Amazon DVA-C02 Online Practice Questions and Exam Preparation

Amazon DVA-C02 Online Questions & Answers

• Question 271:

  A developer is configuring an applications deployment environment in AWS CodePipeine. The application code is stored in a GitHub repository. The developer wants to ensure that the repository package's unit tests run in the new deployment environment. The deployment has already set the pipeline's source provider to GitHub and has specified the repository and branch to use in the deployment.

  When combination of steps should the developer take next to meet these requirements with the least the LEAST overhead' (Select TWO).

  A. Create an AWS CodeCommt project. Add the repository package's build and test commands to the protects buildspec
  B. Create an AWS CodeBuid project. Add the repository package's build and test commands to the projects buildspec
  C. Create an AWS CodeDeploy protect. Add the repository package's build and test commands to the project's buildspec
  D. Add an action to the source stage. Specify the newly created project as the action provider. Specify the build attract as the actions input artifact.
  E. Add a new stage to the pipeline alter the source stage. Add an action to the new stage. Speedy the newly created protect as the action provider. Specify the source artifact as the action's input artifact.
  B. Create an AWS CodeBuid project. Add the repository package's build and test commands to the projects buildspec
  E. Add a new stage to the pipeline alter the source stage. Add an action to the new stage. Speedy the newly created protect as the action provider. Specify the source artifact as the action's input artifact.

  ---

  Explanation

  This solution will ensure that the repository package's unit tests run in the new deployment environment with the least overhead because it uses AWS CodeBuild to build and test the code in a fully managed service, and AWS CodePipeline to orchestrate the deployment stages and actions. Option A is not optimal because it will use AWS CodeCommit instead of AWS CodeBuild, which is a source control service, not a build and test service. Option C is not optimal because it will use AWS CodeDeploy instead of AWS CodeBuild, which is a deployment service, not a build and test service. Option D is not optimal because it will add an action to the source stage instead of creating a new stage, which will not follow the best practice of separating different deployment phases.

  References: AWS CodeBuild, AWS CodePipeline

• Question 272:

  A healthcare company uses AWS Amplify to host a patient management system. The system uses Amazon API Gateway to expose RESTful APIs. The backend logic of the system is handled by AWS Lambda functions.

  One of the Lambda functions receives patient data that includes personally identifiable information (PII). The Lambda function sends the patient data to an Amazon DynamoDB table. The company must encrypt all patient data at rest and in transit before the data is stored in DynamoDB.

  Which solution will meet these requirements?

  A. Configure the Lambda function to use AWS KMS keys with the AWS Database Encryption SDK to encrypt the patient data before sending the data to DynamoDB.
  B. Use AWS managed AWS KMS keys to encrypt the data in the DynamoDB table.
  C. Configure a DynamoDB stream on the table to invoke a Lambda function. Configure the Lambda function to use an AWS KMS key to encrypt the DynamoDB table and to update the table.
  D. Use an AWS Step Functions workflow to transfer the data to an Amazon SQS queue. Configure a Lambda function to encrypt the data in the queue before sending the data to the DynamoDB table.
  A. Configure the Lambda function to use AWS KMS keys with the AWS Database Encryption SDK to encrypt the patient data before sending the data to DynamoDB.

  ---

  Explanation

  Why Option A is Correct:Encrypting PII at rest and in transit before storing it in DynamoDB ensures end-to-end security. Using the AWS Database Encryption SDK with KMS keys allows the Lambda function to encrypt data before

  transmission, meeting security and compliance requirements.

  Why Other Options are Incorrect:

  Option B: While AWS-managed KMS keys encrypt DynamoDB data at rest, they do not encrypt data in transit.

  Option C: DynamoDB streams process updates after the data is written to the table, failing to encrypt PII in transit.

  Option D: Step Functions and SQS add unnecessary complexity and still require encryption logic for both transit and at rest.

  AWS Documentation

  References:

  Encrypting Data in DynamoDB

  AWS Database Encryption SDK

• Question 273:

  A developer is building a web application. The application will read temperature information from an Amazon DynamoDB table and will display the information for users. Each record is 5 KB to 7 KB in size. The application can request up to 80 items each second. The application must always return the most recent temperature values from the table.

