Quiz IT certification exam

Question 1

A company is building a micro services app1 cation that consists of many AWS Lambda functions. The development team wants to use AWS Serverless Application Model (AWS SAM) templates to automatically test the Lambda functions. The development team plans to test a small percentage of traffic that is directed to new updates before the team commits to a full deployment of the application.

Which combination of steps will meet these requirements in the MOST operationally efficient way?

(Select TWO.)

Become a Premium Member for full access

Unlock Premium Member

Accepted Answer

Enable gradual deployments through AWS SAM templates.

Accepted Answer

Set the deployment preference type to Canary10Percen130Minutes Use hooks to test the deployment.

Answer

Use AWS SAM CLI commands in AWS CodeDeploy lo invoke the Lambda functions lo lest the deployment

Answer

Declare the EventlnvokeConfig on the Lambda functions in the AWS SAM templates with OnSuccess and OnFailure configurations.

Answer

Set the deployment preference type to Linear10PefcentEvery10Minutes Use hooks to test the deployment.

Question 2

A company is using AWS CioudFormation to deploy a two-tier application. The application will use Amazon RDS as its backend database. The company wants a solution that will randomly generate the database password during deployment. The solution also must automatically rotate the database password without requiring changes to the application.What is the MOST operationally efficient solution that meets these requirements'?

Accepted Answer

Use an AWS Secrets Manager resource to generate and rotate the password.

Answer

Use an AWS Lambda function as a CloudFormation custom resource to generate and rotate the password.

Answer

Use an AWS Systems Manager Parameter Store resource with the SecureString data type to generate and rotate the password.

Answer

Use a cron daemon on the application s host to generate and rotate the password.

Question 3

A company's website runs on an Amazon EC2 instance and uses Auto Scaling to scale the environment during peak times. Website users across the world ate experiencing high latency flue lo sialic content on theEC2 instance. even during non-peak hours.When companion of steps mill resolves the latency issue? (Select TWO)

Accepted Answer

Create an Amazon Cloudfront distribution to cache the static content

Accepted Answer

Store the application's sialic content in Amazon S3

Answer

Double the Auto Scaling group's maximum number of servers

Answer

Host the application code on AWS lambda

Answer

Scale vertically by resizing the EC2 instances

Question 4

An online food company provides an Amazon API Gateway HTTP API 1o receive orders for partners.The API is integrated with an AWS Lambda function. The Lambda function stores the orders in an Amazon DynamoDB table.The company expects to onboard additional partners Some to me panthers require additional Lambda function to receive orders. The company has created an Amazon S3 bucket. The company needs 10 store all orders and updates m the S3 bucket for future analysis How can the developer ensure that an orders and updates are stored to Amazon S3 with the LEAST development effort?

Accepted Answer

Enable DynamoDB Streams on me DynamoOB table. Create a new lambda function. Associate the stream's Amazon Resource Name (ARN) with the Lambda Function Configure the Lambda function to write to the S3 bucket as records appear in the table's stream.

Answer

Create a new Lambda function and a new API Gateway API endpoint. Configure the new Lambda function to write to the S3 bucket. Modify the original Lambda function to post updates to the new API endpoint.

Answer

Use Amazon Kinesis Data Streams to create a new data stream. Modify the Lambda function to publish orders to the oats stream Configure in data stream to write to the S3 bucket.

Answer

Modify the Lambda function to punish to a new Amazon. Simple Lambda function receives orders. Subscribe a new Lambda function to the topic. Configure the new Lambda function to write to the S3 bucket as updates come through the topic.

Question 5

A company has an Amazon S3 bucket containing premier content that it intends to make available to only paid subscribers of its website. The S3 bucket currently has default permissions of all objects being private to prevent inadvertent exposure of the premier content to non-paying website visitors.How can the company Limit the ability to download a premier content file in the S3 Bucket to paid subscribers only?

Accepted Answer

Generate a pre-signed object URL for the premier content file when a pad subscriber requests a download.

Answer

Apply a bucket policy that allows anonymous users to download the content from the S3 bucket.

Answer

Add a Docket policy that requires multi-factor authentication for request to access the S3 bucket objects.

