🔍

DVA-C02 — questions

Page 27 of 28 · 557 total questions.

DVA-C02 Question 521

Single page →
Topic 1 · Question 521 · Select all that apply

A development team is designing a mobile app that requires multi-factor authentication. Which steps should be taken to achieve this? (Choose two.)

  • AUse Amazon Cognito to create a user pool and create users in the user pool. (correct answer)
  • BSend multi-factor authentication text codes to users with the Amazon SNS Publish API call in the app code.
  • CEnable multi-factor authentication for the Amazon Cognito user pool. (correct answer)
  • DUse AWS IAM to create IAM users.
  • EEnable multifactor authentication for the users created in AWS IAM.
Reveal answer & explanation
Correct answer: A, C

The correct answer is A, C. Option A: Use Amazon Cognito to create a user pool and create users in the user pool. Option C: Enable multi-factor authentication for the Amazon Cognito user pool.

Explanation

Amazon Cognito manages user sign-up, sign-in and federated identity for applications.

DVA-C02 Question 522

Single page →
Topic 1 · Question 522 · Select all that apply

A developer is building an application that will process messages from an Amazon Simple Queue Service (Amazon SQS) standard queue. The application needs to process the messages in an Amazon Elastic Container Service (Amazon ECS) task. Which actions will result in the MOST cost-effective processing of the messages? (Choose two.)

  • AUse long polling to query the queue for new messages. (correct answer)
  • BUse short polling to query the queue for new messages.
  • CUse message batching to retrieve messages from the queue. (correct answer)
  • DUse Amazon ElastiCache to cache messages in the queue.
  • EUse an SQS FIFO queue to manage the messages.
Reveal answer & explanation
Correct answer: A, C

The correct answer is A, C. Option A: Use long polling to query the queue for new messages. Option C: Use message batching to retrieve messages from the queue.

Explanation

AWS Batch schedules and runs batch computing jobs at any scale without managing clusters. This option delivers the requirement at the lowest cost.

DVA-C02 Question 523

Single page →
Topic 1 · Question 523

A developer is writing an application in AWS Lambda. To simplify testing and deployments, the developer needs the database connection string to be easily changed without modifying the Lambda code. How can this requirement be met?

  • AStore the connection string as a secret in AWS Secrets Manager. (correct answer)
  • BStore the connection string in an IAM user account.
  • CStore the connection string in AWS KMS.
  • DStore the connection string as a Lambda layer.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Store the connection string as a secret in AWS Secrets Manager.

Explanation

AWS Secrets Manager stores and automatically rotates secrets such as database credentials. This option needs the least custom development effort.

DVA-C02 Question 524

Single page →
Topic 1 · Question 524

A developer is building an ecommerce application that uses multiple AWS Lambda functions. Each function performs a specific step in a customer order workflow, such as order processing and inventory management. The developer must ensure that the Lambda functions run in a specific order. Which solution will meet this requirement with the LEAST operational overhead?

  • AConfigure an Amazon Simple Queue Service (Amazon SQS) queue to contain messages about each step a function must perform. Configure the Lambda functions to run sequentially based on the order of messages in the SQS queue.
  • BConfigure an Amazon Simple Notification Service (Amazon SNS) topic to contain notifications about each step a function must perform. Subscribe the Lambda functions to the SNS topic. Use subscription filters based on the step each function must perform.
  • CConfigure an AWS Step Functions state machine to invoke the Lambda functions in a specific order. (correct answer)
  • DConfigure Amazon EventBridge Scheduler schedules to invoke the Lambda functions in a specific order.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Configure an AWS Step Functions state machine to invoke the Lambda functions in a specific order.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. AWS Step Functions coordinates multi-step workflows as a managed state machine. AWS Config tracks resource configuration changes and evaluates compliance.

DVA-C02 Question 525

Single page →
Topic 1 · Question 525

A developer has an application container, an AWS Lambda function, and an Amazon Simple Queue Service (Amazon SQS) queue. The Lambda function uses the SQS queue as an event source. The Lambda function makes a call to a third-party machine learning API when the function is invoked. The response from the third-party API can take up to 60 seconds to return. The Lambda function's timeout value is currently 65 seconds. The developer has noticed that the Lambda function sometimes processes duplicate messages from the SQS queue. What should the developer do to ensure that the Lambda function does not process duplicate messages?

