AWS Certified Developer Association (DVA-C02) 50 Questions & Answers Part 2

Practice the AWS Certified Developer Association Questions Part 2. Our experts have answered the questions, and you will get the correct answers. Prepare yourself for the exam ahead and test your knowledge and readiness

AWS Certified Developer Association (DVA-C02) Part 2

AWS Certified Developer Association (DVA-C02) Part 2

Questions will be picked at random from the question bank.

You can use the NEXT button to move to the next question, use the PREV button to move to the previous question, the CLEAR button to clear any answer of your choice and you have the FINISH button to end the exam if you choose to.

Any question not answered before the end of the exam time, will be marked as wrong and the exam will end by itself. So try to attempt all questions on time.

Goodluck!

1 / 50

A company is developing a new online game that will run on top of Amazon ECS.
Four distinct Amazon ECS services will be part of the architecture, each requiring
specific permissions to various AWS services. The company wants to optimize the
use of the underlying Amazon EC2 instances by bin packing the containers based
on memory reservation. Which configuration would allow the Development team
to meet these requirements MOST securely?

Create four distinct IAM roles, each containing the required permissions for the associated ECS service, then configure each ECS task definition to referenсe the associated IAM role.

Create a new Identity and Access Management (IAM) instance profile containing the required permissions for the various ECS services, then associate that instance role with the underlying EC2 instances.

Create four distinct IAM roles, each containing the required permissions for the associated ECS service, then, create an IAM group and configure the ECS cluster to reference that group

Create four distinct IAM roles, each containing the required permissions for the associated ECS service, then configure each ECS service to reference the associated IAM role.

2 / 50

A Developer needs to use AWS X-Ray to monitor an application that is deployed
on EC2 instances. What steps have to be executed to perform the monitoring?

Deploy the X-Ray SDK with the application and use X-Ray annotation

Deploy the X-Ray SDK with the application and instrument the application code.

Install the X-Ray daemon and configure it to forward data to Amazon CloudWatch Events.

Install the X-Ray daemon and instrument the application code.

3 / 50

A Developer has created a software package to be deployed on multiple EC2
instances using IAM roles. What actions could be performed to verify IAM access
to get records from Amazon Kinesis Streams? (Select TWO)

Validate the IAM role policy with the IAM policy simulator.

Perform a get action using the '--dry-run' argument.

Query Amazon EC2 metadata for in-line IAM policies.

Use the AWS CLI to retrieve the IAM group.

Request a token from AWS STS, and perform a describe action.

4 / 50

A company is using AWS CodeBuild to compile a website from source code stored
in AWS CodeCommit. A recent change to the source code has resulted in the
CodeBuild project being unable to successfully compile the website. How should
the Developer identify the cause of the failures?

Use a custom Docker image that includes the AWS X-Ray agent in the AWS CodeBuild project configuration.

Manually re-run the build process on a local machine so that the output can be visualized.

Modify the buildspec.yml file to include steps to send the output of build commands to Amazon CloudWatch.

Check the build logs of the failed phase in the last build attempt in the AWS CodeBuild project build history.

5 / 50

An application is real-time processing millions of events that are received through
an API. What service could be used to allow multiple consumers to process the
data concurrently and MOST cost-effectively?

Amazon Kinesis Streams.

Amazon SNS with fanout to an SQS FIFO (first-in, first-out) queue for each application.

Amazon SNS with fanout to an SQS queue for each application.

Amazon Kinesis Firehouse.

6 / 50

A Developer is receiving HTTP 400: ThrottlingException errors intermittently when
calling the Amazon CloudWatch API. When a call fails, no data is retrieved. What
best practice should first be applied to address this issue?

Analyze the applications and remove the API call.

Retry the call with exponential backoff.

Contact AWS Support for a limit increase.

Use the AWS CLI to get the metrics.

7 / 50

During non-peak hours, a Developer wants to minimize the execution time of a
full Amazon DynamoDB table scan without affecting normal workloads. The
workloads average half of the strongly consistent read capacity units during nonpeak hours. How would the Developer optimize this scan?

Increase read capacity units during the scan operation

Use sequential scans.

