DON'T WANT TO MISS A THING?

Certification Exam Passing Tips

Latest exam news and discount info

Curated and up-to-date by our experts

Yes, send me the newsletter

Free AWS DVA-C02 Practice Questions & Answers 2026 Part1

Are you preparing for the AWS DVA-C02 certification exam? SPOTO offers the AWS DVA-C02 Premium File; all questions are aligned with the latest exam content and come with expert-provided answers. Our question banks cover the latest question types, core concepts, and detailed explanations, helping you familiarize yourself with the exam format and difficulty level. Whether you are reviewing core concepts or simulating a real exam environment, these resources will rapidly boost your confidence and readiness.
For over two decades, SPOTO has successfully helped numerous IT professionals secure their ideal positions at Fortune 500 companies. Download now to start practicing efficiently and ensure a high score on the actual exam. Don't miss this opportunity to pass your certification exam with ease!
Take other online exams
Question #1
A developer creates a VPC named VPC-A that has public and private subnets. The developer also creates an Amazon RDS database inside the private subnet of VPC-A. To perform some queries, the developer creates an AWS Lambda function in the default VPC. The Lambda function has code to access the RDS database. When the Lambda function runs, an error message indicates that the function cannot connect to the RDS database.How can the developer solve this problem?
A. Modify the RDS security group
B. Redeploy the Lambda function in the same subnet as the RDS instance
C. Create a security group for the Lambda function
D. Create an IAM role
View answer
Correct Answer: B

View The Updated DVA-C02 Exam Questions

SPOTO Provides 100% Real DVA-C02 Exam Questions for You to Pass Your DVA-C02 Exam!

