🔍

DVA-C02 — questions

Page 28 of 28 · 557 total questions.

DVA-C02 Question 541

Single page →
Topic 1 · Question 541

A developer is building the authentication mechanism for a new mobile app. Users need to be able to sign up, sign in, and access secured backend AWS resources. Which solution will meet these requirements?

  • AUse AWS Identity and Access Management Access Analyzer to generate IAM policies. Create an IAM role. Attach the policies to the role. Integrate the IAM role with an identity provider that the mobile app uses.
  • BCreate an IAM policy that grants access to the backend resources. Create an IAM role. Attach the policy to the role. Create an Amazon API Gateway endpoint. Attach the role to the endpoint. Integrate the endpoint with the mobile app.
  • CCreate an Amazon Cognito identity pool. Configure permissions by choosing a default IAM role for authenticated users or guest users in the identity pool. Associate the identity pool with an identity provider. Integrate the identity pool with the mobile app.
  • DCreate an Amazon Cognito user pool. Configure the security requirements by choosing a password policy, multi-factor authentication (MFA) requirements, and user account recovery options. Create an app client. Integrate the app client with the mobile app. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Create an Amazon Cognito user pool. Configure the security requirements by choosing a password policy, multi-factor authentication (MFA) requirements, and user account recovery options. Create an app client. Integrate...

Explanation

Amazon Cognito manages user sign-up, sign-in and federated identity for applications. AWS Config tracks resource configuration changes and evaluates compliance.

DVA-C02 Question 542

Single page →
Topic 1 · Question 542

A developer is designing an event-driven architecture. An AWS Lambda function that processes data needs to push processed data to a subset of four consumer Lambda functions. The data must be routed based on the value of one field in the data. Which solution will meet these requirements with the LEAST operational overhead?

  • ACreate an Amazon Simple Queue Service (Amazon SQS) queue and event source mapping for each consumer Lambda function. Add message routing logic to the data-processing Lambda function.
  • BCreate an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe the four consumer Lambda functions to the topic. Add message filtering logic to each consumer Lambda function. Subscribe the data-processing Lambda function to the SNS topic.
  • CCreate a separate Amazon Simple Notification Service (Amazon SNS) topic and subscription for each consumer Lambda function. Add message routing logic to the data-processing Lambda function to publish to the appropriate topic.
  • DCreate a single Amazon Simple Notification Service (Amazon SNS) topic. Subscribe the four consumer Lambda functions to the topic. Add SNS subscription filter policies to each subscription. Configure the data-processing Lambda function to publish to the topic. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Create a single Amazon Simple Notification Service (Amazon SNS) topic. Subscribe the four consumer Lambda functions to the topic. Add SNS subscription filter policies to each subscription. Configure the data-processin...

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers. AWS Config tracks resource configuration changes and evaluates compliance.

DVA-C02 Question 543

Single page →
Topic 1 · Question 543

A developer is creating a new application that will give users the ability to upload documents to Amazon S3. The contents of the documents must not be accessible to any third party. Which type of encryption will meet this requirement?

  • AClient-side encryption by using the S3 Encryption Client with a Raw RSA wrapping key that is stored on the user’s device
  • BServer-side encryption with S3 managed keys (SSE-S3)
  • CServer-side encryption with AWS KMS keys (SSE-KMS) (correct answer)
  • DDual-layer server-side encryption with AWS KMS keys (DSSE-KMS)
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Server-side encryption with AWS KMS keys (SSE-KMS)

Explanation

AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

DVA-C02 Question 544

Single page →
Topic 1 · Question 544

A developer is building an application that consists of many AWS Lambda functions. The Lambda functions connect to a single Amazon RDS database. The developer needs to implement a solution to store the database credentials securely. When the credentials are updated, the Lambda functions must be able to use the new credentials without requiring a code update or a configuration update. Which solution will meet these requirements?