Answer

Enable server-side encryption on the S3 bucket for data protection against the non-paying website visitors.

Question 6

A developer is creating an AWS Lambda function that searches for Items from an Amazon DynamoDQ table that contains customer contact information. The DynamoDB table items have the customers as the partition and additional properties such as customer -type, name, and job_title.The Lambda function runs whenever a user types a new character into the customer_type text Input. The developer wants to search to return partial matches of all tne email_address property of a particular customer type. The developer does not want to recreate the DynamoDB table.What should the developer do to meet these requirements?

Accepted Answer

Add a global secondary index (GSI) to the DynamoDB table with customer-type input, as the partition key and email_address as the sort key. Perform a query operation on the GSI by using the begins with key condition expression with the email_address property.

Answer

Add a global secondary index (GSI) to the DynamoDB table with email_address as the partition key and customer_type as the sort key. Perform a query operation on the GSI by using the begine_with key condition expresses with the email. Address property.

Answer

Add a local secondary index (LSI) to the DynemoOB table with customer_type as the partition Key and email_address as the sort Key. Perform a quick operation on the LSI by using the begine_with Key condition expression with the email-address property.

Answer

Add a local secondary index (LSI) to the DynamoDB table with job-title as the partition key and email_address as the sort key. Perform a query operation on the LSI by using the begins_with key condition expression with the email_address property.

Question 7

A developer is building an application that uses AWS API Gateway APIs. AWS Lambda function, and AWS Dynamic DB tables. The developer uses the AWS Serverless Application Model (AWS SAM) to build and run serverless applications on AWS. Each time the developer pushes of changes for only to the Lambda functions, all the artifacts in the application are rebuilt.The developer wants to implement AWS SAM Accelerate by running a command to only redeploy the Lambda functions that have changed.Which command will meet these requirements?

Accepted Answer

sam sync -watch

Answer

sam deploy -force-upload

Answer

sam deploy -no-execute-changeset

Answer

sam package

Question 8

A developer is building an application that gives users the ability to view bank account from multiple sources in a single dashboard. The developer has automated the process to retrieve API credentials for these sources. The process invokes an AWS Lambda function that is associated with an AWS CloudFormation cotton resource.The developer wants a solution that will store the API credentials with minimal operational overhead.When solution will meet these requirements?

Accepted Answer

Use the AWS SDK ssm PutParameter operation in the Lambda function from the existing, custom resource to store the credentials as a parameter. Set the parameter value to reference the new credentials. Set ma parameter type to SecureString.

Answer

Add an AWS Secrets Manager GenerateSecretString resource to the CloudFormation template. Set the value to reference new credentials to the Cloudformation resource.

Answer

Add an AWS Systems Manager Parameter Store resource to the CloudFormation template. Set the CloudFormation resource value to reference the new credentials Set the resource NoEcho attribute to true.

Answer

Use the AWS SDK ssm PutParameter operation in the Lambda function from the existing custom resources to store the credentials as a parameter. Set the parameter value to reference the new credentials. Set the parameter NoEcho attribute to true.

Question 9

A developer is configuring an applications deployment environment in AWS CodePipeine. The application code is stored in a GitHub repository. The developer wants to ensure that the repository package's unit tests run in the new deployment environment. The deployment has already set the pipeline's source provider to GitHub and has specified the repository and branch to use in the deployment.When combination of steps should the developer take next to meet these requirements with the least the LEAST overhead' (Select TWO).

Accepted Answer

Create an AWS CodeBuid project. Add the repository package's build and test commands to the projects buildspec

Accepted Answer

Add a new stage to the pipeline alter the source stage. Add an action to the new stage. Speedy the newly created protect as the action provider. Specify the source artifact as the action's input artifact.

Answer

Create an AWS CodeCommt project. Add the repository package's build and test commands to the protects buildspec

Answer

Create an AWS CodeDeploy protect. Add the repository package's build and test commands to the project's buildspec

Answer

Add an action to the source stage. Specify the newly created project as the action provider. Specify the build attract as the actions input artifact.

