Question 1

An application uses Lambda functions to extract metadata from files uploaded to an S3 bucket; the metadata is stored in Amazon DynamoDB. The application starts behaving unexpectedly, and the Developer wants to examine the logs of the Lambda function code for errors. Based on this system configuration, where would the Developer find the logs?

Accepted Answer

A)  Amazon S3 
B)  AWS CloudTrail 
C)  Amazon CloudWatch 
D)  Amazon DynamoDB

Question 2

To include objects defined by the AWS Serverless Application Model (SAM) in an AWS CloudFormation template, in addition to Resources, what section MUST be included in the document root?

Accepted Answer

A)  Conditions 
B)  Globals 
C)  Transform 
D)  Properties

Question 3

A Developer is creating a web application that requires authentication, but also needs to support guest access to provide users limited access without having to authenticate. What service can provide support for the application to allow guest access?

Accepted Answer

A)  IAM temporary credentials using AWS STS. 
B)  Amazon Directory Service 
C)  Amazon Cognito with unauthenticated access enabled 
D)  IAM with SAML integration

Question 4

After installing the AWS CLI, a Developer tries to run the command aws configure but receives the following error: Error: aws: command not found What is the most likely cause of this error?

Accepted Answer

A)  The aws executable is not in the PATH environment variable. The executable is not in the PATH environment variable. 
B)  Access to the aws executable has been denied to the installer. Access to the executable has been denied to the installer. 
C)  Incorrect AWS credentials were provided. 
D)  The aws script does not have an executable file mode. script does not have an executable file mode.

Question 5

A Developer needs to use AWS X-Ray to monitor an application that is deployed on EC2 instances. What steps have to be executed to perform the monitoring?

Accepted Answer

A)  Deploy the X-Ray SDK with the application and use X-Ray annotation. 
B)  Install the X-Ray daemon and instrument the application code. 
C)  Install the X-Ray daemon and configure it to forward data to Amazon CloudWatch Events. 
D)  Deploy the X-Ray SDK with the application and instrument the application code.

Question 6

How can you secure data at rest on an EBS volume?

Accepted Answer

A)  Attach the volume to an instance using EC2's SSL interface. 
B)  Write the data randomly instead of sequentially. 
C)  Use an encrypted file system on top of the BBS volume. 
D)  Encrypt the volume using the S3 server-side encryption service. 
E)  Create an IAM policy that restricts read and write access to the volume.

Question 7

An application ingests a large number of small messages and stores them in a database. The application uses AWS Lambda. A Development team is making changes to the application's processing logic. In testing, it is taking more than 15 minutes to process each message. The team is concerned the current backend may time out. Which changes should be made to the backend system to ensure each message is processed in the MOST scalable way?

Accepted Answer

A)  Add the messages to an Amazon SQS queue. Set up and Amazon EC2 instance to poll the queue and process messages as they arrive. 
B)  Add the messages to an Amazon SQS queue. Set up Amazon EC2 instances in an Auto Scaling group to poll the queue and process the messages as they arrive. 
C)  Create a support ticket to increase the Lambda timeout to 60 minutes to allow for increased processing time. 
D)  Change the application to directly insert the body of the message into an Amazon RDS database.

Question 8

The upload of a 15 GB object to Amazon S3 fails. The error message reads: "Your proposed upload exceeds the maximum allowed object size." What technique will allow the Developer to upload this object?

Accepted Answer

A)  Upload the object using the multi-part upload API. 
B)  Upload the object over an AWS Direct Connect connection. 
C)  Contact AWS Support to increase the object size limit. 
D)  Upload the object to another AWS region.

Question 9

A company has three different environments: Development, QA, and Production. The company wants to deploy its code first in the Development environment, then QA, and then Production. Which AWS service can be used to meet this requirement?

Accepted Answer

A)  Use AWS CodeCommit to create multiple repositories to deploy the application. 
B)  Use AWS CodeBuild to create, configure, and deploy multiple build application projects. 
C)  Use AWS Data Pipeline to create multiple data pipeline provisions to deploy the application. 
D)  Use AWS CodeDeploy to create multiple deployment groups.

Question 10

A static website is hosted in an Amazon S3 bucket. Several HTML pages on the site use JavaScript to download images from another Amazon S3 bucket. These images are not displayed when users browse the site. What is the possible cause for the issue?

Accepted Answer

A)  The referenced Amazon S3 bucket is in another region. 
B)  The images must be stored in the same Amazon S3 bucket. 
C)  Port 80 must be opened on the security group in which the Amazon S3 bucket is located. 
D)  Cross Origin Resource Sharing must be enabled on the Amazon S3 bucket.

Question 11

An application running on Amazon EC2 opens connections to an Amazon RDS SQL Server database. The developer does not want to store the user name and password for the database in the code. The developer would also like to automatically rotate the credentials. What is the MOST secure way to store and access the database credentials?

Accepted Answer

A)  Create an IAM role that has permissions to access the database. Attach the role to the EC2 instance. 
B)  Use AWS Secrets Manager to store the credentials. Retrieve the credentials from Secrets Manager as needed. 
C)  Store the credentials in an encrypted text file in an Amazon S3 bucket. Configure the EC2 instance's user data to download the credentials from Amazon S3 as the instance boots. 
D)  Store the user name and password credentials directly in the source code. No further action is needed because the source code is stored in a private repository.

