A Developer is writing a mobile application that allows users to view images from an S3 bucket. The users must be able to log in with their Amazon login, as well as Facebook® and/or Google® accounts. How can the Developer provide this authentication functionality?

Use Amazon Cognito with web identity federation.

Use Amazon Cognito with SAML-based identity federation.

Use AWS IAM Access/Secret keys in the application code to allow Get* on the S3 bucket.

Use AWS STS AssumeRole in the application code and assume a role with Get* permissions on the S3 bucket.

A company maintains a REST service using Amazon API Gateway and the API Gateway native API key validation. The company recently launched a new registration page, which allows users to sign up for the service. The registration page creates a new API key using CreateApiKey and sends the new key to the user. When the user attempts to call the API using this key, the user receives a 403 Forbidden error. Existing users are unaffected and can still call the API. What code updates will grant these new users access to the API?

The createUsagePlanKey method must be called to associate the newly created API key with the correct usage plan.

The createDeployment method must be called so the API can be redeployed to include the newly created API key.

The updateAuthorizer method must be called to update the API’s authorizer to include the newly created API key.

The importApiKeys method must be called to import all newly created API keys into the current stage of the API.

The createUsagePlanKey method must be called to associate the newly created API key with the correct usage plan.

A company has an application that logs all information to Amazon S3. Whenever there is a new log file, an AWS Lambda function is invoked to process the log files. The code works, gathering all of the necessary information. However, when checking the Lambda function logs, duplicate entries with the same request ID are found.What is causing the duplicate entries?

The Lambda function failed, and the Lambda service retired the invocation with a delay.

The S3 bucket name was specified incorrectly.

The Lambda function failed, and the Lambda service retired the invocation with a delay.

There was an S3 outage, which caused duplicate entries of the sale log file.

The application stopped intermittently and then resumed.

A nightly batch job loads 1 million new records into a DynamoDB table. The records are only needed for one hour, and the table needs to be empty by the next night’s batch job. Which is the MOST efficient and cost-effective method to provide an empty table?

Create and then delete the table after the task has completed.

Use DeleteItem using a ConditionExpression.

Use BatchWriteItem to empty all of the rows.

With a recursive function that scans and calls out DeleteItem.

Create and then delete the table after the task has completed.

A Developer wants access to make the log data of an application running on an EC2 instance available to systems administrators. Which of the following enables monitoring of this metric in Amazon CloudWatch?

Install the Amazon CloudWatch Logs agent on the EC2 instance that the application is running on.

Retrieve the log data from CloudWatch using the GetMetricData API call

Retrieve the log data from AWS CloudTrail using the LookupEvents API call.

Launch a new EC2 instance, configure Amazon CloudWatch Events, and then install the application.

Install the Amazon CloudWatch Logs agent on the EC2 instance that the application is running on.

A Development team has pushed out 10 applications running on several Amazon EC2 instances. The Operations team is asking for a graphical representation of one key performance metric for each application. These metrics should be available on one screen for easy monitoring.Which steps should the Developer take to accomplish this using Amazon CloudWatch?

Create a custom namespace with a unique metric name for each application.

Create a custom dimension with a unique metric name for each application.

Create a custom event with a unique metric name for each application.

Create a custom alarm with a unique metric name for each application.

A Developer is creating a serverless website with content that includes HTML files, images, videos, and JavaScript (client-side scripts). Which combination of services should the Developer use to create the website?

Amazon S3 and Amazon CloudFront

Amazon EC2 and Amazon ElastiCache

AWS Lambda and Amazon API Gateway

A company uses Amazon DynamoDB for managing and tracking orders. The DynamoDB table is partitioned based on the order date. The company receives a huge increase in orders during a sales event, causing DynamoDB writes to throttle, and the consumed throughput is far below the provisioned throughput.According to AWS best practices, how can this issue be resolved with MINIMAL costs?

Add a random number suffix to the partition key values.

Create a new DynamoDB table for every order date.

Increase the read and write capacity units of the DynamoDB table.

Add a random number suffix to the partition key values.

Add a global secondary index to the DynamoDB table.

A company has three different environments: Development, QA, and Production. The company wants to deploy its code first in the Development environment, then QA, and then Production. Which AWS service can be used to meet this requirement?

Use AWS CodeDeploy to create multiple deployment groups.

Use AWS CodeCommit to create multiple repositories to deploy the application.

Use AWS CodeBuild to create, configure, and deploy multiple build application projects.

Use AWS Data Pipeline to create multiple data pipeline provisions to deploy the application.

Use AWS CodeDeploy to create multiple deployment groups.

A company is creating an application that will require users to access AWS services and allow them to reset their own passwords. Which of the following would allow the company to manage users and authorization while allowing users to reset their own passwords?

