Study Smarter for the DVA-C01 Exam with Our Free and Reliable DVA-C01 Exam Questions – Updated for 2025.

At Cert Empire, we are dedicated to providing the most accurate and up-to-date exam questions for students preparing for the AWS DVA-C01 Exam. To make preparation easier, we’ve made parts of our DVA-C01 exam resources free for everyone. You can practice as much as you like with Free DVA-C01 Practice Test.

Get DVA-C01 Exam Dumps

Amazon DVA-C01 Free Exam Questions

Disclaimer

Please keep a note that the demo questions are not frequently updated. You may as well find them in open communities around the web. However, this demo is only to depict what sort of questions you may find in our original files.

Nonetheless, the premium exam dumps files are frequently updated and are based on the latest exam syllabus and real exam questions.

1 / 60

A developer is using AWS CodePipeline with S3 as the artifact store. The developer is receiving an error that states, "The S3 object cannot be found." What is the MOST likely cause?

The object has been deleted from the S3 bucket

The S3 bucket policy prevents access to the object

The S3 bucket is in a different region than the pipeline

The pipeline execution role lacks the necessary S3 permissions

2 / 60

A developer is using AWS X-Ray to trace the performance of a Lambda function. However, X-Ray traces are not showing up in the Lambda execution logs. What is the MOST likely cause?

X-Ray tracing is not enabled for the Lambda function

The Lambda function is not configured to use the execution role

The X-Ray SDK is missing from the Lambda function’s dependencies

X-Ray traces are only available for EC2 instances, not Lambda functions

3 / 60

A developer enables versioning on an S3 bucket. Later, a user accidentally deletes an important file. What is the BEST way to restore the file?

Contact AWS support to retrieve the file

Retrieve the deleted file from the version history

The file is permanently lost after deletion if no backup exists

Use the S3 versioning "restore" command to get the file back

4 / 60

You are using AWS Step Functions to invoke Lambda functions in a workflow. A task fails due to an occasional network issue. What is the MOST efficient way to automatically retry the task?

Increase the function's timeout setting

Manually invoke the function again after a failure

Use the Retry field in the Step Functions state machine definition

Use AWS CloudWatch Alarms to retry the task

5 / 60

A developer is experiencing performance issues with a MySQL database on Amazon RDS. After reviewing the database logs, the developer notices that the issue is related to long-running queries. What is the best way to improve performance?

Enable multi-AZ for the RDS instance

Increase the size of the RDS instance storage

Scale up the RDS instance to a larger instance type

Optimize the queries and indexes used by the database

6 / 60

A developer configures a Lambda function with a Dead Letter Queue (DLQ) to handle failed invocations. What happens when the Lambda function fails to process an event after multiple retries?

The function is retried indefinitely

The event is sent to the DLQ

The event is discarded, and no further action is taken

The Lambda function sends a notification to CloudWatch

7 / 60

A developer is deploying an application to EC2 instances using AWS CodeDeploy. The deployment fails with the error "ApplicationStop command returned an invalid exit code." What is the MOST likely cause?

The ApplicationStop script contains an error

The CodeDeploy agent is not installed on the EC2 instance

The AppSpec file is missing the ApplicationStop lifecycle event

The EC2 instance does not have the correct IAM role for CodeDeploy

8 / 60

A developer is troubleshooting an AWS Lambda function that is unable to access an S3 bucket. The Lambda function's execution role has the s3:GetObject permission for the bucket, but the function still cannot read from it. What is the MOST likely cause?

The S3 bucket policy explicitly denies access to the Lambda role

The Lambda function's IAM role is missing s3:ListBucket permission

The Lambda function is not correctly configured to use the execution role

The Lambda execution role does not have permission to write to the S3 bucket

9 / 60

A developer needs to integrate Amazon SNS with Amazon SQS. When a message is published to an SNS topic, the corresponding SQS queue is not receiving the message. What is the MOST likely cause?

The SNS topic is not subscribed to the SQS queue

The SQS queue is not set to the correct visibility timeout

The SQS queue has a policy preventing messages from SNS

The SNS topic is not configured to send messages as raw messages

10 / 60

A developer is deploying resources using AWS CloudFormation. The stack deployment fails, and no clear error message is provided. Which AWS service should the developer use to debug the issue?

