Pass4sure Amazon DVA-C02 Dumps

Sample Questions

DVA-C02 Sample Question 1

A developer is migrating a containerized application from an on-premises environment to an Amazon ECS cluster. In the on-premises environment, the container uses a Docker file to store the application. Service dependency configurations such as databases, caches, and storage volumes are stored in a docker-compose.yml file. Both files are located at the top level of the code base that the developer needs to containerize. When the developer deploys the code to Amazon ECS, the instructions from the Docker file are carried out. However, none of the configurations from dockercompose. yml are applied. The developer needs to resolve the error and ensure the configurations are applied.

A. Store the file path for the docker-compose.yml file as a Docker label. Add the label to the ECS cluster's container details.
 B. Add the details from the docker-compose.yml file to an ECS task definition. Associate the task with the ECS cluster. 
C. Create a namespace in the ECS cluster. Associate the docker-compose.yml file to the namespace. 
D. Update the service type of the ECS cluster to REPLICA, and redeploy the stack. 

ANSWER : B

DVA-C02 Sample Question 2

A developer accesses AWS CodeCommit over SSH. The SSH keys configured to access AWS CodeCommit are tied to a user with the following permissions: The developer needs to create/delete branches Which specific IAM permissions need to be added based on the principle of least privilege?

A. Option A
B. Option B
C. Option C
D. Option D

ANSWER : A

DVA-C02 Sample Question 3

A developer created an AWS Lambda function that accesses resources in a VPC. The Lambda function polls an Amazon Simple Queue Service (Amazon SOS) queue for new messages through a VPC endpoint. Then the function calculates a rolling average of the numeric values that are contained in the messages. After initial tests of the Lambda function, the developer found that the value of the rolling average that the function returned was not accurate. How can the developer ensure that the function calculates an accurate rolling average?

A. Set the function's reserved concurrency to 1. Calculate the rolling average in the function. Store the calculated rolling average in Amazon ElastiCache.
B. Modify the function to store the values in Amazon ElastiCache. When the function initializes, use the previous values from the cache to calculate the rolling average.
C. Set the function's provisioned concurrency to 1. Calculate the rolling average in the function. Store the calculated rolling average in Amazon ElastiCache.
D. Modify the function to store the values in the function's layers. When the function initializes, use the previously stored values to calculate the rolling average.

ANSWER : B

DVA-C02 Sample Question 4

A developer is building an application that uses Amazon DynamoDB. The developer wants to retrieve multiple specific items from the database with a single API call. Which DynamoDB API call will meet these requirements with the MINIMUM impact on the database?

A. BatchGetltem
B. Getltem
C. Scan
D. Query

ANSWER : A

DVA-C02 Sample Question 5

A company hosts a client-side web application for one of its subsidiaries on Amazon S3. The web application can be accessed through Amazon CloudFront from https://www.example.com. After a successful rollout, the company wants to host three more client-side web applications for its remaining subsidiaries on three separate S3 buckets. To achieve this goal, a developer moves all the common JavaScript files and web fonts to a central S3 bucket that serves the web applications. However, during testing, the developer notices that the browser blocks the JavaScript files and web fonts. What should the developer do to prevent the browser from blocking the JavaScript files and web fonts?

A. Create four access points that allow access to the central S3 bucket. Assign an access point to each web application bucket.
B. Create a bucket policy that allows access to the central S3 bucket. Attach the bucket policy to the central S3 bucket.
C. Create a cross-origin resource sharing (CORS) configuration that allows access to the central S3 bucket. Add the CORS configuration to the central S3 bucket.
D. Create a Content-MD5 header that provides a message integrity check for the central S3 bucket. Insert the Content-MD5 header for each web application request.

ANSWER : C

DVA-C02 Sample Question 6

A developer received the following error message during an AWS CloudFormation deployment: Which action should the developer take to resolve this error?

