DVA-C02 practice questions 461–470

1. Question 461 · 548 in bank

   An Amazon Kinesis Data Firehose delivery stream is receiving customer data that contains personally identifiable information. A developer needs to remove pattern-based customer identifiers from the data and store the modified data in an Amazon S3 bucket. What should the developer do to meet these requirements?

   • AImplement Kinesis Data Firehose data transformation as an AWS Lambda function. Configure the function to remove the customer identifiers. Set an Amazon S3 bucket as the destination of the delivery stream.
   • BLaunch an Amazon EC2 instance. Set the EC2 instance as the destination of the delivery stream. Run an application on the EC2 instance to remove the customer identifiers. Store the transformed data in an Amazon S3 bucket.
   • CCreate an Amazon OpenSearch Service instance. Set the OpenSearch Service instance as the destination of the delivery stream. Use search and replace to remove the customer identifiers. Export the data to an Amazon S3 bucket.
   • DCreate an AWS Step Functions workflow to remove the customer identifiers. As the last step in the workflow, store the transformed data in an Amazon S3 bucket. Set the workflow as the destination of the delivery stream.

   Show answer

   Answer: A

   Explanation

   Kinesis Data Firehose supports the use of an AWS Lambda function for data transformation before delivering the data to a destination

   Source: Adapted from community discussion — sumanshu

   References

   • AWS documentation

   Next question

2. Question 462 · 548 in bank

   An application that is running on Amazon EC2 instances stores data in an Amazon S3 bucket. All the data must be encrypted in transit. How can a developer ensure that all traffic to the S3 bucket is encrypted?

   • AInstall certificates on the EC2 instances.
   • BCreate a private VPC endpoint.
   • CConfigure the S3 bucket with server-side encryption with AWS KMS managed encryption keys (SSE-KMS).
   • DCreate an S3 bucket policy that denies traffic when the value for the aws:SecureTransport condition key is false.

   Show answer

   Answer: D

   Next question

3. Question 463 · 548 in bank

   A company is hosting an Amazon AP! Gateway REST API that calls a single AWS Lambda function. The function is infrequently invoked by multiple clients at the same time. The code performance is optimal, but the company wants to optimize the startup time of the function What can a developer do to optimize the initialization of the function?

   • AEnable API Gateway caching for the REST API.
   • BConfigure provisioned concurrency for the Lambda function.
   • CUse Lambda proxy integration for the REST API.
   • DConfigure AWS Global Accelerator for the Lambda function.

   Show answer

   Answer: B

   Explanation

   Provisioned concurrency – This is the number of pre-initialized execution environments allocated to your function. These execution environments are ready to respond immediately to incoming function requests. Provisioned concurrency is useful for reducing cold start latencies for functions. Configuring provisioned concurrency incurs additional charges to your AWS account.

   Source: Adapted from community discussion — xdeveloper

   Next question

4. Question 464 · 548 in bank

   A developer is building a three-tier application with an Application Load Balancer (ALB), Amazon EC2 instances, and Amazon RDS. There is an alias record in Amazon Route 53 that points to the ALB. When the developer tries to access the ALB from a laptop, the request times out. Which logs should the developer investigate to verify that the request is reaching the AWS network?

   • AVPC Flow Logs
   • BAmazon Route 53 logs
   • CAWS Systems Manager Agent logs
   • DAmazon CloudWatch agent logs

   Show answer

   Answer: A

   Next question

5. Question 465 · 548 in bank

   A developer has an application that uses AWS Security Token Service (AWS STS). The application calls the STS AssumeRole API operation to provide trusted users with temporary security credentials. The application calls AWS STS at the service's default endpoint: https://sts.amazonaws.com. The application is deployed in an Asia Pacific AWS Region. The application is experiencing errors that are related to intermittent latency when the application calls AWS STS. What should the developer do to resolve this issue?

