Download AWS DVA-C02 Practice Exam 1 Certification Guide 2026 and more Exams Computer Programming in PDF only on Docsity!
AWS DVA-C02 Practice Exam 1 Certification
Guide 2026
- You are running a CI/CD pipeline using CodePipeline to Create a test stage with a
deploy containers to Elastic Kubernetes Service (EKS). Container images are stored in Elastic Container Reg- istry (ECR), for deployment to EKS. Before the image is deployed, you want to run a security check on the image, with the ability to fail the pipeline if the security check fails. How do you do this in CodePipeline?
Build the container image locally and perform a securi- ty scan before beginning the CD/CD pipeline. Push any changes to the source code repository.
Create a test stage with a test action that will happen before the deployment stage.
Create a test action in the deployment stage to per- form security scanning prior to deploying the image.
Create a test action in the deployment stage to per- form security scanning after deploying the image.
- Your application uses Kinesis to collect customer data from various sources, including web forms, mobile apps, and IoT devices. This data is analyzed in real time in order to gain insights and improve customer experience. Following a recent Black Friday event, your website experienced unprecedented traffic, and sales have doubled over the last quarter. This increase in traffic caused some issues, and your Kinesis stream is frequently throwing a ProvisionedThroughputExceed- edException error. What should you do to fix this prob- lem?
test action that will hap- pen before the deploy- ment stage.
Reshard your stream.
Reduce the frequency or size of your requests.
AWS DVA-C02 Practice Exam 1 Certification
Guide 2026
(Choose 2)
Increase the number of consumers.
Reshard your stream.
Provision a second Kinesis stream to handle the ad- ditional load. Use a Lambda function to merge the processed data from the two streams.
Retry the operation immediately.
Reduce the frequency or size of your requests.
- You have deployed a MySQL RDS database cluster to store customer transaction data that needs to be queried and updated by a recommendation engine application for an online retailer. Each week, the rec- ommendation engine runs extensive queries on the customer transaction data to identify products that should be marketed to customers, based on their shopping habits. The product owner has asked you to find a solution to improve performance of the weekly queries, including the ability to rank and sort the data to quickly identify the most relevant data for a given query. Which of the following solutions do you recom- mend?
Scale your RDS instances to improve read perfor- mance, and refine the SQL query so that the data is properly sorted and ranked for relevance.
Use ElastiCache for Memcached to improve read per-
Use ElastiCache for Redis to improve read perfor- mance and sort and rank the results.
Use the SetOrder attribute to ensure sequential job processing.
- You are about to work on a brand-new feature that you Create a branch from your
wish to propose for the upcoming second release of a job search engine application. However, you do not want to use the production-ready code. How will you keep your work separate from it?
Create a delineator between your code for the new feature and the production-ready code in AWS Code- Commit.
Create a branch from your default branch in AWS Code- Commit.
Create a branch from your default branch in AWS Code- Build.
Create a pull request in AWS CodeCommit.
- You are using CodeCommit to store the source code for your application. Whenever a team member cre-
default branch in AWS CodeCommit.
Use EventBridge to trigger the Lambda ates or updates a pull request, you would like to trigger function whenever a a Lambda function to save details of the pull request in pullRequestCreated event a DynamoDB table. Which of the following should you or a pullRequestSource- implement in order to achieve this? BranchUpdated event is
Use EventBridge to send a notification to SNS whenev-
detected.
er a pullRequestCreated event or a pullRequestSource- BranchUpdated event is detected. Use SNS to trigger the Lambda function to save the data to DynamoDB.
Use CloudWatch Logs Insights to trigger the Lambda function whenever a pullRequestCreated event or a pullRequestSourceBranchUpdated event is detected.
Use EventBridge to trigger the Lambda function when- ever a pullRequestCreated event or a pullRequest- SourceBranchUpdated event is detected.
Use SNS to trigger the Lambda function whenever a pullRequestSourceBranchUpdated event is detected.
- You are planning to provision a number of new EC2 in- Create a copy of the AMI stances to a production environment. The engineering provided by the engineer- team has provided an AMI that includes all the package ing team, and specify that dependencies needed by the application. The Head of Security has asked you to ensure that for all existing and future projects, any new EC2 instances must be provisioned using an encrypted AMI; however, when you locate the AMI that is supposed to be used, you discover that is it not encrypted. What should you do to ensure that you use the correct AMI and that it is encrypted?
Encrypt the AMI before using it to provision the new instances.
Provision the new instances using the unencrypted AMI, and specify that the instances will be encrypted.
Provision the new instances using the unencrypted AMI, and specify that the AMI will be encrypted.
the copy will be encrypted.
Create an S3 bucket in the region nearest to most of your users, using a bucket name that matches with your domain name.
Create an index and error document.
Setup an EC2 instance to host the website and point to the website files stored in S3.
Create an index and error document.
