DVA-C02 practice questions 301–310

1. Question 301 · 548 in bank

   A company hosts its application in the us-west-1 Region. The company wants to add redundancy in the us-east-1 Region. The application secrets are stored in AWS Secrets Manager in us-west-1. A developer needs to replicate the secrets to us-east-1. Which solution will meet this requirement?

   • AConfigure secret replication for each secret. Add us-east-1 as a replication Region. Choose an AWS Key Management Service (AWS KMS) key in us-east-1 to encrypt the replicated secrets.
   • BCreate a new secret in us-east-1 for each secret. Configure secret replication in us-east-1. Set the source to be the corresponding secret in us-west-1. Choose an AWS Key Management Service (AWS KMS) key in us-west-1 to encrypt the replicated secrets.
   • CCreate a replication rule for each secret. Set us-east-1 as the destination Region. Configure the rule to run during secret rotation. Choose an AWS Key Management Service (AWS KMS) key in us-east-1 to encrypt the replicated secrets.
   • DCreate a Secrets Manager lifecycle rule to replicate each secret to a new Amazon S3 bucket in us-west-1. Configure an S3 replication rule to replicate the secrets to us-east-1.

   Show answer

   Answer: A

   Explanation

   A - AWS Secrets Manager provides a built-in feature for cross-region replication of secrets. By configuring secret replication, you can add the us-east-1 Region as a replication destination. This ensures that the secrets are automatically and securely replicated from us-west-1 to us-east-1. You also have the option to specify an AWS KMS key in the destination region (us-east-1) to encrypt the replicated secrets, ensuring they are protected by encryption keys in the appropriate region.

   Source: Adapted from community discussion — rdiaz

   Next question

2. Question 302 · 548 in bank

   A company runs an ecommerce application on AWS. The application stores data in an Amazon Aurora database. A developer is adding a caching layer to the application. The caching strategy must ensure that the application always uses the most recent value for each data item. Which caching strategy will meet these requirements?

   • AImplement a TTL strategy for every item that is saved in the cache.
   • BImplement a write-through strategy for every item that is created and updated.
   • CImplement a lazy loading strategy for every item that is loaded.
   • DImplement a read-through strategy for every item that is loaded.

   Show answer

   Answer: B

   Explanation

   Write-Through Caching (Option B): With a write-through caching strategy, every time an item is written to the database, it is also written to the cache. This ensures that the cache is always updated with the most recent value immediately after any write operation. Consequently, any read operation can fetch the most recent value directly from the cache, ensuring data consistency between the cache and the database.

   Source: Adapted from community discussion — rdiaz

   Next question

3. Question 303 · 548 in bank

   A company has a serverless application that uses Amazon API Gateway backed by AWS Lambda proxy integration. The company is developing several backend APIs. The company needs a landing page to provide an overview of navigation to the APIs. A developer creates a new/LandingPage resource and a new GET method that uses mock integration. What should the developer do next to meet these requirements?

   • AConfigure the integration request mapping template with Content-Type of text/html and statusCode of 200. Configure the integration response mapping template with Content-Type of application/json. In the integration response mapping template, include the LandingPage HTML code that references the APIs.
   • BConfigure the integration request mapping template with Content-Type of application/json. In the integration request mapping template, include the LandingPage HMTL code that references the APIs. Configure the integration response mapping template with Content-Type of text/html and statusCode of 200.
   • CConfigure the integration request mapping template with Content-Type of application/json and statusCode of 200. Configure the integration response mapping template with Content-Type of text/html. In the integration response mapping template, include the LandingPage HTML code that references the APIs.
   • DConfigure the integration request mapping template with Content-Type of text/html. In the integration request mapping template, include the LandingPage HTML code that references the APIs. Configure the integration response mapping template with Content-Type of application/json and statusCode of 200.

   Show answer

   Answer: C

   Explanation

   Integration Request Mapping Template: { "statusCode": 200 } Integration Response Mapping Template: Landing Page Welcome to our API Gateway! Here are our APIs: API 1 API 2 API 3

   Source: Adapted from community discussion — albert_kuo

   Next question

4. Question 304 · 548 in bank

   A developer creates an AWS Lambda function that is written in Java. During testing, the Lambda function does not work how the developer expected. The developer wants to use tracing capabilities to troubleshoot the problem. Which AWS service should the developer use to accomplish this goal?

   • AAWS Trusted Advisor
   • BAmazon CloudWatch
   • CAWS X-Ray
   • DAWS CloudTrail

   Show answer

   Answer: C

   Next question

5. Question 305 · 548 in bank

   A company is developing an application that will be accessed through the Amazon API Gateway REST API. Registered users should be the only ones who can access certain resources of this API. The token being used should expire automatically and needs to be refreshed periodically. How can a developer meet these requirements?

   • ACreate an Amazon Cognito identity pool, configure the Amazon Cognito Authorizer in API Gateway, and use the temporary credentials generated by the identity pool.
   • BCreate and maintain a database record for each user with a corresponding token and use an AWS Lambda authorizer in API Gateway.
   • CCreate an Amazon Cognito user pool, configure the Cognito Authorizer in API Gateway, and use the identity or access token.
   • DCreate an IAM user for each API user, attach an invoke permissions policy to the API, and use an IAM authorizer in API Gateway.

   Show answer

   Answer: C

   Explanation

   Option A (Amazon Cognito Identity Pool): An Amazon Cognito Identity Pool provides temporary AWS credentials for users but is typically used in conjunction with user pools for unauthenticated access and to interact with AWS services. It does not handle user authentication and token expiration directly as needed for API access.

