Question 1

Given the source code for an AWS Lambda function in the local store.py containing a handler function called get_store and the following AWS CloudFormation template:  What should be done to prepare the template so that it can be deployed using the AWS CLI command aws cloudformation deploy ?
A) Use aws cloudformation compile to base64 encode and embed the source file into a modified CloudFormation template. Use aws cloudformation compile to base64 encode and embed the source file into a modified CloudFormation template.
B) Use aws cloudformation package to upload the source code to an Amazon S3 bucket and produce a modified CloudFormation template. aws cloudformation package to upload the source code to an Amazon S3 bucket and produce a modified CloudFormation template.
C) Use aws lambda zip to package the source file together with the CloudFormation template and deploy the resulting zip archive. aws lambda zip to package the source file together with the CloudFormation template and deploy the resulting zip archive.
D) Use aws serverless create-package to embed the source file directly into the existing CloudFormation template. aws serverless create-package to embed the source file directly into the existing CloudFormation template.

Accepted Answer

The answer of Given the source code for an AWS...

Question 2

A company has written a Java AWS Lambda function to be triggered whenever a user uploads an image to an Amazon S3 bucket. The function converts the original image to several different formats and then copies the resulting images to another Amazon S3 bucket. The Developers find that no images are being copied to the second Amazon S3 bucket. They have tested the code on an Amazon EC2 instance with 1GB of RAM, and it takes an average of 500 seconds to complete. What is the MOST likely cause of the problem?
A) The Lambda function has insufficient memory and needs to be increased to 1 GB to match the Amazon EC2 instance
B) Files need to be copied to the same Amazon S3 bucket for processing, so the second bucket needs to be deleted.
C) Lambda functions have a maximum execution limit of 300 seconds, therefore the function is not completing.
D) There is a problem with the Java runtime for Lambda, and the function needs to be converted to node.js.

Accepted Answer

Lambda functions have a maximum execution time limit of 300 seconds, so the function is likely timing out before it can complete its task.

Question 3

A web application is using Amazon Kinesis Streams for clickstream data that may not be consumed for up to 12 hours. How can the Developer implement encryption at rest for data within the Kinesis Streams?
A) Enable SSL connections to Kinesis
B) Use Amazon Kinesis Consumer Library
C) Encrypt the data once it is at rest with a Lambda function
D) Enable server-side encryption in Kinesis Streams

Accepted Answer

Amazon Kinesis Streams supports server-side encryption, which encrypts data at rest using AWS Key Management Service (KMS). This is the appropriate method to ensure data is encrypted while stored in Kinesis Streams.

Question 4

A legacy service has an XML-based SOAP interface. The Developer wants to expose the functionality of the service to external clients with the Amazon API Gateway. Which technique will accomplish this?
A) Create a RESTful API with the API Gateway; transform the incoming JSON into a valid XML message for the SOAP interface using mapping templates.
B) Create a RESTful API with the API Gateway; pass the incoming JSON to the SOAP interface through an Application Load Balancer.
C) Create a RESTful API with the API Gateway; pass the incoming XML to the SOAP interface through an Application Load Balancer.
D) Create a RESTful API with the API Gateway; transform the incoming XML into a valid message for the SOAP interface using mapping templates.

Accepted Answer

The answer of A legacy service has an XML-based SOAP...

Question 5

The release process workflow of an application requires a manual approval before the code is deployed into the production environment. What is the BEST way to achieve this using AWS CodePipeline?
A) Use multiple pipelines to allow approval
B) Use an approval action in a stage
C) Disable the stage transition to allow manual approval
D) Disable a stage just prior the deployment stage

Accepted Answer

The answer of The release process workflow of an application...

Question 6

An organization must store thousands of sensitive audio and video files in an Amazon S3 bucket. Organizational security policies require that all data written to this bucket be encrypted. How can compliance with this policy be ensured?
A) Use AWS Lambda to send notifications to the security team if unencrypted objects are pun in the bucket.
B) Configure an Amazon S3 bucket policy to prevent the upload of objects that do not contain the x-amz-server-side-encryption header.
C) Create an Amazon CloudWatch event rule to verify that all objects stored in the Amazon S3 bucket are encrypted.
D) Configure an Amazon S3 bucket policy to prevent the upload of objects that contain the x-amz-server-side-encryption header.

