DVA-C02: AWS Certified Developer Associate Practice Questions Second Edition
3/5
()
About this ebook
IP Specialists' Practice Questions are dedicatedly designed from a certification exam perspective. The collection of these questions from our Study Guides is prepared to keep the exam blueprint in mind, covering not only important but necessary topics. It is an ideal document to practice and revise your certification.
IP Specialist
Nouman Ahmed KhanAWS/Azure/GCP-Architect, CCDE, CCIEx5 (R&S, SP, Security, DC, Wireless), CISSP, CISA, CISM, CRISC, ISO27K-LANouman Ahmed Khan is a Solution Architect working with a global telecommunication provider. He works with enterprises, mega-projects, and service providers to help them select the best-fit technology solutions. He also works as a consultant to understand customer business processes and helps select an appropriate technology strategy to support business goals. He has more than eighteen years of experience working with global clients. He is an author and contributor of multiple technology books including AWS, Azure, GCP, Cisco, and CompTIA.
Read more from Ip Specialist
Microsoft Azure Fundamentals: AZ-900- +250 Practices Questions - Second Edition Rating: 5 out of 5 stars5/5CompTIA Security+ Practice Questions Rating: 2 out of 5 stars2/5Microsoft Azure Fundamentals Exam Cram: Second Edition Rating: 5 out of 5 stars5/5CEH: Certified Ethical Hacker v11 : Exam Cram Notes - First Edition - 2021 Rating: 0 out of 5 stars0 ratingsDP-300: Administering Relational Databases on Microsoft Azure Practice Questions Rating: 5 out of 5 stars5/5MS-900: Microsoft 365 Fundamentals Practice Questions First Edition Rating: 5 out of 5 stars5/5Kubernetes Administrator CKA Practice Questions Rating: 0 out of 5 stars0 ratingsAZ-900: Microsoft Azure Fundamentals Practice Questions Third Edition Rating: 0 out of 5 stars0 ratingsAi-102: Designing and Implementing a Microsoft Azure Ai Solution Practice Questions Rating: 0 out of 5 stars0 ratingsAI-900: Microsoft Azure AI Fundamentals Practice Questions Rating: 0 out of 5 stars0 ratingsOracle Cloud Infrastructure (OCI) Architect Professional Practice Questions Rating: 0 out of 5 stars0 ratingsAZ-400: Designing and Implementing Microsoft DevOps Solutions Practice Questions Rating: 0 out of 5 stars0 ratingsSC-900: Microsoft Security, Compliance, and Identity Fundamentals Practice Questions Rating: 0 out of 5 stars0 ratingsGoogle Certified Professional Cloud Network Engineer: Practice Questions Rating: 0 out of 5 stars0 ratingsTerraform Associate Practice Questions Rating: 0 out of 5 stars0 ratingsOracle Cloud Data Management Foundations Certified Associate Rating: 0 out of 5 stars0 ratingsCompTIA Network+ Practice Questions Rating: 0 out of 5 stars0 ratingsGoogle Certified Professional Cloud Security Engineer Practice Questions Rating: 0 out of 5 stars0 ratings
Related to DVA-C02
Related ebooks
Kubernetes Administrator CKA Practice Questions Rating: 0 out of 5 stars0 ratingsAZ-400: Designing and Implementing Microsoft DevOps Solutions Practice Questions Rating: 0 out of 5 stars0 ratingsOracle Cloud Infrastructure (OCI) Architect Professional Practice Questions Rating: 0 out of 5 stars0 ratingsTerraform Associate Practice Questions Rating: 0 out of 5 stars0 ratingsGoogle Certified Professional Cloud Network Engineer: Practice Questions Rating: 0 out of 5 stars0 ratingsAWS Certified Cloud Practitioner: Study Guide with Practice Questions and Labs Rating: 5 out of 5 stars5/5Ai-102: Designing and Implementing a Microsoft Azure Ai Solution Practice Questions Rating: 0 out of 5 stars0 ratingsDeveloping Cloud Native Applications in Azure using .NET Core: A Practitioner’s Guide to Design, Develop and Deploy Apps Rating: 0 out of 5 stars0 ratingsSC-900: Microsoft Security, Compliance, and Identity Fundamentals Practice Questions Rating: 0 out of 5 stars0 ratingsAWS Certified Solutions Architect Official Study Guide: Associate Exam Rating: 4 