DVA-C02 practice questions 121–130

1. Question 121 · 548 in bank

   A developer is preparing to begin development of a new version of an application. The previous version of the application is deployed in a production environment. The developer needs to deploy fixes and updates to the current version during the development of the new version of the application. The code for the new version of the application is stored in AWS CodeCommit. Which solution will meet these requirements?

   • AFrom the main branch, create a feature branch for production bug fixes. Create a second feature branch from the main branch for development of the new version.
   • BCreate a Git tag of the code that is currently deployed in production. Create a Git tag for the development of the new version. Push the two tags to the CodeCommit repository.
   • CFrom the main branch, create a branch of the code that is currently deployed in production. Apply an IAM policy that ensures no other users can push or merge to the branch.
   • DCreate a new CodeCommit repository for development of the new version of the application. Create a Git tag for the development of the new version.

   Show answer

   Answer: A

   Explanation

   The best option here is: A. From the main branch, create a feature branch for production bug fixes. Create a second feature branch from the main branch for development of the new version. Here’s why this solution is the most suitable: Separation of Concerns: Creating separate branches for bug fixes and new feature development ensures that changes made for the current production version and the new version do not interfere with each other. This separation is crucial to avoid introducing new bugs into the production version from the development version. Continuous Integration and Delivery (CI/CD): This approach supports CI/CD practices. Bug fixes can be developed, tested, and merged into the main branch and deployed without impacting the ongoing development of the new version.

   Source: Adapted from community discussion — SerialiDr

   Next question

2. Question 122 · 548 in bank

   A developer is creating an AWS CloudFormation stack. The stack contains IAM resources with custom names. When the developer tries to deploy the stack, they receive an InsufficientCapabilities error. What should the developer do to resolve this issue?

   • ASpecify the CAPABILITY_AUTO_EXPAND capability in the CloudFormation stack.
   • BUse an administrators role to deploy IAM resources with CloudFormation.
   • CSpecify the CAPABILITY_IAM capability in the CloudFormation stack.
   • DSpecify the CAPABILITY_NAMED_IAM capability in the CloudFormation stack.

   Show answer

   Answer: D

   Explanation

   The correct answer is (D). To deploy IAM resources with custom names, you must specify the CAPABILITY_NAMED_IAM resource in the CloudFormation stack. The CAPABILITY_IAM resource allows CloudFormation to create and modify IAM resources. The CAPABILITY_NAMED_IAM resource allows CloudFormation to create IAM resources with custom names. To resolve the issue, the developer must specify the CAPABILITY_NAMED_IAM resource in the CloudFormation stack.

   Source: Adapted from community discussion — Digo30sp

   References

   • AWS documentation

   Next question

3. Question 123 · 548 in bank

   A developer maintains an Amazon API Gateway REST API. Customers use the API through a frontend UI and Amazon Cognito authentication. The developer has a new version of the API that contains new endpoints and backward-incompatible interface changes. The developer needs to provide beta access to other developers on the team without affecting customers. Which solution will meet these requirements with the LEAST operational overhead?

   • ADefine a development stage on the API Gateway API. Instruct the other developers to point the endpoints to the development stage.
   • BDefine a new API Gateway API that points to the new API application code. Instruct the other developers to point the endpoints to the new API.
   • CImplement a query parameter in the API application code that determines which code version to call.
   • DSpecify new API Gateway endpoints for the API endpoints that the developer wants to add.

   Show answer

   Answer: A

   Explanation

   Option A is the correct solution to meet the requirements with the least operational overhead. Defining a development stage on the API Gateway API enables other developers to test the new version of the API without affecting the production environment. This approach allows the developers to work on the new version of the API independently and avoid conflicts with the production environment. The other options involve creating a new API or new endpoints, which could introduce additional operational overhead, such as managing multiple APIs or endpoints, configuring access control, and updating the frontend UI to point to the new endpoints or API. Option C also introduces additional complexity by requiring the implementation of a query parameter to determine which code version to call.

   Source: Adapted from community discussion — Bibay

   References

   • AWS documentation
   • AWS documentation

   Next question

4. Question 124 · 548 in bank

   A company uses Amazon API Gateway to expose a set of APIs to customers. The APIs have caching enabled in API Gateway. Customers need a way to invalidate the cache for each API when they test the API. What should a developer do to give customers the ability to invalidate the API cache?

   • AAsk the customers to use AWS credentials to call the InvalidateCache API operation.
   • BAttach an InvalidateCache policy to the IAM execution role that the customers use to invoke the API. Ask the customers to send a request that contains the Cache-Control:max-age=0 HTTP header when they make an API call.
   • CAsk the customers to use the AWS SDK API Gateway class to invoke the InvalidateCache API operation.
   • DAttach an InvalidateCache policy to the IAM execution role that the customers use to invoke the API. Ask the customers to add the INVALIDATE_CACHE query string parameter when they make an API call.