Amazon Cognito user pools and identity pools

Amazon Cognito identify pools and AWS STS

Amazon Cognito identity pools and AWS IAM

Amazon Cognito user pools and AWS KMS

Amazon Cognito user pools and identity pools

An application that runs on an Amazon EC2 instance needs to access and make API calls to multiple AWS services. What is the MOST secure way to provide access to the AWS services with MINIMAL management overhead?

Use AWS KMS to store and retrieve credentials.

Use AWS root user to make requests to the application.

Store and retrieve credentials from AWS CodeCommit.

In a multi-container Docker environment in AWS Elastic Beanstalk, what is required to configure container instances in the environment?

A Docker in an application package

A company has a multi-tiered web application on AWS. During a recent spike in traffic, one of the primary relational databases on Amazon RDS could not serve all the traffic. Some read queries for repeatedly accessed items failed, so users received error messages.What can be done to minimize the impact on database read queries MOST efficiently during future traffic spikes?

Use Amazon ElastiCache in front of the primary database to cache data.

Use Amazon S3 to cache database query results.

Use Amazon RDS as a custom origin for Amazon CloudFront.

Use local storage and memory on Amazon EC2 instances to cache data.

Use Amazon ElastiCache in front of the primary database to cache data.

A company maintains an application responsible for processing several thousand external callbacks each day. The company’s System administrators want to know how many callbacks are being received on a rolling basis, and they want this data available for 10 days. The company also wants the ability to issue automated alerts if the number of callbacks exceeds the defined thresholds. What is the MOST cost-effective way to address the need to track and alert on these statistics?

Push callback data to Amazon CloudWatch as a custom metric and use the CloudWatch alerting mechanisms to alert System Administrators.

Push callback data to an Amazon RDS database that can be queried to show historical data and to alert on exceeded thresholds.

Push callback data to AWS X-Ray and use AWS Lambda to query, display, and alert on exceeded thresholds.

Push callback data to Amazon Kinesis Data Streams and invoke an AWS Lambda function that stores data in Amazon DynamoDB and sends the required alerts.

Push callback data to Amazon CloudWatch as a custom metric and use the CloudWatch alerting mechanisms to alert System Administrators.

Developer is creating an AWS Lambda function to process a stream of data from an Amazon Kinesis Data Stream. When the Lambda function parses the data and encounters a missing field, it exits the function with an error. The function is generating duplicate records from the Kinesis stream. When the Developer looks at the stream output without the Lambda function, there are no duplicate records. What is the reason for the duplicates?

The Lambda function did not handle the error, and the Lambda service attempted to reprocess the data.

The Lambda function did not advance the Kinesis stream pointer to the next record after the error.

The Lambda event source used asynchronous invocation, resulting in duplicate records.

The Lambda function did not handle the error, and the Lambda service attempted to reprocess the data.

The Lambda function is not keeping up with the amount of data coming from the stream.

A Developer must build an application that uses Amazon DynamoDB. The requirements state that items being stored in the DynamoDB table will be 7KB in size and that reads must be strongly consistent. The maximum read rate is 3 items per second, and the maximum write rate is 10 items per second.How should the Developer size the DynamoDB table to meet these requirements?

Read: 6 read capacity unitsWrite: 70 write capacity units

Read: 3 read capacity unitsWrite: 70 write capacity units

Read: 6 read capacity unitsWrite: 70 write capacity units

Read: 6 read capacity unitsWrite: 10 write capacity units

Read: 3 read capacity unitsWrite: 10 write capacity units

An AWS Lambda function must read data from an Amazon RDS MySQL database in a VPC and also reach a public endpoint over the internet to get additional data. Which steps must be taken to allow the function to access both the RDS resource and the public endpoint? (Select TWO.)

Modify the default configuration for the Lambda function to associate it with an Amazon VPC private subnet.

Modify the default network access control list to allow outbound traffic.

Modify the default configuration of the Lambda function to associate it with a VPC public subnet.

Add an environmental variable to the Lambda function to allow outbound internet access.

A Developer writes an AWS Lambda function and uploads the code in a .ZIP file to Amazon S3. The Developer makes changes to the code and uploads a new .ZIP file to Amazon S3. However, Lambda executes the earlier code. How can the Developer fix this in the LEAST disruptive way?

Call the update-function-code API.

Create another Lambda function and specify the new .ZIP file.

Call the update-function-code API.

Remove the earlier .ZIP file first, then add the new .ZIP file.

A company is developing an application that will run on several Amazon EC2 instances in an Auto Scaling group and can access a database running on Amazon EC2. The application needs to store secrets required to connect to the database. The application must allow for periodic secret rotation, and there should be no changes to the application when a secret changes. What is the SAFEST way to meet these requirements?

Use AWS Systems Manager Parameter Store with the SecureString data type to store secrets.

Associate an IAM role to the EC2 instance where the application is running with permission to access the database.