AWS CloudTrail

AWS Lambda Logs

AWS CloudWatch Events

AWS CloudFormation Drift Detection

11 / 60

A developer created a global secondary index (GSI) on a DynamoDB table to query by emailAddress instead of userID. The developer notices that queries by emailAddress are consistently slower than expected. What is the MOST likely cause?

The GSI is incorrectly partitioned

The GSI uses a partition key with low cardinality

The GSI is not being updated when the table is updated

The developer did not specify eventual consistency for the GSI query

12 / 60

A developer is setting up an API Gateway to invoke a Lambda function with a custom authorizer. The Lambda function is invoked successfully, but authorization fails for some users. What could be the issue?

The custom authorizer Lambda function is not returning the correct IAM role

The custom authorizer is returning a missing or invalid token

The Lambda function's role does not allow it to be invoked by API Gateway

The API Gateway’s resource policy is not allowing the authorizer to invoke the function

13 / 60

A developer is using Amazon SQS to queue messages for processing by an AWS Lambda function. The developer notices that after a message is processed, it’s not removed from the queue. What is the MOST likely cause?

The message processing time exceeds the SQS visibility timeout

The SQS queue is configured to not allow Lambda to delete messages

The message batch size is set incorrectly in the Lambda function configuration

The Lambda function’s IAM role does not have permission to delete messages from the queue

14 / 60

A developer wants to securely store API keys in AWS Lambda and access them in the function code. The function needs to access these values without hardcoding them. What should the developer do?

Store API keys in the Lambda function's code as a constant

Use Lambda environment variables and encrypt them with KMS

Store the keys in a DynamoDB table and query it inside the function

Use an S3 bucket to store the keys and retrieve them within the function

15 / 60

A developer uses AWS Step Functions to orchestrate Lambda functions. One Lambda often fails due to transient issues. What's the MOST efficient way to handle this?

Use a Dead Letter Queue (DLQ) for failed Lambda executions

Add Retry field with exponential backoff in the Step Function definition

Use CloudWatch Alarms to monitor and restart the execution

Move the Lambda out of the Step Function and handle it manually

16 / 60

A developer uses AWS CodePipeline to deploy a Lambda function. However, the new code isn't reflected after a successful pipeline execution. What could be the reason?

The S3 bucket is not versioned

The Lambda function version was not published

The Lambda execution role lacks update permissions

The function's alias was not updated to point to the new version

17 / 60

You’re using Amazon API Gateway with a Lambda backend. Users report stale data being returned. Caching is enabled. What should you do to ensure fresh data is returned?

Configure shorter TTL for cache

Disable caching in API Gateway

Enable throttling to limit requests

Use Cache-Control: no-cache header in client requests

18 / 60

You configured an S3 bucket to trigger a Lambda function on PUT events. However, the function isn't executing. What is the MOST likely reason?

S3 doesn't support triggering Lambda functions

The S3 bucket policy does not allow Lambda to read objects

The Lambda function is not granted permission to be invoked by S3

The event notification configuration is missing the correct prefix or suffix filter

19 / 60

A developer created a policy to allow a Lambda function to publish to an SNS topic, but the function still fails with an "AccessDenied" error. Which is the MOST likely reason?

SNS is not supported by Lambda directly

The Lambda function is using an execution role with the wrong trust policy

The SNS topic policy does not allow access from the Lambda function's role

The IAM role is missing the sns:CreateTopic permission

20 / 60

A developer is building a highly available web application that reads and writes data to an Amazon DynamoDB table. Occasionally, the app reads stale data right after a write. Which solution minimizes the stale reads?

Use strongly consistent reads

Enable DynamoDB Accelerator (DAX)

Use DynamoDB Streams to sync data

Use eventual consistency with exponential backoff

21 / 60

A developer has deployed an AWS Lambda function that needs to access an RDS database within a private subnet of a VPC. The function throws a timeout error when trying to connect. What is the MOST likely cause?

The Lambda function is not configured to run within the VPC

The Lambda function's IAM role lacks permissions to access the RDS database

The RDS database is publicly accessible and cannot be accessed from private subnets

The Lambda function's security group allows inbound traffic from RDS but not outbound traffic

22 / 60

A developer is creating an application to process a large number of requests. Requests must be processed in order, and each request should be processed
only once.
How should Amazon SQS be deployed to achieve this?

