Amazon DVA-C02 Question Answers

Question # 91

A company needs to set up secure database credentials for all its AWS Cloud resources. The company's resources include Amazon RDS DB instances Amazon DocumentDB clusters and Amazon Aurora DB instances. The company's security policy mandates that database credentials be encrypted at rest and rotated at a regular interval. Which solution will meet these requirements MOST securely? 

A. Set up IAM database authentication for token-based access. Generate user tokens toprovide centralized access to RDS DB instances. Amazon DocumentDB clusters andAurora DB instances.
B. Create parameters for the database credentials in AWS Systems Manager ParameterStore Set the Type parameter to Secure Sting. Set up automatic rotation on theparameters.
C. Store the database access credentials as an encrypted Amazon S3 object in an S3bucket Block all public access on the S3 bucket. Use S3 server-side encryption to set upautomatic rotation on the encryption key.
D. Create an AWS Lambda function by using the SecretsManagerRotationTemplatetemplate in the AWS Secrets Manager console. Create secrets for the database credentialsin Secrets Manager Set up secrets rotation on a schedule.

Show / Hide Answer

---

Question # 92

A mobile app stores blog posts in an Amazon DynacnoDB table Millions of posts are added every day and each post represents a single item in the table. The mobile app requires only recent posts. Any post that is older than 48 hours can be removed. What is the MOST cost-effective way to delete posts that are older man 48 hours? 

A. For each item add a new attribute of type String that has a timestamp that is set to theblog post creation time. Create a script to find old posts with a table scan and remove poststhat are order than 48 hours by using the Balch Write ltem API operation. Schedule a cronjob on an Amazon EC2 instance once an hour to start the script.
B. For each item add a new attribute of type. String that has a timestamp that its set to theblog post creation time. Create a script to find old posts with a table scan and remove poststhat are Oder than 48 hours by using the Batch Write item API operating. Place the script ina container image. Schedule an Amazon Elastic Container Service (Amazon ECS) task onAWS Far gate that invokes the container every 5 minutes.
C. For each item, add a new attribute of type Date that has a timestamp that is set to 48hours after the blog post creation time. Create a global secondary index (GSI) that uses thenew attribute as a sort key. Create an AWS Lambda function that references the GSI andremoves expired items by using the Batch Write item API operation Schedule me functionwith an Amazon CloudWatch event every minute.
D. For each item add a new attribute of type. Number that has timestamp that is set to 48hours after the blog post. creation time Configure the DynamoDB table with a TTL thatreferences the new attribute.

Show / Hide Answer

---

Question # 93

A company is developing an ecommerce application that uses Amazon API Gateway APIs. The application uses AWS Lambda as a backend. The company needs to test the code in a dedicated, monitored test environment before the company releases the code to the production environment. When solution will meet these requirements? 

A. Use a single stage in API Gateway. Create a Lambda function for each environment.Configure API clients to send a query parameter that indicates the endowment and thespecific lambda function.
B. Use multiple stages in API Gateway. Create a single Lambda function for allenvironments. Add different code blocks for different environments in the Lambda functionbased on Lambda environments variables.
C. Use multiple stages in API Gateway. Create a Lambda function for each environment.Configure API Gateway stage variables to route traffic to the Lambda function in differentenvironments.
D. Use a single stage in API Gateway. Configure a API client to send a query parameterthat indicated the environment. Add different code blocks tor afferent environments in theLambda Junction to match the value of the query parameter.

Show / Hide Answer

---

Question # 94

An online sales company is developing a serverless application that runs on AWS. The application uses an AWS Lambda function that calculates order success rates and stores the data in an Amazon DynamoDB table. A developer wants an efficient way to invoke the Lambda function every 15 minutes. Which solution will meet this requirement with the LEAST development effort? 

A. Create an Amazon EventBridge rule that has a rate expression that will run the ruleevery 15 minutes. Add the Lambda function as the target of the EventBridge rule.
B. Create an AWS Systems Manager document that has a script that will invoke the Lambda function on Amazon EC2. Use a Systems Manager Run Command task to run theshell script every 15 minutes.
C. Create an AWS Step Functions state machine. Configure the state machine to invokethe Lambda function execution role at a specified interval by using a Wait state. Set theinterval to 15 minutes.
D. Provision a small Amazon EC2 instance. Set up a cron job that invokes the Lambdafunction every 15 minutes.

