🔍

DVA-C02 — questions

Page 25 of 28 · 557 total questions.

Topic 1 · Question 481

A large company has its application components distributed across multiple AWS accounts. The company needs to collect and visualize trace data across these accounts. What should be used to meet these requirements?

  • AAWS X-Ray (correct answer)
  • BAmazon CloudWatch
  • CAmazon VPC flow logs
  • DAmazon OpenSearch Service
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: AWS X-Ray

Explanation

AWS X-Ray traces requests to analyze and debug distributed applications.

Topic 1 · Question 482

A developer must cache dependent artifacts from Maven Central, a public package repository, as part of an application’s build pipeline. The build pipeline has an AWS CodeArtifact repository where artifacts of the build are published. The developer needs a solution that requires minimum changes to the build pipeline. Which solution meets these requirements?

  • AModify the existing CodeAriifact repository to associate an upstream repository with the public package repository. (correct answer)
  • BCreate a new CodeAtfact repository that has an external connection to the public package repository.
  • CCreate a new CodeAifact domain that contains a new repository that has an external connection to the public package repository.
  • DModify the CodeAnifact repository resource policy to allow artifacts to be fetched from the public package repository.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Modify the existing CodeAriifact repository to associate an upstream repository with the public package repository.

Topic 1 · Question 483

A developer is creating an AWS Step Functions state machine to handle an order processing workflow. When the state machine receives an order, the state machine pauses until the order has been confirmed. A record that is added to an Amazon DynamoDB table by another service confirms each order. The developer must complete the order processing workflow. Which solution will meet this requirement?

  • AUpdate the state machine to query the DynamoDB table by using the DynamoDB GetItem state to determine whether a record exists. If the record does exist, continue to the next state. If the record does not exist, wait 5 minutes and check again. (correct answer)
  • BSubscribe an AWS Lambda function to a DynamoDB table stream. Configure the Lambda function to run when a new record is added to the table. When the Lambda function receives the appropriate record, run the redrive execution command on the running state machine.
  • CSubscribe an AWS Lambda function to the DynamoDB table stream. Configure the Lambda function to run when a new record is added to the table. When the Lambda function receives the appropriate record, stop the current state machine invocation and start a new invocation.
  • DInvoke an AWS Lambda function from the state machine. Configure the Lambda function to continuously poll the DynamoDB table for the appropriate record and to return when a record exists. Continue the state machine invocation when the Lambda function returns. If the Lambda function times out, then fail the state machine.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Update the state machine to query the DynamoDB table by using the DynamoDB GetItem state to determine whether a record exists. If the record does exist, continue to the next state. If the record does not exist, wait 5...

Explanation

Amazon DynamoDB is a fully managed, serverless NoSQL database with single-digit millisecond latency and automatic scaling.

Topic 1 · Question 484

A developer is writing a web application that must share secure documents with end users. The documents are stored in a private Amazon S3 bucket. The application must allow only authenticated users to download specific documents when requested, and only for a duration of 15 minutes. How can the developer meet these requirements?

  • ACopy the documents to a separate S3 bucket that has a lifecycle policy for deletion after 15 minutes.
  • BCreate a presigned S3 URL using the AWS SDK with an expiration time of 15 minutes. (correct answer)
  • CUse server-side encryption with AWS KMS managed keys (SSE-KMS) and download the documents using HTTPS.
  • DModify the S3 bucket policy to only allow specific users to download the documents. Revert the change after 15 minutes.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create a presigned S3 URL using the AWS SDK with an expiration time of 15 minutes.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed.

Topic 1 · Question 485

A company is developing a set of AWS Lambda functions to process data. The Lambda functions need to use a common third-party library as a dependency. The library is frequently updated with new features and bug fixes. The company wants to ensure that the Lambda functions always use the latest version of the library. Which solution will meet these requirements in the MOST operationally efficient way?

  • AStore the dependency and the function code in an Amazon S3 bucket.
  • BCreate a Lambda layer that includes the library. Attach the layer to each Lambda function. (correct answer)
  • CInstall the dependency in an Amazon Elastic File System (Amazon EFS) file system. Attach the file system to each Lambda function.
  • DCreate a new Lambda function to load the library. Configure the existing Lambda functions to invoke the new Lambda function when the existing functions need to use the library.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create a Lambda layer that includes the library. Attach the layer to each Lambda function.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead.

Topic 1 · Question 486

A company’s application includes an Amazon DynamoDB table for product orders. The table has a primary partition key of orderId and has no sort key. The company is adding a new feature that requires the application to query the table by using the customerId attribute. Which solution will provide this query functionality?