  • AConfigure the Lambda function with a larger amount of memory.
  • BConfigure an increase in the Lambda function’s timeout value.
  • CConfigure the SQS queue’s delivery delay value to be greater than the maximum time it takes to call the third-party API.
  • DConfigure the SQS queue’s visibility timeout value to be greater than the maximum time it takes to call the third-party API. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Configure the SQS queue’s visibility timeout value to be greater than the maximum time it takes to call the third-party API.

Explanation

Amazon SQS is a fully managed message queue that decouples components and absorbs traffic spikes. AWS Config tracks resource configuration changes and evaluates compliance.

DVA-C02 Question 526

Single page →
Topic 1 · Question 526

A company has an application that runs on Amazon EC2 instances. The application needs to use dynamic feature flags that will be shared with other applications. The application must poll on an interval for new feature flag values. The values must be cached when they are retrieved. Which solution will meet these requirements in the MOST operationally efficient way?

  • AStore the feature flag values in AWS Secrets Manager. Configure an Amazon ElastiCache node to cache the values by using a lazy loading strategy in the application. Update the application to poll for the values on an interval from ElastiCache.
  • BStore the feature flag values in an Amazon DynamoDB table. Configure DynamoDB Accelerator (DAX) to cache the values by using a lazy loading strategy in the application. Update the application to poll for the values on an interval from DynamoDB. (correct answer)
  • CStore the feature flag values in AWS AppConfig. Configure AWS AppConfig Agent on the EC2 instances to poll for the values on an interval. Update the application to retrieve the values from the AppConfig Agent localhost endpoint.
  • DStore the feature flag values in AWS Systems Manager Parameter Store. Configure the application to poll on an interval. Configure the application to use the AWS SDK to retrieve the values from Parameter Store and to store the values in memory.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Store the feature flag values in an Amazon DynamoDB table. Configure DynamoDB Accelerator (DAX) to cache the values by using a lazy loading strategy in the application. Update the application to poll for the values on...

Explanation

Amazon DynamoDB is a fully managed, serverless NoSQL database with single-digit millisecond latency and automatic scaling. DynamoDB Accelerator (DAX) adds an in-memory cache for microsecond DynamoDB reads. AWS Config tracks resource configuration changes and evaluates compliance.

DVA-C02 Question 527

Single page →
Topic 1 · Question 527

A team deploys an AWS CloudFormation template to update a stack that already included an Amazon DynamoDB table. However, before the deployment of the update, the team changed the name of the DynamoDB table on the template by mistake. The DeletionPolicy attribute for all resources has the default value. What will be the result of this mistake?

  • ACloudFormation will create a new table and will delete the existing table. (correct answer)
  • BCloudFormation will create a new table and will keep the existing table.
  • CCloudFormation will overwrite the existing table and will rename the existing table.
  • DCloudFormation will keep the existing table and will not create a new table.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: CloudFormation will create a new table and will delete the existing table.

Explanation

AWS CloudFormation provisions infrastructure as code repeatably.

DVA-C02 Question 528

Single page →
Topic 1 · Question 528

A developer is deploying an application on an Amazon Elastic Container Service (Amazon ECS) cluster that uses AWS Fargate. The developer is using a Docker container with an Ubuntu image. The developer needs to implement a solution to store application data that is available from multiple ECS tasks. The application data must remain accessible after the container is terminated. Which solution will meet these requirements?

  • AAttach an Amazon FSx for Windows File Server volume to the container definition.
  • BSpecify the DockerVolumeConfiguration parameter in the ECS task definition to attach a Docker volume.
  • CCreate an Amazon Elastic File System (Amazon EFS) file system. Specify the mountPoints attribute and the efsVolumeConfiguration attribute in the ECS task definition. (correct answer)
  • DCreate an Amazon Elastic Block Store (Amazon EBS) volume. Specify the mount point configuration in the ECS task definition.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create an Amazon Elastic File System (Amazon EFS) file system. Specify the mountPoints attribute and the efsVolumeConfiguration attribute in the ECS task definition.

Explanation

Amazon ECS orchestrates containers and integrates natively with AWS networking and IAM. Amazon EFS is a shared, elastic NFS file system that multiple instances can mount concurrently across AZs. AWS Config tracks resource configuration changes and evaluates compliance.

DVA-C02 Question 529

Single page →
Topic 1 · Question 529

A developer is creating an AWS Lambda function that needs network access to private resources in a VPC. Which solution will provide this access with the LEAST operational overhead?

