A developer has written an Amazon kinesis Data streams application. As usage grows and traffic over time, the application is regularly receiving provisionedThroughputExceededException error messages. Which steps should the Developer take to resolve the error? (Select Two.)

Increase the delay between the GetRecords call and the PutRecords call.

Specify a shard iterator using the shardlterator parameter.

Use Auto scaling to scale the stream for better performance.

Increase the delay between the GetRecords call and the PutRecords call.

Increase the number of shards in the data stream.

Specify a shard iterator using the shardlterator parameter.

Implement exponential backoff on the GetRecords call and the PutRecords call.

A developer is creating as AWS lambda function that generates a new file each time it runs. Each new file must be checked into an AWS CodeCommit repository hosted in the same AWS account. How should the developer accomplish this?

Upload the new file to an Amazon S3 bucket. Create an AWS step Function to accept S3 events. In the step Function, add the new file to the repository.

When the Lambda function starts, use the Git CLI to Clone the repository. Check the new file into the cloned repository and push the change.

After the new file is created in Lambda, use cURL to invoke the CodeCommit API. Send the file to the repository.

Use an AWS SDK to instantiate a CodeCommit Client. Invoke the put _ file method to add the file to the repository.

Upload the new file to an Amazon S3 bucket. Create an AWS step Function to accept S3 events. In the step Function, add the new file to the repository.

An application is using single -node Amazon ElastiCache for Redis instance to improve read performance. Over time, demand for the application has increased exponentially, which has increased the load on the ElastiCache instance. It is critical that this cache layer handles the load and is resilient in case of node failures.What can the Developer do to address the load and resiliency requirements?

Migrate to a Memcached cluster.

Migrate to an Amazon ElastiCache service cluster.

Vertically scale the ElastiCache instance.

A company runs continuous integration/continuous delivery (CI/CD) pipeline for its application on AWS CodePipeline. A developer must write unit tests and run them as part of the pipelines before staging the artifacts for testing. How should the Developer incorporate unit tests as part of CI/CD pipeline?

Update the AWS codeBuild build specification to include a phase for running unit tests.

Create a separate codePipline pipline to run unit tests.

Update the AWS codeBuild build specification to include a phase for running unit tests.

Install the AWS CodeDeploy agent on an Amazon EC2 instance to run unit tests.

Create a testing branch in AWS CodeCommit to run unit tests.

A company has a REST application comprised of an Amazon API Gateway and several AWS Lambda functions. A developer is responding to an alert that the API Gateway’s HTTP response error rate has unexpectedly increased. The developer must determine must which Lambda function is malfunctioning.Which method would help the developer make this determination while minimizing delays?

Download the API Gateway and Lambda execution logs from Amazon CloudWatch Events, and perform line-by-line search against them.

Execute an Amazon Athena query against the API Gateway and Lambda execution logs.

Execute an Amazon CloudWatch Logs Insights query against the API Gateway and Lambda execution logs.

Download the API Gateway and Lambda execution logs from Amazon S3, and perform a line-byline search against them.

Download the API Gateway and Lambda execution logs from Amazon CloudWatch Events, and perform line-by-line search against them.

A developer is provided with an HTTPS clone URL for an AWS CodeCommit repository.What needs to be configured before cloning this repository?

Set up the Git credential helper to use an AWS credential profile, and enable the helper to send the path to the repositories.

Use AWS KMS to set up public and private keys for use with CodeCommit.

Set up the Git credential helper to use an AWS credential profile, and enable the helper to send the path to the repositories.

Generate encryption keys using AWS CloudHSM, then export the key for use with AWS CodeCommit.

Use AWS certificate manager to provision public and private SSL/TLS certificates.

A development team wants to immediately build and deploy an application whenever there is a change to the source code. Which approaches could be used to trigger the deployment? (Select TWO.)

Store the source code in an encrypted Amazon EBS volume Configure AWS CodePipeline to start whenever a file in the volume changes

Store the source code in an AWS CodeCommit repository Configure AWS CodePipeline to start whenever a change is committed to the repository.