  • AChange the existing primary key by setting customerId as the sort key.
  • BCreate a new global secondary index (GSI) on the table with a partition key of customerId. (correct answer)
  • CCreate a new local secondary index (LSI) on the table with a partition key of customerId.
  • DCreate a new local secondary index (LSI) on the table with a partition key of orderId and a sort key of customerId.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create a new global secondary index (GSI) on the table with a partition key of customerId.

Topic 1 · Question 487

A company hosts applications on premises. The on-premises servers generate audit logs that are available through an HTTP endpoint. The company needs an automated solution to regularly ingest and store large volumes of audit data from the on-premises servers. The company also needs to perform queries on the audit data. Which solution will meet these requirements in the MOST operationally efficient way?

  • AExport the audit logs. Upload the logs to Amazon S3. Import the logs to an Amazon RDS DB instance.
  • BCreate an AWS Lambda function to call the HTTP endpoint to fetch audit logs. Configure an Amazon EventBridge scheduled rule to invoke the Lambda function. Configure the Lambda function to push the logs to AWS CloudTrail Lake. (correct answer)
  • CUse AWS DataSync to transfer audit logs to an Amazon S3 bucket. Load the logs into an Amazon S3 bucket. Use Amazon Athena to query the bucket.
  • DInstall the Amazon CloudWatch agent on the on-premises servers. Give the agent the ability to push audit logs to CloudWatch. Use CloudWatch Insights to query the logs.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create an AWS Lambda function to call the HTTP endpoint to fetch audit logs. Configure an Amazon EventBridge scheduled rule to invoke the Lambda function. Configure the Lambda function to push the logs to AWS CloudTra...

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon EventBridge routes events between services with rules, enabling event-driven, decoupled architectures. AWS CloudTrail records API activity for auditing and governance.

Topic 1 · Question 488

A developer is building an application that includes an AWS Lambda function that is written in .NET Core. The Lambda function’s code needs to interact with Amazon DynamoDB tables and Amazon S3 buckets. The developer must minimize the Lambda function’s deployment time and invocation duration. Which solution will meet these requirements?

  • AIncrease the Lambda function’s memory.
  • BInclude the entire AWS SDK for .NET in the Lambda function’s deployment package.
  • CInclude only the AWS SDK for .NET modules for DynamoDB and Amazon S3 in the Lambda function’s deployment package. (correct answer)
  • DConfigure the Lambda function to download the AWS SDK for .NET from an S3 bucket at runtime.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Include only the AWS SDK for.NET modules for DynamoDB and Amazon S3 in the Lambda function’s deployment package.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon S3 provides durable, scalable object storage that is fully managed. Amazon DynamoDB is a fully managed, serverless NoSQL database with single-digit millisecond latency and automatic scaling.

Topic 1 · Question 489

A development team has an Amazon API Gateway REST API that is backed by an AWS Lambda function. Users have reported performance issues for the Lambda function. The development team identified the source of the issues as a cold start of the Lambda function. The development team needs to reduce the time needed for the Lambda function to initialize. Which solution will meet this requirement?

  • AChange the Lambda concurrency to reserved concurrency.
  • BIncrease the timeout of the Lambda function.
  • CIncrease the memory allocation of the Lambda function.
  • DConfigure provisioned concurrency for the Lambda function. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Configure provisioned concurrency for the Lambda function.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. AWS Config tracks resource configuration changes and evaluates compliance.

Topic 1 · Question 490

A video streaming company has a pipe in Amazon EventBridge Pipes that uses an Amazon Simple Queue Service (Amazon SQS) queue as an event source. The pipe publishes all source events to a target EventBridge event bus. Before events are published, the pipe uses an AWS Lambda function to retrieve the stream status of each event from a database and adds the stream status to each source event. The company wants the pipe to publish events to the event bus only if the video stream has a status of ready. Which solution will meet these requirements?

  • AAdd a filter step to the pipe that will match on a stream status of ready. (correct answer)
  • BUpdate the Lambda function to return only video streams that have a status of ready.
  • CInclude a filter for a status of ready in all EventBridge rules that subscribe to the event bus.
  • DAdd an input transformer to the pipe output that filters streams that have a status of ready.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Add a filter step to the pipe that will match on a stream status of ready. This option meets the real-time / low-latency performance requirement.

Topic 1 · Question 491

A developer needs to build a workflow to handle messages that are sent to an Amazon Simple Queue Service (Amazon SQS) queue. When a message reaches the queue, the workflow must implement a delay before invoking an AWS Lambda function to process the message. Which solution will meet this requirement in the MOST operationally efficient way?

