AWS Certified Developer Association (DVA-C02) 50 Questions & Answers Part 2

Practice the AWS Certified Developer Association Questions Part 2. Our experts have answered the questions, and you will get the correct answers. Prepare yourself for the exam ahead and test your knowledge and readiness

AWS Certified Developer Association (DVA-C02) Part 2

AWS Certified Developer Association (DVA-C02) Part 2

Questions will be picked at random from the question bank.

You can use the NEXT button to move to the next question, use the PREV button to move to the previous question, the CLEAR button to clear any answer of your choice and you have the FINISH button to end the exam if you choose to.

Any question not answered before the end of the exam time, will be marked as wrong and the exam will end by itself. So try to attempt all questions on time.

Goodluck!

1 / 50

A company wants to implement a continuous integration for its workloads on
AWS. The company wants to trigger unit test in its pipeline for commits-on its
code repository, and wants to be notified of failure events in the pipeline. How can
these requirements be met?

Store the source code on GitHub. Create a CodePipeline to automate unit testing. Use Amazon CloudWatch to trigger notifications of failure events.

Store the source code in AWS CodeCommit. Create a CodePipeline to automate unit testing. Use Amazon CloudWatch to trigger notification of failure events.

Store the source code in GitHub. Create a CodePipeline to automate unit testing. Use Amazon SES to trigger notifications of failure events.

Store the source code in AWS CodeCommit. Create a CodePipeline to automate unit testing. Use Amazon SNS to trigger notifications of failure events.

2 / 50

For a deployment using AWS CodeDeploy, what is the run order of the hooks for
in-place deployments?

Before Install -> Application Stop -> Validate Service -> Application Start.

Application Stop -> Before Install -> After Install -> Application Start.

Application Stop -> Before Install -> Validate Service -> Application Start.

Before Install -> Application Stop -> Application Start -> After Install.

3 / 50

A Developer created a Lambda function for a web application backend. When
testing the Lambda function from the AWS Lambda console, the Developer can
see that the function is being executed, but there is no log data being generated
in Amazon CloudWatch Logs, even after several minutes. What could cause this
situation?

The Lambda function is missing CloudWatch Logs as a source trigger to send log data

The Lambda function is missing a target CloudWatch Log group.

The execution role for the Lambda function is missing permissions to write log data to the CloudWatch Logs.

The Lambda function does not have any explicit log statements for the log data to send it to CloudWatch Logs.

4 / 50

A Developer has setup an Amazon Kinesis Stream with 4 shards to ingest a
maximum of 2500 records per second. A Lambda function has been configured to
process these records. In which order will these records be processed?

Lambda will receive each record in the reverse order it was placed into the stream following a LIFO (last-in, first-out) method.

Lambda will receive each record in the exact order it was placed into the stream following a FIFO (first-in, first-out) method.

The Developer can select FIFO, (first-in, first-out), LIFO (last-in, last-out), random, or request specific record using the getRecords API.

Lambda will receive each record in the exact order it was placed into the shard following a FIFO (first-in, first-out) method. There is no guarantee of order across shards.

5 / 50

A Developer has created a software package to be deployed on multiple EC2
instances using IAM roles. What actions could be performed to verify IAM access
to get records from Amazon Kinesis Streams? (Select TWO)

Perform a get action using the '--dry-run' argument.

Request a token from AWS STS, and perform a describe action.

Query Amazon EC2 metadata for in-line IAM policies.

Validate the IAM role policy with the IAM policy simulator.

Use the AWS CLI to retrieve the IAM group.

6 / 50

A Developer created a dashboard for an application using Amazon API Gateway,
Amazon S3, AWS Lambda, and Amazon RDS. The Developer needs an
authentication mechanism allowing a user to sign in and view the dashboard. It
must be accessible from mobile applications, desktops, and tablets, and must
remember user preferences across platforms. Which AWS service should the
Developer use to support this authentication scenario?

AWS KMS.

AWS Directory Service.

Amazon IAM.

Amazon Cognito.

7 / 50

An application has hundreds of users. Each user may use multiple devices to
access the application. The Developer wants to assign unique identifiers to these
users regardless of the device they use. Which of the following methods should be
used to obtain unique identifiers?