- You want to create a continuous delivery pipeline with AWS CodePipeline
a build tool recommended by your project manager; however, you anticipate your build project to be large and complex. Which of the following AWS services will enable you to orchestrate complex pipelines and auto- mate your software build, test, and release processes?
AWS CodePipeline AWS CodeDeploy Jenkins AWS CodeBuild
- You are planning to deploy a new version of your EC application using CodeDeploy. You only have a window of two hours to complete the deployment and test it. Your team lead is concerned about the time it could take to roll back the upgrade if it should fail. Which deployment approach would you recommend? Canary In- place Blue/Green Rolling with additional batch
Blue/Green
- /tmp
Your application is running in Lambda and is written in Node.js. The purpose of the application is to process social media feeds in near real time and save related metadata to a DynamoDB table for further analysis. During processing, the function needs a place to store around 250 MB of temporary data that is created, read, and updated while the function completes its process- ing, before saving the end result to DynamoDB. Which of the following data stores is the most suitable for this use case?
Elastic Block Store S /tmp EFS
- What does the following snippet from an IAM policy do? { "Version": "2012-10-17", "Statement": [ { "Effect": "Al- low", "Action": "s3:", "Resource": [ "arn:aws:s3:::my- customerdata/", "arn:aws:s3:::mycustomerdata/" ] }, { "Sid": "DenyS3Logs", "Effect": "Deny", "Action": "s3:DeleteObject", "Resource": "arn:aws:s3:::mycus- tomerdata/log" } ] }
Denies the ability to read objects contained in the bucket named mycustomerdata.
Allows full access to the bucket named mycustomerda- ta, including the objects it contains.
Allows only read access for all objects contained in the bucket named mycustomerdata.
Denies the ability to delete any objects with log in the name from the mycus- tomerdata bucket, while allowing all other S3 ac- tions.
After deploying the function, there is usually a delay in which the new function is initialized. During this time, the application is directed to the previous version of the function.
Your application is referencing the function using $LATEST.
Your application is referencing the function using an unqualified ARN.
Your application is referencing the function using an alias that points to a previous version of the code.
- What is the AWS-recommended method for configur- Create an IAM role that can ing permissions in a mobile application that allows the be assumed by an app that application to securely read data from DynamoDB?
Create an IAM role for your users.
Connect your application to an EC2 instance with per- mission to read from DynamoDB.
Issue an access key and secret access key to each user.
Create an IAM role that can be assumed by an app that allows federated users.
allows federated users.
- Which AWS service allows you to build and model your Step Functions
serverless application as a visual workflow consisting of a series of steps where the output of one stage can be input into another?
Step Functions
Lambda
Simple Workflow Service
CloudFormation
- You are building a web application that uses API Gate- Latency
way to expose a Lambda function to process requests from clients over the internet. While testing, the API Gateway frequently times out; however, when calling the Lambda function directly, it completes successfully every time.
Which of the following API Gateway metrics in Amazon CloudWatch should you check in order to troubleshoot the issue? (Choose 2) Count CacheMissCount Latency IntegrationLatency
- Which of the following specifies the correct run order for lifecycle hooks for an in-place deployment using CodeDeploy?
ApplicationStop, BeforeInstall, ApplicationStart, Af- terInstall, ValidateService
BeforeInstall, AfterInstall, ApplicationStop, Applica- tionStart, ValidateService
IntegrationLatency
ApplicationStop, BeforeIn- stall, AfterInstall, Applica- tionStart, ValidateService
deploy create-stack update- stack create-stack-set
- An IT auditor has started on your security team. They will need access to read files in S3 and DynamoDB, as well as the ability to describe EC2 instances. You want to ensure that only the auditor is granted this access and that the IAM policy you create cannot mistakenly be attached to any other user. Which IAM policy type should you use?
Custom policy AWS-managed policy Customer-managed policy Inline policy
- You have developed a Lambda function, which is not running as performant as expected. Which of the fol- lowing approaches can improve the performance of your function?
(Choose 2)
Store environment variables outside the function.
Establish your database connections from within the Lambda execution environment to enable connection reuse.
Only include the libraries you need to minimize the size of your deployment package.
Inline policy
Establish your database connections from within the Lambda execution en- vironment to enable con- nection reuse.
Only include the libraries you need to minimize the size of your deployment package.
Package all dependencies with your deployment pack- age.
- You are working on an application for an online train- ing company that stores product data in DynamoDB.
Configure a DAX cluster and point the DynamoDB This week, the company is running a big promotion on API calls at the DAX cluster. a few courses, and this is bringing lots of new traffic to your website, causing an increased number of queries to the database. Database queries are now running much slower than usual, and the operations team is concerned that the DynamoDB table is being throttled. Which of the following approaches would you recom- mend to improve read performance?
Add a read replica and point the DynamoDB API calls at the read replica.
Configure a DAX cluster and point the DynamoDB API calls at the DAX cluster.
