DVA-C02 practice questions 241–250

1. Question 241 · 548 in bank

   A company is using Amazon API Gateway to develop an API for its application on AWS. A developer needs to test and generate API responses. Other teams are required to test the API immediately. What should the developer do to meet these requirements?

   • ASet up a mock integration request in API Gateway. Configure the method's integration request and integration response to associate a response with a given status code.
   • BSet up the request validators in the API's OpenAPI definition file. Import the OpenAPI definitions into API Gateway to test the API.
   • CSet up a gateway response for the API in API Gateway. Configure response headers with hardcoded HTTP status codes and responses.
   • DSet up a request parameter-based Lambda authorizer to control access to the API. Configure the Lambda function with the necessary mapping template.

   Show answer

   Answer: A

   Next question

2. Question 242 · 548 in bank

   A company is releasing a new feature. Users can request early access to the new feature by using an application form. The company expects a surge of requests when the application form becomes available. Each request will be stored as an item in an Amazon DynamoDB table. Each item will contain the user's username, the submission date, and a validation status of UNVALIDATED. VALID, or NOT VALID. Each item also will contain the user's rating of the process on a scale of 1 to 5. Each user can submit one request. For the DynamoDB table, the developer must choose a partition key that will give the workload well-distributed records across partitions. Which DynamoDB attribute will meet these requirements?

   • AUsername
   • BSubmission date
   • CValidation status
   • DRating of the process on a scale of 1 to 5

   Show answer

   Answer: A

   Next question

3. Question 243 · 548 in bank

   A developer is creating a publicly accessible enterprise website consisting of only static assets. The developer is hosting the website in Amazon S3 and serving the website to users through an Amazon CloudFront distribution. The users of this application must not be able to access the application content directly from an S3 bucket. All content must be served through the Amazon CloudFront distribution. Which solution will meet these requirements?

   • ACreate a new origin access control (OAC) in CloudFront. Configure the CloudFront distribution's origin to use the new OAC. Update the S3 bucket policy to allow CloudFront OAC with read and write access to access Amazon S3 as the origin.
   • BUpdate the S3 bucket settings. Enable the block all public access setting in Amazon S3. Configure the CloudFront distribution's with Amazon S3 as the origin. Update the S3 bucket policy to allow CloudFront write access.
   • CUpdate the S3 bucket's static website settings. Enable static website hosting and specifying index and error documents. Update the CloudFront origin to use the S3 bucket's website endpoint.
   • DUpdate the CloudFront distribution's origin to send a custom header. Update the S3 bucket policy with a condition by using the aws:RequestTag/tag-key key. Configure the tag-key as the custom header name, and the value being matched is the header's value.

   Show answer

   Answer: A

   Explanation

   While enabling the block all public access setting in Amazon S3 is a good security practice and necessary for this scenario, simply allowing CloudFront "write access" is not relevant since the scenario involves serving static assets, not writing to the S3 bucket. This option also doesn't specify using an OAC or a similar method to ensure exclusive access through CloudFront.

   Source: Adapted from community discussion — CrescentShared

   References

   • AWS documentation

   Next question

4. Question 244 · 548 in bank

   A developer needs to perform geographic load testing of an API. The developer must deploy resources to multiple AWS Regions to support the load testing of the API. How can the developer meet these requirements without additional application code?

   • ACreate and deploy an AWS Lambda function in each desired Region. Configure the Lambda function to create a stack from an AWS CloudFormation template in that Region when the function is invoked.
   • BCreate an AWS CloudFormation template that defines the load test resources. Use the AWS CLI create-stack-set command to create a stack set in the desired Regions.
   • CCreate an AWS Systems Manager document that defines the resources. Use the document to create the resources in the desired Regions.
   • DCreate an AWS CloudFormation template that defines the load test resources. Use the AWS CLI deploy command to create a stack from the template in each Region.