Use an SQS FIFO queue to process requests

Use the SetOrder attribute to ensure sequential request processing

Convert the standard queue to a FIFO queue by renaming the queue to use the .fifo suffix

Configure First in First out (FIFO) delivery in a standard Amazon SQS queue to process requests

23 / 60

A developer is planning to use an Amazon API Gateway and AWS Lambda to provide a REST API. The developer will have three distinct
environments to manage: development, test, and production.
How should the application be deployed while minimizing the number of resources to manage?

Assign a Region for each environment and deploy API Gateway and Lambda to each Region

Create a separate API Gateway and separate Lambda function for each environment in the same Region

Create one API Gateway with multiple stages with one Lambda function with multiple aliases

Create one API Gateway and one Lambda function, and use a REST parameter to identify the environment

24 / 60

A developer wants to ensure the Amazon EC2 instances in AWS Elastic Beanstalk execute a certain set of commands before the application is ready to
use. Which Elastic Beanstalk feature will allow the developer to accomplish this?

User data

.ebextensions

Rolling update

Immutable update

25 / 60

A developer is building a WebSocket API using Amazon API Gateway. The payload sent to this API is JSON that includes an action key. This key can
have three different values: create, update, and remove. The developer must integrate with different routes based on the value of the action key of the
incoming JSON payload.
How can the developer accomplish this task with the LEAST amount of configuration?

Create a new route key and set the name as action

Set the value of the route selection expression to action

Set the value of the route selection expression to $request.body.action

Deploy the WebSocket API to three stages for the respective routes: create, update, and remove

26 / 60

An application takes longer than expected to process an Amazon SQS message.
What should the developer do to the application so that other instances do not pick up the same message?

Use SendMessage to pass the message to the dead letter queue

Issue a DeleteMessage call to delete the message from the queue

Send a ChangeMessageVisibility call to extend VisibilityTimeout

Make a ReceiveMessage call to get the same message again from the queue

27 / 60

How can a developer use a debugger for AWS Lambda code that is deployed with AWS Serverless Application Model (AWS SAM)?

Use the Lambda console to connect the debugger

Use AWS SAM to invoke a function locally in debug mode

Download the Lambda code locally and use the AWS CLI to execute it

Connect a third-party-compatible integrated development environment (IDE) to the Lambda debugger endpoint

28 / 60

A company is developing a serverless ecommerce web application. The application needs to make coordinated, all-or-nothing changes to multiple items
in the company's inventory table in Amazon Dy

Use the TransactWriteItems operation to group the changes. Update the items in the table

Enable transactions for the DynamoDB table. Use the BatchWriteItem operation to update the items

Set up a FIFO queue using Amazon SQS. Group the changes in the queue. Update the table based on the grouped changes

Create a transaction table in an Amazon Aurora DB cluster to manage the transactions. Write a backend process to sync the Aurora DB table and the DynamoDB tabl

29 / 60

An application running on multiple Amazon EC2 instances pulls messages from a standard Amazon SQS queue. A requirement for the application is that all messages must be encrypted at rest.
Developers are instructed to use methods that allow for centralized key management and minimize possible support requirements whenever possible. Which of the following solutions supports these requirements?

Create an SQS queue, and encrypt the queue by using client-side encryption

Create an SQS queue, and encrypt the queue by using server-side encryption with AWS KMS

Encrypt individual messages by using SQS Extended Client and the Amazon S3 encryption client

Encrypt individual messages by using client-side encryption with customer managed keys, then write to the SQS queue

30 / 60

An application contains two components: one component to handle HTTP requests, and another component to handle background processing tasks. Each
component must scale independently. The developer wants to deploy this application using AWS Elastic Beanstalk.
How should this application be deployed, based on these requirements?

Deploy each component in a separate Elastic Beanstalk environment

Deploy the application in a single Elastic Beanstalk environment

Use multiple Elastic Beanstalk environments for the background task component, but one environment for the HTTP component

Use multiple Elastic Beanstalk environments for the HTTP component, but one environment for the background task component

31 / 60

A developer tested an application locally and then deployed it to AWS Lambda. While testing the application remotely, the Lambda function fails with
an access denied message.
How can this issue be addressed?

Update the Lambda function's execution role to include the missing permissions

Update the Lambda function's resource policy to include the missing permissions

Redeploy the Lambda function using an account with access to the AdministratorAccess policy

Include an IAM policy document at the root of the deployment package and redeploy the Lambda function

32 / 60

A development team uses AWS Elastic Beanstalk to deploy a Java-based web application. The team wants to ensure that the changes to the source code
and the configuration are always deployed on new instances. The team configures the Elastic Beanstalk environment to use immutable updates.
However, an error occurs the first time a change is deployed with the new update policy.
What is the MOST likely cause of this issue?

