A Developer is receiving HTTP 400: ThrottlingException errors intermittently when calling theAmazonCloudWatch API. When a call fails, no data is retrieved. What best practice should first be applied to address this issue?

Retry the call with exponential backoff

Contact AWS Support for a limit increase.

Use the AWS CLI to get the metrics

Analyze the applications and remove the API call

Retry the call with exponential backoff

A Developer is testing a Docker-based application that uses the AWS SDK to interact with Amazon DynamoDB. In the local development environment, the application has used IAM access keys. The application is now ready for deployment onto an ECS cluster.How should the application authenticate with AWS services in production?

Configure an ECS task IAM role for the application to use

Refactor the application to call AWS STS AssumeRole based on an instance role

Configure AWS access key/secret access key environment variables with new credentials

Configure the credentials file with a new access key/secret access key

A Developer created a Lambda function for a web application backend. When testing the Lambda function from the AWS Lambda console, the Developer can see that the function is being executed, but there is no log data being generated in Amazon CloudWatch Logs, even after several minutes.What could cause this situation?

The execution role for the Lambda function is missing permissions to write log data to the CloudWatch Logs.

The Lambda function does not have any explicit log statements for the log data to send it to CloudWatch Logs.

The Lambda function is missing CloudWatch Logs as a source trigger to send log data.

The execution role for the Lambda function is missing permissions to write log data to the CloudWatch Logs.

The Lambda function is missing a target CloudWatch Log group.

An application has hundreds of users. Each user may use multiple devices to access the application. The Developer wants to assign unique identifiers to these users regardless of the device they use.Which of the following methods should be used to obtain unique identifiers?

Implement developer-authenticated identities by using Amazon Cognito, and get credentials for these identities.

Create a user table in Amazon DynamoDB as key-value pairs of users and their devices. Use these keys as unique identifiers.

Use IAM-generated access key IDs for the users as the unique identifier, but do not store secret keys.

Implement developer-authenticated identities by using Amazon Cognito, and get credentials for these identities.

Assign IAM users and roles to the users. Use the unique IAM resource ID as the unique identifier.

An application is designed to use Amazon SQS to manage messages from many independent senders. Each sender’s messages must be processed in the order they are received. Which SQS feature should be implemented by the Developer?

Configure each sender with a unique MessageGroupId

Enable MessageDeduplicationIds on the SQS queue

Configure each message with unique MessageGroupIds.

Enable ContentBasedDeduplication on the SQS queue

A deployment package uses the AWS CLI to copy files into any S3 bucket in the account, using access keys stored in environment variables. The package is running on EC2 instances, and the instances have been modified to run with an assumed IAM role and a more restrictive policy that allows access to only one bucket.After the change, the Developer logs into the host and still has the ability to write into all of the S3 buckets in that account. What is the MOST likely cause of this situation?

An IAM managed policy is being used on the IAM role

An IAM inline policy is being used on the IAM role

An IAM managed policy is being used on the IAM role

The AWS CLI is corrupt and needs to be reinstalled

The AWS credential provider looks for instance profile credentials last

A Developer is writing transactions into a DynamoDB table called “SystemUpdates” that has 5 write capacity units. Which option has the highest read throughput?

Strongly consistent reads of 5 read capacity units reading items that are 4 KB in size

Eventually consistent reads of 5 read capacity units reading items that are 4 KB in size

Strongly consistent reads of 5 read capacity units reading items that are 4 KB in size

Eventually consistent reads of 15 read capacity units reading items that are 1 KB in size

Strongly consistent reads of 15 read capacity units reading items that are 1 KB in size

Where should an Elastic Beanstalk configuration file named healthcheckur1.config be placed in the application source bundle?

In healthcheckur1.config.ebextension under root

During non-peak hours, a Developer wants to minimize the execution time of a full Amazon DynamoDB table scan without affecting normal workloads. The workloads average half of the strongly consistent read capacity units during non-peak hours.How would the Developer optimize this scan?

