DVA-C02 practice questions 491–500

1. Question 491 · 548 in bank

   An application uses Lambda functions to extract metadata from files uploaded to an S3 bucket; the metadata is stored in Amazon DynamoDB. The application starts behaving unexpectedly, and the developer wants to examine the logs of the Lambda function code for errors. Based on this system configuration, where would the developer find the logs?

   • AAmazon S3
   • BAWS CloudTrail
   • CAmazon CloudWatch
   • DAmazon DynamoDB

   Show answer

   Answer: C

   Explanation

   C) - AWS Lambda automatically sends logs generated by your function to Amazon CloudWatch Logs. B) Eliminated - CloudTrail logs API activity and management operations across AWS, such as who invoked the Lambda function. However, it does not provide the function's execution logs.

   Source: Adapted from community discussion — sumanshu

   References

   • AWS documentation

   Next question

2. Question 492 · 548 in bank

   A developer is building an application that stores sensitive user data. The application includes an Amazon CloudFront distribution and multiple AWS Lambda functions that handle user requests. The user requests contain over 20 data fields. Each application transaction contains sensitive data that must be encrypted. Only specific parts of the application need to have the ability to decrypt the data. Which solution will meet these requirements?

   • AAssociate the CloudFront distribution with a Lambda@Edge function. Configure the function to perform field-level asymmetric encryption by using a user-defined RSA public key that is stored in AWS Key Management Service (AWS KMS).
   • BIntegrate AWS WAF with CloudFront to protect the sensitive data. Use a Lambda function and self-managed keys to perform the encryption and decryption processes.
   • CConfigure the CloudFront distribution to use WebSockets by forwarding all viewer request headers to the origin. Create an asymmetric AWS KMS key. Configure the CloudFront distribution to use field-level encryption. Use the AWS KMS key.
   • DConfigure the cache behavior in the CloudFront distribution to require HTTPS for communication between viewers and CloudFront. Configure GoudFront to require users to access the files by using either signed URLs or signed cookies.

   Show answer

   Answer: D

   Next question

3. Question 493 · 548 in bank

   An application includes an Amazon DynamoDB table that is named orders. The table has a primary partition key of id and a global secondary index (GSI) that is named an accountIndex. The GSI has a partition key of accountId and a sort key of orderDateTime. A developer needs to create an AWS Lambda function to retrieve the orders that have an accountId of 100. Which solution will meet this requirement by using the LEAST read capacity?

   • ADefine a DynamoDB API request for the GetItem action with the following parameters:
   • BDefine a DynamoDB API request for the BatchGetItem action with the following parameters:
   • CDefine a DynamoDB API request for the Scan action with the following parameters:
   • DDefine a DynamoDB API request for the Query action with the following parameters:

   Show answer

   Answer: D

   Explanation

   The Query action is the most efficient for retrieving items from DynamoDB when you want to retrieve data based on a partition key or both a partition key and sort key

   Source: Adapted from community discussion — e886835

   Next question

4. Question 494 · 548 in bank

   A company stores data in an Amazon S3 bucket. The data is updated multiple times every day from an application that runs on a server in the company’s on-premises data center. The company enables S3 Versioning on the S3 bucket. After some time, the company observes multiple versions of the same objects in the S3 bucket. The company needs the S3 bucket to keep the current version of each object and the version immediately previous to the current version. Which solution will meet these requirements?

   • AConfigure an S3 bucket policy to retain one newer noncurrent version of the objects.
   • BConfigure an S3 Lifecycle rule to retain one newer noncurrent version of the objects.
   • CEnable S3 Object Lock. Configure an S3 Object Lock policy to retain one newer noncurrent version of the objects.
   • DSuspend S3 Versioning. Modify the application code to check the number of object versions before updating the objects.

   Show answer

   Answer: B

   Next question

5. Question 495 · 548 in bank

   A company is creating a new feature for existing software. Before the company fully releases a new version of the software, the company wants to test the feature. The company needs to gather feedback about the feature from a small group of users while the current software version remains deployed. If the testing validates the feature, the company needs to deploy the new software version to all other users at the same time. Which deployment strategy will meet these requirements?

   • AAll-at-once deployment
   • BCanary deployment
   • CIn-place deployment
   • DLinear deployment

   Show answer

   Answer: B

   Next question

6. Question 496 · 548 in bank

   A developer has an application that runs in AWS Account A. The application must retrieve an AWS Secrets Manager secret that is encrypted by an AWS Key Management Service (AWS KMS) key from AWS Account B. The application’s role has permissions to access the secret in Account B. The developer must add a statement to the KMS key’s key policy to allow the role in Account A to use the KMS key in Account B. The permissions must grant least privilege access to the role. Which permissions will meet these requirements?

