Amazon DVA-C02 Online Practice Questions and Exam Preparation

Amazon DVA-C02 Online Questions & Answers

• Question 281:

  A company has deployed infrastructure on AWS. A development team wants to create an AWS Lambda function that will retrieve data from an Amazon Aurora database. The Amazon Aurora database is in a private subnet in company's VPC. The VPC is named VPC1. The data is relational in nature. The Lambda function needs to access the data securely.

  Which solution will meet these requirements?

  A. Create the Lambda function. Configure VPC1 access for the function. Attach a security group named SG1 to both the Lambda function and the database. Configure the security group inbound and outbound rules to allow TCP traffic on Port 3306.
  B. Create and launch a Lambda function in a new public subnet that is in a new VPC named VPC2. Create a peering connection between VPC1 and VPC2.
  C. Create the Lambda function. Configure VPC1 access for the function. Assign a security group named SG1 to the Lambda function. Assign a second security group named SG2 to the database. Add an inbound rule to SG1 to allow TCP traffic from Port 3306.
  D. Export the data from the Aurora database to Amazon S3. Create and launch a Lambda function in VPC1. Configure the Lambda function query the data from Amazon S3.
  A. Create the Lambda function. Configure VPC1 access for the function. Attach a security group named SG1 to both the Lambda function and the database. Configure the security group inbound and outbound rules to allow TCP traffic on Port 3306.

  ---

  Explanation

  https://repost.aws/en/knowledge-center/connect-lambda-to-an-rds-instance

• Question 282:

  A company is using AWS CloudFormation to deploy a two-tier application. The application will use Amazon RDS as its backend database. The company wants a solution that will randomly generate the database password during deployment. The solution also must automatically rotate the database password without requiring changes to the application.

  What is the MOST operationally efficient solution that meets these requirements?

  A. Use an AWS Lambda function as a CloudFormation custom resource to generate and rotate the password.
  B. Use an AWS Systems Manager Parameter Store resource with the SecureString data type to generate and rotate the password.
  C. Use a cron daemon on the application's host to generate and rotate the password.
  D. Use an AWS Secrets Manager resource to generate and rotate the password.
  D. Use an AWS Secrets Manager resource to generate and rotate the password.

  ---

  Explanation

• Question 283:

  A developer created a web API that receives requests by using an internet-facing Application Load Balancer (ALB) with an HTTPS listener. The developer configures an Amazon Cognito user pool and wants to ensure that every request to the API is authenticated through Amazon Cognito.

  What should the developer do to meet this requirement?

  A. Add a listener rule to the listener to return a fixed response if the Authorization header is missing. Set the fixed response to 401 Unauthorized.
  B. Create an authentication action for the listener rules of the ALB. Set the rule action type to authenticate-cognito. Set the OnUnauthenticatedRequest field to "deny."
  C. Create an Amazon API Gateway API. Configure all API methods to be forwarded to the ALB endpoint. Create an authorizer of the COGNITO_USER_POOLS type. Configure every API method to use that authorizer.
  D. Create a new target group that includes an AWS Lambda function target that validates the Authorization header by using Amazon Cognito. Associate the target group with the listener.
  B. Create an authentication action for the listener rules of the ALB. Set the rule action type to authenticate-cognito. Set the OnUnauthenticatedRequest field to "deny."

  ---

  Explanation

• Question 284:

  A company needs to package and deploy an application that uses AWS Lambda to compress and decompress video clips. The application uses a video codec library that is larger than 250 MB. The application uses the library to compress the videos before storage and to decompress the videos upon retrieval.

  Which solution will meet these requirements?

  A. Create one Lambda function. Upload one zip file that contains code to handle video compression and decompression to the function. Include the codec library in the zip file.
  B. Create two Lambda functions. Upload one zip file that contains code to handle video compression to one function. Upload a second zip file that contains code for video decompression to the second function. Include the codec library in both zip files.
  C. Create two Lambda functions. Upload one zip file that contains code to handle video compression to one function. Upload a second zip file that contains code for video decompression to the second function. Create one Lambda layer for the codec library. Add the layer to both functions.
  D. Create two Lambda functions. Build one container image that contains code to handle video compression and a second image that contains video decompression code. Add the codec library to both images. Upload the images to Amazon ECR. Use the containers to create the Lambda functions.
  D. Create two Lambda functions. Build one container image that contains code to handle video compression and a second image that contains video decompression code. Add the codec library to both images. Upload the images to Amazon ECR. Use the containers to create the Lambda functions.

