DVA-C02 practice questions 341–350

1. Question 341 · 548 in bank

   A company has an ecommerce web application that uses an on-premises MySQL database as a data store. The company migrates the on-premises MySQL database to Amazon RDS for MySQL. A developer needs to configure the application's access to the RDS for MySQL database. The developer's solution must not use long term credentials. Which solution will meet these requirements?

   • AEnable IAM database authentication on the RDS for MySQL DB instance. Create an IAM role that has the minimum required permissions. Assign the role to the application.
   • BStore the MySQL credentials as secrets in AWS Secrets Manager. Create an IAM role that has the minimum required permissions to retrieve the secrets. Assign the role to the application.
   • CConfigure the MySQL credentials as environment variables that are available at runtime for the application.
   • DStore the MySQL credentials as SecureString parameters in AWS Systems Manager Parameter Store. Create an IAM role that has the minimum required permissions to retrieve the parameters. Assign the role to the application.

   Show answer

   Answer: A

   Explanation

   A. Enable IAM database authentication on the RDS for MySQL DB instance. Create an IAM role that has the minimum required permissions. Assign the role to the application.

   Source: Adapted from community discussion — albert_kuo

   Next question

2. Question 342 · 548 in bank

   A developer is creating an application that must transfer expired items from Amazon DynamoDB to Amazon S3. The developer sets up the DynamoDB table to automatically delete items after a specific TTL. The application must process the items in DynamoDB and then must store the expired items in Amazon S3. The entire process, including item processing and storage in Amazon S3, will take 5 minutes. Which solution will meet these requirements with the LEAST operational overhead?

   • AConfigure DynamoDB Accelerator (DAX) to query for expired items based on the TTL. Save the results to Amazon S3.
   • BConfigure DynamoDB Streams to invoke an AWS Lambda function. Program the Lambda function to process the items and to store the expired items in Amazon S3.
   • CDeploy a custom application on an Amazon Elastic Container Service (Amazon ECS) cluster on Amazon EC2 instances. Program the custom application to process the items and to store the expired items in Amazon S3.
   • DCreate an Amazon EventBridge rule to invoke an AWS Lambda function. Program the Lambda function to process the items and to store the expired items in Amazon S3.

   Show answer

   Answer: B

   References

   • AWS documentation

   Next question

3. Question 343 · 548 in bank

   Select 2

   A developer has an application that uses WebSocket APIs in Amazon API Gateway. The developer wants to use an API Gateway Lambda authorizer to control access to the application. The developer needs to add credential caching and reduce repeated usage of secret keys and authorization tokens on every request. Which combination of steps should the developer take to meet these requirements? (Choose two.)

   • AUse a token-based Lambda authorizer.
   • BUse a request parameter-based Lambda authorizer.
   • CConfigure an integration request mapping template to reference the context map from the APIGateway Lambda authorizer.
   • DConfigure an integration request mapping template to reference the identity API key value from the API Gateway Lambda authorizer.
   • EUse VPC endpoint policies for the WebSocket APIs.

   Show answer

   Answer: AC

   References

   • AWS documentation
   • AWS documentation

   Next question

4. Question 344 · 548 in bank

   Select 2

   A developer is building a web application that uses Amazon API Gateway to expose an AWS Lambda function to process requests from clients. During testing, the developer notices that the API Gateway times out even though the Lambda function finishes under the set time limit. Which of the following API Gateway metrics in Amazon CloudWatch can help the developer troubleshoot the issue? (Choose two.)

   • ACacheHitCount
   • BIntegrationLatency
   • CCacheMissCount
   • DLatency
   • ECount

   Show answer

   Answer: BD

   Explanation

   B and D The issue is caused by timeout. So the developer needs to know the latency information. https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-metrics-and-dimensions.html https://repost.aws/knowledge-center/api-gateway-rest-api-504-errors

   Source: Adapted from community discussion — Untamables

   References

   • AWS documentation
   • repost.aws documentation
   • AWS documentation

   Next question

5. Question 345 · 548 in bank

   A developer builds a serverless application on AWS by using Amazon API Gateway, AWS Lambda functions, and Amazon Route 53. During testing, the developer notices errors but cannot immediately locate the root cause. To identify the errors, the developer needs to search all the application's logs. What should the developer do to meet these requirements with the LEAST operational overhead?

   • ASet up API Gateway health checks to monitor the application's availability. Use the Amazon CloudWatch PutMetricData API operation to publish the logs to CloudWatch. Search and query the logs by using Amazon Athena.
   • BSet up Route 53 health checks to monitor the application's availability. Turn on AWS CloudTrail logs for all the AWS services that the application uses. Send the logs to a specified Amazon S3 bucket. Use Amazon Athena to query the log files directly from Amazon S3.
   • CConfigure all the application's AWS services to publish a real-time feed of log events to an Amazon Kinesis Data Firehose delivery stream. Configure the delivery stream to publish all the logs to an Amazon S3 bucket. Use Amazon OpenSearch Service to search and analyze the logs.
   • DSet up Route 53 health checks to monitor the application's availability. Turn on Amazon CloudWatch Logs for the API Gateway stages to log API requests with a JSON log format. Use CloudWatch Logs Insights to search and analyze the logs from the AWS services that the application uses.

   Show answer

   Answer: D

   Explanation

   Minimal Operational Overhead: Uses built-in AWS services with minimal configuration. Centralized Log Analysis: CloudWatch Logs Insights provides a powerful, interactive query interface to analyze logs. Cost-Efficient: Utilizing existing AWS services like CloudWatch and Route 53 reduces the need for additional third-party tools or infrastructure.

