A developer must allow guest users without logins to access an Amazon Cognito-enabled site to view files stored within an Amazon S3 bucket How should the developer meet these requirements'?

Create a new user pool, enable access to unauthenticated identities, and grant access to AWS resources.

Create a blank user ID in a user pool, add to the user group, and grant access to AWS resources

Create a new identity pool, enable access to unauthenticated identities and grant access to AWS resources

Create a new user pool, enable access to unauthenticated identities, and grant access to AWS resources.

Create a new user pool disable authentication access, and grant access to AWS resources

A developer has written an AWS Lambda function using Java as the runtime environment. The developer wants to isolate a performance bottleneck in the code. Which steps should be taken to reveal the bottleneck?

Use the AWS X-Ray API to write trace data into X-Ray from strategic places within the code. Use the X-Ray console to analyze the resulting data

Use the Amazon CloudWatch API to write timestamps to a custom CloudWatch metric Use the CloudWatch console to analyze the resulting data

Use the AWS X-Ray API to write trace data into X-Ray from strategic places within the code Use the Amazon CloudWatch console to analyze the resulting data

Use the AWS X-Ray API to write trace data into X-Ray from strategic places within the code. Use the X-Ray console to analyze the resulting data

Use the Amazon CloudWatch API to write timestamps to a custom CloudWatch metric Use the AWS X-Ray console to analyze the resulting data

A developer wants to insert a record into an Amazon DynamoDB table as soon as a new file is added to an Amazon S3 bucket. Which set of steps would be necessary to achieve this?

Configure an S3 event to invoke a Lambda function that inserts records into DynamoDB

Create an event with Amazon CloudWatch Events that will monitor the S3 bucket and then insert the records into DynamoDB

Configure an S3 event to invoke a Lambda function that inserts records into DynamoDB

Create a Lambda function that will poll the S3 bucket and then insert the records into DynamoDB.

Create a cron job that will run at a scheduled time and insert the records into DynamoDB

A developer is writing an AWS Lambda function. The developer wants to log key events that occur during the Lambda function and include a unique identifier to associate the events with a specific function invocation. Which of the following will help the developer accomplish this objective?

Obtain the request identifier from the Lambda context object Architect the application to write logs to the console.

Obtain the request identifier from the Lambda event object Architect the application to write logs to a file

Obtain the request identifier from the Lambda event object Architect the application to write logs to the console

Obtain the request identifier from the Lambda context object Architect the application to write logs to a file.

A developer receives the following error message when trying to launch or terminate an Amazon EC2 instance using a boto3 script. What should the developer do to correct this error message?

Upgrade to the latest AWS CLI version so that boto3 can handle higher request rates

Assign an IAM role to the EC2 instance to allow necessary API calls on behalf of the client.

Implement an exponential backoff algorithm for optimizing the number of API requests made to Amazon EC2.

Increase the overall network bandwidth to handle higher API request rates.

Upgrade to the latest AWS CLI version so that boto3 can handle higher request rates

A developer is creating a script to automate the deployment process for a serverless application. The developer wants to use an existing AWS Serverless Application Model (AWS SAM) template for the application What should the developer use for the project? (Select TWO)

Call sam package to create the deployment package Call sam deploy to deploy the package afterward

Callaws s3 cp to upload the AWS SAM template to Amazon S3 Call aws lambda update-functioncode to create the application.

Callaws cloudformation package to create the deployment package Call aws cloudformation deploy to deploy the package afterward.

Call sam package to create the deployment package Call sam deploy to deploy the package afterward

Callaws s3 cp to upload the AWS SAM template to Amazon S3 Call aws lambda update-functioncode to create the application.

Create a ZIP package locally and call aws serverlessrepo create-applicarion to create the application.