Store the source code in an Amazon S3 bucket Configure AWS CodePipeline to start whenever a file in the bucket changes

Store the source code in an encrypted Amazon EBS volume Configure AWS CodePipeline to start whenever a file in the volume changes

Store the source code in an AWS CodeCommit repository Configure AWS CodePipeline to start whenever a change is committed to the repository.

Store the source code in an Amazon S3 bucket Configure AWS CodePipeline to start every 15 minutes

Store the source code in an Amazon EC2 instance's ephemeral storage. Configure the instance to start AWS CodePipeline whenever there are changes to the source code

A developer is writing a web application that must share secure documents with end users The documents are stored in a private Amazon S3 bucket The application must allow only authenticated users to download specific documents when requested, and only for a duration of 15 minutes How can the developer meet these requirements?

Create a presigned S3 URL using the AWS SDK with an expiration time of 15 minutes

Copy the documents to a separate S3 bucket that has a lifecycle policy for deletion after 15 minutes

Create a presigned S3 URL using the AWS SDK with an expiration time of 15 minutes

Use server-side encryption with AWS KMS managed keys (SSE-KMS) and download the documents using HTTPS

Modify the S3 bucket policy to only allow specific users to download the documents Revert the change after 15 minutes.

A developer has built an application running on AWS Lambda using AWS Serverless Application Model (AWS SAM). What is the correct order of execution to successfully deploy the application?

Deploy the SAM template from Amazon EBS.

1 Build the SAM template in Amazon EC22 Package the SAM template to Amazon EBS storage

Deploy the SAM template from Amazon EBS.

1 Build the SAM template locally2 Package the SAM template onto Amazon S3

Deploy the SAM template from Amazon S3.

1 Build the SAM template locally

Deploy the SAM template from Amazon S3.3 Package the SAM template for use

1 Build the SAM template locally2 Package the SAM template from AWS CodeCommit.3 Deploy the SAM template to CodeCommit

A company experienced partial downtime during the last deployment of a new application AWS Elastic Beanstalk split the environment's Amazon EC2 instances into batches and deployed a new version one batch at a time after taking them out of service. Therefore, full capacity was not maintained during deployment.The developer plans to release a new version of the application, and is looking for a policy that will maintain full capacity and minimize the impact of the failed deployment Which deployment policy should the developer use?

Rolling with an Additional Batch

An application ingests a large number of small messages and stores them in a database. The application uses AWS Lambd a. A development team is making changes to the application's processing logic. In testing, it is taking more than 15 minutes to process each message. The team is concerned the current backend may time out.Which changes should be made to the backend system to ensure each message is processed in the MOST scalable way1?

Add the messages to an Amazon SQS queue Set up an Amazon EC2 instance to poll the queue and process messages as they arrive.

Add the messages to an Amazon SQS queue. Set up Amazon EC2 instances in an Auto Scaling group to poll the queue and process the messages as they arrive.

Create a support ticket to increase the Lambda timeout to 60 minutes to allow for increased processing time

Change the application to directly insert the body of the message into an Amazon RDS database.

A company is developing a web application that allows its employees to upload a profile picture to a private Amazon S3 bucket There is no size limit for the profile pictures, which should be displayed every time an employee logs in. For security reasons, the pictures cannot be publicly accessible.What is a viable long-term solution for this scenario''

Save the picture's S3 key in an Amazon DynamoDB table Create an Amazon S3 VPC endpoint to allow the employees to download pictures once they log in.

Generate a presigned URL when a picture is uploaded Save the URL in an Amazon DynamoDB table Return the URL to the browser when the employee logs in

Save the picture's S3 key in an Amazon DynamoDB table Create an Amazon S3 VPC endpoint to allow the employees to download pictures once they log in.

Encode a picture using base64 Save the base64 string in an Amazon DynamoDB table Allow the browser to retrieve the string and convert it to a picture

Save the picture's S3 key in an Amazon DynamoDB table. Use a function to generate a presigned URL every time an employee logs in. Return the URL to the browser.

A developer is testing a Docker-based application that uses the AWS SDK to interact with Amazon DynamoDB In the local development environment, the application has used IAM access keys The application is now ready for deployment onto an ECS duster.How should the application authenticate with AWS services in production?

