AWS Certified Developer - Associate (DVA-C02) - Practice Exam 4

An organization is hosting their static website on S3, using a custom domain name. Users have started reporting that their web browsers are alerting them to the fact that the organization's website is "not secure" because it is not served via a secure HTTPS connection.

What is the easiest way to start serving the website via HTTPS?

• Add a CloudFront distribution in front of the S3 static website, which supports HTTPS with a custom domain name.

• Enable AES 256-bit default encryption on the S3 bucket, which ensures all content is delivered via HTTPS.

• Add an Application Load Balancer in front of the S3 bucket and enable SSL termination.

• Enable AWS Shield on the S3 bucket. Browsers automatically detect that Shield is enabled and report that the website is secure.

A three-tier application consists of a presentation and application tier deployed on EC2 instances in a public VPC subnet, and a data tier hosted on an RDS database in a private VPC subnet. When attempting to establish a connection to the RDS database, the application times out. What could be the source of this problem?

• The database credentials are incorrect.

• The public subnet does not have an internet gateway configured.

• The database VPC security group is not configured to allow traffic from EC2 instances.

• VPC peering is not configured properly.

As a developer, you have built a WordPress site. Traffic to the site has increased, and you have improved the site's functionality to meet the demand of your viewers since launch. Changes are coming frequently, and you are considering using AWS CloudFormation to automate the process of building test stacks, creating a change set, and executing the change set. How would you streamline this process in AWS most efficiently?

• Build your test stack, create a change set, and then execute the change set by manually interacting with AWS CloudFormation.

• Create a CodePipeline separated by three stages. For each stage, organize actions in a pipeline. Have CodePipeline complete all actions in a stage before the stage processes new artifacts.

• Create a Config rule that will look for changes within your CloudFormation stack that will trigger Lambda functions to execute actions based on the pipeline.

• Use Amazon Inspector to monitor your CloudFormation environment that will send an SNS notification to Lambda when a pipeline stage is complete. Subscribe the Lambda function to the SNS topic.

An application developer finds that performing a scan operation on a large DynamoDB table is taking a long time to execute. What can be used to improve the performance and decrease the execution time of the scan operation?

• Use of parallel scans

• Use of projection expression

• Use of a filter expression

• Use of pagination

You are developing a gaming website that stores all players' scores in a DynamoDB table. You're thinking of using a partition key of user_ID and a sort key of game_ID, as well as storing the user_score, which is the user's highest score for the game, and also a timestamp. You need to find a way to get the game IDs for a specific user ID where the score is over 50,000 points. Which of the following will allow you to find this information in the most efficient way?

• Scan the table and order by score.

• Use a global secondary index with a partition key of game_ID and a sort key of user_ID.

• Use a local secondary index with a partition key of user_ID and a sort key of user_score.

• Query the table using a partition key of user_ID and sort by game_ID.

You have developed an application that automatically tracks home deliveries for online orders from a number of different websites. You would like your application to send metrics to CloudWatch any time a critical error occurs, and you want CloudWatch to notify you if more than two critical errors occur within a time period of 15 minutes. Which of the following CloudWatch actions can you use to configure this?

• Use GetMetricData to fetch metrics relating to critical errors from the application. Use PutMetricAlarm to create an alarm and notify you if the threshold is reached.

• 
  

  Use InputMetricData to publish metric data relating to critical errors to CloudWatch. Use CreateMetricAlarm to create an alarm and notify you if the threshold is reached.

• Use PutMetricAlarm to publish metric data relating to critical errors and alert you if the threshold is reached.

• Use PutMetricData to publish metric data relating to critical errors to CloudWatch. Use PutMetricAlarm to create an alarm and notify you if the threshold is reached.

Your website is hosted in AWS, and you have recently configured CloudFront to help improve performance. The website includes some basic interactive functionality, including the ability to complete a form to submit product reviews. After configuring CloudFront, you discover that visitors to your site are no longer able to submit reviews. Which of the following CloudFront-allowed HTTP methods should you enable?

• GET, HEAD, OPTIONS, PUT, POST, PATCH, DELETE.

• GET, HEAD, OPTIONS, PUT, POST, PATCH.

• GET, HEAD, OPTIONS.

• GET, HEAD.

You want to implement an HTTPS CloudFront distribution with a custom domain name for your web application hosting static content. The backend compute is hosted in us-east-2. You would like to use AWS Certificate Manager for the certificate management. Which of the following options is a requirement?

• You must deploy the ACM cert in the us-east-1 Region.

• CloudFront automatically issues and manages TLS certs for custom domain names.

• You must deploy the ACM cert in both the us-east-1 and us-east-2 Regions.

• You must deploy the ACM cert in the us-east-2 Region.

You are working on a Lambda function that requires 150 MB of storage space to store temporary files containing computational data. The data is accessed, updated, and modified frequently by the function while it completes processing. Which of the following data storage options will meet this requirement?

• DynamoDB

• EFS

• S3

• /tmp

You are leading a small team of DevOps engineers. The team requires a secure and scalable mechanism for centrally storing and sharing compiled code and software packages, as well as a source-control solution for collaborating on their source code. Which of the following do you recommend?

• Use CodeArtifact to store the compiled code and software packages. Use CodeCommit as a source-control system to store the source code.

• Use CodeDeploy to store the compiled code and software packages. Use CodePipeline as a source-control system to store the source code.

• Use CodeCommit to store the compiled code and software packages. Use CodeArtifact as a source-control system to store the source code.

• Use CodePipeline to store the compiled code and software packages. Use CodeDeploy as a source-control system to store the source code.