Amazon DVA-C02 Online Practice Questions and Exam Preparation

Amazon DVA-C02 Online Questions & Answers

• Question 171:

  A developer wants to reduce risk when deploying a new version of an existing AWS Lambda function. To test the Lambda function, the developer needs to split the traffic between the existing version and the new version of the Lambda function.

  Which solution will meet these requirements?

  A. Configure a weighted routing policy in Amazon Route 53. Associate the versions of the Lambda function with the weighted routing policy.
  B. Create a function alias. Configure the alias to split the traffic between the two versions of the Lambda function.
  C. Create an Application Load Balancer (ALB) that uses the Lambda function as a target. Configure the ALB to split the traffic between the two versions of the Lambda function.
  D. Create the new version of the Lambda function as a Lambda layer on the existing version. Configure the function to split the traffic between the two layers.
  B. Create a function alias. Configure the alias to split the traffic between the two versions of the Lambda function.

  ---

  Explanation

• Question 172:

  A developer is creating a stock trading application. The developer needs a solution to send text messages to application users to confirmation when a trade has been completed.

  The solution must deliver messages in the order a user makes stock trades. The solution must not send duplicate messages.

  Which solution will meet these requirements?

  A. Configure the application to publish messages to an Amazon Kinesis Data Firehose delivery stream. Configure the delivery stream to have a destination of each user's mobile phone number that is passed in the trade confirmation message.
  B. Create an Amazon Simple Queue Service (Amazon SQS) FIFO queue. Use the SendMessageln API call to send the trade confirmation messages to the queue. Use the SendMessageOut API to send the messages to users by using the information provided in the trade confirmation message.
  C. Configure a pipe in Amazon EventBridge Pipes. Connect the application to the pipe as a source. Configure the pipe to use each user's mobile phone number as a target. Configure the pipe to send incoming events to the users.
  D. Create an Amazon Simple Notification Service (SNS) FIFO topic. Configure the application to use the AWS SDK to publish notifications to the SNS topic to send SMS messages to the users.
  C. Configure a pipe in Amazon EventBridge Pipes. Connect the application to the pipe as a source. Configure the pipe to use each user's mobile phone number as a target. Configure the pipe to send incoming events to the users.

  ---

  Explanation

• Question 173:

  A developer updates an AWS Lambda function that an Amazon API Gateway API uses. The API is the backend for a web application.

  The developer needs to test the updated Lambda function before deploying the Lambda function to production. The testing must not affect any production users of the web application.

  Which solution will meet these requirements in the MOST operationally efficient way?

  A. Create a canary release deployment for the existing API stage. Deploy the API to the existing stage. Test the updated Lambda function by using the existing URL.
  B. Update the API Gateway API endpoint type to private. Deploy the changes to the existing API stage. Test the API by using the existing URL.
  C. Create a new test API stage in API Gateway. Add stage variables to deploy the updated Lambda function to only the test stage. Test the updated Lambda function by using the new stage URL.
  D. Create a new AWS CloudFormation stack to deploy a copy of the entire production API and Lambda function. Use the stack's API URL to test the updated Lambda function.
  C. Create a new test API stage in API Gateway. Add stage variables to deploy the updated Lambda function to only the test stage. Test the updated Lambda function by using the new stage URL.

  ---

  Explanation

• Question 174:

  A developer is creating AWS CloudFormation templates to manage an application's deployment in Amazon Elastic Container Service (Amazon ECS) through AWS CodeDeploy. The developer wants to automatically deploy new versions of the application to a percentage of users before the new version becomes available for all users.

  How should the developer manage the deployment of the new version?

  A. Modify the CloudFormation template to include a Transform section and the AWS::CodeDeploy::BlueGreen hook.
  B. Deploy the new version in a new CloudFormation stack. After testing is complete, update the application's DNS records for the new stack.
  C. Run CloudFormation stack updates on the application stack to deploy new application versions when they are available.
  D. Create a nested stack for the new version. Include a Transform section and the AWS::CodeDeploy::BlueGreen hook.
  A. Modify the CloudFormation template to include a Transform section and the AWS::CodeDeploy::BlueGreen hook.

  ---

  Explanation

  leverages the AWS::CodeDeploy::BlueGreen transform hook in the CloudFormation template. This hook allows the developer to specify blue/green deployment strategies directly in the CloudFormation template. It facilitates deploying new versions to a subset of users (canary or linear deployments) before fully rolling out to all users. This approach is designed for seamless and automated deployments using AWS CodeDeploy and ECS.

• Question 175:

  A company is developing an application that will be accessed through the Amazon API Gateway REST API. Registered users should be the only ones who can access certain resources of this API. The token being used should expire automatically and needs to be refreshed periodically.

  How can a developer meet these requirements?