   Show answer

   Answer: B

   Explanation

   invalidate an API Gateway cache entry A client of your API can invalidate an existing cache entry and reload it from the integration endpoint for individual requests. The client must send a request that contains the Cache-Control: max-age=0 header. The client receives the response directly from the integration endpoint instead of the cache, provided that the client is authorized to do so. This replaces the existing cache entry with the new response, which is fetched from the integration endpoint. https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-caching.html

   Source: Adapted from community discussion — Mimi666

   References

   • AWS documentation

   Next question

5. Question 125 · 548 in bank

   A developer is creating an AWS Lambda function that will generate and export a file. The function requires 100 MB of temporary storage for temporary files while running. These files will not be needed after the function is complete. How can the developer MOST efficiently handle the temporary files?

   • AStore the files in Amazon Elastic Block Store (Amazon EBS) and delete the files at the end of the Lambda function.
   • BCopy the files to Amazon Elastic File System (Amazon EFS) and delete the files at the end of the Lambda function.
   • CStore the files in the /tmp directory and delete the files at the end of the Lambda function.
   • DCopy the files to an Amazon S3 bucket with a lifecycle policy to delete the files.

   Show answer

   Answer: C

   Explanation

   This is the most efficient and straightforward option. AWS Lambda provides a /tmp directory in its execution environment with a storage limit of 512 MB. This space can be used for temporary storage during the function execution. Since the requirement is 100 MB, it falls well within the limits of the /tmp directory.

   Source: Adapted from community discussion — SerialiDr

   References

   • AWS documentation

   Next question

6. Question 126 · 548 in bank

   A company uses Amazon DynamoDB as a data store for its order management system. The company frontend application stores orders in a DynamoDB table. The DynamoDB table is configured to send change events to a DynamoDB stream. The company uses an AWS Lambda function to log and process the incoming orders based on data from the DynamoDB stream. An operational review reveals that the order quantity of incoming orders is sometimes set to 0. A developer needs to create a dashboard that will show how many unique customers this problem affects each day. What should the developer do to implement the dashboard?

   • AGrant the Lambda function’s execution role permissions to upload logs to Amazon CloudWatch Logs. Implement a CloudWatch Logs Insights query that selects the number of unique customers for orders with order quantity equal to 0 and groups the results in 1-day periods. Add the CloudWatch Logs Insights query to a CloudWatch dashboard.
   • BUse Amazon Athena to query AWS CloudTrail API logs for API calls. Implement an Athena query that selects the number of unique customers for orders with order quantity equal to 0 and groups the results in 1-day periods. Add the Athena query to an Amazon CloudWatch dashboard.
   • CConfigure the Lambda function to send events to Amazon EventBridge. Create an EventBridge rule that groups the number of unique customers for orders with order quantity equal to 0 in 1-day periods. Add a CloudWatch dashboard as the target of the rule.
   • DTurn on custom Amazon CloudWatch metrics for the DynamoDB stream of the DynamoDB table. Create a CloudWatch alarm that groups the number of unique customers for orders with order quantity equal to 0 in 1-day periods. Add the CloudWatch alarm to a CloudWatch dashboard.

   Show answer

   Answer: A

   Explanation

   A. Grant the Lambda function’s execution role permissions to upload logs to Amazon CloudWatch Logs. Implement a CloudWatch Logs Insights query that selects the number of unique customers for orders with order quantity equal to 0 and groups the results in 1-day periods. Add the CloudWatch Logs Insights query to a CloudWatch dashboard. Here's why this option is the best choice: CloudWatch Logs Insights is designed for querying and analyzing log data, making it well-suited for this task. By configuring the Lambda function's execution role to upload logs to CloudWatch Logs, you ensure that the log data is available for analysis. You can use a CloudWatch Logs Insights query to identify unique customers for orders with a quantity of 0 and group the results by day, providing the desired daily count of affected customers. The results of the query can be added to a CloudWatch dashboard, making it easily accessible for monitoring.

   Source: Adapted from community discussion — Claire_KMT

   References

   • AWS documentation

   Next question

7. Question 127 · 548 in bank

   Select 2

   A developer needs to troubleshoot an AWS Lambda function in a development environment. The Lambda function is configured in VPC mode and needs to connect to an existing Amazon RDS for SQL Server DB instance. The DB instance is deployed in a private subnet and accepts connections by using port 1433. When the developer tests the function, the function reports an error when it tries to connect to the database. Which combination of steps should the developer take to diagnose this issue? (Choose two.)

