DVA-C02 practice questions 321–330

1. Question 321 · 548 in bank

   A company is planning to securely manage one-time fixed license keys in AWS. The company's development team needs to access the license keys in automaton scripts that run in Amazon EC2 instances and in AWS CloudFormation stacks. Which solution will meet these requirements MOST cost-effectively?

   • AAmazon S3 with encrypted files prefixed with “config”
   • BAWS Secrets Manager secrets with a tag that is named SecretString
   • CAWS Systems Manager Parameter Store SecureString parameters
   • DCloudFormation NoEcho parameters

   Show answer

   Answer: C

   Explanation

   Both B and C are feasible solutions. Just consider the "MOST cost effectively" here. AWS Systems Manager Parameter Store comes with no additional cost (Standard type). However, AWS Secrets Manager costs $0.40 per secret per month, and data retrieval costs $0.05 per 10,000 API calls. C is much cheaper, guy.

   Source: Adapted from community discussion — alohayo

   References

   • AWS documentation
   • AWS documentation

   Next question

2. Question 322 · 548 in bank

   A developer manages a website that distributes its content by using Amazon CloudFront. The website's static artifacts are stored in an Amazon S3 bucket. The developer deploys some changes and can see the new artifacts in the S3 bucket. However, the changes do not appear on the webpage that the CloudFront distribution delivers. How should the developer resolve this issue?

   • AConfigure S3 Object Lock to update to the latest version of the files every time an S3 object is updated.
   • BConfigure the S3 bucket to clear all old objects from the bucket before new artifacts are uploaded.
   • CSet CloudFront to invalidate the cache after the artifacts have been deployed to Amazon S3.
   • DSet CloudFront to modify the distribution origin after the artifacts have been deployed to Amazon S3.

   Show answer

   Answer: C

   Explanation

   By invalidating the CloudFront cache, you ensure that the latest artifacts in your S3 bucket are delivered to users, resolving the issue of outdated content being displayed.

   Source: Adapted from community discussion — rdiaz

   Next question

3. Question 323 · 548 in bank

   A company has a development team that uses AWS CodeCommit for version control. The development team has CodeCommit repositories in multiple AWS accounts. The team is expanding to include developers who work in various locations. The company must ensure that the developers have secure access to the repositories. Which solution will meet these requirements in the MOST operationally efficient way?

   • AConfigure IAM roles for each developer and grant access individually.
   • BConfigure permission sets in AWS IAM Identity Center to grant access to the accounts.
   • CShare AWS access keys with the development team for direct repository access.
   • DUse public SSH keys for authentication to the CodeCommit repositories.

   Show answer

   Answer: B

   Explanation

   B is best. AWS IAM Identity Center (formerly AWS Single Sign-On) provides a centralized way to manage access across multiple AWS accounts. A could work but it's not the most operationally efficient, especially for a growing team across multiple AWS accounts.

   Source: Adapted from community discussion — KennethNg923

   Next question

4. Question 324 · 548 in bank

   A developer received the following error message during an AWS CloudFormation deployment: DELETE_FAILED (The following resource(s) failed to delete: [ASGInstanceRole12345678].) Which action should the developer take to resolve this error?

   • AContact AWS Support to report an issue with the Auto Scaling Groups (ASG) service.
   • BAdd a DependsOn attribute to the ASGInstanceRole12345678 resource in the CloudFormation template. Then delete the stack.
   • CModify the CloudFormation template to retain the ASGInstanceRole12345678 resource. Then manually delete the resource after deployment.
   • DAdd a force parameter when calling CloudFormation with the role-arn of ASGInstanceRole12345678.

   Show answer

   Answer: C

   Next question

5. Question 325 · 548 in bank

   A company runs a critical application on Amazon Elastic Container Service (Amazon ECS) by using Amazon EC2 instances. The company needs to migrate the application to Amazon ECS on AWS Fargate. A developer is configuring Fargate and the ECS capacity providers to make the change. Which solution will meet these requirements with the LEAST downtime during migration?