out of 5 stars4/5Infrastructure as Code, Patterns and Practices: With examples in Python and Terraform Rating: 0 out of 5 stars0 ratingsServerless Architectures on AWS Complete Self-Assessment Guide Rating: 0 out of 5 stars0 ratingsAWS Certified Solutions Architect Study Guide with 900 Practice Test Questions: Associate (SAA-C03) Exam Rating: 0 out of 5 stars0 ratingsAWS Certified Cloud Practitioner - Practice Paper 1: AWS Certified Cloud Practitioner, #1 Rating: 5 out of 5 stars5/5Amazon Web Services (AWS) Interview Questions and Answers Rating: 5 out of 5 stars5/5AWS Certified SysOps Administrator Official Study Guide: Associate Exam Rating: 0 out of 5 stars0 ratingsAWS Certified Developer Official Study Guide, Associate Exam: Associate (DVA-C01) Exam Rating: 0 out of 5 stars0 ratingsAWS Solution Architect Certification Exam Practice Paper 2019 Rating: 4 out of 5 stars4/5AWS Certified Security Study Guide: Specialty (SCS-C01) Exam Rating: 0 out of 5 stars0 ratingsInfrastructure Automation with Terraform: Automate and Orchestrate your Infrastructure with Terraform Across AWS and Microsoft Azure Rating: 0 out of 5 stars0 ratingsSoftware Architecture Complete Self-Assessment Guide Rating: 0 out of 5 stars0 ratingsAzure Infrastructure as Code: With ARM templates and Bicep Rating: 0 out of 5 stars0 ratings
Certification Guides For You
CompTIA Security+ Get Certified Get Ahead: SY0-701 Study Guide Rating: 5 out of 5 stars5/5CompTIA A+ Complete Review Guide: Core 1 Exam 220-1101 and Core 2 Exam 220-1102 Rating: 5 out of 5 stars5/5MC Microsoft Certified Azure Data Fundamentals Study Guide: Exam DP-900 Rating: 0 out of 5 stars0 ratingsUnderstanding Cisco Networking Technologies, Volume 1: Exam 200-301 Rating: 0 out of 5 stars0 ratingsMicrosoft Office 365 for Business Rating: 4 out of 5 stars4/5PHR and SPHR Professional in Human Resources Certification Complete Study Guide: 2018 Exams Rating: 0 out of 5 stars0 ratingsCCNA Certification Study Guide, Volume 2: Exam 200-301 Rating: 0 out of 5 stars0 ratingsCoding For Dummies Rating: 5 out of 5 stars5/5CompTIA A+ Complete Study Guide: Exam Core 1 220-1001 and Exam Core 2 220-1002 Rating: 4 out of 5 stars4/5Coding All-in-One For Dummies Rating: 4 out of 5 stars4/5CompTIA Security+ Study Guide: Exam SY0-601 Rating: 5 out of 5 stars5/5CAPM Certified Associate in Project Management Practice Exams Rating: 5 out of 5 stars5/5CompTIA Security+ Certification Practice Exams, Fourth Edition (Exam SY0-601) Rating: 5 out of 5 stars5/5AWS Certified Cloud Practitioner All-in-One Exam Guide (Exam CLF-C01) Rating: 5 out of 5 stars5/5CompTIA Network+ Review Guide: Exam N10-008 Rating: 0 out of 5 stars0 ratingsCompTIA Network+ Practice Tests: Exam N10-008 Rating: 0 out of 5 stars0 ratingsHacking : Guide to Computer Hacking and Penetration Testing Rating: 5 out of 5 stars5/5PHR and SPHR Professional in Human Resources Certification Complete Practice Tests: 2018 Exams Rating: 4 out of 5 stars4/5Mike Meyers' CompTIA A+ Certification Passport, Seventh Edition (Exams 220-1001 & 220-1002) Rating: 2 out of 5 stars2/5Mike Meyers CompTIA Security+ Certification Passport, Sixth Edition (Exam SY0-601) Rating: 5 out of 5 stars5/5CompTIA A+ CertMike: Prepare. Practice. Pass the Test! Get Certified!: Core 1 Exam 220-1101 Rating: 0 out of 5 stars0 ratingsMike Meyers' CompTIA Security+ Certification Guide, Third Edition (Exam SY0-601) Rating: 5 out of 5 stars5/5CompTIA A+ Certification All-in-One For Dummies Rating: 3 out of 5 stars3/5CompTIA Network+ CertMike: Prepare. Practice. Pass the Test! Get Certified!: Exam N10-008 Rating: 0 out of 5 stars0 ratingsMicrosoft Outlook 2016/2019/365 User Guide Rating: 5 out of 5 stars5/5Mike Meyers' CompTIA A+ Certification Passport, Sixth Edition (Exams 220-901 & 220-902) Rating: 4 out of 5 stars4/5
Reviews for DVA-C02
1 rating1 review
- Rating: 3 out of 5 stars3/5There are some questions which thought is not complete hence you cannot justify your choices.