Question 10

A developer is trying get data from an Amazon DynamoDB table called demoman-table. The developer configured the AWS CLI to use a specific IAM use's credentials and ran the following command.<img alt="Amazon DVA-C02 image Question 90 4456 09162024005638000000"   width="415" height="21" src="https://examgecko.com/getfile/e38f1575-0881-4776-803e-9342c68641e7">The command returned errors and no rows were returned.What is the MOST likely cause of these issues?

Accepted Answer

The IAM user needs an associated policy with read access to demoman-table

Answer

The command is incorrect; it should be rewritten to use put-item with a string argument

Answer

The developer needs to log a ticket with AWS Support to enable access to the demoman-table

Answer

Amazon DynamoOB cannot be accessed from the AWS CLI and needs to called via the REST API

Question 11

An organization is using Amazon CloudFront to ensure that its users experience low-latency access to its web application. The organization has identified a need to encrypt all traffic between users and CloudFront, and all traffic between CloudFront and the web application.How can these requirements be met? (Select TWO)

Accepted Answer

Set the Origin Protocol Policy to "HTTPS Only".

Accepted Answer

Set the Viewer Protocol Policy to "HTTPS Only" or Redirect HTTP 10 HTTPS"

Answer

Use AWS KMS t0 encrypt traffic between cloudFront and the web application.

Answer

Set the Origin's HTTP Port to 443.

Answer

Enable the CloudFront option Restrict Viewer Access.

Question 12

A company is developing an ecommerce application that uses Amazon API Gateway APIs. The application uses AWS Lambda as a backend. The company needs to test the code in a dedicated, monitored test environment before the company releases the code to the production environment.When solution will meet these requirements?

Accepted Answer

Use multiple stages in API Gateway. Create a Lambda function for each environment. Configure API Gateway stage variables to route traffic to the Lambda function in different environments.

Answer

Use a single stage in API Gateway. Create a Lambda function for each environment. Configure API clients to send a query parameter that indicates the endowment and the specific lambda function.

Answer

Use multiple stages in API Gateway. Create a single Lambda function for all environments. Add different code blocks for different environments in the Lambda function based on Lambda environments variables.

Answer

Use a single stage in API Gateway. Configure a API client to send a query parameter that indicated the environment. Add different code blocks tor afferent environments in the Lambda Junction to match the value of the query parameter.

Question 13

A developer is planning to migrate on-premises company data to Amazon S3. The data must be encrypted, and the encryption Keys must support automate annual rotation. The company must use AWS Key Management Service (AWS KMS) to encrypt the data.When type of keys should the developer use to meet these requirements?

Accepted Answer

Symmetric customer managed keys with key material that is generated by AWS

Answer

Amazon S3 managed keys

Answer

Asymmetric customer managed keys with key material that generated by AWS

Answer

Symmetric customer managed keys with imported key material

Question 14

A team of developed is using an AWS CodePipeline pipeline as a continuous integration and continuous delivery (CI/CD) mechanism for a web application. A developer has written unit tests to programmatically test the functionality of the application code. The unit tests produce a test report that shows the results of each individual check. The developer now wants to run these tests automatically during the CI/CD process.

Accepted Answer

Add a new stage to the pipeline. Use AWS CodeBuild at the provider. Add the new stage before the stage that deploys code revisions to the test environment. Write a buildspec that fails the CodeBuild stage it any test does not pass. Use the test reports feature of CodeBuild to integrate the report with the CodeBuild console. View the test results in codeBuild Resolve any issues.

Answer

Write a Git pre-commit hook that runs the test before every commit. Ensure that each developer who is working on the project has the pre-commit hook instated locally. Review the test report and resolve any issues before pushing changes to AWS CodeCommit.

Answer

Add a new stage to the pipeline. Use AWS CodeBuild as the provider. Add the new stage after the stage that deploys code revisions to the test environment. Write a buildspec that fails the CodeBuild stage if any test does not pass. Use the test reports feature of Codebuild to integrate the report with the CodoBuild console. View the test results in CodeBuild Resolve any issues.

Answer

Add a new stage to the pipeline. Use Jenkins as the provider. Configure CodePipeline to use Jenkins to run the unit tests. Write a Jenkinsfile that fails the stage if any test does not pass. Use the test report plugin for Jenkins to integrate the repot with the Jenkins dashboard. View the test results in Jenkins. Resolve any issues.