The account has reached its on-demand instance limit

Immutable updates are not supported for Java-based applications

Immutable updates are only supported for m4.large and larger instance types

The developer must also modify the .ebextensions/immutable-updates.config file to enable immutable updates

33 / 60

Which of the following statements about SQS is true?

Messages will be delivered exactly once and message delivery order is indeterminate

Messages will be delivered exactly once and messages will be delivered in First in, First out order

Messages will be delivered one or more times and message delivery order is indeterminate

Messages will be delivered one or more times and messages will be delivered in First in, First out order

34 / 60

If an application is storing hourly log files from thousands of instances from a high traffic web site, which naming scheme would give optimal performance on S3?

Sequential

instanceID_log-HH-DD-MM-YYYY

HH-DD-MM-YYYY-log_instanceID

YYYY-MM-DD-HH-log_instanceID

35 / 60

What type of block cipher does Amazon S3 offer forserver side encryption?

RC5

Triple DES

Blowfish

Advanced Encryption Standard

36 / 60

When a Developer tries to run an AWS CodeBuild project, it raises an error because the length of all environment variables exceeds the limit for the combined maximum of characters.
What is the recommended solution?

Use Amazon Cognito to store key-value pairs for large numbers of environment variables

Use AWS Systems Manager Parameter Store to store large numbers of environment variables

Add the export LC_ALL=ג€en_US.utf8ג€ command to the pre_build section to ensure POSIX localization

Update the settings for the build project to use an Amazon S3 bucket for large numbers of environment variables

37 / 60

A company is providing services to many downstream consumers. Each consumer may connect to one or more services. This has resulted in a complex architecture that is difficult to manage and does not scale well. The company needs a single interface to manage these services to consumers.
Which AWS service should be used to refactor this architecture?

AWS X-Ray

AWS Lambda

Amazon SQS

Amazon API Gateway

38 / 60

A developer is writing an AWS Lambda function. The developer wants to log key events that occur during the Lambda function and include a unique identifier to associate the events with a specific function invocation.
Which of the following will help the developer accomplish this objective?

Obtain the request identifier from the Lambda event object. Architect the application to write logs to a file

Obtain the request identifier from the Lambda context object. Architect the application to write logs to a file

Obtain the request identifier from the Lambda context object. Architect the application to write logs to the console

Obtain the request identifier from the Lambda event object. Architect the application to write logs to the console

39 / 60

A developer creates a customer managed key for multiple AWS users to encrypt data in Amazon S3. The developer configures Amazon Simple Notification
Service (Amazon SNS) to publish a message if key deletion is scheduled. The developer needs to preserve any SNS messages that cannot be delivered so that those messages can be reprocessed.
Which AWS service or feature should the developer use to meet this requirement?

AWS Lambda

Amazon CloudWatch alarm

Amazon Simple Email Service (Amazon SES)

Amazon Simple Queue Service (Amazon SQS)

40 / 60

A company has point-of-sale devices across thousands of retail shops that synchronize sales transactions with a centralized system. The system includes an
Amazon API Gateway API that exposes an AWS Lambda function. The Lambda function processes the transactions and stores the transactions in Amazon RDS for MySQL. The number of transactions increases rapidly during the day and is near zero at night.
How can a developer increase the elasticity of the system MOST cost-effectively?

Migrate from Amazon RDS to Amazon Aurora MySQL. Use an Aurora Auto Scaling policy to scale road replicas based on CPU consumption

Migrate from Amazon RDS to Amazon Aurora MySQL. Use an Aurora Auto Scaling policy to scale read replicas based on the number of database connections

Create an Amazon Simple Queue Service (Amazon SQS) queue. Publish transactions to the queue. Set the queue to invoke the Lambda function. Turn on enhanced fanout for the Lambda function

Create an Amazon Simple Queue Service (Amazon SQS) queue. Publish transactions to the queue. Set the queue to invoke the Lambda function. Set the reserved concurrency of the Lambda function to be less than the number of database connections

41 / 60

A company that has multiple offices uses an Amazon DynamoDB table to store employee payroll information. Item attributes consist of employee names, office identifiers, and cumulative daily hours worked The most frequently used query extracts a report of an alphabetical subset of employees for a specific office.
Which design of the DynamoDB table primary key will have the MINIMUM performance impact?