A. Contact AWS Support to report an issue with the Auto Scaling Groups (ASG> service. 
B. Add a DependsOn attribute to the ASGInstanceRole12345678 resource in the CloudFormation template. Then delete the stack. 
C. Modify the CloudFormation template to retain the ASGInstanceRolet 2345678 resource. Then manually delete the resource after deployment. 
D. Add a force parameter when calling CloudFormation with the role-am of ASGInstanceRole12345678. 

ANSWER : C

DVA-C02 Sample Question 7

In a move toward using microservices, a company's management team has asked all development teams to build their services so that API requests depend only on that service's data store. One team is building a Payments service which has its own database; the service needs data that originates in the Accounts database. Both are using Amazon DynamoDB. What approach will result in the simplest, decoupled, and reliable method to get near-real time updates from the Accounts database?

A. Use AWS Glue to perform frequent ETL updates from the Accounts database to the Payments database. 
B. Use Amazon ElastiCache in Payments, with the cache updated by triggers in the Accounts database. 
C. Use Amazon Data Firehose to deliver all changes from the Accounts database to the Payments database. 
D. Use Amazon DynamoDB Streams to deliver all changes from the Accounts database to the Payments database. 

ANSWER : D

DVA-C02 Sample Question 8

A developer is building an application that includes an AWS Lambda function that is written in .NET Core. The Lambda function's code needs to interact with Amazon DynamoDB tables and Amazon S3 buckets. The developer must minimize the Lambda function's deployment time and invocation duration. Which solution will meet these requirements?

A. Increase the Lambda function's memory.
B. Include the entire AWS SDK for .NET in the Lambda function's deployment package.
C. Include only the AWS SDK for .NET modules for DynamoDB and Amazon S3 in the Lambda function's deployment package.
D. Configure the Lambda function to download the AWS SDK for .NET from an S3 bucket at runtime.

ANSWER : C

DVA-C02 Sample Question 9

A company is developing a serverless application that requires storage of sensitive API keys as environment variables for various services. The application requires the automatic rotation of the encryption keys every year. Which solution will meet these requirements with no development effort?

A. Encrypt the environment variables by using AWS Secrets Manager. Set up automatic rotation in Secrets Manager. 
B. Encrypt the environment variables by using AWS Key Management Service (AWS KMS) customer managed keys. Enable automatic key rotation. 
C. Encrypt the environment variables by using AWS Key Management Service (AWS KMS) AWS managed keys. Configure a custom AWS Lambda function to automate key rotation. 
D. Encrypt the environment variables by using AWS Systems Manager Parameter Store. Set up automatic rotation in Parameter Store. 

ANSWER : A

DVA-C02 Sample Question 10

A developer is receiving an intermittent ProvisionedThroughputExceededException error from an application that is based on Amazon DynamoDB. According to the Amazon CloudWatch metrics for the table, the application is not exceeding the provisioned throughput. What could be the cause of the issue?

A. The DynamoDB table storage size is larger than the provisioned size.
B. The application is exceeding capacity on a particular hash key.
C. The DynamoDB table is exceeding the provisioned scaling operations.
D. The application is exceeding capacity on a particular sort key.

ANSWER : B

DVA-C02 Sample Question 11

A company has a serverless application that uses Amazon API Gateway and AWS Lambda functions to expose a RESTful API. The company uses a continuous integration and continuous delivery (CI/CD) workflow to deploy the application to multiple environments. The company wants to implement automated integration tests after deployment. A developer needs to set up the necessary infrastructure and processes to automate the deployment and integration tests for the serverless application.

A. Configure API Gateway stages to represent each application environment. Use AWS SAM templates to manage the infrastructure for the Lambda functions and API resources. Use AWS CodeBuild to implement automated deployment tests to validate the deployments in each stage. 
B. Configure API Gateway stages to represent each application environment. Use AWS CloudFormation to manage the infrastructure for the Lambda functions and API resources. Use AWS CodeBuild to implement automated deployment tests to validate the deployments in each stage. 
C. Use AWS CodePipeline to create a CI/CD pipeline. Configure API Gateway stages to represent each application environment. Use AWS CloudFormation templates to manage the infrastructure for the Lambda functions and API resources. Use AWS CodeBuild to implement automated deployment tests to validate the deployments in each stage. 
D. Use AWS CloudFormation to create and deploy the application infrastructure in each application environment. Use the AWS CLI to invoke Lambda functions to perform deployment tests after each deployment. 