  How much read throughput is required to meet this load?

  A. 40 read capacity units (RCUs)
  B. 80 read capacity units (RCUs)
  C. 160 read capacity units (RCUs)
  D. 560 read capacity units (RCUs)
  A. 40 read capacity units (RCUs)

  ---

  Explanation

• Question 274:

  A banking company is building an application for users to create accounts, view balances, and review recent transactions. The company integrated an Amazon API Gateway REST API with AWS Lambda functions. The company wants to deploy a new version of a Lambda function that gives customers the ability to view their balances. The new version of the function displays customer transaction insights. The company wants to test the new version with a small group of users before deciding whether to make the feature available for all users.

  Which solution will meet these requirements with the LEAST disruption to users?

  A. Create a canary deployment for the REST API. Gradually increase traffic to the new version of the function. Revert traffic to the old version if issues are detected.
  B. Redeploy the REST API stage to use the new version of the function. If issues are detected, update the REST API to point to the previous version of the function.
  C. Deploy the new version of the function to a new stage in the REST API. Route traffic to the new stage.If the new version fails, route traffic to the original stage.
  D. Create a new REST API stage for the new version of the function. Create a weighted alias record set in Amazon Route 53 to distribute traffic between the original stage and the new stage.
  A. Create a canary deployment for the REST API. Gradually increase traffic to the new version of the function. Revert traffic to the old version if issues are detected.

  ---

  Explanation

  API Gateway's canary deployments allow gradual traffic shifting to a new version of a function, minimizing disruption while testing.

  Why Option A is Correct:

  Gradual Rollout: Reduces risk by incrementally increasing traffic.

  Rollback Support: Canary deployments make it easy to revert to the previous version.

  Why Not Other Options:

  Option B: Redeploying the stage disrupts all users.

  Option C and D: Managing new stages and weighted routing introduces unnecessary complexity.

  References:

  Canary Deployments in API Gateway

• Question 275:

  A company is planning to use AWS CodeDeploy to deploy an application to Amazon Elastic Container Service (Amazon ECS). During the deployment of a new version of the application, the company initially must expose only 10% of live traffic to the new version of the deployed application. Then, after 15 minutes elapse, the company must route all the remaining live traffic to the new version of the deployed application.

  Which CodeDeploy predefined configuration will meet these requirements?

  A. CodeDeployDefault.ECSCanary10Percent15Minutes
  B. CodeDeployDefault.LambdaCanary10Percent5Minutes
  C. CodeDeployDefault.LambdaCanary10Percentl15Minutes
  D. CodeDeployDefault.ECSLinear10PercentEvery1Minutes
  A. CodeDeployDefault.ECSCanary10Percent15Minutes

  ---

  Explanation

  https://docs.aws.amazon.com/codedeploy/latest/userguide/deployment-configurations.html

• Question 276:

  A company's new mobile app uses Amazon API Gateway. As the development team completes a new release of its APIs, a developer must safely and transparently roll out the API change. What is the SIMPLEST solution for the developer to use for rolling out the new API version to a limited number of users through API Gateway?

  A. Create a new API in API Gateway. Direct a portion of the traffic to the new API using an Amazon Route 53 weighted routing policy.
  B. Validate the new API version and promote it to production during the window of lowest expected utilization.
  C. Implement an Amazon CloudWatch alarm to trigger a rollback if the observed HTTP 500 status code rate exceeds a predetermined threshold.
  D. Use the canary release deployment option in API Gateway. Direct a percentage of the API traffic using the canarySettings setting.
  D. Use the canary release deployment option in API Gateway. Direct a percentage of the API traffic using the canarySettings setting.

  ---

  Explanation

  https://docs.aws.amazon.com/apigateway/latest/developerguide/canary-release.html

• Question 277:

  A developer hosts a static website on Amazon S3 and connects the website to an Amazon CloudFront distribution. The website uses a custom domain name that points to the CloudFront URL.