Configure an ECS task IAM role for the application to use

Refactor the application to call AWS STS AssumeRole based on an instance role

Configure AWS access key/secret access key environment variables with new credentials

Configure the credentials file with a new access key/secret access key

A company wants to migrate an imaging service to Amazon EC2 while following security best practices. The images are sourced and read from a non-public Amazon S3 bucket. What should a developer do to meet these requirements?

Create an IAM user with read-only permissions for the S3 bucket Temporarily store the user credentials in the Amazon EBS volume of the EC2 instance

Create an IAM user with read-only permissions for the S3 bucket. Temporarily store the user credentials in the user data of the EC2 instance.

Create an EC2 service role with read-only permissions for the S3 bucket Attach the role to the EC2 instance

Create an S3 service role with read-only permissions for the S3 bucket Attach the role to the EC2 instance

A developer wants to send multi-value headers to an AWS Lambda function that is registered as a target with an Application Load Balancer (ALB). What should the developer do to achieve this?

Enable the multi-value headers on the ALB

Place the Lambda function and target group in the same account

Send the request body to the Lambda function with a size less than 1 MB 0

Include the Base64 encoding status status code, status description, and headers in the Lambda function

Enable the multi-value headers on the ALB

An ecommerce startup is preparing for an annual sales event As the traffic to the company's application increases, the development team wants to be notified when the Amazon EC2 instance's CPU utilization exceeds 80%. Which solution will meet this requirement?

Create a cron job on the EC2 instance that executes the --describe-instance-information command on the host instance every 15 minutes and sends the results to an Amazon SNS topic

Create a custom Amazon CloudWatch alarm that sends a notification to an Amazon SNS topic when the CPU utilization exceeds 80%.

Create a custom AWS CloudTrail alarm that sends a notification to an Amazon SNS topic when the CPU utilization exceeds 80%

Create a cron job on the EC2 instance that executes the --describe-instance-information command on the host instance every 15 minutes and sends the results to an Amazon SNS topic

Create an AWS Lambda function that queries the AWS CloudTrail logs for the CPUUtihzation metric every 15 minutes and sends a notification to an Amazon SNS topic when the CPU utilization exceeds 80%

An application running on Amazon EC2 opens connections to an Amazon RDS SQL Server database The developer does not want to store the user name and password for the database in the code. The developer would also like to automatically rotate the credentials.What is the MOST secure way to store and access the database credentials?

Use AWS Secrets Manager to store the credentials. Retrieve the credentials from Secrets Manager as needed

Create an IAM role that has permissions to access the database Attach the role to the EC2 instance

Use AWS Secrets Manager to store the credentials. Retrieve the credentials from Secrets Manager as needed

Store the credentials in an encrypted text file in an Amazon S3 bucket Configure the EC2 instance's user data to download the credentials from Amazon S3 as the instance boots

Store the user name and password credentials directly in the source code. No further action is needed because the source code is stored in a private repository.

An application needs to encrypt data that is written to Amazon S3 where the keys are managed in an on-premises data center and the encryption is handled by S3. Which type of encryption should be used?

Use server-side encryption with Amazon S3-managed keys

Use server-side encryption with AWS KMS-managed keys.

Use client-side encryption with customer master keys

Use server-side encryption with customer-provided keys

A software engineer developed an AWS Lambda function in Node.js to do some CPU-intensive data processing. With the default settings, the Lambda function takes about 5 minutes to complete. Which approach should a developer take to increase the speed of completion''

Increase the available memory to the function.

Instead of using Node js. rewrite the Lambda function using Python

Instead of packaging the libraries in the ZIP file with the function move them to a Lambda layer and use the layer with the function.

Allocate the maximum available CPU units lo the function

Increase the available memory to the function.

A developer has written an Amazon Kinesis Data Streams application. As usage grows and traffic increases over time, the application is regularly receiving ProvisionedThroughputExceededException error messages Which steps should the developer take to resolve the error? (Select TWO.)

Increase the delay between the GetRecords call and the PutRecords call.