Book preview
DVA-C02 - IP Specialist
DVA-C02: AWS Certified Developer Associate
Practice Questions
Second Edition
www.ipspecialist.net
Document Control
Copyright © 2023 IPSpecialist LTD.
Registered in England and Wales
Company Registration No: 10883539
Registration Office at: Office 32, 19-21 Crawford Street, London W1H 1PJ, United Kingdom
www.ipspecialist.net
All rights reserved. No part of this book may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or by any information storage and retrieval system, without the written permission from IPSpecialist LTD, except for the inclusion of brief quotations in a review.
Feedback:
If you have any comments regarding the quality of this book, or otherwise alter it to better suit your needs, you can contact us through email at info@ipspecialist.net
Please make sure to include the book’s title and ISBN in your message.
Table Of Content
About IPSpecialist
Practice Questions
About Our Products
About IPSpecialist
IPSPECIALIST LTD. IS COMMITTED TO EXCELLENCE AND DEDICATED TO YOUR SUCCESS.
Our philosophy is to treat our customers like family. We want you to succeed and are willing to do everything possible to help you make it happen. We have the proof to back up our claims. We strive to accelerate billions of careers with great courses, accessibility, and affordability. We believe that continuous learning and knowledge evolution are the most important things to keep re-skilling and up-skilling the world.
Planning and creating a specific goal is where IPSpecialist helps. We can create a career track that suits your visions as well as develop the competencies you need to become a professional Network Engineer. Based on the career track you choose, we can also assist you with the execution and evaluation of your proficiency level, as they are customized to fit your specific goals.
We help you STAND OUT from the crowd through our detailed IP training content packages.
Course Features:
Self-Paced Learning
Learn at your own pace and in your own time
Covers Complete Exam Blueprint
Prep for the exam with confidence
Case Study Based Learning
Relate the content with real-life scenarios
Subscriptions that Suits You
Get more and pay less with IPS subscriptions
Career Advisory Services
Let the industry experts plan your career journey
Virtual Labs to test your skills
With IPS vRacks, you can evaluate your exam preparations
Practice Questions
Practice questions to measure your preparation standards
On Request Digital Certification
On request digital certification from IPSpecialist LTD.
About the Authors:
This book has been compiled with the help of multiple professional engineers. These engineers specialize in different fields e.g., Networking, Security, Cloud, Big Data, IoT, etc. Each engineer develops content in its specialized field that is compiled to form a comprehensive certification guide.
About the Technical Reviewers:
Nouman Ahmed Khan
AWS-Architect, CCDE, CCIEX5 (RandS, SP, Security, DC, Wireless), CISSP, CISA, CISM is a Solution Architect working with a major telecommunication provider in Qatar. He works with enterprises, mega-projects, and service providers to help them select the best-fit technology solutions. He also works closely as a consultant to understand customer business processes and helps select an appropriate technology strategy to support business goals. He has more than 18 years of experience working in Pakistan/Middle-East and UK. He holds a Bachelor of Engineering Degree from NED University, Pakistan, and M.Sc. in Computer Networks from the UK.
