A developer from AnyCompany's AWS account needs access to the Example Corp AWS account AnyCompany uses an identity provider that is compatible with OpenID Connect. What is the MOST secure way for Example Corp to allow developer access?
A. Create a cross-account role and call the AssumeRole API operation
B. Create a user in the Example Corp account and provide the access keys
C. Create a user in the Example Corp account and provide the credentials
D. Create a cross-account role and call the AssumeRoleWithWebldentity API operation
A company has a web application In an Amazon Elastic Container Service (Amazon ECS) cluster running hundreds of secure services in AWS Fargate containers. The services are in target groups routed by an Application Load Balancer (ALB) Application users log in to the website anonymously, but they must be authenticated using any OpenID Connect protocol-compatible identity provider (IdP) to access the secure services Which authentication approach would meet these requirements with the LEAST amount of effort?
A. Configure the services to use Amazon Cognito.
B. Configure the ALB to use Amazon Cognito
C. Configure the services to use AWS Security Token Service (AWS STS) with the OpenID Connect IdP.
D. Configure the Amazon ECS cluster to use AWS Security Token Service (AWS STS) with the OpenID Connect IdP
A video-hosting website has two types of members: those who pay a fee. and those who do not Each video upload places a message in Amazon SQS A fleet of Amazon EC2 instances polls Amazon SQS and processes each video The developer needs to ensure that the videos uploaded by the paying members are processed first How can the developer meet this requirement?
A. Create two SQS queues: one for paying members, and one for non-paying members Poll the paying member queue first and then poll the non-paying member queue
B. Use SQS to set priorities on individual items within a single queue: give the paying members' videos the highest priority.
C. Use SQS to set priorities on individual items within a single queue and use Amazon SNS to encode the videos
D. Create two Amazon SNS topics: one for paying members and one for non-paying members Use SNS topic subscription priorities to differentiate between the two types of members.
A developer must modify an Alexa skill backed by an AWS Lambda function to access an Amazon DynamoDB table in a second account A role in the second account has been created with permissions to access the table How should the table be accessed?
A. Modify the Lambda function execution role's permissions to include the new role
B. Change the Lambda function execution role to be the new role
C. Assume the new role in the Lambda function when accessing the table
D. Store the access key and the secret key for the new role and use them when accessing the table
A developer is designing a distributed application built using a microservices architect spanning multiple AWS accounts. The company's operations team wants to analyze and debug application issues from a centralized account. How can the developer meet these requirements?
A. Use an Amazon X-Ray agent with role assumption on to publish data into the centralized account.
B. Use Amazon X-Ray and create a new IAM user to publish the access keys into the centralized account.
C. Use VPC Flow Logs to collect application logs across different accounts.
D. Enable AWS CloudTrail to publish the trails in an Amazon S3 bucket in the centralized account.
A three-tier application hosted on AWS uses Amazon RDS for MYSQL as its database. A developer must ensure the database credentials are stored and accessed securely. What is the MOST secure way for the developer to achieve this?
A. Store the credentials in a configuration file and commit it to the GIT repository.
B. Store the credentials in AWS Secrets Manager and enable automatic secret rotation.
C. Store the credentials using Amazon RDS and enable automatic rotation
D. Store the credentials in code and handle credentials rotation within the application.
A developer needs to modify an application architecture to meet new functional requirements. Application data is stored in Amazon DynamoDB and processed for analysis in a rightly batch. The system analysts do not want to wait unit the
next day to view the processed data and have asked to have it available in near-real time.
Which application architect pattern would enables the data to be processed as it is received?
A. Evert driven
B. Client served driven
C. Fan-out driven
D. Schedule driven
A developer is building a highly secure healthcare application using .. application requires writing temporary data to /tmp storage on an AWS Lambda function. How should the developer encrypt this data?
A. Enable Amazon EBS volume encryption with an AWS KMS .. configuration so that all storage attached to the Lambda function is encrypted.
B. Set up the Lambda function with a role and key policy to access an AWS KMS CMK Use the CMK to generate a data key used to encrypt all data prior to writing to /tmp storage.
C. Use OpenSSL to generate a symmetric encryption key on Lambda startup Use this key to encrypt the data prior to writing to /tmp.
D. Use an on-premises hardware security module (HSM) to generate keys where the Lambda function requests a data key from the HSM and uses that to encrypt data on all requests to the function.
A company runs its APIs using Amazon API Gateway in front of AWS Lambda functions The company wants to add logging at the API level Each API must have production and development environments The developer wants to enable
different logging levels in both environments.
How can these requirements be met?
A. Set up a stage for each environment In each stage, point to different Lambda functions that implement the logging logic m the code Access the logs in Amazon CloudWatch Logs.
B. Set up a stage for each environment In each stage, define a different logging level according to the logging requirements Access the logs in Amazon CloudWatch Logs.
C. Set up a stage and use the same Lambda functions In Amazon CloudWatch Logs set up a filter based on the log level according to the logging requirements.
D. Set up a stage for each environment In each stage, define a variable for the log level Set the value according to the logging requirements.
A developer must increase read performance from an unencrypted Amazon S3 bucket. The application requires 100.000 read requests each second Cost-effectiveness is a priority. What would be the SIMPLEST approach to implement these requirements?
A. Create 20 or more prefixes in Amazon S3 Place files by prefixes Read in parallel by prefixes
B. Create 20 of more AWS accounts Create a bucket in each account Read in parallel by bucket
C. Deploy Memcached on Amazon EC2 Cache the files in memory Retrieve from the Memcached cache
D. Copy all files to Amazon DynamoDB Index the files with S3 metadata Retrieve from DynamoDB
Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Amazon exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your DVA-C01 exam preparations and Amazon certification application, do not hesitate to visit our Vcedump.com to find your solutions here.