Accepted Answer

Configuring an Amazon S3 bucket policy to prevent the upload of objects that do not contain the x-amz-server-side-encryption header ensures that all objects uploaded to the bucket are encrypted, thus complying with the security policy.

Question 7

A Developer created a Lambda function for a web application backend. When testing the Lambda function from the AWS Lambda console, the Developer can see that the function is being executed, but there is no log data being generated in Amazon CloudWatch Logs, even after several minutes. What could cause this situation?
A) The Lambda function does not have any explicit log statements for the log data to send it to CloudWatch Logs.
B) The Lambda function is missing CloudWatch Logs as a source trigger to send log data.
C) The execution role for the Lambda function is missing permissions to write log data to the CloudWatch Logs.
D) The Lambda function is missing a target CloudWatch Log group.

Accepted Answer

The execution role for the Lambda function must have the necessary permissions to write log data to CloudWatch Logs. Without these permissions, no log data will be generated or sent to CloudWatch Logs.

Question 8

A game stores user game data in an Amazon DynamoDB table. Individual users should not have access to other users' game data. How can this be accomplished?
A) Encrypt the game data with individual user keys.
B) Restrict access to specific items based on certain primary key values.
C) Stage data in SQS queues to inject metadata before accessing DynamoDB.
D) Read records from DynamoDB and discard irrelevant data client-side.

Accepted Answer

By restricting access to specific items based on primary key values, you can ensure that users can only access their own data in DynamoDB. This can be achieved using IAM policies with condition expressions that limit access based on the user's identity and the primary key values.

Question 9

A current architecture uses many Lambda functions invoking one another as large state machine. The coordination of this state machine is legacy custom code that breaks easily. Which AWS Service can help refactor and manage the state machine?
A) AWS Data Pipeline
B) AWS SNS with AWS SQS
C) Amazon Elastic MapReduce
D) AWS Step Functions

Accepted Answer

AWS Step Functions is designed to coordinate and manage state machines, making it suitable for refactoring and managing complex workflows involving multiple Lambda functions.

Question 10

A Developer has created a large Lambda function, and deployment is failing with the following error: ClientError: An error occurred (InvalidParameterValueException) when calling the CreateFunction operation: Unzipped size must be smaller than XXXXXXXXX bytes', where XXXXXXXXX is the current Lambda limit What can the Developer do to fix this problem?
A) Submit a limit increase request to AWS Support to increase the function to the size needed.
B) Use a compression algorithm that is more efficient than ZIP.
C) Break the function into multiple smaller Lambda functions.
D) ZIP the ZIP file twice to compress it further.

Accepted Answer

Breaking the function into multiple smaller Lambda functions can help manage the size limitation by distributing the logic across several functions, each within the allowed size limit.

Question 11

A Developer has created a software package to be deployed on multiple EC2 instances using IAM roles. What actions could be performed to verify IAM access to get records from Amazon Kinesis Streams? (Choose two.)
A) Use the AWS CLI to retrieve the IAM group.
B) Query Amazon EC2 metadata for in-line IAM policies.
C) Request a token from AWS STS, and perform a describe action.
D) Perform a get action using the --dry-run argument. Perform a get action using the --dry-run argument.
E) Validate the IAM role policy with the IAM policy simulator.

Accepted Answer

The answer of A Developer has created a software package...

Question 12

A Developer executed a AWS CLI command and received the error shown below:  What action should the Developer perform to make this error human-readable?
A) Make a call to AWS KMS to decode the message.
B) Use the AWS STS decode-authorization-message API to decode the message.
C) Use an open source decoding library to decode the message.
D) Use the AWS IAM decode-authorization-message API to decode this message.

Accepted Answer

The answer of A Developer executed a AWS CLI command...