Assign IAM users and roles to the users. Use the unique IAM resource ID as the unique identifier.

Use IAM-generated access key IDs for the users as the unique identifier, but do not store secret keys.

Create a user table in Amazon DynamoDB as key-value pairs of users and their devices. Use these keys as unique identifiers.

Implement developer-authenticated identities by using Amazon Cognito, and get credentials for these identities.

8 / 50

A customer wants to deploy its source code on an AWS Elastic Beanstalk
environment. The customer needs to perform deployment with minimal outage
and should only use existing instances to retain application access log. What
deployment policy would satisfy these requirements?

All at once.

Rolling.

Immutable.

Rolling with an additional batch.

9 / 50

During non-peak hours, a Developer wants to minimize the execution time of a
full Amazon DynamoDB table scan without affecting normal workloads. The
workloads average half of the strongly consistent read capacity units during nonpeak hours. How would the Developer optimize this scan?

Increase read capacity units during the scan operation

Change consistency to eventually consistent during the scan operation.

Use sequential scans.

Use parallel scans while limiting the rate

10 / 50

An application is designed to use Amazon SQS to manage messages from many
independent senders. Each sender's messages must be processed in the order
they are received. Which SQS feature should be implemented by the Developer?

Configure each message with unique MessageGroupIds.

Enable ContentBasedDeduplication on the SQS queue.

Enable MessageDeduplicationIds on the SQS queue.

Configure each sender with a unique MessageGroupId.

11 / 50

A Developer is developing an application that manages financial transactions. To
improve security, multi-factor authentication (MFA) will be required as part of the
login protocol. What services can the Developer use to meet these requirements?

Amazon Cognito with MFA.

AWS IAM with MFA enabled.

Amazon DynamoDB to store MFA session data, and Amazon SNS to send MFA codes.

AWS Directory Service.

12 / 50

A Developer must re-implement the business logic for an order fulfilment system.
The business logic has to make requests to multiple vendors to decide where to
purchase an item. The whole process can take up to a week to complete. What is
the MOST efficient and SIMPLEST way to implement a system that meets these
requirements?

Create an AWS SQS for each vendor, poll the queue from a worker instance, and joint the results

Use Amazon CloudWatch Events to orchestrate the Lambda functions.

Use AWS Step Functions to execute parallel Lambda functions, and join the results.

Use AWS Lambda to asynchronously call a Lambda function for each vendor, and join the results.

13 / 50

An application takes 40 seconds to process instructions received in an Amazon
SQS message. Assuming the SQS queue is configured with the default
VisibilityTimeout value, what is the BEST way, upon receiving a message, to ensure
that no other instances can retrieve a message that has already been processed or
is currently being processed?

Use the ChangeMessageVisibility API to increase the VisibilityTimeout, then use the DeleteMessage API to delete the message.

Use the ChangeMessageVisibility API to decrease the timeout value, then use the DeleteMessage API to delete the message.

Use the DeleteMessageVisibility API to cancel the VisibilityTimeout, then use the DeleteMessage API to delete the message.

Use the DeleteMessage API call to delete the message from the queue, then call DeleteQueue API to remove the queue.

14 / 50

When writing a Lambda function, what is the benefit of instantiating AWS clients
outside the scope of the handler?

Creating a new instance per invocation.

Better error handling.

Taking advantage of connection re-use.

Legibility and stylistic convention.

15 / 50

A Developer is creating a mobile application with a limited budget. The solution
requires a scalable service that will enable customers to sign up and authenticate
into the mobile application while using the organization's current SAML 2.0
identity provider. Which AWS service should be used to meet these requirements?

AWS IAM.

Amazon Cognito.

Amazon EC2.

AWS Lambda.

16 / 50

A company is building a stock trading application that requires sub-millisecond
latency in processing trading requests. Amazon DynamoDB is used to store all the
trading data that is used to process each request. After load testing the
application, the development team found that due to data retrieval times, the
latency requirement is not satisfied. Because of sudden high spikes in the number
of requests, DynamoDB read capacity has to be significantly over-provisioned to
avoid throttling. What steps should be taken to meet latency requirements and
reduce the cost of running the application?