Partition key on the office identifier

Partition key on the employee name

Partition key on the office identifier and sort key on the employee name

Partition key on the employee name and sort key on the office identifier

42 / 60

A developer has created a Java application that makes HTTP requests directly to AWS services. Application logging shows 5xx HTTP response codes that occur at irregular intervals. The errors are affecting users.
How should the developer update the application to improve the application's resiliency?

Add additional logging to the application code

Revise the request content in the application code

Use the AWS SDK for Java to interact with AWS APIs

Scale out the application so that more instances of the application are running

43 / 60

A developer is building an application that runs behind an Application Load Balancer (ALB). The ALB is configured as the origin for an Amazon CloudFront distribution. Users will log in to the application by using their social media accounts.
How can the developer authenticate users?

Configure the ALB to use Amazon Cognito as one of the authentication providers

Configure CloudFront to use Amazon Cognito as one of the authentication providers

Validate the users by inspecting the tokens in an AWS Lambda authorizer on the ALB

Validate the users by calling the Amazon Cognito API in an AWS Lambda authorizer on the ALB

44 / 60

A company experienced partial downtime during the last deployment of a new application. AWS Elastic Beanstalk split the environment's Amazon EC2 instances into batches and deployed a new version one batch at a time after taking them out of service. Therefore, full capacity was not maintained during deployment.
The developer plans to release a new version of the application, and is looking for a policy that will maintain full capacity and minimize the impact of the failed deployment.
Which deployment policy should the developer use?

Rolling

Immutable

Rolling with an Additional Batch

All at Once

45 / 60

A developer needs to use Amazon DynamoDB to store customer orders. The developer's company requires all customer data to be encrypted at rest with a key that the company generates.
What should the developer do to meet these requirements?

Store the key by using AWS Key Management Service (AWS KMS). Choose an AWS KMS customer managed key during creation of the DynamoDB table. Provide the Amazon Resource Name (ARN) of the AWS KMS key

Store the key by using AWS Key Management Service (AWS KMS). Choose an AWS KMS AWS managed key during creation of the DynamoDB table. Provide the Amazon Resource Name (ARN) of the AWS KMS key

Create the DynamoDB table with encryption set to None. Code the application to use the key to decrypt the data when the application reads from the table. Code the application to use the key to encrypt the data when the application writes to the table

Store the key by using AWS Key Management Service (AWS KMS). Create the DynamoDB table with default encryption. Include the kms:Encrypt parameter with the Amazon Resource Name (ARN) of the AWS KMS key when using the DynamoDB software development kit (SDK)

46 / 60

A development team has been using a builder server that is hosted on an Amazon EC2 instance to perform builds and deployments for the last 3 months. The
EC2 instance's instance profile uses an IAM role that contains the Administrator Access managed policy. The development team must replace that policy with a policy that provides only the required permissions.
What is the FASTEST way to create a custom 1AM policy for the EC2 instance to meet this requirement?

Create a new IAM policy based on services that the build server deployed or updated in the last 3 months

Create a new IAM policy that includes all actions that AWS CloudTrail recorded for the IAM role in the last 3 months

Create a new permissions boundary policy that denies all access. Associate the permissions boundaries with the IAM role

Create a new IAM policy by using Amazon Athena to query an Amazon S3 bucket that contains AWS CloudTrail events that the IAM role performed in the last 3 months

47 / 60

A developer is implementing user authentication and authorization for a web application that is hosted on an Amazon EC2 instance. The developer needs to ensure that the user credentials are encrypted and secure when they are stored and transmitted.
Which solution will meet these requirements?

Use Amazon Cognito to configure a user pool. Use the Amazon Cognito API to authenticate and authorize the users

Deploy a custom authentication and authorization API over HTTP. Store the user credentials on Amazon ElastiCache for Redis

Create IAM users. Assign the users to different IAM groups. Use AWS Single Sign-On to authenticate and authorize each user

Activate web server modules for authentication and authorization on the instance. Use HTTP basic authentication for the user login

48 / 60

A developer needs to deploy an application to AWS Elastic Beanstalk for a company. The application consists of a single Docker image. The company's automated continuous integration and continuous delivery (CI/CD) process builds the Docker image and pushes the image to a public Docker registry.
How should the developer deploy the application to Elastic Beanstalk?