Use parallel scans while limiting the rate

Increase read capacity units during the scan operation

Change consistency to eventually consistent during the scan operation

A Developer is creating a Lambda function and will be using external libraries that are not included in the standard Lambda libraries. What action would minimize the Lambda compute time consumed?

Install the external libraries in Lambda to be available to all Lambda functions.

Install the dependencies and external libraries at the beginning of the Lambda function.

Create a Lambda deployment package that includes the external libraries.

Copy the external libraries to Amazon S3, and reference the external libraries to the S3 location.

Install the external libraries in Lambda to be available to all Lambda functions.

An application under development is required to store hundreds of video files. The data must be encrypted within the application prior to storage, with a unique key for each video file. How should the Developer code the application?

Use the KMS GenerateDataKey API to get a data key. Encrypt the data with the data key. Store the encrypted data key and data.

Use the KMS Encrypt API to encrypt the data. Store the encrypted data key and data.

Use a cryptography library to generate an encryption key for the application. Use the encryption key to encrypt the data. Store the encrypted data.

Use the KMS GenerateDataKey API to get a data key. Encrypt the data with the data key. Store the encrypted data key and data.

Upload the data to an S3 bucket using server side-encryption with an AWS KMS key.

A Developer is creating an application that needs to locate the public IPv4 address of the Amazon EC2 instance on which it runs. How can the application locate this information?

Get the instance metadata by retrieving http://169.254.169.254/latest/metadata/.

Get the instance user data by retrieving http://169.254.169.254/latest/userdata/.

Get the application to run IFCONFIG to get the public IP address.

Get the application to run IPCONFIG to get the public IP address.

The Lambda function below is being called through an API using Amazon API Gateway. The average execution time for the Lambda function is about 1 second. The pseudocode for the Lambda function is as shown in the exhibit. What two actions can be taken to improve the performance of this Lambda function without increasing the cost of the solution? (Select two.)

Package only the modules the Lambda function requires

Move the initialization of the variable Amazon RDS connection outside of the handler function

Package only the modules the Lambda function requires

Use Amazon DynamoDB instead of Amazon RDS

Move the initialization of the variable Amazon RDS connection outside of the handler function

Implement custom database connection pooling with the Lambda function

Implement local caching of Amazon RDS data so Lambda can re-use the cache

An application will ingest data at a very high throughput from many sources and must store the data in an Amazon S3 bucket. Which service would BEST accomplish this task?

Amazon S3 Acceleration Transfer

A Developer has setup an Amazon Kinesis Stream with 4 shards to ingest a maximum of 2500 records per second. A Lambda function has been configured to process these records. In which order will these records be processed?

Lambda will receive each record in the exact order it was placed into the shard following a FIFO (first-in, first-out) method. There is no guarantee of order across shards.

Lambda will receive each record in the reverse order it was placed into the stream following a LIFO (last-in, first-out) method

Lambda will receive each record in the exact order it was placed into the stream following a FIFO (first-in, first-out) method.

Lambda will receive each record in the exact order it was placed into the shard following a FIFO (first-in, first-out) method. There is no guarantee of order across shards.

The Developer can select FIFO, (first-in, first-out), LIFO (last-in, last-out), random, or request specific record using the getRecords API.

A static website is hosted in an Amazon S3 bucket. Several HTML pages on the site use JavaScript to download images from another Amazon S3 bucket. These images are not displayed when users browse the site. What is the possible cause for the issue?

Cross Origin Resource Sharing must be enabled on the Amazon S3 bucket.

The referenced Amazon S3 bucket is in another region.

The images must be stored in the same Amazon S3 bucket.

Port 80 must be opened on the security group in which the Amazon S3 bucket is located.

Cross Origin Resource Sharing must be enabled on the Amazon S3 bucket.

