Question 1

A Developer must encrypt a 100-GB object using AWS KMS. What is the BEST approach?
A) Make an Encrypt API call to encrypt the plaintext data as ciphertext using a customer master key (CMK) Make an Encrypt API call to encrypt the plaintext data as ciphertext using a customer master key (CMK)
B) Make an Encrypt API call to encrypt the plaintext data as ciphertext using a customer master key (CMK) with imported key material API call to encrypt the plaintext data as ciphertext using a customer master key (CMK) with imported key material
C) Make a GenerateDataKey API call that returns a plaintext key and an encrypted copy of a data key. Use a plaintext key to encrypt the data Make a GenerateDataKey API call that returns a plaintext key and an encrypted copy of a data key. Use a plaintext key to encrypt the data
D) Make a GenerateDataKeyWithoutPlaintext API call that returns an encrypted copy of a data key. Use an encrypted key to encrypt the data GenerateDataKeyWithoutPlaintext API call that returns an encrypted copy of a data key. Use an encrypted key to encrypt the data

Accepted Answer

The answer of A Developer must encrypt a 100-GB object...

Question 2

When developing an AWS Lambda function that processes Amazon Kinesis Data Streams, Administrators within the company must receive a notice that includes the processed data. How should the Developer write the function to send processed data to the Administrators?
A) Separate the Lambda handler from the core logic
B) Use Amazon CloudWatch Events to send the processed data
C) Publish the processed data to an Amazon SNS topic
D) Push the processed data to Amazon SQS

Accepted Answer

The answer of When developing an AWS Lambda function that...

Question 3

A Developer wants to build an application that will allow new users to register and create new user accounts. The application must also allow users with social media accounts to log in using their social media credentials. Which AWS service or feature can be used to meet these requirements?
A) AWS IAM
B) Amazon Cognito identity pools
C) Amazon Cognito user pools
D) AWS Directory Service

Accepted Answer

Amazon Cognito user pools provide user registration and sign-in services, including the ability to authenticate users through social identity providers like Facebook, Google, and others.

Question 4

A company is creating a REST service using an Amazon API Gateway with AWS Lambda integration. The service must run different versions for testing purposes. What would be the BEST way to accomplish this?
A) Use an X -Version header to denote which version is being called and pass that header to the Lambda function(s) Use an X -Version header to denote which version is being called and pass that header to the Lambda function(s)
B) Create an API Gateway Lambda authorizer to route API clients to the correct API version
C) Create an API Gateway resource policy to isolate versions and provide context to the Lambda function(s)
D) Deploy the API versions as unique stages with unique endpoints and use stage variables to provide further context

Accepted Answer

The answer of A company is creating a REST service...

Question 5

A Developer has an e-commerce API hosted on Amazon ECS. Variable and spiking demand on the application is causing order processing to take too long. The application processes Amazon SQS queues. The ApproximateNumberOfMessagesVisible metric spikes at very high values throughout the day, which cause Amazon CloudWatch alarm breaches. Other ECS metrics for the API containers are well within limits. What can the Developer implement to improve performance while keeping costs low?
A) Target tracking scaling policy
B) Docker Swarm
C) Service scheduler
D) Step scaling policy

Accepted Answer

A Step scaling policy can adjust the number of ECS tasks based on the SQS queue length, allowing the application to handle spikes in demand efficiently while keeping costs low by scaling down when demand decreases.

Question 6

A Developer is storing sensitive documents in Amazon S3 that will require encryption at rest. The encryption keys must be rotated annually, at least. What is the easiest way to achieve this?
A) Encrypt the data before sending it to Amazon S3
B) Import a custom key into AWS KMS with annual rotation enabled
C) Use AWS KMS with automatic key rotation
D) Export a key from AWS KMS to encrypt the data

Accepted Answer

The answer of A Developer is storing sensitive documents in...

Question 7

A Developer created a new AWS account and must create a scalable AWS Lambda function that meets the following requirements for concurrent execution: Average execution time of 100 seconds 50 requests per second Which step must be taken prior to deployment to prevent errors?
A) Implement dead-letter queues to capture invocation errors
B) Add an event source from Amazon API Gateway to the Lambda function
C) Implement error handling within the application code
D) Contact AWS Support to increase the concurrent execution limits

Accepted Answer

The answer of A Developer created a new AWS account...

Question 8

A company is running a Docker application on Amazon ECS. The application must scale based on user load in the last 15 seconds. How should a Developer instrument the code so that the requirement can be met?
A) Create a high-resolution custom Amazon CloudWatch metric for user activity data, then publish data every 30 seconds
B) Create a high-resolution custom Amazon CloudWatch metric for user activity data, then publish data every 5 seconds
C) Create a standard-resolution custom Amazon CloudWatch metric for user activity data, then publish data every 30 seconds
D) Create a standard-resolution custom Amazon CloudWatch metric for user activity data, then publish data every 5 seconds

Accepted Answer

High-resolution custom CloudWatch metrics can be published at a granularity of 1 second, allowing the application to scale based on user load in the last 15 seconds.

