Developer Associate DVA-C02 Practice Questions & Answers • ExamPrepare

106 questions in this view

Page 1 of 18

Question 1

A developer is designing an AWS Lambda function that creates temporary files that are less than 10 MB during invocation. The temporary files will be accessed and modified multiple times during invocation. The developer has no need to save or retrieve these files in the future.

Where should the temporary files be stored?

the /tmp directory
Amazon EFS
Amazon EBS
Amazon S3

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

A company has an Amazon S3 bucket that contains sensitive data. The data must be encrypted in transit and at rest. The company encrypts the data in the S3 bucket by using an AWS KMS key. A developer needs to grant several other AWS accounts the permission to use the S3 GetObject operation to retrieve the data from the S3 bucket.

How can the developer enforce that all requests to retrieve the data provide encryption in transit?

Define a resource-based policy on the S3 bucket to deny access when a request meets the condition "aws:SecureTransport": "false".
Define a resource-based policy on the S3 bucket to allow access when a request meets the condition "aws:SecureTransport": "false".
Define a role-based policy on the other accounts' roles to deny access when a request meets the condition of "aws:SecureTransport": "false".
Define a resource-based policy on the KMS key to deny access when a request meets the condition of "aws:SecureTransport": "false".

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

A company has many microservices that are comprised of AWS Lambda functions. Multiple teams within the company split ownership of the microservices.

An application reads configuration values from environment variables that are contained in the Lambda functions. During a security audit, the company discovers that some of the environment variables contain sensitive information.

The company's security policy requires each team to have full control over the rotation of AWS KMS keys that the team uses for its respective microservices.

Which solution will meet these requirements?

Create AWS managed keys for all Lambda functions. Use the new AWS managed keys to encrypt the environment variables. Add kms:Decrypt permissions to the Lambda function execution roles.
Create customer managed keys for all Lambda functions. Use the new customer managed keys to encrypt the environment variables. Add kms:Decrypt permission to the Lambda function execution roles.
Create customer managed keys for all Lambda functions. Use the new customer managed keys to encrypt the environment variables. Add kms:CreateGrant permission and kms:Encrypt permission to the Lambda function execution roles.
Create AWS managed keys for all Lambda functions. Use the new AWS managed keys to encrypt the environment variables. Add kms:CreateGrant permission and kms:Encrypt permission to the Lambda function execution roles.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

A company has multiple development teams. Each development team runs its own cloud development environment. Each development environment is isolated to its own AWS account. All of the team AWS accounts belong to the same organization in AWS Organizations.

A development team federates into Account A. The development team must copy objects from Amazon S3 buckets that are in Account B and Account C to an S3 bucket that is in Account A.

Which solution will meet these requirements in the MOST operationally efficient way?

Create and deploy a service control policy (SCP) that grants the required access to all S3 buckets.
Create and configure IAM roles for the development team to assume in Account B and Account C.
Create IAM users that have full Amazon S3 access for Account B and Account C. Share the IAM users with the development team.
Create S3 bucket policies for the S3 buckets in Account B and Account C. Configure the policies to allow access to the development team's IAM role in Account A.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

A company is using an Amazon API Gateway REST API endpoint as a webhook to publish events from an on-premises source control management (SCM) system to Amazon EventBridge. The company has configured an EventBridge rule to listen for the events and to control application deployment in a central AWS account. The company needs to receive the same events across multiple receiver AWS accounts.

How can a developer meet these requirements without changing the configuration of the SCM system?

Deploy the API Gateway REST API to all the required AWS accounts. Use the same custom domain name for all the gateway endpoints so that a single SCM webhook can be used for all events from all accounts.
Deploy the API Gateway REST API to all the receiver AWS accounts. Create as many SCM webhooks as the number of AWS accounts.
Grant permission to the central AWS account for EventBridge to access the receiver AWS accounts. Add an EventBridge event bus on the receiver AWS accounts as the targets to the existing EventBridge rule.
Convert the API Gateway type from REST API to HTTP API.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

A company created AWS Lambda functions to support event-driven tasks for an application. After testing the application code, the company wants to validate the application data against a private Amazon RDS DB instance. The DB instance is located in a VPC in the company's AWS account. The DB instance usage is low to moderate, depending on the application traffic. The Lambda functions will use credentials that are stored in AWS Secrets Manager to connect to the DB instance. The company wants to minimize implementation efforts.

Which combination of steps will allow the Lambda functions to access this DB instance? (Select TWO.)

Update the VPC configuration of each Lambda function to use the VPC associated with the DB instance. Configure a Lambda security group to access Amazon RDS. Update the RDS security group to allow Lambda security group access.
Redeploy a new version of each Lambda function to access the VPC. Configure a Lambda security group to access Amazon RDS. Update the RDS security group to allow Lambda access through the default internet route (0.0.0.0/0).
Replace each Lambda function with a new Lambda function that is configured to use the VPC associated with the DB instances. Configure a Lambda security group to access Amazon RDS. Update the RDS security group to allow Lambda security group access.
Update the execution role associated with each Lambda function to allow VPC access and access to Secrets Manager secrets.
Update the execution role associated with each Lambda function to allow access to the DB instance and Secrets Manager secrets.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.