   • AUse the PutClusterCapacityProviders API operation to associate the ECS cluster with the FARGATE and FARGATE_SPOT capacity provider strategies. Use FARGATE as Provider 1 with a base value. Use FARGATE_SPOT as Provider 2 for failover.
   • BUse the CreateCapacityProvider API operation to associate the ECS cluster with the FARGATE and FARGATE_SPOT capacity provider strategies. Use FARGATE as Provider 1 with a base value. Use FARGATE_SPOT as Provider 2 for failover.
   • CUse the PutClusterCapacityProviders API operation to associate the ECS cluster with the FARGATE and FARGATE_SPOT capacity provider strategies. Use FARGATE_SPOT as Provider 1 with a base value. Use FARGATE as Provider 2 for failover.
   • DUse the CreateCapacityProvider API operation to associate the ECS cluster with the FARGATE and FARGATE_SPOT capacity provider strategies. Use FARGATE_SPOT as Provider 1 with a base value. Use FARGATE as Provider 2 for failover.

   Show answer

   Answer: A

   Explanation

   By following Option A, you ensure that your ECS tasks are reliably running on Fargate, with minimal downtime during the migration process. This strategy leverages the reliability of Fargate and the cost-effectiveness of Fargate Spot for non-critical workloads.

   Source: Adapted from community discussion — Alabi

   Next question

6. Question 326 · 548 in bank

   Select 2

   A company has a web application that is hosted on AWS. The application is behind an Amazon CloudFront distribution. A developer needs a dashboard to monitor error rates and anomalies of the CloudFront distribution as frequently as possible. Which combination of steps should the developer take to meet these requirements? (Choose two.)

   • AStream the CloudFront distribution logs to an Amazon S3 bucket. Detect anomalies and error rates by using Amazon Athena.
   • BEnable real-time logs on the CloudFront distribution. Create a data stream in Amazon Kinesis Data Streams.
   • CSet up Amazon Kinesis Data Streams to send the logs to Amazon OpenSearch Service by using an AWS Lambda function. Make a dashboard in OpenSearch Dashboards.
   • DStream the CloudFront distribution logs to Amazon Kinesis Data Firehose.
   • ESet up Amazon Kinesis Data Firehose to send the logs to AWS CloudTrail. Create CloudTrail metrics, alarms, and dashboards.

   Show answer

   Answer: BC

   Explanation

   https://docs.aws.amazon.com/opensearch-service/latest/developerguide/integrations.html#integrations-kinesis You can use OpenSearch Ingestion to directly load streaming data into your Amazon OpenSearch Service domain, without needing to use third-party solutions. You can load streaming data from Kinesis Data Streams to OpenSearch Service. New data that arrives in the data stream triggers an event notification to Lambda, which then runs your custom code to perform the indexing. Once the Lambda function is configured with Kinesis DataStreams, you can use OpenSearch Dashboards to create visualizations.

   Source: Adapted from community discussion — ahadh7621

   References

   • AWS documentation

   Next question

7. Question 327 · 548 in bank

   A developer creates an Amazon DynamoDB table. The table has OrderID as the partition key and NumberOfItemsPurchased as the sort key. The data type of the partition key and the sort key is Number. When the developer queries the table, the results are sorted by NumberOfItemsPurchased in ascending order. The developer needs the query results to be sorted by NumberOfItemsPurchased in descending order. Which solution will meet this requirement?

   • ACreate a local secondary index (LSI) on the NumberOfItemsPurchased sort key.
   • BChange the sort key from NumberOfItemsPurchased to NumberOfItemsPurchasedDescending.
   • CIn the Query operation, set the ScanIndexForward parameter to false.
   • DIn the Query operation, set the KeyConditionExpression parameter to false.