Increase the number of shards in the data stream

Use Auto Scaling to scale the stream for better performance

Increase the delay between the GetRecords call and the PutRecords call.

Increase the number of shards in the data stream

Specify a shard iterator using the Shardlterator parameter.

Implement exponential backoff on the GetRecords call and the PutRecords call.

A developer wants the ability to roll back to a previous version of an AWS Lambda function in the event of errors caused by a new deployment. How can the developer achieve this with MINIMAL impact on users?

Change the application to use an alias that points to the current version Deploy the new version of the code Update the alias to use the newly deployed version. If too many errors are encountered, point the alias back to the previous version

Change the application to use an alias that points to the current version Deploy the new version of the code. Update the alias to direct 10% of users to the newly deployed version. If too many errors are encountered, send 100% of traffic to the previous version

Do not make any changes to the application Deploy the new version of the code. If too many errors are encountered, point the application back to the previous version using the version number in the Amazon Resource Name (ARN)

Create three aliases: new, existing, and router Point the existing alias to the current version Have the router alias direct 100% of users to the existing alias Update the application to use the router alias Deploy the new version of the code Point the new alias to this version Update the router alias to direct 10% of users to the new alias If too many errors are encountered, send 100% of traffic to the existing alias

A development team is working on a mobile app that allows users to upload pictures to Amazon S3 The team expects the app will be used by hundreds of thousands of users during a single event simultaneously Once the pictures are uploaded, the backend service will scan and parse the pictures for inappropriate content.Which approach is the MOST resilient way to achieve this goal which also smooths out temporary volume spikes for the backend service?

Once a picture is uploaded to Amazon S3: publish the event to an Amazon SQS queue. Use the queue as an event source to trigger an AWS Lambda function In the Lambda function scan and parse the picture.

Develop an AWS Lambda function to check the upload folder in the S3 bucket. If new uploaded pictures are detected, the Lambda function will scan and parse them

Once a picture is uploaded to Amazon S3: publish the event to an Amazon SQS queue. Use the queue as an event source to trigger an AWS Lambda function In the Lambda function scan and parse the picture.

When the user uploads a picture, invoke an API hosted in Amazon API Gateway. The API will invoke an AWS Lambda function to scan and parse the picture

Create a state machine in AWS Step Functions to check the upload folder in the S3 bucket. If a new picture is detected, invoke an AWS Lambda function to scan and parse it.

A company requires that AWS Lambda functions written by developers log errors so system administrators can more effectively troubleshoot issues What should the developers implement to meet this need?

Create an Amazon CloudWatch Events event to trigger based on certain Lambda events.

Publish errors to a dedicated Amazon SQS queue

Create an Amazon CloudWatch Events event to trigger based on certain Lambda events.

Report errors through logging statements in Lambda function code.

Set up an Amazon SNS topic that sends logging statements upon failure

A development team wants to run their container workloads on Amazon ECS Each application container needs to share data with another container to collect logs and metrics. What should the development team do to meet these requirements?

Create one task definition Specify both containers in the definition Mount a shared volume between those two containers

Create two pod specifications Make one to include the application container and the other to include the other container Link the two pods together

Create two task definitions Make one to include the application container and the other to include the other container. Mount a shared volume between the two tasks

Create one task definition Specify both containers in the definition Mount a shared volume between those two containers

Create a single pod specification Include both containers in the specification Mount a persistent volume to both containers

A company has 25:000 employees and is growing The company is creating an application that will be accessible to its employees only A developer is using Amazon S3 to store images and Amazon RDS to store application dat a. The company requires that all employee information remain in the legacy Security Assertion Markup Language (SAML) employee directory only and is not interested in mirroring any employee information on AWS. How can the developer provide authorized access for the employees who will be using this application so each employee can access their own application data only?

Use Amazon Cognito user pools, federate with the SAML provider and use user pool groups with an IAM policy

Use Amazon VPC and keep all resources inside the VPC. and use a VPC link for the S3 bucket with the bucket policy.

Use Amazon Cognito user pools, federate with the SAML provider and use user pool groups with an IAM policy

Use an Amazon Cognito identity pool, federate with the SAML provider, and use an IAM condition key with a value for the cognito-identity.amazonaws com sub variable to grant access to the employees.

