Amazon DVA-C02 Online Practice Questions and Exam Preparation

Amazon DVA-C02 Online Questions & Answers

• Question 461:

  A developer is modifying an AWS Lambda function that accesses an Amazon RDS for MySQL database. The developer discovers that the Lambda function has the database credentials stored as plaintext in the Lambda function code.

  The developer must implement a solution to make the credentials more secure. The solution must include automated credential rotation every 30 days.

  Which solution will meet these requirements?

  A. Move the credentials to a secret in AWS Secrets Manager. Modify the Lambda function to read from Secrets Manager. Set a schedule to rotate the secret every 30 days.
  B. Move the credentials to a secure string parameter in AWS Systems Manager Parameter Store. Modify the Lambda function to read from Parameter Store. Set a schedule to rotate the parameter every 30 days.
  C. Move the credentials to an encrypted Amazon S3 bucket. Modify the Lambda function to read from the S3 bucket. Configure S3 Object Lambda to rotate the credentials every 30 days.
  D. Move the credentials to a secure string parameter in AWS Systems Manager Parameter Store. Create an Amazon EventBridge rule to rotate the parameter every 30 days.
  A. Move the credentials to a secret in AWS Secrets Manager. Modify the Lambda function to read from Secrets Manager. Set a schedule to rotate the secret every 30 days.

  ---

  Explanation

• Question 462:

  A developer has an AWS CodePipelme pipeline that invokes AWS CodeBuild in the build stage The developer wants to pass in a variable from CodePipeline so that the variable can be read in the CodeBuild buiidspec yml file.

  How can the developer accomplish this goal?

  A. Configure a unique CodePipelme vanable namespace and vanables as key-value pairs that define each of Pass Your Certification With Marks4sure Guarantee the variables required in CodeBuild
  B. Configure a CodePipelme environment vanable that contains a JSON document that defines each of the variables required in CodeBuild
  C. Configure an AWS CloudFormation stack set that contains a JSON document that defines each of the variables required in CodeBuild Reference the stack set from CodePipelme
  D. Configure an AWS CodeArtifact repository to store each environment variable Reference CodeArtifact from CodePipelme and CodeBuild
  B. Configure a CodePipelme environment vanable that contains a JSON document that defines each of the variables required in CodeBuild

  ---

  Explanation

• Question 463:

  A developer is creating a simple proof-of-concept demo by using AWS CloudFormation and AWS Lambda functions The demo will use a CloudFormation template to deploy an existing Lambda function The Lambda function uses deployment packages and dependencies stored in Amazon S3 The developer defined anAWS Lambda Function resource in a CloudFormation template. The developer needs to add the S3 bucket to the CloudFormation template.

  What should the developer do to meet these requirements with the LEAST development effort?

  A. Add the function code in the CloudFormation template inline as the code property
  B. Add the function code in the CloudFormation template as the ZipFile property.
  C. Find the S3 key for the Lambda function Add the S3 key as the ZipFile property in the CloudFormation template.
  D. Add the relevant key and bucket to the S3Bucket and S3Key properties in the CloudFormation template
  D. Add the relevant key and bucket to the S3Bucket and S3Key properties in the CloudFormation template

  ---

  Explanation

  The easiest way to add the S3 bucket to the CloudFormation template is to use the S3Bucket and S3Key properties of the AWS::Lambda::Function resource. These properties specify the name of the S3 bucket and the location of the .zip file that contains the function code and dependencies. This way, the developer does not need to modify the function code or upload it to a different location. The other options are either not feasible or not efficient. The code property can only be used for inline code, not for code stored in S3. The ZipFile property can only be used for code that is less than 4096 bytes, not for code that has dependencies. Finding the S3 key for the Lambda function and adding it as the ZipFile property would not work, as the ZipFile property expects a base64-encoded .zip file, not an S3 location. References AWS::Lambda::Function - AWS CloudFormation Deploying Lambda functions as .zip file archives AWS Lambda Function Code AWS CloudFormation

• Question 464:

  A company's website runs on an Amazon EC2 instance and uses Auto Scaling to scale the environment during peak times. Website users across the world are experiencing high latency due to static content on the EC2 instance, even during non-peak hours.

  Which combination of steps will resolve the latency issue? (Choose two.)

  A. Double the Auto Scaling group's maximum number of servers.
  B. Host the application code on AWS Lambda.
  C. Scale vertically by resizing the EC2 instances.
  D. Create an Amazon CloudFront distribution to cache the static content.
  E. Store the application's static content in Amazon S3.
  D. Create an Amazon CloudFront distribution to cache the static content.
  E. Store the application's static content in Amazon S3.

  ---

  Explanation

• Question 465:

  A developer is working on a Python application that runs on Amazon EC2 instances. The developer wants to enable tracing of application requests to debug performance issues in the code. Which combination of actions should the developer take to achieve this goal? (Choose two.)

  A. Install the Amazon CloudWatch agent on the EC2 instances.
  B. Install the AWS X-Ray daemon on the EC2 instances.
  C. Configure the application to write JSON-formatted logs to /var/log/cloudwatch.
  D. Configure the application to write trace data to /var/log/xray.
  E. Install and configure the AWS X-Ray SDK for Python in the application.
  B. Install the AWS X-Ray daemon on the EC2 instances.
  E. Install and configure the AWS X-Ray SDK for Python in the application.