Contact Us Get DVA-C02 Practice Test
Question #2
A company is building a web application on AWS. When a customer sends a request, the application will generate reports and then make the reports available to the customer within one hour. Reports should be accessible to the customer for 8 hours. Some reports are larger than 1 MB. Each report is unique to the customer. The application should delete all reports that are older than 2 days.Which solution will meet these requirements with the LEAST operational overhead?
A. Generate the reports and then store the reports as Amazon DynamoDB items that have a specified TTL
B. Generate the reports and then store the reports in an Amazon S3 bucket that uses server-side encryption
C. Generate the reports and then store the reports in an Amazon S3 bucket that uses server-side encryption
D. Generate the reports and then store the reports in an Amazon RDS database with a date stamp
View answer
Correct Answer: C
Question #3
A developer is testing a new file storage application that uses an Amazon CloudFront distribution to serve content from an Amazon S3 bucket. The distribution accesses the S3 bucket by using an origin access identity (OAI). The S3 bucket's permissions explicitly deny access to all other users.
A. Add a second cache behavior to the distribution with the same origin as the default cache behavior
B. Add a second cache behavior to the distribution with the same origin as the default cache behavior
C. Add a second origin as a failover origin to the default cache behavior
D. Add a bucket policy to the S3 bucket to allow read access
View answer
Correct Answer: A
Question #4
A company has a web application that is deployed on AWS. The application uses an Amazon API Gateway API and an AWS Lambda function as its backend.The application recently demonstrated unexpected behavior. A developer examines the Lambda function code, finds an error, and modifies the code to resolve the problem. Before deploying the change to production, the developer needs to run tests to validate that the application operates properly.The application has only a production environment available. The developer must create a new development environment to test the code changes. The developer must also prevent other developers from overwriting these changes during the test cycle.Which combination of steps will meet these requirements with the LEAST development effort? (Choose two.)
A. Create a new resource in the current stage
B. Update the Lambda function in the API Gateway API integration request to use the hotfix alias
C. Modify the Lambda function by fixing the code
D. Modify the Lambda function by fixing the code
E. Create a new API Gateway API for the development environment
View answer
Correct Answer: BD
Question #5
A company is using an Amazon API Gateway REST API endpoint as a webhook to publish events from an on-premises source control management (SCM) system to Amazon EventBridge. The company has configured an EventBridge rule to listen for the events and to control application deployment in a central AWS account. The company needs to receive the same events across multiple receiver AWS accounts.How can a developer meet these requirements without changing the configuration of the SCM system?
A. Deploy the API Gateway REST API to all the required AWS accounts
B. Deploy the API Gateway REST API to all the receiver AWS accounts
C. Grant permission to the central AWS account for EventBridge to access the receiver AWS accounts
D. Convert the API Gateway type from REST API to HTTP API
View answer
Correct Answer: C
Question #6
A developer has an application that makes batch requests directly to Amazon DynamoDB by using the BatchGetItem low-level API operation. The responses frequently return values in the UnprocessedKeys element.Which actions should the developer take to increase the resiliency of the application when the batch response includes values in UnprocessedKeys? (Choose two.)
A. Retry the batch operation immediately
B. Retry the batch operation with exponential backoff and randomized delay
C. Update the application to use an AWS software development kit (AWS SDK) to make the requests
D. Increase the provisioned read capacity of the DynamoDB tables that the operation accesses
E. Increase the provisioned write capacity of the DynamoDB tables that the operation accesses
View answer
Correct Answer: BD
Question #7
A company is using an AWS Lambda function to process records from an Amazon Kinesis data stream. The company recently observed slow processing of the records. A developer notices that the iterator age metric for the function is increasing and that the Lambda run duration is constantly above normal.Which actions should the developer take to increase the processing speed? (Choose two.)
A. Increase the number of shards of the Kinesis data stream
B. Decrease the timeout of the Lambda function
C. Increase the memory that is allocated to the Lambda function
D. Decrease the number of shards of the Kinesis data stream
E. Increase the timeout of the Lambda function
View answer
Correct Answer: AC
Question #8
A company is implementing an application on Amazon EC2 instances. The application needs to process incoming transactions. When the application detects a transaction that is not valid, the application must send a chat message to the company's support team. To send the message, the application needs to retrieve the access token to authenticate by using the chat API.A developer needs to implement a solution to store the access token. The access token must be encrypted at rest and in transit. The access token must also be accessible from other AWS accounts.Which solution will meet these requirements with the LEAST management overhead?
A. Use an AWS Systems Manager Parameter Store SecureString parameter that uses an AWS Key Management Service (AWS KMS) AWS managed key to store the access token
B. Encrypt the access token by using an AWS Key Management Service (AWS KMS) customer managed key
C. Use AWS Secrets Manager with an AWS Key Management Service (AWS KMS) customer managed key to store the access token
D. Encrypt the access token by using an AWS Key Management Service (AWS KMS) AWS managed key
View answer
Correct Answer: C
Question #9
A developer is configuring an application's deployment environment in AWS CodePipeline. The application code is stored in a GitHub repository. The developer wants to ensure that the repository package's unit tests run in the new deployment environment. The developer has already set the pipeline's source provider to GitHub and has specified the repository and branch to use in the deployment.Which combination of steps should the developer take next to meet these requirements with the LEAST overhead? (Choose two.)
A. Create an AWS CodeCommit project
B. Create an AWS CodeBuild project
C. Create an AWS CodeDeploy project
D. Add an action to the source stage
E. Add a new stage to the pipeline after the source stage
View answer
Correct Answer: BE
Question #10
A developer is configuring an application's deployment environment in AWS CodePipeline. The application code is stored in a GitHub repository. The developer wants to ensure that the repository package's unit tests run in the new deployment environment. The developer has already set the pipeline's source provider to GitHub and has specified the repository and branch to use in the deployment.Which combination of steps should the developer take next to meet these requirements with the LEAST overhead? (Choose two.)
A. Create an AWS CodeCommit project
B. Create an AWS CodeBuild project
C. Create an AWS CodeDeploy project
D. Add an action to the source stage
E. Add a new stage to the pipeline after the source stage
View answer
Correct Answer: BE
Question #11
An application that is hosted on an Amazon EC2 instance needs access to files that are stored in an Amazon S3 bucket. The application lists the objects that are stored in the S3 bucket and displays a table to the user. During testing, a developer discovers that the application does not show any objects in the list.What is the MOST secure way to resolve this issue?
A. Update the IAM instance profile that is attached to the EC2 instance to include the S3:* permission for the S3 bucket
B. Update the IAM instance profile that is attached to the EC2 instance to include the S3:ListBucket permission for the S3 bucket
C. Update the developer's user permissions to include the S3:ListBucket permission for the S3 bucket
D. Update the S3 bucket policy by including the S3:ListBucket permission and by setting the Principal element to specify the account number of the EC2 instance
View answer
Correct Answer: B
Question #12
A developer has written the following IAM policy to provide access to an Amazon S3 bucket:Which access does the policy allow regarding the s3:GetObject and s3:PutObject actions?
A. Access on all buckets except the “DOC-EXAMPLE-BUCKET” bucket
B. Access on all buckets that start with “DOC-EXAMPLE-BUCKET” except the “DOC-EXAMPLE-BUCKET/secrets” bucket
C. Access on all objects in the “DOC-EXAMPLE-BUCKET” bucket along with access to all S3 actions for objects in the “DOC-EXAMPLE-BUCKET” bucket that start with “secrets”
D. Access on all objects in the “DOC-EXAMPLE-BUCKET” bucket except on objects that start with “secrets”
View answer
Correct Answer: D
Question #13
A company wants to share information with a third party. The third party has an HTTP API endpoint that the company can use to share the information. The company has the required API key to access the HTTP API.The company needs a way to manage the API key by using code. The integration of the API key with the application code cannot affect application performance.Which solution will meet these requirements MOST securely?
A. Store the API credentials in AWS Secrets Manager
B. Store the API credentials in a local code variable
C. Store the API credentials as an object in a private Amazon S3 bucket
D. Store the API credentials in an Amazon DynamoDB table
View answer
Correct Answer: A
Question #14
An application uses Lambda functions to extract metadata from files uploaded to an S3 bucket; the metadata is stored in Amazon DynamoDB. The application starts behaving unexpectedly, and the developer wants to examine the logs of the Lambda function code for errors.Based on this system configuration, where would the developer find the logs?
A. Amazon S3
B. AWS CloudTrail
C. Amazon CloudWatch
D. Amazon DynamoDB
View answer
Correct Answer: C
Question #15
An application is processing clickstream data using Amazon Kinesis. The clickstream data feed into Kinesis experiences periodic spikes. The PutRecords API call occasionally fails and the logs show that the failed call returns the response shown below:Which techniques will help mitigate this exception? (Choose two.)
A. Implement retries with exponential backoff
