Question 1

A company caches session information for a web application in an Amazon DynamoDB table. The company wants an automated way to delete old items from the table. What is the simplest way to do this?
A) Write a script that deletes old records; schedule the scripts as a cron job on an Amazon EC2 instance.
B) Add an attribute with the expiration time; enable the Time To Live feature based on that attribute.
C) Each day, create a new table to hold session data; delete the previous day's table.
D) Add an attribute with the expiration time; name the attribute ItemExpiration . Add an attribute with the expiration time; name the attribute ItemExpiration .

Accepted Answer

The Time To Live (TTL) feature in DynamoDB allows you to define an expiration time for items, after which they are automatically deleted, simplifying the management of old data.

Question 2

A Development team is working on a case management solution that allows medical claims to be processed and reviewed. Users log in to provide information related to their medical and financial situations. As part of the application, sensitive documents such as medical records, medical imaging, bank statements, and receipts are uploaded to Amazon S3. All documents must be securely transmitted and stored. All access to the documents must be recorded for auditing. What is the MOST secure approach?
A) Use S3 default encryption using Advanced Encryption Standard-256 (AES-256) on the destination bucket.
B) Use Amazon Cognito for authorization and authentication to ensure the security of the application and documents.
C) Use AWS Lambda to encrypt and decrypt objects as they are placed into the S3 bucket.
D) Use client-side encryption/decryption with Amazon S3 and AWS KMS.

Accepted Answer

Client-side encryption/decryption with Amazon S3 and AWS KMS ensures that data is encrypted before it is uploaded to S3 and decrypted after it is downloaded, providing end-to-end encryption. This approach also allows for detailed access logging and auditing through AWS CloudTrail.

Question 3

A company has an internet-facing application that uses Web Identity Federation to obtain a temporary credential from AWS Security Token Service (AWS STS). The app then uses the token to access AWS services. Review the following response:  Based on the response displayed, what permissions are associated with the call from the application?
A) Permissions associated with the role AROACLKWSDQRAOEXAMPLE:app1 Permissions associated with the role AROACLKWSDQRAOEXAMPLE:app1
B) Permissions associated with the default role used when the AWS service was built
C) Permission associated with the IAM principal that owns the AccessKeyID ASgeIAIOSFODNN7EXAMPLE Permission associated with the IAM principal that owns the AccessKeyID ASgeIAIOSFODNN7EXAMPLE
D) Permissions associated with the account that owns the AWS service

Accepted Answer

The answer of A company has an internet-facing application that...

Question 4

Queries to an Amazon DynamoDB table are consuming a large amount of read capacity. The table has a significant number of large attributes. The application does not need all of the attribute data. How can DynamoDB costs be minimized while maximizing application performance?
A) Batch all the writes, and perform the write operations when no or few reads are being performed.
B) Create a global secondary index with a minimum set of projected attributes.
C) Implement exponential backoffs in the application.
D) Load balance the reads to the table using an Application Load Balancer.

Accepted Answer

The answer of Queries to an Amazon DynamoDB table are...

Question 5

A company has an AWS CloudFormation template that is stored as a single file. The template is able to launch and create a full infrastructure stack. Which best practice would increase the maintainability of the template?
A) Use nested stacks for common template patterns.
B) Embed credentials to prevent typos.
C) Remove mappings to decrease the number of variables.
D) Use AWS::Include to reference publicly-hosted template files. Use AWS::Include to reference publicly-hosted template files.

Accepted Answer

Using nested stacks for common template patterns increases maintainability by allowing you to break down the template into smaller, reusable components, making it easier to manage and update.

Question 6

An organization is storing large files in Amazon S3, and is writing a web application to display meta-data about the files to end-users. Based on the metadata a user selects an object to download. The organization needs a mechanism to index the files and provide single-digit millisecond latency retrieval for the metadata. What AWS service should be used to accomplish this?
A) Amazon DynamoDB
B) Amazon EC2
C) AWS Lambda
D) Amazon RDS

Accepted Answer

Amazon DynamoDB is a NoSQL database service that provides single-digit millisecond latency retrieval, making it suitable for indexing and retrieving metadata quickly.

