DVA-C02 practice questions 91–100

1. Question 91 · 548 in bank

   A developer is troubleshooting an Amazon API Gateway API. Clients are receiving HTTP 400 response errors when the clients try to access an endpoint of the API. How can the developer determine the cause of these errors?

   • ACreate an Amazon Kinesis Data Firehose delivery stream to receive API call logs from API Gateway. Configure Amazon CloudWatch Logs as the delivery stream’s destination.
   • BTurn on AWS CloudTrail Insights and create a trail. Specify the Amazon Resource Name (ARN) of the trail for the stage of the API.
   • CTurn on AWS X-Ray for the API stage. Create an Amazon CloudWatch Logs log group. Specify the Amazon Resource Name (ARN) of the log group for the API stage.
   • DTurn on execution logging and access logging in Amazon CloudWatch Logs for the API stage. Create a CloudWatch Logs log group. Specify the Amazon Resource Name (ARN) of the log group for the API stage.

   Show answer

   Answer: D

   Explanation

   why not C,X-Ray is more focused on the internal workings and performance of the API rather than the validity or structure of incoming requests.according to the error 400,it should be the client side error like incorrect request syntax, invalid request message framing, or deceptive request routing

   Source: Adapted from community discussion — walala97

   References

   • AWS documentation

   Next question

2. Question 92 · 548 in bank

   A company developed an API application on AWS by using Amazon CloudFront, Amazon API Gateway, and AWS Lambda. The API has a minimum of four requests every second. A developer notices that many API users run the same query by using the POST method. The developer wants to cache the POST request to optimize the API resources. Which solution will meet these requirements?

   • AConfigure the CloudFront cache. Update the application to return cached content based upon the default request headers.
   • BOverride the cache method in the selected stage of API Gateway. Select the POST method.
   • CSave the latest request response in Lambda /tmp directory. Update the Lambda function to check the /tmp directory.
   • DSave the latest request in AWS Systems Manager Parameter Store. Modify the Lambda function to take the latest request response from Parameter Store.

   Show answer

   Answer: B

   Explanation

   A is incorrect, because of CloudFront always caches responses to GET and HEAD requests. You can also configure CloudFront to cache responses to OPTIONS requests. CloudFront does not cache responses to requests that use the other methods. (https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/RequestAndResponseBehaviorCustomOrigin.html)

   Source: Adapted from community discussion — kr5031

   References

   • AWS documentation
   • AWS documentation

   Next question

3. Question 93 · 548 in bank

   Select 2

   A company is building a microservices application that consists of many AWS Lambda functions. The development team wants to use AWS Serverless Application Model (AWS SAM) templates to automatically test the Lambda functions. The development team plans to test a small percentage of traffic that is directed to new updates before the team commits to a full deployment of the application. Which combination of steps will meet these requirements in the MOST operationally efficient way? (Choose two.)

   • AUse AWS SAM CLI commands in AWS CodeDeploy to invoke the Lambda functions to test the deployment.
   • BDeclare the EventInvokeConfig on the Lambda functions in the AWS SAM templates with OnSuccess and OnFailure configurations.
   • CEnable gradual deployments through AWS SAM templates.
   • DSet the deployment preference type to Canary10Percent30Minutes. Use hooks to test the deployment.
   • ESet the deployment preference type to Linear10PercentEvery10Minutes. Use hooks to test the deployment.

   Show answer

   Answer: CD

   Explanation

   C. Enable gradual deployments through AWS SAM templates: Gradual deployments allow you to safely deploy your application while exposing new versions to only a portion of your traffic. This approach is ideal for testing new updates in a production environment without impacting all users. AWS SAM supports the configuration of deployment preferences directly within the SAM template. D. Set the deployment preference type to Canary10Percent30Minutes. Use hooks to test the deployment: The Canary deployment type is suitable for gradually introducing a new version of the Lambda function. In this case, "Canary10Percent30Minutes" means that 10% of the traffic will be directed to the new version for 30 minutes. If no issues are detected, the rest of the traffic is shifted to the new version. The use of hooks allows for automated tests to run against the new deployment, ensuring its stability before full traffic shift.

