Amazon DVA-C01 Dumps - AWS Certified Developer Associate Exam PDF Sample Questions

Exam Code:
DVA-C01
Exam Name:
AWS Certified Developer Associate Exam
608 Questions
Last Update Date : 30 March, 2023
PDF + Test Engine
$89 $115.7
Test Engine Only Demo
$79 $102.7
PDF Only Demo
$59 $76.7

Amazon DVA-C01 This Week Result

0

They can't be wrong

0

Score in Real Exam at Testing Centre

0

Questions came word by word from this dumps

Best Amazon DVA-C01 Dumps - pass your exam In First Attempt

Our DVA-C01 dumps are better than all other cheap DVA-C01 study material.

Only best way to pass your Amazon DVA-C01 is that if you will get reliable exam study materials. We ensure you that realexamdumps is one of the most authentic website for Amazon AWS Certified Developer Associate exam question answers. Pass your DVA-C01 AWS Certified Developer Associate Exam with full confidence. You can get free AWS Certified Developer Associate Exam demo from realexamdumps. We ensure 100% your success in DVA-C01 Exam with the help of Amazon Dumps. you will feel proud to become a part of realexamdumps family.

Our success rate from past 5 year very impressive. Our customers are able to build their carrier in IT field.

Owl
Search

45000+ Exams

Buy

Desire Exam

Download

Exam

and pass your exam...

Related Exam

Realexamdumps Providing most updated AWS Certified Developer Associate Question Answers. Here are a few exams:


Sample Questions

Realexamdumps Providing most updated AWS Certified Developer Associate Question Answers. Here are a few sample questions:

Amazon DVA-C01 Sample Question 1

A developer is working on an ecommerce website. The developer wants to review server logs without logging in to each of the application servers individually. The website runs on multiple Amazon EC2 instances, is written in Python, and needs to be highly available.

How can the developer update the application to meet these requirements with MINIMUM changes?


Options:

A. Rewrite the application to be cloud native and to run on AWS Lambda where the logs can be reviewed in Amazon CloudWatch.
B. Set up centralized logging by using Amazon Elasticsearch Service (Amazon ES), Logstash, and Kibana
C. Scale down the application to one larger EC2 instance where only one instance is recording logs.
D. Install the unified Amazon CloudWatch agent on the EC2 instances. Configure the agent to push the application logs to CloudWatch.

Answer: E

Amazon DVA-C01 Sample Question 2

Where should an Elastic Beanstalk configuration file named healthcheckur1.config be placed in the application source bundle?


Options:

A. In the root of the application
B. In the bin folder
C. In healthcheckur1.config.ebextension under root
D. In the .ebextensions folder

Answer: E

Amazon DVA-C01 Sample Question 3

A Developer has published an update to an application that is served to a global user base using Amazon CloudFront. After deploying the application, users are not able to see the updated changes.

How can the Developer resolve this issue?


Options:

A. Remove the origin from the CloudFront configuration and add it again.
B. Disable forwarding of query strings and request headers from the CloudFront distribution configuration.
C. Invalidate all the application objects from the edge caches.
D. Disable the CloudFront distribution and enable it again to update all the edge locations.

Answer: C Explanation: Explanation: https://docs.aws.ama zon.com/AmazonCloudFront/latest/DeveloperGuide/Invalidation.htmm

Amazon DVA-C01 Sample Question 4

A company is creating an application that will require users to access AWS services and allow them to reset their own passwords.

Which of the following would allow the company to manage users and authorization while allowing users to reset their own passwords?


Options:

A. Amazon Cognito identify pools and AWS STS
B. Amazon Cognito identity pools and AWS IAM
C. Amazon Cognito user pools and AWS KMS
D. Amazon Cognito user pools and identity pools

Answer: D Explanation: Explanation: https://serverles s-stack.com/chapters/cognito-user-pool-vs-identity-pool.htmm

Amazon DVA-C01 Sample Question 5

An existing serverless application processes uploaded image files. The process currently uses a single Lambda function that takes an image file, performs the processing, and stores the file in Amazon S3. Users of the application now require thumbnail generation of the images. Users want to avoid any impact to the time it takes to perform the image uploads.

How can thumbnail generation be added to the application, meeting user requirements while minimizing changes to existing code?


Options:

A. Change the existing Lambda function handling the uploads to create thumbnails at the time of upload. Have the function store both the image and thumbnail in Amazon S3.
B. Create a second Lambda function that handles thumbnail generation and storage. Change the existing Lambda function to invoke it asynchronously.
C. Create an S3 event notification with a Lambda function destination. Create a new Lambda function to generate and store thumbnails.
D. Create an S3 event notification to an SQS Queue. Create a scheduled Lambda function that processes the queue, and generates and stores thumbnails.

Answer: C Explanation: Explanation: https://docs.aws.amazon.com/lambda/latest/dg/with-s3-example.htmm

Amazon DVA-C01 Sample Question 6

Which of the following services are key/value stores? Choose 3 answers


Options:

A. Amazon ElastiCache
B. Simple Notification Service
C. DynamoDB
D. Simple Workflow Service
E. Simple Storage Service

Answer: A, C, F

Amazon DVA-C01 Sample Question 7

A Development team currently supports an application that uses an in-memory store to save accumulated game results. Individual results are stored in a database. As part of migrating to AWS, the team needs to use automatic scaling. The team knows this will yield inconsistent results.

Where should the team store these accumulated game results to BEST allow for consistent results without impacting performance?


Options:

A. Amazon S3
B. Amazon RDS
C. Amazon ElastiCache
D. Amazon Kinesis

Answer: D

Amazon DVA-C01 Sample Question 8

A deployment package uses the AWS CLI to copy files into any S3 bucket in the account, using access keys stored in environment variables. The package is running on EC2 instances, and the instances have been modified to run with an assumed IAM role and a more restrictive policy that allows access to only one bucket.

After the change, the Developer logs into the host and still has the ability to write into all of the S3 buckets in that account.

What is the MOST likely cause of this situation?


Options:

A. An IAM inline policy is being used on the IAM role
B. An IAM managed policy is being used on the IAM role
C. The AWS CLI is corrupt and needs to be reinstalled
D. The AWS credential provider looks for instance profile credentials last

Answer: B Explanation: Explanation: https://docs.aws.amazon.com/sdk-for-java/v1/developer -guide/credentials.htmm

Amazon DVA-C01 Sample Question 9

Which of the following programming languages have an officially supported AWS SDK? Choose 2 answers


Options:

A. Perl
B. PHP
C. Pascal
D. Java
E. SQL

Answer: B, E

Amazon DVA-C01 Sample Question 10

Which code snippet below returns the URL of a load balanced web site created in CloudFormation with an AWS::ElasticLoadBalancing::LoadBalancer resource name "ElasticLoad Balancer"?


Options:

A. "Fn::Join" : ["". [ "http:// ", {"Fn::GetAtr” : [ "ElasticLoadBalancer","DNSName"]}]]
B. "Fn::Join" : ["". [ "http:// ", {"Fn::GetAtr” : [ "ElasticLoadBalancer","Url"]}]]
C. "Fn::Join" : ["". [ "http:// ", {"Ref" : "ElasticLoadBalancerUrl"}]]
D. "Fn::Join" : [".", [ "http:// ", {"Ref" : "ElasticLoadBalancerDNSName"}]]

Answer: A Explanation: Explanation: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-functio n-reference-getatt.htmm

Amazon DVA-C01 Sample Question 11

Developer is creating an AWS Lambda function to process a stream of data from an Amazon Kinesis Data Stream. When the Lambda function parses the data and encounters a missing field, it exits the function with an error. The function is generating duplicate records from the Kinesis stream. When the Developer looks at the stream output without the Lambda function, there are no duplicate records.

What is the reason for the duplicates?


Options:

A. The Lambda function did not advance the Kinesis stream pointer to the next record after the error.
B. The Lambda event source used asynchronous invocation, resulting in duplicate records.
C. The Lambda function did not handle the error, and the Lambda service attempted to reprocess the data.
D. The Lambda function is not keeping up with the amount of data coming from the stream.

Answer: C Explanation: Explanation: https://docs.aws.amazon.com/lambda/latest/dg/with-kinesis.htmm

Amazon DVA-C01 Sample Question 12

A Developer decides lo store highly secure data in Amazon S3 and wants to implement server-side encryption (SSF) with granular control of who can access the master key Company policy requires that the master key be created, rotated, and disabled easily when needed, all for security reasons.

Which solution should be used to moot these requirements?


Options:

A. SSE with Amazon S3 managed keys (SSE-S3)
B. SSFE with AWS KMS managed keys (SSE KMS)
C. SSE with AWS Secrets Manager
D. SSE with customer provided encryption keys

Answer: C

Amazon DVA-C01 Sample Question 13

An application stores images in an S3 bucket. Amazon S3 event notifications are used to trigger a Lambda function that resizes the images. Processing each image takes less than a second.

How will AWS Lambda handle the additional traffic?


Options:

A. Lambda will scale out to execute the requests concurrently.
B. Lambda will handle the requests sequentially in the order received.
C. Lambda will process multiple images in a single execution.
D. Lambda will add more compute to each execution to reduce processing time.

Answer: B

Amazon DVA-C01 Sample Question 14

A company is using AWS Elastic Beanstalk to deploy a three-tier application. The application uses an Amazon RDS DB instance as the database tier. The com wants to decouple the DB instance from the Elastic Beanstalk environment.

Which combination of steps should a developer take to meet this requirement? (Select TWO.)


Options:

A. Create a new Elastic Beanstalk environment that connects to the DB instance.
B. Create a new DB instance from a snapshot of the previous DB instance.
C. Use the Elastic Beanstalk CLI to decouple the DB instance.
D. Use the AWS CLI to decouple the DB instance.
E. Modify the current Elastic Beanstalk environment to connect to the DB instance.

Answer: B, F

Amazon DVA-C01 Sample Question 15

An application displays a status dashboard. The status is updated by 1 KB messages from an SQS queue. Although the status changes infrequently, the Developer must minimize the time between the message arrival in the queue and the dashboard update.

What technique provides the shortest delay in updating the dashboard?


Options:

A. Retrieve the messages from the queue using long polling every 20 seconds.
B. Reduce the size of the messages by compressing them before sending.
C. Retrieve the messages from the queue using short polling every 10 seconds.
D. Reduce the size of each message payload by sending it in two parts.

Answer: A Explanation: Explanation: https://docs.aws.ama zon.com/ko_kr/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-short-and-long-polling.html#sqs-short-long-polling-differencet

Amazon DVA-C01 Sample Question 16

A Developer is writing transactions into a DynamoDB table called “SystemUpdates” that has 5 write capacity units.

Which option has the highest read throughput?


Options:

A. Eventually consistent reads of 5 read capacity units reading items that are 4 KB in size
B. Strongly consistent reads of 5 read capacity units reading items that are 4 KB in size
C. Eventually consistent reads of 15 read capacity units reading items that are 1 KB in size
D. Strongly consistent reads of 15 read capacity units reading items that are 1 KB in size

Answer: C

Amazon DVA-C01 Sample Question 17

A company needs to ingest terabytes of data each hour from thousands of sources that are delivered almost continually throughout the day. The volume of messages generated varies over the course of the day. Messages must be delivered in real time for fraud detection and live operational dashboards.

Which approach will meet these requirements?


Options:

A. Send the messages to an Amazon SQS queue, then process the messages by using a fleet of Amazon EC2 instances
B. Use the Amazon S3 API to write messages to an S3 bucket, then process the messages by using Amazon Redshift
C. Use AWS Data Pipeline to automate the movement and transformation of data
D. Use Amazon Kinesis Data Streams with Kinesis Client Library to ingest and deliver messages

Answer: D Explanation: Explanation: https://aws.amazon.c om/streaming-data/

Amazon DVA-C01 Sample Question 18

A global company has an application running on Amazon EC2 instances that serves image files from Amazon S3. User requests from the browser are causing high traffic, which results in degraded performance.

Which optimization solution should a Developer implement to increase application performance?


Options:

A. Create multiple prefix in the S3 bucket to increase the request rate
B. Create an Amazon ElastiCache cluster to cache and serve frequently accessed items.
C. Use Amazon CloudFront to serve the content of images stored in Amazon S3.
D. Submit a ticket to AWS support to request a rate limit increase for the S3 bucket.

Answer: C

Amazon DVA-C01 Sample Question 19

An application running on multiple Amazon EC2 instances pulls messages ...SQS queue. A requirement for the application is that all messages must be encrypted at rest.

Developers are instructed to use methods that allow for centralized .. possible support requirements whenever possible.

Which of the following solution supports these requirements?


Options:

A. Encrypt individual messages by using client-side encryption with customer managed keys, then write to the SQS queue.
B. Encrypt individual messages by using SQS Extended Client and the Amazon S3 encryption client.
C. Create an SQS queue, and encrypt the queue by using server-side encryption with AWS KMS
D. Create an SQS queue and encrypt the queue by using client-side encryption

Answer: D

Amazon DVA-C01 Sample Question 20

A developer has written a multi-threaded application that is running on a fleet of Amazon EC2 instances. The operations team has requested a graphical method to monitor the number of running threads over time.

What is the MOST efficient way to fulfill this request?


Options:

A. Periodically send the thread count to AWS X-Ray segments, then generate a service graph on demand
B. Create a custom Amazon CloudWatch metric and periodically perform a PutMetricData call with the current thread count.
C. Periodically log thread count data to Amazon S3. Use Amazon Kinesis to process the data into a graph.
D. Periodically write the current thread count to a table using Amazon DynarnoDB and use Amazon CloudFront to create a graph

Answer: E

Amazon DVA-C01 Sample Question 21

You are inserting 1000 new items every second in a DynamoDB table. Once an hour these items are analyzed and then are no longer needed. You need to minimize provisioned throughput, storage, and API calls.

Given these requirements, what is the most efficient way to manage these Items after the analysis?


Options:

A. Retain the items in a single table
B. Delete items individually over a 24 hour period
C. Delete the table and create a new table per hour
D. Create a new table per hour

Answer: D

Amazon DVA-C01 Sample Question 22

A developer is planning to use an Amazon API Gateway and AWS Lambda to provide a REST API The developer will have three distinct environments to manage development, test, and production. How should the application be deployed while minimizing the number of resources to manage?


Options:

A. Create a separate API Gateway and separate Lambda function for each environment in the same Region
B. Assign a Region for each environment and deploy API Gateway and Lambda to each Region
C. Create one API Gateway with multiple stages with one Lambda function with multiple aliases.
D. Create one API Gateway and one Lambda function, and use a REST parameter to identify tne environment.

Answer: D

Amazon DVA-C01 Sample Question 23

A company is migrating a single-server, on-premises web application to AWS. The company intends to use multiple servers behind an Elastic Load Balancer (ELB) to balance the load, and will also store session data in memory on the web server. The company does not want to lose that session data if a server fails or goes offline, and it wants to minimize user’s downtime.

Where should the company move session data to MOST effectively reduce downtime and make users’ session data more fault tolerant?


Options:

A. An Amazon ElastiCache for Redis cluster
B. A second Amazon EBS volume
C. The web server’s primary disk
D. An Amazon EC2 instance dedicated to session data

Answer: B

Amazon DVA-C01 Sample Question 24

A developer wants the ability to roll back to a previous version of an AWS Lambda function in the event of errors caused by a new deployment.

How can the developer achieve this with MINIMAL impact on users?