ANSWER : C

DVA-C02 Sample Question 12

A company has a large amount of data in an Amazon DynamoDB table. A large batch of data is appended to the table once each day. The company wants a solution that will make all the existing and future data in DynamoDB available for analytics on a long-term basis. Which solution meets these requirements with the LEAST operational overhead?

A. Configure DynamoDB incremental exports to Amazon S3. 
B. Configure Amazon DynamoDB Streams to write records to Amazon S3. 
C. Configure Amazon EMR to copy DynamoDB data to Amazon S3. 
D. Configure Amazon EMR to copy DynamoDB data to Hadoop Distributed File System (HDFS). 

ANSWER : A

DVA-C02 Sample Question 13

A developer is setting up infrastructure by using AWS Cloud Formation. If an error occurs when the resources described in the CloudFormation template are provisioned, successfully provisioned resources must be preserved. The developer must provision and update the CloudFormation stack by using the AWS CLI. Which solution will meet these requirements?

A. Add an --enable-terminal ion-protection command line option to the create-stack command and the update-stack command. 
B. Add a -disable-roll back command line option to the create-stack command and the update-stack command 
C. Add a —parameters ParameterKey=P reserve Resources. ParameterVaIue=True command line option to the create-stack command and the update-stack command. 
D. Add a -tags Key=PreserveResources.VaIue=True command line option to the createstack command and the update-stack command. 

ANSWER : B

DVA-C02 Sample Question 14

A banking company is building an application for users to create accounts, view balances, and review recent transactions. The company integrated an Amazon API Gateway REST API with AWS Lambda functions. The company wants to deploy a new version of a Lambda function that gives customers the ability to view their balances. The new version of the function displays customer transaction insights. The company wants to test the new version with a small group of users before deciding whether to make the feature available for all users. Which solution will meet these requirements with the LEAST disruption to users?

A. Create a canary deployment for the REST API. Gradually increase traffic to the new version of the function. Revert traffic to the old version if issues are detected. 
B. Redeploy the REST API stage to use the new version of the function. If issues are detected, update the REST API to point to the previous version of the function. 
C. Deploy the new version of the function to a new stage in the REST API. Route traffic to the new stage. If the new version fails, route traffic to the original stage. 
D. Create a new REST API stage for the new version of the function. Create a weighted alias record set in Amazon Route 53 to distribute traffic between the original stage and the new stage. 

ANSWER : A

DVA-C02 Sample Question 15

A company is building a content authoring application. The application has multiple user groups, such as content creator, reviewer, approver, and administrator. The company needs to assign users fine-grained permissions for specific parts of the application. The company needs a solution to configure, maintain, and analyze user permissions. The company wants a solution that can be easily adapted to work with newer applications in the future. The company must use a third-party OpenID Connect (OIDC) identity provider (IdP) to authenticate users.

A. Configure an Amazon Cognito identity pool for the application. Use the identity pool identities within the application to manage user permissions. 
B. Configure the application to check user permissions upon request. Configure the application logic to manage user permissions. 
C. Use Amazon Verified Permissions to set up user permissions. Integrate Verified Permissions with a third-party IdP. Configure the application to request authorization decisions from Verified Permissions. 
D. Set up an IAM role for each user group. Assign users appropriate IAM roles. Configure the application to determine appropriate permissions for each user based on the user's IAM role. 

ANSWER : C

DVA-C02 Sample Question 16

A company has an AWS Step Functions state machine named myStateMachine. The company configured a service role for Step Functions. The developer must ensure that only the myStateMachine state machine can assume the service role.