   Source: Adapted from community discussion — albert_kuo

   References

   • AWS documentation

   Next question

6. Question 346 · 548 in bank

   A developer needs to freeze changes to an AWS CodeCommit repository before a production release. The developer will work on new features while a quality assurance (QA) team tests the release. The QA testing and all bug fixes must take place in isolation from the main branch. After the release, the developer must integrate all bug fixes into the main branch. Which solution will meet these requirements?

   • ACreate a release branch from the latest Git commit that will be in the release. Apply fixes to the release branch. Continue developing new features, and merge the features into the main branch. Merge the release branch into the main branch after the release.
   • BCreate a Git tag on the latest Git commit that will be in the release. Continue developing new features, and merge the features into the main branch. Apply fixes to the main branch. Update the Git tag for the release to be on the latest commit on the main branch.
   • CCreate a release branch from the latest Git commit that will be in the release. Apply fixes to the release branch. Continue developing new features, and merge the features into the main branch. Rebase the main branch onto the release branch after the release.
   • DCreate a Git tag on the latest Git commit that will be in the release. Continue developing new features, and merge the features into the main branch. Apply the Git commits for fixes to the Git tag for the release.

   Show answer

   Answer: A

   Explanation

   Create a release branch from the latest Git commit that will be in the release. Apply fixes to the release branch. Continue developing new features, and merge the features into the main branch. Merge the release branch into the main branch after the release.

   Source: Adapted from community discussion — komorebi

   Next question

7. Question 347 · 548 in bank

   A developer is setting up AWS CodePipeline for a new application. During each build, the developer must generate a test report. Which solution will meet this requirement?

   • ACreate an AWS CodeBuild build project that runs tests. Configure the buildspec file with the test report information.
   • BCreate an AWS CodeDeploy deployment that runs tests. Configure the AppSpec file with the test report information.
   • CRun the builds on an Amazon EC2 instance that has AWS Systems Manager Agent (SSM Agent) installed and activated.
   • DCreate a repository in AWS CodeArtifact. Select the test report template.

   Show answer

   Answer: A

   Next question

8. Question 348 · 548 in bank

   A developer built an application by using multiple AWS Lambda functions. The Lambda functions must access dynamic configuration data at runtime. The data is maintained as a 6 KB JSON document in AWS AppConfig. The configuration data needs to be updated without requiring the redeployment of the application. The developer needs a solution that will give the Lambda functions access to the dynamic configuration data. What should the developer do to meet these requirements with the LEAST development effort?

   • AMigrate the document from AWS AppConfig to a Lambda environment variable. Read the document at the runtime.
   • BConfigure the AWS AppConfig Agent Lambda extension. Access the dynamic configuration data by calling the extension on a local host.
   • CUse the AWS X-Ray SDK to call the AWS AppConfig APIs. Retrieve the configuration file at runtime.
   • DMigrate the configuration file to a Lambda deployment package. Read the file from the file system at runtime.

   Show answer

   Answer: B

   Explanation

   The AWS AppConfig Agent Lambda extension is specifically designed to provide easy access to AppConfig configurations from Lambda functions. It allows for dynamic updates without redeployment and requires minimal development effort.

   Source: Adapted from community discussion — KennethNg923

   References

   • AWS documentation

   Next question

9. Question 349 · 548 in bank

   A developer has AWS Lambda functions that need to access a company's internal data science libraries and reference data. Separate teams manage the libraries and the data. The teams must be able to update and upload new data independently. The Lambda functions are connected to the company's central VPC. Which solution will provide the Lambda functions with access to the libraries and data?

   • AAttach an Amazon Elastic Block Store (Amazon EBS) volume to the Lambda functions by using EBS Multi-Attach in the central VPC. Update the Lambda function execution roles to give the functions to access the EBS volume. Update the Lambda function code to reference the files in the EBS volume.
   • BCompress the libraries and reference data in a Lambda /tmp folder. Update the Lambda function code to reference the files in the /tmp folder.
   • CSet up an Amazon Elastic File System (Amazon EFS) file system with mount targets in the central VPConfigure the Lambda functions to mount the EFS file system. Update the Lambda function execution roles to give the functions to access the EFS file system.
   • DSet up an Amazon FSx for Windows File Server file system with mount targets in the central VPC. Configure the Lambda functions to mount the Amazon FSx file system. Update the Lambda function execution roles to give the functions to access the Amazon FSx file system.

   Show answer

   Answer: C

   References

   • AWS documentation

   Next question

10. Question 350 · 548 in bank

    A company has an application that uses an AWS Lambda function to consume messages from an Amazon Simple Queue Service (Amazon SQS) queue. The SQS queue is configured with a dead-letter queue. Due to a defect in the application, AWS Lambda failed to process some messages. A developer fixed the bug and wants to process the failed messages again. How should the developer resolve this issue?

    • AUse the SendMessageBatch API to send messages from the dead-letter queue to the original SQS queue.
    • BUse the ChangeMessageVisibility API to configure messages in the dead-letter queue to be visible in the original SQS queue.
    • CUse the StartMessageMoveTask API to move messages from the dead-letter queue to the original SQS queue.
    • DUse the PurgeQueue API to remove messages from the dead-letter queue and return the messages to the original SQS queue.

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

DVA-C02 practice, question 341. 548 questions available.