Question 7

Where can PortMapping be defined when launching containers in Amazon ECS?
A) Security groups
B) Amazon Elastic Container Registry (Amazon ECR)
C) Container agent
D) Task definition

Accepted Answer

PortMapping is defined in the task definition when launching containers in Amazon ECS. The task definition specifies how the containers should be configured, including the ports that should be mapped between the host and the container.

Question 8

The upload of a 15 GB object to Amazon S3 fails. The error message reads: "Your proposed upload exceeds the maximum allowed object size." What technique will allow the Developer to upload this object?
A) Upload the object using the multi-part upload API.
B) Upload the object over an AWS Direct Connect connection.
C) Contact AWS Support to increase the object size limit.
D) Upload the object to another AWS region.

Accepted Answer

Amazon S3 supports objects up to 5 TB in size, but for objects larger than 5 GB, the multi-part upload API must be used. This allows the object to be uploaded in parts, which can then be assembled into a single object.

Question 9

A company needs a fully-managed source control service that will work in AWS. The service must ensure that revision control synchronizes multiple distributed repositories by exchanging sets of changes peer-to-peer. All users need to work productively even when not connected to a network. Which source control service should be used?
A) Subversion
B) AWS CodeBuild
C) AWS CodeCommit
D) AWS CodeStar

Accepted Answer

AWS CodeCommit is a fully-managed source control service that supports Git repositories, allowing users to work offline and synchronize changes when connected.

Question 10

A company needs a new REST API that can return information about the contents of an Amazon S3 bucket, such as a count of the objects stored in it. The company has decided that the new API should be written as a microservice using AWS Lambda and Amazon API Gateway. How should the Developer ensure that the microservice has the necessary access to the Amazon S3 bucket, while adhering to security best practices?
A) Create an IAM user that has permissions to access the Amazon S3 bucket, and store the IAM user credentials in the Lambda function source code.
B) Create an IAM role that has permissions to access the Amazon S3 bucket and assign it to the Lambda function as its execution role.
C) Create an Amazon S3 bucket policy that specifies the Lambda service as its principal and assign it to the Amazon S3 bucket.
D) Create an IAM role, attach the AmazonS3FullAccess managed policy to it, and assign the role to the Lambda function as its execution role.

Accepted Answer

The answer of A company needs a new REST API...

Question 11

A Developer is writing an imaging micro service on AWS Lambda. The service is dependent on several libraries that are not available in the Lambda runtime environment. Which strategy should the Developer follow to create the Lambda deployment package?
A) Create a ZIP file with the source code and all dependent libraries.
B) Create a ZIP file with the source code and a script that installs the dependent libraries at runtime.
C) Create a ZIP file with the source code. Stage the dependent libraries on an Amazon S3 bucket indicated by the Lambda environment variable LD_LIBRARY_PATH Create a ZIP file with the source code. Stage the dependent libraries on an Amazon S3 bucket indicated by the Lambda environment variable LD_LIBRARY_PATH
D) Create a ZIP file with the source code and a buildspec.yaml file that installs the dependent libraries on AWS Lambda.

Accepted Answer

The answer of A Developer is writing an imaging micro...

Question 12

What does an Amazon SQS delay queue accomplish?
A) Messages are hidden for a configurable amount of time when they are first added to the queue.
B) Messages are hidden for a configurable amount of time after they are consumed from the queue.
C) The consumer can poll the queue for a configurable amount of time before retrieving a message.
D) Message cannot be deleted for a configurable amount of time after they are consumed from the queue.

Accepted Answer

A delay queue in Amazon SQS allows messages to be hidden for a configurable amount of time when they are first added to the queue, delaying their availability for processing.

