Amazon DVA-C02 Online Practice Questions and Exam Preparation

Amazon DVA-C02 Online Questions & Answers

• Question 191:

  A developer needs approval from a product owner before the developer can deploy code for an application to production. The developer uses AWS CodePipeline to deploy the application. The developer configures an Amazon Simple Notification Service (Amazon SNS) topic to send notifications to the product owner.

  Which solution is the MOST operationally efficient way for the developer to receive approval from the product owner?

  A. Add a new stage to CodePipeline before the production deployment. Add a manual approval action to the new stage. Add a new notification rule in the pipeline settings. Specify manual approval as the event that initiates the notification. Specify the SNS topic's Amazon Resource Name (ARN) to notify the product owner.
  B. Develop an AWS Step Functions state machine that sends a notification to the product owner and accepts an approval. Add a new stage to CodePipeline before the production deployment. Add the state machine as a Step Functions action to the new stage.
  C. Add a manual approval action to the existing production deployment stage in CodePipeline. Specify the SNS topic's Amazon Resource Name (ARN) while configuring the new manual approval action.
  D. Edit the settings in CodePipeline. Create a new notification rule. Specify manual approval as the event that initiates the notification. Create a new notification target. Specify the SNS topic to notify the product owner. Save the notification rule.
  B. Develop an AWS Step Functions state machine that sends a notification to the product owner and accepts an approval. Add a new stage to CodePipeline before the production deployment. Add the state machine as a Step Functions action to the new stage.

  ---

  Explanation

• Question 192:

  A developer has an application that is composed of many different AWS Lambda functions. The Lambda functions all use some of the same dependencies. To avoid security issues, the developer is constantly updating the dependencies of all of the Lambda functions. The result is duplicated effort for each function.

  How can the developer keep the dependencies of the Lambda functions up to date with the LEAST additional complexity?

  A. Define a maintenance window for the Lambda functions to ensure that the functions get updated copies of the dependencies.
  B. Upgrade the Lambda functions to the most recent runtime version.
  C. Define a Lambda layer that contains all of the shared dependencies.
  D. Use an AWS CodeCommit repository to host the dependencies in a centralized location.
  C. Define a Lambda layer that contains all of the shared dependencies.

  ---

  Explanation

• Question 193:

  A developer needs to write an AWS CloudFormation template on a local machine and deploy a CloudFormation stack to AWS.

  What must the developer do to complete these tasks?

  A. Install the AWS CLI. Configure the AWS CLI by using an IAM user name and password.
  B. Install the AWS CLI. Configure the AWS CLI by using an SSH key.
  C. Install the AWS CLI. Configure the AWS CLI by using an IAM user access key and secret key.
  D. Install an AWS software development kit (SDK). Configure the SDK by using an X.509 certificate.
  C. Install the AWS CLI. Configure the AWS CLI by using an IAM user access key and secret key.

  ---

  Explanation

• Question 194:

  A developer is building a microservices-based application by using Python on AWS and several AWS services The developer must use AWS X-Ray The developer views the service map by using the console to view the service dependencies. During testing, the developer notices that some services are missing from the service map

  What can the developer do to ensure that all services appear in the X-Ray service map?

  A. Modify the X-Ray Python agent configuration in each service to increase the sampling rate
  B. Instrument the application by using the X-Ray SDK for Python. Install the X-Ray SDK for all the services that the application uses
  C. Enable X-Ray data aggregation in Amazon CloudWatch Logs for all the services that the application uses
  D. Increase the X-Ray service map timeout value in the X-Ray console
  B. Instrument the application by using the X-Ray SDK for Python. Install the X-Ray SDK for all the services that the application uses

  ---

  Explanation

  The X-Ray SDK for Python provides libraries and tools for instrumenting Python applications that use AWS services and other AWS X-Ray integrations. By installing the X-Ray SDK for all the services that the application uses, the developer can ensure that all the service dependencies are captured and displayed in the X-Ray service map. The other options are not relevant or effective for this scenario. References AWS X-Ray SDK for Python Instrumenting a Python Application

• Question 195:

  A company has an application that is hosted on Amazon EC2 instances The application stores objects in an Amazon S3 bucket and allows users to download objects from the S3 bucket A developer turns on S3 Block Public Access for the S3 bucket After this change, users report errors when they attempt to download objects The developer needs to implement a solution so that only users who are signed in to the application can access objects in the S3 bucket.

  Which combination of steps will meet these requirements in the MOST secure way? (Select TWO.)