   Source: Adapted from community discussion — SerialiDr

   References

   • AWS documentation

   Next question

4. Question 94 · 548 in bank

   A company is using AWS CloudFormation to deploy a two-tier application. The application will use Amazon RDS as its backend database. The company wants a solution that will randomly generate the database password during deployment. The solution also must automatically rotate the database password without requiring changes to the application. What is the MOST operationally efficient solution that meets these requirements?

   • AUse an AWS Lambda function as a CloudFormation custom resource to generate and rotate the password.
   • BUse an AWS Systems Manager Parameter Store resource with the SecureString data type to generate and rotate the password.
   • CUse a cron daemon on the application’s host to generate and rotate the password.
   • DUse an AWS Secrets Manager resource to generate and rotate the password.

   Show answer

   Answer: D

   Next question

5. Question 95 · 548 in bank

   A developer has been asked to create an AWS Lambda function that is invoked any time updates are made to items in an Amazon DynamoDB table. The function has been created, and appropriate permissions have been added to the Lambda execution role. Amazon DynamoDB streams have been enabled for the table, but the function is still not being invoked. Which option would enable DynamoDB table updates to invoke the Lambda function?

   • AChange the StreamViewType parameter value to NEW_AND_OLD_IMAGES for the DynamoDB table.
   • BConfigure event source mapping for the Lambda function.
   • CMap an Amazon Simple Notification Service (Amazon SNS) topic to the DynamoDB streams.
   • DIncrease the maximum runtime (timeout) setting of the Lambda function.

   Show answer

   Answer: B

   References

   • AWS documentation

   Next question

6. Question 96 · 548 in bank

   A developer needs to deploy an application running on AWS Fargate using Amazon ECS. The application has environment variables that must be passed to a container for the application to initialize. How should the environment variables be passed to the container?

   • ADefine an array that includes the environment variables under the environment parameter within the service definition.
   • BDefine an array that includes the environment variables under the environment parameter within the task definition.
   • CDefine an array that includes the environment variables under the entryPoint parameter within the task definition.
   • DDefine an array that includes the environment variables under the entryPoint parameter within the service definition.

   Show answer

   Answer: B

   Explanation

   Following ChatGPT 3.5, The correct option is B When using Amazon ECS, the task definition is where you define parameters for your containers, including environment variables. The environment parameter within the task definition allows you to specify environment variables for your containers. This approach provides a clear separation of concerns, allowing you to define the environment variables at the task definition level, which is then used by the service when running tasks. Option A is incorrect because the environment variables are typically defined in the task definition rather than the service definition. Options C and D are incorrect because the entryPoint parameter is used for specifying the entry point (command) for the container, not for defining environment variables.

   Source: Adapted from community discussion — TanTran04

   References

   • AWS documentation

   Next question

7. Question 97 · 548 in bank

   Select 2

   A development team maintains a web application by using a single AWS RDS, template. The template defines web servers and an Amazon RDS database. The team uses the CloudFormation template to deploy the CloudFormation stack to different environments. During a recent application deployment, a developer caused the primary development database to be dropped and recreated. The result of this incident was a loss of data. The team needs to avoid accidental database deletion in the future. Which solutions will meet these requirements? (Choose two.)

   • AAdd a CloudFormation DeletionPolicy attribute with the Retain value to the database resource.
   • BUpdate the CloudFormation stack policy to prevent updates to the database.
   • CModify the database to use a Multi-AZ deployment.
   • DCreate a CloudFormation stack set for the web application and database deployments.
   • EAdd a CloudFormation DeletionPolicy attribute with the Retain value to the stack.