Abubakar Saeed
Abubakar Saeed has more than twenty-five years of experience, Managing, Consulting, Designing, and implementing large-scale technology projects, extensive experience heading ISP operations, solutions integration, heading Product Development, Presales, and Solution Design. Emphasizing adhering to Project timelines and delivering as per customer expectations, he always leads the project in the right direction with his innovative ideas and excellent management.
Dr. Fahad Abdali
Dr. Fahad Abdali is a seasoned leader with extensive experience managing and growing software development teams in high-growth start-ups. He is a business entrepreneur with more than 18 years of experience in management and marketing. He holds a Bachelor's Degree from the NED University of Engineering and Technology and a Doctor of Philosophy (Ph.D.) from the University of Karachi.
Mehwish Jawed
Mehwish Jawed is working as a Senior Research Analyst. She holds a Master's and Bachelor of Engineering degree in Telecommunication Engineering from NED University of Engineering and Technology. She also worked under the supervision of HEC Approved supervisor. She has more than three published papers, including both conference and journal papers. She has a great knowledge of TWDM Passive Optical Network (PON). She also worked as a Project Engineer, Robotic Trainer in a private institute and has research skills in the field of communication networks. She has both technical knowledge and industry-sounding information, which she utilizes effectively when needed. She also has expertise in cloud platforms, such as AWS, GCP, Oracle, and Microsoft Azure.
Syeda Fariha Ashrafi
Syeda Fariha Ashrafi is working as a technical content developer. She has completed bachelor’s degree in telecommunication engineering from the NED University of Engineering and Technology. She has also completed the CCNA (Routing and Switching) course. During her bachelor's program, she worked on the project "Smart metering using PLC (Power Line Communication).
Free Resources
For Free Resources: Please visit our website and register to access your desired Resources Or contact us at: helpdesk@ipspecialist.net
Career Report: This report is a step-by-step guide for a novice who wants to develop his/her career in the field of computer networks. It answers the following queries:
What are the current scenarios and future prospects?
Is this industry moving toward saturation, or are new opportunities knocking at the door?
What will the monetary benefits be?
Why get certified?
How to plan, and when will I complete the certifications if I start today?
Is there any career track that I can follow to accomplish the specialization level?
Furthermore, this guide provides a comprehensive career path toward being a specialist in networking and highlights the tracks needed to obtain certification.
IPS Personalized Technical Support for Customers: Good customer service means helping customers efficiently and in a friendly manner. It is essential to be able to handle issues for customers and do your best to ensure they are satisfied. Providing good service is one of the most important things that can set our business apart from others.
Excellent customer service will attract more customers and attain maximum customer retention.
IPS offers personalized TECH support to its customers to provide better value for money. If you have any queries related to technology and labs, you can simply ask our technical team for assistance via Live Chat or Email.
Our Products
Study Guides
IPSpecialist Study Guides are the ideal guides to developing the hands-on skills necessary to pass the exam. Our workbooks cover the official exam blueprint and explain the technology with real-life case study-based labs. The content covered in each workbook consists of individually focused technology topics presented in an easy-to-follow, goal-oriented, step-by-step approach. Every scenario features detailed breakdowns and thorough verifications to help you completely understand the task and associated technology.
We extensively used mind maps in our workbooks to visually explain the technology. Our workbooks have become a widely used tool to learn and remember information effectively.
Practice Questions
IP Specialists' Practice Questions are dedicatedly designed from a certification exam perspective. The collection of these questions from our Study Guides is prepared to keep the exam blueprint in mind, covering not only important but necessary topics. It is an ideal document to practice and revise your certification.
Exam Cram
Our Exam Cram notes are a concise bundling of condensed notes of the complete exam blueprint. It is an ideal and handy document to help you remember the most important technology concepts related to the certification exam.
Hands-on Labs
IPSpecialist Hands-on Labs are the fastest and easiest way to learn real-world use cases. These labs are carefully designed to prepare you for the certification exams and your next job role. Whether you are starting to learn a technology and solving a real-world scenario, our labs will help you learn the core concepts in no time.