   • AUpdate the application to use the GetSessionToken API operation.
   • BUpdate the application to use the AssumeRoleWithSAML API operation.
   • CUpdate the application to use a Regional STS endpoint that is closer to the application deployment.
   • DUpdate the application to use the AssumeRoleWithWebldentity API operation. Move the STS endpoint to a global endpoint.

   Show answer

   Answer: C

   Explanation

   To resolve the intermittent latency issues, the developer should modify the application to call the appropriate Regional STS endpoint that is closer to the application's deployment region, rather than relying on the global endpoint.

   Source: Adapted from community discussion — e886835

   Next question

6. Question 466 · 548 in bank

   A company is launching a photo sharing application on AWS. Users use the application to upload images to an Amazon S3 bucket. When users upload images, an AWS Lambda function creates thumbnail versions of the images and stores the thumbnail versions in another S3 bucket. During development, a developer notices that the Lambda function takes more than 2 minutes to complete the thumbnail process. The company needs alll images to be processed in less than 30 seconds. What should the developer do to meet these requirements?

   • AIncrease the virtual CPUs (vCPUs) for the Lambda function to use 10 vCPUs.
   • BChange Lambda function instance type to use m6a.4xlarge.
   • CConfigure the Lambda function to increase the amount of memory.
   • DConfigure burstable performance for the Lambda function.

   Show answer

   Answer: C

   Next question

7. Question 467 · 548 in bank

   Select 2

   A development team is designing a mobile app that requires multi-factor authentication. Which steps should be taken to achieve this? (Choose two.)

   • AUse Amazon Cognito to create a user pool and create users in the user pool.
   • BSend multi-factor authentication text codes to users with the Amazon SNS Publish API call in the app code.
   • CEnable multi-factor authentication for the Amazon Cognito user pool.
   • DUse AWS IAM to create IAM users.
   • EEnable multifactor authentication for the users created in AWS IAM.

   Show answer

   Answer: AC

   Next question

8. Question 468 · 548 in bank

   Select 2

   A developer is building an application that will process messages from an Amazon Simple Queue Service (Amazon SQS) standard queue. The application needs to process the messages in an Amazon Elastic Container Service (Amazon ECS) task. Which actions will result in the MOST cost-effective processing of the messages? (Choose two.)

   • AUse long polling to query the queue for new messages.
   • BUse short polling to query the queue for new messages.
   • CUse message batching to retrieve messages from the queue.
   • DUse Amazon ElastiCache to cache messages in the queue.
   • EUse an SQS FIFO queue to manage the messages.

   Show answer

   Answer: AC

   Next question

9. Question 469 · 548 in bank

   A developer is writing an application in AWS Lambda. To simplify testing and deployments, the developer needs the database connection string to be easily changed without modifying the Lambda code. How can this requirement be met?

   • AStore the connection string as a secret in AWS Secrets Manager.
   • BStore the connection string in an IAM user account.
   • CStore the connection string in AWS KMS.
   • DStore the connection string as a Lambda layer.

   Show answer

   Answer: A

   Next question

10. Question 470 · 548 in bank

    A developer is building an ecommerce application that uses multiple AWS Lambda functions. Each function performs a specific step in a customer order workflow, such as order processing and inventory management. The developer must ensure that the Lambda functions run in a specific order. Which solution will meet this requirement with the LEAST operational overhead?

    • AConfigure an Amazon Simple Queue Service (Amazon SQS) queue to contain messages about each step a function must perform. Configure the Lambda functions to run sequentially based on the order of messages in the SQS queue.
    • BConfigure an Amazon Simple Notification Service (Amazon SNS) topic to contain notifications about each step a function must perform. Subscribe the Lambda functions to the SNS topic. Use subscription filters based on the step each function must perform.
    • CConfigure an AWS Step Functions state machine to invoke the Lambda functions in a specific order.
    • DConfigure Amazon EventBridge Scheduler schedules to invoke the Lambda functions in a specific order.

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

DVA-C02 practice, question 461. 548 questions available.