Options:

A. Change the application to use an alias that points to the current version Deploy the new version of the code Update the alias to use the newly deployed version. If too many errors are encountered, point the alias back to the previous version
B. Change the application to use an alias that points to the current version Deploy the new version of the code. Update the alias to direct 10% of users to the newly deployed version. If too many errors are encountered, send 100% of traffic to the previous version
C. Do not make any changes to the application Deploy the new version of the code. If too many errors are encountered, point the application back to the previous version using the version number in the Amazon Resource Name (ARN)
D. Create three aliases: new, existing, and router Point the existing alias to the current version Have the router alias direct 100% of users to the existing alias Update the application to use the router alias Deploy the new version of the code Point the new alias to this version Update the router alias to direct 10% of users to the new alias If too many errors are encountered, send 100% of traffic to the existing alias

Answer: B

Amazon DVA-C01 Sample Question 25

Your application is trying to upload a 6 GB file to Simple Storage Service and receive a “Your proposed upload exceeds the maximum allowed object size." error message.

What is a possible solution for this?


Options:

A. None, Simple Storage Service objects are limited to 5 GB
B. Use the multi-part upload API for this object
C. Use the large object upload API for this object
D. Contact support to increase your object size limit
E. Upload to a different region

Answer: B Explanation: Explanation: https://docs.aws.amazon.com/Amaz onS3/latest/dev/mpuoverview.htmm

Amazon DVA-C01 Sample Question 26

A Developer writes an AWS Lambda function and uploads the code in a .ZIP file to Amazon S3. The Developer makes changes to the code and uploads a new .ZIP file to Amazon S3. However, Lambda executes the earlier code.

How can the Developer fix this in the LEAST disruptive way?


Options:

A. Create another Lambda function and specify the new .ZIP file.
B. Call the update-function-code API.
C. Remove the earlier .ZIP file first, then add the new .ZIP file.
D. Call the create-alias API.

Answer: B Explanation: Explanation: https://docs.aws.amazon .com/cli/latest/reference/lambda/update-function-code.htmm

Amazon DVA-C01 Sample Question 27

An application contains two components one component to handle HI IP requests, and another component to handle background processing tasks Bach component must scale independently The developer wants to deploy this application using AWS Elastic Beanstalk.

How should this application be deployed, based on these requirements?


Options:

A. Deploy the application in a single Elastic Beanstalk environment
B. Deploy each component in a separate Elastic Beanstalk environment
C. Use multiple Elastic Beanstalk environments for the HTTP component but one environment for the background task component
D. Use multiple Elastic Beanstalk environments for the background task component but one environment tor the HTTP component

Answer: B

Amazon DVA-C01 Sample Question 28

A Developer is making changes to a custom application that is currently using AWS Elastic Beanstalk.

After the Developer completes the changes, what solutions will update the Elastic Beanstalk environment with the new application version? (Choose two.)


Options:

A. Package the application code into a .zip file, and upload, then deploy the packaged application from the AWS Management Console
B. Package the application code into a .tar file, create a new application version from the AWS Management Console, then update the environment by using AWS CLI
C. Package the application code into a .tar file, and upload and deploy the packaged application from the AWS Management Console
D. Package the application code into a .zip file, create a new application version from the packaged application by using AWS CLI, then update the environment by using AWS CLI
E. Package the application code into a .zip file, create a new application version from the AWS Management Console, then rebuild the environment by using AWS CLI

Answer: C, E

Amazon DVA-C01 Sample Question 29

Which DynamoDB limits can be raised by contacting AWS support? Choose 2 answers


Options:

A. The number of hash keys per account
B. The maximum storage used per account
C. The number of tables per account
D. The number of local secondary indexes per account
E. The number of provisioned throughput units per account

Answer: C, E Explanation: Explanation: https://docs.aws.amazon.com/amazondynamodb/l atest/developerguide/Limits.htmm

Amazon DVA-C01 Sample Question 30

A Developer must re-implement the business logic for an order fulfilment system. The business logic has to make requests to multiple vendors to decide where to purchase an item. The whole process can take up to a week to complete.

What is the MOST efficient and SIMPLEST way to implement a system that meets these requirements?


Options:

A. Use AWS Step Functions to execute parallel Lambda functions, and join the results.
B. Create an AWS SQS for each vendor, poll the queue from a worker instance, and joint the results.
C. Use AWS Lambda to asynchronously call a Lambda function for each vendor, and join the results.
D. Use Amazon CloudWatch Events to orchestrate the Lambda functions.

Answer: A Explanation: Explanation: https://aws.amazon.com/step-functions/

Amazon DVA-C01 Sample Question 31

EC2 instances are launched from Amazon Machine images (AMIs). A given public AMI can:


Options:

A. be used to launch EC2 Instances in any AWS region.
B. only be used to launch EC2 instances in the same country as the AMI is stored.
C. only be used to launch EC2 instances in the same AWS region as the AMI is stored.
D. only be used to launch EC2 instances in the same AWS availability zone as the AMI is stored

Answer: C Explanation: Explanation: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/usingsharedamis-finding.htmm

Amazon DVA-C01 Sample Question 32

A developer wants to secure sensitive configuration date such as passwords, database strings, and application license codes. Access to this sensitive information must be tracked for future audit purposes.


Options:

A. In an encrypted file on the source code bundle; grant the application access with Amazon IAM
B. In the Amazon EC2 Systems Manager Parameter Store; grant the application access with IAM
C. On an Amazon EBS encrypted volume attach the volume to an Amazon EC2 instance to access the data
D. As on object in on Amazon S3 bucket, grant on Amazon EC2 instance access with on IAM rob.

Answer: C

Amazon DVA-C01 Sample Question 33

A Developer is creating a mobile application with a limited budget. The solution requires a scalable service that will enable customers to sign up and authenticate into the mobile application while using the organization’s current SAML 2.0 identity provider.

Which AWS service should be used to meet these requirements?


Options:

A. AWS Lambda
B. Amazon Cognito
C. AWS IAM
D. Amazon EC2

Answer: C

Amazon DVA-C01 Sample Question 34

company needs a fully-managed source control service that will work in AWS. The service must ensure that revision control synchronizes multiple distributed repositories by exchanging sets of changes peer-to-peer. All users need to work productively even when not connected to a network.

Which source control service should be used?


Options:

A. Subversion
B. AWS CodeBuild
C. AWS CodeCommit
D. AWS CodeStar

Answer: D

Amazon DVA-C01 Sample Question 35

In a multi-container Docker environment in AWS Elastic Beanstalk, what is required to configure container instances in the environment?


Options:

A. An Amazon ECS task definition
B. An Amazon ECS cluster
C. A Docker in an application package
D. A CLI for Elastic Beanstalk

Answer: A Explanation: Reference: [Reference: https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/create_deploy_docker_ecs.html, , , , ]

Amazon DVA-C01 Sample Question 36

A Developer is storing sensitive documents in Amazon S3 that will require encryption at rest. The encryption keys must be rotated annually, at least.

What is the easiest way to achieve this?


Options:

A. Encrypt the data before sending it to Amazon S3
B. Import a custom key into AWS KMS with annual rotation enabled
C. Use AWS KMS with automatic key rotation
D. Export a key from AWS KMS to encrypt the data

Answer: C Explanation: Explanation: https://docs.a ws.amazon.com/kms/latest/developerguide/rotate-keys.htmlhttps://docs.aws.amazon.com/kms/latest/developerguide/custom-key-store-overview.htm lYou can use the same techniques to view and manage the CMKs in your custom key store that you use for CMKs in the AWS KMS key store. You can control access with IAM and key policies, create tags and aliases, enable and disable the CMKs, and schedule key deletion. You can use the CMKs for cryptographic operations and use them with AWS services that integrate with AWS KMS. However, you cannot enable automatic key rotation and you cannot import key material into a CMK in a custom key store.Q: Can I rotate my keys? Yes. You can choose to have AWS KMS automatically rotate CMKs every year, provided that those keys were generated within AWS KMS HSMs. Automatic key rotation is not supported for imported keys, asymmetric keys, or keys generated in an AWS CloudHSM cluster using the AWS KMS custom key store feature. If you choose to import keys to AWS KMS or asymmetric keys or use a custom key store, you can manually rotate them by creating a new CMK and mapping an existing key alias from the old CMK to the new CMK. https://aws.amazon.com/kms/faqs/

Amazon DVA-C01 Sample Question 37

A Developer is migrating an on-premises application to AWS. The application currently takes user uploads and saves them to a local directory on the server. All uploads must be saved and made immediately available to all instances in an Auto scaling group.

Which approach will meet these requirements?


Options:

A. Use Amazon EBS and configure the application AMI to use a snapshot of the same EBS instance on boot.
B. Use Amazon S3 and rearchitect the application so all uploads are placed in S3.
C. Use instance storage and share it between instances launched from the same Amazon machine image (AMI).
D. Use Amazon EBS and file synchronization software to achieve eventual consistency among the auto scaling group.

Answer: C

Amazon DVA-C01 Sample Question 38

A development team is using AWS Elastic Beanstalk to deploy a two-tier application that consists of a load-balanced web tier and an Amazon RDS database tier in production. The team would like to separate the RDS instance from the Elastic Beanstalk.

How can this be accomplished?


Options:

A. Use the Elastic Beanstalk CLI to disassociate the database.
B. Use the AWS CLI to disassociate the database.
C. Change the deployment policy to disassociate the database.
D. Recreate a new Elastic Beanstalk environment without Amazon RDS.

Answer: D Explanation: Explanation: https://aws.amazon.com/premiumsuppo rt/knowledge-center/decouple-rds-from-beanstalk/

Amazon DVA-C01 Sample Question 39

A developer is working on a Python application that runs on Amazon EC2 instances. The developer wants to enable tracing of application requests to debug performance issues in the code.

Which combination of actions should the developer take to achieve this goal? (Select TWO.)


Options:

A. Install the Amazon CloudWatch agent on the EC2 instances.
B. Install the AWS X-Ray daemon on the EC2 instances
C. Configure the application to write JSON-formatted logs to /var/log/cloudwatch.
D. Configure the application to write trace data to /var/log/xray.
E. Install and configure the AWS X-Ray SDK for Python in the application.

Answer: B, F

Amazon DVA-C01 Sample Question 40

A Developer must analyze performance issues with production-distributed applications written as AWS Lambda functions. These distributed Lambda applications invoke other components that make up the applications.

How should the Developer identify and troubleshoot the root cause of the performance issues in production?


Options:

A. Add logging statements to the Lambda functions, then use Amazon CloudWatch to view the logs.
B. Use AWS Cloud Trail and then examine the logs
C. Use AWS X-Ray, then examine the segments and errors
D. Run Amazon Inspector agents and then analyze performance

Answer: C Explanation: Explanation: https://aws.amazon.com/blogs/developer/new-analyze-and-debug-distributed-applications-interactively-using-aws-x-ray-analytics/

Amazon DVA-C01 Sample Question 41

What type of block cipher does Amazon S3 offer for server side encryption?


Options:

A. Triple DES
B. Advanced Encryption Standard
C. Blowfish
D. RC5

Answer: B Explanation: Explanation: https://docs.aws.amazon.com/AmazonS3/latest/dev/serv-side-encryption.htmm

Amazon DVA-C01 Sample Question 42

A developer is receiving an intermittent ProvisionedThroughputExceededException error from an application that is based on Amazon DynamoDB. According to the Amazon CloudWatch metrics for the table, the application is not exceeding the provisioned throughput

What could be the cause of the issue?


Options:

A. The DynamoDB table storage size is larger than the provisioned size.
B. The application is exceeding capacity on a particular hash key.
C. The DynamoDB table is exceeding the provisioned scaling operations.
D. The application is exceeding capacity on a particular sort key.

Answer: C

Amazon DVA-C01 Sample Question 43

A Developer is writing a Linux-based application to run on AWS Elastic Beanstalk. Application requirements state that the application must maintain full capacity during updates while minimizing cost.

Which type of Elastic Beanstalk deployment policy should the Developer specify for the environment?


Options:

A. Immutable
B. Rolling
C. All at Once
D. Rolling with additional batch

Answer: D Explanation: Explanation: https://docs.aws.amazon.co m/elasticbeanstalk/latest/dg/using-features.rolling-version-deploy.htmm

Amazon DVA-C01 Sample Question 44

A customer wants to deploy its source code on an AWS Elastic Beanstalk environment. The customer needs to perform deployment with minimal outage and should only use existing instances to retain application access log.

What deployment policy would satisfy these requirements?


Options:

A. Rolling
B. All at once
C. Rolling with an additional batch
D. Immutable

Answer: B

Amazon DVA-C01 Sample Question 45

A company has three AWS Lambda functions that are written in Node js The Lambda functions include a mix of custom code and open-source modules When bugs are occasionally detected in the open-source modules, all three Lambda functions must be patched.

What is the MOST operationally efficient solution to deploy a patched open-source library for all three Lambda functions?


Options:

A. Create a custom AWS CloudFormation public registry extension Reference a GitHub repository that hosts the open-source modules m the extension Configure Formation to scan the repository once each day Write an AWS Serverless Application Model (AWS SAM) template to redeploy the three Lambda functions upon a scan notification change.
B. Create an Amazon CloudFront distribution with an Amazon S3 bucket as the origin Upload the patched modules to Amazon S3 when needed Modify each Lambda function to download the patched modules from the CloudFront distribution during the cold start.
C. Launch an Amazon EC2 instance Host a private open-source module registry on the EC2 instance Upload the modified open-source modules to the private registry when needed. Modify each Lambda function deployment script to download the modules from the private registry Redeploy the three new Lambda functions.
D. Create a Lambda layer with the open-source modules Modify all three Lambda functions to depend on the layer Remove the open-source modules from each Lambda function Patch the Lambda layer with the modified open-source modules when needed Update the Lambda functions to reference the new layer version

Answer: E

Amazon DVA-C01 Sample Question 46

A developer is writing an application in AWS Lambda To simplify testing and deployments, the developer needs the database connection string to be easily changed without modifying the Lambda code.

How can this requirement be met?


Options:

A. Store the connection string as a secret in AWS Secrets Manager
B. Store the connection string in an IAM user account.
C. Store the connection string in AWS KMS
D. Store the connection string as a Lambda layer.

Answer: B

Amazon DVA-C01 Sample Question 47

Company A has an S3 bucket containing premier content that they intend to make available to only paid subscribers of their website. The S3 bucket currently has default permissions of all objects being private to prevent inadvertent exposure of the premier content to non-paying website visitors.

How can Company A provide only paid subscribers the ability to download a premier content file in the S3 bucket?


Options:

A. Apply a bucket policy that grants anonymous users to download the content from the S3 bucket
B. Generate a pre-signed object URL for the premier content file when a paid subscriber requests a download
C. Add a bucket policy that requires Multi-Factor Authentication for requests to access the S3 bucket objects
D. Enable server-side encryption on the S3 bucket for data protection against the non-paying website visitors

Answer: C

Amazon DVA-C01 Sample Question 48

n application running on an Amazon Linux EC2 instance needs to manage the AWS infrastructure.

How can the EC2 instance be configured to make AWS API calls securely?


Options:

A. Sign the AWS CLI command using the signature version 4 process.
B. Run the aws configure AWS CLI command and specify the access key id and secret access key.
C. Specify a role for the EC2 instance with the necessary privileges.
D. Pass the access key id and secret access key as parameters for each AWS CLI command.

Answer: D

Amazon DVA-C01 Sample Question 49

What are the steps to using the AWS CLI to launch a templatized serverless application?