  • AAttach the Lambda function to the VPC through private subnets. Create a security group that allows network access to the private resources. Associate the security group with the Lambda function. (correct answer)
  • BConfigure the Lambda function to route traffic through a VPN connection. Create a security group that allows network access to the private resources. Associate the security group with the Lambda function.
  • CConfigure a VPC endpoint connection for the Lambda function. Set up the VPC endpoint to route traffic through a NAT gateway.
  • DConfigure an AWS PrivateLink endpoint for the private resources. Configure the Lambda function to reference the PrivateLink endpoint.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Attach the Lambda function to the VPC through private subnets. Create a security group that allows network access to the private resources. Associate the security group with the Lambda function.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead.

DVA-C02 Question 530

Single page →
Topic 1 · Question 530

A developer needs to automate deployments for a serverless, event-based workload. The developer needs to create standardized templates to define the infrastructure and to test the functionality of the workload locally before deployment The developer already uses a pipeline in AWS CodePipeline. The developer needs to incorporate any other infrastructure changes into the existing pipeline. Which solution will meet these requirements?

  • ACreate an AWS Serverless Application Model (AWS SAM) template. Configure the pipeline stages in CodePipeline to run the necessary AWS SAM CLI commands to deploy the serverless workload. (correct answer)
  • BCreate an AWS Step Functions workflow template based on the infrastructure by using the Amazon States Language. Start the Step Functions state machine from the existing pipeline.
  • CCreate an AWS CloudFormation template. Use the existing pipeline workflow to build a pipeline for AWS CloudFormation stacks.
  • DCreate an AWS Serverless Application Model (AWS SAM) template. Use an automated script to deploy the serverless workload by using the AWS SAM CLI deploy command.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create an AWS Serverless Application Model (AWS SAM) template. Configure the pipeline stages in CodePipeline to run the necessary AWS SAM CLI commands to deploy the serverless workload.

Explanation

AWS Config tracks resource configuration changes and evaluates compliance. AWS CodePipeline automates continuous delivery pipelines.

DVA-C02 Question 531

Single page →
Topic 1 · Question 531

A developer is creating a stock trading application. The developer needs a solution to send text messages to application users to confirmation when a trade has been completed. The solution must deliver messages in the order a user makes stock trades. The solution must not send duplicate messages. Which solution will meet these requirements?

  • AConfigure the application to publish messages to an Amazon Data Firehose delivery stream. Configure the delivery stream to have a destination of each user’s mobile phone number that is passed in the trade confirmation message.
  • BCreate an Amazon Simple Queue Service (Amazon SQS) FIFO queue. Use the SendMessageIn API call to send the trade confirmation messages to the queue. Use the SendMessageOut API to send the messages to users by using the information provided in the trade confirmation message.
  • CConfigure a pipe in Amazon EventBridge Pipes. Connect the application to the pipe as a source. Configure the pipe to use each user’s mobile phone number as a target. Configure the pipe to send incoming events to the users.
  • DCreate an Amazon Simple Notification Service (SNS) FIFO topic. Configure the application to use the AWS SDK to publish notifications to the SNS topic to send SMS messages to the users. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Create an Amazon Simple Notification Service (SNS) FIFO topic. Configure the application to use the AWS SDK to publish notifications to the SNS topic to send SMS messages to the users.

Explanation

Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers. AWS Config tracks resource configuration changes and evaluates compliance.

DVA-C02 Question 532

Single page →
Topic 1 · Question 532

A developer is deploying a new Node.js AWS Lambda function that is not connected to a VPC. The Lambda function needs to connect to and query an Amazon Aurora database that is not publicly accessible. The developer is expecting unpredictable surges in database traffic. What should the developer do to give the Lambda function access to the database?

  • AConfigure the Lambda function to use an Amazon RDS proxy. (correct answer)
  • BConfigure a NAT gateway. Attach the NAT gateway to the Lambda function.
  • CEnable public access on the Aurora database. Configure a security group on the database to allow outbound access for the database engine’s port.
  • DEnable VPC access for the Lambda function. Attach the Lambda function to a new security group that does not have rules.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Configure the Lambda function to use an Amazon RDS proxy.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon RDS Proxy pools and shares database connections to improve scalability and resilience. Amazon RDS is a managed relational database that handles patching, backups and failover.