Create a ZIP package and upload it to Amazon S3 Callaws cloudfonnation create-stack to create the application

A company is running a custom application on a set of on-premises Linux servers that are accessed using Amazon API Gateway. AWS X-Ray tracing has been enabled on the API test stage How can a developer enable X-Ray tracing on the on-premises servers with the LEAST amount of configuration''

Install and run the X-Ray daemon on the on-premises servers to capture and relay the data to the X-Ray service

Install and run the X-Ray SDK on the on-premises servers to capture and relay the data to the XRay service.

Install and run the X-Ray daemon on the on-premises servers to capture and relay the data to the X-Ray service

Capture incoming requests on-premises and configure an AWS Lambda function to pull, process, and relay relevant data to X-Ray using the PutTraceSegments API call

Capture incoming requests on-premises and configure an AWS Lambda function to pull, process, and relay relevant data to X-Ray using the PutTelemetryRecords API call.

A developer has created a REST API using Amazon API Gateway. The developer wants to log who and how each caller accesses the API. The developer also wants to control how long the logs are kept What should the developer do to meet these requirements?

Enable API Gateway execution logging Delete old logs using API Gateway retention settings

Enable API Gateway access logs Use Amazon CloudWatch retention settings to delete old logs

Enable detailed Amazon CloudWatch metrics Delete old logs with a recurring AWS Lambda function

Create and use API Gateway usage plans. Delete old logs with a recurring AWS Lambda function.

A development team uses AWS Elastic Beanstalk to deploy a Java-based web application. The team wants to ensure that the changes to the source code and the configuration are always deployed on new instances The team configures the Elastic Beanstalk environment to use immutable updates.However an error occurs the first time a change is deployed with the new update policy What is the MOST likely cause of this issue?

Immutable updates are not supported for Java-based applications

The account has reached its on-demand instance limit

Immutable updates are only supported for m4 large and larger instance types.

The developer must also modify the ebextensions/immutable-updates config file to enable immutable updates

How does Envelope Encryption work in AWS KMS?

The Customer Master Key is used to encrypidecrypt a data key The Plaintext Data Key is used to encrypt customer data.

Two encryption keys are used The Customer Master Key encrypts customer data. The Data Key is used to re-encrypt the encrypted data.

Two encryption keys are used The Data Key encrypts customer data The Customer Master Key is used to re-encrypt the encrypted data

The Customer Master Key is used to encrypt'decrypt a data key. The Encrypted Data Key is used to encrypt customer data.

A company is using Amazon API Gateway to manage its public-facing API. The CISO requires that the APIs be used by test account users only. What is the MOST secure way to restrict API access to users of this particular AWS account?

Client-side SSL certificates for authentication

Cross-origin resource sharing (CORS)

An IAM role is attached to an Amazon EC2 instance that explicitly denies access to all Amazon S3 API actions. The EC2 instance credentials file specifies the IAM access key and secret access key, which allow full administrative access. Given that multiple modes of IAM access are present for this EC2 instance, which of the following is correct?

The EC2 instance will be able to perform all actions on any S3 bucket

The EC2 instance will only be able to list the S3 buckets

The EC2 instance will only be able to list the contents of one S3 bucket at a time

The EC2 instance will be able to perform all actions on any S3 bucket

The EC2 instance will not be able to perform any S3 action on any S3 bucket.

An application contains two components one component to handle HI IP requests, and another component to handle background processing tasks Bach component must scale independently The developer wants to deploy this application using AWS Elastic Beanstalk.How should this application be deployed, based on these requirements?

Deploy the application in a single Elastic Beanstalk environment

Deploy each component in a separate Elastic Beanstalk environment

Use multiple Elastic Beanstalk environments for the HTTP component but one environment for thebackground task component

Use multiple Elastic Beanstalk environments for the background task component but one environment tor the HTTP component

Given the following AWS CloudFormation template:What is the MOST efficient way to reference the new Amazon S3 bucket from another AWS CloudFormation template?