Use parallel scans while limiting the rate

Change consistency to eventually consistent during the scan operation.

8 / 50

A company is building a stock trading application that requires sub-millisecond
latency in processing trading requests. Amazon DynamoDB is used to store all the
trading data that is used to process each request. After load testing the
application, the development team found that due to data retrieval times, the
latency requirement is not satisfied. Because of sudden high spikes in the number
of requests, DynamoDB read capacity has to be significantly over-provisioned to
avoid throttling. What steps should be taken to meet latency requirements and
reduce the cost of running the application?

Store trading data in Amazon S3 and use Transfer Acceleration.

Use DynamoDB Accelerator to cache trading data.

Add retries with exponential back-off for DynamoDB queries.

Add Global Secondary Indexes for trading data.

9 / 50

A Developer will be using the AWS CLI on a local development server to manage
AWS services. What can be done to ensure that the CLI uses the Developer's IAM
permissions when making commands?

Specify the Developer's IAM access key ID and secret access key as parameters for each CLI command.

Specify the Developer's IAM user name and password as parameters for each CLI command.

Run the aws configure CLI command, and provide the Developer's IAM access key ID and secret access key.

Use the Developer's IAM role when making the CLI command.

10 / 50

A Lambda function is packaged for deployment to multiple environments,
including development, test, production, etc. Each environment has unique set of
resources such as databases, etc. How can the Lambda function use the resources
for the current environment?

Use environment variables for the Lambda functions.

Apply tags to the Lambda functions.

Use separate function for development and production.

Hardcore resources in the source code.

11 / 50

A large e-commerce site is being designed to deliver static objects from Amazon
S3. The Amazon S3 bucket will server more than 300 GET requests per second.
What should be done to optimize performance? (Choose TWO)

Enable Amazon S3 cross-region replication.

Integrate Amazon CloudFront with Amazon S3.

Configure Amazon S3 lifecycle rules.Randomize Amazon S3 key name prefixes.

Randomize Amazon S3 key name prefixes

Delete expired Amazon S3 server log files.

12 / 50

An application will ingest data at a very high throughput from many sources and
must store the data in an Amazon S3 bucket. Which service would BEST
accomplish this task?

Amazon S3 Acceleration Transfer.

Amazon SNS

Amazon SQS.

Amazon Kinesis Firehose.

13 / 50

A legacy service has an XML-based SOAP interface. The Developer wants to
expose the functionality of the service to external clients with the Amazon API
Gateway. Which technique will accomplish this?

Create a RESTful API with the API Gateway; transform the incoming JSON into a valid XML message for the SOAP interface using mapping templates.

Create a RESTful API with the API Gateway; pass the incoming XML to the SOAP interface through an Application Load Balancer

Create a RESTful API with the API Gateway; transform the incoming XML into a valid message for the SOAP interface using mapping templates.

Create a RESTful API with the API Gateway; pass the incoming JSON to the SOAP interface through an Application Load Balancer.

14 / 50

A company wants to implement a continuous integration for its workloads on
AWS. The company wants to trigger unit test in its pipeline for commits-on its
code repository, and wants to be notified of failure events in the pipeline. How can
these requirements be met?

Store the source code in AWS CodeCommit. Create a CodePipeline to automate unit testing. Use Amazon SNS to trigger notifications of failure events.

Store the source code on GitHub. Create a CodePipeline to automate unit testing. Use Amazon CloudWatch to trigger notifications of failure events.

Store the source code in GitHub. Create a CodePipeline to automate unit testing. Use Amazon SES to trigger notifications of failure events.

Store the source code in AWS CodeCommit. Create a CodePipeline to automate unit testing. Use Amazon CloudWatch to trigger notification of failure events.

15 / 50

A company needs to encrypt data at rest, but it wants to leverage an AWS
managed service using its own master key. Which of the following AWS service
can be used to meet these requirements?

SSE with AWS KMS.

Client-side encryption.

SSE with Amazon S3.

AWS IAM roles and policie

16 / 50

A company wants to migrate its web application to AWS and leverage Auto
Scaling to handle peak workloads. The Solutions Architect determined that the
best metric for an Auto Scaling event is the number of concurrent users. Based on
this information, what should the Developer use to autoscale based on concurrent
users?

