Amazon DVA-C02 Online Practice Questions and Exam Preparation

Amazon DVA-C02 Online Questions & Answers

• Question 201:

  A company runs an application on AWS. The application consists of a static website that is hosted on Amazon S3. The application includes Amazon API Gateway APIs that invoke AWS Lambda functions. During a period of high traffic on the

  application, application users reported that the application was slow at irregular intervals. There were no failed requests.

  A developer needs to find the slow executions across all the Lambda functions.

  Which solution will meet these requirements?

  A. Perform a query across all the Lambda function log groups by using Amazon CloudWatch Logs Insights. Filter on type of report and sort descending by Lambda function execution duration.
  B. Enable AWS CloudTrail Insights on the account where the Lambda functions are running. After CloudTrail Insights has finished processing, review CloudTrail Insights to find the anomalous functions.
  C. Enable AWS X-Ray for all the Lambda functions. Configure an X-Ray insight on a new group that includes all the Lambda functions. After the X-Ray insight has finished processing, review the X-Ray logs.
  D. Set up AWS Glue to crawl through the logs in Amazon CloudWatch Logs for the Lambda functions. Configure an AWS Glue job to transform the logs into a structured format and to output the logs into Amazon S3. Use the Amazon CloudWatch dashboard to visualize the slowest functions based on the duration.
  B. Enable AWS CloudTrail Insights on the account where the Lambda functions are running. After CloudTrail Insights has finished processing, review CloudTrail Insights to find the anomalous functions.

  ---

  Explanation

• Question 202:

  A developer must digitally sign a document with AWS Key Management Service (AWS KMS) so that another application that does not have AWS KMS access can verify the authenticity of the document.

  Which solution will meet this requirement?

  A. Use AWS KMS with a symmetric key. Sign the document with AWS KMS. Make the key available for verification.
  B. Use AWS KMS with a symmetric key to generate an envelope key. Sign the document with AWS KMS. Make the envelope key available for verification.
  C. Use AWS KMS with asymmetric keys. Sign the document by using the private key. Make the public key available for verification.
  D. Use AWS KMS with asymmetric keys. Sign the document by using the public key. Make the private key available for verification.
  C. Use AWS KMS with asymmetric keys. Sign the document by using the private key. Make the public key available for verification.

  ---

  Explanation

• Question 203:

  A developer is incorporating AWS X-Ray into an application that handles personal identifiable information (PII). The application is hosted on Amazon EC2 instances. The application trace messages include encrypted PII and go to Amazon CloudWatch. The developer needs to ensure that no PII goes outside of the EC2 instances.

  Which solution will meet these requirements?

  A. Manually instrument the X-Ray SDK in the application code.
  B. Use the X-Ray auto-instrumentation agent.
  C. Use Amazon Macie to detect and hide PII. Call the X-Ray API from AWS Lambda.
  D. Use AWS Distro for Open Telemetry.
  A. Manually instrument the X-Ray SDK in the application code.

  ---

  Explanation

  By manually instrumenting the X-Ray SDK in the application code, the developer can have full control over which data is included in the trace messages. This way, the developer can ensure that no PII is sent to X-Ray by carefully handling the PII within the application and not including it in the trace messages.

• Question 204:

  A company deploys a photo-processing application to an Amazon EC2 instance. The application needs to process each photo in less than 5 seconds. If processing takes longer than 5 seconds, the company's development team must receive a notification.

  How can a developer implement the required time measurement and notification with the LEAST operational overhead?

  A. Create an Amazon CloudWatch custom metric. Each time a photo is processed, publish the processing time as a metric value. Create a CloudWatch alarm that is based on a static threshold of 5 seconds. Notify the development team by using an Amazon Simple Notification Service (Amazon SNS) topic.
  B. Create an Amazon Simple Queue Service (Amazon SQS) queue. Each time a photo is processed, publish the processing time to the queue. Create an application to consume from the queue and to determine whether any values are more than 5 seconds. Notify the development team by using an Amazon Simple Notification Service (Amazon SNS) topic.
  C. Create an Amazon CloudWatch custom metric. Each time a photo is processed, publish the processing time as a metric value. Create a CloudWatch alarm that enters ALARM state if the average of values is greater than 5 seconds. Notify the development team by sending an Amazon Simple Email Service (Amazon SES) message.
  D. Create an Amazon Kinesis data stream. Each time a photo is processed, publish the processing time to the data stream. Create an Amazon CloudWatch alarm that enters ALARM state if any values are more than 5 seconds. Notify the development team by using an Amazon Simple Notification Service (Amazon SNS) topic.
  A. Create an Amazon CloudWatch custom metric. Each time a photo is processed, publish the processing time as a metric value. Create a CloudWatch alarm that is based on a static threshold of 5 seconds. Notify the development team by using an Amazon Simple Notification Service (Amazon SNS) topic.

  ---

  Explanation

• Question 205:

  A company is preparing to migrate an application to the company's first AWS environment. Before this migration, a developer is creating a proof-of-concept application to validate a model for building and deploying container-based applications on AWS.

  Which combination of steps should the developer take to deploy the containerized proof-of- concept application with the LEAST operational effort? (Select TWO.)