Use Fn: : Include to include the existing template in other template and use the ContentBucket resource directly

Add an Export declaration to the outputs section of the original template and use ImportValue in other templates.

Add Exported: True to the ContentBucket in the original template and use ImportResource in other templates.

Create a custom AWS CloudFormation resource that gets the bucket name from the ContentBucket resource of the first stack.

Use Fn: : Include to include the existing template in other template and use the ContentBucket resource directly

A developer implemented a static website hosted in Amazon S3 that makes web service requests hosted in Amazon API Gateway AWS Lambd a. The site is showing an error that reads "No ' Access-Control-Allow Origin' header is present on the requested resource Origin 'null' is therefore not allowed access " What should the developer do to resolve this issue?

Enable cross-origin resource sharing (CORS) for the method in API Gateway

Enable cross-origin resource sharing (CORS) on the S3 bucket

Enable cross-origin resource sharing (CORS) for the method in API Gateway

Add the Access-Control-Request-Method header to the request

Add the Access-Control-Request-Headers header to the request

An application is experiencing performance issues based on increased demand. This increased demand is on read-only historical records pulled from an Amazon RDS-hosted database with custom views and queries. A developer improve performance without changing the database structure.Which approach will improve performance and MINIMIZE management overhead?

Deploy Amazon ElasticCache for Redis and cache the data for the application.

Deploy Amazon DynamoDB, move all the data, and point to DynamoDB.

Deploy Amazon ElasticCache for Redis and cache the data for the application.

Deploy Memcached on Amazon EC2 and cache the data for the application.

Deploy Amazon DynamoDB Accelerator (DAX) on Amazon RDS to improve cache performance

A developer is building an application that runs behind an application Load Balancer (ALB). The application is configured as the origin for an Amazon CloudFront distribution. Users will log in to the application using their social media accounts.How can the developer authenticate and authorize users?

Configure Cloudfront to use Amazon Cognito as one of the authentication providers

Validate the user by inspecting the tokens using AWS Lambda authorizers on the ALB

Configure the ALB to use Amazon Cognito as one of the authentication providers

Configure Cloudfront to use Amazon Cognito as one of the authentication providers

Authorize the users by calling the Amazon Cognito API in the AWS Lambda authorizer on the ALB

An application development team decides to use AWS X Ray to monitor application code to analyze performance and perform r cause analysis What does the team need to do to begin using X Ray? (Select TWO )

Install the X-Ray agent on the application servers

Create an Amazon DynamoDB table to store the trace logs

Log instrumentation output into an Amazon SQS queue

Use a visualization tool to view application traces

Instrument application code using the AWS SDK

Install the X-Ray agent on the application servers

Create an Amazon DynamoDB table to store the trace logs

A developer must increase read performance from an unencrypted Amazon S3 bucket. The application requires 100.000 read requests each second Cost-effectiveness is a priority. What would be the SIMPLEST approach to implement these requirements?

Create 20 or more prefixes in Amazon S3 Place files by prefixes. Read in parallel by prefixes

Create 20 of more AWS accounts Create a bucket in each account Read in parallel by bucket

Deploy Memcached on Amazon EC2 Cache the files in memory Retrieve from the Memcached cache

Copy all files to Amazon DynamoDB Index the files with S3 metadata Retrieve from DynamoDB

A company runs its APIs using Amazon API Gateway in front of AWS Lambda functions The company wants to add logging at the API level Each API must have production and development environments The developer wants to enable different logging levels in both environments.How can these requirements be met?

Set up a stage for each environment In each stage, point to different Lambda functions that implement the logging logic m the code Access the logs in Amazon CloudWatch Logs

Set up a stage for each environment In each stage, define a different logging level according to the logging requirements Access the logs in Amazon CloudWatch Logs

Set up a stage and use the same Lambda functions In Amazon CloudWatch Logs set up a filter based on the log level according to the logging requirements

Set up a stage for each environment In each stage, define a variable for the log level Set the value according to the logging requirements.

