ExamGecko
Login
Home / Amazon / DVA-C01 / List of questions
Ask Question

Amazon DVA-C01 Practice Test - Questions Answers, Page 23

List of questions

Question 221

Report
Export
Collapse


Where can PortMapping be defined when launching containers in Amazon ECS?

Security groups
Security groups
Amazon Elastic Container Registry (Amzon ECR)
Amazon Elastic Container Registry (Amzon ECR)
Container agent
Container agent
Task definition
Task definition
Suggested answer: D
asked 16/09/2024
Edgar Alvarez
35 questions

Question 222

Report
Export
Collapse

An application uses Amazon Kinesis Data Streams to ingest and process large streams of data records in real time. Amazon EC2 instances consume and process the data from the shards of the Kinesis data stream by using Amazon Kinesis Client Library (KCL). The application handles the failure scenarios and does not require standby workers. The application reports that a specific shard is receiving more data than expected. To adapt to the chnages in the rate of data flow, the “hot” shard is resharded.

Assuming that the initial number of shards in the Kinesis data stream is 4, and after resharding the number of shards increased to 6, what is the maximum number of EC2 instances that can be deployed to process data from all the shards?

12
12
6
6
4
4
1
1
Suggested answer: B

Explanation:

Typically, when you use the KCL, you should ensure that the number of instances does not exceed the number of shards (except for failure standby purposes). Each shard is processed by exactly one KCL worker and has exactly one corresponding record processor, so you never need multiple instances to process one shard. However, one worker can process any number of shards, so it's fine if the number of shards exceeds the number of instances. https://docs.aws.amazon.com/streams/latest/dev/kinesis-record-processor-scaling.html

asked 16/09/2024
Abdullah Mousa
45 questions

Question 223

Report
Export
Collapse

A Development team is working on a case management solution that allows medical claims to be processed and reviewed. Users log in to provide information related to their medical and financial situations. As part of the application, sensitive documents such as medical records, medical imaging, bank statements, and receipts are uploaded to Amazon S3. All documents must be securely transmitted and stored. All access to the documents must be recorded for auditing.

What is the MOST secure approach?

Use S3 default encryption using Advanced Encryption Standard-256 (AES-256) on the destination bucket.
Use S3 default encryption using Advanced Encryption Standard-256 (AES-256) on the destination bucket.
Use Amazon Cognito for authorization and authentication to ensure the security of the application and documents.
Use Amazon Cognito for authorization and authentication to ensure the security of the application and documents.
Use AWS Lambda to encrypt and decrypt objects as they are placed into the S3 bucket.
Use AWS Lambda to encrypt and decrypt objects as they are placed into the S3 bucket.
Use client-side encryption/decryption with Amazon S3 and AWS KMS.
Use client-side encryption/decryption with Amazon S3 and AWS KMS.
Suggested answer: A

Explanation:

https://aws.amazon.com/s3/faqs/?nc1=h_ls.

asked 16/09/2024
Ubeydullah Kara
40 questions

Question 224

Report
Export
Collapse

A Developer is trying to make API calls using SDK. The IAM user credentials used by the application require multi-factor authentication for all API calls. Which method the Developer use to access the multi-factor authentication protected API?

GetFederationToken
GetFederationToken
GetCallerIdentity
GetCallerIdentity
GetSessionToken
GetSessionToken
DecodeAutherizationMessage
DecodeAutherizationMessage
Suggested answer: B
asked 16/09/2024
abdirashid ahmed
31 questions

Question 225

Report
Export
Collapse

An Amazon RDS database instance is used by many applications to look up historical dat a. The query rate is relatively constant. When the historical data is updated each day, the resulting write traffic slows the read query performance and affects all application users.

What can be done to eliminate the performance impact on application users?

Make sure Amazon RDS is Multi-AZ so it can better absorb increased traffic.
Make sure Amazon RDS is Multi-AZ so it can better absorb increased traffic.
Create an RDS Read Replica and direct all read traffic to the replica.
Create an RDS Read Replica and direct all read traffic to the replica.
Implement Amazon ElastiCache in front of Amazon RDS to buffer the write traffic.
Implement Amazon ElastiCache in front of Amazon RDS to buffer the write traffic.
Use Amazon DynamoDB instead of Amazon RDS to buffer the read traffic.
Use Amazon DynamoDB instead of Amazon RDS to buffer the read traffic.
Suggested answer: B

Explanation:

https://aws.amazon.com/rds/details/read-replicas/

asked 16/09/2024
henk Bouman
33 questions

Question 226

Report
Export
Collapse

A company wants to implement authentication for its new REST service using Amazon API Gateway.