Use AWS Systems Manager Parameter Store with the SecureString data type to store secrets.

Configure the application to store secrets in Amazon S3 object metadata.

Hard code the database secrets in the application code itself.

A Developer needs to design an application running on AWS that will be used to consume Amazon SQS messages that range from 1 KB up to 1GB in size. How should the Amazon SQS messages be managed?

Use Amazon S3 and the Amazon SQS Extended Client Library for Java.

Use Amazon S3 and the Amazon SQS CLI.

Use Amazon S3 and the Amazon SQS Extended Client Library for Java.

Use Amazon EBS and the Amazon SQS CLI.

Use Amazon EFS and the Amazon SQS CLI.

A Developer has been asked to make changes to the source code of an AWS Lambda function. The function is managed using an AWS CloudFormation template. The template is configured to load the source code from an Amazon S3 bucket. The Developer manually created a .ZIP file deployment package containing the changes and put the file into the correct location on Amazon S3. When the function is invoked, the code changes have not been applied. What step is required to update the function with the changes?

Update the CloudFormation stack with the correct values for the function code properties S3Bucket, S3Key, or S3ObjectVersion.

Delete the .ZIP file on S3, and re-upload by using a different object key name.

Update the CloudFormation stack with the correct values for the function code properties S3Bucket, S3Key, or S3ObjectVersion.

Ensure that the function source code is base64-encoded before uploading the deployment package to S3.

Modify the execution role of the Lambda function to allow S3 access permission to the deployment package .ZIP file.

A Developer is designing a new application that uses Amazon S3. To satisfy compliance requirements, the Developer must encrypt the data at rest. How can the Developer accomplish this?

Turn on S3 default encryption for the S3 bucket.

Use s3:x-amz-acl as a condition in the S3 bucket policy.

Use Amazon RDS with default encryption.

Use aws:SecureTransport as a condition in the S3 bucket policy.

Turn on S3 default encryption for the S3 bucket.

A Developer wants to enable AWS X-Ray for a secure application that runs in an Amazon ECS environment. What combination of steps will enable X-Ray? (Select THREE.)

Create a Docker image that runs the X-Ray daemon.

Add instrumentation to the application code for X-Ray.

Configure and use an IAM role for tasks.

Create a Docker image that runs the X-Ray daemon.

Add instrumentation to the application code for X-Ray.

Install the X-Ray daemon on the underlying EC2 instance.

Configure and use an IAM EC2 instance role.

Register the application with X-Ray.

Configure and use an IAM role for tasks.

A Developer must deploy a new AWS Lambda function using an AWS CloudFormation template.Which procedures will deploy a Lambda function? (Select TWO.)

Create an AWS::Lambda::Function resource in the template, then write the code directly inside the CloudFormation template.

Upload a .ZIP file containing the function code to Amazon S3, then add a reference to it in an AWS::Lambda::Function resource in the template.

Upload the code to an AWS CodeCommit repository, then add a reference to it in an AWS::Lambda::Function resource in the template.

Create an AWS::Lambda::Function resource in the template, then write the code directly inside the CloudFormation template.

Upload a .ZIP file containing the function code to Amazon S3, then add a reference to it in an AWS::Lambda::Function resource in the template.

Upload a .ZIP file to AWS CloudFormation containing the function code, then add a reference to it in an AWS::Lambda::Function resource in the template.

Upload the function code to a private Git repository, then add a reference to it in an AWS::Lambda::Function resource in the template.

A Developer has published an update to an application that is served to a global user base using Amazon CloudFront. After deploying the application, users are not able to see the updated changes. How can the Developer resolve this issue?

Invalidate all the application objects from the edge caches.

Remove the origin from the CloudFront configuration and add it again.

Disable forwarding of query strings and request headers from the CloudFront distribution configuration.

Invalidate all the application objects from the edge caches.

Disable the CloudFront distribution and enable it again to update all the edge locations.

A Developer wants to find a list of items in a global secondary index from an Amazon DynamoDB table. Which DynamoDB API call can the Developer use in order to consume the LEAST number of read capacity units?

Query operation using eventually-consistent reads

Scan operation using eventually-consistent reads

Query operation using strongly-consistent reads

Query operation using eventually-consistent reads

Scan operation using strongly-consistent reads

An AWS Lambda function generates a 3MB JSON file and then uploads it to an Amazon S3 bucket daily. The file contains sensitive information, so the Developer must ensure that it is encrypted before uploading to the bucket. Which of the following modifications should the Developer make to ensure that the data is encrypted before uploading it to the bucket?

Use the GenerateDateKey API, then use that data key to encrypt the file in the Lambda function code.

Use the default AWS KMS customer master key for S3 in the Lambda function code.

Use the S3 managed key and call the GenerateDataKey API to encrypt the file.