IPSpecialist self-paced labs were designed by subject matter experts and provide an opportunity to use products in a variety of pre-designed scenarios and common use cases, giving you hands-on practice in a simulated environment to help you gain confidence. You have the flexibility to choose from topics and products about which you want to learn more.
Companion Guide
Companion Guides are portable desk guides for the IPSpecialist course materials that users (students, professionals, and experts) can access at any time and from any location. Companion Guides are intended to supplement online course material by assisting users in concentrating on key ideas and planning their study time for quizzes and examinations.
AWS Cloud Certifications
AWS Certifications are industry-recognized credentials that validate your technical cloud skills and expertise while assisting your career growth. These are the most valuable IT certifications right now since AWS has established an overwhelming lead in the public cloud market. Even with several tough competitors such as Microsoft Azure, Google Cloud Engine, and Rackspace, AWS is by far the dominant public cloud platform today, with an astounding collection of proprietary services that continues to grow.
The two key reasons why AWS certifications are prevailing in the current cloud-oriented job market are as follows:
There is a dire need for skilled cloud engineers, developers, and architects – the current shortage of experts is expected to continue into the near future
AWS certifications stand out for their thoroughness, rigor, consistency, and appropriateness for critical cloud engineering positions
Value of AWS Certifications
AWS places equal emphasis on sound conceptual knowledge of its entire platform and hands-on experience with the AWS infrastructure and its many unique and complex components and services.
For Individuals
Demonstrate your expertise in designing, deploying, and operating highly available, cost-effective, and secured applications on AWS
Gain recognition and visibility for your proven skills and proficiency with AWS
Earn tangible benefits such as access to the AWS Certified LinkedIn Community, invites to AWS Certification Appreciation Receptions and Lounges, AWS Certification Practice Exam Voucher, Digital Badge for certification validation, AWS Certified Logo usage, access to AWS Certified Store
Foster credibility with your employers and peers
For Employers
Identify skilled professionals to lead IT initiatives with AWS technologies
Reduce risks and costs to implement your workloads and projects on the AWS platform
Increase customer satisfaction
Types of Certification
Role-based Certification:
Foundational - Validates overall understanding of the AWS Cloud. Prerequisite to achieving the Specialty certification or an optional start toward the Associate certification
Associate- Technical role-based certifications. No pre-requisite
Professional - The highest level of technical role-based certification. Relevant Associate certification required
Specialty Certification:
Validates advanced skills in specific technical areas
Requires one active role-based certification
Certification Roadmap
AWS Certified Cloud Practitioner is a new entry-level certification. Furthermore, there are five different AWS certification offerings in three different tracks. These include Solutions Architect, Developer, and SysOps Administrator. AWS also offers two specialty certifications in technical areas: Big Data and Advanced Networking.
AWS Certified Developer Associate
This AWS Certified Developer-Associate Examination (DVA-001) is intended for individuals who perform a Developer role. This exam validates an examinee’s ability to effectively demonstrate knowledge of how to architect and deploy secured and robust applications on AWS technologies.
It also validates an examinee’s ability to:
Demonstrate an understanding of core AWS services, uses, and basic AWS architecture best practices.
Demonstrate proficiency in developing, deploying, and debugging cloud-based applications using AWS.
Intended Audience
Candidates may be business analysts, project managers, chief experience officers, AWS Academy students, and other IT-related professionals. They may serve in sales, marketing, finance, and legal roles.
