ExamGecko
Home Home / Amazon / DVA-C01

Amazon DVA-C01 Practice Test - Questions Answers, Page 56

Question list
Search
Search

List of questions

Search

Related questions











A developer has an application that pushes files from an on-premises local server to an Amazon S3 bucket. The application uses an AWS access key and a secret key that are stored on the server for authentication. The application calls AWS Security Token Service (AWS STS) to assume a role with access to perform the S3 PUT operation to upload the file. The developer is migrating the server to an Amazon EC2 instance. The EC2 instance is configured with an 1AM instance profile in the same AWS account that owns the S3 bucket. What is the MOST secure solution for the developer to use to migrate the automation code?

A.
Remove the code that calls the STS AssumeRole operation. Use the same access key and secret key from the server to access the S3 bucket.
A.
Remove the code that calls the STS AssumeRole operation. Use the same access key and secret key from the server to access the S3 bucket.
Answers
B.
Remove the access key and the secret key. Use the STS AssumeRole operation to add permissions to access the S3 bucket.
B.
Remove the access key and the secret key. Use the STS AssumeRole operation to add permissions to access the S3 bucket.
Answers
C.
Remove the access key, the secret key, and the code that calls the STS AssumeRole operation. Use an 1AM instance profile role that grants access to the S3 bucket.
C.
Remove the access key, the secret key, and the code that calls the STS AssumeRole operation. Use an 1AM instance profile role that grants access to the S3 bucket.
Answers
D.
Remove the access key, the secret key, and the code that calls the STS AssumeRole operation.Create a new access key and secret key. Use the new keys to access the S3 bucket.
D.
Remove the access key, the secret key, and the code that calls the STS AssumeRole operation.Create a new access key and secret key. Use the new keys to access the S3 bucket.
Answers
Suggested answer: C

A developer runs an application that uses an Amazon API Gateway REST API. The developer needs to implement a solution to proactively monitor the health of both API responses and latencies in case a deployment causes a service disruption despite passing deployment pipeline tests. The solution also must check for endpoint vulnerability and unauthorized changes to APIs. URLs, and website content. Which solution will meet these requirements?

A.
Use the Amazon CloudWatch Synthetics canary functionality to call the API and check the responses and duration of the request.
A.
Use the Amazon CloudWatch Synthetics canary functionality to call the API and check the responses and duration of the request.
Answers
B.
Use a custom health check in the API that queries hosts to check the duration of the request.
B.
Use a custom health check in the API that queries hosts to check the duration of the request.
Answers
C.
Implement a custom AWS Lambda function with an Amazon EventBridge event to periodically call the API and check the responses and duration of the request.
C.
Implement a custom AWS Lambda function with an Amazon EventBridge event to periodically call the API and check the responses and duration of the request.
Answers
D.
Use the built-in API Gateway metrics to monitor the average duration of the API response.
D.
Use the built-in API Gateway metrics to monitor the average duration of the API response.
Answers
Suggested answer: A

A company uses Amazon DynamoDB as a data store for its order management system. The company frontend application stores orders in a DynamoDB table. The DynamoDB table is configured to send change events to a DynamoDB stream. The company uses an AWS Lambda function to log and process the incoming orders based on data from the DynamoDB stream. An operational review reveals that the order quantity of incoming orders is sometimes set to 0. A developer needs to create a dashboard that will show how many unique customers this problem affects each day. What should the developer do to implement the dashboard?

A.
Grant the Lambda function's execution role permissions to upload logs to Amazon CloudWatch Logs. Implement a CloudWatch Logs Insights query that selects the number of unique customers for orders with order quantity equal to 0 and groups the results in 1-day periods. Add the CloudWatch Logs Insights query to a CloudWatch dashboard.
A.
Grant the Lambda function's execution role permissions to upload logs to Amazon CloudWatch Logs. Implement a CloudWatch Logs Insights query that selects the number of unique customers for orders with order quantity equal to 0 and groups the results in 1-day periods. Add the CloudWatch Logs Insights query to a CloudWatch dashboard.
Answers
B.
Use Amazon Athena to query AWS CloudTrail API logs for API calls. Implement an Athena query that selects the number of unique customers for orders with order quantity equal to 0 and groups the results in 1 -day periods. Add the Athena query to an Amazon CloudWatch dashboard.
B.
Use Amazon Athena to query AWS CloudTrail API logs for API calls. Implement an Athena query that selects the number of unique customers for orders with order quantity equal to 0 and groups the results in 1 -day periods. Add the Athena query to an Amazon CloudWatch dashboard.
Answers
C.
Configure the Lambda function to send events to Amazon EventBridge. Create an EventBridge rule that groups the number of unique customers for orders with order quantity equal to 0 in 1 -day periods. Add a CloudWatch dashboard as the target of the rule.
C.
Configure the Lambda function to send events to Amazon EventBridge. Create an EventBridge rule that groups the number of unique customers for orders with order quantity equal to 0 in 1 -day periods. Add a CloudWatch dashboard as the target of the rule.
Answers
D.
Turn on custom Amazon CloudWatch metrics for the DynamoDB stream of the DynamoDB table.Create a CloudWatch alarm that groups the number of unique customers for orders with order quantity equal to 0 in 1-day periods. Add the CloudWatch alarm to a CloudWatch dashboard.
D.
Turn on custom Amazon CloudWatch metrics for the DynamoDB stream of the DynamoDB table.Create a CloudWatch alarm that groups the number of unique customers for orders with order quantity equal to 0 in 1-day periods. Add the CloudWatch alarm to a CloudWatch dashboard.
Answers
Suggested answer: D