Use DynamoDB Accelerator to cache trading data.

Store trading data in Amazon S3 and use Transfer Acceleration.

Add Global Secondary Indexes for trading data.

Add retries with exponential back-off for DynamoDB queries.

17 / 50

A legacy service has an XML-based SOAP interface. The Developer wants to
expose the functionality of the service to external clients with the Amazon API
Gateway. Which technique will accomplish this?

Create a RESTful API with the API Gateway; pass the incoming JSON to the SOAP interface through an Application Load Balancer.

Create a RESTful API with the API Gateway; transform the incoming XML into a valid message for the SOAP interface using mapping templates.

Create a RESTful API with the API Gateway; transform the incoming JSON into a valid XML message for the SOAP interface using mapping templates.

Create a RESTful API with the API Gateway; pass the incoming XML to the SOAP interface through an Application Load Balancer

18 / 50

A Developer is creating a web application that requires authentication, but also
needs to support guest access to provide users limited access without having to
authenticate. What service can provide support for the application to allow guest
access?

IAM temporary credentials using AWS STS.

Amazon Cognito with unauthenticated access enabled.

IAM with SAML integration

Amazon Directory Service.

19 / 50

A Developer wants to use AWS X-Ray to trace a user request end-to-end
throughput the software stack. The Developer made the necessary changes in the
application tested it, and found that the application is able to send the traces to
AWS X-Ray. However, when the application is deployed to an EC2 instance, the
traces are not availableWhich of the following could create this situation? (Choose
TWO

The traces are reaching X-Ray, but the Developer does not have access to view the records

The X-Ray daemon is not installed on the EC2 instance.

The instance role does not have 'xray:BatchGetTraces' and 'xray:GetTraceGraph' permissions.The instance role does not have 'xray:PutTraceSegments' and 'xray:PutTelemetryRecords' permissions.

The X-Ray endpoint specified in the application configuration is incorrect.

The instance role does not have 'xray:PutTraceSegments' and 'xray:PutTelemetryRecords' permissions.

20 / 50

A Lambda function is packaged for deployment to multiple environments,
including development, test, production, etc. Each environment has unique set of
resources such as databases, etc. How can the Lambda function use the resources
for the current environment?

Use separate function for development and production.

Use environment variables for the Lambda functions.

Apply tags to the Lambda functions.

Hardcore resources in the source code.

21 / 50

A company is using AWS CodeBuild to compile a website from source code stored
in AWS CodeCommit. A recent change to the source code has resulted in the
CodeBuild project being unable to successfully compile the website. How should
the Developer identify the cause of the failures?

Modify the buildspec.yml file to include steps to send the output of build commands to Amazon CloudWatch.

Manually re-run the build process on a local machine so that the output can be visualized.

Use a custom Docker image that includes the AWS X-Ray agent in the AWS CodeBuild project configuration.

Check the build logs of the failed phase in the last build attempt in the AWS CodeBuild project build history.

22 / 50

A Developer is creating an Auto Scaling group whose instances need to publish a
custom metric to Amazon CloudWatch. Which method would be the MOST secure
way to authenticate a CloudWatch PUT request?

Modify the CloudWatch metric policies to allow the PutMetricData permission to instances from the Auto Scaling group.

Create an IAM user with PutMetricData permission, and modify the Auto Scaling launch configuration to inject the user credentials into the instance user data.

Create an IAM role with PutMetricData permission and modify the Auto Scaling launching configuration to launch instances using that role.

Create an IAM user with PutMetricData permission and put the user credentials in a private repository; have applications pull the credentials as needed.

23 / 50

An application is real-time processing millions of events that are received through
an API. What service could be used to allow multiple consumers to process the
data concurrently and MOST cost-effectively?

Amazon Kinesis Firehouse.

Amazon Kinesis Streams.

Amazon SNS with fanout to an SQS FIFO (first-in, first-out) queue for each application.

Amazon SNS with fanout to an SQS queue for each application.

24 / 50

A serverless application uses an API Gateway and AWS Lambda. Where should the
Lambda function store its session information across function calls?