Amazon S3 has the following structure: S3://BUCKET/FOLDERNAME/FILENAME.zip Which S3 best practice would optimize performance with thousands of PUT request each second to a single bucket?

Prefix folder names with random hex hashes; for example, s3://BUCKET/23a6-FOLDERNAME/ FILENAME.zip

Prefix folder names with user id; for example, s3://BUCKET/2013-FOLDERNAME/FILENAME.zip

Prefix file names with timestamps; for example, s3://BUCKET/FOLDERNAME/2013-26-05-15-00- 00- FILENAME.zip

Prefix file names with random hex hashes; for example, s3://BUCKET/FOLDERNAME/23a6- FILENAME.zip

Prefix folder names with random hex hashes; for example, s3://BUCKET/23a6-FOLDERNAME/ FILENAME.zip

For a deployment using AWS CodeDeploy, what is the run order of the hooks for in-place deployments?

Application Stop -> Before Install -> After Install -> Application Start

Before Install -> Application Stop -> Application Start -> After Install

Application Stop -> Before Install -> After Install -> Application Start

Before Install -> Application Stop -> Validate Service -> Application Start

Application Stop -> Before Install -> Validate Service -> Application Start

A Developer is developing an application that manages financial transactions. To improve security, multi-factor authentication (MFA) will be required as part of the login protocol. What services can the Developer use to meet these requirements?

Amazon DynamoDB to store MFA session data, and Amazon SNS to send MFA codes

A game stores user game data in an Amazon DynamoDB table. Individual users should not have access to other users’ game dat a. How can this be accomplished?

Restrict access to specific items based on certain primary key values.

Encrypt the game data with individual user keys.

Restrict access to specific items based on certain primary key values.

Stage data in SQS queues to inject metadata before accessing DynamoDB.

Read records from DynamoDB and discard irrelevant data client-side.

A company developed a set of APIs that are being served through the Amazon API Gateway. The API calls need to be authenticated based on OpenID identity providers such as Amazon or Facebook. The APIs should allow access based on a custom authorization model.Which is the simplest and MOST secure design to use to build an authentication and authorization model for the APIs?

Use Amazon Cognito user pools and a custom authorizer to authenticate and authorize users based on JSON Web Tokens.

Build a OpenID token broker with Amazon and Facebook. Users will authenticate with these identify providers and pass the JSON Web Token to the API to authenticate each API call.

Store user credentials in Amazon DynamoDB and have the application retrieve temporary credentials from AWS STS. Make API calls by passing user credentials to the APIs for authentication and authorization.

Use Amazon RDS to store user credentials and pass them to the APIs for authentications and authorization.

A supplier is writing a new RESTful API for customers to query the status of orders. The customers requested the following API endpoint. http://www.supplierdomain.com/status/customerID Which of the following application designs meet the requirements? (Select two.)

Elastic Load Balancing; Amazon EC2

Amazon ElastiCache; Amazon Elacticsearch Service

A legacy service has an XML-based SOAP interface. The Developer wants to expose the functionality of the service to external clients with the Amazon API Gateway. Which technique will accomplish this?

Create a RESTful API with the API Gateway; transform the incoming JSON into a valid XML message for the SOAP interface using mapping templates.

Create a RESTful API with the API Gateway; pass the incoming JSON to the SOAP interface through an Application Load Balancer.

Create a RESTful API with the API Gateway; pass the incoming XML to the SOAP interface through an Application Load Balancer.

Create a RESTful API with the API Gateway; transform the incoming XML into a valid message for the SOAP interface using mapping templates.

A company is using AWS CodeBuild to compile a website from source code stored in AWS CodeCommit. A recent change to the source code has resulted in the CodeBuild project being unable to successfully compile the website. How should the Developer identify the cause of the failures?

Modify the buildspec.yml file to include steps to send the output of build commands to Amazon CloudWatch.

Use a custom Docker image that includes the AWS X-Ray agent in the AWS CodeBuild project configuration.

