DVA-C02 practice questions 331–340

1. Question 331 · 548 in bank

   An AWS Lambda function is invoked asynchronously to process events. Occasionally, the Lambda function falls to process events. A developer needs to collect and analyze these failed events to fix the issue. What should the developer do to meet these requirements with the LEAST development effort?

   • AAdd logging statements for all events in the Lambda function. Filter AWS CloudTrail logs for errors.
   • BConfigure the Lambda function to start an AWS Step Functions workflow with retries for failed events.
   • CAdd a dead-letter queue to send messages to an Amazon Simple Queue Service (Amazon SQS) standard queue.
   • DAdd a dead-letter queue to send messages to an Amazon Simple Notification Service (Amazon SNS) FIFO topic.

   Show answer

   Answer: C

   Next question

2. Question 332 · 548 in bank

   A company is building a scalable data management solution by using AWS services to improve the speed and agility of development. The solution will ingest large volumes of data from various sources and will process this data through multiple business rules and transformations. The solution requires business rules to run in sequence and to handle reprocessing of data if errors occur when the business rules run. The company needs the solution to be scalable and to require the least possible maintenance. Which AWS service should the company use to manage and automate the orchestration of the data flows to meet these requirements?

   • AAWS Batch
   • BAWS Step Functions
   • CAWS Glue
   • DAWS Lambda

   Show answer

   Answer: B

   Explanation

   Option B is the correct choice. AWS Step Functions allows you to coordinate multiple AWS services into serverless workflows so you can build and update apps quickly. It also provides a way to handle errors and retry failed steps, making it a good fit for the company’s requirements.

   Source: Adapted from community discussion — MrTee

   References

   • AWS documentation
   • AWS documentation

   Next question

3. Question 333 · 548 in bank

   A company has deployed infrastructure on AWS. A development team wants to create an AWS Lambda function that will retrieve data from an Amazon Aurora database. The Amazon Aurora database is in a private subnet in company's VPC. The VPC is named VPC1. The data is relational in nature. The Lambda function needs to access the data securely. Which solution will meet these requirements?

   • ACreate the Lambda function. Configure VPC1 access for the function. Attach a security group named SG1 to both the Lambda function and the database. Configure the security group inbound and outbound rules to allow TCP traffic on Port 3306.
   • BCreate and launch a Lambda function in a new public subnet that is in a new VPC named VPC2. Create a peering connection between VPC1 and VPC2.
   • CCreate the Lambda function. Configure VPC1 access for the function. Assign a security group named SG1 to the Lambda function. Assign a second security group named SG2 to the database. Add an inbound rule to SG1 to allow TCP traffic from Port 3306.
   • DExport the data from the Aurora database to Amazon S3. Create and launch a Lambda function in VPC1. Configure the Lambda function query the data from Amazon S3.

   Show answer

   Answer: A

   Explanation

   ooooh this one was rough. I am going with A --> https://repost.aws/knowledge-center/connect-lambda-to-an-rds-instance I was between A and C... wording for both tricky. But the only way C would work is if the last portion of the sentence the read "Add an inbound rule to SG2 to allow TCP traffic from port 3306" or "Add an outbound rule to SG1 to allow TCP traffic... "

   Source: Adapted from community discussion — [Removed]

   References

   • repost.aws documentation
   • repost.aws documentation

   Next question

4. Question 334 · 548 in bank

   Select 2

   A company has an application that uses an Amazon S3 bucket for object storage. A developer needs to configure in-transit encryption for the S3 bucket. All the S3 objects containing personal data needs to be encrypted at rest with AWS Key Management Service (AWS KMS) keys, which can be rotated on demand. Which combination of steps will meet these requirements? (Choose two.)