  ---

  Explanation

  Option D: Use Lambda with Container Images

  AWS Lambda supports container images up to 10 GB in size, making it suitable for applications with large dependencies, such as a video codec library larger than 250 MB. By creating separate container images for video compression and

  decompression, the application can efficiently isolate functionality while ensuring that each function includes the required dependencies.

  The container images are stored in Amazon ECR and used to create the Lambda functions.

  Why Other Options Are Incorrect:

  Option A: A single Lambda function with all functionalities and dependencies in one zip file is not feasible due to the 250 MB deployment package size limit for zip files. Option B: Including the library in two separate zip files still exceeds the

  size limit for Lambda zip deployment packages. Option C: While using a Lambda layer can reduce redundancy, the combined size of the layer and the zip files would exceed the limit of 250 MB.

  References:

  Using Container Images with AWS Lambda

• Question 285:

  A company has a serverless application that uses an Amazon API Gateway API to invoke an AWS Lambda function. A developer creates a fix for a defect in the Lambda function code. The developer wants to deploy this fix to the production

  environment.

  To test the changes, the developer needs to send 10% of the live production traffic to the updated Lambda function version.

  Which combination of steps will meet these requirements? (Choose two.)

  A. Publish a new version of the Lambda function that contains the updated code.
  B. Set up a new stage in API Gateway with a new Lambda function version. Enable weighted routing in API Gateway stages.
  C. Create an alias for the Lambda function. Configure weighted routing on the alias. Specify a 10% weight for the new Lambda function version.
  D. Set up a routing policy on a Network Load Balancer. Configure 10% of the traffic to go to the new Lambda function version.
  E. Set up a weighted routing policy by using Amazon Route 53. Configure 10% of the traffic to go to the new Lambda function version.
  A. Publish a new version of the Lambda function that contains the updated code.
  C. Create an alias for the Lambda function. Configure weighted routing on the alias. Specify a 10% weight for the new Lambda function version.

  ---

  Explanation

• Question 286:

  A company uses AWS to run its learning management system (LMS) application. The application runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The application's domain name is managed in Amazon Route 53. The application is deployed in a single AWS Region, but the company wants to improve application performance for users all over the world.

  Which solution will improve global performance with the LEAST operational overhead?

  A. Set up an Amazon CloudFront distribution that uses the ALB as the origin server. Configure Route 53 to create a DNS alias record that points the application's domain name to the CloudFront distribution URL.
  B. Launch more EC2 instances behind the ALB. Configure the ALB to use session affinity (sticky sessions). Create a Route 53 alias record for the ALB by using a geolocation routing policy.
  C. Create an AWS Client VPN endpoint in the VPC. Instruct users to connect to the VPN to access the application. Create a Route 53 alias record for the VPN endpoint. Configure Route 53 to use a geolocation routing policy.
  D. Deploy the application to multiple Regions across the world. Create a Route 53 alias record for the ALB by using a latency-based routing policy.
  A. Set up an Amazon CloudFront distribution that uses the ALB as the origin server. Configure Route 53 to create a DNS alias record that points the application's domain name to the CloudFront distribution URL.

  ---

  Explanation

• Question 287:

  A developer is building a serverless application on AWS for a workflow that processes high volumes of data. In the workflow, an AWS Step Functions state machine invokes several AWS Lambda functions.

  One of the Lambda functions occasionally fails because of timeout errors during periods of high demand. The developer must ensure that the workflow automatically retries the failed function invocation if a timeout error occurs. Which solution will meet this requirement?

  A. Add a Retry field in the Step Functions state machine definition. Configure the state machine with the maximum number of retry attempts and the timeout error type to retry on.
  B. Add a Timeout field in the Step Functions state machine definition. Configure the state machine with the maximum number of retry attempts.
  C. Add a Fail state to the Step Functions state machine definition. Configure the state machine with the maximum number of retry attempts.
  D. Update the Step Functions state machine to pass the invocation request to an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe a Lambda function to the SNS topic. Configure the Lambda function with the maximum number of retry attempts for a timeout error type.
  A. Add a Retry field in the Step Functions state machine definition. Configure the state machine with the maximum number of retry attempts and the timeout error type to retry on.

