DVA-C02 Development with AWS Services Practice Test 15 — 15 Questions

Question 1

A Lambda function connects to an RDS database and causes too many database connections during traffic spikes. Which service should be introduced?

Accepted Answer

Amazon RDS Proxy. Amazon RDS Proxy sits between your Lambda function and the RDS database, managing a pool of established database connections. During traffic spikes, Lambda can rapidly scale up concurrent executions, each potentially opening a new database connection, which can exhaust the database's maximum connections. RDS Proxy reuses connections from the pool, reducing the number of open connections and preventing database overload, while also improving connection handling efficiency for serverless applications.

Answer

AWS Glue Data Catalog

Answer

Amazon Route 53 Resolver

Answer

AWS WAF

Question 2

A developer must locally test a SAM-based Lambda function with an API event before deployment. Which tool command family is designed for this?

Accepted Answer

AWS SAM CLI local invoke/start-api. The AWS SAM CLI provides the `local invoke` and `local start-api` commands specifically for testing Lambda functions locally with simulated API Gateway events before deployment. `sam local start-api` creates a local HTTP server that mimics API Gateway, allowing developers to send requests to their Lambda functions as if they were deployed, while `sam local invoke` directly invokes the function with a specified event payload. This is the only tool family designed for local testing of SAM-based Lambda functions with API events.

Answer

AWS Shield Advanced CLI

Answer

AWS Organizations policy simulator

Answer

Amazon Inspector SBOM export

Question 3

An application stores session data in DynamoDB and must expire sessions automatically after a timestamp. Which feature should be used?

Accepted Answer

DynamoDB Time to Live. DynamoDB Time to Live (TTL) allows you to define a timestamp attribute per item, and DynamoDB automatically deletes items once that timestamp is reached. This is the ideal feature for expiring session data without requiring custom scan-and-delete logic, reducing cost and operational overhead.

Answer

DynamoDB global tables

Answer

DynamoDB transactions

Answer

DynamoDB export to S3

Question 4

A Lambda function needs temporary scratch space larger than the default while processing images. Which setting should be adjusted?

Accepted Answer

Ephemeral storage size for /tmp. Lambda functions have a default /tmp storage of 512 MB, which is insufficient for large image processing tasks. Adjusting the ephemeral storage size (up to 10,240 MB) provides the necessary scratch space for temporary files, such as intermediate image buffers or resized outputs, without requiring external storage like EFS.

Answer

Reserved concurrency

Answer

Function URL auth type

Answer

Dead-letter queue target

Question 5

A developer is implementing S3 multipart upload for large files. Which two actions are required to complete the upload?

Accepted Answer

Upload all parts and keep their ETags/part numbers. During an S3 multipart upload, each part must be uploaded individually, and the response includes an ETag (a hash of the part) and a part number. These must be recorded and provided in the final request to assemble the object. Option D is correct because the CompleteMultipartUpload API call is required to signal S3 to combine all uploaded parts into the final object, using the list of ETags and part numbers.

Answer

Enable S3 static website hosting

Answer

Disable bucket encryption

Question 6

A DynamoDB query must support lookup by email address as well as by user ID. Which two changes may be required?

Accepted Answer

Create a secondary index with email as a key. A Global Secondary Index (GSI) or Local Secondary Index (LSI) on the email attribute allows DynamoDB to efficiently query by email address without scanning the entire table. Since the primary key is user ID, querying by email requires an index that uses email as the partition key or sort key. Option C is correct because specifying projection attributes limits the data returned from the index or table, reducing read capacity consumption and improving performance.

Answer

Scan the full table for every login

Answer

Disable partition keys

Question 7

A Lambda function processes a batch of SQS messages. Which two configurations reduce duplicate or failed-message impact?

Accepted Answer

Use a visibility timeout longer than expected processing time. A visibility timeout longer than the expected processing time prevents other consumers from reprocessing a message while it is still being handled, reducing duplicates. Option D is correct because a dead-letter queue captures messages that repeatedly fail processing, allowing analysis and preventing them from blocking the queue, while partial batch response enables the function to return a list of failed message IDs so that only those messages become visible again, reducing reprocessing of successful ones.

Answer

Set visibility timeout to zero

Answer

Disable the dead-letter queue

Question 8

Drag and drop the steps to configure an S3 bucket for static website hosting in the correct order.

Accepted Answer

Create an S3 bucket, enable static website hosting, configure index and error documents, set appropriate bucket policy for public read access, upload website content. First create the bucket, then enable static website hosting, configure index and error documents, set appropriate permissions, and finally upload content.

Answer

Create an S3 bucket, configure index and error documents, enable static website hosting, set bucket policy, upload content

Answer

Create an S3 bucket, enable static website hosting, set bucket policy, upload content, configure index and error documents

Answer

Create an S3 bucket, set bucket policy, enable static website hosting, configure index and error documents, upload content

Question 9

Drag and drop the steps to create a Lambda function that processes S3 events in the correct order.