  The developer has set up a continuous integration and continuous delivery (CI/CD) pipeline. The pipeline automatically runs when changes occur in an AWS CodeCommit repository. The pipeline has a source stage and then a build stage.

  The build stage invokes an AWS CodeBuild project that references a buildspec.yml file. The buildspec.yml file builds the code and deploys the static files to the S3 bucket.

  The pipeline runs successfully, and the latest website files are visible in the S3 bucket and at the S3 website URL. However, when the developer accesses the website through the CloudFront domain, the updates are not reflected on the

  website.

  What should the developer configure the buildspec.yml file to do to resolve this issue?

  A. Properly synchronize the objects in the S3 bucket with new files from the source stage.
  B. Delete the previous website files in the S3 bucket and redeploy the website files.
  C. Invalidate the file caches for the primary CloudFront distribution.
  D. Modify the cross-origin resource sharing (CORS) policy of the S3 bucket and redeploy the website files.
  C. Invalidate the file caches for the primary CloudFront distribution.

  ---

  Explanation

• Question 278:

  A company maintains a REST service using Amazon API Gateway and the API Gateway native API key validation. The company recently launched a new registration page, which allows users to sign up for the service. The registration page creates a new API key using CreateApiKey and sends the new key to the user. When the user attempts to call the API using this key, the user receives a 403 Forbidden error. Existing users are unaffected and can still call the API.

  What code updates will grant these new users access to the API?

  A. The createDeployment method must be called so the API can be redeployed to include the newly created API key.
  B. The updateAuthorizer method must be called to update the API's authorizer to include the newly created API key.
  C. The importApiKeys method must be called to import all newly created API keys into the current stage of the API.
  D. The createUsagePlanKey method must be called to associate the newly created API key with the correct usage plan.
  D. The createUsagePlanKey method must be called to associate the newly created API key with the correct usage plan.

  ---

  Explanation

• Question 279:

  A developer wrote an application that uses an AWS Lambda function to asynchronously generate short videos based on requests from customers. This video generation can take up to 10 minutes. After the video is generated, a URL to download the video is pushed to the customer's web browser. The customer should be able to access these videos for at least 3 hours after generation.

  Which solution will meet these requirements?

  A. Store the video in the /tmp folder within the Lambda execution environment. Push a Lambda function URL to the customer.
  B. Store the video in an Amazon Elastic File System (Amazon EFS) file system attached to the function. Generate a pre-signed URL for the video object and push the URL to the customer.
  C. Store the video in Amazon S3. Generate a pre-signed URL for the video object and push the URL to the customer.
  D. Store the video in an Amazon CloudFront distribution. Generate a pre-signed URL for the video object and push the URL to the customer.
  C. Store the video in Amazon S3. Generate a pre-signed URL for the video object and push the URL to the customer.

  ---

  Explanation

• Question 280:

  A company has an application that uses an Amazon S3 bucket for object storage. A developer needs to configure in-transit encryption for the S3 bucket. All the S3 objects containing personal data needs to be encrypted at rest with AWS Key Management Service (AWS KMS) keys, which can be rotated on demand.

  Which combination of steps will meet these requirements? (Choose two.)

  A. Write an S3 bucket policy to allow only encrypted connections over HTTPS by using permissions boundary.
  B. Configure an S3 bucket policy to enable client-side encryption for the objects containing personal data by using an AWS KMS customer managed key.
  C. Configure the application to encrypt the objects by using an AWS KMS customer managed key before uploading the objects containing personal data to Amazon S3.
  D. Write an S3 bucket policy to allow only encrypted connections over HTTPS by using the aws:SecureTransport condition.
  E. Configure S3 Block Public Access settings for the S3 bucket to allow only encrypted connections over HTTPS.
  C. Configure the application to encrypt the objects by using an AWS KMS customer managed key before uploading the objects containing personal data to Amazon S3.
  D. Write an S3 bucket policy to allow only encrypted connections over HTTPS by using the aws:SecureTransport condition.

  ---

  Explanation