About AWS Certified: Developer Associate Exam
This exam measures your ability to accomplish the following technical tasks:
Development of AWS Services (32%)
Security (26%)
Deployment (24%)
Troubleshooting and Optimization (18%)
Recommended Knowledge
One or more years of hands-on experience developing and maintaining an AWS-based application
In-depth knowledge of at least one high-level programming language
Understanding of core AWS services uses, and basic AWS architecture best practices
Proficiency in developing, deploying, and debugging cloud-based applications using AWS
Ability to use the AWS service APIs, AWS CLI, and SDKs to write applications
Ability to identify key features of AWS services
Understanding of the AWS shared responsibility model
Understanding of application lifecycle management
Ability to use a CI/CD pipeline to deploy applications on AWS
Ability to use or interact with AWS services
Ability to apply a basic understanding of cloud-native applications to write codes
Ability to write codes using AWS security best practices (e.g., using IAM roles instead of using secret and access keys in the code)
Ability to author, maintain and debug code modules on AWS
Proficiency in writing code for server-less applications
Understanding the use of containers in the development process
Identity federation (for example, Security Assertion Markup Language [SAML], OpenID Connect [OIDC], Amazon Cognito)
Bearer tokens (for example, JSON Web Token [JWT], OAuth, AWS Security Token Service [AWS STS])
The comparison of user pools and identity pools in Amazon Cognito
Resource-based policies, service policies, and principal policies
Role-based access control (RBAC)
Application authorization that uses ACLs
The principle of least privilege
Differences between AWS managed policies and customer-managed policies
Logging and monitoring systems
Languages for log queries (for example, Amazon CloudWatch Logs Insights)
Data visualizations
Code analysis tools
Common HTTP error codes
Common exceptions generated by SDKs
Service maps in AWS X-Ray
Practice Questions
1. A Developerwrotesome Node.js code and executed the code in an EC2 instance, which took 200 seconds. The code calls a DynamoDB table, but if the code is executedby deploying a Lambda Function with default settings, then it does not add necessary rows in the table,and it is not working the same as it works in EC2.What changes will be required to execute it similarly to the EC2 instance?
A. Change the memory assigned to the function to 2 GB
B. Ensure that the Node.js is changed to Python
C. Assign IAM users to the Lambda function
D. Change the timeout for the function
2. In AWS CodeDeploy, the developerfollows which sequence of hooks gets called.
A. Before install>Validate service>application stop>application start
B. Application stop> before install> after install>application start
C. Before install>application stop> validate service>application start
D. Before install>after install>application stop>application start
3. An organization has a Lambda function which is used to process the data asynchronously, but in case of any failure in the function, they want to find out the issue.How will they do it?
A. Use AWS CloudTrail logs
B. Configure SNS notifications
C. Use CloudWatch metrics
D. Assign DLQ (Dead Letter Queue)
4. How can an organization optimizethe performanceof Amazon S3 if they get 7000 requests per second to access the files stored in it? (Choose any 2)
A. Enable Cross Region Replication for a bucket
B. Use CloudFront distribution in front of the S3 bucket
C. Enable versioning for Bucket
D. Use Hash key prefix for object keys
5. A company has a Lambda function, which is in the process of debugging,and they also have a print statement for help in the debugging process,but when they want to see logs in CloudWatch, they cannot see what the issue behind this was.
A. No enough time assigned to function
B. No enough memory assigned to function
C. The IAM role assigned to the functionis not allowed to create logs
D. For Lambda function versioning is not enabled
6. Consider an organization thathas a worldwide application,and they use DynamoDB table for this application which is required across the world in various regions.How can they reduce latency for requests to DynamoDB?
A. Enable Indexes for the table
B. Enable Multi-AZ for the DynamoDB table
C. Increase read and write throughput for the table
D. Enable global tables for DynamoDB
7. Consider an educational institute with a static website hosted in S3, and now the codeis changed,and JavaScript calls the web page in the same bucket via FQDN. But now uploading of the webpage is blocked.What could be the issue?
A. Enable CRR on the bucket
B. Enable encryption in the bucket
C. Enable CORS on the bucket
D. Enable versioning on the bucket
8. An organization has an API gateway that its clients use to access APIs,andthe code of that API is hosted in AWS Lambda. It also gives all of its clients a chance to move towardsa new version of API within5 months. How can they achieve this?
A. Create another stage in the API gateway
B. Create another AWS Lambda version and give the linkto that version to clients
C. Create deployment packages that would automatically change the link to the new version
D. Create another AWS Lambda ALIAS and givethe link of that to the clients
9. If an organization has multiple environments used in the Lambda function and wants to connect with the database in each environment, how can the IT department deploy Lambda Function?