A developer is writing an application that will run on Amazon EC2 instances in an Auto Scaling group. The developer wants to externalize the session state to support the application. Miich AWS services or resources can the developer use to meet these requirements? (Select TWO.)

A.
Amazon DynamoDB
A.
Amazon DynamoDB
Answers
B.
Amazon Cognito
B.
Amazon Cognito
Answers
C.
Amazon ElastiCache
C.
Amazon ElastiCache
Answers
D.
Application Load Balancer
D.
Application Load Balancer
Answers
E.
Amazon Simple Queue Service (Amazon SQS)
E.
Amazon Simple Queue Service (Amazon SQS)
Answers
Suggested answer: A, C

A developer is creating a serverless orchestrator that performs a series of steps to processes incoming loT dat a. The orchestrator transforms the data, performs a series of calculations, and stores the results in Amazon DynamoDB. The entire process is completed in less than a minute.

The orchestrator must process tens of thousands of transactions each second. The orchestrator must not miss a transaction and must process each transaction at least once. Which solution will meet these requirements MOST cost-effectively?

A.
Use Amazon Simple Notification Service (Amazon SNS) to process the data through an HTTP or HTTPS endpoint.
A.
Use Amazon Simple Notification Service (Amazon SNS) to process the data through an HTTP or HTTPS endpoint.
Answers
B.
Use AWS Step Functions to process the data as Standard Workflows.
B.
Use AWS Step Functions to process the data as Standard Workflows.
Answers
C.
Use AWS Step Functions to process the data as Synchronous Express Workflows.
C.
Use AWS Step Functions to process the data as Synchronous Express Workflows.
Answers
D.
Use AWS Step Functions to process the data as Asynchronous Express Workflows.
D.
Use AWS Step Functions to process the data as Asynchronous Express Workflows.
Answers
Suggested answer: D

A developer has an application that is composed of many different AWS Lambda functions. The Lambda functions all use some of the same dependencies. To avoid security issues, the developer is constantly updating the dependencies of all of the Lambda functions. The result is duplicated effort for each function.

Now can the developer keep the dependencies of the Lambda functions up to date with the LEAST additional complexity?

A.
Define a maintenance window for the Lambda functions to ensure that the functions get updated copies of the dependencies.
A.
Define a maintenance window for the Lambda functions to ensure that the functions get updated copies of the dependencies.
Answers
B.
Upgrade the Lambda functions to the most recent runtime version.
B.
Upgrade the Lambda functions to the most recent runtime version.
Answers
C.
Define a Lambda layer that contains all of the shared dependencies.
C.
Define a Lambda layer that contains all of the shared dependencies.
Answers
D.
Use an AWS CodeCommit repository to host the dependencies in a centralized location.
D.
Use an AWS CodeCommit repository to host the dependencies in a centralized location.
Answers
Suggested answer: C

A developer is implementing an AWS Lambda function that will be invoked when an object is uploaded to Amazon S3. The developer wants to test the Lambda function in a local development machine before publishing the function to a production AWS account.

Which solution will meet these requirements with the LEAST operational overhead?

A.
Upload an object to Amazon S3 by using the aws s3api put-object CLI command. Wait for the local Lambda invocation from the S3 event.
A.
Upload an object to Amazon S3 by using the aws s3api put-object CLI command. Wait for the local Lambda invocation from the S3 event.
Answers
B.
Create a sample JSON text file for a put object S3 event. Invoke the Lambda function locally. Use the aws lambda invoke CLI command with the JSON file and Lambda function name as arguments.
B.
Create a sample JSON text file for a put object S3 event. Invoke the Lambda function locally. Use the aws lambda invoke CLI command with the JSON file and Lambda function name as arguments.
Answers
C.
Use the sam local start-lambda CLI command lo start Lambda. Use the sam local generate-event s3 put CLI command to create the Lambda test JSON file. Use the sam local invoke CLI command with the JSON file as the argument to invoke the Lambda function.
C.
Use the sam local start-lambda CLI command lo start Lambda. Use the sam local generate-event s3 put CLI command to create the Lambda test JSON file. Use the sam local invoke CLI command with the JSON file as the argument to invoke the Lambda function.
Answers
D.
Create a JSON string for the put object S3 event. In the AWS Management Console, use the JSON string to create a test event for the local Lambda function. Perform the test.
D.
Create a JSON string for the put object S3 event. In the AWS Management Console, use the JSON string to create a test event for the local Lambda function. Perform the test.
Answers
Suggested answer: D

