DVA-C02 practice questions 521–530

1. Question 521 · 548 in bank

   A developer deployed an application to an Amazon EC2 instance. The application needs to know the public IPv4 address of the instance. How can the application find this information?

   • AQuery the instance metadata from http://169.254.169.254/latest/meta-data/.
   • BQuery the instance user data from http://169.254.169.254/latest/user-data/.
   • CQuery the Amazon Machine Image (AMI) information from http://169.254.169.254/latest/meta-data/ami/.
   • DCheck the hosts file of the operating system.

   Show answer

   Answer: A

   Explanation

   This is the correct approach. The instance metadata includes details such as the instance's public IPv4 address. The application can make a request to this URL, specifically to http://169.254.169.254/latest/meta-data/public-ipv4, to retrieve the public IPv4 address of the instance.

   Source: Adapted from community discussion — SerialiDr

   References

   • AWS documentation
   • AWS documentation

   Next question

2. Question 522 · 548 in bank

   An application under development is required to store hundreds of video files. The data must be encrypted within the application prior to storage, with a unique key for each video file. How should the developer code the application?

   • AUse the KMS Encrypt API to encrypt the data. Store the encrypted data key and data.
   • BUse a cryptography library to generate an encryption key for the application. Use the encryption key to encrypt the data. Store the encrypted data.
   • CUse the KMS GenerateDataKey API to get a data key. Encrypt the data with the data key. Store the encrypted data key and data.
   • DUpload the data to an S3 bucket using server side-encryption with an AWS KMS key.

   Show answer

   Answer: C

   Explanation

   option C: use the KMS GenerateDataKey API to get a data key. Encrypt the data with the data key. Store the encrypted data key and data.

   Source: Adapted from community discussion — MrTee

   Next question

3. Question 523 · 548 in bank

   A company is planning to deploy an application on AWS behind an Elastic Load Balancer. The application uses an HTTP/HTTPS listener and must access the client IP addresses. Which load-balancing solution meets these requirements?

   • AUse an Application Load Balancer and the X-Forwarded-For headers.
   • BUse a Network Load Balancer (NLB). Enable proxy protocol support on the NLB and the target application.
   • CUse an Application Load Balancer. Register the targets by the instance ID.
   • DUse a Network Load Balancer and the X-Forwarded-For headers.

   Show answer

   Answer: A

   Explanation

   Use an Application Load Balancer (ALB) and the X-Forwarded-For headers. When an ALB is used, the X-Forwarded-For header can be used to pass the client IP address to the backend servers.

   Source: Adapted from community discussion — MrTee

   References

   • AWS documentation
   • AWS documentation

   Next question

4. Question 524 · 548 in bank

   A developer wants to debug an application by searching and filtering log data. The application logs are stored in Amazon CloudWatch Logs. The developer creates a new metric filter to count exceptions in the application logs. However, no results are returned from the logs. What is the reason that no filtered results are being returned?

   • AA setup of the Amazon CloudWatch interface VPC endpoint is required for filtering the CloudWatch Logs in the VPC.
   • BCloudWatch Logs only publishes metric data for events that happen after the filter is created.
   • CThe log group for CloudWatch Logs should be first streamed to Amazon OpenSearch Service before metric filtering returns the results.
   • DMetric data points for logs groups can be filtered only after they are exported to an Amazon S3 bucket.

   Show answer

   Answer: B

   Explanation

   Filters do not retroactively filter data. Filters only publish the metric data points for events that happen after the filter was created. https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/MonitoringLogData.html

   Source: Adapted from community discussion — zodraz

   References

   • AWS documentation

   Next question

5. Question 525 · 548 in bank

   A developer is building an image-processing application that includes an AWS Lambda function. The Lambda function moves images from one AWS service to another AWS service for image processing. For images that are larger than 2 MB, the Lambda function returns the following error: “Task timed out after 3.01 seconds.” The developer needs to resolve the error without modifying the Lambda function code. Which solution will meet these requirements?

   • AIncrease the Lambda function’s timeout value.
   • BConfigure the Lambda function to not move images that are larger than 2 MB.
   • CRequest a concurrency quota increase for the Lambda function.
   • DConfigure provisioned concurrency for the Lambda function.

   Show answer

   Answer: A

   Next question

6. Question 526 · 548 in bank

   A company is running a custom application on a set of on-premises Linux servers that are accessed using Amazon API Gateway. AWS X-Ray tracing has been enabled on the API test stage. How can a developer enable X-Ray tracing on the on-premises servers with the LEAST amount of configuration?

   • AInstall and run the X-Ray SDK on the on-premises servers to capture and relay the data to the X-Ray service.
   • BInstall and run the X-Ray daemon on the on-premises servers to capture and relay the data to the X-Ray service.
   • CCapture incoming requests on-premises and configure an AWS Lambda function to pull, process, and relay relevant data to X-Ray using the PutTraceSegments API call.
   • DCapture incoming requests on-premises and configure an AWS Lambda function to pull, process, and relay relevant data to X-Ray using the PutTelemetryRecords API call.