A. Create a Lambdafunction and create several ALIAS for each database
B. Create a Lambdafunction and create several versions for each database
C. Create a Lambda function for each environment,so each environment points to its respective database
D. Create a Lambda function and create environment variables for each database
10. An organization wants temporary access to credentials via AWS STS and gets the following response.
Which of the following is a true statement for this response?
A. Request ID is used to make a request for accessing other resources of AWS
B. The SecretAccessKey can be used like Access Keys to make a request to resources
C. Session token will be valid for the lifetime of the application
D. User will assume role of arn:aws:sts::123456789012:assumed-role/demo/Lambda
11. An organization has an application which calls AWS RDS instance.But in some cases, when the same queries are creating a burden on the database and reducingitsperformance of the database, how canthis issue be resolved?
A. Place an ElastiCache in front of the database
B. Place a CloudFront distribution in front of the database
C. Enable Multi-AZ for database
D. Place an SQS queue in front of the database
12. How can you convert the error into human-readable format if it occurs during the call of API operation?
A client error (UnauthorizedOperation) occurred when calling the RunInstances operation:
You are not authorized to perform this operation. Encoded authorization failure message:
A. Use IAM Policy simulator, and enter the error message to get the human readable format
B. Use command aws sts decode-authorization-message
C. Use command aws set authorization-message
D. Use command aws get authorization-message
13. If an organization has multiple resources on the AWS cloud and wants to monitor all STS service requests for security purposes. How can they meet the requirements?
A. Create CloudTrail
B. Use STS logging service
C. Use CloudWatch metrics
D. Monitor CloudWatch logs service
14. An organization has an application that runs on an EC2 instance. The organization grants access to credentials for testing. The credentials contain permission to write in the S3 bucket. When testing was done,an IAM role is attached to the instance, allowing only read access from the bucket. But the bucket still has to write access; why?
A. EBS volume needs to be attached again for the instance profile to take effect
B. Need to restart the instance for Role settings to take effect
C. The environment variables thatwere set for CLI access are taking priority
D. CLI is corrupted. Hence the credentials are not being revoked
15. An organization has an application that works on the basis of XML messages. An API gateway must be placed in front of the application so that the client requests to call API.How can you configure the application?
A. Enable CORS
B. Enable Multiple stages
C. Enable Payload
D. You will need to work with request and response data mapping
16. An educational institute wants an application in which they use DynamoDB tables.Approximately hundreds of requests per second are made. They also have an application thatcaptures changes and stores them in a DynamoDB table for future processes. How willyou meetthe above requirements?
A. Enable global tables for DynamoDB
B. Enable scan on the entire table to track changes
C. Enable streams for DynamoDB
D. Create a query to check for changes
17. A developer wants to access video files through unauthenticated identities in AWS.A mobile-based applicationis also developedthatwants to make use of an authentication service. How can he access it?
A. Create an IAM group with public access
B. Use AWS STS with SAML
C. Create IAM user with public access
D. Use AWS Cognito with unauthenticated identities enabled
18. An organization has a function that is written in .NET and hosted in AWS Lambda. In code, they have some external libraries which are required. How in AWS Lambdacan they work with external libraries?
A. Place the entire SDK dependencies in Amazon S3
B. Make sure that the dependencies are put in the root folder
C. Selectively include the libraries that are required
D. Make sure the libraries are installed at the beginning of the function
19. A company has developed an application in which they use Amazon Kinesis,and because of high throughput, they need to increase the number of shards. How does the processing of the data on these shards occur?
A. Order of data is not possible at all in kinesis streams
B. You cannot guarantee the order of data across multiple shards. It is possible only in a single shard
C. You need to use kinesis firehose to guaranteethe order of data
D. Order of data is possible across all shard in a stream
20. If a developeruses Amazon S3 for object storage and approximately more than 6000 requests per second for accessing an object are occurring,how can the performance be optimized?
A. Ipspecialistbucket/sample/logo1.jpg
B. Ipspecialistbucket/2018-03-04-12-02-00/logo1.jpg
C. Ipspecialistbucket/sample/123b-2018-03-04-12-02-00logo1.jpg
D. Ipspecialistbucket/123b-2018-03-04-12-02-00/logo1.jpg
21. An organization has an application they want to maintain in the AWS cloud using ElasticBeanStalk. If deploying new application versions, it hits application version limits. How can they effectively overcome this issue?
