ExamGecko
Home Home / Amazon / DVA-C01

Amazon DVA-C01 Practice Test - Questions Answers, Page 15

Question list
Search
Search

List of questions

Search

Related questions











An AWS Lambda function must read data from an Amazon RDS MySQL database in a VPC and also reach a public endpoint over the internet to get additional data. Which steps must be taken to allow the function to access both the RDS resource and the public endpoint? (Select TWO.)

A.
Modify the default configuration for the Lambda function to associate it with an Amazon VPC private subnet.
A.
Modify the default configuration for the Lambda function to associate it with an Amazon VPC private subnet.
Answers
B.
Modify the default network access control list to allow outbound traffic.
B.
Modify the default network access control list to allow outbound traffic.
Answers
C.
Add a NAT Gateway to the VPC.
C.
Add a NAT Gateway to the VPC.
Answers
D.
Modify the default configuration of the Lambda function to associate it with a VPC public subnet.
D.
Modify the default configuration of the Lambda function to associate it with a VPC public subnet.
Answers
E.
Add an environmental variable to the Lambda function to allow outbound internet access.
E.
Add an environmental variable to the Lambda function to allow outbound internet access.
Answers
Suggested answer: A, C

Explanation:

Explanation:

Reference: https://docs.aws.amazon.com/lambda/latest/dg/vpc.html

A Developer writes an AWS Lambda function and uploads the code in a .ZIP file to Amazon S3. The Developer makes changes to the code and uploads a new .ZIP file to Amazon S3. However, Lambda executes the earlier code. How can the Developer fix this in the LEAST disruptive way?

A.
Create another Lambda function and specify the new .ZIP file.
A.
Create another Lambda function and specify the new .ZIP file.
Answers
B.
Call the update-function-code API.
B.
Call the update-function-code API.
Answers
C.
Remove the earlier .ZIP file first, then add the new .ZIP file.
C.
Remove the earlier .ZIP file first, then add the new .ZIP file.
Answers
D.
Call the create-alias API.
D.
Call the create-alias API.
Answers
Suggested answer: B

Explanation:

https://docs.aws.amazon.com/cli/latest/reference/lambda/update-function-code.html

A company is developing an application that will run on several Amazon EC2 instances in an Auto Scaling group and can access a database running on Amazon EC2. The application needs to store secrets required to connect to the database. The application must allow for periodic secret rotation, and there should be no changes to the application when a secret changes. What is the SAFEST way to meet these requirements?

A.
Associate an IAM role to the EC2 instance where the application is running with permission to access the database.
A.
Associate an IAM role to the EC2 instance where the application is running with permission to access the database.
Answers
B.
Use AWS Systems Manager Parameter Store with the SecureString data type to store secrets.
B.
Use AWS Systems Manager Parameter Store with the SecureString data type to store secrets.
Answers
C.
Configure the application to store secrets in Amazon S3 object metadata.
C.
Configure the application to store secrets in Amazon S3 object metadata.
Answers
D.
Hard code the database secrets in the application code itself.
D.
Hard code the database secrets in the application code itself.
Answers
Suggested answer: B


A Developer needs to design an application running on AWS that will be used to consume Amazon SQS messages that range from 1 KB up to 1GB in size. How should the Amazon SQS messages be managed?

A.
Use Amazon S3 and the Amazon SQS CLI.
A.
Use Amazon S3 and the Amazon SQS CLI.
Answers
B.
Use Amazon S3 and the Amazon SQS Extended Client Library for Java.
B.
Use Amazon S3 and the Amazon SQS Extended Client Library for Java.
Answers
C.
Use Amazon EBS and the Amazon SQS CLI.
C.
Use Amazon EBS and the Amazon SQS CLI.
Answers
D.
Use Amazon EFS and the Amazon SQS CLI.
D.
Use Amazon EFS and the Amazon SQS CLI.
Answers
Suggested answer: B

Explanation:

Explanation:

Reference:

https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqslimits.html

A Developer has been asked to make changes to the source code of an AWS Lambda function. The function is managed using an AWS CloudFormation template. The template is configured to load the source code from an Amazon S3 bucket. The Developer manually created a .ZIP file deployment package containing the changes and put the file into the correct location on Amazon S3. When the function is invoked, the code changes have not been applied. What step is required to update the function with the changes?

A.
Delete the .ZIP file on S3, and re-upload by using a different object key name.
A.
Delete the .ZIP file on S3, and re-upload by using a different object key name.
Answers
B.
Update the CloudFormation stack with the correct values for the function code properties S3Bucket, S3Key, or S3ObjectVersion.
B.
Update the CloudFormation stack with the correct values for the function code properties S3Bucket, S3Key, or S3ObjectVersion.
Answers
C.
Ensure that the function source code is base64-encoded before uploading the deployment package to S3.
C.
Ensure that the function source code is base64-encoded before uploading the deployment package to S3.
Answers
D.
Modify the execution role of the Lambda function to allow S3 access permission to the deployment package .ZIP file.
D.
Modify the execution role of the Lambda function to allow S3 access permission to the deployment package .ZIP file.
Answers
Suggested answer: B

Explanation:

Changes to a deployment package in Amazon S3 are not detected automatically during stack updates. To update the function code, change the object key or version in the template. https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambdafunction-code.html

An AWS Elastic Beanstalk application needs to be deployed in multiple regions and requires a different Amazon Machine Image (AMI) in each region. Which AWS CloudFormation template key can be used to specify the correct AMI for each region?