A company has a serverless application that uses Amazon API Gateway backed by AWS Lambda proxy integration. The company is developing several backend APIs. The company needs a landing page to arovide an overview ol navigation to the APIs.

\ developer creates a new /LandingPage resource and a new GET method that uses mock integration.

What should the developer do next to meet these requirements?

A.
Configure the integration request mapping template with Content-Type of text/html and statusCode of 200. Configure the integration response mapping template with Content-Type of application/json. In the integration response mapping template, include the LandingPage HTML code that references the APIs.
A.
Configure the integration request mapping template with Content-Type of text/html and statusCode of 200. Configure the integration response mapping template with Content-Type of application/json. In the integration response mapping template, include the LandingPage HTML code that references the APIs.
Answers
B.
Configure the integration request mapping template with Content-Type of application/json. In the integration request mapping template, include the LandingPage HMTL code that references the APIs. Configure the integration response mapping template with Content-Type of text/html and statusCode of 200.
B.
Configure the integration request mapping template with Content-Type of application/json. In the integration request mapping template, include the LandingPage HMTL code that references the APIs. Configure the integration response mapping template with Content-Type of text/html and statusCode of 200.
Answers
C.
Configure the integration request mapping template with Content-Type of application/json and statusCode of 200. Configure the integration response mapping template with Content-Type of text/html. In the integration response mapping template, include the LandingPage HTML code that references the APIs.
C.
Configure the integration request mapping template with Content-Type of application/json and statusCode of 200. Configure the integration response mapping template with Content-Type of text/html. In the integration response mapping template, include the LandingPage HTML code that references the APIs.
Answers
D.
Configure the integration request mapping template with Content-Type of text/html. In the integration request mapping template, include the LandingPage HTML code that references the APIs. Configure the integration response mapping template with Content-Type of application/json and statusCode of 200.
D.
Configure the integration request mapping template with Content-Type of text/html. In the integration request mapping template, include the LandingPage HTML code that references the APIs. Configure the integration response mapping template with Content-Type of application/json and statusCode of 200.
Answers
Suggested answer: B

A company has a serverless application that uses AWS Lambda functions and AWS Systems Manager parameters to store configuration dat a. The company moves the Lambda functions inside the VPC and into private subnets. The Lambda functions are now producing errors in their attempts to access Systems Manager parameters.

Which solution will allow the Lambda functions to access Systems Manager parameters inside the VPC?

A.
Configure security groups to allow access lo Systems Manager.
A.
Configure security groups to allow access lo Systems Manager.
Answers
B.
Create an interface VPC endpoint for Systems Manager.
B.
Create an interface VPC endpoint for Systems Manager.
Answers
C.
Use an internet gateway from inside the VPC.
C.
Use an internet gateway from inside the VPC.
Answers
D.
Create a gateway VPC endpoint for Systems Manager.
D.
Create a gateway VPC endpoint for Systems Manager.
Answers
Suggested answer: B

A company is hosting a workshop for external users and wants to share the reference documents with the external users for 7 days. The company stores the reference documents in an Amazon S3 bucket that the company owns. What is the MOST secure way to share the documents with the external users?

A.
Use S3 presigned URLs to share the documents with the external users. Set an expiration time of 7 days.
A.
Use S3 presigned URLs to share the documents with the external users. Set an expiration time of 7 days.
Answers
B.
Move the documents to an Amazon WorkDocs folder. Share the links of the WorkDocs folder with the external users.
B.
Move the documents to an Amazon WorkDocs folder. Share the links of the WorkDocs folder with the external users.
Answers
C.
Create temporary 1AM users that have read-only access to the S3 bucket. Share the access keys with the external users. Expire the credentials after 7 days.
C.
Create temporary 1AM users that have read-only access to the S3 bucket. Share the access keys with the external users. Expire the credentials after 7 days.
Answers
D.
Create a role that has read-only access to the S3 bucket. Share the Amazon Resource Name (ARN) of this role with the external users.
D.
Create a role that has read-only access to the S3 bucket. Share the Amazon Resource Name (ARN) of this role with the external users.
Answers
Suggested answer: A
Total 608 questions
Go to page: of 61