Amazon DVA-C01 Practice Test - Questions Answers, Page 25
List of questions
Question 241

An application is being developed to audit several AWS accounts. The application will run in Account A and must access AWS services in Accounts B and C. What is the MOST secure way to allow the application to call AWS services in each audited account?
Explanation:
https://docs.aws.amazon.com/IAM/latest/UserGuide/tutorial_cross-account-with-roles.html
Question 242

A Developer has been asked to create an AWS Lambda function that is triggered any time updates are made to items in an Amazon DynamoDB table. The function has been created, and appropriate permissions have been added to the Lambda execution role. Amazon DynamoDB streams have been enabled for the table, but the function is still not being triggered. Which option would enable DynamoDB table updates to trigger the Lambda function?
Explanation:
https://docs.aws.amazon.com/en_us/amazondynamodb/latest/developerguide/Streams.Lambda.Tutorial.htmlCreate an event source mapping to tell Lambda to send records from your stream to a Lambdafunction. You can create multiple event source mappings to process the same data with multipleLambda functions, or process items from multiple streams with a single function.
Question 243

A Developer accesses AWS CodeCommit over SSH. The SSH keys configured to access AWS CodeCommit are tied to a user with the following permissions:
The Developer needs to create/delete branches.
Which specific IAM permissions need to be added, based on the principle of least privilege?
Explanation:
https://docs.aws.amazon.com/codecommit/latest/userguide/auth-and-access-control-permissionsreference.html#aa-branches https://docs.aws.amazon.com/codecommit/latest/userguide/auth-and-access-control-iam-identitybased-access-control.html
Question 244

A company needs to ingest terabytes of data each hour from thousands of sources that are delivered almost continually throughout the day. The volume of messages generated varies over the course of the day. Messages must be delivered in real time for fraud detection and live operational dashboards.
Which approach will meet these requirements?
Explanation:
https://aws.amazon.com/streaming-data/
Question 245

A company is running a Docker application on Amazon ECS. The application must scale based on user load in the last 15 seconds. How should a Developer instrument the code so that the requirement can be met?
Explanation:
https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/publishingMetrics.html#highresolution-metrics
Question 246

A Developer wants to upload data to Amazon S3 and must encrypt the data in transit.
Which of the following solutions will accomplish this task? (Choose two.)
Explanation:
https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingEncryption.html
Question 247

A Developer is trying to deploy a serverless application using AWS CodeDeploy. The application was updated and needs to be redeployed. What file does the Developer need to update to push that change through CodeDeploy?
Explanation:
https://docs.aws.amazon.com/codedeploy/latest/userguide/application-revisions-push.html
Question 248

An AWS Lambda function must access an external site by using a regularly rotated user name and password. These items must be kept securely and cannot be stored in the function code. What combination of AWS services can be used to accomplish this? (Choose two.)
Explanation:
https://docs.aws.amazon.com/kms/latest/developerguide/services-parameter-store.html
Question 249

A Developer is building a web application that uses Amazon API Gateway to expose an AWS Lambda function to process requests from clients. During testing, the Developer notices that the API Gateway times out even though the Lambda function finishes under the set time limit.
Which of the following API Gateway metrics in Amazon CloudWatch can help the Developer troubleshoot the issue? (Choose two.)
Explanation:
https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-metrics-anddimensions.html
Question 250

A Developer is working on an application that handles 10MB documents that contain highly-sensitive dat a. The application will use AWS KMS to perform client-side encryption. What steps must be followed?
Explanation:
https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingClientSideEncryption.htmlGenerateDataKey API: Generates a unique data key. This operation returns a plaintext copy of the data key and a copy that is encrypted under a customer master key (CMK) that you specify. You canuse the plaintext key to encrypt your data outside of KMS and store the encrypted data key with the encrypted data.
Question