrypt the data at rest. A company policy requires an audit trail of
when the master key was used and by whom.

Which encryption option will meet these requirements?

Accepted Answer

B. Server-side encryption with AWS KMS managed keys (SSE-KMS)

Answer

A. Server-side encryption with Amazon S3 managed keys (SSE-S3)

Answer

C. Server-side encryption with customer-provided keys (SSE-C)

Answer

D. Server-side encryption with self-managed keys

Question 64

When a Developer tries to run an AWS CodeBuild project, it raises an error because the length of all environment variables exceeds the limit for the combined maximum of characters. What is the recommended solution?

Accepted Answer

D. Use AWS Systems Manager Parameter Store to store large numbers of environment variables.

Answer

A. Add the export LC_ALL=“en_US.utf8” command to the pre_build section to ensure POSIX localization.

Answer

B. Use Amazon Cognito to store key-value pairs for large numbers of environment variables.

Answer

C. Update the settings for the build project to use an Amazon S3 bucket for large numbers of environment variables.

DVA-C01 AWS Certified Developer (06)

Create a free account to finish this quiz

Questions in this quiz (65)

Information

Feedback

What do you think of the new look?