  • ACreate an AWS Step Functions state machine to process the SQS queue. Use a Wait state to delay the Lambda function’s processing for the required number of seconds after message delivery to the SQS queue. Use Amazon EventBridge to invoke the state machine every 5 minutes.
  • BConfigure the Lambda function to poll the SQS queue. Update the Lambda code to republish each message with a custom attribute that contains a future time when the message should be fully processed. Update the Lambda code to fully process messages when the custom attribute’s future time has passed.
  • CSet the DelaySeconds value of the SQS queue to be the number of seconds required to delay delivery of the messages. Add an event source mapping for the Lambda function. Specify the SQS queue as a source. (correct answer)
  • DSet the Visibility Timeout value of the SQS queue to be the number of seconds required to delay delivery of the messages. Add an event source mapping for the Lambda function. Specify the SQS queue as a source.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Set the DelaySeconds value of the SQS queue to be the number of seconds required to delay delivery of the messages. Add an event source mapping for the Lambda function. Specify the SQS queue as a source.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon SQS is a fully managed message queue that decouples components and absorbs traffic spikes.

Topic 1 · Question 492

A company is building an application to accept data from customers. The data must be encrypted at rest and in transit. The application uses an Amazon API Gateway API that resolves to AWS Lambda functions. The Lambda functions store the data in an Amazon Aurora MySQL DB cluster. The application worked properly during testing. A developer configured an Amazon CloudFront distribution with field-level encryption that uses an AWS Key Management Service (AWS KMS) key. After the configuration of the distribution, the application behaved unexpectedly. All the data in the database changed from plaintext to ciphertext. The developer must ensure that the data is not stored in the database as the ciphertext from the CloudFront field-level encryption. Which solution will meet this requirement?

  • AChange the CloudFront Viewer protocol policy from “HTTP and HTTPS” to “HTTPS only.”
  • BAdd a Lambda function that uses the KMS key to decrypt the data fields before saving the data to the database. (correct answer)
  • CEnable encryption on the DB cluster by using the same KMS key that is used in CloudFront.
  • DRequest and deploy a new SSL certificate to use with the CloudFront distribution.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Add a Lambda function that uses the KMS key to decrypt the data fields before saving the data to the database.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

Topic 1 · Question 493

A company offers a business-to-business software service that runs on dedicated infrastructure deployed in each customer’s AWS account. Before a feature release, the company needs to run integration tests on real AWS test infrastructure. The test infrastructure consists of Amazon EC2 instances and an Amazon RDS database. A developer must set up a continuous delivery process that will provision the test infrastructure across the different AWS accounts. The developer then must run the integration tests. Which solution will meet these requirements with the LEAST administrative effort?

  • AUse AWS CodeDeploy with AWS CloudFormation StackSets to deploy the infrastructure. Use Amazon CodeGuru to run the tests.
  • BUse AWS CodePipeline with AWS CloudFormation StackSets to deploy the infrastructure. Use AWS CodeBuild to run the tests. (correct answer)
  • CUse AWS CodePipeline with AWS CloudFormation change sets to deploy the infrastructure. Use a CloudFormation custom resource to run the tests.
  • DUse AWS Serverless Application Model (AWS SAM) templates with AWS CloudFormation change sets to deploy the infrastructure. Use AWS CodeDeploy to run the tests.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use AWS CodePipeline with AWS CloudFormation StackSets to deploy the infrastructure. Use AWS CodeBuild to run the tests.

Explanation

AWS CloudFormation provisions infrastructure as code repeatably. AWS CodePipeline automates continuous delivery pipelines. AWS CodeBuild compiles, tests and packages code in a managed build service.

Topic 1 · Question 494 · Select all that apply

A developer is creating an application that uses an AWS Lambda function to transform and load data from an Amazon S3 bucket. When the developer tests the application, the developer finds that some invocations of the Lambda function are slower than others. The developer needs to update the Lambda function to have predictable invocation durations that run with low latency. Any initialization activities, such as loading libraries and instantiating clients, must run during allocation time rather than during actual function invocations. Which combination of steps will meet these requirements? (Choose two.)