Question 13

A Developer has developed a web application and wants to deploy it quickly on a Tomcat server on AWS. The Developer wants to avoid having to manage the underlying infrastructure. What is the easiest way to deploy the application, based on these requirements?
A) AWS CloudFormation
B) AWS Elastic Beanstalk
C) Amazon S3
D) AWS CodePipeline

Accepted Answer

AWS Elastic Beanstalk is the easiest way to deploy applications on AWS without managing the underlying infrastructure, as it automatically handles the deployment, from capacity provisioning, load balancing, and auto-scaling to application health monitoring.

Question 14

An application running on Amazon EC2 instances must access objects within an Amazon S3 bucket that are encrypted using server-side encryption using AWS KMS encryption keys (SSE-KMS). The application must have access to the customer master key (CMK) to decrypt the objects. Which combination of steps will grant the application access? (Choose two.)
A) Write an S3 bucket policy that grants the bucket access to the key.
B) Grant access to the key in the IAM EC2 role attached to the application's EC2 instances.
C) Write a key policy that enables IAM policies to grant access to the key.
D) Grant access to the key in the S3 bucket's ACL
E) Create a Systems Manager parameter that exposes the KMS key to the EC2 instances.

Accepted Answer

The answer of An application running on Amazon EC2 instances...

Question 15

An application is expected to process many files. Each file takes four minutes to process each AWS Lambda invocation. The Lambda function does not return any important data. What is the fastest way to process all the files?
A) First split the files to make them smaller, then process with synchronous RequestResponse Lambda invocations. First split the files to make them smaller, then process with synchronous RequestResponse Lambda invocations.
B) Make synchronous RequestResponse Lambda invocations and process the files one by one. Make synchronous Lambda invocations and process the files one by one.
C) Make asynchronous Event Lambda invocations and process the files in parallel. Make asynchronous Event Lambda invocations and process the files in parallel.
D) First join all the files, then process it all at once with an asynchronous Event Lambda invocation. First join all the files, then process it all at once with an asynchronous Lambda invocation.

Accepted Answer

Asynchronous Event Lambda invocations allow for parallel processing, which speeds up the processing of multiple files simultaneously.

Question 16

A stock market monitoring application uses Amazon Kinesis for data ingestion. During simulated tests of peak data rates, the Kinesis stream cannot keep up with the incoming data. What step will allow Kinesis to accommodate the traffic during peak hours?
A) Install the Kinesis Producer Library (KPL) for ingesting data into the stream.
B) Reduce the data retention period to allow for more data ingestion using DecreaseStreamRetentionPeriod . Reduce the data retention period to allow for more data ingestion using DecreaseStreamRetentionPeriod .
C) Increase the shard count of the stream using UpdateShardCount . Increase the shard count of the stream using UpdateShardCount
D) Ingest multiple records into the stream in a single call using PutRecords . Ingest multiple records into the stream in a single call using PutRecords

Accepted Answer

The answer of A stock market monitoring application uses Amazon...

Question 17

A Developer wants to encrypt new objects that are being uploaded to an Amazon S3 bucket by an application. There must be an audit trail of who has used the key during this process. There should be no change to the performance of the application. Which type of encryption meets these requirements?
A) Server-side encryption using S3-managed keys
B) Server-side encryption with AWS KMS-managed keys
C) Client-side encryption with a client-side symmetric master key
D) Client-side encryption with AWS KMS-managed keys

Accepted Answer

The answer of A Developer wants to encrypt new objects...

Question 18

A Developer is writing a serverless application that requires that an AWS Lambda function be invoked every 10 minutes. What is an automated and serverless way to trigger the function?
A) Deploy an Amazon EC2 instance based on Linux, and edit its /etc/crontab file by adding a command to periodically invoke the Lambda function.
B) Configure an environment variable named PERIOD for the Lambda function. Set the value to 600.
C) Create an Amazon CloudWatch Events rule that triggers on a regular schedule to invoke the Lambda function.
D) Create an Amazon SNS topic that has a subscription to the Lambda function with a 600-second timer.