   Show answer

   Answer: C

   Next question

8. Question 328 · 548 in bank

   A developer needs to use a code template to create an automated deployment of an application onto Amazon EC2 instances. The template must be configured to repeat deployment, installation, and updates of resources for the application. The template must be able to create identical environments and roll back to previous versions. Which solution will meet these requirements?

   • AUse AWS Amplify for automatic deployment templates. Use a traffic-splitting deployment to copy any deployments. Modify any resources created by Amplify, if necessary.
   • BUse AWS CodeBuild for automatic deployment. Upload the required AppSpec file template. Save the appspec.yml file in the root directory folder of the revision. Specify the deployment group that includes the EC2 instances for the deployment.
   • CUse AWS CloudFormation to create an infrastructure template in JSON format to deploy the EC2 instances. Use CloudFormation helper scripts to install the necessary software and to start the application. Call the scripts directly from the template.
   • DUse AWS AppSync to deploy the application. Upload the template as a GraphQL schema. Specify the EC2 instances for deployment of the application. Use resolvers as a version control mechanism and to make any updates to the deployments.

   Show answer

   Answer: C

   Next question

9. Question 329 · 548 in bank

   A developer has a continuous integration and continuous delivery (CI/CD) pipeline that uses AWS CodeArtifact and AWS CodeBuild. The build artifacts are between 0.5 GB and 1.5 GB in size. The builds happen frequently and retrieve many dependencies from CodeArtifact each time. The builds have been slow because of the time it takes to transfer dependencies. The developer needs to improve build performance by reducing the number of dependencies that are retrieved for each build. Which solution will meet this requirement?

   • ASpecify an Amazon S3 cache in CodeBuild. Add the S3 cache folder path to the buildspec.yaml file for the build project.
   • BSpecify a local cache in CodeBuild. Add the CodeArtifact repository name to the buildspec.yaml file for the build project.
   • CSpecify a local cache in CodeBuild. Add the cache folder path to the buildspec.yaml file for the build project.
   • DRetrieve the buildspec.yaml file directly from CodeArtifact. Add the CodeArtifact repository name to the buildspec.yaml file for the build project.

   Show answer

   Answer: C

   Explanation

   Explanation Using a local cache in CodeBuild allows you to cache dependencies locally on the build host, which can significantly reduce the time it takes to retrieve dependencies during subsequent builds.

   Source: Adapted from community discussion — Alabi

   Next question

10. Question 330 · 548 in bank

    A company that has large online business uses an Amazon DynamoDB table to store sales data. The company enabled Amazon DynamoDB Streams on the table. The transaction status of each sale is stored in a TransactionStatus attribute in the table. The value of the TransactionStatus attribute must be either failed, pending, or completed. The company wants to be notified of failed sales where the Price attribute is above a specific threshold. A developer needs to set up notification for the failed sales. Which solution will meet these requirements with the LEAST development effort?

    • ACreate an event source mapping between DynamoDB Streams and an AWS Lambda function. Use Lambda event filtering to trigger the Lambda function only if sales fail when the price is above the specified threshold. Configure the Lambda function to publish the data to an Amazon Simple Notification Service (Amazon SNS) topic.
    • BCreate an event source mapping between DynamoDB Streams and an AWS Lambda function. Configure the Lambda function handler code to publish to an Amazon Simple Notification Service (Amazon SNS) topic if sales fail when price is above the specified threshold.
    • CCreate an event source mapping between DynamoDB Streams and an Amazon Simple Notification Service (Amazon SNS) topic. Use event filtering to publish to the SNS topic if sales fail when the price is above the specified threshold.
    • DCreate an Amazon CloudWatch alarm to monitor the DynamoDB Streams sales data. Configure the alarm to publish to an Amazon Simple Notification Service (Amazon SNS) topic if sales fail due when price is above the specified threshold.

    Show answer

    Answer: A

    References

    • AWS documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

DVA-C02 practice, question 321. 548 questions available.