Options:

A. Use AWS CloudFormation get-template then CloudFormation execute-change-set.
B. Use AWS CloudFormation validate-template then CloudFormation create-change-set.
C. Use AWS CloudFormation package then CloudFormation deploy.
D. Use AWS CloudFormation create-stack then CloudFormation update-stack.

Answer: C Explanation: Explanation: https://docs.aws. amazon.com/cli/latest/reference/cloudformation/package.htmm

Amazon DVA-C01 Sample Question 50

An application is real-time processing millions of events that are received through an API.

What service could be used to allow multiple consumers to process the data concurrently and MOST cost-effectively?


Options:

A. Amazon SNS with fanout to an SQS queue for each application
B. Amazon SNS with fanout to an SQS FIFO (first-in, firtst-out) queue for each application
C. Amazon Kinesis Firehouse
D. Amazon Kinesis Streams

Answer: E

Amazon DVA-C01 Sample Question 51

Which statements about DynamoDB are true? Choose 2 answers


Options:

A. DynamoDB uses a pessimistic locking model
B. DynamoDB uses optimistic concurrency control
C. DynamoDB uses conditional writes for consistency
D. DynamoDB restricts item access during reads
E. DynamoDB restricts item access during writes

Answer: B, D

Amazon DVA-C01 Sample Question 52

A Developer wants to enable AWS X-Ray for a secure application that runs in an Amazon ECS environment.

What combination of steps will enable X-Ray? (Select THREE.)


Options:

A. Create a Docker image that runs the X-Ray daemon.
B. Add instrumentation to the application code for X-Ray.
C. Install the X-Ray daemon on the underlying EC2 instance.
D. Configure and use an IAM EC2 instance role.
E. Register the application with X-Ray.
F. Configure and use an IAM role for tasks.

Answer: A, B, F Explanation: Explanation: https://doc s.aws.amazon.com/xray/latest/devguide/xray-daemon-ecs.htmlhttps://docs.aws.amazon.com/xray/latest/devguide/scorekeep-ecs.htmm

Amazon DVA-C01 Sample Question 53

The development team is working on an API that will be served from Amazon API gateway. The API will be served from three environments: development, test, and production. The API Gateway is configured to use 237 GB of cache in all three stages.

Which is the MOST cost-efficient deployment strategy?


Options:

A. Create a single API Gateway with all three stages.
B. Create three API Gateways, one for each stage in a single AWS account.
C. Create an API Gateway in three separate AWS accounts.
D. Enable the cache for development and test environments only when needed.

Answer: E

Amazon DVA-C01 Sample Question 54

A game stores user game data in an Amazon DynamoDB table. Individual users should not have access to other users’ game data. How can this be accomplished?


Options:

A. Encrypt the game data with individual user keys.
B. Restrict access to specific items based on certain primary key values.
C. Stage data in SQS queues to inject metadata before accessing DynamoDB.
D. Read records from DynamoDB and discard irrelevant data client-side.

Answer: C

Amazon DVA-C01 Sample Question 55

A developer has written an application that runs on Amazon EC2 instances. The developer is adding functionality for the application to write objects to an Amazon S3 bucket Which policy must the developer modify to allow the instances to write these objects?


Options:

A. The 1AM policy that is attached to the EC2 instance profile role
B. The session policy that is applied to the EC2 instance role session
C. The AWS Key Management Service (AWS KMS) key policy that is attached to the EC2 instance profile role.
D. The Amazon VPC endpoint policy

Answer: B

Amazon DVA-C01 Sample Question 56

A company is using Amazon RDS MySQL instances for its application database tier and Apache Tomcat servers for its web tier. Most of the database queries from web applications are repeated read requests.

Use of which AWS service would increase in performance by adding in-memory store for repeated read queries?


Options:

A. Amazon RDS Multi-AZ
B. Amazon SQS
C. Amazon ElastiCache
D. Amazon RDS read replica

Answer: D

Amazon DVA-C01 Sample Question 57

A company needs to distribute firmware updates to its customers around the world.

Which service will allow easy and secure control of the access to the downloads at the lowest cost?


Options:

A. Use Amazon CloudFront with signed URLs for Amazon S3
B. Create a dedicated Amazon CloudFront Distribution for each customer
C. Use Amazon CloudFront with AWS Lambda@Edge
D. Use Amazon API Gateway and AWS Lambda to control access to an S3 bucket

Answer: A Explanation: Explanation: https://aws.amazon.com/bl ogs/networking-and-content-delivery/amazon-s3-amazon-cloudfront-a-match-made-in-the-cloud/

Amazon DVA-C01 Sample Question 58

A Developer has created a Lambda function and is finding that the function is taking longer to complete than expected. After some debugging, the Developer has discovered that increasing compute capacity would improve performance.

How can the Developer increase the Lambda compute resources?


Options:

A. Run on a larger instance size with more compute capacity.
B. Increase the maximum execution time.
C. Specify a larger compute capacity when calling the Lambda function.
D. Increase the allocated memory for the Lambda function.

Answer: E

Amazon DVA-C01 Sample Question 59

A developer Is working with a Docker application that needs to be quickly deployed using AWS without changing the infrastructure or configuring health checks. The application should be configured so that changes and updates can be made automatically without any downtime

Which solution will meet these requirements?


Options:

A. Use AWS Elastic Beanstalk for application deployment and select an all-at-once update policy.
B. Use AWS Elastic Beanstalk for application deployment and select a rolling deployment policy.
C. Deploy the Docker container on an Amazon EC2 instance in an Auto Scaling group and configure a health check on the EC2 instance
D. Deploy the Docker container using AWS Lambda and enable Amazon CloudWatch monitoring

Answer: B

Amazon DVA-C01 Sample Question 60

Company C has recently launched an online commerce site for bicycles on AWS. They have a "Product" DynamoDB table that stores details for each bicycle, such as, manufacturer, color, price, quantity and size to display in the online store. Due to customer demand, they want to include an image for each bicycle along with the existing details.

Which approach below provides the least impact to provisioned throughput on the "Product" table?


Options:

A. Serialize the image and store it in multiple DynamoDB tables
B. Create an "Images" DynamoDB table to store the Image with a foreign key constraint to the "Product” table
C. Add an image data type to the "Product" table to store the images in binary format
D. Store the images in Amazon S3 and add an S3 URL pointer to the "Product" table item for each image

Answer: D Explanation: Explanation: https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/bp-use-s3-too.html #bp-use-s3-too-large-valuesFor example, consider the ProductCatalog table in the Creating Tables and Loading Data for Code Examples in DynamoDB section. Items in this table store information about item price, description, book authors, and dimensions for other products. If you wanted to store an image of each product that was too large to fit in an item, you could store the images in Amazon S3 instead of in DynamoDB.

Amazon DVA-C01 Sample Question 61

n on-premises application makes repeated calls to store files to Amazon S3. As usage of the application has increased, “LimitExceeded” errors are being logged.

What should be changed to fix this error?


Options:

A. Implement exponential backoffs in the application.
B. Load balance the application to multiple servers.
C. Move the application to Amazon EC2.
D. Add a one second delay to each API call.

Answer: B

Amazon DVA-C01 Sample Question 62

A developer has a legacy application that is hosted on-premises Other applications hosted on AWS depend on the on-premises application for proper functioning In case of any application errors, the developer wants to be able to use Amazon CloudWatch to monitor and troubleshoot all applications from one place.

How can the developer accomplish this?


Options:

A. Install an AWS SDK on the on-premises server to automatically send logs to CloudWatch .
B. Download the CloudWatch agent to the on-premises server Configure the agent to use IAM user credentials with permissions for CloudWatch
C. Upload log files from the on-premises server to Amazon S3 and have CloudWatch read the files
D. Upload log files from the on-premises server to an Amazon EC2 instance and have the instance forward the logs to CloudWatch.

Answer: B Explanation: Reference: [Reference: https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/install-CloudWatch-Agent-onpremise.Html, ]

Amazon DVA-C01 Sample Question 63

A developer has created a Node js web application on a local development machine. The developer wants to use AWS technology to host the website. The developer needs a solution that requires the least possible operational overhead and no code changes.

Which AWS service should the developer use to meet these requirements?


Options:

A. AWS Elastic Beanstalk
B. Amazon EC2
C. AWS Lambda
D. Amazon Elastic Kubernetes Service (Amazon EKS)

Answer: B

Amazon DVA-C01 Sample Question 64

For a deployment using AWS CodeDeploy, what is the run order of the hooks for in-place deployments?


Options:

A. Before Install -> Application Stop -> Application Start -> After Install
B. Application Stop -> Before Install -> After Install -> Application Start
C. Before Install -> Application Stop -> Validate Service -> Application Start
D. Application Stop -> Before Install -> Validate Service -> Application Start

Answer: C

Amazon DVA-C01 Sample Question 65

A company maintains an application responsible for processing several thousand external callbacks each day. The company’s System administrators want to know how many callbacks are being received on a rolling basis, and they want this data available for 10 days. The company also wants the ability to issue automated alerts if the number of callbacks exceeds the defined thresholds.

What is the MOST cost-effective way to address the need to track and alert on these statistics?


Options:

A. Push callback data to an Amazon RDS database that can be queried to show historical data and to alert on exceeded thresholds.
B. Push callback data to AWS X-Ray and use AWS Lambda to query, display, and alert on exceeded thresholds.
C. Push callback data to Amazon Kinesis Data Streams and invoke an AWS Lambda function that stores data in Amazon DynamoDB and sends the required alerts.
D. Push callback data to Amazon CloudWatch as a custom metric and use the CloudWatch alerting mechanisms to alert System Administrators.

Answer: E

Amazon DVA-C01 Sample Question 66

A company has a serverless application that uses AWS Lambda functions and AWS Systems Manager parameters to store configuration data. The company....... the Lambda functions inside the VPC and into private subnets. The Lambda functions are now producing errors in their attempts to access Systems Manager parameters.

Which solution will allow the Lambda functions to access Systems Manager parameters inside the VPC?


Options:

A. Configure security groups to allow access to Systems Manager.
B. Create an interface VPC endpoint for Systems Manager.
C. Use an internet gateway from inside the VPC.
D. Create a gateway VPC endpoint for Systems Manager.

Answer: C

Amazon DVA-C01 Sample Question 67

A Developer is creating a Lambda function and will be using external libraries that are not included in the standard Lambda libraries.

What action would minimize the Lambda compute time consumed?


Options:

A. Install the dependencies and external libraries at the beginning of the Lambda function.
B. Create a Lambda deployment package that includes the external libraries.
C. Copy the external libraries to Amazon S3, and reference the external libraries to the S3 location.
D. Install the external libraries in Lambda to be available to all Lambda functions.

Answer: E

Amazon DVA-C01 Sample Question 68

A developer is migrating a Windows-based legacy application from on premises to AWS. The application will run on Amazon EC2 instances that run Amazon Linux. The application stores a large number of files in an NFS drive. The migration solution must minimize downtime and application code changes.

Which solution should the developer use to migrate the application data?


Options:

A. Create an Amazon S3 bucket. Use the s3 sync command to upload the files to the S3 bucket.
B. Create an Amazon Elastic Block Store (Amazon E8S) volume. Upload the files to the volume. Attach the volume to the EC2 instances.
C. Create an Amazon Elastic File System (Amazon EFS) file system. Use AWS DataSync to transfer the files to Amazon EFS.
D. Create an Amazon Elastic File System (Amazon EFS) file system. Mount the EFS file system from the legacy application. Copy the files to the EFS mount.

Answer: D

Amazon DVA-C01 Sample Question 69

A developer is working on an ecommerce website. The developer wants to review server logs without logging in to each of the application servers individually. The website runs on multiple Amazon EC2 instances, is written in Python, and needs to be highly available.

How can the developer update the application to meet these requirements with MINIMUM changes?


Options:

A. Rewrite the application to be cloud native and to run on AWS Lambda where the logs can be reviewed in Amazon CloudWatch.
B. Set up centralized logging by using Amazon Elasticsearch Service (Amazon ES), Logstash, and Kibana
C. Scale down the application to one larger EC2 instance where only one instance is recording logs.
D. Install the unified Amazon CloudWatch agent on the EC2 instances. Configure the agent to push the application logs to CloudWatch.

Answer: E

Amazon DVA-C01 Sample Question 70

Where should an Elastic Beanstalk configuration file named healthcheckur1.config be placed in the application source bundle?


Options:

A. In the root of the application
B. In the bin folder
C. In healthcheckur1.config.ebextension under root
D. In the .ebextensions folder

Answer: E

Amazon DVA-C01 Sample Question 71

A Developer has published an update to an application that is served to a global user base using Amazon CloudFront. After deploying the application, users are not able to see the updated changes.

How can the Developer resolve this issue?


Options:

A. Remove the origin from the CloudFront configuration and add it again.
B. Disable forwarding of query strings and request headers from the CloudFront distribution configuration.
C. Invalidate all the application objects from the edge caches.
D. Disable the CloudFront distribution and enable it again to update all the edge locations.

Answer: C Explanation: Explanation: https://docs.aws.ama zon.com/AmazonCloudFront/latest/DeveloperGuide/Invalidation.htmm

Amazon DVA-C01 Sample Question 72

A company is creating an application that will require users to access AWS services and allow them to reset their own passwords.

Which of the following would allow the company to manage users and authorization while allowing users to reset their own passwords?


Options:

A. Amazon Cognito identify pools and AWS STS
B. Amazon Cognito identity pools and AWS IAM
C. Amazon Cognito user pools and AWS KMS
D. Amazon Cognito user pools and identity pools

Answer: D Explanation: Explanation: https://serverles s-stack.com/chapters/cognito-user-pool-vs-identity-pool.htmm

Amazon DVA-C01 Sample Question 73

An existing serverless application processes uploaded image files. The process currently uses a single Lambda function that takes an image file, performs the processing, and stores the file in Amazon S3. Users of the application now require thumbnail generation of the images. Users want to avoid any impact to the time it takes to perform the image uploads.

How can thumbnail generation be added to the application, meeting user requirements while minimizing changes to existing code?


Options:

A. Change the existing Lambda function handling the uploads to create thumbnails at the time of upload. Have the function store both the image and thumbnail in Amazon S3.
B. Create a second Lambda function that handles thumbnail generation and storage. Change the existing Lambda function to invoke it asynchronously.
C. Create an S3 event notification with a Lambda function destination. Create a new Lambda function to generate and store thumbnails.
D. Create an S3 event notification to an SQS Queue. Create a scheduled Lambda function that processes the queue, and generates and stores thumbnails.

Answer: C Explanation: Explanation: https://docs.aws.amazon.com/lambda/latest/dg/with-s3-example.htmm

Amazon DVA-C01 Sample Question 74

Which of the following services are key/value stores? Choose 3 answers


Options:

A. Amazon ElastiCache
B. Simple Notification Service
C. DynamoDB
D. Simple Workflow Service
E. Simple Storage Service

Answer: A, C, F

Amazon DVA-C01 Sample Question 75

A Development team currently supports an application that uses an in-memory store to save accumulated game results. Individual results are stored in a database. As part of migrating to AWS, the team needs to use automatic scaling. The team knows this will yield inconsistent results.

Where should the team store these accumulated game results to BEST allow for consistent results without impacting performance?


Options:

A. Amazon S3
B. Amazon RDS
C. Amazon ElastiCache
D. Amazon Kinesis

Answer: D

Amazon DVA-C01 Sample Question 76

A deployment package uses the AWS CLI to copy files into any S3 bucket in the account, using access keys stored in environment variables. The package is running on EC2 instances, and the instances have been modified to run with an assumed IAM role and a more restrictive policy that allows access to only one bucket.