  • AStore the credentials as a secret in AWS Secrets Manager. Access the secret at runtime from within the Lambda functions.
  • BStore the credentials as a secret in AWS Secrets Manager. Access the credentials in environment variables by using the containerDefinitions and valueFrom elements in reference to the secret value.
  • CStore the credentials as a SecureString parameter in AWS Systems Manager Parameter Store. Add a trigger to pass the credentials to the Lambda functions when the Lambda functions run.
  • DStore the credentials as a SecureString parameter in AWS Systems Manager Parameter Store. Add a reference to the parameter in an environment variable in the Lambda functions. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Store the credentials as a SecureString parameter in AWS Systems Manager Parameter Store. Add a reference to the parameter in an environment variable in the Lambda functions.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Systems Manager Parameter Store securely stores configuration data and secrets. AWS Systems Manager operates and automates management of fleets of resources.

DVA-C02 Question 545

Single page →
Topic 1 · Question 545

A developer is building an application that stores sensitive user data. The application includes an Amazon CloudFront distribution and multiple AWS Lambda functions that handle user requests. The user requests contain over 20 data fields. Each application transaction contains sensitive data that must be encrypted. Only specific parts of the application need to have the ability to decrypt the data. Which solution will meet these requirements?

  • AAssociate the CloudFront distribution with a Lambda@Edge function. Configure the function to perform field-level asymmetric encryption by using a user-defined RSA public key that is stored in AWS Key Management Service (AWS KMS).
  • BIntegrate AWS WAF with CloudFront to protect the sensitive data. Use a Lambda function and self-managed keys to perform the encryption and decryption processes.
  • CConfigure the CloudFront distribution to use WebSockets by forwarding all viewer request headers to the origin. Create an asymmetric AWS KMS key. Configure the CloudFront distribution to use field-level encryption. Use the AWS KMS key.
  • DConfigure the cache behavior in the CloudFront distribution to require HTTPS for communication between viewers and CloudFront. Configure GoudFront to require users to access the files by using either signed URLs or signed cookies. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Configure the cache behavior in the CloudFront distribution to require HTTPS for communication between viewers and CloudFront. Configure GoudFront to require users to access the files by using either signed URLs or si...

Explanation

Amazon CloudFront caches content at edge locations to reduce latency and offload origins. AWS Config tracks resource configuration changes and evaluates compliance.

DVA-C02 Question 546

Single page →
Topic 1 · Question 546

An application includes an Amazon DynamoDB table that is named orders. The table has a primary partition key of id and a global secondary index (GSI) that is named an accountIndex. The GSI has a partition key of accountId and a sort key of orderDateTime. A developer needs to create an AWS Lambda function to retrieve the orders that have an accountId of 100. Which solution will meet this requirement by using the LEAST read capacity?

  • ADefine a DynamoDB API request for the GetItem action with the following parameters:
  • BDefine a DynamoDB API request for the BatchGetItem action with the following parameters:
  • CDefine a DynamoDB API request for the Scan action with the following parameters:
  • DDefine a DynamoDB API request for the Query action with the following parameters: (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Define a DynamoDB API request for the Query action with the following parameters:

Explanation

Amazon DynamoDB is a fully managed, serverless NoSQL database with single-digit millisecond latency and automatic scaling.

DVA-C02 Question 547

Single page →
Topic 1 · Question 547

A company stores data in an Amazon S3 bucket. The data is updated multiple times every day from an application that runs on a server in the company’s on-premises data center. The company enables S3 Versioning on the S3 bucket. After some time, the company observes multiple versions of the same objects in the S3 bucket. The company needs the S3 bucket to keep the current version of each object and the version immediately previous to the current version. Which solution will meet these requirements?

  • AConfigure an S3 bucket policy to retain one newer noncurrent version of the objects.
  • BConfigure an S3 Lifecycle rule to retain one newer noncurrent version of the objects. (correct answer)
  • CEnable S3 Object Lock. Configure an S3 Object Lock policy to retain one newer noncurrent version of the objects.
  • DSuspend S3 Versioning. Modify the application code to check the number of object versions before updating the objects.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Configure an S3 Lifecycle rule to retain one newer noncurrent version of the objects.

Explanation

S3 Lifecycle policies automatically transition or expire objects to control storage cost. Amazon S3 provides durable, scalable object storage that is fully managed. AWS Config tracks resource configuration changes and evaluates compliance.