Question 13

A company developed a set of APIs that are being served through the Amazon API Gateway. The API calls need to be authenticated based on OpenID identity providers such as Amazon or Facebook. The APIs should allow access based on a custom authorization model. Which is the simplest and MOST secure design to use to build an authentication and authorization model for the APIs?
A) Use Amazon Cognito user pools and a custom authorizer to authenticate and authorize users based on JSON Web Tokens.
B) Build a OpenID token broker with Amazon and Facebook. Users will authenticate with these identify providers and pass the JSON Web Token to the API to authenticate each API call.
C) Store user credentials in Amazon DynamoDB and have the application retrieve temporary credentials from AWS STS. Make API calls by passing user credentials to the APIs for authentication and authorization.
D) Use Amazon RDS to store user credentials and pass them to the APIs for authentications and authorization.

Accepted Answer

Using Amazon Cognito user pools with a custom authorizer allows for secure authentication and authorization using JSON Web Tokens, leveraging built-in support for OpenID identity providers.

Question 14

A company is migrating its on-premises database to Amazon RDS for MySQL. The company has read-heavy workloads, and wants to make sure it re-factors its code to achieve optimum read performance for its queries. How can this objective be met?
A) Add database retries to effectively use RDS with vertical scaling
B) Use RDS with multi-AZ deployment
C) Add a connection string to use an RDS read replica for read queries
D) Add a connection string to use a read replica on an EC2 instance.

Accepted Answer

Using an RDS read replica for read queries allows the company to offload read traffic from the primary database, improving read performance for read-heavy workloads.

Question 15

Amazon S3 has the following structure: S3://BUCKET/FOLDERNAME/FILENAME.zip Which S3 best practice would optimize performance with thousands of PUT request each second to a single bucket?
A) Prefix folder names with user id; for example, s3://BUCKET/2013-FOLDERNAME/FILENAME.zip Prefix folder names with user id; for example, s3://BUCKET/2013-FOLDERNAME/FILENAME.zip
B) Prefix file names with timestamps; for example, s3://BUCKET/FOLDERNAME/2013-26-05-15-00-00-FILENAME.zip Prefix file names with timestamps; for example, s3://BUCKET/FOLDERNAME/2013-26-05-15-00-00-FILENAME.zip
C) Prefix file names with random hex hashes; for example, s3://BUCKET/FOLDERNAME/23a6-FILENAME.zip Prefix file names with random hex hashes; for example, s3://BUCKET/FOLDERNAME/23a6-FILENAME.zip
D) Prefix folder names with random hex hashes; for example, s3://BUCKET/23a6-FOLDERNAME/FILENAME.zip Prefix folder names with random hex hashes; for example, s3://BUCKET/23a6-FOLDERNAME/FILENAME.zip

Accepted Answer

The answer of Amazon S3 has the following structure: S3://BUCKET/FOLDERNAME/FILENAME.zip...

Question 16

For a deployment using AWS CodeDeploy, what is the run order of the hooks for in-place deployments?
A) Before Install -> Application Stop -> Application Start -> After Install
B) Application Stop -> Before Install -> After Install -> Application Start
C) Before Install -> Application Stop -> Validate Service -> Application Start
D) Application Stop -> Before Install -> Validate Service -> Application Start

Accepted Answer

In an in-place deployment using AWS CodeDeploy, the correct order of hooks is: Application Stop, Before Install, After Install, and then Application Start.

Question 17

A company wants to migrate its web application to AWS and leverage Auto Scaling to handle pear workloads. The Solutions Architect determined that the best metric for an Auto Scaling event is the number of concurrent users. Based on this information, what should the Developer use to autoscale based on concurrent users?
A) An Amazon SNS topic to be triggered when a concurrent user threshold is met
B) An Amazon Cloudwatch Networkin metric
C) Amazon CloudFront to leverage AWS Edge Locations
D) A Custom Amazon CloudWatch metric for concurrent users.

Accepted Answer

A Custom Amazon CloudWatch metric for concurrent users allows the company to track the specific metric of concurrent users and use it to trigger Auto Scaling events.

