AWS Developer Associate (DVA-C01) Practice Exam #2

The AWS account of the ExamsDigest has an ID of 318855545211. The sign-in page URL has the following format https://318855545211.signin.aws.amazon.com/console. We want the URL for our sign-in page to contain our company name (ExamsDigest) instead of the AWS account ID.

Which of the following AWS CLI command will you use to create an alias?

An Online Travel Agency (OTA) platform, which is deployed using Elastic Beanstalk, has a batch of new features being deployed at least twice a week. Each time a new feature is deployed the platform experiences outages or intermittently switches back between the old and the new version. Upon checking, this was caused by partially completed deployments which occurs when a rolling deployment fails after some batches have already completed.

Which of the following deployment methods will you use to prevent these issues from happening on the platform?

Your application is hosted in Elastic Beanstalk which is currently running in Node.js 8 (deprecated) runtime environment. Now you are working on a new version of the application and you need to upgrade the platform to Node.js 10 to accommodate the changes.

Which of the following action will you take to upgrade the platform?

Which of the following is not a prerequisite action for attaching an available EBS volume to one or more of your instances that is in the same Availability Zone as the volume?

Which of the following are considered AWS CloudFormation best practices for creating templates? (Choose all that apply)

AWS CloudFormation Designer (Designer) is a graphic tool for creating, viewing, and modifying AWS CloudFormation templates.

Which of the following enables you to update a collection of AWS resources (stacks) across multiple accounts and regions with a single operation?

You can configure a Lambda function to connect to private subnets in a virtual private cloud (VPC) in your AWS account.

What happens when you connect a function to a VPC?

Which feature of Lambda should you use in order to use libraries in your function without needing to include them in your deployment package?

Which of the following is a deployment service that automates application deployments to Amazon EC2 instances, on-premises instances, serverless Lambda functions, or Amazon ECS services?

What is the most suitable solution if you encounter problems while detaching a volume through the Amazon EC2 console?

Imagine that you have customers from all over the world that upload files to a centralized bucket. You need to provide fast, easy, and secure transfer of the files over long distances between your clients and an S3 bucket.

Which of the following tool should you use to meet the requirement?

Your online educational app is uploading a huge amount of files (courses, practice exam tests, assignments) in the S3 bucket. The size of the objects is over 150MB. The time required to upload the objects to the bucket in a single operation is not acceptable.

Which of the following tools should you use to improve the throughput and optimize the upload time?

You are building a serverless application using AWS Lambda to send and receive messages to and from individual users or groups of users in a chat room.

Which AWS service should you use in conjunction with the AWS Lambda to build the app?

You are developing an application that stores data to an Amazon DynamoDB table. You have enabled DynamoDB Streams as the application automatically sends notifications to the mobile devices of all friends in a group as soon as one friend uploads a new picture.

Assuming your AWS components are set up in Europe (Frankfurt). Which of the following endpoints you will use to access DynamoDB Streams?

You have created an Amazon Simple Workflow Service (Amazon SWF) workflow for your e-commerce app. Amazon SWF coordinates and manages the e-commerce order-processing workflow, from verifying the order to saving the order details if the order is shipped. You need to test a new implementation of a workflow while keeping the existing workflow in production.

Which of the following SWF options will you use to test the new implementation of a workflow while keeping the current in production?

You are designing the cloud architecture of an application that will be used by a company that has a hundred employees. The company needs to ensure that the architecture is elastic enough to adequately match the supply of resources to the demand while maintaining its cost-effectiveness.

Which of the following services can make the architecture elastic enough to meet the requirement? (Choose all that apply.)

In a NoSQL database such as DynamoDB, data can be queried flexibly, but queries are relatively expensive and don’t scale well in high-traffic situations.

You want to declare stage variables for two deployment stages of a sample API by using the Amazon API Gateway console. You have already signed in to the API Gateway console at https://console.aws.amazon.com/apigateway.

Which of the following is the next step in order to declare stage variables?

You are working for an eCommerce multi-vendor marketplace startup. You have been tasked to create the business process workflow associate with an order fulfillment system and track ordering system.

What AWS service can assist with coordinating tasks across distributed application components?

You are working on a bookkeeping accountant application for a startup. Your project manager asked you to have the ability to automatically transfer obsolete data from their S3 bucket to a low-cost storage system in AWS.

Which of the following solution will you use to meet the requirement?

You have been tasked to find a solution to monitor your endpoints and APIs using scripted canaries (configurable scripts that run on a schedule) that run 24 hours per day, once per minute.

Which of the following services should you use to complete the task?

You have just finalized the process of hosting your WordPress blog on a new Amazon EC2 Linux instance. After trying to connect to your instance you get the following error message:

Network error: Connection timed out or Error connecting

Which of the following actions should you take in order to troubleshoot the issue? (Choose all that apply.)

You are developing a new app using Amazon CloudFront from the early stage to speed up the distribution of your static and dynamic web content. Now you have been tasked to use your own domain name to your distribution, such as www.examsdigest.com, instead of the cloudfront.net domain name by adding an alternate domain name (CNAME). When you try to add an alternate domain name (CNAME) to your distribution, CloudFront returns an InvalidViewerCertificate error.

Which of the following options might be the root cause of this issue?

You have been noticed that each time CloudFront requests an object from your origin, the origin returns an HTTP 504 status code.

What does the HTTP 504 status code (Gateway Timeout) indicate?

A company that has a MySQL on Amazon Relational Database Service they discover common attack patterns, such as SQL injection and cross-site scripting. You have been hired to implement a solution to improve web traffic visibility by monitoring the entire inbound traffic and improve the security against web attacks.