   Show answer

   Answer: AB

   Explanation

   A. Add a CloudFormation DeletionPolicy attribute with the Retain value to the database resource. The DeletionPolicy attribute can be used in the CloudFormation template to protect a resource from being accidentally deleted. By setting the DeletionPolicy to Retain, the resource is retained when the stack is deleted, thus preventing accidental data loss. This should be applied directly to the database resource in the CloudFormation template. B. Update the CloudFormation stack policy to prevent updates to the database. A stack policy can be used to prevent changes to certain resources during stack updates. By defining a stack policy that prohibits actions on the database resource, the team can prevent accidental modifications or deletions of the database during stack updates.

   Source: Adapted from community discussion — SerialiDr

   References

   • repost.aws documentation

   Next question

8. Question 98 · 548 in bank

   A developer is storing sensitive data generated by an application in Amazon S3. The developer wants to encrypt the data at rest. A company policy requires an audit trail of when the AWS Key Management Service (AWS KMS) key was used and by whom. Which encryption option will meet these requirements?

   • AServer-side encryption with Amazon S3 managed keys (SSE-S3)
   • BServer-side encryption with AWS KMS managed keys (SSE-KMS)
   • CServer-side encryption with customer-provided keys (SSE-C)
   • DServer-side encryption with self-managed keys

   Show answer

   Answer: B

   Explanation

   SSE-KMS provides an additional layer of security by requiring separate permissions for the use of an encryption key to the bucket. This option also provides an audit trail by logging the use of the key in AWS CloudTrail, which is a requirement according to the company policy. The audit trail includes information about who used the key and when it was used, which fulfills the requirement for auditing.

   Source: Adapted from community discussion — SerialiDr

   Next question

9. Question 99 · 548 in bank

   A company has an ecommerce application. To track product reviews, the company’s development team uses an Amazon DynamoDB table. Every record includes the following: • A Review ID, a 16-digit universally unique identifier (UUID) • A Product ID and User ID, 16-digit UUIDs that reference other tables • A Product Rating on a scale of 1-5 • An optional comment from the user The table partition key is the Review ID. The most performed query against the table is to find the 10 reviews with the highest rating for a given product. Which index will provide the FASTEST response for this query?

   • AA global secondary index (GSI) with Product ID as the partition key and Product Rating as the sort key
   • BA global secondary index (GSI) with Product ID as the partition key and Review ID as the sort key
   • CA local secondary index (LSI) with Product ID as the partition key and Product Rating as the sort key
   • DA local secondary index (LSI) with Review ID as the partition key and Product ID as the sort key

   Show answer

   Answer: A

   Explanation

   This GSI allows for queries that are based on Product ID, efficiently narrowing down the reviews for a specific product. The Product Rating as the sort key enables sorting the reviews by their rating, which directly supports the need to find the top 10 reviews. GSIs also support a different partition key than the base table, which is necessary in this case since the base table's partition key is Review ID.

   Source: Adapted from community discussion — SerialiDr

   Next question

10. Question 100 · 548 in bank

    A company is offering APIs as a service over the internet to provide unauthenticated read access to statistical information that is updated daily. The company uses Amazon API Gateway and AWS Lambda to develop the APIs. The service has become popular, and the company wants to enhance the responsiveness of the APIs. Which action can help the company achieve this goal?

    • AEnable API caching in API Gateway.
    • BConfigure API Gateway to use an interface VPC endpoint.
    • CEnable cross-origin resource sharing (CORS) for the APIs.
    • DConfigure usage plans and API keys in API Gateway.

    Show answer

    Answer: A

    Explanation

    A. Enable API caching in API Gateway can help the company enhance the responsiveness of the APIs. By enabling caching, API Gateway stores the responses from the API and returns them for subsequent requests instead of forwarding the requests to Lambda. This reduces the number of requests to Lambda, improves API performance, and reduces latency for users.

    Source: Adapted from community discussion — Bibay

    References

    • AWS documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

DVA-C02 practice, question 91. 548 questions available.