  A. Package the application into a zip file by using a command line tool. Upload the package to Amazon S3
  B. Package the application into a container image by using the Docker CLI. Upload the image to Amazon Elastic Container Registry (Amazon ECR)
  C. Deploy the application to an Amazon EC2 instance by using AWS CodeDeploy.
  D. Deploy the application to Amazon Elastic Kubernetes Service (Amazon EKS) on AWS Fargate
  E. Deploy the application to Amazon Elastic Container Service (Amazon ECS) on AWS Fargate
  B. Package the application into a container image by using the Docker CLI. Upload the image to Amazon Elastic Container Registry (Amazon ECR)
  E. Deploy the application to Amazon Elastic Container Service (Amazon ECS) on AWS Fargate

  ---

  Explanation

  To deploy a containerized application on AWS with the least operational effort, the developer should package the application into a container image by using the Docker CLI and upload the image to Amazon ECR, which is a fully managed container registry service. Then, the developer should deploy the application to Amazon ECS on AWS Fargate, which is a serverless compute engine for containers that eliminates the need to provision and manage servers or clusters. Amazon ECS will automatically scale, load balance, and monitor the application. References How to Deploy Docker Containers | AWS Deploy a Web App Using AWS App Runner How to Deploy Containerized Apps on AWS Using ECR and Docker

• Question 206:

  A company is developing a serverless application that consists of various AWS Lambda functions behind Amazon API Gateway APIs. A developer needs to automate the deployment of Lambda function code. The developer will deploy updated Lambda functions with AWS CodeDeploy. The deployment must minimize the exposure of potential errors to end users. When the application is in production, the application cannot experience downtime outside the specified maintenance window.

  Which deployment configuration will meet these requirements with the LEAST deployment time?

  A. Use the AWS CodeDeploy in-place deployment configuration for the Lambda functions. Shift all traffic immediately after deployment.
  B. Use the AWS CodeDeploy linear deployment configuration to shift 10% of the traffic every minute.
  C. Use the AWS CodeDeploy all-at-once deployment configuration to shift all traffic to the updated versions immediately.
  D. Use the AWS CodeDeploy predefined canary deployment configuration to shift 10% of the traffic immediately and shift the remaining traffic after 5 minutes.
  D. Use the AWS CodeDeploy predefined canary deployment configuration to shift 10% of the traffic immediately and shift the remaining traffic after 5 minutes.

  ---

  Explanation

• Question 207:

  A company introduced a new feature that should be accessible to only a specific group of premium customers. A developer needs the ability to turn the feature on and off in response to performance and feedback. The developer needs a solution to validate and deploy these configurations quickly without causing any disruptions.

  What should the developer do to meet these requirements?

  A. Use AWS AppConfig to manage the feature configuration and to validate and deploy changes. Use feature flags to turn the feature on and off.
  B. Use AWS Secrets Manager to securely manage and validate the feature configurations. Enable lifecycle rules to turn the feature on and off.
  C. Use AWS Config to manage the feature configuration and validation. Set up AWS Config rules to turn the feature on and off based on predefined conditions.
  D. Use AWS Systems Manager Parameter Store to store and validate the configuration settings for the feature. Enable lifecycle rules to turn the feature on and off.
  A. Use AWS AppConfig to manage the feature configuration and to validate and deploy changes. Use feature flags to turn the feature on and off.

  ---

  Explanation

• Question 208:

  A developer at a company writes an AWS CloudFormation template. The template refers to subnets that were created by a separate AWS CloudFormation template that the company's network team wrote. When the developer attempts to launch the stack for the first time, the launch fails.

  Which template coding mistakes could have caused this failure? (Choose two.)

  A. The developer's template does not use the Ref intrinsic function to refer to the subnets.
  B. The developer's template does not use the ImportValue intrinsic function to refer to the subnets.
  C. The Mappings section of the developer's template does not refer to the subnets.
  D. The network team's template does not export the subnets in the Outputs section.
  E. The network team's template does not export the subnets in the Mappings section.
  B. The developer's template does not use the ImportValue intrinsic function to refer to the subnets.
  D. The network team's template does not export the subnets in the Outputs section.

  ---

  Explanation

• Question 209:

  Multiple development teams are working on a project to migrate a monolithic application to a microservices-based application running on AWS Lambda. The teams need a way to centrally manage code that is shared across multiple functions.

  Which approach requires the LEAST maintenance?

  A. Each team maintains the code for the common components in their own code repository. They build and deploy the components with their Lambda functions together.
  B. One team builds a Lambda layer to include the common components and shares the layer with the other teams.
  C. Each team builds and publishes the component they want to share to an Amazon S3 bucket. The Lambda functions will download the components from the bucket.
  D. One team builds a Docker container for the common components and shares the container with the other teams.
  A. Each team maintains the code for the common components in their own code repository. They build and deploy the components with their Lambda functions together.

  ---

  Explanation

• Question 210:

  A company has an application that runs across multiple AWS Regions. The application is experiencing performance issues at irregular intervals. A developer must use AWS X-Ray to implement distributed tracing for the application to troubleshoot the root cause of the performance issues.

  What should the developer do to meet this requirement?

  A. Use the X-Ray console to add annotations for AWS services and user-defined services
  B. Use Region annotation that X-Ray adds automatically for AWS services Add Region annotation for user-defined services
  C. Use the X-Ray daemon to add annotations for AWS services and user-defined services
  D. Use Region annotation that X-Ray adds automatically for user-defined services Configure X-Ray to add Region annotation for AWS services
  B. Use Region annotation that X-Ray adds automatically for AWS services Add Region annotation for user-defined services

  ---

  Explanation

  AWS X-Ray automatically adds Region annotation for AWS services that are integrated with X-Ray. This annotation indicates the AWS Region where the service is running. The developer can use this annotation to filter and group traces by Region and identify any performance issues related to cross- Region calls. The developer can also add Region annotation for user-defined services by using the X-Ray SDK. This option enables the developer to implement distributed tracing for the application that runs across multiple AWS Regions. References AWS X-Ray Annotations AWS X-Ray Concepts