A developer is building a highly secure healthcare application using .. application requires writing temporary data to /tmp storage on an AWS Lambda function. How should the developer encrypt this data?

Use an on-premises hardware security module (HSM) to generate keys where the Lambda function requests a data key from the HSM and uses that to encrypt data on all requests to the function

Enable Amazon EBS volume encryption with an AWS KMS .. configuration so that all storage attached to the Lambda function is encrypted.

Set up the Lambda function with a role and key policy to access an AWS KMS CMK Use the CMK to generate a data key used to encrypt all data prior to writing to /tmp storage

Use OpenSSL to generate a symmetric encryption key on Lambda startup Use this key to encrypt the data prior to writing to /tmp

Use an on-premises hardware security module (HSM) to generate keys where the Lambda function requests a data key from the HSM and uses that to encrypt data on all requests to the function

An application running on multiple Amazon EC2 instances pulls messages ...SQS queue. A requirement for the application is that all messages must be encrypted at rest. Developers are instructed to use methods that allow for centralized .. possible support requirements whenever possible. Which of the following solution supports these requirements?

Create an SQS queue, and encrypt the queue by using server-side encryption with AWS KMS

Encrypt individual messages by using client-side encryption with customer managed keys, then write to the SQS queue.

Encrypt individual messages by using SQS Extended Client and the Amazon S3 encryption client.

Create an SQS queue, and encrypt the queue by using server-side encryption with AWS KMS

Create an SQS queue and encrypt the queue by using client-side encryption

A three-tier application hosted on AWS uses Amazon RDS for MYSQL as its database. A developer must ensure the database credentials are stored and accessed securely. What is the MOST secure way for the developer to achieve this?

Store the credentials in a configuration file and commit it to the GIT repository.

Store the credentials in AWS Secrets Manager and enable automatic secret rotation.

Store the credentials using Amazon RDS and enable automatic rotation

Store the credentials in code and handle credentials rotation within the application.

A company is launching a poling application. The application will store the results of each pool an Amazon DynamoDB table. Management wants to remove pool data after a few data and store an archive of those records in Amazon S3. Which approach would allow the application to archive each poll's data while keeping complexity to a MINIMUM?

Enable DynamoDB Streams on the table. Configure the steam as trigger for AWS Lambda. Save records to Amazon S3 when records on the stream are modified.

Enable Time to Live (TTL) on the DynamoDB table. Enable DynamoDB Streams on the table and store the records removed from the stream in Amazon S3.

Schedule an AWS Lambda function to periodically scan the DynamoDB table. Use the BatchWritten operation to delete the results of a scan Enable DynamoDB Stream on the table and store the records removed from the stream in Amazon S3.

Enable DynamoDB Streams on the table. Configure the steam as trigger for AWS Lambda. Save records to Amazon S3 when records on the stream are modified.

Enable cross-Region replication on the S3 bucket to achieve the poll data.

A developer is designing a distributed application built using a microservices architect spanning multiple AWS accounts. The company's operations team wants to analyze and debug application issues from a centralized account. How can the developer meet these requirements?

Use an Amazon X-Ray agent with role assumption on to publish data into the centralized account.

Use Amazon X-Ray and create a new IAM user to publish the access keys into the centralized account.

Use VPC Flow Logs to collect application logs across different accounts.

Enable AWS CloudTrail to publish the trails in an Amazon S3 bucket in the centralized account.

What is required to trace Lambda-based applications with AWS X-Ray?

Update and add AWS X-ray daemon code to relevant parts of the Lambda function to set up the trace.

Send logs from the Lambda application to an S3 bucket trigger a Lambda function from that bucket to send data to AWS X-Ray.

Trigger a Lambda function from the application logs in Amazon CloudWatch to submit tracing data to AWS X-Ray

Use an IAM execution role to give the Lambda function permissions and enabled tracing.