DVA-C02 Question 533

Single page →
Topic 1 · Question 533

A company generates SSL certificates from a third-party provider. The company imports the certificates into AWS Certificate Manager (ACM) to use with public web applications. A developer must implement a solution to notify the company’s security team 90 days before an imported certificate expires. The company already has configured an Amazon Simple Queue Service (Amazon SQS) queue. The company also has configured an Amazon Simple Notification Service (Amazon SNS) topic that has the security team’s email address as a subscriber. Which solution will provide the security team with the required notification about certificates?

  • ACreate an Amazon EventBridge rule that specifies the ACM Certificate Approaching Expiration event type. Set the SNS topic as the EventBridge rule’s target.
  • BCreate an AWS Lambda function to search for all certificates that are expiring within 90 days. Program the Lambda function to send each identified certificate’s Amazon Resource Name (ARN) in a message to the SQS queue.
  • CCreate an AWS Step Functions workflow that is invoked by each certificate’s expiration notification from AWS CloudTrail. Create an AWS Lambda function to send each certificate's Amazon Resource Name (ARN) in a message to the SQS queue.
  • DConfigure AWS Config with the acm-certificate-expiration-check managed rule to run every 24 hours. Create an Amazon EventBridge rule that includes an event pattern that specifies the Config Rules Compliance Change detail type and the configured rule. Set the SNS topic as the EventBridge rule’s target. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Configure AWS Config with the acm-certificate-expiration-check managed rule to run every 24 hours. Create an Amazon EventBridge rule that includes an event pattern that specifies the Config Rules Compliance Change det...

Explanation

Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers. Amazon EventBridge routes events between services with rules, enabling event-driven, decoupled architectures. AWS Certificate Manager provisions and renews TLS certificates automatically.

DVA-C02 Question 534

Single page →
Topic 1 · Question 534

A company uses two AWS accounts: production and development. The company stores data in an Amazon S3 bucket that is in the production account. The data is encrypted with an AWS Key Management Service (AWS KMS) customer managed key. The company plans to copy the data to another S3 bucket that is in the development account. A developer needs to use a KMS key to encrypt the data in the S3 bucket that is in the development account. The KMS key in the development account must be accessible from the production account, Which solution will meet these requirements?

  • AReplicate the customer managed KMS key from the production account to the development account. Specify the production account in the key policy.
  • BCreate a new customer managed KMS key in the development account. Specify the production account in the key policy.
  • CCreate a new AWS managed KMS key for Amazon S3 in the development account. Specify the production account in the key policy. (correct answer)
  • DReplicate the default AWS managed KMS key for Amazon S3 from the production account to the development account. Specify the production account in the key policy.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create a new AWS managed KMS key for Amazon S3 in the development account. Specify the production account in the key policy.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

DVA-C02 Question 535

Single page →
Topic 1 · Question 535

A developer is using AWS CodeDeploy to launch an application onto Amazon EC2 instances. The application deployment fails during testing. The developer notices an IAM_ROLE_PERMISSIONS error code in Amazon CloudWatch logs. What should the developer do to resolve the error?

  • AEnsure that the deployment group is using the correct role name for the CodeDeploy service role.
  • BAttach the AWSCodeDeployRoleECS policy to the CodeDeploy service role.
  • CAttach the AWSCodeDeployRole policy to the CodeDeploy service role. (correct answer)
  • DEnsure the CodeDeploy agent is installed and running on all instances in the deployment group.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Attach the AWSCodeDeployRole policy to the CodeDeploy service role.

Explanation

AWS CodeDeploy automates application deployments to compute services.

DVA-C02 Question 536

Single page →
Topic 1 · Question 536

A company wants to send notifications to customers to advertise a sale on the company’s products. The company needs to use Amazon Simple Notification Service (Amazon SNS) FIFO topics. The company needs to examine the rate at which the topics send notifications and the latency with which the topics send notifications. Which solution will meet these requirements with the MOST operational efficiency?

  • AUse AWS X-Ray. Enable active tracing for Amazon SNS. (correct answer)
  • BUse the Amazon CloudWatch NumberOfNotificationsFailed metric.
  • CUse AWS CloudTrail to log all Amazon SNS API calls.
  • DUse Amazon GuardDuty. Enable runtime monitoring.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use AWS X-Ray. Enable active tracing for Amazon SNS.

Explanation

Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers. AWS X-Ray traces requests to analyze and debug distributed applications.