A. "Condition": { "ArnLike": { "aws:SourceArn":"urn:aws:states:ap-south- 1:111111111111:stateMachine:myStateMachine" } } 
B. "Condition": { "ArnLike": { "aws:SourceArn":"arn:aws:states:ap-south- 1:*:stateMachine:myStateMachine" } } 
C. "Condition": { "StringEquals": { "aws:SourceAccount": "111111111111" } } 
D. "Condition": { "StringNotEquals": { "aws:SourceArn":"arn:aws:states:ap-south- 1:111111111111:stateMachine:myStateMachine" } } 

ANSWER : A

DVA-C02 Sample Question 17

A developer needs to write an AWS CloudFormation template on a local machine and deploy a CloudFormation stack to AWS. What must the developer do to complete these tasks?

A. Install the AWS CLI. Configure the AWS CLI by using an I AM user name and password.
B. Install the AWS CLI. Configure the AWS CLI by using an SSH key.
C. Install the AWS CLI. Configure the AWS CLI by using an 1AM user access key and secret key.
D. Install an AWS software development kit (SDK). Configure the SDK by using an X.509 certificate.

ANSWER : C

DVA-C02 Sample Question 18

A developer is building a web and mobile application for two types of users: regular users and guest users. Regular users are required to log in, but guest users do not log in. Users should see only their data, regardless of whether they authenticate. Users need AWS credentials before they can access AWS resources.

A. Use an Amazon Cognito identity pool to generate temporary AWS credentials that are linked to an unauthenticated role that has access to the required resources. 
B. Set up an IAM user that has permissions to the required resources. Hardcode the IAM credentials in the web and mobile application. 
C. Generate temporary keys that are stored in AWS KMS. Use the temporary keys to access the required resources. 
D. Generate temporary credentials. Store the temporary credentials in AWS Secrets Manager. Use the temporary credentials to access the required resources. 

ANSWER : A

DVA-C02 Sample Question 19

A company has an AWS Step Functions state machine named myStateMachine. The company configured a service role for Step Functions. The developer must ensure that only the myStateMachine state machine can assume the service role.

A. "Condition": { "ArnLike": { "aws ":"arn:aws:states:ap-south-1:111111111111:stateMachine " } } 
B. "Condition": { "ArnLike": { "aws ":"arn:aws:states:ap-south-1:*:stateMachine " } }

ANSWER : A

DVA-C02 Sample Question 20

A company is building an application to accept data from customers. The data must be encrypted at rest and in transit. The application uses an Amazon API Gateway API that resolves to AWS Lambda functions. The Lambda functions store the data in an Amazon Aurora MySQL DB cluster. The application worked properly during testing. A developer configured an Amazon CloudFront distribution with field-level encryption that uses an AWS Key Management Service (AWS KMS) key. After the configuration of the distribution, the application behaved unexpectedly. All the data in the database changed from plaintext to ciphertext. The developer must ensure that the data is not stored in the database as the ciphertext from the CloudFront field-level encryption. Which solution will meet this requirement?

A. Change the CloudFront Viewer protocol policy from "HTTP and HTTPS" to "HTTPS only." 
B. Add a Lambda function that uses the KMS key to decrypt the data fields before saving the data to the database. 
C. Enable encryption on the DB cluster by using the same KMS key that is used in CloudFront. 
D. Request and deploy a new SSL certificate to use with the CloudFront distribution. 

ANSWER : B

DVA-C02 Sample Question 21

A developer needs to retrieve all data from an Amazon DynamoDB table that matches a particular partition key. Which solutions will meet this requirement in the MOST operationally efficient way? (Select TWO.)

A. Use the Scan API and a filter expression to match on the key. 
B. Use the GetItem API with a request parameter for key that contains the partition key name and specific key value. 
C. Use the ExecuteStatement API and a filter expression to match on the key. 
D. Use the GetItem API and a PartiQL statement to match on the key. 
E. Use the ExecuteStatement API and a PartiQL statement to match on the key. 