Question 9

A company needs a version control system for collaborative software development. Features of the system must include the following: Support for batches of changes across multiple files Parallel branching Version tracking Which AWS service will meet these requirements?
A) AWS CodePipeline
B) Amazon S3
C) AWS CodeBuild
D) AWS CodeCommit

Accepted Answer

AWS CodeCommit is a fully managed source control service that supports version tracking, parallel branching, and handling batches of changes across multiple files, making it suitable for collaborative software development.

Question 10

An application writes items to an Amazon DynamoDB table. As the application scales to thousands of instances, calls to the DynamoDB API generate occasional ThrottlingException errors. The application is coded in a language incompatible with the AWS SDK. How should the error be handled?
A) Add exponential backoff to the application logic
B) Use Amazon SQS as an API message bus
C) Pass API calls through Amazon API Gateway
D) Send the items to DynamoDB through Amazon Kinesis Data Firehose

Accepted Answer

Exponential backoff is a standard error-handling strategy for network applications in which the client increases the wait time between retries exponentially, which helps to reduce the load on the service and avoid further throttling.

Question 11

A company has a legacy application that was migrated to a fleet of Amazon EC2 instances. The application stores data in a MySQL database that is currently installed on a single EC2 instance. The company has decided to migrate the database from the EC2 instance to MySQL on Amazon EDS. What should the Developer do to update the application to support data storage in Amazon RDS?
A) Update the database connection parameters in the application to point to the new RDS instance.
B) Add a script to the EC2 instance that implements an AWS SDK for requesting database credentials.
C) Create a new EC2 instance with an IAM role that allows access to the new RDS database.
D) Create an AWS Lambda function that will route traffic, from the EC2 instance to the RDS database.

Accepted Answer

The developer should update the database connection parameters in the application to point to the new RDS instance, as this is necessary for the application to connect to the new database location.

Question 12

An application is being developed to audit several AWS accounts. The application will run in Account A and must access AWS services in Accounts B and C. What is the MOST secure way to allow the application to call AWS services in each audited account?
A) Configure cross-account roles in each audited account. Write code in Account A that assumes those roles
B) Use S3 cross-region replication to communicate among accounts, with Amazon S3 event notifications to trigger Lambda functions
C) Deploy an application in each audited account with its own role. Have Account A authenticate with the application
D) Create an IAM user with an access key in each audited account. Write code in Account A that uses those access keys

Accepted Answer

The answer of An application is being developed to audit...

Question 13

A company is developing a web application that allows its employees to upload a profile picture to a private Amazon S3 bucket. There is no size limit for the profile pictures, which should be displayed every time an employee logs in. For security reasons, the pictures cannot be publicly accessible. What is a viable long-term solution for this scenario?
A) Generate a presigned URL when a picture is uploaded. Save the URL in an Amazon DynamoDB table. Return the URL to the browser when the employee logs in.
B) Save the picture's S3 key in an Amazon DynamoDB table. Create an Amazon S3 VPC endpoint to allow the employees to download pictures once they log in.
C) Encode a picture using base64. Save the base64 string in an Amazon DB table. Allow the browser to retrieve the string and convert it to a picture.
D) Save the picture's S3 key in an Amazon DynamoDB table. Use a function to generate a presigned URL every time an employee logs in. Return the URL to the browser.

Accepted Answer

The answer of A company is developing a web application...

Question 14

A company runs an e-commerce website that uses Amazon DynamoDB where pricing for items is dynamically updated in real time. At any given time, multiple updates may occur simultaneously for pricing information on a particular product. This is causing the original editor's changes to be overwritten without a proper review process. Which DynamoDB write option should be selected to prevent this overwriting?
A) Concurrent writes
B) Conditional writes
C) Atomic writes
D) Batch writes

Accepted Answer

Conditional writes should be used to prevent overwriting changes, as they allow updates only if certain conditions are met, ensuring that changes are not made unless the current state matches the expected state.

Question 15

A Developer is building a web application that uses Amazon API Gateway to expose an AWS Lambda function to process requests from clients. During testing, the Developer notices that the API Gateway times out even though the Lambda function finishes under the set time limit. Which of the following API Gateway metrics in Amazon CloudWatch can help the Developer troubleshoot the issue? (Choose two.)
A) CacheHitCount
B) IntegrationLatency
C) CacheMissCount
D) Latency
E) Count

Accepted Answer

The answer of A Developer is building a web application...

