DVA-C02 practice questions 361–370

1. Question 361 · 548 in bank

   A developer is building various microservices for an application that will run on Amazon EC2 instances. The developer needs to monitor the end-to-end view of the requests between the microservices and debug any issues in the various microservices. What should the developer do to accomplish these tasks?

   • AUse Amazon CloudWatch to aggregate the microservices' logs and metrics, and build the monitoring dashboard.
   • BUse AWS CloudTrail to aggregate the microservices' logs and metrics, and build the monitoring dashboard.
   • CUse the AWS X-Ray SDK to add instrumentation in all the microservices, and monitor using the X-Ray service map.
   • DUse AWS Health to monitor the health of all the microservices.

   Show answer

   Answer: C

   Next question

2. Question 362 · 548 in bank

   A developer is building a microservice that uses AWS Lambda to process messages from an Amazon Simple Queue Service (Amazon SQS) standard queue. The Lambda function calls external APIs to enrich the SQS message data before loading the data into an Amazon Redshift data warehouse. The SQS queue must handle a maximum of 1,000 messages per second. During initial testing, the Lambda function repeatedly inserted duplicate data into the Amazon Redshift table. The duplicate data led to a problem with data analysis. All duplicate messages were submitted to the queue within 1 minute of each other. How should the developer resolve this issue?

   • ACreate an SQS FIFO queue. Enable message deduplication on the SQS FIFO queue.
   • BReduce the maximum Lambda concurrency that the SQS queue can invoke.
   • CUse Lambda's temporary storage to keep track of processed message identifiers
   • DConfigure a message group ID for every sent message. Enable message deduplication on the SQS standard queue.

   Show answer

   Answer: A

   Next question

3. Question 363 · 548 in bank

   A company has an application that uses an Amazon API Gateway API to invoke an AWS Lambda function. The application is latency sensitive. A developer needs to configure the Lambda function to reduce the cold start time that is associated with default scaling. What should the developer do to meet these requirements?

   • APublish a new version of the Lambda function. Configure provisioned concurrency. Set the provisioned concurrency limit to meet the company requirements.
   • BIncrease the Lambda function's memory to the maximum amount. Increase the Lambda function's reserved concurrency limit.
   • CIncrease the reserved concurrency of the Lambda function to a number that matches the current production load.
   • DUse Service Quotas to request an increase in the Lambda function's concurrency limit for the AWS account where the function is deployed.

   Show answer

   Answer: A

   Explanation

   The best solution is A. . Provisioned concurrency allows you to keep a specified number of Lambda function instances "warm" and ready to execute. This significantly reduces cold start latency because the instances are already running when requests arrive. Publishing a new version is generally recommended when making significant configuration changes like enabling provisioned concurrency.

   Source: Adapted from community discussion — examuserss

   Next question

4. Question 364 · 548 in bank

   Select 2

   A developer is deploying an application on Amazon EC2 instances that run in Account A. The application needs to read data from an existing Amazon Kinesis data stream in Account B. Which actions should the developer take to provide the application with access to the stream? (Choose two.)

   • AUpdate the instance profile role in Account A with stream read permissions.
   • BCreate an IAM role with stream read permissions in Account B.
   • CAdd a trust policy to the instance profile role and IAM role in Account B to allow the instance profile role to assume the IAM role.
   • DAdd a trust policy to the instance profile role and IAM role in Account B to allow reads from the stream.
   • EAdd a resource-based policy in Account B to allow read access from the instance profile role.

   Show answer

   Answer: BC

   Explanation

   create iam role { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "kinesis:DescribeStream", "kinesis:GetRecords", "kinesis:GetShardIterator", "kinesis:ListStreams" ], "Resource": "arn:aws:kinesis: : :stream/ " } ] }

   Source: Adapted from community discussion — albert_kuo

   References

   • AWS documentation

   Next question

5. Question 365 · 548 in bank

   An ecommerce startup is preparing for an annual sales event. As the traffic to the company's application increases, the development team wants to be notified when the Amazon EC2 instance's CPU utilization exceeds 80%. Which solution will meet this requirement?

   • ACreate a custom Amazon CloudWatch alarm that sends a notification to an Amazon SNS topic when the CPU utilization exceeds 80%.
   • BCreate a custom AWS CloudTrail alarm that sends a notification to an Amazon SNS topic when the CPU utilization exceeds 80%.
   • CCreate a cron job on the EC2 instance that invokes the --describe-instance-information command on the host instance every 15 minutes and sends the results to an Amazon SNS topic.
   • DCreate an AWS Lambda function that queries the AWS CloudTrail logs for the CPUUtilization metric every 15 minutes and sends a notification to an Amazon SNS topic when the CPU utilization exceeds 80%.

   Show answer

   Answer: A

   Next question

6. Question 366 · 548 in bank

   A developer is designing an AWS Lambda function that creates temporary files that are less than 10 MB during invocation. The temporary files will be accessed and modified multiple times during invocation. The developer has no need to save or retrieve these files in the future. Where should the temporary files be stored?

