WGU D321 AWS DEVELOPER DVA-C02
FINAL TEST 2026 QUESTIONS WITH
CORRECT ANSWERS GRADED A+
◍ A developer is creating an application that will give users the ability to store
photos from their cellphones in the cloud. The application needs to support
tens of thousands of users. The application uses an Amazon API Gateway
REST API that is integrated with AWS Lambda functions to process the
photos. The application stores details about the photos in Amazon
DynamoDB. Users need to create an account to access the application. In
the application, users must be able to upload photos and retrieve previously
uploaded photos. The photos will range in size from 300 KB to 5 MB.Which
solution will meet these requirements with the LEAST operational
overhead?.
Answer: Use Amazon Cognito user pools to manage user accounts. Create
an Amazon Cognito user pool authorizer in API Gateway to control access
to the API. Use the Lambda function to store the photos in Amazon S3.
Store the object's S3 key as part of the photo details in the DynamoDB table.
Retrieve previously uploaded photos by querying DynamoDB for the S3
key.
◍ Automated tests by using an AWS CodeBuild action in an AWS
CodePipeline test stage. The team wants to reduce the time necessary to run
the tests by conducting multiple tests in parallel..
Answer: CodeBuild can run test actions. A single CodePipeline stage can
run many CodeBuild actions in parallel.
◍ A developer is working on an application that will process files encrypted
with a data key generated from a KMS key. The application needs to
decrypt the files locally before it can proceed with the processing of the
, files.Which of the following are valid and secure steps in decrypting data?
(Select TWO.).
Answer: - Use the plaintext data key to decrypt data locally, then erase the
plaintext data key from memory.- Use the Decrypt operation to decrypt the
encrypted data key.
◍ A company is implementing an application on Amazon EC2 instances. The
application needs to process incoming transactions. When the application
detects a transaction that is not valid, the application must send a chat
message to the company's support team. To send the message, the
application needs to retrieve the access token to authenticate by using the
chat API. A developer needs to implement a solution to store the access
token. The access token must be encrypted at rest and in transit. The access
token must also be accessible from other AWS accounts.Which solution will
meet these requirements with the LEAST management overhead?.
Answer: Use an AWS Systems Manager Parameter Store SecureString
parameter that uses an AWS Key Management Service (AWS KMS) AWS
managed key to store the access token. Add a resource-based policy to the
parameter to allow access from other accounts. Update the IAM role of the
EC2 instances with permissions to access Parameter Store. Retrieve the
token from Parameter Store with the decrypt flag enabled. Use the decrypted
access token to send the message to the chat.
◍ busy online store and uses the order date as the partition key. During busy
periods writes to the table are being throttled despite the consumed
throughput being well below the provisioned throughput.According to AWS
best practices, how can the Developer resolve the issue at the LOWEST
cost?.
Answer: Add a random number suffix to the partition key values
◍ A critical application is hosted on AWS, exposed by an HTTP API through
Amazon API Gateway. The API is integrated with an AWS Lambda
function and the application data is housed in an Amazon RDS for
PostgreSQL DB instance, featuring 2 vCPUs and 16 GB of RAM.The
, company has been receiving customer complaints about occasional HTTP
500 Internal Server Error responses from some API calls during
unpredictable peak usage times. Amazon CloudWatch Logs has recorded
"connection limit exceeded" errors. The company wants to ensure resilience
in the application, with no unscheduled downtime for the database.Which
solution would best fit these requirements?.
Answer: Use Amazon RDS Proxy and update the Lambda function to
connect to the proxy
◍ A financial company must store original customer records for 10 years for
legal reasons. A complete record contains personally identifiable
information (PII). According to local regulations, PII is available to only
certain people in the company and must not be shared with third parties. The
company needs to make the records available to third-party organizations
for statistical analysis without sharing the PII. A developer wants to store
the original immutable record in Amazon S3. Depending on who accesses
the S3 document, the document should be returned as is or with all the PII
removed. The developer has written an AWS Lambda function to remove
the PII from the document. The function is named removePii.What should
the developer do so that the company can meet the PII requirements while
maintaining only one copy of the document?.
Answer: Create an S3 Object Lambda access point from the S3 console.
Select the removePii function. Use S3 Access Points to access the object
without PII.