Question 16

An Amazon RDS database instance is used by many applications to look up historical data. The query rate is relatively constant. When the historical data is updated each day, the resulting write traffic slows the read query performance and affects all application users. What can be done to eliminate the performance impact on application users?
A) Make sure Amazon RDS is Multi-AZ so it can better absorb increased traffic.
B) Create an RDS Read Replica and direct all read traffic to the replica.
C) Implement Amazon ElastiCache in front of Amazon RDS to buffer the write traffic.
D) Use Amazon DynamoDB instead of Amazon RDS to buffer the read traffic.

Accepted Answer

Creating an RDS Read Replica allows you to offload read traffic from the primary database, thus reducing the impact of write operations on read query performance.

Question 17

A company's website runs on an Amazon EC2 instance and uses Auto Scaling to scale the environment during peak times. Website users across the world are experiencing high latency due to static content on the EC2 instance, even during non-peak hours. Which combination of steps will resolve the latency issue? (Choose two.)
A) Double the Auto Scaling group's maximum number of servers.
B) Host the application code on AWS Lambda.
C) Scale vertically by resizing the EC2 instances.
D) Create an Amazon CloudFront distribution to cache the static content.
E) Store the application's static content in Amazon S3.

Accepted Answer

The answer of A company's website runs on an Amazon...

Question 18

A company needs to ingest terabytes of data each hour from thousands of sources that are delivered almost continually throughout the day. The volume of messages generated varies over the course of the day. Messages must be delivered in real time for fraud detection and live operational dashboards. Which approach will meet these requirements?
A) Send the messages to an Amazon SQS queue, then process the messages by using a fleet of Amazon EC2 instances
B) Use the Amazon S3 API to write messages to an S3 bucket, then process the messages by using Amazon Redshift
C) Use AWS Data Pipeline to automate the movement and transformation of data
D) Use Amazon Kinesis Data Streams with Kinesis Client Library to ingest and deliver messages

Accepted Answer

Amazon Kinesis Data Streams is designed for real-time data streaming and can handle large volumes of data from thousands of sources, making it suitable for scenarios requiring real-time processing like fraud detection and live dashboards.

Question 19

An application deployed on AWS Elastic Beanstalk experiences increased error rates during deployments of new application versions, resulting in service degradation for users. The Development team believes that this is because of the reduction in capacity during the deployment steps. The team would like to change the deployment policy configuration of the environment to an option that maintains full capacity during deployment while using the existing instances. Which deployment policy will meet these requirements while using the existing instances?
A) All at once
B) Rolling
C) Rolling with additional batch
D) Immutable

Accepted Answer

The answer of An application deployed on AWS Elastic Beanstalk...

Question 20

A Developer is going to deploy an AWS Lambda function that requires significant CPU utilization. Which approach will MINIMIZE the average runtime of the function?
A) Deploy the function into multiple AWS Regions.
B) Deploy the function into multiple Availability Zones.
C) Deploy the function using Lambda layers.
D) Deploy the function with its memory allocation set to the maximum amount.

Accepted Answer

The answer of A Developer is going to deploy an...

Exam 6: AWS Certified Developer Associate (DVA-C01)

A Developer must encrypt a 100-GB object using AWS KMS. What is the BEST approach?

When developing an AWS Lambda function that processes Amazon Kinesis Data Streams, Administrators within the company must receive a notice that includes the processed data. How should the Developer write the function to send processed data to the Administrators?

A Developer wants to build an application that will allow new users to register and create new user accounts. The application must also allow users with social media accounts to log in using their social media credentials. Which AWS service or feature can be used to meet these requirements?

A company is creating a REST service using an Amazon API Gateway with AWS Lambda integration. The service must run different versions for testing purposes. What would be the BEST way to accomplish this?

A Developer is storing sensitive documents in Amazon S3 that will require encryption at rest. The encryption keys must be rotated annually, at least. What is the easiest way to achieve this?

A Developer created a new AWS account and must create a scalable AWS Lambda function that meets the following requirements for concurrent execution: Average execution time of 100 seconds 50 requests per second Which step must be taken prior to deployment to prevent errors?

A company is running a Docker application on Amazon ECS. The application must scale based on user load in the last 15 seconds. How should a Developer instrument the code so that the requirement can be met?

A company needs a version control system for collaborative software development. Features of the system must include the following: Support for batches of changes across multiple files Parallel branching Version tracking Which AWS service will meet these requirements?

An application writes items to an Amazon DynamoDB table. As the application scales to thousands of instances, calls to the DynamoDB API generate occasional ThrottlingException errors. The application is coded in a language incompatible with the AWS SDK. How should the error be handled?

An application is being developed to audit several AWS accounts. The application will run in Account A and must access AWS services in Accounts B and C. What is the MOST secure way to allow the application to call AWS services in each audited account?

A Developer is going to deploy an AWS Lambda function that requires significant CPU utilization. Which approach will MINIMIZE the average runtime of the function?