   • Athe /tmp directory
   • BAmazon Elastic File System (Amazon EFS)
   • CAmazon Elastic Block Store (Amazon EBS)
   • DAmazon S3

   Show answer

   Answer: A

   Explanation

   A A Lambda function has access to local storage in the /tmp directory. Each execution environment provides between 512 MB and 10,240 MB, in 1-MB increments, of disk space in the /tmp directory. https://docs.aws.amazon.com/lambda/latest/dg/foundation-progmodel.html

   Source: Adapted from community discussion — Untamables

   References

   • AWS documentation
   • AWS documentation

   Next question

7. Question 367 · 548 in bank

   A company has an application that is deployed on AWS Elastic Beanstalk. The application generates user-specific PDFs and stores the PDFs in an Amazon S3 bucket. The application then uses Amazon Simple Email Service (Amazon SES) to send the PDFs by email to subscribers. Users no longer access the PDFs 90 days after the PDFs are generated. The S3 bucket is not versioned and contains many obsolete PDFs. A developer must reduce the number of files in the S3 bucket by removing PDFs that are older than 90 days. Which solution will meet this requirement with the LEAST development effort?

   • AUpdate the application code. In the code, add a rule to scan all the objects in the S3 bucket every day and to delete objects after 90 days.
   • BCreate an AWS Lambda function. Program the Lambda function to scan all the objects in the S3 bucket every day and to delete objects after 90 days.
   • CCreate an S3 Lifecycle rule for the S3 bucket to expire objects after 90 days.
   • DPartition the S3 objects with a // key prefix. Create an AWS Lambda function to remove objects that have prefixes that have reached the expiration date.

   Show answer

   Answer: C

   Next question

8. Question 368 · 548 in bank

   A developer is troubleshooting an application. The application includes several AWS Lambda functions that invoke an Amazon API Gateway API. The API Gateway's method request is set up to use an Amazon Cognito authorizer for authentication. All the Lambda functions pass the user ID as part of the Authorization header to the API Gateway API. The API Gateway API returns a 403 status code for all GET requests. How should the developer resolve this issue?

   • AModify the client GET request to include a valid API key in the Authorization header.
   • BModify the client GET request to include a valid token in the Authorization header.
   • CUpdate the resource policy for the API Gateway API to allow the execute-api:Invoke action.
   • DModify the client to send an OPTIONS preflight request before the GET request.

   Show answer

   Answer: B

   Next question

9. Question 369 · 548 in bank

   A company processes incoming documents from an Amazon S3 bucket. Users upload documents to an S3 bucket using a web user interface. Upon receiving files in S3, an AWS Lambda function is invoked to process the files, but the Lambda function times out intermittently. If the Lambda function is configured with the default settings, what will happen to the S3 event when there is a timeout exception?

   • ANotification of a failed S3 event is sent as an email through Amazon SNS.
   • BThe S3 event is sent to the default Dead Letter Queue.
   • CThe S3 event is processed until it is successful.
   • DThe S3 event is discarded after the event is retried twice.

   Show answer

   Answer: D

   Explanation

   D This means that Lambda will make two additional attempts to process the event (a total of three attempts). If the function still fails after the retries, and if no Dead Letter Queue (DLQ) or on-failure destination is configured, the event is discarded.

   Source: Adapted from community discussion — stevesuperdx

   References

   • AWS documentation

   Next question

10. Question 370 · 548 in bank

    A developer uses Amazon S3 Event Notifications to invoke AWS Lambda functions. The Lambda functions process images after the images are uploaded to S3 buckets. The developer has set up a development S3 bucket, a production S3 bucket, a development Lambda function, and a production Lambda function in the same AWS account. The developer notices that uploads to the development S3 bucket wrongly invoke the production Lambda function. The developer must prevent development data from affecting the production Lambda function. What should the developer do to meet these requirements?

    • AUpdate the execution role for the production Lambda function. Add a policy that allows the execution role to read from only the production S3 bucket.
    • BUpdate the S3 bucket policy for the production S3 bucket to invoke the production Lambda function. Update the S3 bucket policy for the development S3 bucket to invoke the development Lambda function.
    • CSeparate the development environment and the production environment into their own AWS accounts. Update the execution role for each Lambda function. Add a policy that allows the execution role to read from only the S3 bucket that is in the same account.
    • DSeparate the development environment and the production environment into their own AWS accounts. Add a resource policy to the Lambda functions to allow only S3 bucket events in the same account to invoke the functions.

    Show answer

    Answer: D

    Explanation

    Account Separation: By separating development and production environments into different AWS accounts, you create a strong boundary between the two. This is a best practice for security and resource management. Resource Policy: Adding a resource policy to the Lambda functions that allows only S3 bucket events from the same account to invoke them ensures that cross-account invocations cannot occur accidentally.

    Source: Adapted from community discussion — albert_kuo

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

DVA-C02 practice, question 361. 548 questions available.