   • ACheck that the function’s security group has outbound access on port 1433 to the DB instance’s security group. Check that the DB instance’s security group has inbound access on port 1433 from the function’s security group.
   • BCheck that the function’s security group has inbound access on port 1433 from the DB instance’s security group. Check that the DB instance’s security group has outbound access on port 1433 to the function’s security group.
   • CCheck that the VPC is set up for a NAT gateway. Check that the DB instance has the public access option turned on.
   • DCheck that the function’s execution role permissions include rds:DescribeDBInstances, rds:ModifyDBInstance. and rds:DescribeDBSecurityGroups for the DB instance.
   • ECheck that the function’s execution role permissions include ec2:CreateNetworkInterface, ec2:DescribeNetworkInterfaces, and ec2:DeleteNetworkInterface.

   Show answer

   Answer: AE

   Explanation

   - A: The function needs outbound access to DB and the DB needs to allow inbound access from the function - E: The function needs AWSLambdaVPCAccessExecutionRole role to work correctly in the VPC (https://docs.aws.amazon.com/lambda/latest/dg/configuration-vpc.html#vpc-permissions) D is incorrect as the function’s execution role does not need to make any of those DB actions: Describe Modify and DescribeDB security groups!

   Source: Adapted from community discussion — kaes

   References

   • AWS documentation
   • AWS documentation

   Next question

8. Question 128 · 548 in bank

   A developer needs to launch a new Amazon EC2 instance by using the AWS CLI. Which AWS CLI command should the developer use to meet this requirement?

   • Aaws ec2 bundle-instance
   • Baws ec2 start-instances
   • Caws ec2 confirm-product-instance
   • Daws ec2 run-instances

   Show answer

   Answer: D

   Explanation

   D. aws ec2 run-instances So, to create a new EC2 instance using the AWS CLI, you would typically use the aws ec2 run-instances command, providing the necessary parameters such as the AMI ID, instance type, security groups, and key pair, among others.

   Source: Adapted from community discussion — Claire_KMT

   Next question

9. Question 129 · 548 in bank

   A developer needs to manage AWS infrastructure as code and must be able to deploy multiple identical copies of the infrastructure, stage changes, and revert to previous versions. Which approach addresses these requirements?

   • AUse cost allocation reports and AWS OpsWorks to deploy and manage the infrastructure.
   • BUse Amazon CloudWatch metrics and alerts along with resource tagging to deploy and manage the infrastructure.
   • CUse AWS Elastic Beanstalk and AWS CodeCommit to deploy and manage the infrastructure.
   • DUse AWS CloudFormation and AWS CodeCommit to deploy and manage the infrastructure.

   Show answer

   Answer: D

   Explanation

   D. Use AWS CloudFormation and AWS CodeCommit to deploy and manage the infrastructure. Here's why this is the most appropriate choice: AWS CloudFormation: It allows you to define your infrastructure as code using templates, which can be version-controlled. You can create, update, and delete stacks of AWS resources in a controlled and predictable manner. This aligns with the requirement to deploy multiple identical copies of the infrastructure, stage changes, and revert to previous versions. AWS CodeCommit: It provides a fully managed source control service, allowing you to store and version-control your CloudFormation templates. This ensures that you can manage and track changes to your infrastructure configurations.

   Source: Adapted from community discussion — Claire_KMT

   Next question

10. Question 130 · 548 in bank

    A developer is working on an AWS Lambda function that accesses Amazon DynamoDB. The Lambda function must retrieve an item and update some of its attributes, or create the item if it does not exist. The Lambda function has access to the primary key. Which IAM permissions should the developer request for the Lambda function to achieve this functionality?

    • Adynamodb:DeleleItem dynamodb:GetItem dynamodb:PutItem
    • Bdynamodb:UpdateItem dynamodb:GetItem dynamodb:DescribeTable
    • Cdynamodb:GetRecords dynamodb:PutItem dynamodb:UpdateTable
    • Ddynamodb:UpdateItem dynamodb:GetItem dynamodb:PutItem

    Show answer

    Answer: D

    Explanation

    UpdateItem: Edits an existing item's attributes https://docs.aws.amazon.com/amazondynamodb/latest/APIReference/API_UpdateItem.html GetItem: retrieves attributes from the Thread table https://docs.aws.amazon.com/amazondynamodb/latest/APIReference/API_GetItem.html#API_GetItem_Examples PutItem: Creates a new item, or replaces an old item with a new item. https://docs.aws.amazon.com/amazondynamodb/latest/APIReference/API_PutItem.html

    Source: Adapted from community discussion — TanTran04

    References

    • AWS documentation
    • AWS documentation
    • AWS documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

DVA-C02 practice, question 121. 548 questions available.