  A. Create an Amazon Cognito identity pool, configure the Amazon Cognito Authorizer in API Gateway, and use the temporary credentials generated by the identity pool.
  B. Create and maintain a database record for each user with a corresponding token and use an AWS Lambda authorizer in API Gateway.
  C. Create an Amazon Cognito user pool, configure the Cognito Authorizer in API Gateway, and use the identity or access token.
  D. Create an IAM user for each API user, attach an invoke permissions policy to the API, and use an IAM authorizer in API Gateway.
  C. Create an Amazon Cognito user pool, configure the Cognito Authorizer in API Gateway, and use the identity or access token.

  ---

  Explanation

• Question 176:

  A developer is creating an AWS Lambda function that will connect to an Amazon RDS for MySQL instance. The developer wants to store the database credentials. The database credentials need to be encrypted and the database password needs to be automatically rotated.

  Which solution will meet these requirements?

  A. Store the database credentials as environment variables for the Lambda function. Set the environment variables to rotate automatically.
  B. Store the database credentials in AWS Secrets Manager. Set up managed rotation on the database credentials.
  C. Store the database credentials in AWS Systems Manager Parameter Store as secure string parameters. Set up managed rotation on the parameters.
  D. Store the database credentials in the X-Amz-Security-Token parameter. Set up managed rotation on the parameter.
  B. Store the database credentials in AWS Secrets Manager. Set up managed rotation on the database credentials.

  ---

  Explanation

• Question 177:

  A company is offering APIs as a service over the internet to provide unauthenticated read access to statistical information that is updated daily. The company uses Amazon API Gateway and AWS Lambda to develop the APIs. The service has become popular, and the company wants to enhance the responsiveness of the APIs.

  Which action can help the company achieve this goal?

  A. Enable API caching in API Gateway.
  B. Configure API Gateway to use an interface VPC endpoint.
  C. Enable cross-origin resource sharing (CORS) for the APIs.
  D. Configure usage plans and API keys in API Gateway.
  A. Enable API caching in API Gateway.

  ---

  Explanation

  https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-caching.html

• Question 178:

  A company stores its data in data tables in a series of Amazon S3 buckets. The company received an alert that customer credit card information might have been exposed in a data table on one of the company's public applications. A developer needs to identify all potential exposures within the application environment.

  Which solution will meet these requirements?

  A. Use Amazon Athena to run a job on the S3 buckets that contain the affected data. Filter the findings by using the SensitiveData:S3Object/Personal finding type.
  B. Use Amazon Macie to run a job on the S3 buckets that contain the affected data. Filter the findings by using the SensitiveData:S3Object/Financial finding type.
  C. Use Amazon Macie to run a job on the S3 buckets that contain the affected data. Filter the findings by using the SensitiveData:S3Object/Personal finding type.
  D. Use Amazon Athena to run a job on the S3 buckets that contain the affected data. Filter the findings by using the SensitiveData:S3Object/Financial finding type.
  B. Use Amazon Macie to run a job on the S3 buckets that contain the affected data. Filter the findings by using the SensitiveData:S3Object/Financial finding type.

  ---

  Explanation

• Question 179:

  A developer is setting up infrastructure by using AWS CloudFormation. If an error occurs when the resources described in the Cloud Formation template are provisioned, successfully provisioned resources must be preserved. The developer must provision and update the CloudFormation stack by using the AWS CLI.

  Which solution will meet these requirements?

  A. Add an --enable-termination-protection command line option to the create-stack command and the update-stack command.
  B. Add a --disable-rollback command line option to the create-stack command and the update-stack command.
  C. Add a --parameters ParameterKey=PreserveResources,ParameterValue=True command line option to the create-stack command and the update-stack command.
  D. Add a --tags Key=PreserveResources,Value=True command line option to the create-stack command and the update-stack command.
  B. Add a --disable-rollback command line option to the create-stack command and the update-stack command.

  ---

  Explanation

• Question 180:

  A developer has code that is stored in an Amazon S3 bucket. The code must be deployed as an AWS Lambda function across multiple accounts in the same AWS Region as the S3 bucket an AWS CloudPormation template that runs for each account will deploy the Lambda function.

  What is the MOST secure way to allow CloudFormaton to access the Lambda Code in the S3 bucket?

  A. Grant the CloudFormation service role the S3 ListBucket and GetObject permissions. Add a bucket policy to Amazon S3 with the principal of "AWS" (account numbers)
  B. Grant the CloudFormation service row the S3 GetObfect permission. Add a Bucket policy to Amazon S3 with the principal of "'"
  C. Use a service-based link to grant the Lambda function the S3 ListBucket and GetObject permissions by explicitly adding the S3 bucket's account number in the resource.
  D. Use a service-based link to grant the Lambda function the S3 GetObject permission Add a resource of "** to allow access to the S3 bucket.
  B. Grant the CloudFormation service row the S3 GetObfect permission. Add a Bucket policy to Amazon S3 with the principal of "'"

  ---

  Explanation

  This solution allows the CloudFormation service role to access the S3 bucket from any account, as long as it has the S3 GetObject permission. The bucket policy grants access to any principal with the GetObject permission, which is the least privilege needed to deploy the Lambda code. This is more secure than granting ListBucket permission, which is not required for deploying Lambda code, or using a service-based link, which is not supported for Lambda functions.