An Amazon Cloudwatch NetworkIn metric.

Amazon CloudFront to leverage AWS Edge Locations.

An Amazon SNS topic to be triggered when a concurrent user threshold is met.

A Custom Amazon CloudWatch metric for concurrent users.

17 / 50

A Developer is creating a web application that requires authentication, but also
needs to support guest access to provide users limited access without having to
authenticate. What service can provide support for the application to allow guest
access?

IAM temporary credentials using AWS STS.

IAM with SAML integration

Amazon Cognito with unauthenticated access enabled.

Amazon Directory Service.

18 / 50

A Developer is testing a Docker-based application that uses the AWS SDK to
interact with Amazon DynamoDB. In the local development environment, the
application has used IAM access keys. The application is now ready for
deployment onto an ECS cluster. How should the application authenticate with
AWS services in production?

Refactor the application to call AWS STS AssumeRole based on an instance role.

Configure AWS access key/secret access key environment variables with new credentials.

Configure the credentials file with a new access key/secret access key.

Configure an ECS task IAM role for the application to use.

19 / 50

A Developer is writing a Linux-based application to run on AWS Elastic Beanstalk.
Application requirements state that the application must maintain full capacity
during updates while minimizing cost. Which type of Elastic Beanstalk deployment
policy should the Developer specify for the environment?

Immutable.

Rolling.

All at Once

Rolling with additional batch.

20 / 50

A Developer uses AWS CodeDeploy to automate application deployment that
connects to an external MySQL database. The Developer wants to securely access
the encrypted secrets, such as API keys and database passwords. Which of the
following solutions would involve the LEAST administrative effort?

Use the Amazon DynamoDB client-side encryption library to save the secrets in DynamoDB and to programmatically access the secrets from EC2 instances.

Use the instance metadata to store the secrets and to programmatically access the secrets from EC2 instances.

Save the secrets in Amazon S3 with AWS KMS server-side encryption, and use a signed URL to access them by using the IAM role from Amazon EC2 instances.

Use AWS SSM Parameter Store to store the secrets and to programmatically access them by using the IAM role from EC2 instances

21 / 50

For a deployment using AWS CodeDeploy, what is the run order of the hooks for
in-place deployments?

Before Install -> Application Stop -> Application Start -> After Install.

Application Stop -> Before Install -> Validate Service -> Application Start.

Application Stop -> Before Install -> After Install -> Application Start.

Before Install -> Application Stop -> Validate Service -> Application Start.

22 / 50

What are the steps to using the AWS CLI to launch a templatized serverless
application?

Use AWS CloudFormation package then CloudFormation deploy

Use AWS CloudFormation create-stack then CloudFormation update-stack

Use AWS CloudFormation validate-template then CloudFormation createchange-set.

Use AWS CloudFormation get-template then CloudFormation execute-changeset.

23 / 50

An application stores images in an S3 bucket. Amazon S3 event notifications are
used to trigger a Lambda function that resizes the images. Processing each image
takes less than a second. How will AWS Lambda handle the additional traffic?

Lambda will scale out to execute the requests concurrently.

Lambda will add more compute to each execution to reduce processing time.

Lambda will process multiple images in a single execution.

Lambda will handle the requests sequentially in the order received

24 / 50

An application reads data from an Amazon DynamoDB table. Several times a day,
for a period of 15 seconds, the application receives multiple
ProvisionedThroughputExceeded errors. How should this exception be handled?

Retry the failed read requests with exponential backoff.

Immediately retry the failed read requests.

Create a new global secondary index for the table to help with the additional requests.

Use the DynamoDB 'UpdateItem' API to increase the provisioned throughput capacity of the table.

25 / 50

An application takes 40 seconds to process instructions received in an Amazon
SQS message. Assuming the SQS queue is configured with the default
VisibilityTimeout value, what is the BEST way, upon receiving a message, to ensure
that no other instances can retrieve a message that has already been processed or
is currently being processed?

Use the DeleteMessageVisibility API to cancel the VisibilityTimeout, then use the DeleteMessage API to delete the message.