  ---

  Explanation

• Question 466:

  A developer wants to use AWS Elastic Beanstalk to test a new version of an application in a test environment. Which deployment method offers the FASTEST deployment?

  A. Immutable
  B. Rolling
  C. Rolling with additional batch
  D. All at once
  D. All at once

  ---

  Explanation

• Question 467:

  A company uses a custom root certificate authority certificate chain (Root CA Cert) that is 10 KB in size generate SSL certificates for its on-premises HTTPS endpoints. One of the company's cloud based applications has hundreds of AWS Lambda functions that pull date from these endpoints. A developer updated the trust store of the Lambda execution environment to use the Root CA Cert when the Lambda execution environment is initialized. The developer bundled the Root CA Cert as a text file in the Lambdas deployment bundle.

  After 3 months of development the root CA Cert is no longer valid and must be updated. The developer needs a more efficient solution to update the Root CA Cert for all deployed Lambda functions. The solution must not include rebuilding or updating all Lambda functions that use the Root CA Cert. The solution must also work for all development, testing and production environment. Each environment is managed in a separate AWS account.

  When combination of steps Would the developer take to meet these environments MOST cost-effectively? (Select TWO)

  A. Store the Root CA Cert as a secret in AWS Secrets Manager. Create a resource-based policy. Add IAM users to allow access to the secret
  B. Store the Root CA Cert as a Secure Sting parameter in aws Systems Manager Parameter Store Create a resource-based policy. Add IAM users to allow access to the policy.
  C. Store the Root CA Cert in an Amazon S3 bucket. Create a resource- based policy to allow access to the bucket.
  D. Refactor the Lambda code to load the Root CA Cert from the Root CA Certs location. Modify the runtime trust store inside the Lambda function handler.
  E. Refactor the Lambda code to load the Root CA Cert from the Root CA Cert's location. Modify the runtime trust store outside the Lambda function handler.
  B. Store the Root CA Cert as a Secure Sting parameter in aws Systems Manager Parameter Store Create a resource-based policy. Add IAM users to allow access to the policy.
  E. Refactor the Lambda code to load the Root CA Cert from the Root CA Cert's location. Modify the runtime trust store outside the Lambda function handler.

  ---

  Explanation

  This solution will meet the requirements by storing the Root CA Cert as a Secure String parameter in AWS Systems Manager Parameter Store, which is a secure and scalable service for storing and managing configuration data and secrets. The resource-based policy will allow IAM users in different AWS accounts and environments to access the parameter without requiring cross-account roles or permissions. The Lambda code will be refactored to load the Root CA Cert from the parameter store and modify the runtime trust store outside the Lambda function handler, which will improve performance and reduce latency by avoiding repeated calls to Parameter Store and trust store modifications for each invocation of the Lambda function. Option A is not optimal because it will use AWS Secrets Manager instead of AWS Systems Manager Parameter Store, which will incur additional costs and complexity for storing and managing a non-secret configuration data such as Root CA Cert. Option C is not optimal because it will deactivate the application secrets and monitor the application error logs temporarily, which will cause application downtime and potential data loss. Option D is not optimal because it will modify the runtime trust store inside the Lambda function handler, which will degrade performance and increase latency by repeating unnecessary operations for each invocation of the Lambda function.

  References: AWS Systems Manager Parameter Store, [Using SSL/TLS to Encrypt a Connection to a DB Instance]

• Question 468:

  A developer is creating an application that uses an Amazon DynamoDB table. The developer needs to write code that reads all records added to the table during the previous day, generates HTML reports, and pushes the reports into third-party storage. The item size varies from 1 KB to 4 KB, and the index structure is defined with the date. The developer must minimize the read capacity required by the application for accessing the DynamoDB table.

  Which DynamoDB API operation should the developer use in the code to meet these requirements?

  A. Query
  B. Scan
  C. BatchGetltem
  D. Getltem
  A. Query

  ---

  Explanation

• Question 469:

  A developer is implementing an AWS Cloud Development Kit (AWS CDK) serverless application. The developer will provision several AWS Lambda functions and Amazon API Gateway APIs during AWS CloudFormation stack creation. The developer's workstation has the AWS Serverless Application Model (AWS SAM) and the AWS CDK installed locally.

  How can the developer test a specific Lambda function locally?

  A. Run the sam package and sam deploy commands. Create a Lambda test event from the AWS Management Console. Test the Lambda function.
  B. Run the cdk synth and cdk deploy commands. Create a Lambda test event from the AWS Management Console. Test the Lambda function.
  C. Run the cdk synth and sam local invoke commands with the function construct identifier and the path to the synthesized CloudFormation template.
  D. Run the cdk synth and sam local start-lambda commands with the function construct identifier and the path to the synthesized CloudFormation template.
  C. Run the cdk synth and sam local invoke commands with the function construct identifier and the path to the synthesized CloudFormation template.

  ---

  Explanation

  https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/using-sam-cli-local-invoke.html

• Question 470:

  A development team wants to build a continuous integration/continuous delivery (CI/CD) pipeline. The team is using AWS CodePipeline to automate the code build and deployment. The team wants to store the program code to prepare for the CI/CD pipeline.

  Which AWS service should the team use to store the program code?

  A. AWS CodeDeploy
  B. AWS CodeArtifact
  C. AWS CodeCommit
  D. Amazon CodeGuru
  C. AWS CodeCommit

  ---

  Explanation