ExamGecko
Login
Home / Amazon / DVA-C01 / List of questions
Ask Question

Amazon DVA-C01 Practice Test - Questions Answers, Page 16

List of questions

Question 151

Report
Export
Collapse

A Developer wants to find a list of items in a global secondary index from an Amazon DynamoDB table. Which DynamoDB API call can the Developer use in order to consume the LEAST number of read capacity units?

Scan operation using eventually-consistent reads
Scan operation using eventually-consistent reads
Query operation using strongly-consistent reads
Query operation using strongly-consistent reads
Query operation using eventually-consistent reads
Query operation using eventually-consistent reads
Scan operation using strongly-consistent reads
Scan operation using strongly-consistent reads
Suggested answer: C

Explanation:

https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/bp-query-scan.html

asked 16/09/2024
Arvind Prasad S
41 questions

Question 152

Report
Export
Collapse

An AWS Lambda function generates a 3MB JSON file and then uploads it to an Amazon S3 bucket daily. The file contains sensitive information, so the Developer must ensure that it is encrypted before uploading to the bucket. Which of the following modifications should the Developer make to ensure that the data is encrypted before uploading it to the bucket?

Use the default AWS KMS customer master key for S3 in the Lambda function code.
Use the default AWS KMS customer master key for S3 in the Lambda function code.
Use the S3 managed key and call the GenerateDataKey API to encrypt the file.
Use the S3 managed key and call the GenerateDataKey API to encrypt the file.
Use the GenerateDateKey API, then use that data key to encrypt the file in the Lambda function code.
Use the GenerateDateKey API, then use that data key to encrypt the file in the Lambda function code.
Use a custom KMS customer master key created for S3 in the Lambda function code.
Use a custom KMS customer master key created for S3 in the Lambda function code.
Suggested answer: C
asked 16/09/2024
Cesar Paredes
33 questions

Question 153

Report
Export
Collapse

A company needs to secure its existing website running behind an Elastic Load Balancer. The website’s Amazon EC2 instances are CPU-constrained. What should be done to secure the website while not increasing the CPU load on the EC2 web servers? (Select TWO.)

Configure an Elastic Load Balancer with SSL pass-through.
Configure an Elastic Load Balancer with SSL pass-through.
Configure SSL certificates on an Elastic Load Balancer.
Configure SSL certificates on an Elastic Load Balancer.
Configure an Elastic Load Balancer with a Loadable Storage System.
Configure an Elastic Load Balancer with a Loadable Storage System.
Install SSL certificates on the EC2 instances.
Install SSL certificates on the EC2 instances.
Configure an Elastic Load Balancer with SSL termination.
Configure an Elastic Load Balancer with SSL termination.
Suggested answer: B, E
asked 16/09/2024
Trung Phan
43 questions

Question 154

Report
Export
Collapse

How should custom libraries be utilized in AWS Lambda?

Host the library on Amazon S3 and reference to it from the Lambda function.
Host the library on Amazon S3 and reference to it from the Lambda function.
Install the library locally and upload a ZIP file of the Lambda function.
Install the library locally and upload a ZIP file of the Lambda function.
Import the necessary Lambda blueprint when creating the function.
Import the necessary Lambda blueprint when creating the function.
Modify the function runtime to include the necessary library.
Modify the function runtime to include the necessary library.
Suggested answer: D

Explanation:

Explanation:

Reference: https://docs.aws.amazon.com/lambda/latest/dg/env_variables.html

asked 16/09/2024
Sathish M
48 questions

Question 155

Report
Export
Collapse

In a move toward using microservices, a company’s Management team has asked all Development teams to build their services so that API requests depend only on that service’s data store. One team is building a Payments service which has its own database; the service needs data that originates in the Accounts database. Both are using Amazon DynamoDB. What approach will result in the simplest, decoupled, and reliable method to get near-real time updates from the Accounts database?