Question 12

A developer has written a multi-threaded application that is running on a fleet of Amazon EC2 instances. The operations team has requested a graphical method to monitor the number of running threads over time. What is the MOST efficient way to fulfill this request?

Accepted Answer

A)  Periodically send the thread count to AWS X-Ray segments, then generate a service graph on demand. 
B)  Create a custom Amazon CloudWatch metric and periodically perform a PutMetricData call with the current thread count. 
C)  Periodically log thread count data to Amazon S3. Use Amazon Kinesis to process the data into a graph. 
D)  Periodically write the current thread count to a table using Amazon DynamoDB and use Amazon CloudFront to create a graph.

Question 13

A developer needs to manage AWS infrastructure as code and must be able to deploy multiple identical copies of the infrastructure, stage changes, and revert to previous versions. Which approach addresses these requirements?

Accepted Answer

A)  Use cost allocation reports and AWS OpsWorks to deploy and manage the infrastructure. 
B)  Use Amazon CloudWatch metrics and alerts along with resource tagging to deploy and manage the infrastructure. 
C)  Use AWS Elastic Beanstalk and AWS CodeCommit to deploy and manage the infrastructure. 
D)  Use AWS CloudFormation and AWS CodeCommit to deploy and manage the infrastructure.

Question 14

A Developer has created an S3 bucket s3://mycoolapp and has enabled server across logging that points to the folder s3://mycoolapp/logs. The Developer moved 100 KB of Cascading Style Sheets (CSS) documents to the folder s3://mycoolapp/css , and then stopped work. When the developer came back a few days later, the bucket was 50 GB. What is the MOST likely cause of this situation?

Accepted Answer

A)  The CSS files were not compressed and S3 versioning was enabled. 
B)  S3 replication was enabled on the bucket. 
C)  Logging into the same bucket caused exponential log growth. 
D)  An S3 lifecycle policy has moved the entire CSS file to S3 Infrequent Access.

Question 15

An application running on EC2 instances is storing data in an S3 bucket. Security policy mandates that all data must be encrypted in transit. How can the Developer ensure that all traffic to the S3 bucket is encrypted?

Accepted Answer

A)  Install certificates on the EC2 instances. 
B)  Create a bucket policy that allows traffic where SecureTransport is true. 
C)  Create an HTTPS redirect on the EC2 instances. 
D)  Create a bucket policy that denies traffic where SecureTransport is false.

Question 16

A Developer is writing a serverless application that requires that an AWS Lambda function be invoked every 10 minutes. What is an automated and serverless way to trigger the function?

Accepted Answer

A)  Deploy an Amazon EC2 instance based on Linux, and edit its /etc/crontab file by adding a command to periodically invoke the Lambda function. 
B)  Configure an environment variable named PERIOD for the Lambda function. Set the value to 600. 
C)  Create an Amazon CloudWatch Events rule that triggers on a regular schedule to invoke the Lambda function. 
D)  Create an Amazon SNS topic that has a subscription to the Lambda function with a 600-second timer.

Question 17

A company is using Amazon API Gateway to manage access to a set of microservices implemented as AWS Lambda functions. Following a bug report, the company makes a minor breaking change to one of the APIs. In order to avoid impacting existing clients when the new API is deployed, the company wants to allow clients six months to migrate from v1 to v2. Which approach should the Developer use to handle this change?

Accepted Answer

A)  Update the underlying Lambda function and provide clients with the new Lambda invocation URL. 
B)  Use API Gateway to automatically propagate the change to clients, specifying 180 days in the phased deployment parameter. 
C)  Use API Gateway to deploy a new stage named v2 to the API and provide users with its URL. 
D)  Update the underlying Lambda function, create an Amazon CloudFront distribution with the updated Lambda function as its origin.

Question 18

A developer is creating a serverless web application and maintains different branches of code. The developer wants to avoid updating the Amazon API Gateway target endpoint each time a new code push is performed. What solution would allow the developer to perform a code push efficiently, without the need to update the API Gateway?

Accepted Answer

A)  Associate different AWS Lambda functions to an API Gateway target endpoint. 
B)  Create different stages in API Gateway, then associate API Gateway with AWS Lambda. 
C)  Create aliases and versions in AWS Lambda. 
D)  Tag the AWS Lambda functions with different names.

Question 19

A Developer wants to find a list of items in a global secondary index from an Amazon DynamoDB table. Which DynamoDB API call can the Developer use in order to consume the LEAST number of read capacity units?

Accepted Answer

A)  Scan operation using eventually-consistent reads 
B)  Query operation using strongly-consistent reads 
C)  Query operation using eventually-consistent reads 
D)  Scan operation using strongly-consistent reads

Question 20

A company is adding stored value (or gift card) capability to its highly popular casual gaming website. Users need to be able to trade this value for other users' items on the platform. This would require both users' records be updated as a single transaction, or both users' records to be completely rolled back. Which AWS database options can provide the transactional capability required for this new feature? (Choose two.)

Accepted Answer

A)  Amazon DynamoDB with operations made with the ConsistentRead parameter set to true 
B)  Amazon ElastiCache for Memcached with operations made within a transaction block 
C)  Amazon Aurora MySQL with operations made within a transaction block 
D)  Amazon DynamoDB with reads and writes made using Transact* operations 
E)  Amazon Redshift with operations made within a transaction block.

Exam 6: AWS Certified Developer Associate (DVA-C01)