DVA-C02 Question 548

Single page →
Topic 1 · Question 548

A company is creating a new feature for existing software. Before the company fully releases a new version of the software, the company wants to test the feature. The company needs to gather feedback about the feature from a small group of users while the current software version remains deployed. If the testing validates the feature, the company needs to deploy the new software version to all other users at the same time. Which deployment strategy will meet these requirements?

  • AAll-at-once deployment
  • BCanary deployment (correct answer)
  • CIn-place deployment
  • DLinear deployment
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Canary deployment.

DVA-C02 Question 549

Single page →
Topic 1 · Question 549

A developer has an application that runs in AWS Account A. The application must retrieve an AWS Secrets Manager secret that is encrypted by an AWS Key Management Service (AWS KMS) key from AWS Account B. The application’s role has permissions to access the secret in Account B. The developer must add a statement to the KMS key’s key policy to allow the role in Account A to use the KMS key in Account B. The permissions must grant least privilege access to the role. Which permissions will meet these requirements?

  • Akms:Decrypt and kms:DescribeKey (correct answer)
  • Bsecretsmanager:DescribeSecret and secretsmanager:GetSecretValue
  • Ckms:*
  • Dsecretsmanager:*
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: kms:Decrypt and kms:DescribeKey

Explanation

AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

DVA-C02 Question 550

Single page →
Topic 1 · Question 550

A developer created several AWS Lambda functions that write data to a single Amazon S3 bucket. The developer configured all the Lambda functions to send logs and metrics to Amazon CloudWatch. The developer receives reports that one of the Lambda functions writes data to the bucket very slowly. The developer needs to measure the latency between the problematic Lambda function and the S3 bucket. Which solution will meet this requirement?

  • AEnable AWS X-Ray on the Lambda function. In the generated trace map, select the line between Lambda and Amazon S3. (correct answer)
  • BQuery the Lambda function’s log file in Amazon CloudWatch Logs Insights. Return the average of the auto-discovered @duration field.
  • CEnable CloudWatch Lambda Insights on the function. View the latency graph that CloudWatch Lambda Insights provides.
  • DEnable AWS X-Ray on the Lambda function. Select Amazon S3 in the latency graph to view the latency histogram.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Enable AWS X-Ray on the Lambda function. In the generated trace map, select the line between Lambda and Amazon S3.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon S3 provides durable, scalable object storage that is fully managed. AWS X-Ray traces requests to analyze and debug distributed applications.

DVA-C02 Question 551

Single page →
Topic 1 · Question 551

A developer is designing a game that stores data in an Amazon DynamoDB table. The partition key of the table is the country of the player. After a sudden increase in the number of players in a specific country, the developer notices ProvisionedThroughputExceededException errors. What should the developer do to resolve these errors?

  • AUse strongly consistent table reads.
  • BRevise the primary key to use more unique identifiers. (correct answer)
  • CUse pagination to reduce the size of the items that the queries return.
  • DUse the Scan operation to retrieve the data.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Revise the primary key to use more unique identifiers.

DVA-C02 Question 552

Single page →
Topic 1 · Question 552

A company stores data in an Amazon S3 bucket. The data is updated multiple times every day from an application that runs on a server in the company’s on-premises data center. The company enables S3 Versioning on the S3 bucket. After some time, the company observes multiple versions of the same objects in the S3 bucket. The company needs the S3 bucket to keep the current version of each object and the version immediately previous to the current version. Which solution will meet these requirements?

  • AConfigure an S3 bucket policy to retain one newer noncurrent version of the objects.
  • BConfigure an S3 Lifecycle rule to retain one newer noncurrent version of the objects. (correct answer)
  • CEnable S3 Object Lock. Configure an S3 Object Lock policy to retain one newer noncurrent version of the objects.
  • DSuspend S3 Versioning. Modify the application code to check the number of object versions before updating the objects.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Configure an S3 Lifecycle rule to retain one newer noncurrent version of the objects.

Explanation

S3 Lifecycle policies automatically transition or expire objects to control storage cost. Amazon S3 provides durable, scalable object storage that is fully managed. AWS Config tracks resource configuration changes and evaluates compliance.