In an Amazon DynamoDB table.

In the local filesystem.

In an Amazon SQS queue.

In an SQLite session table using CDSQLITE_ENABLE_SESSION.

25 / 50

An application reads data from an Amazon DynamoDB table. Several times a day,
for a period of 15 seconds, the application receives multiple
ProvisionedThroughputExceeded errors. How should this exception be handled?

Immediately retry the failed read requests.

Retry the failed read requests with exponential backoff.

Create a new global secondary index for the table to help with the additional requests.

Use the DynamoDB 'UpdateItem' API to increase the provisioned throughput capacity of the table.

26 / 50

An application will ingest data at a very high throughput from many sources and
must store the data in an Amazon S3 bucket. Which service would BEST
accomplish this task?

Amazon SNS

Amazon SQS.

Amazon Kinesis Firehose.

Amazon S3 Acceleration Transfer.

27 / 50

A Developer is writing transactions into a DynamoDB table called 'SystemUpdates'
that has 5 write capacity units. Which option has the highest read throughput?

Eventually consistent reads of 15 read capacity units reading items that are 1 KB in size.

Strongly consistent reads of 15 read capacity units reading items that are 1 KB in size.

Eventually consistent reads of 5 read capacity units reading items that are 4 KB in size.

Strongly consistent reads of 5 read capacity units reading items that are 4 KB in size.

28 / 50

A Developer has created an S3 bucket s3://mycoolapp and has enabled server
across logging that points to the folder s3://mycoolapp/logs.The Developer
moved 100 KB of Cascading Style Sheets (CSS) documents to the folder
s3://mycoolapp/css, and then stopped work. When the developer came back a few
days later, the bucket was 50 GB. What is the MOST likely cause of this situation?

S3 replication was enabled on the bucket.

An S3 lifecycle policy has moved the entire CSS file to S3 Infrequent Access

Logging into the same bucket caused exponential log growth.

The CSS files were not compressed and S3 versioning was enabled.

29 / 50

A Developer needs temporary access to resources in a second account. What is
the MOST secure way to achieve this?

Establish trust, and add an SSH key for the second account to the IAM use

Create a cross-account access role, and use sts: AssumeRole API to get short-lived credentials.

Use the Amazon Cognito user pools to get short-lived credentials for the second account.

Create a dedicated IAM access key for the second account, and send it by mail.

30 / 50

A Developer is writing a Linux-based application to run on AWS Elastic Beanstalk.
Application requirements state that the application must maintain full capacity
during updates while minimizing cost. Which type of Elastic Beanstalk deployment
policy should the Developer specify for the environment?

Rolling.

Rolling with additional batch.

All at Once

Immutable.

31 / 50

A Developer has an application that can upload tens of thousands of objects per
second to Amazon S3 in parallel within a single AWS account. As part of new
requirements, data stored in S3 must use server side encryption with AWS KMS
(SSE-KMS). After creating this change, performance of the application is slower.
Which of the following is MOST likely the cause of the application latency?

The client encryption of the objects is using a poor algorithm.

KMS requires that an alias be used to create an independent display name that can be mapped to a CM.

Amazon S3 throttles the rate at which uploaded objects can be encrypted using Customer Master Keys.

The AWS KMS API calls limit is less than needed to achieve the desired performance.

32 / 50

A Developer will be using the AWS CLI on a local development server to manage
AWS services. What can be done to ensure that the CLI uses the Developer's IAM
permissions when making commands?

Run the aws configure CLI command, and provide the Developer's IAM access key ID and secret access key.

Specify the Developer's IAM user name and password as parameters for each CLI command.

Use the Developer's IAM role when making the CLI command.

Specify the Developer's IAM access key ID and secret access key as parameters for each CLI command.

33 / 50

A Developer is testing a Docker-based application that uses the AWS SDK to
interact with Amazon DynamoDB. In the local development environment, the
application has used IAM access keys. The application is now ready for
deployment onto an ECS cluster. How should the application authenticate with
AWS services in production?

Refactor the application to call AWS STS AssumeRole based on an instance role.

