Amazon DVA-C02 Online Practice Questions and Exam Preparation

Amazon DVA-C02 Online Questions & Answers

• Question 161:

  A company wants to test its web application more frequently. The company deploys the application by using a separate AWS CloudFormation stack for each environment. The company deploys the same CloudFormation template to each stack as the application progresses through the development lifecycle.

  A developer needs to build in notifications for the quality assurance (QA) team. The developer wants the notifications to occur for new deployments in the final preproduction environment.

  Which solution will meet these requirements?

  A. Create an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe the QA team to the Amazon SNS topic. Update the CloudFormation stack options to point to the SNS topic in the pre-production environment.
  B. Create an AWS Lambda function that notifies the QA team. Create an Amazon EventBridge rule to invoke the Lambda function on the default event bus. Filter the events on the CloudFormation service and on the CloudFormation stack Amazon Resource Name (ARN).
  C. Create an Amazon CloudWatch alarm that monitors the metrics from CloudFormation. Filter the metrics on the stack name and the stack status. Configure the CloudWatch alarm to notify the QA team.
  D. Create an AWS Lambda function that notifies the QA team. Configure the event source mapping to receive events from CloudFormation. Specify the filtering values to limit invocations to the desired CloudFormation stack.
  A. Create an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe the QA team to the Amazon SNS topic. Update the CloudFormation stack options to point to the SNS topic in the pre-production environment.

  ---

  Explanation

• Question 162:

  A developer has built an application that inserts data into an Amazon DynamoDB table. The table is configured to use provisioned capacity. The application is deployed on a burstable nano Amazon EC2 instance. The application logs show that the application has been failing because of a ProvisionedThroughputExceededException error.

  Which actions should the developer take to resolve this issue? (Choose two.)

  A. Move the application to a larger EC2 instance.
  B. Increase the number of read capacity units (RCUs) that are provisioned for the DynamoDB table.
  C. Reduce the frequency of requests to DynamoDB by implementing exponential backoff.
  D. Increase the frequency of requests to DynamoDB by decreasing the retry delay.
  E. Change the capacity mode of the DynamoDB table from provisioned to on-demand.
  C. Reduce the frequency of requests to DynamoDB by implementing exponential backoff.
  E. Change the capacity mode of the DynamoDB table from provisioned to on-demand.

  ---

  Explanation

• Question 163:

  A developer is creating a web application for a school that stores data in Amazon DynamoDB. The ExamScores table has the following attributes: student_id, subject_name, and top_score.

  Each item in the ExamScores table is identified with student_id as the partition key and subject_name as the sort key. The web application needs to display the student _id for the top scores for each school subject. The developer needs to increase the speed of the queries to retrieve the student_id for the top scorer for each school subject.

  Which solution will meet these requirements?

  A. Create a local secondary index (LSI) with subject_name as the partition key and top_score as the sort key.
  B. Create a local secondary index (LSI) with top_score as the partition key and student_id as the sort key.
  C. Create a global secondary index (GSI) with subject_name as the partition key and top_score as the sort key.
  D. Create a global secondary index (GSI) with subject_name as the partition key and student_id as the sort key.
  C. Create a global secondary index (GSI) with subject_name as the partition key and top_score as the sort key.

  ---

  Explanation

  GSI - diff part key and sort key | LSI - same part key and diff sort key

• Question 164:

  A developer is creating an AWS Serverless Application Model (AWS SAM) template. The AWS SAM template contains the definition of multiple AWS Lambda functions, an Amazon S3 bucket, and an Amazon CloudFront distribution. One of

  the Lambda functions runs on Lambda@Edge in the CloudFront distribution. The S3 bucket is configured as an origin for the CloudFront distribution.

  When the developer deploys the AWS SAM template in the eu-west-1 Region, the creation of the stack fails.

  Which of the following could be the reason for this issue?

  A. CloudFront distributions can be created only in the us-east-1 Region.
  B. Lambda@Edge functions can be created only in the us-east-1 Region.
  C. A single AWS SAM template cannot contain multiple Lambda functions.
  D. The CloudFront distribution and the S3 bucket cannot be created in the same Region.
  B. Lambda@Edge functions can be created only in the us-east-1 Region.

  ---

  Explanation

• Question 165:

  A company is building a serverless application. The application uses an API key to authenticate with a third-party application. The company wants to store the external API key as a part of an AWS Lambda configuration. The company needs to have full control over the AWS Key Management Service (AWS KMS) keys that will encrypt the API key and should be visible only to authorized entities.

  Which solution will meet these requirements?

  A. Store the API key in AWS Systems Manager Parameter Store as a string parameter. Use the default AWS KMS key that AWS provides to encrypt the API key.
  B. Store the API key in AWS Lambda environment variables. Create an AWS KMS customer managed key to encrypt the API key.
  C. Store the API key in the code repository. Use an AWS managed key to encrypt the code repository.
  D. Store the API key as an Amazon DynamoDB table record. Use an AWS managed key to encrypt the API key.
  B. Store the API key in AWS Lambda environment variables. Create an AWS KMS customer managed key to encrypt the API key.

  ---

  Explanation

• Question 166:

  A developer accesses AWS CodeCommit over SSH. The SSH keys configured to access AWS CodeCommit are tied to a user with the following permissions:

  

  The developer needs to create/delete branches.

