Amazon DVA-C02 Question Answers

Question # 51

A developer is preparing to begin development of a new version of an application. The previous version of the application is deployed in a production environment. The developer needs to deploy fixes and updates to the current version during the development of the new version of the application. The code for the new version of the application is stored in AWS CodeCommit. Which solution will meet these requirements? 

A. From the main branch, create a feature branch for production bug fixes. Create asecond feature branch from the main branch for development of the new version.
B. Create a Git tag of the code that is currently deployed in production. Create a Git tag forthe development of the new version. Push the two tags to the CodeCommit repository.
C. From the main branch, create a branch of the code that is currently deployed inproduction. Apply an IAM policy that ensures no other other users can push or merge to thebranch.
D. Create a new CodeCommit repository for development of the new version of theapplication. Create a Git tag for the development of the new version.

Show / Hide Answer

---

Question # 52

A developer is planning to migrate on-premises company data to Amazon S3. The data must be encrypted, and the encryption Keys must support automate annual rotation. The company must use AWS Key Management Service (AWS KMS) to encrypt the data. When type of keys should the developer use to meet these requirements? 

A. Amazon S3 managed keys
B. Symmetric customer managed keys with key material that is generated by AWS
C. Asymmetric customer managed keys with key material that generated by AWS
D. Symmetric customer managed keys with imported key material

Show / Hide Answer

---

Question # 53

A developer has code that is stored in an Amazon S3 bucket. The code must be deployed as an AWS Lambda function across multiple accounts in the same AWS Region as the S3 bucket an AWS CloudPormation template that runs for each account will deploy the Lambda function. What is the MOST secure way to allow CloudFormaton to access the Lambda Code in the S3 bucket? 

A. Grant the CloudFormation service role the S3 ListBucket and GetObject permissions.Add a bucket policy to Amazon S3 with the principal of "AWS" (account numbers)
B. Grant the CloudFormation service row the S3 GetObfect permission. Add a Bucketpolicy to Amazon S3 with the principal of "'"
C. Use a service-based link to grant the Lambda function the S3 ListBucket and GetObjectpermissions by explicitly adding the S3 bucket's account number in the resource.
D. Use a service-based link to grant the Lambda function the S3 GetObject permission Adda resource of "** to allow access to the S3 bucket.

Show / Hide Answer

---

Question # 54

Users are reporting errors in an application. The application consists of several micro services that are deployed on Amazon Elastic Container Serves (Amazon ECS) with AWS Fargate. When combination of steps should a developer take to fix the errors? (Select TWO 

A. Deploy AWS X-Ray as a sidecar container to the micro services. Update the task rolepolicy to allow access to me X -Ray API.
B. Deploy AWS X-Ray as a daemon set to the Fargate cluster. Update the service rolepolicy to allow access to the X-Ray API.
C. Instrument the application by using the AWS X-Ray SDK. Update the application to usethe Put-XrayTrace API call to communicate with the X-Ray API.
D. Instrument the application by using the AWS X-Ray SDK. Update the application tocommunicate with the X-Ray daemon.
E. Instrument the ECS task to send the stout and spider- output to Amazon CloudWatchLogs. Update the task role policy to allow the cloudwatch Putlogs action.

Show / Hide Answer

---

Question # 55

A company uses a custom root certificate authority certificate chain (Root CA Cert) that is 10 KB in size generate SSL certificates for its on-premises HTTPS endpoints. One of the company’s cloud based applications has hundreds of AWS Lambda functions that pull date from these endpoints. A developer updated the trust store of the Lambda execution environment to use the Root CA Cert when the Lambda execution environment is initialized. The developer bundled the Root CA Cert as a text file in the Lambdas deployment bundle. After 3 months of development the root CA Cert is no longer valid and must be updated. The developer needs a more efficient solution to update the Root CA Cert for all deployed Lambda functions. The solution must not include rebuilding or updating all Lambda functions that use the Root CA Cert. The solution must also work for all development, testing and production environment. Each environment is managed in a separate AWS account. When combination of steps Would the developer take to meet these environments MOST cost-effectively? (Select TWO) 

A. Store the Root CA Cert as a secret in AWS Secrets Manager. Create a resource-basedpolicy. Add IAM users to allow access to the secret
B. Store the Root CA Cert as a Secure Sting parameter in aws Systems ManagerParameter Store Create a resource-based policy. Add IAM users to allow access to thepolicy.
C. Store the Root CA Cert in an Amazon S3 bucket. Create a resource- based policy toallow access to the bucket.
D. Refactor the Lambda code to load the Root CA Cert from the Root CA Certs location.Modify the runtime trust store inside the Lambda function handler.
E. Refactor the Lambda code to load the Root CA Cert from the Root CA Cert's location.Modify the runtime trust store outside the Lambda function handler.

