Amazon AWS Certified Developer - Associate - DVA-C02 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

A developer owns and supports an application that has database credentials that are stored in environment variables for AWS Lambda functions. The developer needs an alternate storage method for the credentials instead of environment variables in plaintext. Which solution will handle the credentials MOST securely?

A. Store the database credentials as a secret in AWS Secrets Manager. Set the secret ' s Amazon Resource Name (ARN) as the value of an environment variable. Use the AWS Parameters and Secrets Lambda Extension to retrieve the credentials in the Lambda function. B. Store the database credentials as a string type parameter in the AWS Systems Manager Parameter Store.
Set the parameter ' s Amazon Resource Name (ARN) as the value of an environment variable. Use the AWS Parameters and Secrets Lambda Extension to retrieve the credentials from the Lambda function. C. Use base64 encoding for the database credentials. Include the database credentials into the Lambda function ' s source code as part of a build process. Update the Lambda function ' s code to decode the credentials before the credentials are used. D. Use AWS CloudFormation to deploy the application. Ensure that the NoEcho property is set to true for the parameters that contain the database credentials.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 2

A developer is automating a new application deployment with AWS SAM. The new application has one AWS Lambda function and one Amazon S3 bucket. The Lambda function must access the S3 bucket to only read objects.
How should the developer configure AWS SAM to grant the necessary read permission to the S3 bucket?

A. Create an Amazon SQS topic for only S3 object reads. Reference the topic in the template. B. Add the S3ReadPolicy template to the Lambda function ' s execution role. C. Add a custom S3 bucket policy to the Lambda function. D. Reference a second Lambda authorizer function.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 3

A company runs a batch processing application by using AWS Lambda functions and Amazon API Gateway APIs with deployment stages for development, user acceptance testing and production A development team needs to configure the APIs in the deployment stages to connect to third-party service endpoints.
Which solution will meet this requirement?

A. Store the third-party service endpoint for each environment in AWS AppConfig B. Encode the third-party service endpoints as query parameters in the API Gateway request URL. C. Store the third-party service endpoints in Lambda layers that correspond to the stage D. Store the third-party service endpoints in API Gateway stage variables that correspond to the stage

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 4

A company receives food orders from multiple partners. The company has a microservices application that uses Amazon API Gateway APIs with AWS Lambda integration. Each partner sends orders by calling a customized API that is exposed through API Gateway. The API call invokes a shared Lambda function to process the orders.
Partners need to be notified after the Lambda function processes the orders. Each partner must receive updates for only the partner ' s own orders. The company wants to add new partners in the future with the fewest code changes possible.
Which solution will meet these requirements in the MOST scalable way?

A. Create a different Amazon Simple Notification Service (Amazon SNS) topic for each partner.
Configure the Lambda function to publish messages for each partner to the partner ' s SNS topic. B. Create one Amazon Simple Notification Service (Amazon SNS) topic. Subscribe all partners to the SNS topic. C. Create a different Lambda function for each partner. Configure the Lambda function to notify each partner ' s service endpoint directly. D. Create an Amazon Simple Notification Service (Amazon SNS) topic. Configure the Lambda function to publish messages with specific attributes to the SNS topic. Subscribe each partner to the SNS topic.
Apply the appropriate filter policy to the topic subscriptions.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 5

A developer is storing JSON files in an Amazon S3 bucket. The developer wants to securely share an object with a specific group of people.
How can the developer securely provide temporary access to the objects that are stored in the S3 bucket?

A. Set a bucket policy that restricts access after a period of time. Provide the bucket ' s S3 URL. B. Use the AWS SDK to generate a presigned URL. Provide the presigned URL. C. Configure static web hosting on the S3 bucket. Provide the bucket ' s web URL. D. Set object retention on the files. Use the AWS SDK to restore the object before subsequent requests.
Provide the bucket's S3 URL.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 6

A developer is creating an AWS Lambda function that needs credentials to connect to an Amazon RDS for MySQL database. An Amazon S3 bucket currently stores the credentials. The developer needs to improve the existing solution by implementing credential rotation and secure storage. The developer also needs to provide integration with the Lambda function.
Which solution should the developer use to store and retrieve the credentials with the LEAST management overhead?