   • AWrite an S3 bucket policy to allow only encrypted connections over HTTPS by using permissions boundary.
   • BConfigure an S3 bucket policy to enable client-side encryption for the objects containing personal data by using an AWS KMS customer managed key.
   • CConfigure the application to encrypt the objects by using an AWS KMS customer managed key before uploading the objects containing personal data to Amazon S3.
   • DWrite an S3 bucket policy to allow only encrypted connections over HTTPS by using the aws:SecureTransport condition.
   • EConfigure S3 Block Public Access settings for the S3 bucket to allow only encrypted connections over HTTPS.

   Show answer

   Answer: CD

   Explanation

   To achieve the requirements of ensuring encryption in transit and at rest for the S3 bucket with AWS KMS keys, the most suitable steps are: D: Enforce HTTPS connections to ensure encryption in transit. C: Configure encryption with AWS KMS for encryption at rest.

   Source: Adapted from community discussion — rdiaz

   Next question

5. Question 335 · 548 in bank

   A company has a monolithic desktop-based application that processes images. A developer is converting the application into an AWS Lambda function by using Python. Currently, the desktop application runs every 5 minutes to process the latest image from an Amazon S3 bucket. The desktop application completes the image processing task within 1 minute. During testing on AWS, the developer notices that the Lambda function runs at the specified 5-minute interval. However, the Lambda function takes more than 2 minutes to complete the image processing task. The developer needs a solution that will improve the Lambda function's performance. Which solution will meet this requirement?

   • AUpdate the instance type of the Lambda function to a compute optimized instance with at least eight virtual CPU (vCPU).
   • BUpdate the configuration of the Lambda function to use the latest Python runtime.
   • CIncrease the memory that is allocated to the Lambda function.
   • DConfigure a reserved concurrency on the Lambda function.

   Show answer

   Answer: C

   Explanation

   By increasing the memory allocation, you leverage more CPU power for your Lambda function, which is likely to reduce the processing time and meet your performance requirements.

   Source: Adapted from community discussion — Alabi

   Next question

6. Question 336 · 548 in bank

   A company uses AWS CloudFormation templates to manage infrastructure for a public-facing application in its development, pre-production, and production environments. The company needs to scale for increasing customer demand. A developer must upgrade the Amazon RDS DB instance type to a larger instance. The developer deploys an update to the CloudFormation stack with the instance size change in the pre-production environment. The developer notices that the stack is in an UPDATE_ROLLBACK_FAILED slate in CloudFormation. Which option is the cause of this issue?

   • AThe new instance type specified in the CloudFormation template is invalid
   • BThe database was deleted or modified manually outside of the CloudFormation stack
   • CThere is a syntax error in the CloudFormation template
   • DThe developer has insufficient IAM permissions to provision an instance of the specified type

   Show answer

   Answer: B

   Explanation

   When CloudFormation encounters an issue during the stack update process, it attempts to roll back to the previous state. If resources have been modified or deleted outside of CloudFormation, the rollback process can fail, resulting in the UPDATE_ROLLBACK_FAILED state.

   Source: Adapted from community discussion — Alabi

   References

   • AWS documentation

   Next question

7. Question 337 · 548 in bank

   A developer needs to store files in an Amazon S3 bucket for a company's application. Each S3 object can have multiple versions. The objects must be permanently removed 1 year after object creation. The developer creates an S3 bucket that has versioning enabled. What should the developer do next to meet the data retention requirements?

   • ACreate an S3 Lifecycle rule on the S3 bucket. Configure the rule to expire current versions of objects and permanently delete noncurrent versions 1 year after object creation.
   • BCreate an event notification for all object creation events in the S3 bucket. Configure the event notification to invoke an AWS Lambda function. Program the Lambda function to check the object creation date and to delete the object if the object is older than 1 year.
   • CCreate an event notification for all object removal events in the S3 bucket. Configure the event notification to invoke an AWS Lambda function. Program the Lambda function to check the object creation date and to delete the object if the object is older than 1 year.
   • DCreate an S3 Lifecycle rule on the S3 bucket. Configure the rule to delete expired object delete markers and permanently delete noncurrent versions 1 year after object creation.

