Exam Dumps DVA-C01 Practice Free Latest Amazon Practice Tests
DVA-C01 Exam Questions | Real DVA-C01 Practice Dumps
NEW QUESTION 133
A Development team is working on a case management solution that allows medical claims to be processed and reviewed. Users log in to provide information related to their medical and financial situations.
As part of the application, sensitive documents such as medical records, medical imaging, bank statements, and receipts are uploaded to Amazon S3. All documents must be securely transmitted and stored. All access to the documents must be recorded for auditing.
What is the MOST secure approach?
- A. Use client-side encryption/decryption with Amazon S3 and AWS KMS.
- B. Use S3 default encryption using Advanced Encryption Standard-256 (AES-256) on the destination bucket.
- C. Use AWS Lambda to encrypt and decrypt objects as they are placed into the S3 bucket.
- D. Use Amazon Cognito for authorization and authentication to ensure the security of the application and documents.
Answer: B
Explanation:
Reference:
https://aws.amazon.com/s3/faqs/?nc1=h_ls.
NEW QUESTION 134
A Developer must deploy a new AWS Lambda function using an AWS CloudFormation template.
Which procedures will deploy a Lambda function? (Select TWO.)
- A. Upload the code to an AWS CodeCommit repository, then add a reference to it in an AWS::Lambda::Function resource in the template.
- B. Upload a .ZIP file to AWS CloudFormation containing the function code, then add a reference to it in an AWS::Lambda::Function resource in the template.
- C. Upload the function code to a private Git repository, then add a reference to it in an AWS::Lambda::Function resource in the template.
- D. Create an AWS::Lambda::Function resource in the template, then write the code directly inside the CloudFormation template.
- E. Upload a .ZIP file containing the function code to Amazon S3, then add a reference to it in an AWS::Lambda::Function resource in the template.
Answer: D,E
Explanation:
Reference:
https://aws.amazon.com/blogs/infrastructure-and-automation/deploying-aws-lambda-functions-using-aws-cloudformation-the-portable-way/
NEW QUESTION 135
What does an Amazon SQS delay queue accomplish?
- A. Messages are hidden for a configurable amount of time after they are consumed from the queue.
- B. Messages are hidden for a configurable amount of time when they are first added to the queue.
- C. Message cannot be deleted for a configurable amount of time after they are consumed from the queue.
- D. The consumer can poll the queue for a configurable amount of time before retrieving a message.
Answer: B
NEW QUESTION 136
An AWS Elastic Beanstalk application needs to be deployed in multiple regions and requires a different Amazon Machine Image (AMI) in each region.
Which AWS CloudFormation template key can be used to specify the correct AMI for each region?
- A. Resources
- B. Parameters
- C. Outputs
- D. Mappings
Answer: D
NEW QUESTION 137
A developer is building a highly secure healthcare application using .. application requires writing temporary data to /tmp storage on an AWS Lambda function.
How should the developer encrypt this data?
- A. Set up the Lambda function with a role and key policy to access an AWS KMS CMK Use the CMK to generate a data key used to encrypt all data prior to writing to /tmp storage
- B. Enable Amazon EBS volume encryption with an AWS KMS .. configuration so that all storage attached to the Lambda function is encrypted.
- C. Use an on-premises hardware security module (HSM) to generate keys where the Lambda function requests a data key from the HSM and uses that to encrypt data on all requests to the function
- D. Use OpenSSL to generate a symmetric encryption key on Lambda startup Use this key to encrypt the data prior to writing to /tmp
Answer: C
NEW QUESTION 138
You have written an application that uses the Elastic Load Balancing service to spread traffic to several web servers. Your users complain that they are sometimes forced to login again in the middle of using your application, after they have already logged in. This is not behavior you have designed.
What is a possible solution to prevent this happening?
- A. Use instance memory to save session state.
- B. Use instance storage to save session state.
- C. Use ElastiCache to save session state.
- D. Use Glacier to save session slate.
- E. Use EBS to save session state
Answer: C
NEW QUESTION 139
A company is developing a report executed by AWS Step Functions Amazon CloudWatch shows errors in the Step Functions task state machine To troubleshoot each task, the state input needs to be included along with the error message in the state output.
Which coding practice can preserve both the original input and the error for the state'?
- A. Use ResultPath in a Catch statement to include the error with the original input
- B. Use OutputPath in a Retry statement and set the value to $.
- C. Use ErrorEquals in a Retry statement to include the error with the original input
- D. Use inputPath in a Catch statement and set the value to null.
Answer: A
Explanation:
Use ResultPath in a Catch to include the error with the original input.
Reference:
https://docs.aws.amazon.com/step-functions/latest/dg/input-output-resultpath.html
NEW QUESTION 140
An application deployed on AWS Elastic Beanstalk experiences increased error rates during deployments of new application versions, resulting in service degradation for users. The Development team believes that this is because of the reduction in capacity during the deployment steps. The team would like to change the deployment policy configuration of the environment to an option that maintains full capacity during deployment while using the existing instances.
Which deployment policy will meet these requirements while using the existing instances?
- A. All at once
- B. Rolling
- C. Rolling with additional batch
- D. Immutable
Answer: C
Explanation:
https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/using-features.rolling-version-deploy.html
NEW QUESTION 141
What AWS products and features can be deployed by Elastic Beanstalk? Choose 3 answers
- A. Elastic IP addresses
- B. SQS Queues
- C. RDS Instances
- D. Elastic Load Balancers
- E. Auto scaling groups
- F. Route 53 hosted zones
Answer: C,D,E
Explanation:
Explanation
https://aws.amazon.com/elasticbeanstalk/faqs/
Q: What are the Cloud resources powering my AWS Elastic Beanstalk application? AWS Elastic Beanstalk uses proven AWS features and services, such as Amazon EC2, Amazon RDS, Elastic Load Balancing, Auto Scaling, Amazon S3, and Amazon SNS, to create an environment that runs your application. The current version of AWS Elastic Beanstalk uses the Amazon Linux AMI or the Windows Server 2012 R2 AMI.