A. Encrypt the credentials by using AWS Key Management Service (AWS KMS). Store the credentials in an Amazon DynamoDB table. Create a second Lambda function to rotate the credentials. Invoke the second Lambda function by using an Amazon EventBridge rule that runs on a schedule. Update the DynamoDB table. Update the database to use the generated credentials. Retrieve the credentials from DynamoDB with the first Lambda function. Connect to the database. B. Store the credentials in AWS Secrets Manager. Set the secret type to Credentials for Amazon RDS database. Select the database that the secret will access. Use the default AWS Key Management Service (AWS KMS) key to encrypt the secret. Enable automatic rotation for the secret. Use the secret from Secrets Manager on the Lambda function to connect to the database. C. Encrypt the credentials with the default AWS Key Management Service (AWS KMS) key. Store the credentials as environment variables for the Lambda function. Create a second Lambda function to generate new credentials and to rotate the credentials by updating the environment variables of the first Lambda function. Invoke the second Lambda function by using an Amazon EventBridge rule that runs on a schedule. Update the database to use the new credentials. On the first Lambda function, retrieve the credentials from the environment variables. Decrypt the credentials by using AWS KMS, Connect to the database. D. Store the credentials in AWS Systems Manager Parameter Store. Select the database that the parameter will access. Use the default AWS Key Management Service (AWS KMS) key to encrypt the parameter.
Enable automatic rotation for the parameter. Use the parameter from Parameter Store on the Lambda function to connect to the database.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 7

A developer used the AWS SDK to create an application that aggregates and produces log records for 10 services. The application delivers data to an Amazon Kinesis Data Streams stream.
Each record contains a log message with a service name, creation timestamp, and other log information. The stream has 15 shards in provisioned capacity mode. The stream uses service name as the partition key.
The developer notices that when all the services are producing logs,
ProvisionedThroughputExceededException errors occur during PutRecord requests. The stream metrics show that the write capacity the applications use is below the provisioned capacity.

A. Use a separate Kinesis stream for each service to generate the logs. B. Double the number of shards until the throttling errors stop occurring. C. Change the partition key from service name to creation timestamp. D. Change the capacity mode from provisioned to on-demand.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 8

Given the source code for an AWS Lambda function in the local file store.py containing a handler function called getstore and the following AWS CloudFormation template:
Transform: AWS::Serverless-2016-10-31
Resources:
StoreFunc:
Type: AWS::Serverless::Function
Properties:
Handler: store.getstore
Runtime: python3.13
What should be done to prepare the template so that it can be deployed using the AWS CLI command aws cloudformation deploy?

A. Use aws cloudformation package to upload the source code to an Amazon S3 bucket and produce a modified CloudFormation template. B. Use aws cloudformation compile to base64 encode and embed the source file into a modified CloudFormation template. C. Use aws lambda zip to package the source file together with the CloudFormation template and deploy the resulting .zip archive. D. Use aws serverless create-package to embed the source file directly into the existing CloudFormation template.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 9

A developer is creating an application that uses an Amazon DynamoDB table. The developer needs to develop code that reads all records that were added to the table during the previous day. creates HTML reports, and pushes the reports into third-party storage. The item size varies from 1 KB to 4 KB, and the index structure is defined with the date. The developer needs to minimize the read capacity that the application requires from the DynamoDB table.
Which DynamoDB API operation should the developer use in the code to meet these requirements?

A. Query B. BatchGetltem C. Scan D. Getltem

Discussion 0

Correct Answer: A Vote an answer

Question 10

A social media application stores millions of video clips in Amazon S3 and serves them to users across the world. The traffic to the application varies, but access often increases suddenly to more than 10,000 PUT requests and GET requests each second. As the application has grown in popularity, users report poor quality of video streaming. Which solution will provide the LARGEST improvement in performance?

A. Use S3 Intelligent-Tiering to move data based on access patterns. B. Create an Amazon Route 53 geolocation routing policy. C. Duplicate content in multiple AWS Regions by using S3 Cross-Region Replication. D. Create an Amazon CloudFront distribution with Amazon S3 as an origin.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).