B. Use a PutRecord API instead of PutRecords
C. Reduce the frequency and/or size of the requests
D. Use Amazon SNS instead of Kinesis
E. Reduce the number of KCL consumers
View answer
Correct Answer: AC
Question #16
Given the source code for an AWS Lambda function in the local file store.py containing a handler function called getstore and the following AWS CloudFormation template:Transform: AWS::Serverless-2016-10-31Resources:StoreFunc:Type: AWS::Serverless::FunctionProperties:Handler: store.getstoreRuntime: python3.13What should be done to prepare the template so that it can be deployed using the AWS CLI command aws cloudformation deploy?
A. se aws cloudformation package to upload the source code to an Amazon S3 bucket and produce a modified CloudFormation template
B. se aws cloudformation compile to base64 encode and embed the source file into a modified CloudFormation template
C. se aws lambda zip to package the source file together with the CloudFormation template and deploy the resulting
D. se aws serverless create-package to embed the source file directly into the existing CloudFormation template
View answer
Correct Answer: A
Question #17
A developer is using AWS Amplify Hosting to build and deploy an application. The developer is receiving an increased number of bug reports from users. The developer wants to add end-to-end testing to the application to eliminate as many bugs as possible before the bugs reach production.Which solution should the developer implement to meet these requirements?
A. Run the amplify add test command in the Amplify CLI
B. Create unit tests in the application
C. Add a test phase to the amplify
D. Add a test phase to the aws-exports
View answer
Correct Answer: C
Question #18
An application is using Amazon Cognito user pools and identity pools for secure access. A developer wants to integrate the user-specific file upload and download features in the application with Amazon S3. The developer must ensure that the files are saved and retrieved in a secure manner and that users can access only their own files. The file sizes range from 3 KB to 300 MB.Which option will meet these requirements with the HIGHEST level of security?
A. Use S3 Event Notifications to validate the file upload and download requests and update the user interface (UI)
B. Save the details of the uploaded files in a separate Amazon DynamoDB table
C. Use Amazon API Gateway and an AWS Lambda function to upload and download files
D. Use an IAM policy within the Amazon Cognito identity prefix to restrict users to use their own folders in Amazon S3
View answer
Correct Answer: D
Question #19
A company is building a serverless application on AWS. The application uses an AWS Lambda function to process customer orders 24 hours a day, 7 days a week. The Lambda function calls an external vendor's HTTP API to process payments.During load tests, a developer discovers that the external vendor payment processing API occasionally times out and returns errors. The company expects that some payment processing API calls will return errors.The company wants the support team to receive notifications in near real time only when the payment processing external API error rate exceed 5% of the total number of transactions in an hour. Developers need to use an existing Amazon Simple Notification Service (Amazon SNS) topic that is configured to notify the support team.Which solution will meet these requirements?
A. Write the results of payment processing API calls to Amazon CloudWatch
B. Publish custom metrics to CloudWatch that record the failures of the external payment processing API calls
C. Publish the results of the external payment processing API calls to a new Amazon SNS topic
D. Write the results of the external payment processing API calls to Amazon S3
View answer
Correct Answer: B
Question #20
A company's new mobile app uses Amazon API Gateway. As the development team completes a new release of its APIs, a developer must safely and transparently roll out the API change.What is the SIMPLEST solution for the developer to use for rolling out the new API version to a limited number of users through API Gateway?
A. Create a new API in API Gateway
B. Validate the new API version and promote it to production during the window of lowest expected utilization
C. Implement an Amazon CloudWatch alarm to trigger a rollback if the observed HTTP 500 status code rate exceeds a predetermined threshold
D. Use the canary release deployment option in API Gateway
View answer
Correct Answer: D
Question #21
A company receives food orders from multiple partners. The company has a microservices application that uses Amazon API Gateway APIs with AWS Lambda integration. Each partner sends orders by calling a customized API that is exposed through API Gateway. The API call invokes a shared Lambda function to process the orders.Partners need to be notified after the Lambda function processes the orders. Each partner must receive updates for only the partner's own orders. The company wants to add new partners in the future with the fewest code changes possible.Which solution will meet these requirements in the MOST scalable way?
A. Create a different Amazon Simple Notification Service (Amazon SNS) topic for each partner
B. Create a different Lambda function for each partner
C. Create an Amazon Simple Notification Service (Amazon SNS) topic
D. Create one Amazon Simple Notification Service (Amazon SNS) topic
View answer
Correct Answer: C
Question #22
A financial company must store original customer records for 10 years for legal reasons. A complete record contains personally identifiable information (PII). According to local regulations, PII is available to only certain people in the company and must not be shared with third parties. The company needs to make the records available to third-party organizations for statistical analysis without sharing the PII.A developer wants to store the original immutable record in Amazon S3. Depending on who accesses the S3 document, the document should be returned as is or with all the PII removed. The developer has written an AWS Lambda function to remove the PII from the document. The function is named removePii.What should the developer do so that the company can meet the PII requirements while maintaining only one copy of the document?
A. Set up an S3 event notification that invokes the removePii function when an S3 GET request is made
B. Set up an S3 event notification that invokes the removePii function when an S3 PUT request is made
C. Create an S3 Object Lambda access point from the S3 console
D. Create an S3 access point from the S3 console
View answer
Correct Answer: C
Question #23
A developer is using an AWS Lambda function to generate avatars for profile pictures that are uploaded to an Amazon S3 bucket. The Lambda function is automatically invoked for profile pictures that are saved under the /original/ S3 prefix. The developer notices that some pictures cause the Lambda function to time out. The developer wants to implement a fallback mechanism by using another Lambda function that resizes the profile picture.Which solution will meet these requirements with the LEAST development effort?
A. Set the image resize Lambda function as a destination of the avatar generator Lambda function for the events that fail processing
B. Create an Amazon Simple Queue Service (Amazon SQS) queue
C. Create an AWS Step Functions state machine that invokes the avatar generator Lambda function and uses the image resize Lambda function as a fallback
D. Create an Amazon Simple Notification Service (Amazon SNS) topic
View answer
Correct Answer: A
Question #24
A company receives food orders from multiple partners. The company has a microservices application that uses Amazon API Gateway APIs with AWS Lambda integration. Each partner sends orders by calling a customized API that is exposed through API Gateway. The API call invokes a shared Lambda function to process the orders.Partners need to be notified after the Lambda function processes the orders. Each partner must receive updates for only the partner's own orders. The company wants to add new partners in the future with the fewest code changes possible.Which solution will meet these requirements in the MOST scalable way?
A. Create a different Amazon Simple Notification Service (Amazon SNS) topic for each partner
B. Create a different Lambda function for each partner
C. Create an Amazon Simple Notification Service (Amazon SNS) topic
D. Create one Amazon Simple Notification Service (Amazon SNS) topic
View answer
Correct Answer: C
Question #25
A developer wants to insert a record into an Amazon DynamoDB table as soon as a new file is added to an Amazon S3 bucket.Which set of steps would be necessary to achieve this?
A. Create an event with Amazon EventBridge that will monitor the S3 bucket and then insert the records into DynamoDB
B. Configure an S3 event to invoke an AWS Lambda function that inserts records into DynamoD
C. Create an AWS Lambda function that will poll the S3 bucket and then insert the records into DynamoDB
D. Create a cron job that will run at a scheduled time and insert the records into DynamoDB
View answer
Correct Answer: B
Question #26
A developer is building a new application on AWS. The application uses an AWS Lambda function that retrieves information from an Amazon DynamoDB table. The developer hard coded the DynamoDB table name into the Lambda function code. The table name might change over time. The developer does not want to modify the Lambda code if the table name changes.Which solution will meet these requirements MOST efficiently?
A. Create a Lambda environment variable to store the table name
B. Store the table name in a file
C. Create a file to store the table name
D. Create a global variable that is outside the handler in the Lambda function to store the table name
View answer
Correct Answer: A
Question #27
A developer is building an application that uses an AWS Lambda function to process data. The application requires minimum latency. The Lambda function must have predictable function start times. All setup activities for the execution environment must happen before invocation of the Lambda function.Which solution will meet these requirements?
A. Increase the memory of the Lambda function to the maximum amount
B. Optimize the static initialization code that runs when a new execution environment is prepared for the first time
C. Increase the reserved concurrency of the Lambda function to the maximum value for unreserved account concurrency
D. Publish a new version of the Lambda function
View answer
Correct Answer: D
Question #28