After the change, the Developer logs into the host and still has the ability to write into all of the S3 buckets in that account.

What is the MOST likely cause of this situation?


Options:

A. An IAM inline policy is being used on the IAM role
B. An IAM managed policy is being used on the IAM role
C. The AWS CLI is corrupt and needs to be reinstalled
D. The AWS credential provider looks for instance profile credentials last

Answer: B Explanation: Explanation: https://docs.aws.amazon.com/sdk-for-java/v1/developer -guide/credentials.htmm

Amazon DVA-C01 Sample Question 77

Which of the following programming languages have an officially supported AWS SDK? Choose 2 answers


Options:

A. Perl
B. PHP
C. Pascal
D. Java
E. SQL

Answer: B, E

Amazon DVA-C01 Sample Question 78

Which code snippet below returns the URL of a load balanced web site created in CloudFormation with an AWS::ElasticLoadBalancing::LoadBalancer resource name "ElasticLoad Balancer"?


Options:

A. "Fn::Join" : ["". [ "http:// ", {"Fn::GetAtr” : [ "ElasticLoadBalancer","DNSName"]}]]
B. "Fn::Join" : ["". [ "http:// ", {"Fn::GetAtr” : [ "ElasticLoadBalancer","Url"]}]]
C. "Fn::Join" : ["". [ "http:// ", {"Ref" : "ElasticLoadBalancerUrl"}]]
D. "Fn::Join" : [".", [ "http:// ", {"Ref" : "ElasticLoadBalancerDNSName"}]]

Answer: A Explanation: Explanation: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-functio n-reference-getatt.htmm

Amazon DVA-C01 Sample Question 79

Developer is creating an AWS Lambda function to process a stream of data from an Amazon Kinesis Data Stream. When the Lambda function parses the data and encounters a missing field, it exits the function with an error. The function is generating duplicate records from the Kinesis stream. When the Developer looks at the stream output without the Lambda function, there are no duplicate records.

What is the reason for the duplicates?


Options:

A. The Lambda function did not advance the Kinesis stream pointer to the next record after the error.
B. The Lambda event source used asynchronous invocation, resulting in duplicate records.
C. The Lambda function did not handle the error, and the Lambda service attempted to reprocess the data.
D. The Lambda function is not keeping up with the amount of data coming from the stream.

Answer: C Explanation: Explanation: https://docs.aws.amazon.com/lambda/latest/dg/with-kinesis.htmm

Amazon DVA-C01 Sample Question 80

A Developer decides lo store highly secure data in Amazon S3 and wants to implement server-side encryption (SSF) with granular control of who can access the master key Company policy requires that the master key be created, rotated, and disabled easily when needed, all for security reasons.

Which solution should be used to moot these requirements?


Options:

A. SSE with Amazon S3 managed keys (SSE-S3)
B. SSFE with AWS KMS managed keys (SSE KMS)
C. SSE with AWS Secrets Manager
D. SSE with customer provided encryption keys

Answer: C

Amazon DVA-C01 Sample Question 81

An application stores images in an S3 bucket. Amazon S3 event notifications are used to trigger a Lambda function that resizes the images. Processing each image takes less than a second.

How will AWS Lambda handle the additional traffic?


Options:

A. Lambda will scale out to execute the requests concurrently.
B. Lambda will handle the requests sequentially in the order received.
C. Lambda will process multiple images in a single execution.
D. Lambda will add more compute to each execution to reduce processing time.

Answer: B

Amazon DVA-C01 Sample Question 82

A company is using AWS Elastic Beanstalk to deploy a three-tier application. The application uses an Amazon RDS DB instance as the database tier. The com wants to decouple the DB instance from the Elastic Beanstalk environment.

Which combination of steps should a developer take to meet this requirement? (Select TWO.)


Options:

A. Create a new Elastic Beanstalk environment that connects to the DB instance.
B. Create a new DB instance from a snapshot of the previous DB instance.
C. Use the Elastic Beanstalk CLI to decouple the DB instance.
D. Use the AWS CLI to decouple the DB instance.
E. Modify the current Elastic Beanstalk environment to connect to the DB instance.

Answer: B, F

Amazon DVA-C01 Sample Question 83

An application displays a status dashboard. The status is updated by 1 KB messages from an SQS queue. Although the status changes infrequently, the Developer must minimize the time between the message arrival in the queue and the dashboard update.

What technique provides the shortest delay in updating the dashboard?


Options:

A. Retrieve the messages from the queue using long polling every 20 seconds.
B. Reduce the size of the messages by compressing them before sending.
C. Retrieve the messages from the queue using short polling every 10 seconds.
D. Reduce the size of each message payload by sending it in two parts.

Answer: A Explanation: Explanation: https://docs.aws.ama zon.com/ko_kr/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-short-and-long-polling.html#sqs-short-long-polling-differencet

Amazon DVA-C01 Sample Question 84

A Developer is writing transactions into a DynamoDB table called “SystemUpdates” that has 5 write capacity units.

Which option has the highest read throughput?


Options:

A. Eventually consistent reads of 5 read capacity units reading items that are 4 KB in size
B. Strongly consistent reads of 5 read capacity units reading items that are 4 KB in size
C. Eventually consistent reads of 15 read capacity units reading items that are 1 KB in size
D. Strongly consistent reads of 15 read capacity units reading items that are 1 KB in size

Answer: C

Amazon DVA-C01 Sample Question 85

A company needs to ingest terabytes of data each hour from thousands of sources that are delivered almost continually throughout the day. The volume of messages generated varies over the course of the day. Messages must be delivered in real time for fraud detection and live operational dashboards.

Which approach will meet these requirements?


Options:

A. Send the messages to an Amazon SQS queue, then process the messages by using a fleet of Amazon EC2 instances
B. Use the Amazon S3 API to write messages to an S3 bucket, then process the messages by using Amazon Redshift
C. Use AWS Data Pipeline to automate the movement and transformation of data
D. Use Amazon Kinesis Data Streams with Kinesis Client Library to ingest and deliver messages

Answer: D Explanation: Explanation: https://aws.amazon.c om/streaming-data/

Amazon DVA-C01 Sample Question 86

A global company has an application running on Amazon EC2 instances that serves image files from Amazon S3. User requests from the browser are causing high traffic, which results in degraded performance.

Which optimization solution should a Developer implement to increase application performance?


Options:

A. Create multiple prefix in the S3 bucket to increase the request rate
B. Create an Amazon ElastiCache cluster to cache and serve frequently accessed items.
C. Use Amazon CloudFront to serve the content of images stored in Amazon S3.
D. Submit a ticket to AWS support to request a rate limit increase for the S3 bucket.

Answer: C

Amazon DVA-C01 Sample Question 87

An application running on multiple Amazon EC2 instances pulls messages ...SQS queue. A requirement for the application is that all messages must be encrypted at rest.

Developers are instructed to use methods that allow for centralized .. possible support requirements whenever possible.

Which of the following solution supports these requirements?


Options:

A. Encrypt individual messages by using client-side encryption with customer managed keys, then write to the SQS queue.
B. Encrypt individual messages by using SQS Extended Client and the Amazon S3 encryption client.
C. Create an SQS queue, and encrypt the queue by using server-side encryption with AWS KMS
D. Create an SQS queue and encrypt the queue by using client-side encryption

Answer: D

Amazon DVA-C01 Sample Question 88

A developer has written a multi-threaded application that is running on a fleet of Amazon EC2 instances. The operations team has requested a graphical method to monitor the number of running threads over time.

What is the MOST efficient way to fulfill this request?


Options:

A. Periodically send the thread count to AWS X-Ray segments, then generate a service graph on demand
B. Create a custom Amazon CloudWatch metric and periodically perform a PutMetricData call with the current thread count.
C. Periodically log thread count data to Amazon S3. Use Amazon Kinesis to process the data into a graph.
D. Periodically write the current thread count to a table using Amazon DynarnoDB and use Amazon CloudFront to create a graph

Answer: E

Amazon DVA-C01 Sample Question 89

You are inserting 1000 new items every second in a DynamoDB table. Once an hour these items are analyzed and then are no longer needed. You need to minimize provisioned throughput, storage, and API calls.

Given these requirements, what is the most efficient way to manage these Items after the analysis?


Options:

A. Retain the items in a single table
B. Delete items individually over a 24 hour period
C. Delete the table and create a new table per hour
D. Create a new table per hour

Answer: D

Amazon DVA-C01 Sample Question 90

A developer is planning to use an Amazon API Gateway and AWS Lambda to provide a REST API The developer will have three distinct environments to manage development, test, and production. How should the application be deployed while minimizing the number of resources to manage?


Options:

A. Create a separate API Gateway and separate Lambda function for each environment in the same Region
B. Assign a Region for each environment and deploy API Gateway and Lambda to each Region
C. Create one API Gateway with multiple stages with one Lambda function with multiple aliases.
D. Create one API Gateway and one Lambda function, and use a REST parameter to identify tne environment.

Answer: D

Amazon DVA-C01 Sample Question 91

A company is migrating a single-server, on-premises web application to AWS. The company intends to use multiple servers behind an Elastic Load Balancer (ELB) to balance the load, and will also store session data in memory on the web server. The company does not want to lose that session data if a server fails or goes offline, and it wants to minimize user’s downtime.

Where should the company move session data to MOST effectively reduce downtime and make users’ session data more fault tolerant?


Options:

A. An Amazon ElastiCache for Redis cluster
B. A second Amazon EBS volume
C. The web server’s primary disk
D. An Amazon EC2 instance dedicated to session data

Answer: B

Amazon DVA-C01 Sample Question 92

A developer wants the ability to roll back to a previous version of an AWS Lambda function in the event of errors caused by a new deployment.

How can the developer achieve this with MINIMAL impact on users?


Options:

A. Change the application to use an alias that points to the current version Deploy the new version of the code Update the alias to use the newly deployed version. If too many errors are encountered, point the alias back to the previous version
B. Change the application to use an alias that points to the current version Deploy the new version of the code. Update the alias to direct 10% of users to the newly deployed version. If too many errors are encountered, send 100% of traffic to the previous version
C. Do not make any changes to the application Deploy the new version of the code. If too many errors are encountered, point the application back to the previous version using the version number in the Amazon Resource Name (ARN)
D. Create three aliases: new, existing, and router Point the existing alias to the current version Have the router alias direct 100% of users to the existing alias Update the application to use the router alias Deploy the new version of the code Point the new alias to this version Update the router alias to direct 10% of users to the new alias If too many errors are encountered, send 100% of traffic to the existing alias

Answer: B

Amazon DVA-C01 Sample Question 93

Your application is trying to upload a 6 GB file to Simple Storage Service and receive a “Your proposed upload exceeds the maximum allowed object size." error message.

What is a possible solution for this?


Options:

A. None, Simple Storage Service objects are limited to 5 GB
B. Use the multi-part upload API for this object
C. Use the large object upload API for this object
D. Contact support to increase your object size limit
E. Upload to a different region

Answer: B Explanation: Explanation: https://docs.aws.amazon.com/Amaz onS3/latest/dev/mpuoverview.htmm

Amazon DVA-C01 Sample Question 94

A Developer writes an AWS Lambda function and uploads the code in a .ZIP file to Amazon S3. The Developer makes changes to the code and uploads a new .ZIP file to Amazon S3. However, Lambda executes the earlier code.

How can the Developer fix this in the LEAST disruptive way?


Options:

A. Create another Lambda function and specify the new .ZIP file.
B. Call the update-function-code API.
C. Remove the earlier .ZIP file first, then add the new .ZIP file.
D. Call the create-alias API.

Answer: B Explanation: Explanation: https://docs.aws.amazon .com/cli/latest/reference/lambda/update-function-code.htmm

Amazon DVA-C01 Sample Question 95

An application contains two components one component to handle HI IP requests, and another component to handle background processing tasks Bach component must scale independently The developer wants to deploy this application using AWS Elastic Beanstalk.

How should this application be deployed, based on these requirements?


Options:

A. Deploy the application in a single Elastic Beanstalk environment
B. Deploy each component in a separate Elastic Beanstalk environment
C. Use multiple Elastic Beanstalk environments for the HTTP component but one environment for the background task component
D. Use multiple Elastic Beanstalk environments for the background task component but one environment tor the HTTP component

Answer: B

Amazon DVA-C01 Sample Question 96

A Developer is making changes to a custom application that is currently using AWS Elastic Beanstalk.

After the Developer completes the changes, what solutions will update the Elastic Beanstalk environment with the new application version? (Choose two.)


Options:

A. Package the application code into a .zip file, and upload, then deploy the packaged application from the AWS Management Console
B. Package the application code into a .tar file, create a new application version from the AWS Management Console, then update the environment by using AWS CLI
C. Package the application code into a .tar file, and upload and deploy the packaged application from the AWS Management Console
D. Package the application code into a .zip file, create a new application version from the packaged application by using AWS CLI, then update the environment by using AWS CLI
E. Package the application code into a .zip file, create a new application version from the AWS Management Console, then rebuild the environment by using AWS CLI

Answer: C, E

Amazon DVA-C01 Sample Question 97

Which DynamoDB limits can be raised by contacting AWS support? Choose 2 answers


Options:

A. The number of hash keys per account
B. The maximum storage used per account
C. The number of tables per account
D. The number of local secondary indexes per account
E. The number of provisioned throughput units per account

Answer: C, E Explanation: Explanation: https://docs.aws.amazon.com/amazondynamodb/l atest/developerguide/Limits.htmm

Amazon DVA-C01 Sample Question 98

A Developer must re-implement the business logic for an order fulfilment system. The business logic has to make requests to multiple vendors to decide where to purchase an item. The whole process can take up to a week to complete.

What is the MOST efficient and SIMPLEST way to implement a system that meets these requirements?


Options:

A. Use AWS Step Functions to execute parallel Lambda functions, and join the results.
B. Create an AWS SQS for each vendor, poll the queue from a worker instance, and joint the results.
C. Use AWS Lambda to asynchronously call a Lambda function for each vendor, and join the results.
D. Use Amazon CloudWatch Events to orchestrate the Lambda functions.

Answer: A Explanation: Explanation: https://aws.amazon.com/step-functions/

Amazon DVA-C01 Sample Question 99

EC2 instances are launched from Amazon Machine images (AMIs). A given public AMI can:


Options:

A. be used to launch EC2 Instances in any AWS region.
B. only be used to launch EC2 instances in the same country as the AMI is stored.
C. only be used to launch EC2 instances in the same AWS region as the AMI is stored.
D. only be used to launch EC2 instances in the same AWS availability zone as the AMI is stored

Answer: C Explanation: Explanation: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/usingsharedamis-finding.htmm

Amazon DVA-C01 Sample Question 100

A developer wants to secure sensitive configuration date such as passwords, database strings, and application license codes. Access to this sensitive information must be tracked for future audit purposes.


Options:

A. In an encrypted file on the source code bundle; grant the application access with Amazon IAM
B. In the Amazon EC2 Systems Manager Parameter Store; grant the application access with IAM
C. On an Amazon EBS encrypted volume attach the volume to an Amazon EC2 instance to access the data
D. As on object in on Amazon S3 bucket, grant on Amazon EC2 instance access with on IAM rob.

Answer: C

Amazon DVA-C01 Sample Question 101

A Developer is creating a mobile application with a limited budget. The solution requires a scalable service that will enable customers to sign up and authenticate into the mobile application while using the organization’s current SAML 2.0 identity provider.

Which AWS service should be used to meet these requirements?