Configure an ECS task IAM role for the application to use.

Configure the credentials file with a new access key/secret access key.

Configure AWS access key/secret access key environment variables with new credentials.

34 / 50

A large e-commerce site is being designed to deliver static objects from Amazon
S3. The Amazon S3 bucket will server more than 300 GET requests per second.
What should be done to optimize performance? (Choose TWO)

Integrate Amazon CloudFront with Amazon S3.

Configure Amazon S3 lifecycle rules.Randomize Amazon S3 key name prefixes.

Enable Amazon S3 cross-region replication.

Delete expired Amazon S3 server log files.

Randomize Amazon S3 key name prefixes

35 / 50

A Developer uses AWS CodeDeploy to automate application deployment that
connects to an external MySQL database. The Developer wants to securely access
the encrypted secrets, such as API keys and database passwords. Which of the
following solutions would involve the LEAST administrative effort?

Use the Amazon DynamoDB client-side encryption library to save the secrets in DynamoDB and to programmatically access the secrets from EC2 instances.

Use AWS SSM Parameter Store to store the secrets and to programmatically access them by using the IAM role from EC2 instances

Use the instance metadata to store the secrets and to programmatically access the secrets from EC2 instances.

Save the secrets in Amazon S3 with AWS KMS server-side encryption, and use a signed URL to access them by using the IAM role from Amazon EC2 instances.

36 / 50

Where should the appspec.yml file be placed in order for AWS CodeDeploy to
work?

In the root of the application source code directory structure.

In an S3 bucket.

In the same folder as the application configuration files.

In the bin folder along with all the complied code.

37 / 50

An organization must store thousands of sensitive audio and video files in an
Amazon S3 bucket. Organizational security policies require that all data written to
this bucket be encrypted. How can compliance with this policy be ensured?

Configure an Amazon S3 bucket policy to prevent the upload of objects that contain the x-amz-serverside-encryption heade

Use AWS Lambda to send notifications to the security team if unencrypted objects are pun in the bucket.

Create an Amazon CloudWatch event rule to verify that all objects stored in the Amazon S3 bucket are encrypted.

Configure an Amazon S3 bucket policy to prevent the upload of objects that do not contain the x-amz-server-side-encryption header.

38 / 50

A current architecture uses many Lambda functions invoking one another as large
state machine. The coordination of this state machine is legacy custom code that
breaks easily. Which AWS Service can help refactor and manage the state
machine?

AWS SNS with AWS SQS.

Amazon Elastic MapReduce.

AWS Data Pipeline.

AWS Step Functions.

39 / 50

A Developer has written a serverless application using multiple AWS services. The
business logic is written as a Lambda function which has dependencies on thirdparty libraries. The Lambda function endpoints will be exposed using Amazon API
Gateway. The Lambda function will write the information to Amazon DynamoDB.
The Developer is ready to deploy the application but must have the ability to
rollback. How can this deployment be automated, based on these requirements?

Deploy using Amazon Lambda API operations to create the Lambda function by providing a deployment package.

Use syntax conforming to the Serverless Application Model in the AWS CloudFormation template to define the Lambda function resource.

Create a bash script which uses AWS CLI to package and deploy the application.

Use an AWS CloudFormation template and use CloudFormation syntax to define the Lambda function resource in the template.

40 / 50

A Developer is creating a Lambda function and will be using external libraries that
are not included in the standard Lambda libraries. What action would minimize the
Lambda compute time consumed?

Copy the external libraries to Amazon S3, and reference the external libraries to the S3 location.

Create a Lambda deployment package that includes the external libraries.

Install the external libraries in Lambda to be available to all Lambda functions.

Install the dependencies and external libraries at the beginning of the Lambda function.

41 / 50

What are the steps to using the AWS CLI to launch a templatized serverless
application?

Use AWS CloudFormation package then CloudFormation deploy

Use AWS CloudFormation validate-template then CloudFormation createchange-set.

Use AWS CloudFormation get-template then CloudFormation execute-changeset.