A.
Parameters
A.
Parameters
Answers
B.
Outputs
B.
Outputs
Answers
C.
Mappings
C.
Mappings
Answers
D.
Resources
D.
Resources
Answers
Suggested answer: C

Explanation:

Explanation:

Reference: https://docs.aws.amazon.com/marketplace/latest/userguide/cloudformation.html

A Developer is designing a new application that uses Amazon S3. To satisfy compliance requirements, the Developer must encrypt the data at rest. How can the Developer accomplish this?

A.
Use s3:x-amz-acl as a condition in the S3 bucket policy.
A.
Use s3:x-amz-acl as a condition in the S3 bucket policy.
Answers
B.
Use Amazon RDS with default encryption.
B.
Use Amazon RDS with default encryption.
Answers
C.
Use aws:SecureTransport as a condition in the S3 bucket policy.
C.
Use aws:SecureTransport as a condition in the S3 bucket policy.
Answers
D.
Turn on S3 default encryption for the S3 bucket.
D.
Turn on S3 default encryption for the S3 bucket.
Answers
Suggested answer: D

A Developer wants to enable AWS X-Ray for a secure application that runs in an Amazon ECS environment. What combination of steps will enable X-Ray? (Select THREE.)

A.
Create a Docker image that runs the X-Ray daemon.
A.
Create a Docker image that runs the X-Ray daemon.
Answers
B.
Add instrumentation to the application code for X-Ray.
B.
Add instrumentation to the application code for X-Ray.
Answers
C.
Install the X-Ray daemon on the underlying EC2 instance.
C.
Install the X-Ray daemon on the underlying EC2 instance.
Answers
D.
Configure and use an IAM EC2 instance role.
D.
Configure and use an IAM EC2 instance role.
Answers
E.
Register the application with X-Ray.
E.
Register the application with X-Ray.
Answers
F.
Configure and use an IAM role for tasks.
F.
Configure and use an IAM role for tasks.
Answers
Suggested answer: A, B, F

Explanation:

https://docs.aws.amazon.com/xray/latest/devguide/xray-daemon-ecs.html

https://docs.aws.amazon.com/xray/latest/devguide/scorekeep-ecs.html

A Developer must deploy a new AWS Lambda function using an AWS CloudFormation template.

Which procedures will deploy a Lambda function? (Select TWO.)

A.
Upload the code to an AWS CodeCommit repository, then add a reference to it in an AWS::Lambda::Function resource in the template.
A.
Upload the code to an AWS CodeCommit repository, then add a reference to it in an AWS::Lambda::Function resource in the template.
Answers
B.
Create an AWS::Lambda::Function resource in the template, then write the code directly inside the CloudFormation template.
B.
Create an AWS::Lambda::Function resource in the template, then write the code directly inside the CloudFormation template.
Answers
C.
Upload a .ZIP file containing the function code to Amazon S3, then add a reference to it in an AWS::Lambda::Function resource in the template.
C.
Upload a .ZIP file containing the function code to Amazon S3, then add a reference to it in an AWS::Lambda::Function resource in the template.
Answers
D.
Upload a .ZIP file to AWS CloudFormation containing the function code, then add a reference to it in an AWS::Lambda::Function resource in the template.
D.
Upload a .ZIP file to AWS CloudFormation containing the function code, then add a reference to it in an AWS::Lambda::Function resource in the template.
Answers
E.
Upload the function code to a private Git repository, then add a reference to it in an AWS::Lambda::Function resource in the template.
E.
Upload the function code to a private Git repository, then add a reference to it in an AWS::Lambda::Function resource in the template.
Answers
Suggested answer: B, C

Explanation:

https://aws.amazon.com/blogs/infrastructure-and-automation/deploying-aws-lambda-functionsusing-aws-cloudformation-the-portable-way/

A Developer has published an update to an application that is served to a global user base using Amazon CloudFront. After deploying the application, users are not able to see the updated changes. How can the Developer resolve this issue?

A.
Remove the origin from the CloudFront configuration and add it again.
A.
Remove the origin from the CloudFront configuration and add it again.
Answers
B.
Disable forwarding of query strings and request headers from the CloudFront distribution configuration.
B.
Disable forwarding of query strings and request headers from the CloudFront distribution configuration.
Answers
C.
Invalidate all the application objects from the edge caches.
C.
Invalidate all the application objects from the edge caches.
Answers
D.
Disable the CloudFront distribution and enable it again to update all the edge locations.
D.
Disable the CloudFront distribution and enable it again to update all the edge locations.
Answers
Suggested answer: C

Explanation:

https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Invalidation.html

Total 608 questions
Go to page: of 61