To authenticate the calls, each request must include HTTP headers with a client ID and user ID. Thesecredentials must be compared to authentication data in an Amazon DynamoDB table. What MUST the company do to implement this authentication in API Gateway?

Implement an AWS Lambda authorizer that references the DynamoDB authentication table
Implement an AWS Lambda authorizer that references the DynamoDB authentication table
Create a model that requires the credentials, then grant API Gateway access to the authentication table
Create a model that requires the credentials, then grant API Gateway access to the authentication table
Modify the integration requests to require the credentials, then grant API Gateway access to the authentication table
Modify the integration requests to require the credentials, then grant API Gateway access to the authentication table
Implement an Amazon Cognito authorizer that references the DynamoDB authentication table
Implement an Amazon Cognito authorizer that references the DynamoDB authentication table
Suggested answer: A

Explanation:

https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-use-lambdaauthorizer.html

asked 16/09/2024
leonie lira
39 questions

Question 227

Report
Export
Collapse

A company is creating a REST service using an Amazon API Gateway with AWS Lambda integration.

The service must run different versions for testing purposes.

What would be the BEST way to accomplish this?

Use an X-Version header to denote which version is being called and pass that header to the Lambda function(s)
Use an X-Version header to denote which version is being called and pass that header to the Lambda function(s)
Create an API Gateway Lambda authorizer to route API clients to the correct API version
Create an API Gateway Lambda authorizer to route API clients to the correct API version
Create an API Gateway resource policy to isolate versions and provide context to the Lambda function(s)
Create an API Gateway resource policy to isolate versions and provide context to the Lambda function(s)
Deploy the API versions as unique stages with unique endpoints and use stage variables to provide further context
Deploy the API versions as unique stages with unique endpoints and use stage variables to provide further context
Suggested answer: A

Explanation:

The service run different versions for testing purposes. means different stages, stage variable is the way to go.

asked 16/09/2024
Alexandra Peralta Reyes
43 questions

Question 228

Report
Export
Collapse

A Developer is storing sensitive documents in Amazon S3 that will require encryption at rest. The encryption keys must be rotated annually, at least. What is the easiest way to achieve this?

Encrypt the data before sending it to Amazon S3
Encrypt the data before sending it to Amazon S3
Import a custom key into AWS KMS with annual rotation enabled
Import a custom key into AWS KMS with annual rotation enabled
Use AWS KMS with automatic key rotation
Use AWS KMS with automatic key rotation
Export a key from AWS KMS to encrypt the data
Export a key from AWS KMS to encrypt the data
Suggested answer: C

Explanation:

https://docs.aws.amazon.com/kms/latest/developerguide/rotate-keys.html

https://docs.aws.amazon.com/kms/latest/developerguide/custom-key-store-overview.htmlYou can use the same techniques to view and manage the CMKs in your custom key store that you use for CMKs in the AWS KMS key store. You can control access with IAM and key policies, create tags and aliases, enable and disable the CMKs, and schedule key deletion. You can use the CMKs forcryptographic operations and use them with AWS services that integrate with AWS KMS. However,you cannot enable automatic key rotation and you cannot import key material into a CMK in a custom key store. Q: Can I rotate my keys? Yes. You can choose to have AWS KMS automatically rotate CMKs every year, provided that those keys were generated within AWS KMS HSMs. Automatic key rotation is not supported for imported keys, asymmetric keys, or keys generated in an AWS CloudHSM cluster using the AWS KMS custom key store feature. If you choose to import keys to AWS KMS or asymmetric keys or use a custom key store, you can manually rotate them by creating a new CMK and mapping an existing key alias from the old CMK to the new CMK. https://aws.amazon.com/kms/faqs/

asked 16/09/2024
Lambert Shel Pablo
43 questions

Question 229

Report
Export
Collapse

When developing an AWS Lambda function that processes Amazon Kinesis Data Streams, Administrators within the company must receive a notice that includes the processed data. How should the Developer write the function to send processed data to the Administrators?