Question 15

A company has multiple Amazon VPC endpoints in the same VPC. A developer needs configure an Amazon S3 bucket policy so users can access an S3 bucket only by using these VPC endpoints.Which solution will meet these requirements?

Accepted Answer

Create a single S3 bucket policy that has multiple aws sourceVpce value in the StingNotEquale condition. Repeat for all the VPC endpoint IDs.

Answer

Create multiple S3 bucket polices by using each VPC endpoint ID that have the aws SourceVpce value in the StringNotEquals condition.

Answer

Create a single S3 bucket policy that has the aws SourceVpc value and in the StingNotEquals condition to use VPC ID.

Answer

Create a single S3 bucket policy that the multiple aws SourceVpce value and in the SringNotEquals condton to use vpce.

Question 16

A company uses a custom root certificate authority certificate chain (Root CA Cert) that is 10 KB in size generate SSL certificates for its on-premises HTTPS endpoints. One of the company's cloud based applications has hundreds of AWS Lambda functions that pull date from these endpoints. A developer updated the trust store of the Lambda execution environment to use the Root CA Cert when the Lambda execution environment is initialized. The developer bundled the Root CA Cert as a text file in the Lambdas deployment bundle.After 3 months of development the root CA Cert is no longer valid and must be updated. The developer needs a more efficient solution to update the Root CA Cert for all deployed Lambda functions. The solution must not include rebuilding or updating all Lambda functions that use the Root CA Cert. The solution must also work for all development, testing and production environment.Each environment is managed in a separate AWS account.When combination of steps Would the developer take to meet these environments MOST costeffectively?(Select TWO)

Accepted Answer

Store the Root CA Cert as a Secure Sting parameter in aws Systems Manager Parameter Store Create a resource-based policy. Add IAM users to allow access to the policy.

Accepted Answer

Refactor the Lambda code to load the Root CA Cert from the Root CA Cert's location. Modify the runtime trust store outside the Lambda function handler.

Answer

Store the Root CA Cert as a secret in AWS Secrets Manager. Create a resource-based policy. Add IAM users to allow access to the secret

Answer

Store the Root CA Cert in an Amazon S3 bucket. Create a resource- based policy to allow access to the bucket.

Answer

Refactor the Lambda code to load the Root CA Cert from the Root CA Certs location. Modify the runtime trust store inside the Lambda function handler.

Question 17

A developer maintains applications that store several secrets in AWS Secrets Manager. The applications use secrets that have changed over time. The developer needs to identify required secrets that are still in use. The developer does not want to cause any application downtime.What should the developer do to meet these requirements?

Accepted Answer

Create a secrets manager-secret-unused AWS Config managed rule. Create an Amazon EventBridge rule to Initiate notification when the AWS Config managed rule is met.

Answer

Configure an AWS CloudTrail log file delivery to an Amazon S3 bucket. Create an Amazon CloudWatch alarm for the GetSecretValue. Secrets Manager API operation requests

Answer

Deactivate the applications secrets and monitor the applications error logs temporarily.

Answer

Configure AWS X-Ray for the applications. Create a sampling rule lo match the GetSecretValue Secrets Manager API operation requests.

Question 18

A developer is writing a serverless application that requires an AWS Lambda function to be invoked every 10 minutes.What is an automated and serverless way to invoke the function?

Accepted Answer

Create an Amazon EventBridge rule that runs on a regular schedule to invoke the Lambda function.

Answer

Deploy an Amazon EC2 instance based on Linux, and edit its /etc/confab file by adding a command to periodically invoke the lambda function

Answer

Configure an environment variable named PERIOD for the Lambda function. Set the value to 600.

Answer

Create an Amazon Simple Notification Service (Amazon SNS) topic that has a subscription to the Lambda function with a 600-second timer.