ANSWER : B,E

DVA-C02 Sample Question 22

A data visualization company wants to strengthen the security of its core applications The applications are deployed on AWS across its development staging, pre-production, and production environments. The company needs to encrypt all of its stored sensitive credentials The sensitive credentials need to be automatically rotated Aversion of the sensitive credentials need to be stored for each environment Which solution will meet these requirements in the MOST operationally efficient way?

A. Configure AWS Secrets Manager versions to store different copies of the same credentials across multiple environments 
B. Create a new parameter version in AWS Systems Manager Parameter Store for each environment Store the environment-specific credentials in the parameter version. 
C. Configure the environment variables in the application code Use different names for each environment type 
D. Configure AWS Secrets Manager to create a new secret for each environment type. Store the environment-specific credentials in the secret 

ANSWER : D

DVA-C02 Sample Question 23

A developer is using AWS CodeDeploy to automate a company's application deployments to Amazon EC2. Which application specification file properties are required to ensure the software deployments do not fail? (Select TWO.)

A. The file must be a JSON-formatted file named appspec.json. 
B. The file must be a YAML-formatted file named appspec.yml. 
C. The file must be stored in AWS CodeBuild and referenced from the application's source code. 
D. The file must be placed in the root of the directory structure of the application's source code. 
E. The file must be stored in Amazon S3 and referenced from the application's source code. 

ANSWER : B,D

DVA-C02 Sample Question 24

A company has a web application that contains an Amazon API Gateway REST API. A developer has created an AWS CloudFormation template for the initial deployment of the application. The developer has deployed the application successfully as part of an AWS CodePipeline continuous integration and continuous delivery (CI/CD) process. All resources and methods are available through the deployed stage endpoint. The CloudFormation template contains the following resource types: • AWS::ApiGateway::RestApi • AWS::ApiGateway::Resource • AWS::ApiGateway::Method • AWS:ApiGateway::Stage • AWS::ApiGateway:;Deployment The developer adds a new resource to the REST API with additional methods and redeploys the template. CloudFormation reports that the deployment is successful and that the stack is in the UPDATE_COMPLETE state. However, calls to all new methods are returning 404 (Not Found) errors. What should the developer do to make the new methods available?

A. Specify the disable-rollback option during the update-stack operation.
B. Unset the Cloud Forma lion stack failure options.
C. Add an AWS CodeBuild stage lo CodePipeline to run the aws apigateway createdeployment AWS CLI command.
D. Add an action to CodePipeline to run the aws cloudfront create-invalidation AWS CLI command.

ANSWER : C

DVA-C02 Sample Question 25

A company is developing a serverless application by using AWS Lambda functions. One of the Lambda functions needs to access an Amazon RDS DB instance. The DB instance is in a private subnet inside a VPC. The company creates a role that includes the necessary permissions to access the DB instance. The company then assigns the role to the Lambda function. A developer must take additional action to give the Lambda function access to the DB instance. What should the developer do to meet these requirements?

A. Assign a public IP address to the DB instance. Modify the security group of the DB instance to allow inbound traffic from the IP address of the Lambda function. 
B. Set up an AWS Direct Connect connection between the Lambda function and the DB instance. 
C. Configure an Amazon CloudFront distribution to create a secure connection between the Lambda function and the DB instance. 
D. Configure the Lambda function to connect to the private subnets in the VPC. Add security group rules to allow traffic to the DB instance from the Lambda function. 

ANSWER : D

DVA-C02 Sample Question 26

A developer is migrating a containerized application from an on-premises environment to the AWS Cloud. The developer is using the AWS CDK to provision a container in Amazon ECS on AWS Fargate. The container is behind an Application Load Balancer (ALB). When the developer deploys the stack, the deployment fails because the ALB fails health checks. The developer needs to resolve the failed health checks. Which solutions will meet this requirement? (Select TWO.)