   Show answer

   Answer: B

   Explanation

   B. Create an AWS CloudFormation template that defines the load test resources. Use the AWS CLI create-stack-set command to create a stack set in the desired Regions. AWS CloudFormation StackSets allow developers to deploy CloudFormation stacks across multiple AWS accounts and regions with a single CloudFormation template. By using the AWS CLI create-stack-set command, the developer can deploy the same CloudFormation stack to multiple regions without additional application code, thereby meeting the requirement for geographic load testing of an API.

   Source: Adapted from community discussion — Bibay

   References

   • AWS documentation
   • AWS documentation

   Next question

5. Question 245 · 548 in bank

   A developer built an application that calls an external API to obtain data, processes the data, and saves the result to Amazon S3. The developer built a container image with all of the necessary dependencies to run the application as a container. The application runs locally and requires minimal CPU and RAM resources. The developer has created an Amazon ECS cluster. The developer needs to run the application hourly in Amazon Elastic Container Service (Amazon ECS). Which solution will meet these requirements with the LEAST amount of infrastructure management overhead?

   • AAdd a capacity provider to manage instances.
   • BAdd an Amazon EC2 instance that runs the application.
   • CDefine a task definition with an AWS Fargate launch type.
   • DCreate an Amazon ECS cluster and add the managed node groups feature to run the application.

   Show answer

   Answer: C

   Explanation

   El desarrollador debe definir una definición de tarea con un tipo de lanzamiento de AWS Fargate. Al utilizar AWS Fargate, el desarrollador puede ejecutar la aplicación en un clúster de Amazon ECS sin tener que administrar la infraestructura subyacente. Fargate se encarga de aprovisionar y escalar automáticamente los recursos necesarios para ejecutar la tarea de la aplicación, lo que reduce la carga operativa y los gastos generales de administración. Al ejecutar la aplicación en AWS Fargate, el desarrollador puede aprovechar los recursos mínimos de CPU y RAM necesarios para la aplicación, lo que garantiza un uso eficiente de los recursos y minimiza los costos.

   Source: Adapted from community discussion — ANDRES715

   References

   • AWS documentation

   Next question

6. Question 246 · 548 in bank

   A company runs its website on AWS. The company posts daily polls on its website and publishes the poll results next day. The website stores user responses in an Amazon DynamoDB table. After the poll results are published, the company does not need to keep the user responses. A developer needs to implement a solution that will automatically remove old user responses from the DynamoDB table. The developer adds a new expiration_date attribute to the DynamoDB table. The developer plans to use the expiration_date attribute for the automation. Which solution will meet these requirements with the LEAST development effort?

   • ACreate an AWS Lambda function to delete old user responses based on the expiration_date attribute. Create an Amazon EventBridge schedule to run the Lambda function daily.
   • BCreate an AWS Fargate task in Amazon Elastic Container Service (Amazon ECS) to delete old user responses based on the expiration_date attribute. Create an Amazon EventBridge schedule to run the Fargate task daily.
   • CCreate an AWS Glue job to delete old user responses based on the expiration_date attribute. Create an AWS Glue trigger schedule to run the job daily.
   • DEnable TTL on the DynamoDB table and specify the expiration_date attribute. Expire old user responses by using DynamoDB TTL.

   Show answer

   Answer: D

   Next question

7. Question 247 · 548 in bank

   A developer is creating a simple proof-of-concept demo by using AWS CloudFormation and AWS Lambda functions. The demo will use a CloudFormation template to deploy an existing Lambda function. The Lambda function uses deployment packages and dependencies stored in Amazon S3. The developer defined an AWS::Lambda::Function resource in a CloudFormation template. The developer needs to add the S3 bucket to the CloudFormation template. What should the developer do to meet these requirements with the LEAST development effort?

   • AAdd the function code in the CloudFormation template inline as the code property.
   • BAdd the function code in the CloudFormation template as the ZipFile property.
   • CFind the S3 key for the Lambda function. Add the S3 key as the ZipFile property in the CloudFormation template.
   • DAdd the relevant key and bucket to the S3Bucket and S3Key properties in the CloudFormation template.