  ---

  Explanation

• Question 288:

  A developer must provide an API key to an AWS Lambda function to authenticate with a third-party system. The Lambda function will run on a schedule. The developer needs to ensure that the API key remains encrypted at rest. Which solution will meet these requirements?

  A. Store the API key as a Lambda environment variable by using an AWS Key Management Service (AWS KMS) customer managed key.
  B. Configure the application to prompt the user to provide the password to the Lambda function on the first run.
  C. Store the API key as a value in the application code.
  D. Use Lambda@Edge and only communicate over the HTTPS protocol.
  A. Store the API key as a Lambda environment variable by using an AWS Key Management Service (AWS KMS) customer managed key.

  ---

  Explanation

• Question 289:

  A company has on-premises data centers that run an image processing service. The service consists of containerized applications that run on Kubernetes clusters. All the applications have access to the same NFS share for files and data storage.

  The company is running out of NFS capacity in the data centers and needs to migrate to AWS as soon as possible. The Kubernetes clusters must be highly available on AWS.

  Which combination of actions will meet these requirements? (Choose two.)

  A. Transfer the information that is in the NFS share to an Amazon Elastic Block Store (Amazon EBS) volume. Upload the container images to Amazon Elastic Container Registry (Amazon ECR).
  B. Transfer the information that is in the NFS share to an Amazon Elastic File System (Amazon EFS) volume. Upload the container images to Amazon Elastic Container Registry (Amazon ECR).
  C. Create an Amazon Elastic Container Service (Amazon ECS) cluster to run the applications. Configure each node of the cluster to mount the Amazon Elastic Block Store (Amazon EBS) volume at the required path for the container images.
  D. Create an Amazon Elastic Kubernetes Service (Amazon EKS) cluster to run the applications. Configure each node of the cluster to mount the Amazon Elastic Block Store (Amazon EBS) volume at the required path for the container images.
  E. Create an Amazon Elastic Kubernetes Service (Amazon EKS) cluster to run the applications. Configure each node of the cluster to mount the Amazon Elastic File System (Amazon EFS) volume at the required path for the container images.
  A. Transfer the information that is in the NFS share to an Amazon Elastic Block Store (Amazon EBS) volume. Upload the container images to Amazon Elastic Container Registry (Amazon ECR).
  E. Create an Amazon Elastic Kubernetes Service (Amazon EKS) cluster to run the applications. Configure each node of the cluster to mount the Amazon Elastic File System (Amazon EFS) volume at the required path for the container images.

  ---

  Explanation

• Question 290:

  A developer is migrating a containerized application from an on-premises environment to an Amazon ECS cluster.

  In the on-premises environment, the container uses a Docker file to store the application. Service dependency configurations, such as databases, caches, and storage volumes, are stored in a docker-compose.yml file.

  Both files are located at the top level of the code base that the developer needs to containerize. When the developer deploys the code to Amazon ECS, the instructions from the Docker file are carried out. However, none of the configurations from docker-compose.yml are applied.

  The developer needs to resolve the error and ensure the configurations are applied.

  What should the developer do to resolve this issue?

  A. Store the file path for the docker-compose.yml file as a Docker label. Add the label to the ECS cluster's container details.
  B. Add the details from the docker-compose.yml file to an ECS task definition. Associate the task with the ECS cluster.
  C. Create a namespace in the ECS cluster. Associate the docker-compose.yml file to the namespace.
  D. Update the service type of the ECS cluster to REPLICA, and redeploy the stack.
  B. Add the details from the docker-compose.yml file to an ECS task definition. Associate the task with the ECS cluster.

  ---

  Explanation

  Why Option B is Correct:Amazon ECS does not natively process docker-compose.yml files. Instead, the configurations from docker-compose.yml must be converted into ECS-compatible configurations within a task definition. Task definitions

  are the primary way to specify container configurations in ECS, including service dependencies like databases, caches, and volumes.

  Steps to Resolve the Error:

  Extract the configurations from the docker-compose.yml file.

  Map the dependencies and settings to the appropriate ECS task definition fields.

  Deploy the task definition to the ECS cluster.

  Why Other Options are Incorrect:

  Option A: Docker labels do not directly impact ECS task execution or integrate with ECS service configurations.

  Option C: ECS namespaces do not exist as a feature.

  Option D: Changing the service type to REPLICA does not resolve the issue of missing service dependency configurations.

  AWS Documentation

  References:

  Amazon ECS Task Definitions

  Migrating Docker Compose Workloads to ECS