Which of the following services should you implement to meet the requirements?

Each time you are trying to create a new instance your get the following error.

InstanceLimitExceeded

What’s the cause and the solution of this error?

You are using Amazon CloudWatch to monitor metrics for Amazon S3 as it helps you understand and improve the performance of your application that uses Amazon S3.

Which of the following is NOT a way that you can use CloudWatch with Amazon S3.

You are working with AWS X-Ray to collect data about requests that your application serves, and gain insights into that data to identify issues and opportunities for optimization. Your coworker named Bruce tries to use the console to perform an action in X-Ray but he gets the following error:

User: arn:aws:iam::123456789012:user/bruce is not authorized to perform: iam:PassRole

Which of the following actions will solve the issue?

An Auto Scaling Group is unable to respond quickly enough to load changes, resulting in lost messages from another application tier. The messages are typically around 78KB in size.

Which of the following solutions will you implement to prevent messages from being lost?

You are working as a site reliability engineer (SRE) for a large US-based IT company. You have been tasked to find an automated way to monitor and resolve issues with their on-demand EC2 instances.

Which of the following option can be used to automatically monitor the EC2 instances and notify you for any possible incident?

What can you accomplish if you use an ElastiCache for Memcached cluster to store the user session state of the application?

Suppose that you have a large customer base spread across three geographic areas—the US East Coast, the US West Coast, and Western Europe. Customers can update their profile information using your application. To satisfy this use case, you need to create three identical DynamoDB tables named CustomerProfiles, in three different AWS Regions where the customers are located.

What should you do to replicate data changes among these tables without writing your own code?

For compliance purposes, you have been tasked to make sure that all of the new changes made to the items in DynamoDB are recorded and stored on another DynamoDB table in another region.

What should you do in order to complete the task?

You are working with AWS Lambda functions and is considered as a best practice to analyze how long your function runs so that you can better determine any problems with a dependency service that may increase the concurrency of the function beyond what you expect.

What function configuration should you make to determine an optimum timeout value?

After you’ve made your API available to be called, you realize that it needs to be optimized to improve responsiveness. After making your research you end up following the payload compression strategy.

Which of the following AWS CLI command will you use to enable compression on your existing API?

You have been tasked to implement the following scenario. Each time an item in the table is modified and a new record appears in the table’s stream then copy each stream record to persistent storage, such as Amazon Simple Storage Service (Amazon S3), to create a permanent audit.

Which of the following action should you take to meet the requirement?

You want to configure CloudFront to use HTTPS to communicate with your origin Amazon S3 for encrypted connection between CloudFront and Amazon S3.

What action should you take to meet the requirement?

You are working on an app that starts gaining more and more traction. As a result, the user base is increasing day after day at an exponential rate. The more users the app acquired, the more delay the users experience while retrieving data from the database (DynamoDB). Now you are responsible to improve the app’s performance by reducing the database response times down to microseconds.

Which of the following service should you use to meet the requirement?

Your new application is hosted in an Auto Scaling group of EC2 instances. To improve the monitoring process, you have to configure it to keep the average aggregate CPU utilization of your Auto Scaling group at 50 percent. This should be done by specifying the scaling metrics and threshold values for the CloudWatch alarms that trigger the scaling process.

Which of the following scaling policy type you should use?

You are building an application that will be hosted in ECS which needs to be configured to run its tasks and services using the Fargate launch type. The application will have four different tasks where each task will access various AWS resources that are different from the other tasks.

Which of the following solutions can provide your application in ECS access to the required AWS resources?

By default, Amazon S3 encrypts your data at the object level as it writes it to disks in its data centers and decrypts it when someone accesses it as long as the request is authenticated. Now, you need to add an extra layer of audit trail that shows when your Customer Master Keys (CMK) was used and by whom.

Which option will you choose to manage the encryption keys?

For compliance purposes, you need to assess how well your resource configurations comply with internal practices, industry guidelines, and regulations.

Which of the following tools will you use to meet the requirement?

Your company is using AWS Organizations to manage its multiple AWS accounts which are being used by its IT, accounting, and HR departments. To avoid security issues, it is of utmost importance to test the impact of service control policies (SCPs) on your IAM policies and resource policies before applying them.

Which of the following AWS services can you use to test and troubleshoot IAM and resource-based policies?

Imagine that your organization has multiple AWS accounts to isolate a development environment from a production environment. Users in the development account might occasionally need to access resources in the production account.

What is the most efficient way to promote an update from the development environment to the production environment?

In which of the following scenarios you DON’T need to contact your administrator to help you diagnose and fix common issues that you might encounter when working with Systems Manager and IAM?

Which of the following lifecycle event hooks runs last in an Amazon ECS deployment?

You are preparing the CodeDeploy application specification (AppSpec) that uses AWS Lambda compute platform. In the deployment, you need to configure CodeDeploy to run a task after the traffic is shifted to the deployed Lambda function version.

Which deployment lifecycle will you configure in this scenario?

Your organization already uses an identity provider software package such as Microsoft Active Directory that supports SAML 2.0 (Security Assertion Markup Language 2.0).

Which of the following solution will you implement if the users that have identities in Microsoft Active Directory need to work with AWS resources?

You are working on a project that uses Microsft SQL Server 2019 Standard Edition for a database. To add an extra layer of security you need to configure the DB to encrypts data before it is written to storage, and automatically decrypts data when the data is read from storage.

Which of the following actions will you follow to achieve this?