◍ A programmer has designed an AWS Lambda function that retrieves
resources within a VPC. This Lambda function fetches new messages from
an Amazon SQS queue. It then computes a cumulative average of the
numerical data within the messages. After the initial Lambda function tests,
the programmer discovered the computed cumulative average was not
consistent.What should the programmer do to ascertain the accuracy of the
cumulative average computed by the function?.
Answer: Set the provisioned concurrency of the function to 1. Compute the
cumulative average within the function. Retain the computed cumulative
, average in Amazon ElastiCache
◍ A company is building a web application on AWS. When a customer sends
a request, the application will generate reports and then make the reports
available to the customer within one hour. Reports should be accessible to
the customer for 8 hours. Some reports are larger than 1 MB. Each report is
unique to the customer. The application should delete all reports that are
older than 2 days. Which solution will meet these requirements with the
LEAST operational overhead?.
Answer: Generate the reports and then store the reports in an Amazon S3
bucket that uses server- side encryption. Attach the reports to an Amazon
Simple Notification Service (Amazon SNS) message. Subscribe the
customer to email notifications from Amazon SNS.
◍ A developer has recently completed a new version of a serverless
application that is ready to be deployed using AWS SAM. There is a
requirement that the traffic should shift from the previous Lambda function
to the new version in the shortest time possible, but you still don’t want to
shift traffic all-at-once immediately.Which deployment configuration is the
MOST suitable one to use in this scenario?.
Answer: CodeDeployDefault.LambdaCanary10Percent5Minutes
◍ A tech company has a real-time traffic monitoring system which uses
Amazon Kinesis Data Stream to collect data and a group of EC2 instances
that consume and process the data stream. Your development team is
responsible for adjusting the number of shards in the data stream to adapt to
changes in the rate of data flow.Which of the following are correct regarding
Kinesis resharding which your team should consider in managing the
application? (Select TWO.).
Answer: - You can increase the stream's capacity by splitting shards.- You
can decrease the stream's capacity by merging shards.
◍ A Developer is writing code to run in a cron job on an Amazon EC2
instance that sends status information about the application to Amazon
CloudWatch.Which method should the Developer use?.
FINAL TEST 2026 QUESTIONS WITH
CORRECT ANSWERS GRADED A+
◍ A developer is creating an application that will give users the ability to store
photos from their cellphones in the cloud. The application needs to support
tens of thousands of users. The application uses an Amazon API Gateway
REST API that is integrated with AWS Lambda functions to process the
photos. The application stores details about the photos in Amazon
DynamoDB. Users need to create an account to access the application. In
the application, users must be able to upload photos and retrieve previously
uploaded photos. The photos will range in size from 300 KB to 5 MB.Which
solution will meet these requirements with the LEAST operational
overhead?.
Answer: Use Amazon Cognito user pools to manage user accounts. Create
an Amazon Cognito user pool authorizer in API Gateway to control access
to the API. Use the Lambda function to store the photos in Amazon S3.
Store the object's S3 key as part of the photo details in the DynamoDB table.
Retrieve previously uploaded photos by querying DynamoDB for the S3
key.
◍ Automated tests by using an AWS CodeBuild action in an AWS
CodePipeline test stage. The team wants to reduce the time necessary to run
the tests by conducting multiple tests in parallel..
Answer: CodeBuild can run test actions. A single CodePipeline stage can
run many CodeBuild actions in parallel.
◍ A developer is working on an application that will process files encrypted
with a data key generated from a KMS key. The application needs to
decrypt the files locally before it can proceed with the processing of the
, files.Which of the following are valid and secure steps in decrypting data?
(Select TWO.).
Answer: - Use the plaintext data key to decrypt data locally, then erase the
plaintext data key from memory.- Use the Decrypt operation to decrypt the
encrypted data key.
◍ A company is implementing an application on Amazon EC2 instances. The
application needs to process incoming transactions. When the application
detects a transaction that is not valid, the application must send a chat
message to the company's support team. To send the message, the
application needs to retrieve the access token to authenticate by using the
chat API. A developer needs to implement a solution to store the access
token. The access token must be encrypted at rest and in transit. The access
token must also be accessible from other AWS accounts.Which solution will
meet these requirements with the LEAST management overhead?.