Use the DeleteMessage API call to delete the message from the queue, then call DeleteQueue API to remove the queue.

Use the ChangeMessageVisibility API to increase the VisibilityTimeout, then use the DeleteMessage API to delete the message.

Use the ChangeMessageVisibility API to decrease the timeout value, then use the DeleteMessage API to delete the message.

26 / 50

A Developer has created a large Lambda function, and deployment is failing with
the following error:ClientError: An error occurred (InvalidParameterValueException)
when calling the CreateFunction operation: Unzipped size must be smaller than
XXXXXXXXX bytes', where XXXXXXXXX is the current Lambda limit. What can the
Developer do to fix this problem?

Use a compression algorithm that is more efficient than ZIP.

Break the function into multiple smaller Lambda functions.

ZIP the ZIP file twice to compress it further

Submit a limit increase request to AWS Support to increase the function to the size needed.

27 / 50

A current architecture uses many Lambda functions invoking one another as large
state machine. The coordination of this state machine is legacy custom code that
breaks easily. Which AWS Service can help refactor and manage the state
machine?

AWS Step Functions.

AWS Data Pipeline.

AWS SNS with AWS SQS.

Amazon Elastic MapReduce.

28 / 50

A Developer wants to use AWS X-Ray to trace a user request end-to-end
throughput the software stack. The Developer made the necessary changes in the
application tested it, and found that the application is able to send the traces to
AWS X-Ray. However, when the application is deployed to an EC2 instance, the
traces are not availableWhich of the following could create this situation? (Choose
TWO

The instance role does not have 'xray:PutTraceSegments' and 'xray:PutTelemetryRecords' permissions.

The instance role does not have 'xray:BatchGetTraces' and 'xray:GetTraceGraph' permissions.The instance role does not have 'xray:PutTraceSegments' and 'xray:PutTelemetryRecords' permissions.

The X-Ray daemon is not installed on the EC2 instance.

The traces are reaching X-Ray, but the Developer does not have access to view the records

The X-Ray endpoint specified in the application configuration is incorrect.

29 / 50

Where should the appspec.yml file be placed in order for AWS CodeDeploy to
work?

In the same folder as the application configuration files.

In the bin folder along with all the complied code.

In the root of the application source code directory structure.

In an S3 bucket.

30 / 50

When writing a Lambda function, what is the benefit of instantiating AWS clients
outside the scope of the handler?

Creating a new instance per invocation.

Legibility and stylistic convention.

Taking advantage of connection re-use.

Better error handling.

31 / 50

A Developer is creating an Auto Scaling group whose instances need to publish a
custom metric to Amazon CloudWatch. Which method would be the MOST secure
way to authenticate a CloudWatch PUT request?

Create an IAM user with PutMetricData permission and put the user credentials in a private repository; have applications pull the credentials as needed.

Modify the CloudWatch metric policies to allow the PutMetricData permission to instances from the Auto Scaling group.

Create an IAM role with PutMetricData permission and modify the Auto Scaling launching configuration to launch instances using that role.

Create an IAM user with PutMetricData permission, and modify the Auto Scaling launch configuration to inject the user credentials into the instance user data.

32 / 50

A Developer needs temporary access to resources in a second account. What is
the MOST secure way to achieve this?

Establish trust, and add an SSH key for the second account to the IAM use

Use the Amazon Cognito user pools to get short-lived credentials for the second account.

Create a cross-account access role, and use sts: AssumeRole API to get short-lived credentials.

Create a dedicated IAM access key for the second account, and send it by mail.

33 / 50

A Developer has written a serverless application using multiple AWS services. The
business logic is written as a Lambda function which has dependencies on thirdparty libraries. The Lambda function endpoints will be exposed using Amazon API
Gateway. The Lambda function will write the information to Amazon DynamoDB.
The Developer is ready to deploy the application but must have the ability to
rollback. How can this deployment be automated, based on these requirements?

Use syntax conforming to the Serverless Application Model in the AWS CloudFormation template to define the Lambda function resource.

Create a bash script which uses AWS CLI to package and deploy the application.

Use an AWS CloudFormation template and use CloudFormation syntax to define the Lambda function resource in the template.