Question 19

A developer accesses AWS CodeCommit over SSH. The SSH keys configured to access AWS CodeCommit are tied to a user with the following permissions: Amazon DVA-C02 image Question 99 4465 09162024005638000000

Amazon DVA-C02 image Question 99 4465 09162024005638000000

The developer needs to create/delete branchesWhich specific IAM permissions need to be added based on the principle of least privilege? Amazon DVA-C02 image Question 99 4465 09162024005638000000

Accepted Answer

Option A

Answer

Option B

Answer

Option C

Answer

Option D

Question 20

An application that is deployed to Amazon EC2 is using Amazon DynamoDB. The app cation calls the DynamoDB REST API Periodically the application receives a ProvisionedThroughputExceededException error when the application writes to a DynamoDB table.Which solutions will mitigate this error MOST cost-effectively^ (Select TWO)

Accepted Answer

Modify the application code to perform exponential back off when the error is received.

Accepted Answer

Modify the application to use the AWS SDKs for DynamoDB.

Answer

Increase the read and write throughput of the DynamoDB table.

Answer

Create a DynamoDB Accelerator (DAX) cluster for the DynamoDB table.

Answer

Create a second DynamoDB table Distribute the reads and writes between the two tables.

Question 21

When a developer tries to run an AWS Code Build project, it raises an error because the length of all environment variables exceeds the limit for the combined maximum of characters.What is the recommended solution?

Accepted Answer

Use AWS Systems Manager Parameter Store to store large numbers ot environment variables

Answer

Add the export LC-_ALL" on _ US, tuft" command to the pre _ build section to ensure POSIX Localization.

Answer

Use Amazon Cognate to store key-value pairs for large numbers of environment variables

Answer

Update the settings for the build project to use an Amazon S3 bucket for large numbers of environment variables

Question 22

A company is expanding the compatibility of its photo-snaring mobile app to hundreds of additional devices with unique screen dimensions and resolutions. Photos are stored in Amazon S3 in their original format and resolution. The company uses an Amazon CloudFront distribution to serve the photos The app includes the dimension and resolution of the display as GET parameters with every request.A developer needs to implement a solution that optimizes the photos that are served to each device to reduce load time and increase photo quality.Which solution will meet these requirements MOST cost-effective?

Accepted Answer

Create a Lambda@Edge function that optimizes the photos upon request and returns the photos as a response. In the same function store a copy of the processed photos on Amazon S3 for subsequent requests.

Answer

Use S3 Batch Operations to invoke an AWS Lambda function to create new variants of the photos with the required dimensions and resolutions. Create a dynamic CloudFront origin that automatically maps the request of each device to the corresponding photo variant.

Answer

Use S3 Batch Operations to invoke an AWS Lambda function to create new variants of the photos with the required dimensions and resolutions. Create a Lambda@Edge function to route requests to the corresponding photo vacant by using request headers.

Answer

Create a Lambda@Edge function that optimizes the photos upon request and returns the photos as a response. Change the CloudFront TTL cache policy to the maximum value possible.

Question 23

A developer has been asked to create an AWS Lambda function that is invoked any time updates are made to items in an Amazon DynamoDB table. The function has been created and appropriate permissions have been added to the Lambda execution role Amazon DynamoDB streams have been enabled for the table, but the function 15 still not being invoked.Which option would enable DynamoDB table updates to invoke the Lambda function?

Accepted Answer

Configure event source mapping for the Lambda function.

Answer

Change the StreamViewType parameter value to NEW_AND_OLOJMAGES for the DynamoDB table.

Answer

Map an Amazon Simple Notification Service (Amazon SNS) topic to the DynamoDB streams.

Answer

Increase the maximum runtime (timeout) setting of the Lambda function.

Question 24

A company is using Amazon OpenSearch Service to implement an audit monitoring system. A developer needs to create an AWS Cloudformation custom resource that is associated with an AWS Lambda function to configure the OpenSearch Service domain. The Lambda function must access the OpenSearch Service domain by using Open Search Service internal master user credentials.What is the MOST secure way to pass these credentials to the Lambdas function?

Accepted Answer

Use CloudFoimalion to create an AWS Secrets Manager Secret. Use a CloudFormation dynamic reference to retrieve the secret's value for the OpenSearch Service domain's MasterUserOptions. Create an 1AM role that has the secrets manager. GetSecretvalue permission. Assign the role to the Lambda Function Store the secrets name as the Lambda function's environment variable. Resole the secret's value at runtime.