DVA-C02 Question 553

Single page →
Topic 1 · Question 553

A company is creating a new feature for existing software. Before the company fully releases a new version of the software, the company wants to test the feature. The company needs to gather feedback about the feature from a small group of users while the current software version remains deployed. If the testing validates the feature, the company needs to deploy the new software version to all other users at the same time. Which deployment strategy will meet these requirements?

  • AAll-at-once deployment
  • BCanary deployment (correct answer)
  • CIn-place deployment
  • DLinear deployment
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Canary deployment.

DVA-C02 Question 554

Single page →
Topic 1 · Question 554

A developer has an application that runs in AWS Account A. The application must retrieve an AWS Secrets Manager secret that is encrypted by an AWS Key Management Service (AWS KMS) key from AWS Account B. The application’s role has permissions to access the secret in Account B. The developer must add a statement to the KMS key’s key policy to allow the role in Account A to use the KMS key in Account B. The permissions must grant least privilege access to the role. Which permissions will meet these requirements?

  • Akms:Decrypt and kms:DescribeKey (correct answer)
  • Bsecretsmanager:DescribeSecret and secretsmanager:GetSecretValue
  • Ckms:*
  • Dsecretsmanager:*
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: kms:Decrypt and kms:DescribeKey

Explanation

AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

DVA-C02 Question 555

Single page →
Topic 1 · Question 555

A developer created several AWS Lambda functions that write data to a single Amazon S3 bucket. The developer configured all the Lambda functions to send logs and metrics to Amazon CloudWatch. The developer receives reports that one of the Lambda functions writes data to the bucket very slowly. The developer needs to measure the latency between the problematic Lambda function and the S3 bucket. Which solution will meet this requirement?

  • AEnable AWS X-Ray on the Lambda function. In the generated trace map, select the line between Lambda and Amazon S3. (correct answer)
  • BQuery the Lambda function’s log file in Amazon CloudWatch Logs Insights. Return the average of the auto-discovered @duration field.
  • CEnable CloudWatch Lambda Insights on the function. View the latency graph that CloudWatch Lambda Insights provides.
  • DEnable AWS X-Ray on the Lambda function. Select Amazon S3 in the latency graph to view the latency histogram.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Enable AWS X-Ray on the Lambda function. In the generated trace map, select the line between Lambda and Amazon S3.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon S3 provides durable, scalable object storage that is fully managed. AWS X-Ray traces requests to analyze and debug distributed applications.

DVA-C02 Question 556

Single page →
Topic 1 · Question 556

A company’s developer needs to activate Amazon CloudWatch Logs Insights for an application’s AWS Lambda functions. The company uses an AWS Serverless Application Model (AWS SAM) template to deploy the application. The SAM template includes a logical resource that is named CloudWatchLogGroup. How should the developer modify the SAM template to activate CloudWatch Logs Insights for the Lambda functions?

  • AAdd an output named CloudWatchinsightRule that contains a value of the Amazon Resource Name (ARN) for the CloudWatchLogGroup resource.
  • BAdd a parameter named CloudWatchLogGroupNamePrefix that contains a value of the application name. Reference the new parameter in the CloudWatchLogGroup resource.
  • CFor each Lambda function, add the layer for the Lambda Insights extension and the CloudWatchLambdaInsightsExecutionRolePolicy AWS managed policy. (correct answer)
  • DFor each Lambda function, set Tracing mode to Active and add the CloudWatchLambdaInsightsExecutionRolePolicy AWS managed policy.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: For each Lambda function, add the layer for the Lambda Insights extension and the CloudWatchLambdaInsightsExecutionRolePolicy AWS managed policy.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health.

DVA-C02 Question 557

Single page →
Topic 1 · Question 557

A developer is designing a game that stores data in an Amazon DynamoDB table. The partition key of the table is the country of the player. After a sudden increase in the number of players in a specific country, the developer notices ProvisionedThroughputExceededException errors. What should the developer do to resolve these errors?

  • AUse strongly consistent table reads.
  • BRevise the primary key to use more unique identifiers. (correct answer)
  • CUse pagination to reduce the size of the items that the queries return.
  • DUse the Scan operation to retrieve the data.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Revise the primary key to use more unique identifiers.

Showing questions 541–557 of 557 · Page 28 of 28