A company receives food orders from multiple partners. The company has a microservices application that uses Amazon API Gateway APIs with AWS Lambda integration. Each partner sends orders by calling a customized API that is exposed through API Gateway. The API call invokes a shared Lambda function to process the orders.Partners need to be notified after the Lambda function processes the orders. Each partner must receive updates for only the partner's own orders. The company wants to add new partners in the future with the fewest code changes possible.Which solution will meet these requirements in the MOST scalable way?
A. Create a different Amazon Simple Notification Service (Amazon SNS) topic for each partner
B. Create a different Lambda function for each partner
C. Create an Amazon Simple Notification Service (Amazon SNS) topic
D. Create one Amazon Simple Notification Service (Amazon SNS) topic
View answer
Correct Answer: C
Question #29
A company is planning to deploy an application on AWS behind an Elastic Load Balancer. The application uses an HTTP/HTTPS listener and must access the client IP addresses.Which load-balancing solution meets these requirements?
A. Use an Application Load Balancer and the X-Forwarded-For headers
B. Use a Network Load Balancer (NLB)
C. Use an Application Load Balancer
D. Use a Network Load Balancer and the X-Forwarded-For headers
View answer
Correct Answer: A
Question #30
A company has a web application that is deployed on AWS. The application uses an Amazon API Gateway API and an AWS Lambda function as its backend.The application recently demonstrated unexpected behavior. A developer examines the Lambda function code, finds an error, and modifies the code to resolve the problem. Before deploying the change to production, the developer needs to run tests to validate that the application operates properly.The application has only a production environment available. The developer must create a new development environment to test the code changes. The developer must also prevent other developers from overwriting these changes during the test cycle.Which combination of steps will meet these requirements with the LEAST development effort? (Choose two.)
A. Create a new resource in the current stage
B. Update the Lambda function in the API Gateway API integration request to use the hotfix alias
C. Modify the Lambda function by fixing the code
D. Modify the Lambda function by fixing the code
E. Create a new API Gateway API for the development environment
View answer
Correct Answer: BD
Question #31
A developer is building a new application that transforms text files to .pdf files. A separate application writes the text files to a source Amazon S3 bucket. The new application must read the files as they arrive in Amazon S3 and must convert the files to .pdf files by using an AWS Lambda function. The developer has written an IAM policy to allow access to Amazon S3 and Amazon CloudWatch Logs.What should the developer do to ensure that the Lambda function has the correct permissions?
A. Create a Lambda execution role by using AWS Identity and Access Management (IAM)
B. Create a Lambda execution user by using AWS Identity and Access Management (IAM)
C. Create a Lambda execution role by using AWS Identity and Access Management (IAM)
D. Create a Lambda execution user by using AWS Identity and Access Management (IAM)
View answer
Correct Answer: a
Question #32
An application is using Amazon Cognito user pools and identity pools for secure access. A developer wants to integrate the user-specific file upload and download features in the application with Amazon S3. The developer must ensure that the files are saved and retrieved in a secure manner and that users can access only their own files. The file sizes range from 3 KB to 300 MB.Which option will meet these requirements with the HIGHEST level of security?
A. Use S3 Event Notifications to validate the file upload and download requests and update the user interface (UI)
B. Save the details of the uploaded files in a separate Amazon DynamoDB table
C. Use Amazon API Gateway and an AWS Lambda function to upload and download files
D. Use an IAM policy within the Amazon Cognito identity prefix to restrict users to use their own folders in Amazon S3
View answer
Correct Answer: D
Question #33
A company is planning to use AWS CodeDeploy to deploy an application to Amazon Elastic Container Service (Amazon ECS). During the deployment of a new version of the application, the company initially must expose only 10% of live traffic to the new version of the deployed application. Then, after 15 minutes elapse, the company must route all the remaining live traffic to the new version of the deployed application.Which CodeDeploy predefined configuration will meet these requirements?
A. CodeDeployDefault
B. CodeDeployDefault
C. CodeDeployDefault
D. CodeDeployDefault
View answer
Correct Answer: A
Question #34
A company is running a custom application on a set of on-premises Linux servers that are accessed using Amazon API Gateway. AWS X-Ray tracing has been enabled on the API test stage.How can a developer enable X-Ray tracing on the on-premises servers with the LEAST amount of configuration?
A. Install and run the X-Ray SDK on the on-premises servers to capture and relay the data to the X-Ray service
B. Install and run the X-Ray daemon on the on-premises servers to capture and relay the data to the X-Ray service
C. Capture incoming requests on-premises and configure an AWS Lambda function to pull, process, and relay relevant data to X-Ray using the PutTraceSegments API call
D. Capture incoming requests on-premises and configure an AWS Lambda function to pull, process, and relay relevant data to X-Ray using the PutTelemetryRecords API call
View answer
Correct Answer: B
Question #35
A developer is writing an AWS Lambda function. The developer wants to log key events that occur while the Lambda function runs. The developer wants to include a unique identifier to associate the events with a specific function invocation. The developer adds the following code to the Lambda function:Which solution will meet this requirement?
A. Obtain the request identifier from the AWS request ID field in the context object
B. Obtain the request identifier from the AWS request ID field in the event object
C. Obtain the request identifier from the AWS request ID field in the event object
D. Obtain the request identifier from the AWS request ID field in the context object
View answer
Correct Answer: A
Question #36
A company is planning to deploy an application on AWS behind an Elastic Load Balancer. The application uses an HTTP/HTTPS listener and must access the client IP addresses.Which load-balancing solution meets these requirements?
A. Use an Application Load Balancer and the X-Forwarded-For headers
B. Use a Network Load Balancer (NLB)
C. Use an Application Load Balancer
D. Use a Network Load Balancer and the X-Forwarded-For headers
View answer
Correct Answer: A
Question #37
An Amazon Kinesis Data Firehose delivery stream is receiving customer data that contains personally identifiable information. A developer needs to remove pattern-based customer identifiers from the data and store the modified data in an Amazon S3 bucket.What should the developer do to meet these requirements?
A. Implement Kinesis Data Firehose data transformation as an AWS Lambda function
B. Launch an Amazon EC2 instance
C. Create an Amazon OpenSearch Service instance
D. Create an AWS Step Functions workflow to remove the customer identifiers
View answer
Correct Answer: A
Question #38
A developer is creating a template that uses AWS CloudFormation to deploy an application. The application is serverless and uses Amazon API Gateway, Amazon DynamoDB, and AWS Lambda.Which AWS service or tool should the developer use to define serverless resources in YAML?
A. CloudFormation serverless intrinsic functions
B. AWS Elastic Beanstalk
C. AWS Serverless Application Model (AWS SAM)
D. AWS Cloud Development Kit (AWS CDK)
View answer
Correct Answer: C
Question #39
A developer is creating an application that will store personal health information (PHI). The PHI needs to be encrypted at all times. An encrypted Amazon RDS for MySQL DB instance is storing the data. The developer wants to increase the performance of the application by caching frequently accessed data while adding the ability to sort or rank the cached datasets.Which solution will meet these requirements?
A. Create an Amazon ElastiCache for Redis instance
B. Create an Amazon ElastiCache for Memcached instance
C. Create an Amazon RDS for MySQL read replica
D. Create an Amazon DynamoDB table and a DynamoDB Accelerator (DAX) cluster for the table
View answer
Correct Answer: A
Question #40
A developer is building a new application on AWS. The application uses an AWS Lambda function that retrieves information from an Amazon DynamoDB table. The developer hard coded the DynamoDB table name into the Lambda function code. The table name might change over time. The developer does not want to modify the Lambda code if the table name changes.Which solution will meet these requirements MOST efficiently?
A. Create a Lambda environment variable to store the table name
B. Store the table name in a file
C. Create a file to store the table name
D. Create a global variable that is outside the handler in the Lambda function to store the table name
View answer
Correct Answer: A
Question #41
A company's new mobile app uses Amazon API Gateway. As the development team completes a new release of its APIs, a developer must safely and transparently roll out the API change.What is the SIMPLEST solution for the developer to use for rolling out the new API version to a limited number of users through API Gateway?
A. Create a new API in API Gateway
B. Validate the new API version and promote it to production during the window of lowest expected utilization
C. Implement an Amazon CloudWatch alarm to trigger a rollback if the observed HTTP 500 status code rate exceeds a predetermined threshold
D. Use the canary release deployment option in API Gateway
View answer
Correct Answer: D
Question #42
A developer is configuring an application's deployment environment in AWS CodePipeline. The application code is stored in a GitHub repository. The developer wants to ensure that the repository package's unit tests run in the new deployment environment. The developer has already set the pipeline's source provider to GitHub and has specified the repository and branch to use in the deployment.Which combination of steps should the developer take next to meet these requirements with the LEAST overhead? (Choose two.)
A. Create an AWS CodeCommit project
B. Create an AWS CodeBuild project
C. Create an AWS CodeDeploy project
D. Add an action to the source stage
E. Add a new stage to the pipeline after the source stage
View answer
Correct Answer: BE
Question #43
A company's new mobile app uses Amazon API Gateway. As the development team completes a new release of its APIs, a developer must safely and transparently roll out the API change.What is the SIMPLEST solution for the developer to use for rolling out the new API version to a limited number of users through API Gateway?