Options:

A. AWS Lambda
B. Amazon Cognito
C. AWS IAM
D. Amazon EC2

Answer: C

Amazon DVA-C01 Sample Question 102

company needs a fully-managed source control service that will work in AWS. The service must ensure that revision control synchronizes multiple distributed repositories by exchanging sets of changes peer-to-peer. All users need to work productively even when not connected to a network.

Which source control service should be used?


Options:

A. Subversion
B. AWS CodeBuild
C. AWS CodeCommit
D. AWS CodeStar

Answer: D

Amazon DVA-C01 Sample Question 103

In a multi-container Docker environment in AWS Elastic Beanstalk, what is required to configure container instances in the environment?


Options:

A. An Amazon ECS task definition
B. An Amazon ECS cluster
C. A Docker in an application package
D. A CLI for Elastic Beanstalk

Answer: A Explanation: Reference: [Reference: https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/create_deploy_docker_ecs.html, , , , ]

Amazon DVA-C01 Sample Question 104

A Developer is storing sensitive documents in Amazon S3 that will require encryption at rest. The encryption keys must be rotated annually, at least.

What is the easiest way to achieve this?


Options:

A. Encrypt the data before sending it to Amazon S3
B. Import a custom key into AWS KMS with annual rotation enabled
C. Use AWS KMS with automatic key rotation
D. Export a key from AWS KMS to encrypt the data

Answer: C Explanation: Explanation: https://docs.a ws.amazon.com/kms/latest/developerguide/rotate-keys.htmlhttps://docs.aws.amazon.com/kms/latest/developerguide/custom-key-store-overview.htm lYou can use the same techniques to view and manage the CMKs in your custom key store that you use for CMKs in the AWS KMS key store. You can control access with IAM and key policies, create tags and aliases, enable and disable the CMKs, and schedule key deletion. You can use the CMKs for cryptographic operations and use them with AWS services that integrate with AWS KMS. However, you cannot enable automatic key rotation and you cannot import key material into a CMK in a custom key store.Q: Can I rotate my keys? Yes. You can choose to have AWS KMS automatically rotate CMKs every year, provided that those keys were generated within AWS KMS HSMs. Automatic key rotation is not supported for imported keys, asymmetric keys, or keys generated in an AWS CloudHSM cluster using the AWS KMS custom key store feature. If you choose to import keys to AWS KMS or asymmetric keys or use a custom key store, you can manually rotate them by creating a new CMK and mapping an existing key alias from the old CMK to the new CMK. https://aws.amazon.com/kms/faqs/

Amazon DVA-C01 Sample Question 105

A Developer is migrating an on-premises application to AWS. The application currently takes user uploads and saves them to a local directory on the server. All uploads must be saved and made immediately available to all instances in an Auto scaling group.

Which approach will meet these requirements?


Options:

A. Use Amazon EBS and configure the application AMI to use a snapshot of the same EBS instance on boot.
B. Use Amazon S3 and rearchitect the application so all uploads are placed in S3.
C. Use instance storage and share it between instances launched from the same Amazon machine image (AMI).
D. Use Amazon EBS and file synchronization software to achieve eventual consistency among the auto scaling group.

Answer: C

Amazon DVA-C01 Sample Question 106

A development team is using AWS Elastic Beanstalk to deploy a two-tier application that consists of a load-balanced web tier and an Amazon RDS database tier in production. The team would like to separate the RDS instance from the Elastic Beanstalk.

How can this be accomplished?


Options:

A. Use the Elastic Beanstalk CLI to disassociate the database.
B. Use the AWS CLI to disassociate the database.
C. Change the deployment policy to disassociate the database.
D. Recreate a new Elastic Beanstalk environment without Amazon RDS.

Answer: D Explanation: Explanation: https://aws.amazon.com/premiumsuppo rt/knowledge-center/decouple-rds-from-beanstalk/

Amazon DVA-C01 Sample Question 107

A developer is working on a Python application that runs on Amazon EC2 instances. The developer wants to enable tracing of application requests to debug performance issues in the code.

Which combination of actions should the developer take to achieve this goal? (Select TWO.)


Options:

A. Install the Amazon CloudWatch agent on the EC2 instances.
B. Install the AWS X-Ray daemon on the EC2 instances
C. Configure the application to write JSON-formatted logs to /var/log/cloudwatch.
D. Configure the application to write trace data to /var/log/xray.
E. Install and configure the AWS X-Ray SDK for Python in the application.

Answer: B, F

Amazon DVA-C01 Sample Question 108

A Developer must analyze performance issues with production-distributed applications written as AWS Lambda functions. These distributed Lambda applications invoke other components that make up the applications.

How should the Developer identify and troubleshoot the root cause of the performance issues in production?


Options:

A. Add logging statements to the Lambda functions, then use Amazon CloudWatch to view the logs.
B. Use AWS Cloud Trail and then examine the logs
C. Use AWS X-Ray, then examine the segments and errors
D. Run Amazon Inspector agents and then analyze performance

Answer: C Explanation: Explanation: https://aws.amazon.com/blogs/developer/new-analyze-and-debug-distributed-applications-interactively-using-aws-x-ray-analytics/

Amazon DVA-C01 Sample Question 109

What type of block cipher does Amazon S3 offer for server side encryption?


Options:

A. Triple DES
B. Advanced Encryption Standard
C. Blowfish
D. RC5

Answer: B Explanation: Explanation: https://docs.aws.amazon.com/AmazonS3/latest/dev/serv-side-encryption.htmm

Amazon DVA-C01 Sample Question 110

A developer is receiving an intermittent ProvisionedThroughputExceededException error from an application that is based on Amazon DynamoDB. According to the Amazon CloudWatch metrics for the table, the application is not exceeding the provisioned throughput

What could be the cause of the issue?


Options:

A. The DynamoDB table storage size is larger than the provisioned size.
B. The application is exceeding capacity on a particular hash key.
C. The DynamoDB table is exceeding the provisioned scaling operations.
D. The application is exceeding capacity on a particular sort key.

Answer: C

Amazon DVA-C01 Sample Question 111

A Developer is writing a Linux-based application to run on AWS Elastic Beanstalk. Application requirements state that the application must maintain full capacity during updates while minimizing cost.

Which type of Elastic Beanstalk deployment policy should the Developer specify for the environment?


Options:

A. Immutable
B. Rolling
C. All at Once
D. Rolling with additional batch

Answer: D Explanation: Explanation: https://docs.aws.amazon.co m/elasticbeanstalk/latest/dg/using-features.rolling-version-deploy.htmm

Amazon DVA-C01 Sample Question 112

A customer wants to deploy its source code on an AWS Elastic Beanstalk environment. The customer needs to perform deployment with minimal outage and should only use existing instances to retain application access log.

What deployment policy would satisfy these requirements?


Options:

A. Rolling
B. All at once
C. Rolling with an additional batch
D. Immutable

Answer: B

Amazon DVA-C01 Sample Question 113

A company has three AWS Lambda functions that are written in Node js The Lambda functions include a mix of custom code and open-source modules When bugs are occasionally detected in the open-source modules, all three Lambda functions must be patched.

What is the MOST operationally efficient solution to deploy a patched open-source library for all three Lambda functions?


Options:

A. Create a custom AWS CloudFormation public registry extension Reference a GitHub repository that hosts the open-source modules m the extension Configure Formation to scan the repository once each day Write an AWS Serverless Application Model (AWS SAM) template to redeploy the three Lambda functions upon a scan notification change.
B. Create an Amazon CloudFront distribution with an Amazon S3 bucket as the origin Upload the patched modules to Amazon S3 when needed Modify each Lambda function to download the patched modules from the CloudFront distribution during the cold start.
C. Launch an Amazon EC2 instance Host a private open-source module registry on the EC2 instance Upload the modified open-source modules to the private registry when needed. Modify each Lambda function deployment script to download the modules from the private registry Redeploy the three new Lambda functions.
D. Create a Lambda layer with the open-source modules Modify all three Lambda functions to depend on the layer Remove the open-source modules from each Lambda function Patch the Lambda layer with the modified open-source modules when needed Update the Lambda functions to reference the new layer version

Answer: E

Amazon DVA-C01 Sample Question 114

A developer is writing an application in AWS Lambda To simplify testing and deployments, the developer needs the database connection string to be easily changed without modifying the Lambda code.

How can this requirement be met?


Options:

A. Store the connection string as a secret in AWS Secrets Manager
B. Store the connection string in an IAM user account.
C. Store the connection string in AWS KMS
D. Store the connection string as a Lambda layer.

Answer: B

Amazon DVA-C01 Sample Question 115

Company A has an S3 bucket containing premier content that they intend to make available to only paid subscribers of their website. The S3 bucket currently has default permissions of all objects being private to prevent inadvertent exposure of the premier content to non-paying website visitors.

How can Company A provide only paid subscribers the ability to download a premier content file in the S3 bucket?


Options:

A. Apply a bucket policy that grants anonymous users to download the content from the S3 bucket
B. Generate a pre-signed object URL for the premier content file when a paid subscriber requests a download
C. Add a bucket policy that requires Multi-Factor Authentication for requests to access the S3 bucket objects
D. Enable server-side encryption on the S3 bucket for data protection against the non-paying website visitors

Answer: C

Amazon DVA-C01 Sample Question 116

n application running on an Amazon Linux EC2 instance needs to manage the AWS infrastructure.

How can the EC2 instance be configured to make AWS API calls securely?


Options:

A. Sign the AWS CLI command using the signature version 4 process.
B. Run the aws configure AWS CLI command and specify the access key id and secret access key.
C. Specify a role for the EC2 instance with the necessary privileges.
D. Pass the access key id and secret access key as parameters for each AWS CLI command.

Answer: D

Amazon DVA-C01 Sample Question 117

What are the steps to using the AWS CLI to launch a templatized serverless application?


Options:

A. Use AWS CloudFormation get-template then CloudFormation execute-change-set.
B. Use AWS CloudFormation validate-template then CloudFormation create-change-set.
C. Use AWS CloudFormation package then CloudFormation deploy.
D. Use AWS CloudFormation create-stack then CloudFormation update-stack.

Answer: C Explanation: Explanation: https://docs.aws. amazon.com/cli/latest/reference/cloudformation/package.htmm

Amazon DVA-C01 Sample Question 118

An application is real-time processing millions of events that are received through an API.

What service could be used to allow multiple consumers to process the data concurrently and MOST cost-effectively?


Options:

A. Amazon SNS with fanout to an SQS queue for each application
B. Amazon SNS with fanout to an SQS FIFO (first-in, firtst-out) queue for each application
C. Amazon Kinesis Firehouse
D. Amazon Kinesis Streams

Answer: E

Amazon DVA-C01 Sample Question 119

Which statements about DynamoDB are true? Choose 2 answers


Options:

A. DynamoDB uses a pessimistic locking model
B. DynamoDB uses optimistic concurrency control
C. DynamoDB uses conditional writes for consistency
D. DynamoDB restricts item access during reads
E. DynamoDB restricts item access during writes

Answer: B, D

Amazon DVA-C01 Sample Question 120

A Developer wants to enable AWS X-Ray for a secure application that runs in an Amazon ECS environment.

What combination of steps will enable X-Ray? (Select THREE.)


Options:

A. Create a Docker image that runs the X-Ray daemon.
B. Add instrumentation to the application code for X-Ray.
C. Install the X-Ray daemon on the underlying EC2 instance.
D. Configure and use an IAM EC2 instance role.
E. Register the application with X-Ray.
F. Configure and use an IAM role for tasks.

Answer: A, B, F Explanation: Explanation: https://doc s.aws.amazon.com/xray/latest/devguide/xray-daemon-ecs.htmlhttps://docs.aws.amazon.com/xray/latest/devguide/scorekeep-ecs.htmm

Amazon DVA-C01 Sample Question 121

The development team is working on an API that will be served from Amazon API gateway. The API will be served from three environments: development, test, and production. The API Gateway is configured to use 237 GB of cache in all three stages.

Which is the MOST cost-efficient deployment strategy?


Options:

A. Create a single API Gateway with all three stages.
B. Create three API Gateways, one for each stage in a single AWS account.
C. Create an API Gateway in three separate AWS accounts.
D. Enable the cache for development and test environments only when needed.

Answer: E

Amazon DVA-C01 Sample Question 122

A game stores user game data in an Amazon DynamoDB table. Individual users should not have access to other users’ game data. How can this be accomplished?


Options:

A. Encrypt the game data with individual user keys.
B. Restrict access to specific items based on certain primary key values.
C. Stage data in SQS queues to inject metadata before accessing DynamoDB.
D. Read records from DynamoDB and discard irrelevant data client-side.

Answer: C

Amazon DVA-C01 Sample Question 123

A developer has written an application that runs on Amazon EC2 instances. The developer is adding functionality for the application to write objects to an Amazon S3 bucket Which policy must the developer modify to allow the instances to write these objects?


Options:

A. The 1AM policy that is attached to the EC2 instance profile role
B. The session policy that is applied to the EC2 instance role session
C. The AWS Key Management Service (AWS KMS) key policy that is attached to the EC2 instance profile role.
D. The Amazon VPC endpoint policy

Answer: B

Amazon DVA-C01 Sample Question 124

A company is using Amazon RDS MySQL instances for its application database tier and Apache Tomcat servers for its web tier. Most of the database queries from web applications are repeated read requests.

Use of which AWS service would increase in performance by adding in-memory store for repeated read queries?


Options:

A. Amazon RDS Multi-AZ
B. Amazon SQS
C. Amazon ElastiCache
D. Amazon RDS read replica

Answer: D

Amazon DVA-C01 Sample Question 125

A company needs to distribute firmware updates to its customers around the world.

Which service will allow easy and secure control of the access to the downloads at the lowest cost?


Options:

A. Use Amazon CloudFront with signed URLs for Amazon S3
B. Create a dedicated Amazon CloudFront Distribution for each customer
C. Use Amazon CloudFront with AWS Lambda@Edge
D. Use Amazon API Gateway and AWS Lambda to control access to an S3 bucket

Answer: A Explanation: Explanation: https://aws.amazon.com/bl ogs/networking-and-content-delivery/amazon-s3-amazon-cloudfront-a-match-made-in-the-cloud/

Amazon DVA-C01 Sample Question 126

A Developer has created a Lambda function and is finding that the function is taking longer to complete than expected. After some debugging, the Developer has discovered that increasing compute capacity would improve performance.

How can the Developer increase the Lambda compute resources?


Options:

A. Run on a larger instance size with more compute capacity.
B. Increase the maximum execution time.
C. Specify a larger compute capacity when calling the Lambda function.
D. Increase the allocated memory for the Lambda function.

Answer: E

Amazon DVA-C01 Sample Question 127

A developer Is working with a Docker application that needs to be quickly deployed using AWS without changing the infrastructure or configuring health checks. The application should be configured so that changes and updates can be made automatically without any downtime

Which solution will meet these requirements?


Options:

A. Use AWS Elastic Beanstalk for application deployment and select an all-at-once update policy.
B. Use AWS Elastic Beanstalk for application deployment and select a rolling deployment policy.
C. Deploy the Docker container on an Amazon EC2 instance in an Auto Scaling group and configure a health check on the EC2 instance
D. Deploy the Docker container using AWS Lambda and enable Amazon CloudWatch monitoring

Answer: B

Amazon DVA-C01 Sample Question 128

Company C has recently launched an online commerce site for bicycles on AWS. They have a "Product" DynamoDB table that stores details for each bicycle, such as, manufacturer, color, price, quantity and size to display in the online store. Due to customer demand, they want to include an image for each bicycle along with the existing details.