  A. Create an EC2 instance profile and role with an appropriate policy Associate the role with the EC2 instances
  B. Create an 1AM user with an appropriate policy. Store the access key ID and secret access key on the EC2 instances
  C. Modify the application to use the S3 GeneratePresignedUrl API call
  D. Modify the application to use the S3 GetObject API call and to return the object handle to the user
  E. Modify the application to delegate requests to the S3 bucket.
  A. Create an EC2 instance profile and role with an appropriate policy Associate the role with the EC2 instances
  C. Modify the application to use the S3 GeneratePresignedUrl API call

  ---

  Explanation

  The most secure way to allow the EC2 instances to access the S3 bucket is to use an EC2 instance profile and role with an appropriate policy that grants the necessary permissions. This way, the EC2 instances can use temporary security credentials that are automatically rotated and do not need to store any access keys on the instances. To allow the users who are signed in to the application to download objects from the S3 bucket, the application can use the S3 GeneratePresignedUrl API call to create a pre-signed URL that grants temporary access to a specific object. The pre-signed URL can be returned to the user, who can then use it to download the object within a specified time period. References Use Amazon S3 with Amazon EC2 How to Access AWS S3 Bucket from EC2 Instance In a Secured Way Sharing an Object with Others

• Question 196:

  A developer is creating a solution to track an account's Amazon S3 buckets over time. The developer has created an AWS Lambda function that will run on a schedule. The function will list the account's S3 buckets and will store the list in an Amazon DynamoDB table. The developer receives a permissions error when the developer runs the function with the AWSLambdaBasicExecutionRole AWS managed policy.

  Which combination of permissions should the developer use to resolve this error? (Choose two.)

  A. Cross-account IAM role
  B. Permission for the Lambda function to list buckets in Amazon S3
  C. Permission for the Lambda function to write in DynamoDB
  D. Permission for Amazon S3 to invoke the Lambda function
  E. Permission for DynamoDB to invoke the Lambda function
  B. Permission for the Lambda function to list buckets in Amazon S3
  C. Permission for the Lambda function to write in DynamoDB

  ---

  Explanation

• Question 197:

  A company has an ecommerce web application that uses an on-premises MySQL database as a data store. The company migrates the on-premises MySQL database to Amazon RDS for MySQL.

  A developer needs to configure the application's access to the RDS for MySQL database. The developer's solution must not use long term credentials.

  Which solution will meet these requirements?

  A. Enable IAM database authentication on the RDS for MySQL DB instance. Create an IAM role that has the minimum required permissions. Assign the role to the application.
  B. Store the MySQL credentials as secrets in AWS Secrets Manager. Create an IAM role that has the minimum required permissions to retrieve the secrets. Assign the role to the application.
  C. Configure the MySQL credentials as environment variables that are available at runtime for the application.
  D. Store the MySQL credentials as SecureString parameters in AWS Systems Manager Parameter Store. Create an IAM role that has the minimum required permissions to retrieve the parameters. Assign the role to the application.
  B. Store the MySQL credentials as secrets in AWS Secrets Manager. Create an IAM role that has the minimum required permissions to retrieve the secrets. Assign the role to the application.

  ---

  Explanation

• Question 198:

  A developer is building an application that uses Amazon DynamoDB. The developer wants to retrieve multiple specific items from the database with a single API call. Which DynamoDB API call will meet these requirements with the MINIMUM impact on the database?

  A. BatchGetItem
  B. GetItem
  C. Scan
  D. Query
  A. BatchGetItem

  ---

  Explanation

  https://docs.aws.amazon.com/amazondynamodb/latest/APIReference/API_BatchGetItem.html

• Question 199:

  A developer is monitoring an application that runs on an Amazon EC2 instance. The developer has configured a custom Amazon CloudWatch metric with data granularity of 1 second. If any issues occur, the developer wants to be notified within 30 seconds by Amazon Simple Notification Service (Amazon SNS).

  What should the developer do to meet this requirement?

  A. Configure a high-resolution CloudWatch alarm.
  B. Set up a custom CloudWatch dashboard.
  C. Use Amazon CloudWatch Logs Insights.
  D. Change to a default CloudWatch metric.
  A. Configure a high-resolution CloudWatch alarm.

  ---

  Explanation

• Question 200:

  A company is using AWS CodePipeline to deliver one of its applications. The delivery pipeline is triggered by changes to the main branch of an AWS CodeCommit repository and uses AWS CodeBuild to implement the test and build stages of the process and AWS CodeDeploy to deploy the application.

  The pipeline has been operating successfully for several months and there have been no modifications. Following a recent change to the application's source code, AWS CodeDeploy has not deployed the updated application as expected.

  What are the possible causes? (Choose two.)

  A. The change was not made in the main branch of the AWS CodeCommit repository.
  B. One of the earlier stages in the pipeline failed and the pipeline has terminated.
  C. One of the Amazon EC2 instances in the company's AWS CodePipeline cluster is inactive.
  D. The AWS CodePipeline is incorrectly configured and is not invoking AWS CodeDeploy.
  E. AWS CodePipeline does not have permissions to access AWS CodeCommit.
  A. The change was not made in the main branch of the AWS CodeCommit repository.
  B. One of the earlier stages in the pipeline failed and the pipeline has terminated.

  ---

  Explanation