Deploy using Amazon Lambda API operations to create the Lambda function by providing a deployment package.

34 / 50

A Developer has an application that can upload tens of thousands of objects per
second to Amazon S3 in parallel within a single AWS account. As part of new
requirements, data stored in S3 must use server side encryption with AWS KMS
(SSE-KMS). After creating this change, performance of the application is slower.
Which of the following is MOST likely the cause of the application latency?

Amazon S3 throttles the rate at which uploaded objects can be encrypted using Customer Master Keys.

The AWS KMS API calls limit is less than needed to achieve the desired performance.

The client encryption of the objects is using a poor algorithm.

KMS requires that an alias be used to create an independent display name that can be mapped to a CM.

35 / 50

An application is designed to use Amazon SQS to manage messages from many
independent senders. Each sender's messages must be processed in the order
they are received. Which SQS feature should be implemented by the Developer?

Enable MessageDeduplicationIds on the SQS queue.

Enable ContentBasedDeduplication on the SQS queue.

Configure each message with unique MessageGroupIds.

Configure each sender with a unique MessageGroupId.

36 / 50

An organization must store thousands of sensitive audio and video files in an
Amazon S3 bucket. Organizational security policies require that all data written to
this bucket be encrypted. How can compliance with this policy be ensured?

Configure an Amazon S3 bucket policy to prevent the upload of objects that contain the x-amz-serverside-encryption heade

Use AWS Lambda to send notifications to the security team if unencrypted objects are pun in the bucket.

Configure an Amazon S3 bucket policy to prevent the upload of objects that do not contain the x-amz-server-side-encryption header.

Create an Amazon CloudWatch event rule to verify that all objects stored in the Amazon S3 bucket are encrypted.

37 / 50

A Developer has created an S3 bucket s3://mycoolapp and has enabled server
across logging that points to the folder s3://mycoolapp/logs.The Developer
moved 100 KB of Cascading Style Sheets (CSS) documents to the folder
s3://mycoolapp/css, and then stopped work. When the developer came back a few
days later, the bucket was 50 GB. What is the MOST likely cause of this situation?

Logging into the same bucket caused exponential log growth.

The CSS files were not compressed and S3 versioning was enabled.

S3 replication was enabled on the bucket.

An S3 lifecycle policy has moved the entire CSS file to S3 Infrequent Access

38 / 50

A Developer is developing an application that manages financial transactions. To
improve security, multi-factor authentication (MFA) will be required as part of the
login protocol. What services can the Developer use to meet these requirements?

Amazon DynamoDB to store MFA session data, and Amazon SNS to send MFA codes.

AWS IAM with MFA enabled.

Amazon Cognito with MFA.

AWS Directory Service.

39 / 50

A Developer is writing transactions into a DynamoDB table called 'SystemUpdates'
that has 5 write capacity units. Which option has the highest read throughput?

Eventually consistent reads of 5 read capacity units reading items that are 4 KB in size.

Strongly consistent reads of 5 read capacity units reading items that are 4 KB in size.

Strongly consistent reads of 15 read capacity units reading items that are 1 KB in size.

Eventually consistent reads of 15 read capacity units reading items that are 1 KB in size.

40 / 50

A Developer created a dashboard for an application using Amazon API Gateway,
Amazon S3, AWS Lambda, and Amazon RDS. The Developer needs an
authentication mechanism allowing a user to sign in and view the dashboard. It
must be accessible from mobile applications, desktops, and tablets, and must
remember user preferences across platforms. Which AWS service should the
Developer use to support this authentication scenario?

Amazon Cognito.

AWS Directory Service.

AWS KMS.

Amazon IAM.

41 / 50

An application stops working with the following error: The specified bucket does
not exist. Where is the BEST place to start the root cause analysis?

Check AWS X-Ray for Amazon S3 DeleteBucket alarms.

Check the application logs in Amazon CloudWatch Logs for Amazon S3 DeleteBucket errors.

Check the Elastic Load Balancer logs for DeleteBucket requests

Check AWS CloudTrail for a DeleteBucket event.