Question 18

A Developer must re-implement the business logic for an order fulfilment system. The business logic has to make requests to multiple vendors to decide where to purchase an item. The whole process can take up to a week to complete. What is the MOST efficient and SIMPLEST way to implement a system that meets these requirements?
A) Use AWS Step Functions to execute parallel Lambda functions, and join the results.
B) Create an AWS SQS for each vendor, poll the queue from a worker instance, and joint the results.
C) Use AWS Lambda to asynchronously call a Lambda function for each vendor, and join the results.
D) Use Amazon CloudWatch Events to orchestrate the Lambda functions.

Accepted Answer

The answer of A Developer must re-implement the business logic...

Question 19

A Developer must repeatedly and consistently deploy a serverless RESTful API on AWS. Which techniques will work? (Choose two.)
A) Define a Swagger file. Use AWS Elastic Beanstalk to deploy the Swagger file.
B) Define a Swagger file. Use AWS CodeDeploy to deploy the Swagger file.
C) Deploy a SAM template with an inline Swagger definition.
D) Define a Swagger file. Deploy a SAM template that references the Swagger file.
E) Define an inline Swagger definition in a Lambda function. Invoke the Lambda function.

Accepted Answer

The answer of A Developer must repeatedly and consistently deploy...

Question 20

A supplier is writing a new RESTful API for customers to query the status of orders. The customers requested the following API endpoint. http://www.supplierdomain.com/status/customerID Which of the following application designs meet the requirements? (Choose two.)
A) Amazon SQS; Amazon SNS
B) Elastic Load Balancing; Amazon EC2
C) Amazon ElastiCache; Amazon Elacticsearch Service
D) Amazon API Gateway; AWS Lambda
E) Amazon S3; Amazon CloudFront

Accepted Answer

Amazon API Gateway and AWS Lambda meet the requirements for a RESTful API endpoint. Amazon API Gateway provides a fully managed API gateway service that makes it easy for developers to create, publish, maintain, monitor, and secure APIs. AWS Lambda is a serverless compute service that allows developers to run code without provisioning or managing servers.

Exam 6: AWS Certified Developer Associate (DVA-C01)

Given the source code for an AWS Lambda function in the local store.py containing a handler function called get_store and the following AWS CloudFormation template: What should be done to prepare the template so that it can be deployed using the AWS CLI command aws cloudformation deploy ?

A web application is using Amazon Kinesis Streams for clickstream data that may not be consumed for up to 12 hours. How can the Developer implement encryption at rest for data within the Kinesis Streams?

A legacy service has an XML-based SOAP interface. The Developer wants to expose the functionality of the service to external clients with the Amazon API Gateway. Which technique will accomplish this?

The release process workflow of an application requires a manual approval before the code is deployed into the production environment. What is the BEST way to achieve this using AWS CodePipeline?

An organization must store thousands of sensitive audio and video files in an Amazon S3 bucket. Organizational security policies require that all data written to this bucket be encrypted. How can compliance with this policy be ensured?

A game stores user game data in an Amazon DynamoDB table. Individual users should not have access to other users' game data. How can this be accomplished?

A current architecture uses many Lambda functions invoking one another as large state machine. The coordination of this state machine is legacy custom code that breaks easily. Which AWS Service can help refactor and manage the state machine?

A Developer has created a software package to be deployed on multiple EC2 instances using IAM roles. What actions could be performed to verify IAM access to get records from Amazon Kinesis Streams? (Choose two.)

A Developer executed a AWS CLI command and received the error shown below: What action should the Developer perform to make this error human-readable?

A company is migrating its on-premises database to Amazon RDS for MySQL. The company has read-heavy workloads, and wants to make sure it re-factors its code to achieve optimum read performance for its queries. How can this objective be met?

Amazon S3 has the following structure: S3://BUCKET/FOLDERNAME/FILENAME.zip Which S3 best practice would optimize performance with thousands of PUT request each second to a single bucket?

For a deployment using AWS CodeDeploy, what is the run order of the hooks for in-place deployments?

A Developer must repeatedly and consistently deploy a serverless RESTful API on AWS. Which techniques will work? (Choose two.)

A supplier is writing a new RESTful API for customers to query the status of orders. The customers requested the following API endpoint. http://www.supplierdomain.com/status/customerID Which of the following application designs meet the requirements? (Choose two.)