Amazon DVA-C02 Question Answers

Question # 81

A company has an application that uses Amazon Cognito user pools as an identity provider. The company must secure access to user records. The company has set up multi-factor authentication (MFA). The company also wants to send a login activity notification by email every time a user logs in. What is the MOST operationally efficient solution that meets this requirement? 

A. Create an AWS Lambda function that uses Amazon Simple Email Service (AmazonSES) to send the email notification. Add an Amazon API Gateway API to invoke thefunction. Call the API from the client side when login confirmation is received.
B. Create an AWS Lambda function that uses Amazon Simple Email Service (AmazonSES) to send the email notification. Add an Amazon Cognito post authentication Lambdatrigger for the function.
C. Create an AWS Lambda function that uses Amazon Simple Email Service (AmazonSES) to send the email notification. Create an Amazon CloudWatch Logs log subscriptionfilter to invoke the function based on the login status.
D. Configure Amazon Cognito to stream all logs to Amazon Kinesis Data Firehose. Createan AWS Lambda function to process the streamed logs and to send the email notificationbased on the login status of each user.

Show / Hide Answer

---

Question # 82

A company is building a compute-intensive application that will run on a fleet of Amazon EC2 instances. The application uses attached Amazon Elastic Block Store (Amazon EBS) volumes for storing data. The Amazon EBS volumes will be created at time of initial deployment. The application will process sensitive information. All of the data must be encrypted. The solution should not impact the application's performance. Which solution will meet these requirements? 

A. Configure the fleet of EC2 instances to use encrypted EBS volumes to store data.
B. Configure the application to write all data to an encrypted Amazon S3 bucket.
C. Configure a custom encryption algorithm for the application that will encrypt and decryptall data.
D. Configure an Amazon Machine Image (AMI) that has an encrypted root volume andstore the data to ephemeral disks.

Show / Hide Answer

---

Question # 83

A developer at a company recently created a serverless application to process and show data from business reports. The application's user interface (UI) allows users to select and start processing the files. The Ul displays a message when the result is available to view. The application uses AWS Step Functions with AWS Lambda functions to process the files. The developer used Amazon API Gateway and Lambda functions to create an API to support the UI. The company's Ul team reports that the request to process a file is often returning timeout errors because of the see or complexity of the files. The Ul team wants the API to provide an immediate response so that the Ul can deploy a message while the files are being processed. The backend process that is invoked by the API needs to send an email message when the report processing is complete. What should the developer do to configure the API to meet these requirements? 

A. Change the API Gateway route to add an X-Amz-Invocation-Type header win a sialicvalue of 'Event' in the integration request Deploy the API Gateway stage to apply the changes.
B. Change the configuration of the Lambda function that implements the request to processa file. Configure the maximum age of the event so that the Lambda function will ionasynchronously.
C. Change the API Gateway timeout value to match the Lambda function ominous value.Deploy the API Gateway stage to apply the changes.
D. Change the API Gateway route to add an X-Amz-Target header with a static value of 'Async' in the integration request Deploy me API Gateway stage to apply the changes.

Show / Hide Answer

---

Question # 84

A developer has observed an increase in bugs in the AWS Lambda functions that a development team has deployed in its Node is application. To minimize these bugs, the developer wants to impendent automated testing of Lambda functions in an environment that Closely simulates the Lambda environment. The developer needs to give other developers the ability to run the tests locally. The developer also needs to integrate the tests into the team's continuous integration and continuous delivery (Ct/CO) pipeline before the AWS Cloud Development Kit (AWS COK) deployment. Which solution will meet these requirements? 

A. Create sample events based on the Lambda documentation. Create automated testscripts that use the cdk local invoke command to invoke the Lambda functions. Check theresponse Document the test scripts for the other developers on the team Update the CI/CDpipeline to run the test scripts.
B. Install a unit testing framework that reproduces the Lambda execution environment.Create sample events based on the Lambda Documentation Invoke the handler function byusing a unit testing framework. Check the response Document how to run the unit testingframework for the other developers on the team. Update the OCD pipeline to run the unittesting framework.
C. Install the AWS Serverless Application Model (AWS SAW) CLI tool Use the Sam localgenerate-event command to generate sample events for me automated tests. Createautomated test scripts that use the Sam local invoke command to invoke the Lambdafunctions. Check the response Document the test scripts tor the other developers on theteam Update the CI/CD pipeline to run the test scripts.
D. Create sample events based on the Lambda documentation. Create a Docker containerfrom the Node is base image to invoke the Lambda functions. Check the responseDocument how to run the Docker container for the more developers on the team update theCI/CD pipeline to run the Docker container.