Check the build logs of the failed phase in the last build attempt in the AWS CodeBuild project build history.

Manually re-run the build process on a local machine so that the output can be visualized.

A web application is using Amazon Kinesis Streams for clickstream data that may not be consumed for up to 12 hours. How can the Developer implement encryption at rest for data within the Kinesis Streams?

Enable server-side encryption in Kinesis Streams

Enable SSL connections to Kinesis

Use Amazon Kinesis Consumer Library

Encrypt the data once it is at rest with a Lambda function

Enable server-side encryption in Kinesis Streams

A Developer wants to use AWS X-Ray to trace a user request end-to-end throughput the software stack. The Developer made the necessary changes in the application tested it, and found that the application is able to send the traces to AWS X-Ray. However, when the application is deployed to an EC2 instance, the traces are not available.Which of the following could create this situation? (Select two.)

The X-Ray daemon is not installed on the EC2 instance.

The instance role does not have “xray:PutTraceSegments” and “xray:PutTelemetryRecords” permissions.

The traces are reaching X-Ray, but the Developer does not have access to view the records.

The X-Ray daemon is not installed on the EC2 instance.

The X-Ray endpoint specified in the application configuration is incorrect.

The instance role does not have “xray:BatchGetTraces” and “xray:GetTraceGraph” permissions.

The instance role does not have “xray:PutTraceSegments” and “xray:PutTelemetryRecords” permissions.

A Developer executed a AWS CLI command and received the error shown below: What action should the Developer perform to make this error human-readable?

Use the AWS STS decode-authorization-message API to decode the message.

Make a call to AWS KMS to decode the message.

Use the AWS STS decode-authorization-message API to decode the message.

Use an open source decoding library to decode the message.

Use the AWS IAM decode-authorization-message API to decode this message.

A company is using Amazon API Gateway to manage access to a set of microservices implemented as AWS Lambda functions. Following a bug report, the company makes a minor breaking change to one of the APIs. In order to avoid impacting existing clients when the new API is deployed, the company wants to allow clients six months to migrate from v1 to v2. Which approach should the Developer use to handle this change?

Use API Gateway to deploy a new stage named v2 to the API and provide users with its URL.

Update the underlying Lambda function and provide clients with the new Lambda invocation URL.

Use API Gateway to automatically propagate the change to clients, specifying 180 days in the phased deployment parameter.

Use API Gateway to deploy a new stage named v2 to the API and provide users with its URL.

Update the underlying Lambda function, create an Amazon CloudFront distribution with the updated Lambda function as its origin.

A company has written a Java AWS Lambda function to be triggered whenever a user uploads an image to an Amazon S3 bucket. The function converts the original image to several different formats and then copies the resulting images to another Amazon S3 bucket.The Developers find that no images are being copied to the second Amazon S3 bucket. They have tested the code on an Amazon EC2 instance with 1GB of RAM, and it takes an average of 500 seconds to complete. What is the MOST likely cause of the problem?

Lambda functions have a maximum execution limit of 300 seconds, therefore the function is not completing.

The Lambda function has insufficient memory and needs to be increased to 1 GB to match the Amazon EC2 instance

Files need to be copied to the same Amazon S3 bucket for processing, so the second bucket needs to be deleted.

Lambda functions have a maximum execution limit of 300 seconds, therefore the function is not completing.

There is a problem with the Java runtime for Lambda, and the function needs to be converted to node.js.

An application stops working with the following error: The specified bucket does not exist. Where is the BEST place to start the root cause analysis?

Check AWS CloudTrail for a DeleteBucket event.

Check the Elastic Load Balancer logs for DeleteBucket requests.

Check the application logs in Amazon CloudWatch Logs for Amazon S3 DeleteBucket errors.

Check AWS X-Ray for Amazon S3 DeleteBucket alarms.

Check AWS CloudTrail for a DeleteBucket event.