DVA-C02 Question 537

Single page →
Topic 1 · Question 537

A cloud-based video surveillance company is developing an application that analyzes video files. After the application analyzes the files, the company can discard the files. The company stores the files in an Amazon S3 bucket. The files are 1 GB in size on average. No file is larger than 2 GB. An AWS Lambda function will run one time for each video file that is processed. The processing is very I/O intensive, and the application must read each file multiple times. Which solution will meet these requirements in the MOST performance-optimized way?

  • AAttach an Amazon Elastic Block Store (Amazon EBS) volume that is larger than 1 GB to the Lambda function. Copy the files from the S3 bucket to the EBS volume.
  • BAttach an Elastic Network Adapter (ENA) to the Lambda function. Use the ENA to read the video files from the S3 bucket.
  • CIncrease the ephemeral storage size to 2 GB. Copy the files from the S3 bucket to the /tmp directory of the Lambda function. (correct answer)
  • DConfigure the Lambda function code to read the video files directly from the S3 bucket.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Increase the ephemeral storage size to 2 GB. Copy the files from the S3 bucket to the /tmp directory of the Lambda function.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon S3 provides durable, scalable object storage that is fully managed.

DVA-C02 Question 538

Single page →
Topic 1 · Question 538

A company generates SSL certificates from a third-party provider. The company imports the certificates into AWS Certificate Manager (ACM) to use with public web applications. A developer must implement a solution to notify the company’s security team 90 days before an imported certificate expires. The company already has configured an Amazon Simple Queue Service (Amazon SQS) queue. The company also has configured an Amazon Simple Notification Service (Amazon SNS) topic that has the security team’s email address as a subscriber. Which solution will provide the security team with the required notification about certificates?

  • ACreate an Amazon EventBridge rule that specifies the ACM Certificate Approaching Expiration event type. Set the SNS topic as the EventBridge rule’s target.
  • BCreate an AWS Lambda function to search for all certificates that are expiring within 90 days. Program the Lambda function to send each identified certificate’s Amazon Resource Name (ARN) in a message to the SQS queue.
  • CCreate an AWS Step Functions workflow that is invoked by each certificate’s expiration notification from AWS CloudTrail. Create an AWS Lambda function to send each certificate's Amazon Resource Name (ARN) in a message to the SQS queue.
  • DConfigure AWS Config with the acm-certificate-expiration-check managed rule to run every 24 hours. Create an Amazon EventBridge rule that includes an event pattern that specifies the Config Rules Compliance Change detail type and the configured rule. Set the SNS topic as the EventBridge rule’s target. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D.

DVA-C02 Question 539

Single page →
Topic 1 · Question 539

A company stores customer credit reports in an Amazon S3 bucket. An analytics service uses standard Amazon S3 GET requests to access the reports. A developer must implement a solution to redact personally identifiable information (PII) from the reports before the reports reach the analytics service. Which solution will meet this requirement with the MOST operational efficiency?

  • ALoad the S3 objects into Amazon Redshift by using a COPY command. Implement dynamic data masking. Refactor the analytics service to read from Amazon Redshift.
  • BSet up an S3 Object Lambda function. Attach the function to an S3 Object Lambda Access Point. Program the function to call a PII redaction API. (correct answer)
  • CUse AWS Key Management Service (AWS KMS) to implement encryption in the S3 bucket. Re-upload all the existing S3 objects. Give the kms:Decrypt permission to the analytics service.
  • DCreate an Amazon Simple Notification Service (Amazon SNS) topic. Implement message data protection. Refactor the analytics service to publish data access requests to the SNS topic.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Set up an S3 Object Lambda function. Attach the function to an S3 Object Lambda Access Point. Program the function to call a PII redaction API.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon S3 provides durable, scalable object storage that is fully managed.

DVA-C02 Question 540

Single page →
Topic 1 · Question 540

A company is using the AWS Serverless Application Model (AWS SAM) to develop a social media application. A developer needs a quick way to test AWS Lambda functions locally by using test event payloads. The developer needs the structure of these test event payloads to match the actual events that AWS services create. Which solution will meet these requirements with the LEAST development effort?

  • ACreate shareable test Lambda events. Use these test Lambda events for local testing.
  • BStore manually created test event payloads locally. Use the sam local invoke command with the file path to the payloads.
  • CStore manually created test event payloads in an Amazon S3 bucket. Use the sam local invoke command with the S3 path to the payloads.
  • DUse the sam local generate-event command to create test payloads for local testing. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Use the sam local generate-event command to create test payloads for local testing. This option needs the least custom development effort.

Showing questions 521–540 of 557 · Page 27 of 28