Which approach below provides the least impact to provisioned throughput on the "Product" table?


Options:

A. Serialize the image and store it in multiple DynamoDB tables
B. Create an "Images" DynamoDB table to store the Image with a foreign key constraint to the "Product” table
C. Add an image data type to the "Product" table to store the images in binary format
D. Store the images in Amazon S3 and add an S3 URL pointer to the "Product" table item for each image

Answer: D Explanation: Explanation: https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/bp-use-s3-too.html #bp-use-s3-too-large-valuesFor example, consider the ProductCatalog table in the Creating Tables and Loading Data for Code Examples in DynamoDB section. Items in this table store information about item price, description, book authors, and dimensions for other products. If you wanted to store an image of each product that was too large to fit in an item, you could store the images in Amazon S3 instead of in DynamoDB.

Amazon DVA-C01 Sample Question 129

n on-premises application makes repeated calls to store files to Amazon S3. As usage of the application has increased, “LimitExceeded” errors are being logged.

What should be changed to fix this error?


Options:

A. Implement exponential backoffs in the application.
B. Load balance the application to multiple servers.
C. Move the application to Amazon EC2.
D. Add a one second delay to each API call.

Answer: B

Amazon DVA-C01 Sample Question 130

A developer has a legacy application that is hosted on-premises Other applications hosted on AWS depend on the on-premises application for proper functioning In case of any application errors, the developer wants to be able to use Amazon CloudWatch to monitor and troubleshoot all applications from one place.

How can the developer accomplish this?


Options:

A. Install an AWS SDK on the on-premises server to automatically send logs to CloudWatch .
B. Download the CloudWatch agent to the on-premises server Configure the agent to use IAM user credentials with permissions for CloudWatch
C. Upload log files from the on-premises server to Amazon S3 and have CloudWatch read the files
D. Upload log files from the on-premises server to an Amazon EC2 instance and have the instance forward the logs to CloudWatch.

Answer: B Explanation: Reference: [Reference: https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/install-CloudWatch-Agent-onpremise.Html, ]

Amazon DVA-C01 Sample Question 131

A developer has created a Node js web application on a local development machine. The developer wants to use AWS technology to host the website. The developer needs a solution that requires the least possible operational overhead and no code changes.

Which AWS service should the developer use to meet these requirements?


Options:

A. AWS Elastic Beanstalk
B. Amazon EC2
C. AWS Lambda
D. Amazon Elastic Kubernetes Service (Amazon EKS)

Answer: B

Amazon DVA-C01 Sample Question 132

For a deployment using AWS CodeDeploy, what is the run order of the hooks for in-place deployments?


Options:

A. Before Install -> Application Stop -> Application Start -> After Install
B. Application Stop -> Before Install -> After Install -> Application Start
C. Before Install -> Application Stop -> Validate Service -> Application Start
D. Application Stop -> Before Install -> Validate Service -> Application Start

Answer: C

Amazon DVA-C01 Sample Question 133

A company maintains an application responsible for processing several thousand external callbacks each day. The company’s System administrators want to know how many callbacks are being received on a rolling basis, and they want this data available for 10 days. The company also wants the ability to issue automated alerts if the number of callbacks exceeds the defined thresholds.

What is the MOST cost-effective way to address the need to track and alert on these statistics?


Options:

A. Push callback data to an Amazon RDS database that can be queried to show historical data and to alert on exceeded thresholds.
B. Push callback data to AWS X-Ray and use AWS Lambda to query, display, and alert on exceeded thresholds.
C. Push callback data to Amazon Kinesis Data Streams and invoke an AWS Lambda function that stores data in Amazon DynamoDB and sends the required alerts.
D. Push callback data to Amazon CloudWatch as a custom metric and use the CloudWatch alerting mechanisms to alert System Administrators.

Answer: E

Amazon DVA-C01 Sample Question 134

A company has a serverless application that uses AWS Lambda functions and AWS Systems Manager parameters to store configuration data. The company....... the Lambda functions inside the VPC and into private subnets. The Lambda functions are now producing errors in their attempts to access Systems Manager parameters.

Which solution will allow the Lambda functions to access Systems Manager parameters inside the VPC?


Options:

A. Configure security groups to allow access to Systems Manager.
B. Create an interface VPC endpoint for Systems Manager.
C. Use an internet gateway from inside the VPC.
D. Create a gateway VPC endpoint for Systems Manager.

Answer: C

Amazon DVA-C01 Sample Question 135

A Developer is creating a Lambda function and will be using external libraries that are not included in the standard Lambda libraries.

What action would minimize the Lambda compute time consumed?


Options:

A. Install the dependencies and external libraries at the beginning of the Lambda function.
B. Create a Lambda deployment package that includes the external libraries.
C. Copy the external libraries to Amazon S3, and reference the external libraries to the S3 location.
D. Install the external libraries in Lambda to be available to all Lambda functions.

Answer: E

Amazon DVA-C01 Sample Question 136

A developer is migrating a Windows-based legacy application from on premises to AWS. The application will run on Amazon EC2 instances that run Amazon Linux. The application stores a large number of files in an NFS drive. The migration solution must minimize downtime and application code changes.

Which solution should the developer use to migrate the application data?


Options:

A. Create an Amazon S3 bucket. Use the s3 sync command to upload the files to the S3 bucket.
B. Create an Amazon Elastic Block Store (Amazon E8S) volume. Upload the files to the volume. Attach the volume to the EC2 instances.
C. Create an Amazon Elastic File System (Amazon EFS) file system. Use AWS DataSync to transfer the files to Amazon EFS.
D. Create an Amazon Elastic File System (Amazon EFS) file system. Mount the EFS file system from the legacy application. Copy the files to the EFS mount.

Answer: D

Amazon DVA-C01 Sample Question 137

A developer is working on an ecommerce website. The developer wants to review server logs without logging in to each of the application servers individually. The website runs on multiple Amazon EC2 instances, is written in Python, and needs to be highly available.

How can the developer update the application to meet these requirements with MINIMUM changes?


Options:

A. Rewrite the application to be cloud native and to run on AWS Lambda where the logs can be reviewed in Amazon CloudWatch.
B. Set up centralized logging by using Amazon Elasticsearch Service (Amazon ES), Logstash, and Kibana
C. Scale down the application to one larger EC2 instance where only one instance is recording logs.
D. Install the unified Amazon CloudWatch agent on the EC2 instances. Configure the agent to push the application logs to CloudWatch.

Answer: E

Amazon DVA-C01 Sample Question 138

Where should an Elastic Beanstalk configuration file named healthcheckur1.config be placed in the application source bundle?


Options:

A. In the root of the application
B. In the bin folder
C. In healthcheckur1.config.ebextension under root
D. In the .ebextensions folder

Answer: E

Amazon DVA-C01 Sample Question 139

A Developer has published an update to an application that is served to a global user base using Amazon CloudFront. After deploying the application, users are not able to see the updated changes.

How can the Developer resolve this issue?


Options:

A. Remove the origin from the CloudFront configuration and add it again.
B. Disable forwarding of query strings and request headers from the CloudFront distribution configuration.
C. Invalidate all the application objects from the edge caches.
D. Disable the CloudFront distribution and enable it again to update all the edge locations.

Answer: C Explanation: Explanation: https://docs.aws.ama zon.com/AmazonCloudFront/latest/DeveloperGuide/Invalidation.htmm

Amazon DVA-C01 Sample Question 140

A company is creating an application that will require users to access AWS services and allow them to reset their own passwords.

Which of the following would allow the company to manage users and authorization while allowing users to reset their own passwords?


Options:

A. Amazon Cognito identify pools and AWS STS
B. Amazon Cognito identity pools and AWS IAM
C. Amazon Cognito user pools and AWS KMS
D. Amazon Cognito user pools and identity pools

Answer: D Explanation: Explanation: https://serverles s-stack.com/chapters/cognito-user-pool-vs-identity-pool.htmm

Amazon DVA-C01 Sample Question 141

An existing serverless application processes uploaded image files. The process currently uses a single Lambda function that takes an image file, performs the processing, and stores the file in Amazon S3. Users of the application now require thumbnail generation of the images. Users want to avoid any impact to the time it takes to perform the image uploads.

How can thumbnail generation be added to the application, meeting user requirements while minimizing changes to existing code?


Options:

A. Change the existing Lambda function handling the uploads to create thumbnails at the time of upload. Have the function store both the image and thumbnail in Amazon S3.
B. Create a second Lambda function that handles thumbnail generation and storage. Change the existing Lambda function to invoke it asynchronously.
C. Create an S3 event notification with a Lambda function destination. Create a new Lambda function to generate and store thumbnails.
D. Create an S3 event notification to an SQS Queue. Create a scheduled Lambda function that processes the queue, and generates and stores thumbnails.

Answer: C Explanation: Explanation: https://docs.aws.amazon.com/lambda/latest/dg/with-s3-example.htmm

Amazon DVA-C01 Sample Question 142

Which of the following services are key/value stores? Choose 3 answers


Options:

A. Amazon ElastiCache
B. Simple Notification Service
C. DynamoDB
D. Simple Workflow Service
E. Simple Storage Service

Answer: A, C, F

Amazon DVA-C01 Sample Question 143

A Development team currently supports an application that uses an in-memory store to save accumulated game results. Individual results are stored in a database. As part of migrating to AWS, the team needs to use automatic scaling. The team knows this will yield inconsistent results.

Where should the team store these accumulated game results to BEST allow for consistent results without impacting performance?


Options:

A. Amazon S3
B. Amazon RDS
C. Amazon ElastiCache
D. Amazon Kinesis

Answer: D

Amazon DVA-C01 Sample Question 144

A deployment package uses the AWS CLI to copy files into any S3 bucket in the account, using access keys stored in environment variables. The package is running on EC2 instances, and the instances have been modified to run with an assumed IAM role and a more restrictive policy that allows access to only one bucket.

After the change, the Developer logs into the host and still has the ability to write into all of the S3 buckets in that account.

What is the MOST likely cause of this situation?


Options:

A. An IAM inline policy is being used on the IAM role
B. An IAM managed policy is being used on the IAM role
C. The AWS CLI is corrupt and needs to be reinstalled
D. The AWS credential provider looks for instance profile credentials last

Answer: B Explanation: Explanation: https://docs.aws.amazon.com/sdk-for-java/v1/developer -guide/credentials.htmm

Amazon DVA-C01 Sample Question 145

Which of the following programming languages have an officially supported AWS SDK? Choose 2 answers


Options:

A. Perl
B. PHP
C. Pascal
D. Java
E. SQL

Answer: B, E

Amazon DVA-C01 Sample Question 146

Which code snippet below returns the URL of a load balanced web site created in CloudFormation with an AWS::ElasticLoadBalancing::LoadBalancer resource name "ElasticLoad Balancer"?


Options:

A. "Fn::Join" : ["". [ "http:// ", {"Fn::GetAtr” : [ "ElasticLoadBalancer","DNSName"]}]]
B. "Fn::Join" : ["". [ "http:// ", {"Fn::GetAtr” : [ "ElasticLoadBalancer","Url"]}]]
C. "Fn::Join" : ["". [ "http:// ", {"Ref" : "ElasticLoadBalancerUrl"}]]
D. "Fn::Join" : [".", [ "http:// ", {"Ref" : "ElasticLoadBalancerDNSName"}]]

Answer: A Explanation: Explanation: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/intrinsic-functio n-reference-getatt.htmm

Amazon DVA-C01 Sample Question 147

Developer is creating an AWS Lambda function to process a stream of data from an Amazon Kinesis Data Stream. When the Lambda function parses the data and encounters a missing field, it exits the function with an error. The function is generating duplicate records from the Kinesis stream. When the Developer looks at the stream output without the Lambda function, there are no duplicate records.

What is the reason for the duplicates?


Options:

A. The Lambda function did not advance the Kinesis stream pointer to the next record after the error.
B. The Lambda event source used asynchronous invocation, resulting in duplicate records.
C. The Lambda function did not handle the error, and the Lambda service attempted to reprocess the data.
D. The Lambda function is not keeping up with the amount of data coming from the stream.

Answer: C Explanation: Explanation: https://docs.aws.amazon.com/lambda/latest/dg/with-kinesis.htmm

Amazon DVA-C01 Sample Question 148

A Developer decides lo store highly secure data in Amazon S3 and wants to implement server-side encryption (SSF) with granular control of who can access the master key Company policy requires that the master key be created, rotated, and disabled easily when needed, all for security reasons.

Which solution should be used to moot these requirements?


Options:

A. SSE with Amazon S3 managed keys (SSE-S3)
B. SSFE with AWS KMS managed keys (SSE KMS)
C. SSE with AWS Secrets Manager
D. SSE with customer provided encryption keys

Answer: C

Amazon DVA-C01 Sample Question 149

An application stores images in an S3 bucket. Amazon S3 event notifications are used to trigger a Lambda function that resizes the images. Processing each image takes less than a second.

How will AWS Lambda handle the additional traffic?


Options:

A. Lambda will scale out to execute the requests concurrently.
B. Lambda will handle the requests sequentially in the order received.
C. Lambda will process multiple images in a single execution.
D. Lambda will add more compute to each execution to reduce processing time.

Answer: B

Amazon DVA-C01 Sample Question 150

A company is using AWS Elastic Beanstalk to deploy a three-tier application. The application uses an Amazon RDS DB instance as the database tier. The com wants to decouple the DB instance from the Elastic Beanstalk environment.

Which combination of steps should a developer take to meet this requirement? (Select TWO.)


Options:

A. Create a new Elastic Beanstalk environment that connects to the DB instance.
B. Create a new DB instance from a snapshot of the previous DB instance.
C. Use the Elastic Beanstalk CLI to decouple the DB instance.
D. Use the AWS CLI to decouple the DB instance.
E. Modify the current Elastic Beanstalk environment to connect to the DB instance.

Answer: B, F

Amazon DVA-C01 Sample Question 151

An application displays a status dashboard. The status is updated by 1 KB messages from an SQS queue. Although the status changes infrequently, the Developer must minimize the time between the message arrival in the queue and the dashboard update.

What technique provides the shortest delay in updating the dashboard?


Options:

A. Retrieve the messages from the queue using long polling every 20 seconds.
B. Reduce the size of the messages by compressing them before sending.
C. Retrieve the messages from the queue using short polling every 10 seconds.
D. Reduce the size of each message payload by sending it in two parts.

Answer: A Explanation: Explanation: https://docs.aws.ama zon.com/ko_kr/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-short-and-long-polling.html#sqs-short-long-polling-differencet

Amazon DVA-C01 Sample Question 152

A Developer is writing transactions into a DynamoDB table called “SystemUpdates” that has 5 write capacity units.

Which option has the highest read throughput?


Options:

A. Eventually consistent reads of 5 read capacity units reading items that are 4 KB in size
B. Strongly consistent reads of 5 read capacity units reading items that are 4 KB in size
C. Eventually consistent reads of 15 read capacity units reading items that are 1 KB in size
D. Strongly consistent reads of 15 read capacity units reading items that are 1 KB in size

Answer: C

Amazon DVA-C01 Sample Question 153

A company needs to ingest terabytes of data each hour from thousands of sources that are delivered almost continually throughout the day. The volume of messages generated varies over the course of the day. Messages must be delivered in real time for fraud detection and live operational dashboards.

Which approach will meet these requirements?