Use Amazon Glue to perform frequent ETL updates from the Accounts database to the Payments database.
Use Amazon Glue to perform frequent ETL updates from the Accounts database to the Payments database.
Use Amazon ElastiCache in Payments, with the cache updated by triggers in the Accounts database.
Use Amazon ElastiCache in Payments, with the cache updated by triggers in the Accounts database.
Use Amazon Kinesis Data Firehouse to deliver all changes from the Accounts database to the Payments database.
Use Amazon Kinesis Data Firehouse to deliver all changes from the Accounts database to the Payments database.
Use Amazon DynamoDB Streams to deliver all changes from the Accounts database to the Payments database.
Use Amazon DynamoDB Streams to deliver all changes from the Accounts database to the Payments database.
Suggested answer: D

Explanation:

Explanation:

Reference: https://aws.amazon.com/blogs/database/how-to-perform-ordered-data-replicationbetweenapplications-by-using-amazon-dynamodb-streams/

asked 16/09/2024
Firasat Siddiqui
43 questions

Question 156

Report
Export
Collapse

A Developer is designing a fault-tolerant environment where client sessions will be saved.

How can the Developer ensure that no sessions are lost if an Amazon EC2 instance fails?

Use sticky sessions with an Elastic Load Balancer target group.
Use sticky sessions with an Elastic Load Balancer target group.
Use Amazon SQS to save session data.
Use Amazon SQS to save session data.
Use Amazon DynamoDB to perform scalable session hadling.
Use Amazon DynamoDB to perform scalable session hadling.
Use Elastic Load Balancer connection draining to stop sending requests to failing instances.
Use Elastic Load Balancer connection draining to stop sending requests to failing instances.
Suggested answer: C
asked 16/09/2024
Maryna Zarytska
30 questions

Question 157

Report
Export
Collapse

A Developer is writing an imaging micro service on AWS Lambd a. The service is dependent on several libraries that are not available in the Lambda runtime environment. Which strategy should the Developer follow to create the Lambda deployment package?

Create a ZIP file with the source code and all dependent libraries.
Create a ZIP file with the source code and all dependent libraries.
Create a ZIP file with the source code and a script that installs the dependent libraries at runtime.
Create a ZIP file with the source code and a script that installs the dependent libraries at runtime.
Create a ZIP file with the source code. Stage the dependent libraries on an Amazon S3 bucket indicated by the Lambda environment variable LD_LIBRARY_PATH
Create a ZIP file with the source code. Stage the dependent libraries on an Amazon S3 bucket indicated by the Lambda environment variable LD_LIBRARY_PATH
Create a ZIP file with the source code and a buildspec.yaml file that installs the dependent libraries on AWS Lambda.
Create a ZIP file with the source code and a buildspec.yaml file that installs the dependent libraries on AWS Lambda.
Suggested answer: B
asked 16/09/2024
GLAUCIA C N SILVA
41 questions

Question 158

Report
Export
Collapse

A Developer is writing a serverless application that requires that an AWS Lambda function be invoked every 10 minutes. What is an automated and serverless way to trigger the function?

Deploy an Amazon EC2 instance based on Linux, and edit its /etc/crontab file by adding a command to periodically invoke the Lambda function.
Deploy an Amazon EC2 instance based on Linux, and edit its /etc/crontab file by adding a command to periodically invoke the Lambda function.
Configure an environment variable named PERIOD for the Lambda function. Set the value to 600.
Configure an environment variable named PERIOD for the Lambda function. Set the value to 600.
Create an Amazon CloudWatch Events rule that triggers on a regular schedule to invoke the Lambda function.
Create an Amazon CloudWatch Events rule that triggers on a regular schedule to invoke the Lambda function.
Create an Amazon SNS topic that has a subscription to the Lambda function with a 600-second timer.
Create an Amazon SNS topic that has a subscription to the Lambda function with a 600-second timer.
Suggested answer: C

Explanation:

Explanation:

Reference: https://aws.amazon.com/blogs/architecture/a-serverless-solution-for-invoking-awslambda-at-asub-minute-frequency/

asked 16/09/2024
DAVIDE MCGARR
37 questions

Question 159

Report
Export
Collapse

company needs a fully-managed source control service that will work in AWS. The service must ensure that revision control synchronizes multiple distributed repositories by exchanging sets of changes peer-to-peer. All users need to work productively even when not connected to a network.

Which source control service should be used?