Update and add AWS X-ray daemon code to relevant parts of the Lambda function to set up the trace.

A developer is creating an application to process a large number of requests Requests must be processed in order, and each request should be processed only once How should Amazon SQS be deployed to achieve this?

Use an SQS FIFO queue to process requests

Configure First in First out (FIFO) delivery in a standard Amazon SQS queue to process requests.

Use an SQS FIFO queue to process requests

Use the SetOrder attribute to ensure sequential request processing

Convert the standard queue to a FIFO queue by renaming the queue to use the fifo suffix.

A developer must modify an Alexa skill backed by an AWS Lambda function to access an Amazon DynamoDB table in a second account A role in the second account has been created with permissions to access the table How should the table be accessed?

Modify the Lambda function execution role's permissions to include the new role

Change the Lambda function execution role to be the new role

Assume the new role in the Lambda function when accessing the table

Store the access key and the secret key for the new role and use them when accessing the table

A video-hosting website has two types of members: those who pay a fee. and those who do not Each video upload places a message in Amazon SQS A fleet of Amazon EC2 instances polls Amazon SQS and processes each video The developer needs to ensure that the videos uploaded by the paying members are processed first How can the developer meet this requirement?

Use SQS to set priorities on individual items within a single queue: give the paying members' videos the highest priority.

Create two SQS queues: one for paying members, and one for non-paying members Poll the paying member queue first and then poll the non-paying member queue

Use SQS to set priorities on individual items within a single queue: give the paying members' videos the highest priority.

Use SQS to set priorities on individual items within a single queue and use Amazon SNS to encode the videos

Create two Amazon SNS topics: one for paying members and one for non-paying members Use SNS topic subscription priorities to differentiate between the two types of members.

A company has a web application In an Amazon Elastic Container Service (Amazon ECS) cluster running hundreds of secure services in AWS Fargate containers. The services are in target groups routed by an Application Load Balancer (ALB) Application users log in to the website anonymously, but they must be authenticated using any OpenID Connect protocol-compatible identity provider (IdP) to access the secure services Which authentication approach would meet these requirements with the LEAST amount of effort?

Configure the services to use Amazon Cognito.

Configure the ALB to use Amazon Cognito

Configure the services to use AWS Security Token Service (AWS STS) with the OpenID Connect IdP.

Configure the Amazon ECS cluster to use AWS Security Token Service (AWS STS) with the OpenID Connect IdP

A developer from AnyCompany's AWS account needs access to the Example Corp AWS account AnyCompany uses an identity provider that is compatible with OpenID Connect. What is the MOST secure way for Example Corp to allow developer access?

Create a user in the Example Corp account and provide the access keys

Create a cross-account role and call the AssumeRole API operation

Create a user in the Example Corp account and provide the access keys

Create a user in the Example Corp account and provide the credentials

Create a cross-account role and call the AssumeRoleWithWebldentity API operation

A company is developing a new web application in Python A developer must deploy the application using AWS Elastic Beanstalk from the AWS Management Console The developer creates an Elastic Beanstalk source bundle to upload using the console Which of the following are requirements when creating the source bundle? (Select TWO.)

The source bundle must not include a top-level directory.

The source bundle must be created as a single zip or war file

The source bundle must include the ebextensions.yaml file.

The source bundle must not include a top-level directory.

The source bundle must be compressed with any required dependencies in a top-level parent folder

The source bundle must be created as a single zip or war file

The source bundle must be uploaded into Amazon EFS.

Amazon DVA-C01 Practice Test 10 - Free Online Exam Prep & Questions

A developer converted an existing program to an AWS Lambda function in the console. The program runs properly on a local laptop, but shows an "Unable to import module" error when tested in the Lambda console Which of the following can fix the error?

Become a Premium Member for full access

Unlock Premium Member

Amazon DVA-C01 Practice Test 10

Question

Amazon DVA-C01 Practice Tests

Practice Tests