Options:

A. Send the messages to an Amazon SQS queue, then process the messages by using a fleet of Amazon EC2 instances
B. Use the Amazon S3 API to write messages to an S3 bucket, then process the messages by using Amazon Redshift
C. Use AWS Data Pipeline to automate the movement and transformation of data
D. Use Amazon Kinesis Data Streams with Kinesis Client Library to ingest and deliver messages

Answer: D Explanation: Explanation: https://aws.amazon.c om/streaming-data/

Amazon DVA-C01 Sample Question 154

A global company has an application running on Amazon EC2 instances that serves image files from Amazon S3. User requests from the browser are causing high traffic, which results in degraded performance.

Which optimization solution should a Developer implement to increase application performance?


Options:

A. Create multiple prefix in the S3 bucket to increase the request rate
B. Create an Amazon ElastiCache cluster to cache and serve frequently accessed items.
C. Use Amazon CloudFront to serve the content of images stored in Amazon S3.
D. Submit a ticket to AWS support to request a rate limit increase for the S3 bucket.

Answer: C

Amazon DVA-C01 Sample Question 155

An application running on multiple Amazon EC2 instances pulls messages ...SQS queue. A requirement for the application is that all messages must be encrypted at rest.

Developers are instructed to use methods that allow for centralized .. possible support requirements whenever possible.

Which of the following solution supports these requirements?


Options:

A. Encrypt individual messages by using client-side encryption with customer managed keys, then write to the SQS queue.
B. Encrypt individual messages by using SQS Extended Client and the Amazon S3 encryption client.
C. Create an SQS queue, and encrypt the queue by using server-side encryption with AWS KMS
D. Create an SQS queue and encrypt the queue by using client-side encryption

Answer: D

Amazon DVA-C01 Sample Question 156

A developer has written a multi-threaded application that is running on a fleet of Amazon EC2 instances. The operations team has requested a graphical method to monitor the number of running threads over time.

What is the MOST efficient way to fulfill this request?


Options:

A. Periodically send the thread count to AWS X-Ray segments, then generate a service graph on demand
B. Create a custom Amazon CloudWatch metric and periodically perform a PutMetricData call with the current thread count.
C. Periodically log thread count data to Amazon S3. Use Amazon Kinesis to process the data into a graph.
D. Periodically write the current thread count to a table using Amazon DynarnoDB and use Amazon CloudFront to create a graph

Answer: E

Amazon DVA-C01 Sample Question 157

You are inserting 1000 new items every second in a DynamoDB table. Once an hour these items are analyzed and then are no longer needed. You need to minimize provisioned throughput, storage, and API calls.

Given these requirements, what is the most efficient way to manage these Items after the analysis?


Options:

A. Retain the items in a single table
B. Delete items individually over a 24 hour period
C. Delete the table and create a new table per hour
D. Create a new table per hour

Answer: D

Amazon DVA-C01 Sample Question 158

A developer is planning to use an Amazon API Gateway and AWS Lambda to provide a REST API The developer will have three distinct environments to manage development, test, and production. How should the application be deployed while minimizing the number of resources to manage?


Options:

A. Create a separate API Gateway and separate Lambda function for each environment in the same Region
B. Assign a Region for each environment and deploy API Gateway and Lambda to each Region
C. Create one API Gateway with multiple stages with one Lambda function with multiple aliases.
D. Create one API Gateway and one Lambda function, and use a REST parameter to identify tne environment.

Answer: D

Amazon DVA-C01 Sample Question 159

A company is migrating a single-server, on-premises web application to AWS. The company intends to use multiple servers behind an Elastic Load Balancer (ELB) to balance the load, and will also store session data in memory on the web server. The company does not want to lose that session data if a server fails or goes offline, and it wants to minimize user’s downtime.

Where should the company move session data to MOST effectively reduce downtime and make users’ session data more fault tolerant?


Options:

A. An Amazon ElastiCache for Redis cluster
B. A second Amazon EBS volume
C. The web server’s primary disk
D. An Amazon EC2 instance dedicated to session data

Answer: B

Amazon DVA-C01 Sample Question 160

A developer wants the ability to roll back to a previous version of an AWS Lambda function in the event of errors caused by a new deployment.

How can the developer achieve this with MINIMAL impact on users?


Options:

A. Change the application to use an alias that points to the current version Deploy the new version of the code Update the alias to use the newly deployed version. If too many errors are encountered, point the alias back to the previous version
B. Change the application to use an alias that points to the current version Deploy the new version of the code. Update the alias to direct 10% of users to the newly deployed version. If too many errors are encountered, send 100% of traffic to the previous version
C. Do not make any changes to the application Deploy the new version of the code. If too many errors are encountered, point the application back to the previous version using the version number in the Amazon Resource Name (ARN)
D. Create three aliases: new, existing, and router Point the existing alias to the current version Have the router alias direct 100% of users to the existing alias Update the application to use the router alias Deploy the new version of the code Point the new alias to this version Update the router alias to direct 10% of users to the new alias If too many errors are encountered, send 100% of traffic to the existing alias

Answer: B

Amazon DVA-C01 Sample Question 161

Your application is trying to upload a 6 GB file to Simple Storage Service and receive a “Your proposed upload exceeds the maximum allowed object size." error message.

What is a possible solution for this?


Options:

A. None, Simple Storage Service objects are limited to 5 GB
B. Use the multi-part upload API for this object
C. Use the large object upload API for this object
D. Contact support to increase your object size limit
E. Upload to a different region

Answer: B Explanation: Explanation: https://docs.aws.amazon.com/Amaz onS3/latest/dev/mpuoverview.htmm

Amazon DVA-C01 Sample Question 162

A Developer writes an AWS Lambda function and uploads the code in a .ZIP file to Amazon S3. The Developer makes changes to the code and uploads a new .ZIP file to Amazon S3. However, Lambda executes the earlier code.

How can the Developer fix this in the LEAST disruptive way?


Options:

A. Create another Lambda function and specify the new .ZIP file.
B. Call the update-function-code API.
C. Remove the earlier .ZIP file first, then add the new .ZIP file.
D. Call the create-alias API.

Answer: B Explanation: Explanation: https://docs.aws.amazon .com/cli/latest/reference/lambda/update-function-code.htmm

Amazon DVA-C01 Sample Question 163

An application contains two components one component to handle HI IP requests, and another component to handle background processing tasks Bach component must scale independently The developer wants to deploy this application using AWS Elastic Beanstalk.

How should this application be deployed, based on these requirements?


Options:

A. Deploy the application in a single Elastic Beanstalk environment
B. Deploy each component in a separate Elastic Beanstalk environment
C. Use multiple Elastic Beanstalk environments for the HTTP component but one environment for the background task component
D. Use multiple Elastic Beanstalk environments for the background task component but one environment tor the HTTP component

Answer: B

Amazon DVA-C01 Sample Question 164

A Developer is making changes to a custom application that is currently using AWS Elastic Beanstalk.

After the Developer completes the changes, what solutions will update the Elastic Beanstalk environment with the new application version? (Choose two.)


Options:

A. Package the application code into a .zip file, and upload, then deploy the packaged application from the AWS Management Console
B. Package the application code into a .tar file, create a new application version from the AWS Management Console, then update the environment by using AWS CLI
C. Package the application code into a .tar file, and upload and deploy the packaged application from the AWS Management Console
D. Package the application code into a .zip file, create a new application version from the packaged application by using AWS CLI, then update the environment by using AWS CLI
E. Package the application code into a .zip file, create a new application version from the AWS Management Console, then rebuild the environment by using AWS CLI

Answer: C, E

Amazon DVA-C01 Sample Question 165

Which DynamoDB limits can be raised by contacting AWS support? Choose 2 answers


Options:

A. The number of hash keys per account
B. The maximum storage used per account
C. The number of tables per account
D. The number of local secondary indexes per account
E. The number of provisioned throughput units per account

Answer: C, E Explanation: Explanation: https://docs.aws.amazon.com/amazondynamodb/l atest/developerguide/Limits.htmm

Amazon DVA-C01 Sample Question 166

A Developer must re-implement the business logic for an order fulfilment system. The business logic has to make requests to multiple vendors to decide where to purchase an item. The whole process can take up to a week to complete.

What is the MOST efficient and SIMPLEST way to implement a system that meets these requirements?


Options:

A. Use AWS Step Functions to execute parallel Lambda functions, and join the results.
B. Create an AWS SQS for each vendor, poll the queue from a worker instance, and joint the results.
C. Use AWS Lambda to asynchronously call a Lambda function for each vendor, and join the results.
D. Use Amazon CloudWatch Events to orchestrate the Lambda functions.

Answer: A Explanation: Explanation: https://aws.amazon.com/step-functions/

Amazon DVA-C01 Sample Question 167

EC2 instances are launched from Amazon Machine images (AMIs). A given public AMI can:


Options:

A. be used to launch EC2 Instances in any AWS region.
B. only be used to launch EC2 instances in the same country as the AMI is stored.
C. only be used to launch EC2 instances in the same AWS region as the AMI is stored.
D. only be used to launch EC2 instances in the same AWS availability zone as the AMI is stored

Answer: C Explanation: Explanation: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/usingsharedamis-finding.htmm

Amazon DVA-C01 Sample Question 168

A developer wants to secure sensitive configuration date such as passwords, database strings, and application license codes. Access to this sensitive information must be tracked for future audit purposes.


Options:

A. In an encrypted file on the source code bundle; grant the application access with Amazon IAM
B. In the Amazon EC2 Systems Manager Parameter Store; grant the application access with IAM
C. On an Amazon EBS encrypted volume attach the volume to an Amazon EC2 instance to access the data
D. As on object in on Amazon S3 bucket, grant on Amazon EC2 instance access with on IAM rob.

Answer: C

Amazon DVA-C01 Sample Question 169

A Developer is creating a mobile application with a limited budget. The solution requires a scalable service that will enable customers to sign up and authenticate into the mobile application while using the organization’s current SAML 2.0 identity provider.

Which AWS service should be used to meet these requirements?


Options:

A. AWS Lambda
B. Amazon Cognito
C. AWS IAM
D. Amazon EC2

Answer: C

Amazon DVA-C01 Sample Question 170

company needs a fully-managed source control service that will work in AWS. The service must ensure that revision control synchronizes multiple distributed repositories by exchanging sets of changes peer-to-peer. All users need to work productively even when not connected to a network.

Which source control service should be used?


Options:

A. Subversion
B. AWS CodeBuild
C. AWS CodeCommit
D. AWS CodeStar

Answer: D

Amazon DVA-C01 Sample Question 171

In a multi-container Docker environment in AWS Elastic Beanstalk, what is required to configure container instances in the environment?


Options:

A. An Amazon ECS task definition
B. An Amazon ECS cluster
C. A Docker in an application package
D. A CLI for Elastic Beanstalk

Answer: A Explanation: Reference: [Reference: https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/create_deploy_docker_ecs.html, , , , ]

Amazon DVA-C01 Sample Question 172

A Developer is storing sensitive documents in Amazon S3 that will require encryption at rest. The encryption keys must be rotated annually, at least.

What is the easiest way to achieve this?


Options:

A. Encrypt the data before sending it to Amazon S3
B. Import a custom key into AWS KMS with annual rotation enabled
C. Use AWS KMS with automatic key rotation
D. Export a key from AWS KMS to encrypt the data

Answer: C Explanation: Explanation: https://docs.a ws.amazon.com/kms/latest/developerguide/rotate-keys.htmlhttps://docs.aws.amazon.com/kms/latest/developerguide/custom-key-store-overview.htm lYou can use the same techniques to view and manage the CMKs in your custom key store that you use for CMKs in the AWS KMS key store. You can control access with IAM and key policies, create tags and aliases, enable and disable the CMKs, and schedule key deletion. You can use the CMKs for cryptographic operations and use them with AWS services that integrate with AWS KMS. However, you cannot enable automatic key rotation and you cannot import key material into a CMK in a custom key store.Q: Can I rotate my keys? Yes. You can choose to have AWS KMS automatically rotate CMKs every year, provided that those keys were generated within AWS KMS HSMs. Automatic key rotation is not supported for imported keys, asymmetric keys, or keys generated in an AWS CloudHSM cluster using the AWS KMS custom key store feature. If you choose to import keys to AWS KMS or asymmetric keys or use a custom key store, you can manually rotate them by creating a new CMK and mapping an existing key alias from the old CMK to the new CMK. https://aws.amazon.com/kms/faqs/

Amazon DVA-C01 Sample Question 173

A Developer is migrating an on-premises application to AWS. The application currently takes user uploads and saves them to a local directory on the server. All uploads must be saved and made immediately available to all instances in an Auto scaling group.

Which approach will meet these requirements?


Options:

A. Use Amazon EBS and configure the application AMI to use a snapshot of the same EBS instance on boot.
B. Use Amazon S3 and rearchitect the application so all uploads are placed in S3.
C. Use instance storage and share it between instances launched from the same Amazon machine image (AMI).
D. Use Amazon EBS and file synchronization software to achieve eventual consistency among the auto scaling group.

Answer: C

Amazon DVA-C01 Sample Question 174

A development team is using AWS Elastic Beanstalk to deploy a two-tier application that consists of a load-balanced web tier and an Amazon RDS database tier in production. The team would like to separate the RDS instance from the Elastic Beanstalk.

How can this be accomplished?


Options:

A. Use the Elastic Beanstalk CLI to disassociate the database.
B. Use the AWS CLI to disassociate the database.
C. Change the deployment policy to disassociate the database.
D. Recreate a new Elastic Beanstalk environment without Amazon RDS.

Answer: D Explanation: Explanation: https://aws.amazon.com/premiumsuppo rt/knowledge-center/decouple-rds-from-beanstalk/

Amazon DVA-C01 Sample Question 175

A developer is working on a Python application that runs on Amazon EC2 instances. The developer wants to enable tracing of application requests to debug performance issues in the code.

Which combination of actions should the developer take to achieve this goal? (Select TWO.)


Options:

A. Install the Amazon CloudWatch agent on the EC2 instances.
B. Install the AWS X-Ray daemon on the EC2 instances
C. Configure the application to write JSON-formatted logs to /var/log/cloudwatch.
D. Configure the application to write trace data to /var/log/xray.
E. Install and configure the AWS X-Ray SDK for Python in the application.

Answer: B, F

Amazon DVA-C01 Sample Question 176

A Developer must analyze performance issues with production-distributed applications written as AWS Lambda functions. These distributed Lambda applications invoke other components that make up the applications.

How should the Developer identify and troubleshoot the root cause of the performance issues in production?


Options:

A. Add logging statements to the Lambda functions, then use Amazon CloudWatch to view the logs.
B. Use AWS Cloud Trail and then examine the logs
C. Use AWS X-Ray, then examine the segments and errors
D. Run Amazon Inspector agents and then analyze performance

Answer: C Explanation: Explanation: https://aws.amazon.com/blogs/developer/new-analyze-and-debug-distributed-applications-interactively-using-aws-x-ray-analytics/

Amazon DVA-C01 Sample Question 177

What type of block cipher does Amazon S3 offer for server side encryption?


Options:

A. Triple DES
B. Advanced Encryption Standard
C. Blowfish
D. RC5

Answer: B Explanation: Explanation: https://docs.aws.amazon.com/AmazonS3/latest/dev/serv-side-encryption.htmm

Amazon DVA-C01 Sample Question 178

A developer is receiving an intermittent ProvisionedThroughputExceededException error from an application that is based on Amazon DynamoDB. According to the Amazon CloudWatch metrics for the table, the application is not exceeding the provisioned throughput

What could be the cause of the issue?