Separate the Lambda handler from the core logic
Separate the Lambda handler from the core logic
Use Amazon CloudWatch Events to send the processed data
Use Amazon CloudWatch Events to send the processed data
Publish the processed data to an Amazon SNS topic
Publish the processed data to an Amazon SNS topic
Push the processed data to Amazon SQS
Push the processed data to Amazon SQS
Suggested answer: C

Explanation:

https://stackoverflow.com/questions/13681213/what-is-the-difference-between-amazon-sns-andamazon-sqs https://stackoverflow.com/questions/31484868/can-you-publish-a-message-to-an-sns-topic-usingan-aws-lambda-function-backed-by/31485168

asked 16/09/2024
Kevin Suckiel
48 questions

Question 230

Report
Export
Collapse

A Developer is writing a REST service that will add items to a shopping list. The service is built on Amazon API Gateway with AWS Lambda integrations. The shopping list items are send as query string parameters in the method request. How should the Developer convert the query string parameters to arguments for the Lambda function?

Enable request validation
Enable request validation
Include the Amazon Resource Name (ARN) of the Lambda function
Include the Amazon Resource Name (ARN) of the Lambda function
Change the integration type
Change the integration type
Create a mapping template
Create a mapping template
Suggested answer: D

Explanation:

https://docs.aws.amazon.com/apigateway/latest/developerguide/integrating-api-with-aws-serviceslambda.html#api-as-lambda-proxy-expose-get-method-with-query-strings-to-call-lambda-function

asked 16/09/2024
Audrey Buan
32 questions
Total 608 questions
Go to page: of 61
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

A company wants to implement a continuous integration for its workloads on AWS. The company wants to trigger unit test in its pipeline for commits-on its code repository, and wants to be notified of failure events in the pipeline. How can these requirements be met?
An application stores payroll information nightly in DynamoDB for a large number of employees across hundreds of offices. Item attributes consist of individual name, office identifier, and cumulative daily hours. Managers run reports for ranges of names working in their office. One query is. "Return all Items in this office for names starting with A through E". Which table configuration will result in the lowest impact on provisioned throughput for this query?
A company has an application that uses Amazon Cognito user pools as an identity provider. The company must secure access to user records. The company I up multi-factor authentication (MFA). The company also wants to send a login activity notification by email every time a user logs in. What is the MOST operationally efficient solution that meets this requirement?
A development team consists of 10 team members. Similar to a home directory for each team member the manager wants to grant access to user-specific folders in an Amazon S3 bucket. For the team member with the username “TeamMemberX”, the snippet of the IAM policy looks like this: Instead of creating distinct policies for each team member, what approach can be used to make this policy snippet generic for all team members?
During non-peak hours, a Developer wants to minimize the execution time of a full Amazon DynamoDB table scan without affecting normal workloads. The workloads average half of the strongly consistent read capacity units during non-peak hours. How would the Developer optimize this scan?
Which of the following are correct statements with policy evaluation logic in AWS Identity and Access Management? Choose 2 answers
You are writing to a DynamoDB table and receive the following exception:" ProvisionedThroughputExceededException". though according to your Cloudwatch metrics for the table, you are not exceeding your provisioned throughput. What could be an explanation for this?
A Developer is investigating an issue whereby certain requests are passing through an Amazon API Gateway endpoint /MyAPI, but the requests do not reach the AWS Lambda function backing /MyAPI. The Developer found that a second Lambda function sometimes runs at maximum concurrency allowed for the given AWS account. How can the Developer address this issue?
A developer runs an application that uses an Amazon API Gateway REST API. The developer needs to implement a solution to proactively monitor the health of both API responses and latencies in case a deployment causes a service disruption despite passing deployment pipeline tests. The solution also must check for endpoint vulnerability and unauthorized changes to APIs. URLs, and website content. Which solution will meet these requirements?
A developer has written the following 1AM policy to provide access to an Amazon S3 bucket: Which access does the policy allow regarding the s3:GetObject and s3:PutObject actions'?