Answer

Use a CloudFormation parameter to pass the master user credentials at deployment to the OpenSearch Service domain's MasterUserOptions and the Lambda function's environment variable. Set the No Echo attenuate to true.

Answer

Use a CloudFormation parameter to pass the master user credentials at deployment to the OpenSearch Service domain's MasterUserOptions and to create a parameter. In AWS Systems Manager Parameter Store. Set the No Echo attribute to true. Create an 1AM role that has the ssm GetParameter permission. Assign me role to the Lambda function. Store me parameter name as the Lambda function's environment variable. Resolve the parameter's value at runtime.

Answer

Use a CloudFormation parameter to pass the master uses credentials at deployment to the OpenSearch Service domain's MasterUserOptions and the Lambda function's environment varleWe Encrypt the parameters value by using the AWS Key Management Service (AWS KMS) encrypt command.

Question 25

An application runs on multiple EC2 instances behind an ELB.Where is the session data best written so that it can be served reliably across multiple requests?

Accepted Answer

Write data to Amazon ElastiCache

Answer

Write data to Amazon Elastic Block Store

Answer

Write data to Amazon EC2 instance Store

Answer

Wide data to the root filesystem

Question 26

An ecommerce application is running behind an Application Load Balancer. A developer observes some unexpected load on the application during non-peak hours. The developer wants to analyze patterns for the client IP addresses that use the application. Which HTTP header should the developer use for this analysis?

Accepted Answer

The X-Forwarded-For header

Answer

The X-Forwarded-Proto header

Answer

The X-F Forwarded-Host header

Answer

The X-Forwarded-Port header

Question 27

A developer migrated a legacy application to an AWS Lambda function. The function uses a thirdparty service to pull data with a series of API calls at the end of each month. The function than processes the data to generate the monthly reports. The function has Been working with no issues so far.The third-party service recently issued a restriction to allow a feed number to API calls each minute and each day. If the API calls exceed the limit tor each minute or each day, then the service will produce errors. The API also provides the minute limit and daily limit in the response header. This restriction might extend the overall process to multiple days because the process is consuming more API calls than the available limit.What is the MOST operationally efficient way to refactor the server less application to accommodate this change?

Accepted Answer

Use an AWS Step Functions State machine to monitor API failures. Use the Wait state to delay calling the Lambda function.

Answer

Use an Amazon Simple Queue Service (Amazon SQS) queue to hold the API calls. Configure the Lambda function to poll the queue within the API threshold limits.

Answer

Use an Amazon CloudWatch Logs metric to count the number of API calls. Configure an Amazon CloudWatch alarm flat slops the currently running instance of the Lambda function when the metric exceeds the API threshold limits.

Answer

Use Amazon Kinesis Data Firehose to batch me API calls and deliver them to an Amazon S3 bucket win an event notification to invoke the Lambda function.

Question 28

A developer must analyze performance issues with production-distributed applications written as AWS Lambda functions. These distributed Lambda applications invoke other components that make up me applications. How should the developer identify and troubleshoot the root cause of the performance issues in production?

Accepted Answer

Use AWS X-Ray. then examine the segments and errors.

Answer

Add logging statements to the Lambda functions. then use Amazon CloudWatch to view the logs.

Answer

Use AWS CloudTrail and then examine the logs.

Answer

Run Amazon inspector agents and then analyze performance.

Question 29

A developer wants to deploy a new version of an AWS Elastic Beanstalk application. During deployment the application must maintain full capacity and avoid service interruption. Additionally, the developer must minimize the cost of additional resources that support the deployment.Which deployment method should the developer use to meet these requirements?

Accepted Answer

Rolling with additional batch

Answer

All at once

Answer

Bluegreen

Answer

Immutable

Question 30

A developer has observed an increase in bugs in the AWS Lambda functions that a development team has deployed in its Node is application. To minimize these bugs, the developer wants to impendent automated testing of Lambda functions in an environment that Closely simulates the Lambda environment.The developer needs to give other developers the ability to run the tests locally. The developer also needs to integrate the tests into the team's continuous integration and continuous delivery (Ct/CO) pipeline before the AWS Cloud Development Kit (AWS COK) deployment.Which solution will meet these requirements?