   Show answer

   Answer: B

   Explanation

   . Install and run the X-Ray daemon on the on-premises servers to capture and relay the data to the X-Ray service is the correct option. The X-Ray daemon can be installed and configured on the on-premises servers to capture data and send it to the X-Ray service. This requires minimal configuration and setup. Option A is incorrect because while the X-Ray SDK can be used to capture data on the on-premises servers, it requires more configuration and development effort than the X-Ray daemon. Option C and D are also incorrect because they involve setting up an AWS Lambda function, which is not necessary for enabling X-Ray tracing on the on-premises servers.

   Source: Adapted from community discussion — Bibay

   References

   • AWS documentation

   Next question

7. Question 527 · 548 in bank

   A company is planning to use AWS CodeDeploy to deploy an application to Amazon Elastic Container Service (Amazon ECS). During the deployment of a new version of the application, the company initially must expose only 10% of live traffic to the new version of the deployed application. Then, after 15 minutes elapse, the company must route all the remaining live traffic to the new version of the deployed application. Which CodeDeploy predefined configuration will meet these requirements?

   • ACodeDeployDefault.ECSCanary10Percent15Minutes
   • BCodeDeployDefault.LambdaCanary10Percent5Minutes
   • CCodeDeployDefault.LambdaCanary10Percentl15Minutes
   • DCodeDeployDefault.ECSLinear10PercentEvery1Minutes

   Show answer

   Answer: A

   Explanation

   This configuration aligns with the company's requirement. It specifies a "canary" deployment where initially only 10% of live traffic is exposed to the new version of the application. After a period of 15 minutes, the remaining 90% of the traffic is shifted to the new version. This approach allows for monitoring the new version with a small portion of traffic before fully deploying it.

   Source: Adapted from community discussion — SerialiDr

   References

   • AWS documentation

   Next question

8. Question 528 · 548 in bank

   A company hosts a batch processing application on AWS Elastic Beanstalk with instances that run the most recent version of Amazon Linux. The application sorts and processes large datasets. In recent weeks, the application's performance has decreased significantly during a peak period for traffic. A developer suspects that the application issues are related to the memory usage. The developer checks the Elastic Beanstalk console and notices that memory usage is not being tracked. How should the developer gather more information about the application performance issues?

   • AConfigure the Amazon CloudWatch agent to push logs to Amazon CloudWatch Logs by using port 443.
   • BConfigure the Elastic Beanstalk .ebextensions directory to track the memory usage of the instances.
   • CConfigure the Amazon CloudWatch agent to track the memory usage of the instances.
   • DConfigure an Amazon CloudWatch dashboard to track the memory usage of the instances.

   Show answer

   Answer: C

   Explanation

   This option allows the developer to gather detailed performance metrics, including memory usage, from the EC2 instances. By configuring the CloudWatch agent, the developer can monitor the memory usage in real-time and analyze historical data to identify trends or patterns that may be affecting the application's performance. This approach provides actionable insights with minimal overhead and without the need for custom logging or external tools.

   Source: Adapted from community discussion — SerialiDr

   References

   • repost.aws documentation
   • AWS documentation

   Next question

9. Question 529 · 548 in bank

   A developer is building a highly secure healthcare application using serverless components. This application requires writing temporary data to /tmp storage on an AWS Lambda function. How should the developer encrypt this data?

   • AEnable Amazon EBS volume encryption with an AWS KMS key in the Lambda function configuration so that all storage attached to the Lambda function is encrypted.
   • BSet up the Lambda function with a role and key policy to access an AWS KMS key. Use the key to generate a data key used to encrypt all data prior to writing to /tmp storage.
   • CUse OpenSSL to generate a symmetric encryption key on Lambda startup. Use this key to encrypt the data prior to writing to /tmp.
   • DUse an on-premises hardware security module (HSM) to generate keys, where the Lambda function requests a data key from the HSM and uses that to encrypt data on all requests to the function.

   Show answer

   Answer: B

   Explanation

   AWS Key Management Service (KMS) provides secure management of encryption keys. The Lambda function can use a KMS key to generate data keys for encrypting and decrypting data. The Lambda function would require appropriate permissions to access the KMS key. This approach provides a high level of security, which is essential for a healthcare application.

   Source: Adapted from community discussion — SerialiDr

   Next question

10. Question 530 · 548 in bank

    A developer has created an AWS Lambda function to provide notification through Amazon Simple Notification Service (Amazon SNS) whenever a file is uploaded to Amazon S3 that is larger than 50 MB. The developer has deployed and tested the Lambda function by using the CLI. However, when the event notification is added to the S3 bucket and a 3,000 MB file is uploaded, the Lambda function does not launch. Which of the following is a possible reason for the Lambda function's inability to launch?

    • AThe S3 event notification does not activate for files that are larger than 1,000 MB.
    • BThe resource-based policy for the Lambda function does not have the required permissions to be invoked by Amazon S3.
    • CLambda functions cannot be invoked directly from an S3 event.
    • DThe S3 bucket needs to be made public.

    Show answer

    Answer: B

    Explanation

    B - is right answer A is incorrect because the size of the file should not affect whether the event notification is triggered. C is incorrect because Lambda functions can indeed be invoked directly from an S3 event. D is incorrect because the S3 bucket does not need to be made public for the Lambda function to be invoked. (c)chatgpt

    Source: Adapted from community discussion — Jamshif01

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

DVA-C02 practice, question 521. 548 questions available.