A. Create a new API in API Gateway
B. Validate the new API version and promote it to production during the window of lowest expected utilization
C. Implement an Amazon CloudWatch alarm to trigger a rollback if the observed HTTP 500 status code rate exceeds a predetermined threshold
D. Use the canary release deployment option in API Gateway
View answer
Correct Answer: D
Question #44
A company wants to deploy and maintain static websites on AWS. Each website's source code is hosted in one of several version control systems, including AWS CodeCommit, Bitbucket, and GitHub.The company wants to implement phased releases by using development, staging, user acceptance testing, and production environments in the AWS Cloud. Deployments to each environment must be started by code merges on the relevant Git branch. The company wants to use HTTPS for all data exchange. The company needs a solution that does not require servers to run continuously.Which solution will meet these requirements with the LEAST operational overhead?
A. Host each website by using AWS Amplify with a serverless backend
B. Host each website in AWS Elastic Beanstalk with multiple environments
C. Host each website in different Amazon S3 buckets for each environment
D. Host each website on its own Amazon EC2 instance
View answer
Correct Answer: A
Question #45
A developer is working on a serverless application that needs to process any changes to an Amazon DynamoDB table with an AWS Lambda function.How should the developer configure the Lambda function to detect changes to the DynamoDB table?
A. Create an Amazon Kinesis data stream, and attach it to the DynamoDB table
B. Create an Amazon EventBridge rule to invoke the Lambda function on a regular schedule
C. Enable DynamoDB Streams on the table
D. Create an Amazon Kinesis Data Firehose delivery stream, and attach it to the DynamoDB table
View answer
Correct Answer: C
Question #46
An ecommerce company is using an AWS Lambda function behind Amazon API Gateway as its application tier. To process orders during checkout, the application calls a POST API from the frontend. The POST API invokes the Lambda function asynchronously. In rare situations, the application has not processed orders. The Lambda application logs show no errors or failures.What should a developer do to solve this problem?
A. Inspect the frontend logs for API failures
B. Create and inspect the Lambda dead-letter queue
C. Inspect the Lambda logs in Amazon CloudWatch for possible errors
D. Make sure that caching is disabled for the POST API in API Gateway
View answer
Correct Answer: B
Question #47
A developer created an AWS Lambda function that accesses resources in a VPC. The Lambda function polls an Amazon Simple Queue Service (Amazon SQS) queue for new messages through a VPC endpoint. Then the function calculates a rolling average of the numeric values that are contained in the messages. After initial tests of the Lambda function, the developer found that the value of the rolling average that the function returned was not accurate.How can the developer ensure that the function calculates an accurate rolling average?
A. Set the function's reserved concurrency to 1
B. Modify the function to store the values in Amazon ElastiCache
C. Set the function's provisioned concurrency to 1
D. Modify the function to store the values in the function's layers
View answer
Correct Answer: A
Question #48
A developer has created an AWS Lambda function that is written in Python. The Lambda function reads data from objects in Amazon S3 and writes data to an Amazon DynamoDB table. The function is successfully invoked from an S3 event notification when an object is created. However, the function fails when it attempts to write to the DynamoDB table. What is the MOST likely cause of this issue?
A. The Lambda function's concurrency limit has been exceeded
B. DynamoDB table requires a global secondary index (GSI) to support writes
C. The Lambda function does not have IAM permissions to write to DynamoDB
D. The DynamoDB table is not running in the same Availability Zone as the Lambda function
View answer
Correct Answer: D
Question #49
A company has an application that consists of different microservices that run inside an AWS account. The microservices are running in containers inside a single VPC. The number of microservices is constantly increasing. A developer must create a central logging solution for application logs.
A. Create a different Amazon CloudWatch Logs stream for each microservice
B. Create an AWS CloudTrail trail to log all the API calls
C. Configure VPC Flow Logs to track the communications between the microservices
D. Use AWS Cloud Map to map the interactions of the microservices
View answer
Correct Answer: A
Question #50
An application is processing clickstream data using Amazon Kinesis. The clickstream data feed into Kinesis experiences periodic spikes. The PutRecords API call occasionally fails and the logs show that the failed call returns the response shown below:Which techniques will help mitigate this exception? (Choose two.)
A. Implement retries with exponential backoff
B. Use a PutRecord API instead of PutRecords
C. Reduce the frequency and/or size of the requests
D. Use Amazon SNS instead of Kinesis
E. Reduce the number of KCL consumers
View answer
Correct Answer: AC
Question #51
A developer needs to perform geographic load testing of an API. The developer must deploy resources to multiple AWS Regions to support the load testing of the API.How can the developer meet these requirements without additional application code?
A. Create and deploy an AWS Lambda function in each desired Region
B. Create an AWS CloudFormation template that defines the load test resources
C. Create an AWS Systems Manager document that defines the resources
D. Create an AWS CloudFormation template that defines the load test resources
View answer
Correct Answer: B
Question #52
A development team wants to build a continuous integration/continuous delivery (CI/CD) pipeline. The team is using AWS CodePipeline to automate the code build and deployment. The team wants to store the program code to prepare for the CI/CD pipeline.Which AWS service should the team use to store the program code?
A. AWS CodeDeploy
B. AWS CodeArtifact
C. AWS CodeCommit
D. Amazon CodeGuru
View answer
Correct Answer: C
Question #53
A developer is working on an existing application that uses Amazon DynamoDB as its data store. The DynamoDB table has the following attributes: partNumber (partition key), vendor (sort key), description, productFamily, and productType. When the developer analyzes the usage patterns, the developer notices that there are application modules that frequently look for a list of products based on the productFamily and productType attributes.The developer wants to make changes to the application to improve performance of the query operations.Which solution will meet these requirements?
A. Create a global secondary index (GSI) with productFamily as the partition key and productType as the sort key
B. Create a local secondary index (LSI) with productFamily as the partition key and productType as the sort key
C. Recreate the table
D. Update the queries to use Scan operations with productFamily as the partition key and productType as the sort key
View answer
Correct Answer: A
Question #54
A developer is building a web application that uses Amazon API Gateway to expose an AWS Lambda function to process requests from clients. During testing, the developer notices that the API Gateway times out even though the Lambda function finishes under the set time limit.Which of the following API Gateway metrics in Amazon CloudWatch can help the developer troubleshoot the issue? (Choose two.)
A. CacheHitCount
B. IntegrationLatency
C. CacheMissCount
D. Latency
E. Count
View answer
Correct Answer: BD
Question #55
A developer is building a highly secure healthcare application using serverless components. This application requires writing temporary data to /tmp storage on an AWS Lambda function. How should the developer encrypt this data?
A. Enable Amazon EBS volume encryption with an AWS KMS key in the Lambda function configuration so that all storage attached to the Lambda function is encrypted
B. Set up the Lambda function with a role and key policy to access an AWS KMS key
C. Use OpenSSL to generate a symmetric encryption key on Lambda startup
D. Use an on-premises hardware security module (HSM) to generate keys, where the Lambda function requests a data key from the HSM and uses that to encrypt data on all requests to the function
View answer
Correct Answer: B
Question #56
A developer is working on an existing application that uses Amazon DynamoDB as its data store. The DynamoDB table has the following attributes: partNumber (partition key), vendor (sort key), description, productFamily, and productType. When the developer analyzes the usage patterns, the developer notices that there are application modules that frequently look for a list of products based on the productFamily and productType attributes.The developer wants to make changes to the application to improve performance of the query operations.Which solution will meet these requirements?
A. Create a global secondary index (GSI) with productFamily as the partition key and productType as the sort key
B. Create a local secondary index (LSI) with productFamily as the partition key and productType as the sort key
C. Recreate the table
D. Update the queries to use Scan operations with productFamily as the partition key and productType as the sort key
View answer
Correct Answer: A
Question #57
A developer is working on an existing application that uses Amazon DynamoDB as its data store. The DynamoDB table has the following attributes: partNumber (partition key), vendor (sort key), description, productFamily, and productType. When the developer analyzes the usage patterns, the developer notices that there are application modules that frequently look for a list of products based on the productFamily and productType attributes.The developer wants to make changes to the application to improve performance of the query operations.Which solution will meet these requirements?
A. Create a global secondary index (GSI) with productFamily as the partition key and productType as the sort key
B. Create a local secondary index (LSI) with productFamily as the partition key and productType as the sort key
C. Recreate the table
D. Update the queries to use Scan operations with productFamily as the partition key and productType as the sort key
View answer
Correct Answer: A
Question #58