Accepted Answer

Install the AWS Serverless Application Model (AWS SAW) CLI tool Use the Sam local generateevent command to generate sample events for me automated tests. Create automated test scripts that use the Sam local invoke command to invoke the Lambda functions. Check the responseDocument the test scripts tor the other developers on the team Update the CI/CD pipeline to run the test scripts.

Answer

Create sample events based on the Lambda documentation. Create automated test scripts that use the cdk local invoke command to invoke the Lambda functions. Check the response Document the test scripts for the other developers on the team Update the CI/CD pipeline to run the test scripts.

Answer

Install a unit testing framework that reproduces the Lambda execution environment. Create sample events based on the Lambda Documentation Invoke the handler function by using a unit testing framework. Check the response Document how to run the unit testing framework for the other developers on the team. Update the OCD pipeline to run the unit testing framework.

Answer

Create sample events based on the Lambda documentation. Create a Docker container from the Node is base image to invoke the Lambda functions. Check the response Document how to run the Docker container for the more developers on the team update the CI/CD pipeline to run the Docker container.

Question 31

A developer is troubleshooting an application mat uses Amazon DynamoDB in the uswest-2 Region.The application is deployed to an Amazon EC2 instance. The application requires read-only permissions to a table that is named Cars The EC2 instance has an attached IAM role that contains the following IAM policy.<img alt="Amazon DVA-C02 image Question 111 4477 09162024005638000000"   width="536" height="229" src="https://examgecko.com/getfile/77a5c6cc-cae5-4e5d-9ab3-b13ba875313b">When the application tries to read from the Cars table, an Access Denied error occurs.How can the developer resolve this error?

Accepted Answer

Create a trust policy that specifies the EC2 service principal. Associate the role with the policy.

Answer

Modify the IAM policy resource to be "arn aws dynamo* us-west-2 account-id table/*"

Answer

Modify the IAM policy to include the dynamodb * action

Answer

Create a trust relationship between the role and dynamodb Amazonas com.

Question 32

A developer needs to store configuration variables for an application. The developer needs to set an expiration date and time for me configuration. The developer wants to receive notifications. Before the configuration expires. Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Create an advanced parameter in AWS Systems Manager Parameter Store Set Expiration and Expiration Notification policy types.

Answer

Create a standard parameter in AWS Systems Manager Parameter Store Set Expiation and Expiration Notification policy types.

Answer

Create a standard parameter in AWS Systems Manager Parameter Store Create an AWS Lambda function to expire the configuration and to send Amazon Simple Notification Service (Amazon SNS) notifications.

Answer

Create an advanced parameter in AWS Systems Manager Parameter Store Create an Amazon EC2 instance with a corn job to expire the configuration and to send notifications.

Question 33

When using the AWS Encryption SDK how does the developer keep track of the data encryption keys used to encrypt data?

Accepted Answer

The SDK encrypts me data encryption key and stores it (encrypted) as part of the resumed ophertext.

Answer

The developer must manually keep Hack of the data encryption keys used for each data object.

Answer

The SDK stores the data encryption keys automaticity in Amazon S3.

Answer

The data encryption key is stored m the user data for the EC2 instance.

Question 34

An application that runs on AWS Lambda requires access to specific highly confidential objects in anAmazon S3 bucket. In accordance with the principle of least privilege a company grants access to the S3 bucket by using only temporary credentials.How can a developer configure access to me S3 bucket in the MOST secure way?

Accepted Answer

Create a Lambda function execution role Attach a policy to the rote that grants access to specific objects in the S3 bucket.

Answer

Hardcode the credentials that are required to access the S3 objects in the application code. Use the credentials to access me required S3 objects.

Answer

Create a secret access key and access key ID with permission to access the S3 bucket. Store the key and key ID in AWS Secrets Manager. Configure the application to retrieve the Secrets Manager secret and use the credentials to access me S3 objects.

Answer

Create a secret access key and access key ID with permission to access the S3 bucket Store the key and key ID as environment variables m Lambda. Use the environment variables to access the required S3 objects.