  • ACreate a schedule group in Amazon EventBridge Scheduler to invoke the Lambda function.
  • BConfigure provisioned concurrency for the Lambda function to have the necessary number of execution environments. (correct answer)
  • CUse the $LATEST version of the Lambda function.
  • DConfigure reserved concurrency for the Lambda function to have the necessary number of execution environments.
  • EDeploy changes, and publish a new version of the Lambda function. (correct answer)
Reveal answer & explanation
Correct answer: B, E

The correct answer is B, E. Option B: Configure provisioned concurrency for the Lambda function to have the necessary number of execution environments. Option E: Deploy changes, and publish a new version of the Lambda function.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. AWS Config tracks resource configuration changes and evaluates compliance. This option meets the real-time / low-latency performance requirement.

Topic 1 · Question 495

A developer created an AWS Lambda function named ProcessMessages. The Lambda function is invoked asynchronously when a message is published to an Amazon Simple Notification Service (Amazon SNS) topic named InputTopic. The developer uses a second SNS topic named ErrorTopic to handle alerts of failures for other services. The developer wants to receive notifications from the ErrorTopic SNS topic when the ProcessMessages Lambda function fails to process a message. Which solution will meet this requirement?

  • AConfigure a subscription for the ErrorTopic SNS topic. Configure a filter policy for failures. Specify the ProcessMessages Lambda function as the endpoint.
  • BConfigure a failure destination for the ProcessMessages Lambda function. Specify the Amazon Resource Name (ARN) of the ErrorTopic SNS topic as the destination ARN. (correct answer)
  • CConfigure a trigger for the ProcessMessages Lambda function. Specify the ErrorTopic SNS topic as the trigger topic. Configure a filter policy on the topic for failures
  • DConfigure a delivery policy on the ErrorTopic SNS topic. Configure a filter policy for failures. Specify the Lambda function as the input endpoint.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Configure a failure destination for the ProcessMessages Lambda function. Specify the Amazon Resource Name (ARN) of the ErrorTopic SNS topic as the destination ARN.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers. AWS Config tracks resource configuration changes and evaluates compliance. This option decouples the components so they scale independently and absorb load spikes.

Topic 1 · Question 496

A company is developing a new application that uses Amazon EC2, Amazon S3, and AWS Lambda resources. The company wants to allow employees to access the AWS Management Console by using existing credentials that the company stores and manages in an on-premises Microsoft Active Directory. Each employee must have a specific level of access to the AWS resources that is based on the employee’s role. Which solution will meet these requirements with the LEAST operational overhead?

  • AConfigure AWS Directory Service to create an Active Directory in AWS Directory Service for Microsoft Active Directory. Establish a trust relationship with the on-premises Active Directory. Configure IAM roles and trust policies to give the employees access to the AWS resources. (correct answer)
  • BUse LDAP to directly integrate the on-premises Active Directory with AWS Identity and Access Management (IAM). Map Active Directory groups to IAM roles to control access to AWS resources.
  • CImplement a custom identity broker to authenticate users into the on-premises Active Directory. Configure the identity broker to use AWS Security Token Service (AWS STS) to grant authorized users IAM role based access to the AWS resources.
  • DConfigure Amazon Cognito to federate users into the on-premises Active Directory. Use Cognito user pools to manage user identities and to manage user access to the AWS resources.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Configure AWS Directory Service to create an Active Directory in AWS Directory Service for Microsoft Active Directory. Establish a trust relationship with the on-premises Active Directory. Configure IAM roles and trus...

Explanation

An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies. AWS Directory Service provides managed Microsoft Active Directory in the cloud.

Topic 1 · Question 497

A company has an Amazon DynamoDB table that contains records of users that have signed up for a trial of the company’s product. The company is using a spreadsheet to track data about the product trial. The company needs to ensure the spreadsheet is automatically updated with the latest information when individual trials begin, are updated, or finish. Which solution will meet these requirements?

  • ACreate a DynamoDB Accelerator (DAX) cluster from the table. Set the view type to old image. Create an AWS Lambda function that uses the cluster data to update the spreadsheet. Subscribe the Lambda function to the cluster.
  • BCreate a DynamoDB Accelerator (DAX) cluster from the table. Set the view type to new image. Create an AWS Lambda function that uses the cluster data to update the spreadsheet. Subscribe the Lambda function to the cluster.
  • CEnable a DynamoDB stream for the table. Set the view type to new image. Create an AWS Lambda function that uses the stream data to update the spreadsheet. Subscribe the Lambda function to the stream. (correct answer)
  • DEnable a DynamoDB stream for the table. Set the view type to old image. Create an AWS Lambda function that uses the stream data to update the spreadsheet. Subscribe the Lambda function to the stream.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Enable a DynamoDB stream for the table. Set the view type to new image. Create an AWS Lambda function that uses the stream data to update the spreadsheet. Subscribe the Lambda function to the stream.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon DynamoDB is a fully managed, serverless NoSQL database with single-digit millisecond latency and automatic scaling.