A company has a web application that is deployed on AWS. The application uses an Amazon API Gateway API and an AWS Lambda function as its backend.The application recently demonstrated unexpected behavior. A developer examines the Lambda function code, finds an error, and modifies the code to resolve the problem. Before deploying the change to production, the developer needs to run tests to validate that the application operates properly.The application has only a production environment available. The developer must create a new development environment to test the code changes. The developer must also prevent other developers from overwriting these changes during the test cycle.Which combination of steps will meet these requirements with the LEAST development effort? (Choose two.)
A. Create a new resource in the current stage
B. Update the Lambda function in the API Gateway API integration request to use the hotfix alias
C. Modify the Lambda function by fixing the code
D. Modify the Lambda function by fixing the code
E. Create a new API Gateway API for the development environment
View answer
Correct Answer: BD
Question #59
A development team wants to build a continuous integration/continuous delivery (CI/CD) pipeline. The team is using AWS CodePipeline to automate the code build and deployment. The team wants to store the program code to prepare for the CI/CD pipeline.Which AWS service should the team use to store the program code?
A. AWS CodeDeploy
B. AWS CodeArtifact
C. AWS CodeCommit
D. Amazon CodeGuru
View answer
Correct Answer: C
Question #60
A company is using an Amazon API Gateway REST API endpoint as a webhook to publish events from an on-premises source control management (SCM) system to Amazon EventBridge. The company has configured an EventBridge rule to listen for the events and to control application deployment in a central AWS account. The company needs to receive the same events across multiple receiver AWS accounts.How can a developer meet these requirements without changing the configuration of the SCM system?
A. Deploy the API Gateway REST API to all the required AWS accounts
B. Deploy the API Gateway REST API to all the receiver AWS accounts
C. Grant permission to the central AWS account for EventBridge to access the receiver AWS accounts
D. Convert the API Gateway type from REST API to HTTP API
View answer
Correct Answer: C
Question #61
A developer is working on a serverless application that needs to process any changes to an Amazon DynamoDB table with an AWS Lambda function. How should the developer configure the Lambda function to detect changes to the DynamoDB table?
A. Create an Amazon Kinesis data stream, and attach it to the DynamoDB table
B. Create an Amazon EventBridge rule to invoke the Lambda function on a regular schedule
C. Enable DynamoDB Streams on the table
D. Create an Amazon Kinesis Data Firehose delivery stream, and attach it to the DynamoDB table
View answer
Correct Answer: C
Question #62
A company is running a custom application on a set of on-premises Linux servers that are accessed using Amazon API Gateway. AWS X-Ray tracing has been enabled on the API test stage.How can a developer enable X-Ray tracing on the on-premises servers with the LEAST amount of configuration?
A. Install and run the X-Ray SDK on the on-premises servers to capture and relay the data to the X-Ray service
B. Install and run the X-Ray daemon on the on-premises servers to capture and relay the data to the X-Ray service
C. Capture incoming requests on-premises and configure an AWS Lambda function to pull, process, and relay relevant data to X-Ray using the PutTraceSegments API call
D. Capture incoming requests on-premises and configure an AWS Lambda function to pull, process, and relay relevant data to X-Ray using the PutTelemetryRecords API call
View answer
Correct Answer: B
Question #63
A company is offering APIs as a service over the internet to provide unauthenticated read access to statistical information that is updated daily. The company uses Amazon API Gateway and AWS Lambda to develop the APIs. The service has become popular, and the company wants to enhance the responsiveness of the APIs.Which action can help the company achieve this goal?
A. Enable API caching in API Gateway
B. Configure API Gateway to use an interface VPC endpoint
C. Enable cross-origin resource sharing (CORS) for the APIs
D. Configure usage plans and API keys in API Gateway
View answer
Correct Answer: A
Question #64
A company hosts a client-side web application for one of its subsidiaries on Amazon S3. The web application can be accessed through Amazon CloudFront from https://www.example.com. After a successful rollout, the company wants to host three more client-side web applications for its remaining subsidiaries on three separate S3 buckets.To achieve this goal, a developer moves all the common JavaScript files and web fonts to a central S3 bucket that serves the web applications. However, during testing, the developer notices that the browser blocks the JavaScript files and web fonts.What should the developer do to prevent the browser from blocking the JavaScript files and web fonts?
A. Create four access points that allow access to the central S3 bucket
B. Create a bucket policy that allows access to the central S3 bucket
C. Create a cross-origin resource sharing (CORS) configuration that allows access to the central S3 bucket
D. Create a Content-MD5 header that provides a message integrity check for the central S3 bucket
View answer
Correct Answer: C
Question #65
A company is planning to deploy an application on AWS behind an Elastic Load Balancer. The application uses an HTTP/HTTPS listener and must access the client IP addresses.Which load-balancing solution meets these requirements?
A. Use an Application Load Balancer and the X-Forwarded-For headers
B. Use a Network Load Balancer (NLB)
C. Use an Application Load Balancer
D. Use a Network Load Balancer and the X-Forwarded-For headers
View answer
Correct Answer: A
Question #66
A developer needs to give a new application the ability to retrieve configuration data.The application must be able to retrieve new configuration data values without the need to redeploy the application code. If the application becomes unhealthy because of a bad configuration change, the developer must be able to automatically revert the configuration change to the previous value.
A. Use AWS Secrets Manager to manage and store the configuration data
B. Use AWS Secrets Manager to manage and store the configuration data
C. Use AWS AppConfig to manage and store the configuration data
D. Use AWS AppConfig to manage and store the configuration data
View answer
Correct Answer: D
Question #67
A developer wants to store information about movies. Each movie has a title, release year, and genre. The movie information also can include additional properties about the cast and production crew. This additional information is inconsistent across movies. For example, one movie might have an assistant director, and another movie might have an animal trainer.The developer needs to implement a solution to support the following use cases:For a given title and release year, get all details about the movie that has that title and release year.For a given title, get all details about all movies that have that title.For a given genre, get all details about all movies in that genre.Which data store configuration will meet these requirements?
A. Create an Amazon DynamoDB table
B. Create an Amazon DynamoDB table
C. On an Amazon RDS DB instance, create a table that contains columns for title, release year, and genre
D. On an Amazon RDS DB instance, create a table where the primary key is the title and all other data is encoded into JSON format as one additional column
View answer
Correct Answer: A
Question #68
An application uses an Amazon EC2 Auto Scaling group. A developer notices that EC2 instances are taking a long time to become available during scale-out events. The UserData script is taking a long time to run.The developer must implement a solution to decrease the time that elapses before an EC2 instance becomes available. The solution must make the most recent version of the application available at all times and must apply all available security updates. The solution also must minimize the number of images that are created. The images must be validated.Which combination of steps should the developer take to meet these requirements? (Choose two.)
A. Use EC2 Image Builder to create an Amazon Machine Image (AMI)
B. Use EC2 Image Builder to create an Amazon Machine Image (AMI)
C. Set up AWS CodeDeploy to deploy the most recent version of the application at runtime
D. Set up AWS CodePipeline to deploy the most recent version of the application at runtime
E. Remove any commands that perform operating system patching from the UserData script
View answer
Correct Answer: AC
Question #69
A developer is creating a template that uses AWS CloudFormation to deploy an application. The application is serverless and uses Amazon API Gateway, Amazon DynamoDB, and AWS Lambda.Which AWS service or tool should the developer use to define serverless resources in YAML?
A. CloudFormation serverless intrinsic functions
B. AWS Elastic Beanstalk
C. AWS Serverless Application Model (AWS SAM)
D. AWS Cloud Development Kit (AWS CDK)
View answer
Correct Answer: C
Question #70
A company moved some of its secure files to a private Amazon S3 bucket that has no public access. The company wants to develop a serverless application that gives its employees the ability to log in and securely share the files with other users.Which AWS feature should the company use to share and access the files securely?
A. Amazon Cognito user pool
B. S3 presigned URLs
C. S3 bucket policy
D. Amazon Cognito identity pool
View answer
Correct Answer: B
Question #71
A company is planning to deploy an application on AWS behind an Elastic Load Balancer. The application uses an HTTP/HTTPS listener and must access the client IP addresses.Which load-balancing solution meets these requirements?
A. Use an Application Load Balancer and the X-Forwarded-For headers
B. Use a Network Load Balancer (NLB)
C. Use an Application Load Balancer
D. Use a Network Load Balancer and the X-Forwarded-For headers
View answer
Correct Answer: A
Question #72
A developer is creating a Ruby application and needs to automate the deployment, scaling, and management of an environment without requiring knowledge of the underlying infrastructure.Which service would best accomplish this task?
A. AWS CodeDeploy
B. AWS CloudFormation
C. AWS OpsWorks
D. AWS Elastic Beanstalk
View answer
Correct Answer: D
Question #73
A company has an application that uses Amazon Cognito user pools as an identity provider. The company must secure access to user records. The company has set up multi-factor authentication (MFA). The company also wants to send a login activity notification by email every time a user logs in.What is the MOST operationally efficient solution that meets this requirement?
A. Create an AWS Lambda function that uses Amazon Simple Email Service (Amazon SES) to send the email notification