   Show answer

   Answer: A

   Next question

8. Question 338 · 548 in bank

   A company uses AWS X-Ray to monitor a serverless application. The components of the application have different request rates. The user interactions and transactions are important to trace, but they are low in volume. The background processes such as application health checks, polling, and connection maintenance generate high volumes of read-only requests. Currently, the default X-Ray sampling rules are universal for all requests. Only the first request per second and some additional requests are recorded. This setup is not helping the company review the requests based on service or request type. A developer must configure rules to trace requests based on service or request properties. The developer must trace the user interactions and transactions without wasting effort recording minor background tasks. Which solution will meet these requirements?

   • ADisable sampling for high-volume read-only requests. Sample at a lower rate for all requests that handle user interactions or transactions.
   • BDisable sampling and trace all requests for requests that handle user interactions or transactions. Sample high-volume read-only requests at a higher rate.
   • CDisable sampling and trace all requests for requests that handle user interactions or transactions. Sample high-volume read-only requests at a lower rate.
   • DDisable sampling for high-volume read-only requests. Sample at a higher rate for all requests that handle user interactions or transactions.

   Show answer

   Answer: C

   Explanation

   1. Ensures all important user interactions and transactions are traced (by disabling sampling for these). 2. Reduces the sampling rate for high-volume background tasks, which helps avoid wasting resources on less important requests.

   Source: Adapted from community discussion — KennethNg923

   Next question

9. Question 339 · 548 in bank

   Select 2

   A developer uses an AWS Lambda function in an application to edit users' uploaded photos. The developer needs to update the Lambda function code and needs to test the updates. For testing, the developer must divide the user traffic between the original version of the Lambda function and the new version of the Lambda function. Which combination of steps will meet these requirements? (Choose two.)

   • APublish a version of the original Lambda function. Make the necessary changes to the Lambda code. Publish a new version of the Lambda function.
   • BUse AWS CodeBuild to detect updates to the Lambda function. Configure CodeBuild to incrementally shift traffic from the original version of the Lambda function to the new version of the Lambda function.
   • CUpdate the original version of the Lambda function to add a function URL. Make the necessary changes to the Lambda code. Publish another function URL for the updated Lambda code.
   • DCreate an alias that points to the original version of the Lambda function. Configure the alias to be a weighted alias that also includes the new version of the Lambda function. Divide traffic between the two versions.
   • ECreate an alias that points to the original function URL. Configure the alias to be a weighted alias that also includes the additional function URL. Divide traffic between the two function URLs.

   Show answer

   Answer: AD

   Explanation

   A. Publish a version of the original Lambda function. Make the necessary changes to the Lambda code. Publish a new version of the Lambda function. D. Create an alias that points to the original version of the Lambda function. Configure the alias to be a weighted alias that also includes the new version of the Lambda function. Divide traffic between the two versions.

   Source: Adapted from community discussion — KennethNg923

   Next question

10. Question 340 · 548 in bank

    A company had an Amazon RDS for MySQL DB instance that was named mysql-db. The DB instance was deleted within the past 90 days. A developer needs to find which IAM user or role deleted the DB instance in the AWS environment. Which solution will provide this information?

    • ARetrieve the AWS CloudTrail events for the resource mysql-db where the event name is DeleteDBInstance. Inspect each event.
    • BRetrieve the Amazon CloudWatch log events from the most recent log stream within the rds/mysql-db log group. Inspect the log events.
    • CRetrieve the AWS X-Ray trace summaries. Filter by services with the name mysql-db. Inspect the ErrorRootCauses values within each summary.
    • DRetrieve the AWS Systems Manager deletions inventory. Filter the inventory by deletions that have a TypeName value of RDS. Inspect the deletion details.

    Show answer

    Answer: A

    Explanation

    The DeleteDBInstance is the API call that would be made when deleting an RDS instance. By retrieving and inspecting these events, you can find out who initiated the deletion.

    Source: Adapted from community discussion — KennethNg923

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

DVA-C02 practice, question 331. 548 questions available.