   Show answer

   Answer: D

   Explanation

   AWSTemplateFormatVersion: '2010-09-09' Resources: MyLambdaFunction: Type: 'AWS::Lambda::Function' Properties: FunctionName: MyLambdaFunction Handler: index.handler Role: arn:aws:iam::123456789012:role/execution_role Code: S3Bucket: my-lambda-functions-bucket S3Key: path/to/my-deployment-package.zip Runtime: python3.8 Timeout: 300 MemorySize: 128

   Source: Adapted from community discussion — albert_kuo

   References

   • AWS documentation

   Next question

8. Question 248 · 548 in bank

   A developer is building a microservices-based application by using Python on AWS and several AWS services. The developer must use AWS X-Ray. The developer views the service map by using the console to view the service dependencies. During testing, the developer notices that some services are missing from the service map. What can the developer do to ensure that all services appear in the X-Ray service map?

   • AModify the X-Ray Python agent configuration in each service to increase the sampling rate.
   • BInstrument the application by using the X-Ray SDK for Python. Install the X-Ray SDK for all the services that the application uses.
   • CEnable X-Ray data aggregation in Amazon CloudWatch Logs for all the services that the application uses.
   • DIncrease the X-Ray service map timeout value in the X-Ray console.

   Show answer

   Answer: B

   Explanation

   B ---->>> To ensure that all services appear in the AWS X-Ray service map, it's essential that each component of the application is properly instrumented to send data to X-Ray. The X-Ray SDK must be used within the application to capture and send the necessary telemetry data to X-Ray.

   Source: Adapted from community discussion — tomchandler077

   Next question

9. Question 249 · 548 in bank

   Select 2

   A developer is building a containerized application on AWS. The application communicates with a third-party service by using API keys. The developer needs a secure way to store the API keys and pass the API keys to the containerized application. Which solutions will meet these requirements? (Choose two.)

   • AStore the API keys as a SecureString parameter in AWS Systems Manager Parameter Store. Grant the application access to retrieve the value from Parameter Store.
   • BStore the API keys in AWS CloudFormation templates by using base64 encoding. Pass the API keys to the application through container definition environment variables.
   • CAdd a new AWS CloudFormation parameter to the CloudFormation template. Pass the API keys to the application by using the container definition environment variables.
   • DEmbed the API keys in the application. Build the container image on-premises. Upload the container image to Amazon Elastic Container Registry (Amazon ECR).
   • EStore the API keys as a SecretString parameter in AWS Secrets Manager. Grant the application access to retrieve the value from Secrets Manager.

   Show answer

   Answer: AE

   References

   • AWS documentation

   Next question

10. Question 250 · 548 in bank

    A company runs an application on AWS. The application stores data in an Amazon DynamoDB table. Some queries are taking a long time to run. These slow queries involve an attribute that is not the table's partition key or sort key. The amount of data that the application stores in the DynamoDB table is expected to increase significantly. A developer must increase the performance of the queries. Which solution will meet these requirements?

    • AIncrease the page size for each request by setting the Limit parameter to be higher than the default value. Configure the application to retry any request that exceeds the provisioned throughput.
    • BCreate a global secondary index (GSI). Set query attribute to be the partition key of the index.
    • CPerform a parallel scan operation by issuing individual scan requests. In the parameters, specify the segment for the scan requests and the total number of segments for the parallel scan.
    • DTurn on read capacity auto scaling for the DynamoDB table. Increase the maximum read capacity units (RCUs).

    Show answer

    Answer: B

    Explanation

    To improve the performance of queries that involve an attribute that is neither the table's partition key nor sort key, and anticipating an increase in data volume, the most effective solution is to utilize a global secondary index (GSI). This allows for efficient querying based on different attributes that are critical for performance but not originally designed as keys in the main table structure.

    Source: Adapted from community discussion — tomchandler077

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

DVA-C02 practice, question 241. 548 questions available.