Create a unique IAM role for each employee and have each employee assume the role to access the application so they can access their personal data only.

A company has developed a new serverless application using AWS Lambda functions that will be deployed using the AWS Serverless Application Model (AWS SAM) CLI Which step should the developer complete prior to deploying the application?

Test the new AWS Lambda function by first tracing it in AWS X-Ray.

Compress the application to a .zip file and upload it into AWS Lambda

Test the new AWS Lambda function by first tracing it in AWS X-Ray.

Bundle the serverless application using a SAM package

Create the application environment using the eb create my-env command.

A developer has a legacy application that is hosted on-premises Other applications hosted on AWS depend on the on-premises application for proper functioning In case of any application errors, the developer wants to be able to use Amazon CloudWatch to monitor and troubleshoot all applications from one place.How can the developer accomplish this?

Download the CloudWatch agent to the on-premises server Configure the agent to use IAM user credentials with permissions for CloudWatch

Install an AWS SDK on the on-premises server to automatically send logs to CloudWatch .

Download the CloudWatch agent to the on-premises server Configure the agent to use IAM user credentials with permissions for CloudWatch

Upload log files from the on-premises server to Amazon S3 and have CloudWatch read the files

Upload log files from the on-premises server to an Amazon EC2 instance and have the instance forward the logs to CloudWatch.

A company stores all personally identifiable information (Pll) in an Amazon DynamoDB table named Pll in Account

An application running on Amazon EC2 instances in Account B requires access to the Pll table. An administrator in Account A created an IAM role named AccessPII with privileges to access the Pll table and made Account B a trusted entity.Which combination of additional steps should developers take to access the table1? (Select TWO )

Ask an administrator in Account A to allow the EC2 IAM role permission to assume the AccessPII role with predefined service control policies

An application running on Amazon EC2 instances in Account B requires access to the Pll table. An administrator in Account A created an IAM role named AccessPII with privileges to access the Pll table and made Account B a trusted entity.Which combination of additional steps should developers take to access the table1? (Select TWO )

Ask an administrator in Account B to allow the EC2 IAM role permission to assume the AccessPII role

Ask an administrator in Account B to allow the EC2 IAM role permission to assume the AccessPII role with predefined service control policies

Ask an administrator in Account A to allow the EC2 IAM role permission to assume the AccessPII role with predefined service control policies

Include the AssumeRole API in the application code logic to obtain credentials to access the Pll table.

Include the Gets ess ionToken API in the application code logic to obtain credentials to access the Pll table

A developer is working on an AWS Lambda function that accesses Amazon DynamoDB The Lambda function must retrieve an item and update some of its attributes. or create the item if it does not exist The Lambda function has access to the primary key.Which IAM permissions should the developer request for the Lambda function to achieve this functionality?

dynamcdb:GetRecords dynamcdb:Putltem dynamodb:updateTable

dynaracdb:DeleteItem dynamodb:GetItem dynamcdb:Putltem

dynamodb:Updateltem dynamcdb:Getltem dynamodb:DescribeTable

dynamcdb:GetRecords dynamcdb:Putltem dynamodb:updateTable

dynamodb:Updateltem dynamodb:Getltem dynamodb:Putltem

A developer added a new feature to an application running on an Amazon EC2 instance that uses Amazon SQS After deployment, the developer noticed a significant increase in Amazon SQS costs. When monitoring the Amazon SQS metrics on Amazon CloudWatch. the developer found that on average one message per minute is posted on this queue. What can be done to reduce Amazon SQS costs for this application?

Increase the Amazon SQS queue polling timeout

Scale down the Amazon SQS queue to the appropriate size for low traffic demand.

Configure push delivery via Amazon SNS instead of polling the Amazon SQS queue

Use an Amazon SQS first-in, first-out (FIFO) queue instead of a standard queue.