Redesign your table to use a more distinct partition key to enable the I/O load to be more evenly distributed across partitions.
Configure the application to use scans rather than queries and run multiple scans in parallel.
- You are storing user profile data for a mobile gaming application in a DynamoDB table. The product owner asks you to generate a list of all registered users that
You exceeded your maxi- mum allowed provisioned throughput for a table or are located in the USA. As you retrieve the information for one or more global from DynamoDB, you receive a ProvisionedThrough- secondary indexes.
- Your application is running on EC2 and on Linux virtual Install the X-Ray SDK and
machines in your own data center. You would like to configure your application to send data to X-Ray for troubleshooting and performance analysis. Which of the following steps will you need to complete?
Install the AWS SDK and the X-Ray CLI, then instrument your application to send data to X-Ray.
Install the AWS CLI, then instrument your application to send data to X-Ray.
Install the X-Ray daemon, then instrument your appli- cation to send data to X-Ray.
Install the X-Ray SDK and the X-Ray daemon, then in- strument your application to send data to X-Ray.
- You are developing a Java application that runs in Lambda. However, you are experiencing performance issues, particularly when the function initializes. In or- der to work properly, your application depends on a number of library files that are contained in the AWS SDK library. You need to find a way to reduce the deployment footprint so that you can decrease the time it takes for your function to complete the static initialization phase. Which of the following can you do to improve the performance of this function?
Add the libraries as a Lambda layer.
Cache the required libraries in /tmp.
the X-Ray daemon, then instrument your applica- tion to send data to X-Ray.
Only include the libraries that are necessary in or- der for the function to run, instead of the entire AWS SDK library.
Create a .zip file containing the deployment package to reduce its size.
Only include the libraries that are necessary in order for the function to run, instead of the entire AWS SDK library.
- You've created an online forum where your users can post questions and comments. The thread table has many users, and each user has many posts, each
A composite key with UserID as the partition key and timestamp as the sort marked by a timestamp. Which primary key configura- key. tion would be best suited to see all posts by a particular user in chronological order?
A composite key with UserID as the partition key and timestamp as the sort key.
A composite key with UserID as the range key and timestamp as the sort key.
A composite key with UserID as the sort key and time- stamp as the partition key.
A composite key with UserID as the sort key and time- stamp as the hash key.
- You are building a simple banking system using server- Synchronous Express
less technologies. The workflow to authorize a new bank account includes two Lambda functions: one that confirms the customer identity and another that con- firms the customer address. You want the system to be able to handle potential errors and retries for each task efficiently. You also want to minimize the over-
workflow
Which of the following is required in order to enable an Modify the function con- existing Lambda function to access EC2 instances that figuration, and choose the are located in a private VPC? correct subnets and secu- rity groups. Modify the function configuration, and choose the cor- rect subnets and security groups.
Configure the Lambda function's execution role to match the role applied to your EC2 instances.
Update the permissions in your VPC to allow Lambda to access the EC2 instances.
Configure the function policy to allow EC2 to invoke the function.
- You are working as a developer for an online retailer. Your security architect has requested that any files
Use a bucket policy that only allows PUT op- stored in S3 must be encrypted. However, some teams erations, which include are continuing to upload their files without encrypting the x-amz-server-side-en- them. Which of the following will ensure that only en- crypted data is uploaded?
Tell all team members to include the x-amz-encryption parameter in the request header.
Select the Encrypted Files Only checkbox in the S3 Per- missions tab in the AWS console.
Use a bucket policy that only allows PUT operations, which include the x-amz-server-side-encryption para- meter in the request header.
cryption parameter in the request header.
Create a bucket ACL that only allows PUT operations, which include the x-amz-encryption parameter in the request header.
- Your application runs on EC2 instances in an Auto Remove^ the^ commands Scaling group. During peak times, when the Auto Scal- that install the application, ing group attempts to launch new instances, you no- tice that the EC2 instances take too long to provi- sion because the UserData script is taking an unex- pectedly long time to complete. You have been asked by your manager to find a way to launch the EC instances faster so that new instances come online quickly during scale-out events. The solution that you
its dependencies, and the required security patches from the UserData script.
Create an AMI using EC Image Builder. The AMI should include the latest suggest must include the latest version of the applica- version of the^ application, tion code that is available and the latest security patch- as well as any^ application es through the UserData script. All images should be dependencies, and the re- validated before they are distributed to ensure that the quired security^ patches. AMI image boots successfully. Which of the following should you implement?
(Choose 2)
Remove the commands that install the application, its dependencies, and the required security patches from the UserData script.
Use CodeDeploy to deploy the appli
- A developer wants to use CodeBuild to set up contin- uous integration for their project. They would like to ensure the project is integrated with the latest code and that the DevOps team is automatically notified of a failure in the build process by receiving an SMS
Update the Auto Scaling group to use the AMI.
Store the source code in CodeCommit.
Use Amazon EventBridge (formerly called Amazon
