Question 1

A developer is writing a web application that must share secure documents with end users. The documents are stored in a private Amazon S3 bucket. The application must allow only authenticated users to download specific documents when requested, and only for a duration of 15 minutes. How can the developer meet these requirements?

Accepted Answer

Creating a presigned S3 URL with an expiration time of 15 minutes allows authenticated users to download specific documents securely for a limited time, meeting the requirement.

Question 2

A developer is creating an AWS Lambda function that generates a new file each time it runs. Each new file must be checked into an AWS CodeCommit repository hosted in the same AWS account. How should the developer accomplish this?

Accepted Answer

The answer of A developer is creating an AWS Lambda...

Question 3

An application needs to encrypt data that is written to Amazon S3 where the keys are managed in an on-premises data center, and the encryption is handled by S3. Which type of encryption should be used?

Accepted Answer

The answer of An application needs to encrypt data that...

Question 4

An ecommerce startup is preparing for an annual sales event. As the traffic to the company's application increases, the development team wants to be notified when the Amazon EC2 instance's CPU utilization exceeds 80%. Which solution will meet this requirement?

Accepted Answer

Amazon CloudWatch can monitor EC2 instances and create alarms based on metrics like CPU utilization. When the specified threshold is exceeded, it can send notifications via Amazon SNS.

Question 5

A developer is creating a role to access Amazon S3 buckets. To create the role, the developer uses the AWS CLI create-role command. Which policy should be added to allow the Amazon EC2 service to assume the role?

Accepted Answer

A trust policy is required to specify which AWS services or accounts are allowed to assume the role. In this case, the trust policy should allow the Amazon EC2 service to assume the role.

Question 6

A developer receives the following error message when trying to launch or terminate an Amazon EC2 instance using a boto3 script.  What should the developer do to correct this error message?

Accepted Answer

The answer of A developer receives the following error message...

Question 7

A global company has an application running on Amazon EC2 instances that serves image files from Amazon S3. User requests from the browser are causing high traffic, which results in degraded performance. Which optimization solution should a developer implement to increase application performance?

Accepted Answer

Using Amazon CloudFront as a content delivery network (CDN) can cache and distribute the image files closer to users, reducing latency and improving performance.

Question 8

A company stores all personally identifiable information (PII) in an Amazon DynamoDB table named PII in Account A. An application running on Amazon EC2 instances in Account B requires access to the PII table. An administrator in Account A created an IAM role named AccessPII with privileges to access the PII table, and made Account B a trusted entity. Which combination of additional steps should developers take to access the table? (Choose two.)

Accepted Answer

The answer of A company stores all personally identifiable information...

Question 9

A company has 25,000 employees and is growing. The company is creating an application that will be accessible to its employees only. A developer is using Amazon S3 to store images and Amazon RDS to store application data. The company requires that all employee information remain in the legacy Security Assertion Markup Language (SAML) employee directory only and is not interested in mirroring any employee information on AWS. How can the developer provide authorized access for the employees who will be using this application so each employee can access their own application data only?

Accepted Answer

Using an Amazon Cognito identity pool and federating with the SAML provider allows the company to authenticate users against their existing SAML directory without storing employee information on AWS. The IAM condition key with the cognito-identity.amazonaws.com:sub variable can be used to ensure that employees can only access their own data.

Question 10

A developer is refactoring a monolithic application. The application takes a POST request and performs several operations. Some of the operations are in parallel while others run sequentially. These operations have been refactored into individual AWS Lambda functions. The POST request will be processed by Amazon API Gateway. How should the developer invoke the Lambda functions in the same sequence using API Gateway?

Accepted Answer

AWS Step Functions state machine is designed to orchestrate multiple AWS Lambda functions, allowing for both sequential and parallel execution of tasks, which is suitable for the described scenario.

Question 11

A developer is updating an application deployed on AWS Elastic Beanstalk. The new version is incompatible with the old version. To successfully deploy the update, a full cutover to the new, updated version must be performed on all instances at one time, with the ability to roll back changes in case of a deployment failure in the new version. How can this be performed with the LEAST amount of downtime?

Accepted Answer

The answer of A developer is updating an application deployed...

Question 12

A company is developing a new web application in Python. A developer must deploy the application using AWS Elastic Beanstalk from the AWS Management Console. The developer creates an Elastic Beanstalk source bundle to upload using the console. Which of the following are requirements when creating the source bundle? (Choose two.)

Accepted Answer

The answer of A company is developing a new web...

Question 13

A development team wants to run their container workloads on Amazon ECS. Each application container needs to share data with another container to collect logs and metrics. What should the developer team do to meet these requirements?

Accepted Answer

The answer of A development team wants to run their...

Question 14

A company has developed a new serverless application using AWS Lambda functions that will be deployed using the AWS Serverless Application Model (AWS SAM) CLI. Which step should the developer complete prior to deploying the application?

Accepted Answer

The answer of A company has developed a new serverless...

Question 15

A developer wants to send multi-value headers to an AWS Lambda function that is registered as a target with an Application Load Balancer (ALB). What should the developer do to achieve this?

Accepted Answer

To send multi-value headers to a Lambda function through an ALB, the developer must enable the multi-value headers feature on the ALB.

Question 16

A developer is testing an application that invokes an AWS Lambda function asynchronously. During the testing phase, the Lambda function fails to process after two retries. How can the developer troubleshoot the failure?

Accepted Answer

Dead Letter Queues (DLQs) can be configured to capture failed events for further investigation, allowing the developer to analyze why the Lambda function failed.

Question 17

A developer is using AWS CodeDeploy to deploy an application running on Amazon EC2. The developer wants to change the file permissions for a specific deployment file. Which lifecycle event should a developer use to meet this requirement?

Accepted Answer

AfterInstall is the lifecycle event that allows a developer to change the file permissions for a specific deployment file.

Question 18

A company has an application where reading objects from Amazon S3 is based on the type of user. The user types are registered user and guest user. The company has 25,000 users and is growing. Information is pulled from an S3 bucket depending on the user type. Which approaches are recommended to provide access to both user types? (Choose two.)

Accepted Answer

The answer of A company has an application where reading...

Question 19

A Developer has implemented a Lambda function that needs to add new customers to an RDS database that is expected to run hundreds of times per hour. The Lambda function is configured to use 512MB of RAM and is based on the following pseudo code:  After testing the Lambda function, the Developer notices that the Lambda execution time is much longer than expected. What should the Developer do to improve performance?

Accepted Answer

The answer of A Developer has implemented a Lambda function...

Question 20

What are the steps to using the AWS CLI to launch a templatized serverless application?

Accepted Answer

The AWS CLI steps to launch a templatized serverless application involve using `aws cloudformation package` to package the application and `aws cloudformation deploy` to deploy it.

Exam 6: AWS Certified Developer Associate (DVA-C01)