   • Akms:Decrypt and kms:DescribeKey
   • Bsecretsmanager:DescribeSecret and secretsmanager:GetSecretValue
   • Ckms:*
   • Dsecretsmanager:*

   Show answer

   Answer: A

   Next question

7. Question 497 · 548 in bank

   A developer created several AWS Lambda functions that write data to a single Amazon S3 bucket. The developer configured all the Lambda functions to send logs and metrics to Amazon CloudWatch. The developer receives reports that one of the Lambda functions writes data to the bucket very slowly. The developer needs to measure the latency between the problematic Lambda function and the S3 bucket. Which solution will meet this requirement?

   • AEnable AWS X-Ray on the Lambda function. In the generated trace map, select the line between Lambda and Amazon S3.
   • BQuery the Lambda function’s log file in Amazon CloudWatch Logs Insights. Return the average of the auto-discovered @duration field.
   • CEnable CloudWatch Lambda Insights on the function. View the latency graph that CloudWatch Lambda Insights provides.
   • DEnable AWS X-Ray on the Lambda function. Select Amazon S3 in the latency graph to view the latency histogram.

   Show answer

   Answer: A

   Next question

8. Question 498 · 548 in bank

   A developer is designing a game that stores data in an Amazon DynamoDB table. The partition key of the table is the country of the player. After a sudden increase in the number of players in a specific country, the developer notices ProvisionedThroughputExceededException errors. What should the developer do to resolve these errors?

   • AUse strongly consistent table reads.
   • BRevise the primary key to use more unique identifiers.
   • CUse pagination to reduce the size of the items that the queries return.
   • DUse the Scan operation to retrieve the data.

   Show answer

   Answer: B

   Explanation

   when the request rate exceeds the provisioned throughput for a specific partition key in DynamoDB. This means that the partition key (country in this case) has become a hot spot, as many players from the same country are causing an overload of requests to that partition. To resolve this issue, the developer should revise the primary key to distribute the traffic more evenly

   Source: Adapted from community discussion — e886835

   Next question

9. Question 499 · 548 in bank

   Select 2

   A company is using an AWS Lambda function to process records from an Amazon Kinesis data stream. The company recently observed slow processing of the records. A developer notices that the iterator age metric for the function is increasing and that the Lambda run duration is constantly above normal. Which actions should the developer take to increase the processing speed? (Choose two.)

   • AIncrease the number of shards of the Kinesis data stream.
   • BDecrease the timeout of the Lambda function.
   • CIncrease the memory that is allocated to the Lambda function.
   • DDecrease the number of shards of the Kinesis data stream.
   • EIncrease the timeout of the Lambda function.

   Show answer

   Answer: AC

   Explanation

   A) Kinesis uses shards to process data in parallel. If the data stream has a high volume of records, increasing the number of shards enables parallelism, allowing more Lambda instances to process data simultaneously C) Allocating more memory to a Lambda function also increases the available CPU power

   Source: Adapted from community discussion — sumanshu

   References

   • repost.aws documentation

   Next question

10. Question 500 · 548 in bank

    A company needs to harden its container images before the images are in a running state. The company's application uses Amazon Elastic Container Registry (Amazon ECR) as an image registry. Amazon Elastic Kubernetes Service (Amazon EKS) for compute, and an AWS CodePipeline pipeline that orchestrates a continuous integration and continuous delivery (CI/CD) workflow. Dynamic application security testing occurs in the final stage of the pipeline after a new image is deployed to a development namespace in the EKS cluster. A developer needs to place an analysis stage before this deployment to analyze the container image earlier in the CI/CD pipeline. Which solution will meet these requirements with the MOST operational efficiency?

    • ABuild the container image and run the docker scan command locally. Mitigate any findings before pushing changes to the source code repository. Write a pre-commit hook that enforces the use of this workflow before commit.
    • BCreate a new CodePipeline stage that occurs after the container image is built. Configure ECR basic image scanning to scan on image push. Use an AWS Lambda function as the action provider. Configure the Lambda function to check the scan results and to fail the pipeline if there are findings.
    • CCreate a new CodePipeline stage that occurs after source code has been retrieved from its repository. Run a security scanner on the latest revision of the source code. Fail the pipeline if there are findings.
    • DAdd an action to the deployment stage of the pipeline so that the action occurs before the deployment to the EKS cluster. Configure ECR basic image scanning to scan on image push. Use an AWS Lambda function as the action provider. Configure the Lambda function to check the scan results and to fail the pipeline if there are findings.

    Show answer

    Answer: B

    Explanation

    B https://docs.aws.amazon.com/AmazonECR/latest/userguide/image-scanning-basic.html The below blog post refers to the solution using Amazon Inspector and ECS, but the architecture is almost same as required in this scenario. The built in image scanning in Amazon ECR provides a simpler solution. https://aws.amazon.com/blogs/security/use-amazon-inspector-to-manage-your-build-and-deploy-pipelines-for-containerized-applications/

    Source: Adapted from community discussion — Untamables

    References

    • AWS documentation
    • AWS documentation
    • AWS documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

DVA-C02 practice, question 491. 548 questions available.