Answer: Use an AWS Systems Manager Parameter Store SecureString
parameter that uses an AWS Key Management Service (AWS KMS) AWS
managed key to store the access token. Add a resource-based policy to the
parameter to allow access from other accounts. Update the IAM role of the
EC2 instances with permissions to access Parameter Store. Retrieve the
token from Parameter Store with the decrypt flag enabled. Use the decrypted
access token to send the message to the chat.
◍ busy online store and uses the order date as the partition key. During busy
periods writes to the table are being throttled despite the consumed
throughput being well below the provisioned throughput.According to AWS
best practices, how can the Developer resolve the issue at the LOWEST
cost?.
Answer: Add a random number suffix to the partition key values
◍ A critical application is hosted on AWS, exposed by an HTTP API through
Amazon API Gateway. The API is integrated with an AWS Lambda
function and the application data is housed in an Amazon RDS for
PostgreSQL DB instance, featuring 2 vCPUs and 16 GB of RAM.The
, company has been receiving customer complaints about occasional HTTP
500 Internal Server Error responses from some API calls during
unpredictable peak usage times. Amazon CloudWatch Logs has recorded
"connection limit exceeded" errors. The company wants to ensure resilience
in the application, with no unscheduled downtime for the database.Which
solution would best fit these requirements?.
Answer: Use Amazon RDS Proxy and update the Lambda function to
connect to the proxy
◍ A financial company must store original customer records for 10 years for
legal reasons. A complete record contains personally identifiable
information (PII). According to local regulations, PII is available to only
certain people in the company and must not be shared with third parties. The
company needs to make the records available to third-party organizations
for statistical analysis without sharing the PII. A developer wants to store
the original immutable record in Amazon S3. Depending on who accesses
the S3 document, the document should be returned as is or with all the PII
removed. The developer has written an AWS Lambda function to remove
the PII from the document. The function is named removePii.What should
the developer do so that the company can meet the PII requirements while
maintaining only one copy of the document?.
Answer: Create an S3 Object Lambda access point from the S3 console.
Select the removePii function. Use S3 Access Points to access the object
without PII.
◍ A programmer has designed an AWS Lambda function that retrieves
resources within a VPC. This Lambda function fetches new messages from
an Amazon SQS queue. It then computes a cumulative average of the
numerical data within the messages. After the initial Lambda function tests,
the programmer discovered the computed cumulative average was not
consistent.What should the programmer do to ascertain the accuracy of the
cumulative average computed by the function?.
Answer: Set the provisioned concurrency of the function to 1. Compute the
cumulative average within the function. Retain the computed cumulative
, average in Amazon ElastiCache
◍ A company is building a web application on AWS. When a customer sends
a request, the application will generate reports and then make the reports
available to the customer within one hour. Reports should be accessible to
the customer for 8 hours. Some reports are larger than 1 MB. Each report is
unique to the customer. The application should delete all reports that are
older than 2 days. Which solution will meet these requirements with the
LEAST operational overhead?.
Answer: Generate the reports and then store the reports in an Amazon S3
bucket that uses server- side encryption. Attach the reports to an Amazon
Simple Notification Service (Amazon SNS) message. Subscribe the
customer to email notifications from Amazon SNS.
◍ A developer has recently completed a new version of a serverless
application that is ready to be deployed using AWS SAM. There is a
requirement that the traffic should shift from the previous Lambda function
to the new version in the shortest time possible, but you still don’t want to
shift traffic all-at-once immediately.Which deployment configuration is the
MOST suitable one to use in this scenario?.
Answer: CodeDeployDefault.LambdaCanary10Percent5Minutes
◍ A tech company has a real-time traffic monitoring system which uses
Amazon Kinesis Data Stream to collect data and a group of EC2 instances
that consume and process the data stream. Your development team is
responsible for adjusting the number of shards in the data stream to adapt to
changes in the rate of data flow.Which of the following are correct regarding
Kinesis resharding which your team should consider in managing the
application? (Select TWO.).
Answer: - You can increase the stream's capacity by splitting shards.- You
can decrease the stream's capacity by merging shards.
◍ A Developer is writing code to run in a cron job on an Amazon EC2
instance that sends status information about the application to Amazon
CloudWatch.Which method should the Developer use?.