Show / Hide Answer

---

Question # 95

A company needs to distribute firmware updates to its customers around the world. Which service will allow easy and secure control of the access to the downloads at the lowest cost? 

A. Use Amazon CloudFront with signed URLs for Amazon S3.
B. Create a dedicated Amazon CloudFront Distribution for each customer.
C. Use Amazon CloudFront with AWS Lambda@Edge.
D. Use Amazon API Gateway and AWS Lambda to control access to an S3 bucket.

Show / Hide Answer

---

Question # 96

A developer is storing sensitive data generated by an application in Amazon S3. The developer wants to encrypt the data at rest. A company policy requires an audit trail of when the AWS Key Management Service (AWS KMS) key was used and by whom. Which encryption option will meet these requirements? 

A. Server-side encryption with Amazon S3 managed keys (SSE-S3)
B. Server-side encryption with AWS KMS managed keys (SSE-KMS}
C. Server-side encryption with customer-provided keys (SSE-C)
D. Server-side encryption with self-managed keys

Show / Hide Answer

---

Question # 97

A company is migrating its PostgreSQL database into the AWS Cloud. The company wants to use a database that will secure and regularly rotate database credentials. The company wants a solution that does not require additional programming overhead. Which solution will meet these requirements? 

A. Use Amazon Aurora PostgreSQL tor the database. Store the database credentials inAWS Systems Manager Parameter Store Turn on rotation.
B. Use Amazon Aurora PostgreSQL for the database. Store the database credentials inAWS Secrets Manager Turn on rotation.
C. Use Amazon DynamoDB for the database. Store the database credentials in AWSSystems Manager Parameter Store Turn on rotation.
D. Use Amazon DynamoDB for the database. Store the database credentials in AWSSecrets Manager Turn on rotation.

Show / Hide Answer

---

Question # 98

A developer is creating an AWS Lambda function that searches for Items from an Amazon DynamoDQ table that contains customer contact information. The DynamoDB table items have the customers as the partition and additional properties such as customer -type, name, and job_title. The Lambda function runs whenever a user types a new character into the customer_type text Input. The developer wants to search to return partial matches of all tne email_address property of a particular customer type. The developer does not want to recreate the DynamoDB table. What should the developer do to meet these requirements? 

A. Add a global secondary index (GSI) to the DynamoDB table with customer-type input, asthe partition key and email_address as the sort key. Perform a query operation on the GSIby using the begins with key condition expression with the email_address property.
B. Add a global secondary index (GSI) to the DynamoDB table with email_address as thepartition key and customer_type as the sort key. Perform a query operation on the GSI byusing the begine_with key condition expresses with the email. Address property.
C. Add a local secondary index (LSI) to the DynemoOB table with customer_type as thepartition Key and email_address as the sort Key. Perform a quick operation on the LSI byusing the begine_with Key condition expression with the email-address property.
D. Add a local secondary index (LSI) to the DynamoDB table with job-title as the partitionkey and email_address as the sort key. Perform a query operation on the LSI by using thebegins_with key condition expression with the email_address property.

Show / Hide Answer

---

Question # 99

A company developed an API application on AWS by using Amazon CloudFront, Amazon API Gateway, and AWS Lambda. The API has a minimum of four requests every second. A developer notices that many API users run the same query by using the POST method. The developer wants to cache the POST request to optimize the API resources. Which solution will meet these requirements? 

A. Configure the CloudFront cache. Update the application to return cached content basedupon the default request headers.
B. Override the cache method in the selected stage of API Gateway. Select the POSTmethod.
C. Save the latest request response in Lambda /tmp directory. Update the Lambda functionto check the /tmp directory.
D. Save the latest request in AWS Systems Manager Parameter Store. Modify the Lambdafunction to take the latest request response from Parameter Store.

Show / Hide Answer

---

Question # 100

A developer is writing a serverless application that requires an AWS Lambda function to be invoked every 10 minutes. What is an automated and serverless way to invoke the function? 

A. Deploy an Amazon EC2 instance based on Linux, and edit its /etc/confab file by addinga command to periodically invoke the lambda function
B. Configure an environment variable named PERIOD for the Lambda function. Set thevalue to 600.
C. Create an Amazon EventBridge rule that runs on a regular schedule to invoke theLambda function.
D. Create an Amazon Simple Notification Service (Amazon SNS) topic that has asubscription to the Lambda function with a 600-second timer.

Show / Hide Answer

---

<1234567891011121314151617181920>

---

Download All 608 Questions Check Customers Feedbacks