Accepted Answer

Set up permissions, then write code, then create function, then configure trigger, then test.. First set up permissions, then code, create function, configure trigger, and test.

Answer

Write code, then set up permissions, then create function, then configure trigger, then test.

Answer

Set up permissions, then create function, then write code, then configure trigger, then test.

Answer

Set up permissions, then write code, then create function, then test, then configure trigger.

Question 10

Drag and drop the steps to encrypt an EBS volume using AWS KMS in the correct order.

Accepted Answer

1. Create a KMS key, 2. Create a snapshot of the unencrypted EBS volume, 3. Copy the snapshot with encryption (specifying the KMS key), 4. Create a new encrypted EBS volume from the encrypted snapshot.. First create a KMS key, then snapshot the unencrypted volume, copy with encryption, and create the encrypted volume.

Answer

1. Create a snapshot of the unencrypted EBS volume, 2. Create a KMS key, 3. Copy the snapshot with encryption, 4. Create a new encrypted EBS volume from the encrypted snapshot.

Answer

1. Create a KMS key, 2. Create a snapshot of the unencrypted EBS volume, 3. Create a new encrypted EBS volume directly from the unencrypted snapshot.

Answer

1. Create an encrypted EBS volume, 2. Attach it to an EC2 instance, 3. Migrate data from the unencrypted volume, 4. Detach and delete the unencrypted volume.

Question 11

Match each AWS service to its primary use case.

Accepted Answer

AWS Lambda: Serverless compute service that runs code in response to events.. Correct matches: Lambda is serverless compute, DynamoDB is NoSQL database, S3 is object storage, Elastic Beanstalk is PaaS. Common confusions include swapping Lambda and DynamoDB definitions.

Answer

AWS Lambda: Fully managed NoSQL database service for key-value and document data.

Answer

Amazon DynamoDB: Serverless compute service that runs code in response to events.

Question 12

Match each AWS security feature to its function.

Accepted Answer

IAM: Controls access to AWS services and resources for users and roles.. The correct matches are IAM with access control, Security Groups with EC2 firewall, KMS with encryption key management, and CloudTrail with API auditing. Common confusions include mistaking IAM for CloudTrail and Security Groups for NACLs.

Answer

IAM: Records API activity in your AWS account.

Answer

Security Groups: Controls network traffic at the subnet level.

Question 13

A developer needs to store session state for a stateless web application running on EC2 instances behind an Application Load Balancer. Which AWS service should the developer use to ensure session data is not lost if an instance fails?

Accepted Answer

Amazon DynamoDB. Amazon DynamoDB is a fully managed NoSQL database that provides fast and predictable performance with seamless scalability. It is highly recommended for storing session state in stateless applications because it is serverless, highly durable, and requires no cluster management, unlike ElastiCache. AWS SDKs even offer native session state providers for DynamoDB.

Answer

Amazon S3

Answer

Amazon ElastiCache

Answer

Amazon RDS

Question 14

A company has a monolithic application running on an EC2 instance that needs to be migrated to a microservices architecture on AWS. The development team wants to use AWS services to handle service discovery, configuration management, and secrets management. Which combination of AWS services should the team use?

Accepted Answer

Use AWS Cloud Map for service discovery, AWS AppConfig for configuration, and AWS Secrets Manager for secrets.. AWS Cloud Map provides service discovery for microservices by registering service instances and enabling DNS-based or API-based resolution. AWS AppConfig manages application configuration with validation and controlled rollouts, and AWS Secrets Manager handles secrets management with automatic rotation and fine-grained access control. Together, these services meet the specific needs of service discovery, configuration management, and secrets management in a microservices architecture.

Answer

Use Amazon ECS Service Discovery for service discovery, AWS Config for configuration, and AWS Systems Manager Parameter Store for secrets.

Answer

Use AWS Cloud Map for service discovery, AWS Systems Manager Parameter Store for configuration, and AWS Secrets Manager for secrets.

Answer

Use AWS Service Discovery for service discovery, EC2 Image Builder for configuration, and AWS Key Management Service (KMS) for secrets.

Question 15

A developer is using Amazon S3 to store application logs. The logs are generated every hour and must be retained for 90 days. After 90 days, the logs should be deleted automatically. Which S3 lifecycle policy should the developer configure?

Accepted Answer

Expire objects after 90 days.. The requirement is to delete logs after 90 days, and the S3 lifecycle 'Expire' action permanently removes objects once they reach the specified age. No transitions are needed since the logs are not required to be stored in a different storage class before deletion.

Answer

Expire objects after 30 days.

Answer

Transition objects to Amazon S3 Glacier after 90 days.

Answer

Transition objects to S3 Standard-IA after 30 days and expire after 90 days.