B. Create an AWS Lambda function that uses Amazon Simple Email Service (Amazon SES) to send the email notification
C. Create an AWS Lambda function that uses Amazon Simple Email Service (Amazon SES) to send the email notification
D. Configure Amazon Cognito to stream all logs to Amazon Kinesis Data Firehose
View answer
Correct Answer: B
Question #74
A company wants to deploy and maintain static websites on AWS. Each website's source code is hosted in one of several version control systems, including AWS CodeCommit, Bitbucket, and GitHub.The company wants to implement phased releases by using development, staging, user acceptance testing, and production environments in the AWS Cloud. Deployments to each environment must be started by code merges on the relevant Git branch. The company wants to use HTTPS for all data exchange. The company needs a solution that does not require servers to run continuously.Which solution will meet these requirements with the LEAST operational overhead?
A. Host each website by using AWS Amplify with a serverless backend
B. Host each website in AWS Elastic Beanstalk with multiple environments
C. Host each website in different Amazon S3 buckets for each environment
D. Host each website on its own Amazon EC2 instance
View answer
Correct Answer: A
Question #75
A company runs an application on AWS. The company deployed the application on Amazon EC2 instances. The application stores data on Amazon Aurora.The application recently logged multiple application-specific custom DECRYP_ERROR errors to Amazon CloudWatch logs. The company did not detect the issue until the automated tests that run every 30 minutes failed. A developer must implement a solution that will monitor for the custom errors and alert a development team in real time when these errors occur in the production environment.Which solution will meet these requirements with the LEAST operational overhead?
A. Configure the application to create a custom metric and to push the metric to CloudWatch
B. Create an AWS Lambda function to run every 5 minutes to scan the CloudWatch logs for the keyword DECRYP_ERROR
C. Use Amazon CloudWatch Logs to create a metric filter that has a filter pattern for DECRYP_ERROR
D. Install the CloudWatch unified agent on the EC2 instance
View answer
Correct Answer: C
Question #76
A company has a multi-node Windows legacy application that runs on premises. The application uses a network shared folder as a centralized configuration repository to store configuration files in .xml format. The company is migrating the application to Amazon EC2 instances. As part of the migration to AWS, a developer must identify a solution that provides high availability for the repository.Which solution will meet this requirement MOST cost-effectively?
A. Mount an Amazon Elastic Block Store (Amazon EBS) volume onto one of the EC2 instances
B. Deploy a micro EC2 instance with an instance store volume
C. Create an Amazon S3 bucket to host the repository
D. Create an Amazon S3 bucket to host the repository
View answer
Correct Answer: C
Question #77
For a deployment using AWS Code Deploy, what is the run order of the hooks for in-place deployments?
A. BeforeInstall -> ApplicationStop -> ApplicationStart -> AfterInstall
B. ApplicationStop -> BeforeInstall -> AfterInstall -> ApplicationStart
C. BeforeInstall -> ApplicationStop -> ValidateService -> ApplicationStart
D. ApplicationStop -> BeforeInstall -> ValidateService -> ApplicationStart
View answer
Correct Answer: B
Question #78
A developer needs to perform geographic load testing of an API. The developer must deploy resources to multiple AWS Regions to support the load testing of the API.How can the developer meet these requirements without additional application code?
A. reate and deploy an AWS Lambda function in each desired Region
B. reate an AWS CloudFormation template that defines the load test resources
C. reate an AWS Systems Manager document that defines the resources
D. reate an AWS CloudFormation template that defines the load test resources
View answer
Correct Answer: B
Question #79
A developer is migrating a containerized application from an on-premises environment to the AWS Cloud. The developer is using the AWS CDK to provision a container in Amazon ECS on AWS Fargate. The container is behind an Application Load Balancer (ALB).When the developer deploys the stack, the deployment fails because the ALB fails health checks. The developer needs to resolve the failed health checks.Which solutions will meet this requirement? (Select TWO.)
A. Confirm that the capacity providers for the container have been provisioned and are properly sized
B. Confirm that the target group port matches the port mappings in the ECS task definition
C. Confirm that a hosted zone associated with the ALB matches a hosted zone that is referenced in the ECS task definition
D. Confirm that the ALB listener on the mapped port has a default action that redirects to the application's health check path endpoint
E. Confirm that the ALB listener on the mapped port has a default action that forwards to the correct target group
View answer
Correct Answer: BE
Question #80
A company runs an application on AWS. The company deployed the application on Amazon EC2 instances. The application stores data on Amazon Aurora.The application recently logged multiple application-specific custom DECRYP_ERROR errors to Amazon CloudWatch logs. The company did not detect the issue until the automated tests that run every 30 minutes failed. A developer must implement a solution that will monitor for the custom errors and alert a development team in real time when these errors occur in the production environment.Which solution will meet these requirements with the LEAST operational overhead?
A. Configure the application to create a custom metric and to push the metric to CloudWatch
B. Create an AWS Lambda function to run every 5 minutes to scan the CloudWatch logs for the keyword DECRYP_ERROR
C. Use Amazon CloudWatch Logs to create a metric filter that has a filter pattern for DECRYP_ERROR
D. Install the CloudWatch unified agent on the EC2 instance
View answer
Correct Answer: C
Question #81
A developer is designing an AWS Lambda function that creates temporary files that are less than 10 MB during invocation. The temporary files will be accessed and modified multiple times during invocation. The developer has no need to save or retrieve these files in the future.Where should the temporary files be stored?
A. the /tmp directory
B. Amazon Elastic File System (Amazon EFS)
C. Amazon Elastic Block Store (Amazon EBS)
D. Amazon S3
View answer
Correct Answer: A
Question #82
A developer is working on an application that stores highly confidential data in a database. The developer must use AWS Key Management Service (AWS KMS) with envelope encryption to protect the data.How should the developer configure the data encryption to meet these requirements?
A. Encrypt the data by using a KMS key
B. Encrypt the data by using a generated data key
C. Encrypt the data by using a generated data key
D. Encrypt the data by using a generated data key
View answer
Correct Answer: d
Question #83
A company moved some of its secure files to a private Amazon S3 bucket that has no public access. The company wants to develop a serverless application that gives its employees the ability to log in and securely share the files with other users.Which AWS feature should the company use to share and access the files securely?
A. Amazon Cognito user pool
B. S3 presigned URLs
C. S3 bucket policy
D. Amazon Cognito identity pool
View answer
Correct Answer: B
Question #84
A developer is deploying an AWS Lambda function The developer wants the ability to return to older versions of the function quickly and seamlessly.How can the developer achieve this goal with the LEAST operational overhead?
A. Use AWS OpsWorks to perform blue/green deployments
B. Use a function alias with different versions
C. Maintain deployment packages for older versions in Amazon S3
D. Use AWS CodePipeline for deployments and rollbacks
View answer
Correct Answer: B
Question #85
A company is offering APIs as a service over the internet to provide unauthenticated read access to statistical information that is updated daily. The company uses Amazon API Gateway and AWS Lambda to develop the APIs. The service has become popular, and the company wants to enhance the responsiveness of the APIs.Which action can help the company achieve this goal?
A. Enable API caching in API Gateway
B. Configure API Gateway to use an interface VPC endpoint
C. Enable cross-origin resource sharing (CORS) for the APIs
D. Configure usage plans and API keys in API Gateway
View answer
Correct Answer: A
Question #86
A company is using an AWS Lambda function to process records from an Amazon Kinesis data stream. The company recently observed slow processing of the records. A developer notices that the iterator age metric for the function is increasing and that the Lambda run duration is constantly above normal.Which actions should the developer take to increase the processing speed? (Choose two.)
A. Increase the number of shards of the Kinesis data stream
B. Decrease the timeout of the Lambda function
C. Increase the memory that is allocated to the Lambda function
D. Decrease the number of shards of the Kinesis data stream
E. Increase the timeout of the Lambda function
View answer
Correct Answer: AC
Question #87
A developer is creating an AWS CloudFormation template to deploy Amazon EC2 instances across multiple AWS accounts. The developer must choose the EC2 instances from a list of approved instance types.How can the developer incorporate the list of approved instance types in the CloudFormation template?
A. reate a separate CloudFormation template for each EC2 instance type in the list
B. n the Resources section of the CloudFormation template, create resources for each EC2 instance type in the list
C. n the CloudFormation template, create a separate parameter for each EC2 instance type in the list
D. n the CloudFormation template, create a parameter with the list of EC2 instance types as AllowedValues
View answer
Correct Answer: D
Question #88
A company has a multi-node Windows legacy application that runs on premises. The application uses a network shared folder as a centralized configuration repository to store configuration files in .xml format. The company is migrating the application to Amazon EC2 instances. As part of the migration to AWS, a developer must identify a solution that provides high availability for the repository.Which solution will meet this requirement MOST cost-effectively?
A. Mount an Amazon Elastic Block Store (Amazon EBS) volume onto one of the EC2 instances
B. Deploy a micro EC2 instance with an instance store volume
C. Create an Amazon S3 bucket to host the repository