Question 35

A developer has code that is stored in an Amazon S3 bucket. The code must be deployed as an AWS Lambda function across multiple accounts in the same AWS Region as the S3 bucket an AWS CloudPormation template that runs for each account will deploy the Lambda function.What is the MOST secure way to allow CloudFormaton to access the Lambda Code in the S3 bucket?

Accepted Answer

Grant the CloudFormation service row the S3 GetObfect permission. Add a Bucket policy to Amazon S3 with the principal of "'"

Answer

Grant the CloudFormation service role the S3 ListBucket and GetObject permissions. Add a bucket policy to Amazon S3 with the principal of "AWS" (account numbers)

Answer

Use a service-based link to grant the Lambda function the S3 ListBucket and GetObject permissions by explicitly adding the S3 bucket's account number in the resource.

Answer

Use a service-based link to grant the Lambda function the S3 GetObject permission Add a resource of "** to allow access to the S3 bucket.

Question 36

A developer warns to add request validation to a production environment Amazon API Gateway API. The developer needs to test the changes before the API is deployed to the production environment. For the lest the developer will send test requests to the API through a testing tool.Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Clone the exiting API Modify the new API lo add request validation. Perform the tests Modify the existing API to add request validation Deploy the existing API to production.

Answer

Export the existing API to an OpenAPI file. Create a new API Import the OpenAPI file Modify the new API to add request validation. Perform the tests Modify the existing API to add request validation. Deploy the existing API to production.

Answer

Modify the existing API to add request validation. Deploy the updated API to a new API Gateway stage Perform the tests Deploy the updated API to the API Gateway production stage.

Answer

Create a new API Add the necessary resources and methods including new request validation. Perform the tests Modify the existing API to add request validation. Deploy the existing API to production.

Question 37

A developer needs to deploy an application running on AWS Fargate using Amazon ECS The application has environment variables that must be passed to a container for the application to initialize.How should the environment variables be passed to the container?

Accepted Answer

Define an array that includes the environment variables under the environment parameter within the task definition.

Answer

Define an array that includes the environment variables under the environment parameter within the service definition.

Answer

Define an array that includes the environment variables under the entryPoint parameter within the task definition.

Answer

Define an array that includes the environment variables under the entryPoint parameter within the service definition.

Question 38

A developer is storing sensitive data generated by an application in Amazon S3. The developer wants to encrypt the data at rest. A company policy requires an audit trail of when the AWS Key Management Service (AWS KMS) key was used and by whom.Which encryption option will meet these requirements?

Accepted Answer

Server-side encryption with AWS KMS managed keys (SSE-KMS}

Answer

Server-side encryption with Amazon S3 managed keys (SSE-S3)

Answer

Server-side encryption with customer-provided keys (SSE-C)

Answer

Server-side encryption with self-managed keys

Question 39

A company has an ecommerce application. To track product reviews, the company's development team uses an Amazon DynamoDB table.Every record includes the following• A Review ID a 16-digrt universally unique identifier (UUID)• A Product ID and User ID 16 digit UUlDs that reference other tables• A Product Rating on a scale of 1-5• An optional comment from the userThe table partition key is the Review ID. The most performed query against the table is to find the 10 reviews with the highest rating for a given product.Which index will provide the FASTEST response for this query"?

Accepted Answer

A global secondary index (GSl) with Product ID as the partition key and Product Rating as the sort key

Answer

A global secondary index (GSl) with Product ID as the partition key and Review ID as the sort key

Answer

A local secondary index (LSI) with Product ID as the partition key and Product Rating as the sort key

Answer

A local secondary index (LSI) with Review ID as the partition key and Product ID as the sort key

Question 40

A company needs to distribute firmware updates to its customers around the world.Which service will allow easy and secure control of the access to the downloads at the lowest cost?

Accepted Answer

Use Amazon CloudFront with signed URLs for Amazon S3.

Answer

Create a dedicated Amazon CloudFront Distribution for each customer.

Answer

Use Amazon CloudFront with AWS Lambda@Edge.

Answer

Use Amazon API Gateway and AWS Lambda to control access to an S3 bucket.

Amazon DVA-C02 Practice Test 3

Amazon DVA-C02 Practice Tests