Accepted Answer

Amazon CloudWatch Events (now known as Amazon EventBridge) can be used to create a rule that triggers on a regular schedule, such as every 10 minutes, to invoke an AWS Lambda function. This is a serverless and automated solution.

Question 19

A Developer is creating a Lambda function that will generate and export a file. The function requires 100 MB of temporary storage for temporary files while executing. These files will not be needed after the function is complete. How can the Developer MOST efficiently handle the temporary files?
A) Store the files in EBS and delete the files at the end of the Lambda function.
B) Copy the files to EFS and delete the files at the end of the Lambda function.
C) Store the files in the /tmp directory and delete the files at the end of the Lambda function.
D) Copy the files to an S3 bucket with a lifecycle policy to delete the files.

Accepted Answer

The /tmp directory in AWS Lambda provides 512 MB of temporary storage that is automatically cleaned up after the function execution, making it efficient for temporary files.

Question 20

An application uses Amazon Kinesis Data Streams to ingest and process large streams of data records in real time. Amazon EC2 instances consume and process the data from the shards of the Kinesis data stream by using Amazon Kinesis Client Library (KCL). The application handles the failure scenarios and does not require standby workers. The application reports that a specific shard is receiving more data than expected. To adapt to the changes in the rate of data flow, the "hot" shard is resharded. Assuming that the initial number of shards in the Kinesis data stream is 4, and after resharding the number of shards increased to 6, what is the maximum number of EC2 instances that can be deployed to process data from all the shards?
A) 12
B) 6
C) 4
D) 1

Accepted Answer

The answer of An application uses Amazon Kinesis Data Streams...

Exam 6: AWS Certified Developer Associate (DVA-C01)

A company caches session information for a web application in an Amazon DynamoDB table. The company wants an automated way to delete old items from the table. What is the simplest way to do this?

Queries to an Amazon DynamoDB table are consuming a large amount of read capacity. The table has a significant number of large attributes. The application does not need all of the attribute data. How can DynamoDB costs be minimized while maximizing application performance?

A company has an AWS CloudFormation template that is stored as a single file. The template is able to launch and create a full infrastructure stack. Which best practice would increase the maintainability of the template?

Where can PortMapping be defined when launching containers in Amazon ECS?

The upload of a 15 GB object to Amazon S3 fails. The error message reads: "Your proposed upload exceeds the maximum allowed object size." What technique will allow the Developer to upload this object?

A Developer is writing an imaging micro service on AWS Lambda. The service is dependent on several libraries that are not available in the Lambda runtime environment. Which strategy should the Developer follow to create the Lambda deployment package?

What does an Amazon SQS delay queue accomplish?

A Developer has developed a web application and wants to deploy it quickly on a Tomcat server on AWS. The Developer wants to avoid having to manage the underlying infrastructure. What is the easiest way to deploy the application, based on these requirements?

An application is expected to process many files. Each file takes four minutes to process each AWS Lambda invocation. The Lambda function does not return any important data. What is the fastest way to process all the files?

A stock market monitoring application uses Amazon Kinesis for data ingestion. During simulated tests of peak data rates, the Kinesis stream cannot keep up with the incoming data. What step will allow Kinesis to accommodate the traffic during peak hours?

A Developer wants to encrypt new objects that are being uploaded to an Amazon S3 bucket by an application. There must be an audit trail of who has used the key during this process. There should be no change to the performance of the application. Which type of encryption meets these requirements?

A Developer is writing a serverless application that requires that an AWS Lambda function be invoked every 10 minutes. What is an automated and serverless way to trigger the function?

A Developer is creating a Lambda function that will generate and export a file. The function requires 100 MB of temporary storage for temporary files while executing. These files will not be needed after the function is complete. How can the Developer MOST efficiently handle the temporary files?