Topic 1 · Question 498

A developer is launching a global application that delivers content to multiple countries. The developer needs to serve specific content based on the country of each user and each user’s primary language. The developer must ensure that content is served reliably and with low latency. Which solution will meet these requirements?

  • ACreate an Amazon API Gateway REST API. Create an AWS Global Accelerator standard accelerator to resolve requests to the API. Configure endpoint groups on the accelerator. Attach listeners for each country and language.
  • BStore the content in a centralized Amazon S3 bucket. Enable S3 Transfer Acceleration on the bucket. Create an Amazon Route 53 hosted zone that includes the endpoint for the S3 bucket. Create records in Route 53 that use geoproximity and geolocation routing policies.
  • CCreate an Amazon API Gateway REST API. Connect the REST API to AWS WAF. Use geo match statements and regex match statements to allow or deny requests based on the labels returned from web request evaluations.
  • DConfigure an Amazon CloudFront distribution that uses the application as an origin. Configure the distribution to forward the Accept-Language header and the CloudFront-Viewer-Country header to the origin. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Configure an Amazon CloudFront distribution that uses the application as an origin. Configure the distribution to forward the Accept-Language header and the CloudFront-Viewer-Country header to the origin.

Explanation

Amazon CloudFront caches content at edge locations to reduce latency and offload origins. AWS Config tracks resource configuration changes and evaluates compliance. This option meets the real-time / low-latency performance requirement.

Topic 1 · Question 499

A company generates SSL certificates from a third-party provider. The company imports the certificates into AWS Certificate Manager (ACM) to use with public web applications. A developer must implement a solution to notify the company’s security team 90 days before an imported certificate expires. The company already has configured an Amazon Simple Queue Service (Amazon SQS) queue. The company also has configured an Amazon Simple Notification Service (Amazon SNS) topic that has the security team’s email address as a subscriber. Which solution will provide the security team with the required notification about certificates?

  • ACreate an Amazon EventBridge rule that specifies the ACM Certificate Approaching Expiration event type. Set the SNS topic as the EventBridge rule’s target. (correct answer)
  • BCreate an AWS Lambda function to search for all certificates that are expiring within 90 days. Program the Lambda function to send each identified certificate’s Amazon Resource Name (ARN) in a message to the SQS queue.
  • CCreate an AWS Step Functions workflow that is invoked by each certificate’s expiration notification from AWS CloudTrail. Create an AWS Lambda function to send each certificate's Amazon Resource Name (ARN) in a message to the SQS queue.
  • DConfigure AWS Config with the acm-certificate-expiration-check managed rule to run every 24 hours. Create an Amazon EventBridge rule that includes an event pattern that specifies the Config Rules Compliance Change detail type and the configured rule. Set the SNS topic as the EventBridge rule’s target.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create an Amazon EventBridge rule that specifies the ACM Certificate Approaching Expiration event type. Set the SNS topic as the EventBridge rule’s target.

Explanation

Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers. Amazon EventBridge routes events between services with rules, enabling event-driven, decoupled architectures. AWS Certificate Manager provisions and renews TLS certificates automatically.

Topic 1 · Question 500

A company has an Amazon DynamoDB table that contains records of users that have signed up for a trial of the company’s product. The company is using a spreadsheet to track data about the product trial. The company needs to ensure the spreadsheet is automatically updated with the latest information when individual trials begin, are updated, or finish. Which solution will meet these requirements?

  • ACreate a DynamoDB Accelerator (DAX) cluster from the table. Set the view type to old image. Create an AWS Lambda function that uses the cluster data to update the spreadsheet. Subscribe the Lambda function to the cluster.
  • BCreate a DynamoDB Accelerator (DAX) cluster from the table. Set the view type to new image. Create an AWS Lambda function that uses the cluster data to update the spreadsheet. Subscribe the Lambda function to the cluster.
  • CEnable a DynamoDB stream for the table. Set the view type to new image. Create an AWS Lambda function that uses the stream data to update the spreadsheet. Subscribe the Lambda function to the stream. (correct answer)
  • DEnable a DynamoDB stream for the table. Set the view type to old image. Create an AWS Lambda function that uses the stream data to update the spreadsheet. Subscribe the Lambda function to the stream.
Reveal answer & explanation
Correct answer: C

The correct answer is C.

Showing questions 481500 of 557 · Page 25 of 28