Use the GenerateDateKey API, then use that data key to encrypt the file in the Lambda function code.

Use a custom KMS customer master key created for S3 in the Lambda function code.

A company needs to secure its existing website running behind an Elastic Load Balancer. The website’s Amazon EC2 instances are CPU-constrained. What should be done to secure the website while not increasing the CPU load on the EC2 web servers? (Select TWO.)

Configure SSL certificates on an Elastic Load Balancer.

Configure an Elastic Load Balancer with SSL termination.

Configure an Elastic Load Balancer with SSL pass-through.

Configure SSL certificates on an Elastic Load Balancer.

Configure an Elastic Load Balancer with a Loadable Storage System.

Install SSL certificates on the EC2 instances.

Configure an Elastic Load Balancer with SSL termination.

How should custom libraries be utilized in AWS Lambda?

Modify the function runtime to include the necessary library.

Host the library on Amazon S3 and reference to it from the Lambda function.

Install the library locally and upload a ZIP file of the Lambda function.

Import the necessary Lambda blueprint when creating the function.

Modify the function runtime to include the necessary library.

In a move toward using microservices, a company’s Management team has asked all Development teams to build their services so that API requests depend only on that service’s data store. One team is building a Payments service which has its own database; the service needs data that originates in the Accounts database. Both are using Amazon DynamoDB. What approach will result in the simplest, decoupled, and reliable method to get near-real time updates from the Accounts database?

Use Amazon DynamoDB Streams to deliver all changes from the Accounts database to the Payments database.

Use Amazon Glue to perform frequent ETL updates from the Accounts database to the Payments database.

Use Amazon ElastiCache in Payments, with the cache updated by triggers in the Accounts database.

Use Amazon Kinesis Data Firehouse to deliver all changes from the Accounts database to the Payments database.

Use Amazon DynamoDB Streams to deliver all changes from the Accounts database to the Payments database.

A Developer is designing a fault-tolerant environment where client sessions will be saved.How can the Developer ensure that no sessions are lost if an Amazon EC2 instance fails?

Use Amazon DynamoDB to perform scalable session hadling.

Use sticky sessions with an Elastic Load Balancer target group.

Use Amazon SQS to save session data.

Use Amazon DynamoDB to perform scalable session hadling.

Use Elastic Load Balancer connection draining to stop sending requests to failing instances.

A Developer is writing an imaging micro service on AWS Lambd a. The service is dependent on several libraries that are not available in the Lambda runtime environment. Which strategy should the Developer follow to create the Lambda deployment package?

Create a ZIP file with the source code and a script that installs the dependent libraries at runtime.

Create a ZIP file with the source code and all dependent libraries.

Create a ZIP file with the source code and a script that installs the dependent libraries at runtime.

Create a ZIP file with the source code. Stage the dependent libraries on an Amazon S3 bucket indicated by the Lambda environment variable LD_LIBRARY_PATH

Create a ZIP file with the source code and a buildspec.yaml file that installs the dependent libraries on AWS Lambda.

A Developer is writing a serverless application that requires that an AWS Lambda function be invoked every 10 minutes. What is an automated and serverless way to trigger the function?

Create an Amazon CloudWatch Events rule that triggers on a regular schedule to invoke the Lambda function.

Deploy an Amazon EC2 instance based on Linux, and edit its /etc/crontab file by adding a command to periodically invoke the Lambda function.

Configure an environment variable named PERIOD for the Lambda function. Set the value to 600.

Create an Amazon CloudWatch Events rule that triggers on a regular schedule to invoke the Lambda function.

Create an Amazon SNS topic that has a subscription to the Lambda function with a 600-second timer.

An application running on Amazon EC2 instances must access objects within an Amaon S3 busket that are encrypted using server-side encryption using AWS KMS encryption keys (SSE-KMS). The application must have access to the customer master key (CMK) to decrypt the objects.Which combination of steps will grant the application access? (Select TWO.)

Grant access to the key in the IAM EC2 role attached to the application’s EC2 instances.

Write a key policy that enables IAM policies to grant access to the key.

Write an S3 bucket policy that grants the bucket access to the key.

Grant access to the key in the IAM EC2 role attached to the application’s EC2 instances.

Write a key policy that enables IAM policies to grant access to the key.

Grant access to the key in the S3 bucket’s ACL

Create a Systems Manager parameter that exposes the KMS key to the EC2 instances.

Amazon DVA-C01 Practice Test 4 - Free Online Exam Prep & Questions

A Developer has created a Lambda function and is finding that the function is taking longer to complete than expected. After some debugging, the Developer has discovered that increasing compute capacity would improve performance. How can the Developer increase the Lambda compute resources?

Become a Premium Member for full access

Unlock Premium Member

Amazon DVA-C01 Practice Test 4

Question

Amazon DVA-C01 Practice Tests

Practice Tests