Show / Hide Answer

---

Question # 56

A developer at a company needs to create a small application mat makes the same API call once each flay at a designated time. The company does not have infrastructure in the AWS Cloud yet, but the company wants to implement this functionality on AWS. Which solution meets these requirements in the MOST operationally efficient manner? 

A. Use a Kubermetes cron job that runs on Amazon Elastic Kubemetes Sen/ice (AmazonEKS)
B. Use an Amazon Linux crontab scheduled job that runs on Amazon EC2
C. Use an AWS Lambda function that is invoked by an Amazon EventBridge scheduledevent.
D. Use an AWS Batch job that is submitted to an AWS Batch job queue.

Show / Hide Answer

---

Question # 57

A developer warns to add request validation to a production environment Amazon API Gateway API. The developer needs to test the changes before the API is deployed to the production environment. For the lest the developer will send test requests to the API through a testing tool. Which solution will meet these requirements with the LEAST operational overhead? 

A. Export the existing API to an OpenAPI file. Create a new API Import the OpenAPI fileModify the new API to add request validation. Perform the tests Modify the existing API toadd request validation. Deploy the existing API to production.
B. Modify the existing API to add request validation. Deploy the updated API to a new APIGateway stage Perform the tests Deploy the updated API to the API Gateway productionstage.
C. Create a new API Add the necessary resources and methods including new requestvalidation. Perform the tests Modify the existing API to add request validation. Deploy theexisting API to production.
D. Clone the exiting API Modify the new API lo add request validation. Perform the testsModify the existing API to add request validation Deploy the existing API to production.

Show / Hide Answer

---

Question # 58

An online food company provides an Amazon API Gateway HTTP API 1o receive orders for partners. The API is integrated with an AWS Lambda function. The Lambda function stores the orders in an Amazon DynamoDB table. The company expects to onboard additional partners Some to me panthers require additional Lambda function to receive orders. The company has created an Amazon S3 bucket. The company needs 10 store all orders and updates m the S3 bucket for future analysis How can the developer ensure that an orders and updates are stored to Amazon S3 with the LEAST development effort? 

A. Create a new Lambda function and a new API Gateway API endpoint. Configure thenew Lambda function to write to the S3 bucket. Modify the original Lambda function to postupdates to the new API endpoint.
B. Use Amazon Kinesis Data Streams to create a new data stream. Modify the Lambdafunction to publish orders to the oats stream Configure in data stream to write to the S3bucket.
C. Enable DynamoDB Streams on me DynamoOB table. Create a new lambda function.Associate the stream's Amazon Resource Name (ARN) with the Lambda FunctionConfigure the Lambda function to write to the S3 bucket as records appear in the table’sstream.
D. Modify the Lambda function to punish to a new Amazon. Simple Lambda functionreceives orders. Subscribe a new Lambda function to the topic. Configure the new Lambdafunction to write to the S3 bucket as updates come through the topic.

Show / Hide Answer

---

Question # 59

An organization is using Amazon CloudFront to ensure that its users experience lowlatency access to its web application. The organization has identified a need to encrypt all traffic between users and CloudFront, and all traffic between CloudFront and the web application. How can these requirements be met? (Select TWO) 

A. Use AWS KMS t0 encrypt traffic between cloudFront and the web application.
B. Set the Origin Protocol Policy to "HTTPS Only".
C. Set the Origin’s HTTP Port to 443.
D. Set the Viewer Protocol Policy to "HTTPS Only" or Redirect HTTP to HTTPS"
E. Enable the CloudFront option Restrict Viewer Access.

Show / Hide Answer

---

Question # 60

A developer migrated a legacy application to an AWS Lambda function. The function uses a third-party service to pull data with a series of API calls at the end of each month. The function than processes the data to generate the monthly reports. The function has Been working with no issues so far. The third-party service recently issued a restriction to allow a feed number to API calls each minute and each day. If the API calls exceed the limit tor each minute or each day, then the service will produce errors. The API also provides the minute limit and daily limit in the response header. This restriction might extend the overall process to multiple days because the process is consuming more API calls than the available limit. What is the MOST operationally efficient way to refactor the server less application to accommodate this change? 

A. Use an AWS Step Functions State machine to monitor API failures. Use the Wait stateto delay calling the Lambda function.
B. Use an Amazon Simple Queue Service (Amazon SQS) queue to hold the API calls.Configure the Lambda function to poll the queue within the API threshold limits.
C. Use an Amazon CloudWatch Logs metric to count the number of API calls. Configure anAmazon CloudWatch alarm flat slops the currently running instance of the Lambda functionwhen the metric exceeds the API threshold limits.
D. Use Amazon Kinesis Data Firehose to batch me API calls and deliver them to anAmazon S3 bucket win an event notification to invoke the Lambda function.

Show / Hide Answer

---

<1234567891011121314151617181920>

---

Download All 608 Questions Check Customers Feedbacks