42 / 50

A Developer is creating a Lambda function and will be using external libraries that
are not included in the standard Lambda libraries. What action would minimize the
Lambda compute time consumed?

Copy the external libraries to Amazon S3, and reference the external libraries to the S3 location.

Create a Lambda deployment package that includes the external libraries.

Install the dependencies and external libraries at the beginning of the Lambda function.

Install the external libraries in Lambda to be available to all Lambda functions.

43 / 50

A Developer is creating a mobile application with a limited budget. The solution
requires a scalable service that will enable customers to sign up and authenticate
into the mobile application while using the organization's current SAML 2.0
identity provider. Which AWS service should be used to meet these requirements?

Amazon EC2.

Amazon Cognito.

AWS Lambda.

AWS IAM.

44 / 50

A game stores user game data in an Amazon DynamoDB table. Individual users
should not have access to other users' game data. How can this be accomplished?

Restrict access to specific items based on certain primary key values.

Stage data in SQS queues to inject metadata before accessing DynamoDB

Encrypt the game data with individual user keys.

Read records from DynamoDB and discard irrelevant data client-side.

45 / 50

A Developer has setup an Amazon Kinesis Stream with 4 shards to ingest a
maximum of 2500 records per second. A Lambda function has been configured to
process these records. In which order will these records be processed?

The Developer can select FIFO, (first-in, first-out), LIFO (last-in, last-out), random, or request specific record using the getRecords API.

Lambda will receive each record in the exact order it was placed into the stream following a FIFO (first-in, first-out) method.

Lambda will receive each record in the exact order it was placed into the shard following a FIFO (first-in, first-out) method. There is no guarantee of order across shards.

Lambda will receive each record in the reverse order it was placed into the stream following a LIFO (last-in, first-out) method.

46 / 50

An application has hundreds of users. Each user may use multiple devices to
access the application. The Developer wants to assign unique identifiers to these
users regardless of the device they use. Which of the following methods should be
used to obtain unique identifiers?

Create a user table in Amazon DynamoDB as key-value pairs of users and their devices. Use these keys as unique identifiers.

Implement developer-authenticated identities by using Amazon Cognito, and get credentials for these identities.

Use IAM-generated access key IDs for the users as the unique identifier, but do not store secret keys.

Assign IAM users and roles to the users. Use the unique IAM resource ID as the unique identifier.

47 / 50

A serverless application uses an API Gateway and AWS Lambda. Where should the
Lambda function store its session information across function calls?

In an Amazon SQS queue.

In the local filesystem.

In an Amazon DynamoDB table.

In an SQLite session table using CDSQLITE_ENABLE_SESSION.

48 / 50

A customer wants to deploy its source code on an AWS Elastic Beanstalk
environment. The customer needs to perform deployment with minimal outage
and should only use existing instances to retain application access log. What
deployment policy would satisfy these requirements?

Rolling.

Rolling with an additional batch.

All at once.

Immutable.

49 / 50

A Developer created a Lambda function for a web application backend. When
testing the Lambda function from the AWS Lambda console, the Developer can
see that the function is being executed, but there is no log data being generated
in Amazon CloudWatch Logs, even after several minutes. What could cause this
situation?

The Lambda function is missing CloudWatch Logs as a source trigger to send log data

The execution role for the Lambda function is missing permissions to write log data to the CloudWatch Logs.

The Lambda function is missing a target CloudWatch Log group.

The Lambda function does not have any explicit log statements for the log data to send it to CloudWatch Logs.

50 / 50

A Developer must re-implement the business logic for an order fulfilment system.
The business logic has to make requests to multiple vendors to decide where to
purchase an item. The whole process can take up to a week to complete. What is
the MOST efficient and SIMPLEST way to implement a system that meets these
requirements?

Use AWS Lambda to asynchronously call a Lambda function for each vendor, and join the results.

Create an AWS SQS for each vendor, poll the queue from a worker instance, and joint the results

Use Amazon CloudWatch Events to orchestrate the Lambda functions.

Use AWS Step Functions to execute parallel Lambda functions, and join the results.

Your score is

AWS Certified Developer Association (DVA-C02) 50 Questions & Answers Part 2

Leave a Comment Cancel Reply