Show / Hide Answer

---

Question # 85

A developer has been asked to create an AWS Lambda function that is invoked any time updates are made to items in an Amazon DynamoDB table. The function has been created and appropriate permissions have been added to the Lambda execution role Amazon DynamoDB streams have been enabled for the table, but the function 15 still not being invoked. Which option would enable DynamoDB table updates to invoke the Lambda function?

A. Store the credentials in AWS Systems Manager Parameter Store. Select the databasethat the parameter will access. Use the default AWS Key Management Service (AWSKMS) key to encrypt the parameter. Enable automatic rotation for the parameter. Use theparameter from Parameter Store on the Lambda function to connect to the database.
B. Encrypt the credentials with the default AWS Key Management Service (AWS KMS)key. Store the credentials as environment variables for the Lambda function. Create asecond Lambda function to generate new credentials and to rotate the credentials byupdating the environment variables of the first Lambda function. Invoke the secondLambda function by using an Amazon EventBridge rule that runs on a schedule. Updatethe database to use the new credentials. On the first Lambda function, retrieve thecredentials from the environment variables. Decrypt the credentials by using AWS KMS,Connect to the database.
C. Store the credentials in AWS Secrets Manager. Set the secret type to Credentials forAmazon RDS database. Select the database that the secret will access. Use the defaultAWS Key Management Service (AWS KMS) key to encrypt the secret. Enable automaticrotation for the secret. Use the secret from Secrets Manager on the Lambda function toconnect to the database.
D. Encrypt the credentials by using AWS Key Management Service (AWS KMS). Store thecredentials in an Amazon DynamoDB table. Create a second Lambda function to rotate thecredentials. Invoke the second Lambda function by using an Amazon EventBridge rule thatruns on a schedule. Update the DynamoDB table. Update the database to use thegenerated credentials. Retrieve the credentials from DynamoDB with the first Lambdafunction. Connect to the database.

Show / Hide Answer

---

Question # 86

A developer has been asked to create an AWS Lambda function that is invoked any time updates are made to items in an Amazon DynamoDB table. The function has been created and appropriate permissions have been added to the Lambda execution role Amazon DynamoDB streams have been enabled for the table, but the function 15 still not being invoked. Which option would enable DynamoDB table updates to invoke the Lambda function? 

A. Change the StreamViewType parameter value to NEW_AND_OLOJMAGES for theDynamoDB table.
B. Configure event source mapping for the Lambda function.
C. Map an Amazon Simple Notification Service (Amazon SNS) topic to the DynamoDBstreams.
D. Increase the maximum runtime (timeout) setting of the Lambda function.

Show / Hide Answer

---

Question # 87

A developer accesses AWS CodeCommit over SSH. The SSH keys configured to access AWS CodeCommit are tied to a user with the following permissions:

 

A. Option A
B. Option B
C. Option C
D. Option D

Show / Hide Answer

---

Question # 88

When using the AWS Encryption SDK how does the developer keep track of the data encryption keys used to encrypt data? 

A. The developer must manually keep Hack of the data encryption keys used for each data object.
B. The SDK encrypts the data encryption key and stores it (encrypted) as part of the resumed ophertext.
C. The SDK stores the data encryption keys automaticity in Amazon S3.
D. The data encryption key is stored m the user data for the EC2 instance.

Show / Hide Answer

---

Question # 89

An application runs on multiple EC2 instances behind an ELB. Where is the session data best written so that it can be served reliably across multiple requests? 

A. Write data to Amazon ElastiCache
B. Write data to Amazon Elastic Block Store
C. Write data to Amazon EC2 instance Store
D. Wide data to the root filesystem

Show / Hide Answer

---

Question # 90

A developer maintains applications that store several secrets in AWS Secrets Manager. The applications use secrets that have changed over time. The developer needs to identify required secrets that are still in use. The developer does not want to cause any application downtime. What should the developer do to meet these requirements? 

A. Configure an AWS CloudTrail log file delivery to an Amazon S3 bucket. Create anAmazon CloudWatch alarm for the GetSecretValue. Secrets Manager API operationrequests
B. Create a secrets manager-secret-unused AWS Config managed rule. Create anAmazon EventBridge rule to Initiate notification when the AWS Config managed rule is met.
C. Deactivate the applications secrets and monitor the applications error logs temporarily.
D. Configure AWS X-Ray for the applications. Create a sampling rule lo match theGetSecretValue Secrets Manager API operation requests.

Show / Hide Answer

---

<1234567891011121314151617181920>

---

Download All 608 Questions Check Customers Feedbacks