Use AWS CloudFormation create-stack then CloudFormation update-stack

42 / 50

A company is developing a new online game that will run on top of Amazon ECS.
Four distinct Amazon ECS services will be part of the architecture, each requiring
specific permissions to various AWS services. The company wants to optimize the
use of the underlying Amazon EC2 instances by bin packing the containers based
on memory reservation. Which configuration would allow the Development team
to meet these requirements MOST securely?

Create four distinct IAM roles, each containing the required permissions for the associated ECS service, then, create an IAM group and configure the ECS cluster to reference that group

Create four distinct IAM roles, each containing the required permissions for the associated ECS service, then configure each ECS service to reference the associated IAM role.

Create four distinct IAM roles, each containing the required permissions for the associated ECS service, then configure each ECS task definition to referenсe the associated IAM role.

Create a new Identity and Access Management (IAM) instance profile containing the required permissions for the various ECS services, then associate that instance role with the underlying EC2 instances.

43 / 50

A company needs to encrypt data at rest, but it wants to leverage an AWS
managed service using its own master key. Which of the following AWS service
can be used to meet these requirements?

Client-side encryption.

SSE with Amazon S3.

AWS IAM roles and policie

SSE with AWS KMS.

44 / 50

A Developer is receiving HTTP 400: ThrottlingException errors intermittently when
calling the Amazon CloudWatch API. When a call fails, no data is retrieved. What
best practice should first be applied to address this issue?

Use the AWS CLI to get the metrics.

Analyze the applications and remove the API call.

Retry the call with exponential backoff.

Contact AWS Support for a limit increase.

45 / 50

An application stores images in an S3 bucket. Amazon S3 event notifications are
used to trigger a Lambda function that resizes the images. Processing each image
takes less than a second. How will AWS Lambda handle the additional traffic?

Lambda will handle the requests sequentially in the order received

Lambda will scale out to execute the requests concurrently.

Lambda will process multiple images in a single execution.

Lambda will add more compute to each execution to reduce processing time.

46 / 50

A game stores user game data in an Amazon DynamoDB table. Individual users
should not have access to other users' game data. How can this be accomplished?

Stage data in SQS queues to inject metadata before accessing DynamoDB

Read records from DynamoDB and discard irrelevant data client-side.

Encrypt the game data with individual user keys.

Restrict access to specific items based on certain primary key values.

47 / 50

A company wants to migrate its web application to AWS and leverage Auto
Scaling to handle peak workloads. The Solutions Architect determined that the
best metric for an Auto Scaling event is the number of concurrent users. Based on
this information, what should the Developer use to autoscale based on concurrent
users?

A Custom Amazon CloudWatch metric for concurrent users.

An Amazon Cloudwatch NetworkIn metric.

Amazon CloudFront to leverage AWS Edge Locations.

An Amazon SNS topic to be triggered when a concurrent user threshold is met.

48 / 50

A Developer needs to use AWS X-Ray to monitor an application that is deployed
on EC2 instances. What steps have to be executed to perform the monitoring?

Install the X-Ray daemon and instrument the application code.

Deploy the X-Ray SDK with the application and instrument the application code.

Install the X-Ray daemon and configure it to forward data to Amazon CloudWatch Events.

Deploy the X-Ray SDK with the application and use X-Ray annotation

49 / 50

An application stops working with the following error: The specified bucket does
not exist. Where is the BEST place to start the root cause analysis?

Check the application logs in Amazon CloudWatch Logs for Amazon S3 DeleteBucket errors.

Check the Elastic Load Balancer logs for DeleteBucket requests

Check AWS CloudTrail for a DeleteBucket event.

Check AWS X-Ray for Amazon S3 DeleteBucket alarms.

50 / 50

A Developer has created a large Lambda function, and deployment is failing with
the following error:ClientError: An error occurred (InvalidParameterValueException)
when calling the CreateFunction operation: Unzipped size must be smaller than
XXXXXXXXX bytes', where XXXXXXXXX is the current Lambda limit. What can the
Developer do to fix this problem?

ZIP the ZIP file twice to compress it further

Break the function into multiple smaller Lambda functions.

Submit a limit increase request to AWS Support to increase the function to the size needed.

Use a compression algorithm that is more efficient than ZIP.

Your score is