   Source: Adapted from community discussion — rdiaz

   Next question

6. Question 306 · 548 in bank

   A company used AWS to develop an application for customers. The application includes an Amazon API Gateway API that invokes AWS Lambda functions. The Lambda functions process data and store the data in Amazon DynamoDB tables. The company must monitor the entire application to identify potential bottlenecks in the architecture that can negatively affect customers. Which solution will meet this requirement with the LEAST development effort?

   • AInstrument the application with AWS X-Ray. Inspect the service map to identify errors and issues.
   • BConfigure Lambda exceptions and additional logging to Amazon CloudWatch. Use CloudWatch Logs Insights to query the logs.
   • CConfigure API Gateway to log responses to Amazon CloudWatch. Create a metric filter for the TooManyRequestsException error message.
   • DUse Amazon CloudWatch metrics for the DynamoDB tables to identify all the ProvisionedThroughputExceededException error messages.

   Show answer

   Answer: A

   Explanation

   To monitor the entire application with the least development effort, the company should use AWS X-Ray integrated with Amazon API Gateway, AWS Lambda, and Amazon DynamoDB. AWS X-Ray provides end-to-end tracing of requests through the application components, allowing the company to identify performance bottlenecks in a serverless architecture with minimal additional development work.

   Source: Adapted from community discussion — preachr

   Next question

7. Question 307 · 548 in bank

   Select 2

   A company launched an online portal to announce a new product that the company will release in 6 months. The portal requests that users enter an email address to receive communications about the product. The company needs to create a REST API that will store the email addresses in Amazon DynamoDB. A developer has created an AWS Lambda function that can store the email addresses. The developer will deploy the Lambda function by using the AWS Serverless Application Model (AWS SAM). The developer must provide access to the Lambda function over HTTP. Which solutions will meet these requirements with the LEAST additional configuration? (Choose two.)

   • AExpose the Lambda function by using function URLs.
   • BExpose the Lambda function by using a Gateway Load Balancer.
   • CExpose the Lambda function by using a Network Load Balancer.
   • DExpose the Lambda function by using AWS Global Accelerator.
   • EExpose the Lambda function by using Amazon API Gateway.

   Show answer

   Answer: AE

   Explanation

   Lambda Function URLs and Amazon API Gateway provide direct HTTP/HTTPS access to serverless functions (AWS Lambda) and automatically handle routing, scaling, and performance optimization without the need for a load balancer. API Gateway already acts as a front door for your API, handling incoming HTTP requests and forwarding them to the appropriate Lambda function (or other backend services), so there’s no need for a Gateway Load Balancer. Lambda Function URLs similarly provide a direct way to invoke a Lambda function over HTTP without requiring a load balancer.

   Source: Adapted from community discussion — preachr

   Next question

8. Question 308 · 548 in bank

   A company has a website that displays a daily newsletter. When a user visits the website, an AWS Lambda function processes the browser's request and queries the company's on-premises database to obtain the current newsletter. The newsletters are stored in English. The Lambda function uses the Amazon Translate TranslateText API operation to translate the newsletters, and the translation is displayed to the user. Due to an increase in popularity, the website's response time has slowed. The database is overloaded. The company cannot change the database and needs a solution that improves the response time of the Lambda function. Which solution meets these requirements?

   • AChange to asynchronous Lambda function invocation.
   • BCache the translated newsletters in the Lambda/tmp directory.
   • CEnable TranslateText API caching.
   • DChange the Lambda function to use parallel processing.

   Show answer

   Answer: B

   Explanation

   B is correct. Why? All others make no sense. But using /tmp to cache this content is far from being optimal. AWS itself proposes using S3 or dynamo for caching of this kind: https://aws.amazon.com/pt/blogs/machine-learning/maximize-your-amazon-translate-architecture-using-strategic-caching-layers/ https://aws.amazon.com/pt/blogs/machine-learning/translating-your-website-or-application-automatically-with-amazon-translate-in-your-ci-cd-pipeline/ Using lambda's /tmp will solve the DB overload but create problems of performance by its own, AND probably increase costs.

   Source: Adapted from community discussion — wh1t4k3r

   References

   • AWS documentation
   • AWS documentation

   Next question

9. Question 309 · 548 in bank

   A developer is monitoring an application that runs on an Amazon EC2 instance. The developer has configured a custom Amazon CloudWatch metric with data granularity of 1 second. If any issues occur, the developer wants to be notified within 30 seconds by Amazon Simple Notification Service (Amazon SNS). What should the developer do to meet this requirement?

   • AConfigure a high-resolution CloudWatch alarm.
   • BSet up a custom CloudWatch dashboard.
   • CUse Amazon CloudWatch Logs Insights.
   • DChange to a default CloudWatch metric.

   Show answer

   Answer: A

   Next question

10. Question 310 · 548 in bank

    An application that is hosted on an Amazon EC2 instance needs access to files that are stored in an Amazon S3 bucket. The application lists the objects that are stored in the S3 bucket and displays a table to the user. During testing, a developer discovers that the application does not show any objects in the list. What is the MOST secure way to resolve this issue?

    • AUpdate the IAM instance profile that is attached to the EC2 instance to include the S3:* permission for the S3 bucket.
    • BUpdate the IAM instance profile that is attached to the EC2 instance to include the S3:ListBucket permission for the S3 bucket.
    • CUpdate the developer's user permissions to include the S3:ListBucket permission for the S3 bucket.
    • DUpdate the S3 bucket policy by including the S3:ListBucket permission and by setting the Principal element to specify the account number of the EC2 instance.

    Show answer

    Answer: B

    Explanation

    The correct answer is B. https://repost.aws/knowledge-center/ec2-instance-access-s3-bucket Option A also works, but it is not compliant to the AWS security practice of the least privilege permissions.

    Source: Adapted from community discussion — Untamables

    References

    • repost.aws documentation
    • AWS documentation
    • AWS documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

DVA-C02 practice, question 301. 548 questions available.