A. Create an application lifecycle policy
B. Delete the application version manually
C. Create multiple environments and deploy different versions to differentenvironments
D. Create multiple applications and deploy different versions to different environments
22. How can you stream large datasets directly in Amazon S3 in AWS?
A. AWS Redshift
B. AWS Streams
C. AWS Analytics
D. AWS Data Firehose
23. An organization has a static web page with CSS pages on the S3 service, which is 2MB,and they enable server logging on that S3 bucket. After some duration, they see that the size of the bucket increases to 30 MB.Why?
A. Monitoring has been enabled for a bucket
B. CRR enable on the bucket
C. Encryption on the bucket has enabled
D. Because logs are also delivered to the same bucket, which is normal
24. If a developerwants to create a template in CloudFormation on AWS that contains many resources like EC2 instances, Load balancers,etc. How can he design that template?
A. Package the template together and use CloudFromation package command
B. Ensure to create one entire stack from this template
C. Look towards breaking the template into a smaller, manageable template
D. Package the template together and use CloudFormation deploy command
25. An organization has a Lambda function on AWS that is used for API gateway as backend technology. For testing purposes, they want to assign some users the URL of the API gateway. What will they do before performing a test on API?
A. Enable support for binary payloads
B. Ensure that deploymentis created in the API gateway
C. Ensure CORS enable for API gateway
D. Generates SDK for the API
26. A company wants to store its data in the cloud in the DynamoDB table. They define that table has 5read capacity units and 5 write capacity units. How can they achieve this? (choose any 3)
A. Eventual consistent reads of a maximum of 20 KB per second
B. Strong,consistent reads of a maximum of 20 KB per second
C. Eventualconsistent reads of a maximum of 40KB per second
D. Maximum writes of 5 KB per second
E. Eventualconsistent reads of a maximum of 40 KB per second
27. An organization uses AWS Elastic container service AWS to deploy Docker containers. Each container has its instances that they do not want to be able to access each other because the single client will use all instances. How can the developerprovide a solution to meet requirements?
A. Place access keys in EC2 instances
B. Place IAM roles for underlying EC2 instance
C. Configure security groups of instances to allow only required traffic
D. Place access keys in the Docker container
28. Consider an organization with resources in a separate account on the cloud for the deployment of CI/CD automation.Because of some security issues, they need to use the CodePipeline service for this automation. How can they deploy that automation in the organization? (choose any 2)
A. Embed the access key in the CodePipeline process
B. Create a reference CodePipeline instance in another account
C. Define customer master key in KMS
D. Add cross-account role
29. If an organization has an application that they want to be deployedon the cloud by usingAWS CodeDeploy. Secure parameters used inthe application are in the AWS Systems Manager Parameter store. How can they automatically deploy an application via CodeDeploy? (choose any 2)
A. Give permission to AWS CodeDeploy service via AWS access key
B. Use the aws ssm get-parameters with the –with decryption option
C. Give permission to AWS CodeDeploy service via an IAM Role
D. Use the aws ssm get-parameters with the –with no-decryption option
30. An institute has an application in Cloud that is Java based,and because of security purposes, they need encryption by using AWS KMS; then how can they achieve this and decryption as well? (choose any 2)
A. Use the generated data key to decrypt the data
B. Use customer master key to decrypt the data
C. Use customer master key to encrypt the data
D. Use customer master key to generate a data key for the encryption process
31. An organization has an application thatpoints out multiple Lambdafunctions in AWS.They want that if any modification is done on any function,then the application's traffic shifts from one function to another. How can they achieve this? (choose any 2)
A. Updating function with the config parameter
B. Creating a version with the routing config parameter
C. Creating ALIAS with the routing Config parameter
D. Updating the version with the routing config parameter
E. Updating ALIAS with the routing Config parameter
32. An image processing company has an application in which users upload images. They need thoseimages, and the usernameof the uploader should be storedeffectively. How does a developermeetthe above requirement? (choose any 2)
A. Store image