A development team is designing a mobile app that requires multi-factor authentication Which steps should be taken to achieve this? (Select TWO)

Use Amazon Cognito to create a user pool and create users in the user pool

Enable multi-factor authentication for the Amazon Cognito user pool

Use Amazon Cognito to create a user pool and create users in the user pool

Send multi-factor authentication text codes to users with the Amazon SNS Publish API call in the app code

Enable multi-factor authentication for the Amazon Cognito user pool

Use AWS IAM to create IAM users

Enable multi-factor authentication for the users created in AWS IAM.

A developer is writing an application in AWS Lambda To simplify testing and deployments, the developer needs the database connection string to be easily changed without modifying the Lambda code. How can this requirement be met?

Store the connection string as a secret in AWS Secrets Manager

Store the connection string in an IAM user account.

Store the connection string in AWS KMS

Store the connection string as a Lambda layer.

A developer is storing sensitive data generated by an application in Amazon S3. The developer wants to encrypt the data at rest. A company policy requires an audit trail of when the master key was used and by whom. Which encryption option will meet these requirements?

Server-side encryption with AWS KMS managed keys (SSE-KMS)

Server-side encryption with Amazon S3 managed keys (SSE-S3)

Server-side encryption with AWS KMS managed keys (SSE-KMS)

Server-side encryption with customer-provided keys (SSE-C)

Server-side encryption with self-managed keys

A company is launching an ecommerce website and will host the static data in Amazon S3. The company expects approximately 1 000 transactions per second (TPS) for GET and PUT requests in total. Logging must be enabled to track all requests and must be retained for auditing purposes.What is the MOST cost-effective solution?

Enable AWS CloudTrail logging for the S3 bucket-level action and create a lifecycle policy to expire the data in 90 days

Enable AWS CloudTrail logging for the S3 bucket-level action and create a lifecycle policy to move the data from the log bucket to Amazon S3 Glacier in 90 days

Enable S3 server access logging and create a lifecycle policy to expire the data in 90 days

Enable AWS CloudTrail logging for the S3 bucket-level action and create a lifecycle policy to expire the data in 90 days

Enable S3 server access logging and create a lifecycle policy to move the data to Amazon S3 Glacier in 90 days.

A company is developing an application that will be accessed through the Amazon API Gateway REST API Registered users should be the only ones who can access certain resources of this API. The token being used should expire automatically and needs to be refreshed periodically.How can a developer meet these requirements'?

Create an Amazon Cognito user pool, configure the Cognito Authorizer in API Gateway, and use the identity or access token

Create an Amazon Cognito identity pool, configure the Amazon Cognito Authorizer in API Gateway, and use the temporary credentials generated by the identity pool

Create and maintain a database record for each user with a corresponding token and use an AWS Lambda authorizer m API Gateway

Create an Amazon Cognito user pool, configure the Cognito Authorizer in API Gateway, and use the identity or access token

Create an IAM user for each API user, attach an invoke permissions policy to the API. and use an IAM authorizer in API Gateway.

A company has an application where reading objects from Amazon S3 is based on the type of user The user types are registered user and guest user The company has 25.000 users and is growing Information is pulled from an S3 bucket depending on the user type.Which approaches are recommended to provide access to both user types? (Select TWO.)

Use S3 bucket policies to restrict read access to specific IAM users

Use Amazon Cognito to provide access using authenticated and unauthenticated roles

Provide a different access key and secret access key in the application code for registered users and guest users to provide read access to the objects

Use S3 bucket policies to restrict read access to specific IAM users

Use Amazon Cognito to provide access using authenticated and unauthenticated roles

Create a new IAM user for each user and grant read access.

Use the AWS IAM service and let the application assume the different roles using the AWS Security Token Service (AWS STS) AssumeRole action depending on the type of user and provide read access to Amazon S3 using the assumed role

Amazon DVA-C01 Practice Test 8 - Free Online Exam Prep & Questions

A developer is building an application that needs to store date in Amazon S3. Management requires that the data be encrypted before is it sent to Amazon S3 for storage. The encryption keys need to be managed by the security team. Which approach should the developer take to meet these requirements?

Become a Premium Member for full access

Unlock Premium Member

Amazon DVA-C01 Practice Test 8

Question

Amazon DVA-C01 Practice Tests

Practice Tests