Amazon DVA-C01 Practice Test - Questions Answers, Page 23
List of questions
Question 221

Where can PortMapping be defined when launching containers in Amazon ECS?
Question 222

An application uses Amazon Kinesis Data Streams to ingest and process large streams of data records in real time. Amazon EC2 instances consume and process the data from the shards of the Kinesis data stream by using Amazon Kinesis Client Library (KCL). The application handles the failure scenarios and does not require standby workers. The application reports that a specific shard is receiving more data than expected. To adapt to the chnages in the rate of data flow, the “hot” shard is resharded.
Assuming that the initial number of shards in the Kinesis data stream is 4, and after resharding the number of shards increased to 6, what is the maximum number of EC2 instances that can be deployed to process data from all the shards?
Explanation:
Typically, when you use the KCL, you should ensure that the number of instances does not exceed the number of shards (except for failure standby purposes). Each shard is processed by exactly one KCL worker and has exactly one corresponding record processor, so you never need multiple instances to process one shard. However, one worker can process any number of shards, so it's fine if the number of shards exceeds the number of instances. https://docs.aws.amazon.com/streams/latest/dev/kinesis-record-processor-scaling.html
Question 223

A Development team is working on a case management solution that allows medical claims to be processed and reviewed. Users log in to provide information related to their medical and financial situations. As part of the application, sensitive documents such as medical records, medical imaging, bank statements, and receipts are uploaded to Amazon S3. All documents must be securely transmitted and stored. All access to the documents must be recorded for auditing.
What is the MOST secure approach?
Explanation:
https://aws.amazon.com/s3/faqs/?nc1=h_ls.
Question 224

A Developer is trying to make API calls using SDK. The IAM user credentials used by the application require multi-factor authentication for all API calls. Which method the Developer use to access the multi-factor authentication protected API?
Question 225

An Amazon RDS database instance is used by many applications to look up historical dat a. The query rate is relatively constant. When the historical data is updated each day, the resulting write traffic slows the read query performance and affects all application users.
What can be done to eliminate the performance impact on application users?
Explanation:
https://aws.amazon.com/rds/details/read-replicas/
Question 226

A company wants to implement authentication for its new REST service using Amazon API Gateway.
To authenticate the calls, each request must include HTTP headers with a client ID and user ID. Thesecredentials must be compared to authentication data in an Amazon DynamoDB table. What MUST the company do to implement this authentication in API Gateway?
Explanation:
https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-use-lambdaauthorizer.html
Question 227

A company is creating a REST service using an Amazon API Gateway with AWS Lambda integration.
The service must run different versions for testing purposes.
What would be the BEST way to accomplish this?
Explanation:
The service run different versions for testing purposes. means different stages, stage variable is the way to go.
Question 228

A Developer is storing sensitive documents in Amazon S3 that will require encryption at rest. The encryption keys must be rotated annually, at least. What is the easiest way to achieve this?
Explanation:
https://docs.aws.amazon.com/kms/latest/developerguide/rotate-keys.html
https://docs.aws.amazon.com/kms/latest/developerguide/custom-key-store-overview.htmlYou can use the same techniques to view and manage the CMKs in your custom key store that you use for CMKs in the AWS KMS key store. You can control access with IAM and key policies, create tags and aliases, enable and disable the CMKs, and schedule key deletion. You can use the CMKs forcryptographic operations and use them with AWS services that integrate with AWS KMS. However,you cannot enable automatic key rotation and you cannot import key material into a CMK in a custom key store. Q: Can I rotate my keys? Yes. You can choose to have AWS KMS automatically rotate CMKs every year, provided that those keys were generated within AWS KMS HSMs. Automatic key rotation is not supported for imported keys, asymmetric keys, or keys generated in an AWS CloudHSM cluster using the AWS KMS custom key store feature. If you choose to import keys to AWS KMS or asymmetric keys or use a custom key store, you can manually rotate them by creating a new CMK and mapping an existing key alias from the old CMK to the new CMK. https://aws.amazon.com/kms/faqs/
Question 229

When developing an AWS Lambda function that processes Amazon Kinesis Data Streams, Administrators within the company must receive a notice that includes the processed data. How should the Developer write the function to send processed data to the Administrators?
Explanation:
https://stackoverflow.com/questions/13681213/what-is-the-difference-between-amazon-sns-andamazon-sqs https://stackoverflow.com/questions/31484868/can-you-publish-a-message-to-an-sns-topic-usingan-aws-lambda-function-backed-by/31485168
Question 230

A Developer is writing a REST service that will add items to a shopping list. The service is built on Amazon API Gateway with AWS Lambda integrations. The shopping list items are send as query string parameters in the method request. How should the Developer convert the query string parameters to arguments for the Lambda function?
Explanation:
https://docs.aws.amazon.com/apigateway/latest/developerguide/integrating-api-with-aws-serviceslambda.html#api-as-lambda-proxy-expose-get-method-with-query-strings-to-call-lambda-function
Question