A. Confirm that the capacity providers for the container have been provisioned and are properly sized. 
B. Confirm that the target group port matches the port mappings in the ECS task definition. 
C. Confirm that a hosted zone associated with the ALB matches a hosted zone that is referenced in the ECS task definition. 
D. Confirm that the ALB listener on the mapped port has a default action that redirects to the application's health check path endpoint. 
E. Confirm that the ALB listener on the mapped port has a default action that forwards to the correct target group. 

ANSWER : B,E

DVA-C02 Sample Question 27

A developer must cache dependent artifacts from Maven Central, a public package repository, as part of an application's build pipeline. The build pipeline has an AWS CodeArtifact repository where artifacts of the build are published. The developer needs a solution that requires minimum changes to the build pipeline. Which solution meets these requirements?

A. Modify the existing CodeArtifact repository to associate an upstream repository with the public package repository. 
B. Create a new CodeArtifact repository that has an external connection to the public package repository. 
C. Create a new CodeArtifact domain that contains a new repository that has an external connection to the public package repository. 
D. Modify the CodeArtifact repository resource policy to allow artifacts to be fetched from the public package repository. 

ANSWER : A

DVA-C02 Sample Question 28

A developer has written a distributed application that uses micro services. The microservices are running on Amazon EC2 instances. Because of message volume, the developer is unable to match log output from each microservice to a specific transaction. The developer needs to analyze the message flow to debug the application. Which combination of steps should the developer take to meet this requirement? (Select TWO.)

A. Download the AWS X-Ray daemon. Install the daemon on an EC2 instance. Ensure that the EC2 instance allows UDP traffic on port 2000. 
B. Configure an interface VPC endpoint to allow traffic to reach the global AWS X-Ray daemon on TCP port 2000. 
C. Enable AWS X-Ray. Configure Amazon CloudWatch to push logs to X-Ray. 
D. Add the AWS X-Ray software development kit (SDK) to the microservices. Use X-Ray to trace requests that each microservice makes. 
E. Set up Amazon CloudWatch metric streams to collect streaming data from the microservices. 

ANSWER : A,D

DVA-C02 Sample Question 29

A company has an online web application that includes a product catalog. The catalog is stored in an Amazon S3 bucket that is named DOC-EXAMPLE-BUCKET. The application must be able to list the objects in the S3 bucket and must be able to download objects through an 1AM policy. Which policy allows MINIMUM access to meet these requirements?

A. Option A
B. Option B
C. Option C
D. Option D

ANSWER : A

DVA-C02 Sample Question 30

A company has a website that displays a daily newsletter. When a user visits the website, an AWS Lambda function processes the browser's request and queries the company's onpremises database to obtain the current newsletter. The newsletters are stored in English. The Lambda function uses the Amazon Translate TranslateText API operation to translate the newsletters, and the translation is displayed to the user. Due to an increase in popularity, the website's response time has slowed. The database is overloaded. The company cannot change the database and needs a solution that improves the response time of the Lambda function. Which solution meets these requirements?

A. Change to asynchronous Lambda function invocation.
B. Cache the translated newsletters in the Lambda /tmp directory.
C. Enable TranslateText API caching.
D. Change the Lambda function to use parallel processing.

ANSWER : B

DVA-C02 Sample Question 31

A social media application is experiencing high volumes of new user requests after a recent marketing campaign. The application is served by an Amazon RDS for MySQL instance. A solutions architect examines the database performance and notices high CPU usage and many "too many connections" errors that lead to failed requests on the database. The solutions architect needs to address the failed requests. Which solution will meet this requirement?

A. Deploy an Amazon DynamoDB Accelerator (DAX) cluster. Configure the application to use the DAX cluster.
B. Deploy an RDS Proxy. Configure the application to use the RDS Proxy.
C. Migrate the database to an Amazon RDS for PostgreSQL instance.
D. Deploy an Amazon ElastiCache (Redis OSS) cluster. Configure the application to use the ElastiCache cluster.

ANSWER : B