Create a Dockerfile. Run the Elastic Beanstalk CLI eb local run command in the same directory

Create a Dockerfile. Configure Elastic Beanstalk to build the application as a Docker image

Create a docker-compose.yml file. Use the Elastic Beanstalk CLI to deploy the application

Create a .zip file that contains the Docker image. Upload the .zip file to Elastic Beanstalk

49 / 60

A company has an application that analyzes photographs. A developer is preparing the application for deployment to Amazon EC2 instances. The application's image analysis functions require a mix of GPU instances and CPU instances that run on Amazon Linux. The developer needs to add code to the application so that the functions can determine whether they are running on a GPU instance.
What should the functions do to obtain this information?

Call the DescribeElasticGpus API operation

Retrieve the instance type from the instance metadata

Evaluate the GPU AVAILABLE environment variable

Call the DescribeInstances API operation and filter on the current instance ID. Examine the ElasticGpuAssociations property

50 / 60

A developer is testing an AWS Lambda function by using the AWS Serverless Application Model (AWS SAM) local CLI. The application that is implemented by the
Lambda function makes several AWS API calls by using the AWS software development kit (SDK). The developer wants to allow the function to make AWS API calls in a test AWS account from the developer's laptop.
What should the developer do to meet these requirements?

Add a test profile by using the aws configure command with the --profile option. Run AWS SAM by using the sam local invoke command with the -profile option

Edit the template.yml tile. For the AWS::Serverless::Function resource, set the role to an IAM role in the AWS account

Edit the template.yml file. Add the AWS_ACCESS_KEY_ID property and the AWS_SECRET_ACCESS_KEY property in the Globals section

Run the function by using the sam local invoke command. Override the AWS_ACCESS_KEY_ID parameter and the AWS_SECRET_ACCESS_KEY parameter by specifying the --parameter-overrides option

51 / 60

A gaming website gives users the ability to trade game items with each other on the platform. The platform requires both users' records to be updated and persisted in one transaction. If any update fails, the transaction must roll back.
Which AWS solution can provide the transactional capability that is required for this feature?

Amazon Athena with operations made within a transaction block

Amazon Aurora MySQL with operations made within a transaction block

Amazon DynamoDB with reads and writes made by using Transact* operations

Amazon ElastiCache for Memcached with operations made within a transaction block

Amazon DynamoDB with operations made with the Consistent Read parameter set to true

52 / 60

A developer needs to write an AWS CloudFormation template on a local machine and deploy a CloudFormation stack to AWS.
What must the developer do to complete these tasks?

Install the AWS CLI. Configure the AWS CLI by using an SSH key

Install the AWS CLI. Configure the AWS CLI by using an IAM user name and password

Install the AWS CLI. Configure the AWS CLI by using an IAM user access key and secret key

Install an AWS software development kit (SDK). Configure the SDK by using an X.509 certificate

53 / 60

A company is adding items to an Amazon DynamoDB table from an AWS Lambda function that is written in Python. A developer needs to implement a solution that inserts records in the DynamoDB table and performs automatic retry when the insert fails.
Which solution meets these requirements with MINIMUM code changes?

Call the PutItem operation from Python by using the DynamoDB HTTP API

Queue the items in AWS Glue, which will put them into the DynamoDB table

Configure the Python code to run the AWS CLI through shell to call the PutItem operation

Use the AWS software development kit (SDK) for Python (boto3) to call the PutItem operation

54 / 60

A Development team decides to adopt a continuous integration/continuous delivery (CI/CD) process using AWS CodePipeline and AWS CodeCommit for a new application. However, management wants a person to review and approve the code before it is deployed to production.
How can the Development team add a manual approver to the CI/CD pipeline?

Add an approval step to CodeCommit. Commits will not be saved until approved

If approved, add an approved tag when pushing changes to the CodeCommit repository. CodePipeline will proceed to build and deploy approved commits without interruption

Add an approval action to the pipeline. Configure the approval action to publish to an Amazon SNS topic when approval is required. The pipeline execution will stop and wait for an approval

Use AWS SES to send an email to approvers when their action is required. Develop a simple application that allows approvers to accept or reject a build. Invoke an AWS Lambda function to advance the pipeline when a build is accepted

55 / 60

A company is using AWS CodeDeploy for all production deployments. A developer has an Amazon Elastic Container Service (Amazon ECS) application that uses the CodeDeployDefault.ECSAIIAtOnce configuration. The developer needs to update the production environment in increments of 10% until the entire production environment is updated.
Which CodeDeploy configuration should the developer use to meet these requirements?