D. Create an Amazon S3 bucket to host the repository
View answer
Correct Answer: C
Question #89
A developer is designing an AWS Lambda function that creates temporary files that are less than 10 MB during invocation. The temporary files will be accessed and modified multiple times during invocation. The developer has no need to save or retrieve these files in the future.Where should the temporary files be stored?
A. the /tmp directory
B. Amazon Elastic File System (Amazon EFS)
C. Amazon Elastic Block Store (Amazon EBS)
D. Amazon S3
View answer
Correct Answer: A
Question #90
A company caches session information for a web application in an Amazon DynamoDB table. The company wants an automated way to delete old items from the table.What is the simplest way to do this?
A. Write a script that deletes old records; schedule the script as a cron job on an Amazon EC2 instance
B. Add an attribute with the expiration time; enable the Time To Live feature based on that attribute
C. Each day, create a new table to hold session data; delete the previous day's table
D. Add an attribute with the expiration time; name the attribute ItemExpiration
View answer
Correct Answer: B
Question #91
A developer owns and supports an application that has database credentials that are stored in environment variables for AWS Lambda functions. The developer needs an alternate storage method for the credentials instead of environment variables in plaintext. Which solution will handle the credentials MOST securely?
A. tore the database credentials as a secret in AWS Secrets Manager
B. tore the database credentials as a string type parameter in the AWS Systems Manager Parameter Store
C. se base64 encoding for the database credentials
D. se AWS CloudFormation to deploy the application
View answer
Correct Answer: A
Question #92
A developer wants to store information about movies. Each movie has a title, release year, and genre. The movie information also can include additional properties about the cast and production crew. This additional information is inconsistent across movies. For example, one movie might have an assistant director, and another movie might have an animal trainer.The developer needs to implement a solution to support the following use cases:For a given title and release year, get all details about the movie that has that title and release year.For a given title, get all details about all movies that have that title.For a given genre, get all details about all movies in that genre.Which data store configuration will meet these requirements?
A. Create an Amazon DynamoDB table
B. Create an Amazon DynamoDB table
C. On an Amazon RDS DB instance, create a table that contains columns for title, release year, and genre
D. On an Amazon RDS DB instance, create a table where the primary key is the title and all other data is encoded into JSON format as one additional column
View answer
Correct Answer: A
Question #93
A developer has observed an increase in bugs in the AWS Lambda functions that a development team has deployed in its Node is application. To minimize these bugs, the developer wants to impendent automated testing of Lambda functions in an environment that Closely simulates the Lambda environment.The developer needs to give other developers the ability to run the tests locally. The developer also needs to integrate the tests into the team's continuous integration and continuous delivery (Ct/CO) pipeline before the AWS Cloud Development Kit (AWS COK) deployment.Which solution will meet these requirements?
A. nstall the AWS Serverless Application Model (AWS SAW) CLI tool Use the Sam local generate-event command to generate sample events for me automated tests
B. reate sample events based on the Lambda documentation
C. nstall a unit testing framework that reproduces the Lambda execution environment
D. reate sample events based on the Lambda documentation
View answer
Correct Answer: A
Question #94
A developer is testing a new file storage application that uses an Amazon CloudFront distribution to serve content from an Amazon S3 bucket. The distribution accesses the S3 bucket by using an origin access identity (OAI). The S3 bucket's permissions explicitly deny access to all other users.The application prompts users to authenticate on a login page and then uses signed cookies to allow users to access their personal storage directories. The developer has configured the distribution to use its default cache behavior with restricted viewer access and has set the origin to point to the S3 bucket. However, when the developer tries to navigate to the login page, the developer receives a 403 Forbidden error.The developer needs to implement a solution to allow unauthenticated access to the login page. The solution also must keep all private content secure.Which solution will meet these requirements?
A. Add a second cache behavior to the distribution with the same origin as the default cache behavior
B. Add a second cache behavior to the distribution with the same origin as the default cache behavior
C. Add a second origin as a failover origin to the default cache behavior
D. Add a bucket policy to the S3 bucket to allow read access
View answer
Correct Answer: A
Question #95
A developer is deploying a new application to Amazon Elastic Container Service (Amazon ECS). The developer needs to securely store and retrieve different types of variables. These variables include authentication information for a remote API, the URL for the API, and credentials. The authentication information and API URL must be available to all current and future deployed versions of the application across development, testing, and production environments.How should the developer retrieve the variables with the FEWEST application changes?
A. Update the application to retrieve the variables from AWS Systems Manager Parameter Store
B. Update the application to retrieve the variables from AWS Key Management Service (AWS KMS)
C. Update the application to retrieve the variables from an encrypted file that is stored with the application
D. Update the application to retrieve the variables from each of the deployed environments
View answer
Correct Answer: A
Question #96
A company has an Amazon S3 bucket that contains sensitive data. The data must be encrypted in transit and at rest. The company encrypts the data in the S3 bucket by using an AWS Key Management Service (AWS KMS) key. A developer needs to grant several other AWS accounts the permission to use the S3 GetObject operation to retrieve the data from the S3 bucket.How can the developer enforce that all requests to retrieve the data provide encryption in transit?
A. efine a resource-based policy on the S3 bucket to deny access when a request meets the condition “aws:SecureTransport”: “false”
B. efine a resource-based policy on the S3 bucket to allow access when a request meets the condition “aws:SecureTransport”: “false”
C. efine a role-based policy on the other accounts' roles to deny access when a request meets the condition of “aws:SecureTransport”: “false”
D. efine a resource-based policy on the KMS key to deny access when a request meets the condition of “aws:SecureTransport”: “false”
View answer
Correct Answer: A
Question #97
A developer has created an AWS Lambda function that is written in Python. The Lambda function reads data from objects in Amazon S3 and writes data to an Amazon DynamoDB table. The function is successfully invoked from an S3 event notification when an object is created. However, the function fails when it attempts to write to the DynamoDB table.What is the MOST likely cause of this issue?
A. he Lambda function's concurrency limit has been exceeded
B. ynamoDB table requires a global secondary index (GSI) to support writes
C. he Lambda function does not have IAM permissions to write to DynamoDB
D. he DynamoDB table is not running in the same Availability Zone as the Lambda function
View answer
Correct Answer: C
Question #98
A developer has an application that makes batch requests directly to Amazon DynamoDB by using the BatchGetItem low-level API operation. The responses frequently return values in the UnprocessedKeys element.Which actions should the developer take to increase the resiliency of the application when the batch response includes values in UnprocessedKeys? (Choose two.)
A. Retry the batch operation immediately
B. Retry the batch operation with exponential backoff and randomized delay
C. Update the application to use an AWS software development kit (AWS SDK) to make the requests
D. Increase the provisioned read capacity of the DynamoDB tables that the operation accesses
E. Increase the provisioned write capacity of the DynamoDB tables that the operation accesses
View answer
Correct Answer: BD
Question #99
A company wants to share information with a third party. The third party has an HTTP API endpoint that the company can use to share the information. The company has the required API key to access the HTTP API.The company needs a way to manage the API key by using code. The integration of the API key with the application code cannot affect application performance.Which solution will meet these requirements MOST securely?
A. Store the API credentials in AWS Secrets Manager
B. Store the API credentials in a local code variable
C. Store the API credentials as an object in a private Amazon S3 bucket
D. Store the API credentials in an Amazon DynamoDB table
View answer
Correct Answer: A
Question #100
A developer is using an AWS Lambda function to generate avatars for profile pictures that are uploaded to an Amazon S3 bucket. The Lambda function is automatically invoked for profile pictures that are saved under the /original/ S3 prefix. The developer notices that some pictures cause the Lambda function to time out. The developer wants to implement a fallback mechanism by using another Lambda function that resizes the profile picture.Which solution will meet these requirements with the LEAST development effort?
A. Set the image resize Lambda function as a destination of the avatar generator Lambda function for the events that fail processing
B. Create an Amazon Simple Queue Service (Amazon SQS) queue
C. Create an AWS Step Functions state machine that invokes the avatar generator Lambda function and uses the image resize Lambda function as a fallback
D. Create an Amazon Simple Notification Service (Amazon SNS) topic
View answer
Correct Answer: A

View The Updated AWS Exam Questions

SPOTO Provides 100% Real AWS Exam Questions for You to Pass Your AWS Exam!

Get AWS Practice Test

View Answers after Submission

Please submit your email and WhatsApp to get the answers of questions.

Note: Please make sure your email ID and Whatsapp are valid so that you can get the correct exam results.

Email:
Whatsapp/phone number:
Contact Us


Copyright © 2024. Designer by SPOTO Official Website. All Rights Reserved.