An organization must store thousands of sensitive audio and video files in an Amazon S3 bucket.Organizational security policies require that all data written to this bucket be encrypted.How can compliance with this policy be ensured?

Configure an Amazon S3 bucket policy to prevent the upload of objects that do not contain the xamzserver- side-encryption header.

Use AWS Lambda to send notifications to the security team if unencrypted objects are pun in the bucket.

Configure an Amazon S3 bucket policy to prevent the upload of objects that do not contain the xamzserver- side-encryption header.

Create an Amazon CloudWatch event rule to verify that all objects stored in the Amazon S3 bucket are encrypted.

Configure an Amazon S3 bucket policy to prevent the upload of objects that contain the x-amzserver- sideencryption header.

An application overwrites an object in Amazon S3, and then immediately reads the same object. Why would the application sometimes retrieve the old version of the object?

S3 overwrite PUTS are eventually consistent, so the application may read the old object.

The application needs to add extra metadata to label the latest version when uploading to Amazon S3.

All S3 PUTS are eventually consistent, so the application may read the old object.

The application needs to explicitly specify latest version when retrieving the object.

The release process workflow of an application requires a manual approval before the code is deployed into the production environment. What is the BEST way to achieve this using AWS CodePipeline?

Use an approval action in a stage

Use multiple pipelines to allow approval

Use an approval action in a stage

Disable the stage transition to allow manual approval

Disable a stage just prior the deployment stage

A Developer created configuration specifications for an AWS Elastic Beanstalk application in a file named healthcheckurl.yaml in the .ebextensions/directory of their application source bundle. The file contains the following: After the application launches, the health check is not being run on the correct path, event though it is valid. What can be done to correct this configuration file?

Rename the file to a .config extension.

Convert the file to JSON format.

Rename the file to a .config extension.

Change the configuration section from options_settings to resources.

Change the namespace of the option settings to a cusom namespace.

A company is migrating a single-server, on-premises web application to AWS. The company intends to use multiple servers behind an Elastic Load Balancer (ELB) to balance the load, and will also store session data in memory on the web server. The company does not want to lose that session data if a server fails or goes offline, and it wants to minimize user’s downtime. Where should the company move session data to MOST effectively reduce downtime and make users’ session data more fault tolerant?

An Amazon ElastiCache for Redis cluster

The web server’s primary disk

An Amazon EC2 instance dedicated to session data

A Developer is building a mobile application and needs any update to user profile data to be pushed to all devices accessing the specific identity. The Developer does not want to manage a back end to maintain the user profile data. What is the MOST efficient way for the Developer to achieve these requirements using Amazon Cognito?

Use Cognito federated identities.

An e-commerce site allows returning users to log in to display customized web pages. The workflow is shown in the image below: An application is running on EC2 instances. Amazon RDS is used for the database that stores user accounts and preferences. The website freezes or is slow to load while waiting for the login step to complete. The remaining components of the site are well-optimized.Which of the following techniques will resolve this issue? (Select Two.)

Use Amazon ElastiCache for MemCached to cache user data.

Call the database asynchronously so the code can continue executing.

Implement the user login page as an asynchronous Lambda function.

Use Amazon ElastiCache for MemCached to cache user data.

Use Amazon Application Load Balancer to load balance the traffic to the website.

Call the database asynchronously so the code can continue executing.

Batch login requests from hundreds of users together as a single read request to the database.

Amazon DVA-C01 Practice Test 3 - Free Online Exam Prep & Questions

A company is migrating its on-premises database to Amazon RDS for MySQL. The company has readheavy workloads, and wants to make sure it re-factors its code to achieve optimum read performance for its queries. How can this objective be met?

Add database retries to effectively use RDS with vertical scaling

Use RDS with multi-AZ deployment

Add a connection string to use an RDS read replica for read queries

Add a connection string to use a read replica on an EC2 instance.

Comment (0)

Amazon DVA-C01 Practice Test 3

Question

Amazon DVA-C01 Practice Tests

Practice Tests