CodeDeployDefault.ECSLinear10PercentEvery3Minutes

CodeDeployDefault.OneAtATime

CodeDeployDefault.ECSCanary10Percent5Minutes

CodeDeployDefault.LambdaCanary10Percent5Minutes

56 / 60

A developer is writing an AWS Lambda function. The Lambda function needs to access items that are stored in an Amazon DynamoDB table.
What is the MOST secure way to configure this access for the Lambda function?

Add a resource-based policy to the DynamoDB table to allow access from the Lambda function's IAM role

Create an IAM user that has permissions to access the DynamoDB table. Create an access key for this user. Store the access key ID and secret access key in the Lambda function environment variables

Create an IAM policy that allows access to the DynamoDB table. Attach this policy to the Lambda function's IAM role

Create a DynamoDB Accelerator (DAX) cluster. Configure the Lambda function to use the DAX duster to access the DynamoDB table

57 / 60

A company hosts a microservices application that uses Amazon API Gateway. AWS Lambda, Amazon Simple Queue Service (Amazon SQS), and Amazon
DynamoDB. One of the Lambda functions adds messages to an SQS FIFO queue.
When a developer checks the application logs, the developer finds a few duplicated items in a DynamoDB table. The items were inserted by another polling function that processes messages from the queue.
What is the MOST likely cause of this issue?

API Gateway duplicated the message in the SQS queue

Write operations on the DynamoDB table are being throttled

The SQS queue delivered the message to the function more than once

The polling function timeout is greater than the queue visibility timeout

58 / 60

A global company has a mobile app with static data stored in an Amazon S3 bucket in the us-east-1 Region. The company serves the content through an Amazon
CloudFront distribution. The company is launching the mobile app in South Africa. The data must reside in the af-south-1 Region. The company does not want to deploy a specific mobile client for South Africa.
What should the company do to meet these requirements?

Use the CloudFront geographic restriction feature to block access to users in South Africa

Include af-south-1 in the alternate domain name (CNAME) of the CloudFront distribution

Create a Lambda@Edge function. Associate the Lambda@Edge function as a viewer response trigger with the CloudFront distribution to change the S3 origin Region

Create a Lambda@Edge function. Associate the Lambda@Edge function as an origin request trigger with the CloudFront distribution to change the S3 origin Region

59 / 60

A developer is configuring an Amazon CloudFront distribution for a new application to provide encryption in transit. The application is running in the eu-west-1
Region. The developer creates a new certificate in AWS Certificate Manager (ACM) in eu-west-1, but the certificate is not visible in the CloudFront distribution settings.
What should the developer do to fix this problem?

Recreate the CloudFront distribution in the same Region as the certificate

Specify the ACM certificate name as the default root object of the CloudFront distribution

Create the certificate in the eu-west-1 Region. Ensure that the alternate domain name (CNAME) in the distribution settings matches the domain name in the certificate

Create the certificate for the domain in the same Region as the application. Ensure that the alternate domain name (CNAME) in the distribution settings matches the domain name in the certificate

60 / 60

A company has an application that uses Amazon Cognito user pools as an identity provider. The company must secure access to user records. The company has set up multi-factor authentication (MFA). The company also wants to send a login activity notification by email every time a user logs in.
What is the MOST operationally efficient solution that meets this requirement?

Configure Amazon Cognito to stream all logs to Amazon Kinesis Data Firehose. Create an AWS Lambda function to process the streamed logs and to send the email notification based on the login status of each user

Create an AWS Lambda function that uses Amazon Simple Email Service (Amazon SES) to send the email notification. Add an Amazon Cognito post authentication Lambda trigger for the function

Create an AWS Lambda function that uses Amazon Simple Email Service (Amazon SES) to send the email notification. Add an Amazon API Gateway API to invoke the function. Call the API from the client side when login confirmation is received

Create an AWS Lambda function that uses Amazon Simple Email Service (Amazon SES) to send the email notification. Create an Amazon CloudWatch Logs log subscription filter to invoke the function based on the login status

Your score is

The average score is 82%

By Wordpress Quiz plugin

Free DVA-C01 Practice Test – 2025 Updated

Study Smarter for the DVA-C01 Exam with Our Free and Reliable DVA-C01 Exam Questions – Updated for 2025.

Disclaimer

[email protected]

Helpful links

top Vendors

Contact Us

[email protected]

FLASH OFFER

avail $6 DISCOUNT on YOUR PURCHASE