Subversion
Subversion
AWS CodeBuild
AWS CodeBuild
AWS CodeCommit
AWS CodeCommit
AWS CodeStar
AWS CodeStar
Suggested answer: C
asked 16/09/2024
Michał Wojciechowski
30 questions

Question 160

Report
Export
Collapse

An application running on Amazon EC2 instances must access objects within an Amaon S3 busket that are encrypted using server-side encryption using AWS KMS encryption keys (SSE-KMS). The application must have access to the customer master key (CMK) to decrypt the objects.

Which combination of steps will grant the application access? (Select TWO.)

Write an S3 bucket policy that grants the bucket access to the key.
Write an S3 bucket policy that grants the bucket access to the key.
Grant access to the key in the IAM EC2 role attached to the application’s EC2 instances.
Grant access to the key in the IAM EC2 role attached to the application’s EC2 instances.
Write a key policy that enables IAM policies to grant access to the key.
Write a key policy that enables IAM policies to grant access to the key.
Grant access to the key in the S3 bucket’s ACL
Grant access to the key in the S3 bucket’s ACL
Create a Systems Manager parameter that exposes the KMS key to the EC2 instances.
Create a Systems Manager parameter that exposes the KMS key to the EC2 instances.
Suggested answer: B, C

Explanation:

https://aws.amazon.com/premiumsupport/knowledge-center/decrypt-kms-encrypted-objects-s3/IAM role needs access to the keys to decrypt the object and key policies must allow role access to the key. Key policies are the primary way to control access to customer master keys (CMKs) in AWS KMS.

You need the permission to decrypt the AWS KMS key. When a user sends a GET request, Amazon S3 checks if the AWS Identity and Access Management (IAM) user or role that sent the request is authorized to decrypt the key associated with the object. If the IAM user or role belongs to the same AWS account as the key, then the permission to decrypt must be granted on the AWS KMS key’s policy.

asked 16/09/2024
Mike Werts
32 questions
Total 608 questions
Go to page: of 61
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

A company wants to implement a continuous integration for its workloads on AWS. The company wants to trigger unit test in its pipeline for commits-on its code repository, and wants to be notified of failure events in the pipeline. How can these requirements be met?
An application stores payroll information nightly in DynamoDB for a large number of employees across hundreds of offices. Item attributes consist of individual name, office identifier, and cumulative daily hours. Managers run reports for ranges of names working in their office. One query is. "Return all Items in this office for names starting with A through E". Which table configuration will result in the lowest impact on provisioned throughput for this query?
A company has an application that uses Amazon Cognito user pools as an identity provider. The company must secure access to user records. The company I up multi-factor authentication (MFA). The company also wants to send a login activity notification by email every time a user logs in. What is the MOST operationally efficient solution that meets this requirement?
A development team consists of 10 team members. Similar to a home directory for each team member the manager wants to grant access to user-specific folders in an Amazon S3 bucket. For the team member with the username “TeamMemberX”, the snippet of the IAM policy looks like this: Instead of creating distinct policies for each team member, what approach can be used to make this policy snippet generic for all team members?
During non-peak hours, a Developer wants to minimize the execution time of a full Amazon DynamoDB table scan without affecting normal workloads. The workloads average half of the strongly consistent read capacity units during non-peak hours. How would the Developer optimize this scan?
Which of the following are correct statements with policy evaluation logic in AWS Identity and Access Management? Choose 2 answers
You are writing to a DynamoDB table and receive the following exception:" ProvisionedThroughputExceededException". though according to your Cloudwatch metrics for the table, you are not exceeding your provisioned throughput. What could be an explanation for this?
A Developer is investigating an issue whereby certain requests are passing through an Amazon API Gateway endpoint /MyAPI, but the requests do not reach the AWS Lambda function backing /MyAPI. The Developer found that a second Lambda function sometimes runs at maximum concurrency allowed for the given AWS account. How can the Developer address this issue?
A developer runs an application that uses an Amazon API Gateway REST API. The developer needs to implement a solution to proactively monitor the health of both API responses and latencies in case a deployment causes a service disruption despite passing deployment pipeline tests. The solution also must check for endpoint vulnerability and unauthorized changes to APIs. URLs, and website content. Which solution will meet these requirements?
A developer has written the following 1AM policy to provide access to an Amazon S3 bucket: Which access does the policy allow regarding the s3:GetObject and s3:PutObject actions'?