  Which specific IAM permissions need to be added, based on the principle of least privilege?

  A. "codecommit:CreateBranch", "codecommit:DeleteBranch"
  B. "codecommit:Put*"
  C. "codecommit:Update*"
  D. "codecommit:*"
  A. "codecommit:CreateBranch", "codecommit:DeleteBranch"

  ---

  Explanation

  This solution allows the developer to create and delete branches in AWS CodeCommit by granting the codecommit:CreateBranch and codecommit:DeleteBranch permissions. These are the minimum permissions required for this task,

  adhering to the principle of least privilege.

  Option B grants too many permissions, such as codecommit:Put*, which allows the developer to create, update, or delete any resource in CodeCommit.

  Option C grants too few permissions, such as codecommit:Update*, which does not allow the developer to create or delete branches.

  Option D grants all permissions, such as codecommit:*, which is not secure or recommended.

  References: [AWS CodeCommit Permissions Reference], [Create a Branch (AWS CLI)]

• Question 167:

  A company runs an application on AWS. The application stores data in an Amazon DynamoDB table. Some queries are taking a long time to run. These slow queries involve an attribute that is not the table's partition key or sort key.

  The amount of data that the application stores in the DynamoDB table is expected to increase significantly. A developer must increase the performance of the queries.

  Which solution will meet these requirements?

  A. Increase the page size for each request by setting the Limit parameter to be higher than the default value. Configure the application to retry any request that exceeds the provisioned throughput.
  B. Create a global secondary index (GSI). Set query attribute to be the partition key of the index.
  C. Perform a parallel scan operation by issuing individual scan requests. In the parameters, specify the segment for the scan requests and the total number of segments for the parallel scan.
  D. Turn on read capacity auto scaling for the DynamoDB table. Increase the maximum read capacity units (RCUs).
  B. Create a global secondary index (GSI). Set query attribute to be the partition key of the index.

  ---

  Explanation

  Creating a global secondary index (GSI) is the best solution to improve the performance of the queries that involve an attribute that is not the table's partition key or sort key. A GSI allows you to define an alternate key for your table and query the data using that key. This way, you can avoid scanning the entire table and reduce the latency and cost of your queries. You should also follow the best practices for designing and using GSIs in DynamoDB12. References Working with Global Secondary Indexes - Amazon DynamoDB DynamoDB Performance and Latency - Everything You Need To Know

• Question 168:

  A developer is building an application on AWS. The application includes an AWS Lambda function that processes messages from an Amazon Simple Queue Service (Amazon SQS) queue.

  The Lambda function sometimes fails or times out. The developer needs to figure out why the Lambda function fails to process some messages.

  Which solution will meet these requirements with the LEAST operational overhead?

  A. Increase the maximum timeout of the Lambda function to 15 minutes. Check the AWS CloudTrail event history for error details.
  B. Increase the visibility timeout of the SQS queue. Check logs in Amazon CloudWatch Logs for error details.
  C. Create a dead-letter queue. Configure the Lambda function to send the failed messages to the dead-letter queue.
  D. Create an Amazon DynamoDB table. Update the Lambda function to send the failed messages to the DynamoDB table.
  B. Increase the visibility timeout of the SQS queue. Check logs in Amazon CloudWatch Logs for error details.

  ---

  Explanation

• Question 169:

  A developer is designing a serverless application with two AWS Lambda functions to process photos. One Lambda function stores objects in an Amazon S3 bucket and stores the associated metadata in an Amazon DynamoDB table. The other Lambda function fetches the objects from the S3 bucket by using the metadata from the DynamoDB table. Both Lambda functions use the same Python library to perform complex computations and are approaching the quota for the maximum size of zipped deployment packages.

  What should the developer do to reduce the size of the Lambda deployment packages with the LEAST operational overhead?

  A. Package each Python library in its own .zip file archive. Deploy each Lambda function with its own copy of the library.
  B. Create a Lambda layer with the required Python library. Use the Lambda layer in both Lambda functions.
  C. Combine the two Lambda functions into one Lambda function. Deploy the Lambda function as a single .zip file archive.
  D. Download the Python library to an S3 bucket. Program the Lambda functions to reference the object URLs.
  B. Create a Lambda layer with the required Python library. Use the Lambda layer in both Lambda functions.

  ---

  Explanation

• Question 170:

  A developer is writing an application to encrypt files outside of AWS before uploading the files to an Amazon S3 bucket. The encryption must be symmetric and must be performed inside the application.

  How can the developer implement the encryption in the application to meet these requirements?

  A. Create a data key in AWS Key Management Service (AWS KMS). Use the AWS Encryption SDK to encrypt the files.
  B. Create a Hash-Based Message Authentication Code (HMAC) key in AWS Key Management Service (AWS KMS). Use the AWS Encryption SDK to encrypt the files.
  C. Create a data key pair in AWS Key Management Service (AWS KMS). Use the AWS CLI to encrypt the files.
  D. Create a data key in AWS Key Management Service (AWS KMS). Use the AWS CLI to encrypt the files.
  A. Create a data key in AWS Key Management Service (AWS KMS). Use the AWS Encryption SDK to encrypt the files.

  ---

  Explanation