Options:

A. The DynamoDB table storage size is larger than the provisioned size.
B. The application is exceeding capacity on a particular hash key.
C. The DynamoDB table is exceeding the provisioned scaling operations.
D. The application is exceeding capacity on a particular sort key.

Answer: C

Amazon DVA-C01 Sample Question 179

A Developer is writing a Linux-based application to run on AWS Elastic Beanstalk. Application requirements state that the application must maintain full capacity during updates while minimizing cost.

Which type of Elastic Beanstalk deployment policy should the Developer specify for the environment?


Options:

A. Immutable
B. Rolling
C. All at Once
D. Rolling with additional batch

Answer: D Explanation: Explanation: https://docs.aws.amazon.co m/elasticbeanstalk/latest/dg/using-features.rolling-version-deploy.htmm

Amazon DVA-C01 Sample Question 180

A customer wants to deploy its source code on an AWS Elastic Beanstalk environment. The customer needs to perform deployment with minimal outage and should only use existing instances to retain application access log.

What deployment policy would satisfy these requirements?


Options:

A. Rolling
B. All at once
C. Rolling with an additional batch
D. Immutable

Answer: B

Amazon DVA-C01 Sample Question 181

A company has three AWS Lambda functions that are written in Node js The Lambda functions include a mix of custom code and open-source modules When bugs are occasionally detected in the open-source modules, all three Lambda functions must be patched.

What is the MOST operationally efficient solution to deploy a patched open-source library for all three Lambda functions?


Options:

A. Create a custom AWS CloudFormation public registry extension Reference a GitHub repository that hosts the open-source modules m the extension Configure Formation to scan the repository once each day Write an AWS Serverless Application Model (AWS SAM) template to redeploy the three Lambda functions upon a scan notification change.
B. Create an Amazon CloudFront distribution with an Amazon S3 bucket as the origin Upload the patched modules to Amazon S3 when needed Modify each Lambda function to download the patched modules from the CloudFront distribution during the cold start.
C. Launch an Amazon EC2 instance Host a private open-source module registry on the EC2 instance Upload the modified open-source modules to the private registry when needed. Modify each Lambda function deployment script to download the modules from the private registry Redeploy the three new Lambda functions.
D. Create a Lambda layer with the open-source modules Modify all three Lambda functions to depend on the layer Remove the open-source modules from each Lambda function Patch the Lambda layer with the modified open-source modules when needed Update the Lambda functions to reference the new layer version

Answer: E

Amazon DVA-C01 Sample Question 182

A developer is writing an application in AWS Lambda To simplify testing and deployments, the developer needs the database connection string to be easily changed without modifying the Lambda code.

How can this requirement be met?


Options:

A. Store the connection string as a secret in AWS Secrets Manager
B. Store the connection string in an IAM user account.
C. Store the connection string in AWS KMS
D. Store the connection string as a Lambda layer.

Answer: B

Amazon DVA-C01 Sample Question 183

Company A has an S3 bucket containing premier content that they intend to make available to only paid subscribers of their website. The S3 bucket currently has default permissions of all objects being private to prevent inadvertent exposure of the premier content to non-paying website visitors.

How can Company A provide only paid subscribers the ability to download a premier content file in the S3 bucket?


Options:

A. Apply a bucket policy that grants anonymous users to download the content from the S3 bucket
B. Generate a pre-signed object URL for the premier content file when a paid subscriber requests a download
C. Add a bucket policy that requires Multi-Factor Authentication for requests to access the S3 bucket objects
D. Enable server-side encryption on the S3 bucket for data protection against the non-paying website visitors

Answer: C

Amazon DVA-C01 Sample Question 184

n application running on an Amazon Linux EC2 instance needs to manage the AWS infrastructure.

How can the EC2 instance be configured to make AWS API calls securely?


Options:

A. Sign the AWS CLI command using the signature version 4 process.
B. Run the aws configure AWS CLI command and specify the access key id and secret access key.
C. Specify a role for the EC2 instance with the necessary privileges.
D. Pass the access key id and secret access key as parameters for each AWS CLI command.

Answer: D

Amazon DVA-C01 Sample Question 185

What are the steps to using the AWS CLI to launch a templatized serverless application?


Options:

A. Use AWS CloudFormation get-template then CloudFormation execute-change-set.
B. Use AWS CloudFormation validate-template then CloudFormation create-change-set.
C. Use AWS CloudFormation package then CloudFormation deploy.
D. Use AWS CloudFormation create-stack then CloudFormation update-stack.

Answer: C Explanation: Explanation: https://docs.aws. amazon.com/cli/latest/reference/cloudformation/package.htmm

Amazon DVA-C01 Sample Question 186

An application is real-time processing millions of events that are received through an API.

What service could be used to allow multiple consumers to process the data concurrently and MOST cost-effectively?


Options:

A. Amazon SNS with fanout to an SQS queue for each application
B. Amazon SNS with fanout to an SQS FIFO (first-in, firtst-out) queue for each application
C. Amazon Kinesis Firehouse
D. Amazon Kinesis Streams

Answer: E

Amazon DVA-C01 Sample Question 187

Which statements about DynamoDB are true? Choose 2 answers


Options:

A. DynamoDB uses a pessimistic locking model
B. DynamoDB uses optimistic concurrency control
C. DynamoDB uses conditional writes for consistency
D. DynamoDB restricts item access during reads
E. DynamoDB restricts item access during writes

Answer: B, D

Amazon DVA-C01 Sample Question 188

A Developer wants to enable AWS X-Ray for a secure application that runs in an Amazon ECS environment.

What combination of steps will enable X-Ray? (Select THREE.)


Options:

A. Create a Docker image that runs the X-Ray daemon.
B. Add instrumentation to the application code for X-Ray.
C. Install the X-Ray daemon on the underlying EC2 instance.
D. Configure and use an IAM EC2 instance role.
E. Register the application with X-Ray.
F. Configure and use an IAM role for tasks.

Answer: A, B, F Explanation: Explanation: https://doc s.aws.amazon.com/xray/latest/devguide/xray-daemon-ecs.htmlhttps://docs.aws.amazon.com/xray/latest/devguide/scorekeep-ecs.htmm

Amazon DVA-C01 Sample Question 189

The development team is working on an API that will be served from Amazon API gateway. The API will be served from three environments: development, test, and production. The API Gateway is configured to use 237 GB of cache in all three stages.

Which is the MOST cost-efficient deployment strategy?


Options:

A. Create a single API Gateway with all three stages.
B. Create three API Gateways, one for each stage in a single AWS account.
C. Create an API Gateway in three separate AWS accounts.
D. Enable the cache for development and test environments only when needed.

Answer: E

Amazon DVA-C01 Sample Question 190

A game stores user game data in an Amazon DynamoDB table. Individual users should not have access to other users’ game data. How can this be accomplished?


Options:

A. Encrypt the game data with individual user keys.
B. Restrict access to specific items based on certain primary key values.
C. Stage data in SQS queues to inject metadata before accessing DynamoDB.
D. Read records from DynamoDB and discard irrelevant data client-side.

Answer: C

Amazon DVA-C01 Sample Question 191

A developer has written an application that runs on Amazon EC2 instances. The developer is adding functionality for the application to write objects to an Amazon S3 bucket Which policy must the developer modify to allow the instances to write these objects?


Options:

A. The 1AM policy that is attached to the EC2 instance profile role
B. The session policy that is applied to the EC2 instance role session
C. The AWS Key Management Service (AWS KMS) key policy that is attached to the EC2 instance profile role.
D. The Amazon VPC endpoint policy

Answer: B

Amazon DVA-C01 Sample Question 192

A company is using Amazon RDS MySQL instances for its application database tier and Apache Tomcat servers for its web tier. Most of the database queries from web applications are repeated read requests.

Use of which AWS service would increase in performance by adding in-memory store for repeated read queries?


Options:

A. Amazon RDS Multi-AZ
B. Amazon SQS
C. Amazon ElastiCache
D. Amazon RDS read replica

Answer: D

Amazon DVA-C01 Sample Question 193

A company needs to distribute firmware updates to its customers around the world.

Which service will allow easy and secure control of the access to the downloads at the lowest cost?


Options:

A. Use Amazon CloudFront with signed URLs for Amazon S3
B. Create a dedicated Amazon CloudFront Distribution for each customer
C. Use Amazon CloudFront with AWS Lambda@Edge
D. Use Amazon API Gateway and AWS Lambda to control access to an S3 bucket

Answer: A Explanation: Explanation: https://aws.amazon.com/bl ogs/networking-and-content-delivery/amazon-s3-amazon-cloudfront-a-match-made-in-the-cloud/

Amazon DVA-C01 Sample Question 194

A Developer has created a Lambda function and is finding that the function is taking longer to complete than expected. After some debugging, the Developer has discovered that increasing compute capacity would improve performance.

How can the Developer increase the Lambda compute resources?


Options:

A. Run on a larger instance size with more compute capacity.
B. Increase the maximum execution time.
C. Specify a larger compute capacity when calling the Lambda function.
D. Increase the allocated memory for the Lambda function.

Answer: E

Amazon DVA-C01 Sample Question 195

A developer Is working with a Docker application that needs to be quickly deployed using AWS without changing the infrastructure or configuring health checks. The application should be configured so that changes and updates can be made automatically without any downtime

Which solution will meet these requirements?


Options:

A. Use AWS Elastic Beanstalk for application deployment and select an all-at-once update policy.
B. Use AWS Elastic Beanstalk for application deployment and select a rolling deployment policy.
C. Deploy the Docker container on an Amazon EC2 instance in an Auto Scaling group and configure a health check on the EC2 instance
D. Deploy the Docker container using AWS Lambda and enable Amazon CloudWatch monitoring

Answer: B

Amazon DVA-C01 Sample Question 196

Company C has recently launched an online commerce site for bicycles on AWS. They have a "Product" DynamoDB table that stores details for each bicycle, such as, manufacturer, color, price, quantity and size to display in the online store. Due to customer demand, they want to include an image for each bicycle along with the existing details.

Which approach below provides the least impact to provisioned throughput on the "Product" table?


Options:

A. Serialize the image and store it in multiple DynamoDB tables
B. Create an "Images" DynamoDB table to store the Image with a foreign key constraint to the "Product” table
C. Add an image data type to the "Product" table to store the images in binary format
D. Store the images in Amazon S3 and add an S3 URL pointer to the "Product" table item for each image

Answer: D Explanation: Explanation: https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/bp-use-s3-too.html #bp-use-s3-too-large-valuesFor example, consider the ProductCatalog table in the Creating Tables and Loading Data for Code Examples in DynamoDB section. Items in this table store information about item price, description, book authors, and dimensions for other products. If you wanted to store an image of each product that was too large to fit in an item, you could store the images in Amazon S3 instead of in DynamoDB.

Amazon DVA-C01 Sample Question 197

n on-premises application makes repeated calls to store files to Amazon S3. As usage of the application has increased, “LimitExceeded” errors are being logged.

What should be changed to fix this error?


Options:

A. Implement exponential backoffs in the application.
B. Load balance the application to multiple servers.
C. Move the application to Amazon EC2.
D. Add a one second delay to each API call.

Answer: B

Amazon DVA-C01 Sample Question 198

A developer has a legacy application that is hosted on-premises Other applications hosted on AWS depend on the on-premises application for proper functioning In case of any application errors, the developer wants to be able to use Amazon CloudWatch to monitor and troubleshoot all applications from one place.

How can the developer accomplish this?


Options:

A. Install an AWS SDK on the on-premises server to automatically send logs to CloudWatch .
B. Download the CloudWatch agent to the on-premises server Configure the agent to use IAM user credentials with permissions for CloudWatch
C. Upload log files from the on-premises server to Amazon S3 and have CloudWatch read the files
D. Upload log files from the on-premises server to an Amazon EC2 instance and have the instance forward the logs to CloudWatch.

Answer: B Explanation: Reference: [Reference: https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/install-CloudWatch-Agent-onpremise.Html, ]

Amazon DVA-C01 Sample Question 199

A developer has created a Node js web application on a local development machine. The developer wants to use AWS technology to host the website. The developer needs a solution that requires the least possible operational overhead and no code changes.

Which AWS service should the developer use to meet these requirements?


Options:

A. AWS Elastic Beanstalk
B. Amazon EC2
C. AWS Lambda
D. Amazon Elastic Kubernetes Service (Amazon EKS)

Answer: B

Amazon DVA-C01 Sample Question 200

For a deployment using AWS CodeDeploy, what is the run order of the hooks for in-place deployments?


Options:

A. Before Install -> Application Stop -> Application Start -> After Install
B. Application Stop -> Before Install -> After Install -> Application Start
C. Before Install -> Application Stop -> Validate Service -> Application Start
D. Application Stop -> Before Install -> Validate Service -> Application Start

Answer: C

Amazon DVA-C01 Sample Question 201

A company maintains an application responsible for processing several thousand external callbacks each day. The company’s System administrators want to know how many callbacks are being received on a rolling basis, and they want this data available for 10 days. The company also wants the ability to issue automated alerts if the number of callbacks exceeds the defined thresholds.

What is the MOST cost-effective way to address the need to track and alert on these statistics?


Options:

A. Push callback data to an Amazon RDS database that can be queried to show historical data and to alert on exceeded thresholds.
B. Push callback data to AWS X-Ray and use AWS Lambda to query, display, and alert on exceeded thresholds.
C. Push callback data to Amazon Kinesis Data Streams and invoke an AWS Lambda function that stores data in Amazon DynamoDB and sends the required alerts.
D. Push callback data to Amazon CloudWatch as a custom metric and use the CloudWatch alerting mechanisms to alert System Administrators.

Answer: E

Amazon DVA-C01 Sample Question 202

A company has a serverless application that uses AWS Lambda functions and AWS Systems Manager parameters to store configuration data. The company....... the Lambda functions inside the VPC and into private subnets. The Lambda functions are now producing errors in their attempts to access Systems Manager parameters.

Which solution will allow the Lambda functions to access Systems Manager parameters inside the VPC?


Options:

A. Configure security groups to allow access to Systems Manager.
B. Create an interface VPC endpoint for Systems Manager.
C. Use an internet gateway from inside the VPC.
D. Create a gateway VPC endpoint for Systems Manager.

Answer: C

Amazon DVA-C01 Sample Question 203

A Developer is creating a Lambda function and will be using external libraries that are not included in the standard Lambda libraries.

What action would minimize the Lambda compute time consumed?


Options:

A. Install the dependencies and external libraries at the beginning of the Lambda function.
B. Create a Lambda deployment package that includes the external libraries.
C. Copy the external libraries to Amazon S3, and reference the external libraries to the S3 location.
D. Install the external libraries in Lambda to be available to all Lambda functions.

Answer: E

Amazon DVA-C01 Sample Question 204

A developer is migrating a Windows-based legacy application from on premises to AWS. The application will run on Amazon EC2 instances that run Amazon Linux. The application stores a large number of files in an NFS drive. The migration solution must minimize downtime and application code changes.

Which solution should the developer use to migrate the application data?


Options:

A. Create an Amazon S3 bucket. Use the s3 sync command to upload the files to the S3 bucket.
B. Create an Amazon Elastic Block Store (Amazon E8S) volume. Upload the files to the volume. Attach the volume to the EC2 instances.
C. Create an Amazon Elastic File System (Amazon EFS) file system. Use AWS DataSync to transfer the files to Amazon EFS.
D. Create an Amazon Elastic File System (Amazon EFS) file system. Mount the EFS file system from the legacy application. Copy the files to the EFS mount.

Answer: D


and so much more...