NEW QUESTION 142
A Developer created configuration specifications for an AWS Elastic Beanstalk application in a file named healthcheckurl.yaml in the .ebextensions/directory of their application source bundle. The file contains the following:
After the application launches, the health check is not being run on the correct path, event though it is valid.
What can be done to correct this configuration file?
- A. Convert the file to JSON format.
- B. Change the namespace of the option settings to a cusom namespace.
- C. Change the configuration section from options_settings to resources.
- D. Rename the file to a .config extension.
Answer: D
NEW QUESTION 143
An application deployed on AWS Elastic Beanstalk experiences increased error rates during deployments of new application versions, resulting in service degradation for users. The Development team believes that this is because of the reduction in capacity during the deployment steps. The team would like to change the deployment policy configuration of the environment to an option that maintains full capacity during deployment while using the existing instances.
Which deployment policy will meet these requirements while using the existing instances?
- A. All at once
- B. Rolling
- C. Rolling with additional batch
- D. Immutable
Answer: D
NEW QUESTION 144
A developer has created a REST API using Amazon API Gateway. The developer wants to log who and how each caller accesses the API. The developer also wants to control how long the logs are kept What should the developer do to meet these requirements?
- A. Enable API Gateway access logs Use Amazon CloudWatch retention settings to delete old logs
- B. Create and use API Gateway usage plans. Delete old logs with a recurring AWS Lambda function.
- C. Enable detailed Amazon CloudWatch metrics Delete old logs with a recurring AWS Lambda function
- D. Enable API Gateway execution logging Delete old logs using API Gateway retention settings
Answer: D
NEW QUESTION 145
A developer is using Amazon DynamoDB to store application data . The developer wants to further improve application performance by reducing response limes for read and write operations.
Which DynamoDB feature should be used to meet these requirement?
- A. Amazon DynamoDB Streams
- B. Amazon DynamoDB global tables
- C. Amazon DynamoDB transactions
- D. Amazon DynamoDB Accelerator
Answer: D
Explanation:
https://aws.amazon.com/ko/blogs/database/amazon-dynamodb-accelerator-dax-a-read-throughwrite-through-cache-for-dynamodb/
NEW QUESTION 146
An application that runs on an Amazon EC2 instance needs to access and make API calls to multiple AWS services.
What is the MOST secure way to provide access to the AWS services with MINIMAL management overhead?
- A. Use AWS root user to make requests to the application.
- B. Store and retrieve credentials from AWS CodeCommit.
- C. Use EC2 instance profiles.
- D. Use AWS KMS to store and retrieve credentials.
Answer: A
Explanation:
Explanation
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-ec2.html
NEW QUESTION 147
A company's fleet of Amazon EC2 instances receives data from millions of users through an API. The servers batch the data, add an object for each user, and upload the objects to an S3 bucket to ensure high access rates The object attributes are Customer ID, Server ID, TS-Server (TimeStamp and Server ID) the size of the object, and a timestamp A developer wants to find all the objects for a given user collected during a specified time range After creating an S3 object created event, how can the developer achieve this requirement^
- A. Execute an AWS Lambda function in response to the S3 object creation events that creates an Amazon Redshift record for every object with the Customer ID as the partition key and the Server ID as the sort key. Retrieve all the records using the Customer ID and Server ID attributes.
- B. Execute an AWS Lambda function in response to the S3 object creation events that creates an Amazon DynamoDB record for every object with the Customer ID as the partition key and the Server ID as the sort key Retrieve all the records using the Customer ID and Server ID attributes
- C. Execute an AWS Lambda function in response to the S3 object creation events that creates an Amazon DynamoDB record for every object with the Customer ID as the partition key and TS-Server as the sort key Retrieve all the records using the Customer ID and TS-Server attributes
- D. Execute an AWS Lambda function in response to the S3 object creation events that creates an Amazon Redshift record for every object with the Customer ID as the partition key and TS-Server as the sort key Retrieve all the records using the Customer ID and TS-Server attributes
Answer: C
NEW QUESTION 148
Company
C is currently hosting their corporate site in an Amazon S3 bucket with Static Website Hosting enabled.
Currently, when visitors go to http://www.companyc.com the index.html page is returned. Company C now would like a new page welcome.html to be returned when a visitor enters http://www.companyc.com in the browser.
Which of the following steps will allow Company C to meet this requirement? Choose 2 answers
- A. Move the index.html page to a welcome subfolder
- B. Create a welcome subfolder in their S3 bucket
- C. Set the Index Document property to welcome.html
- D. Set the Error Document property to welcome.html
- E. Upload an html page named welcome.html to their S3 bucket
Answer: C,E
NEW QUESTION 149
A company has an application that logs all information to Amazon S3. Whenever there is a new log file, an AWS Lambda function is invoked to process the log files. The code works, gathering all of the necessary information. However, when checking the Lambda function logs, duplicate entries with the same request ID are found.
What is causing the duplicate entries?
- A. There was an S3 outage, which caused duplicate entries of the sale log file.
- B. The S3 bucket name was specified incorrectly.
- C. The Lambda function failed, and the Lambda service retired the invocation with a delay.
- D. The application stopped intermittently and then resumed.
Answer: C
NEW QUESTION 150
A company has a website that is developed in PHP and WordPress and is launched using AWS Elastic Beanstalk. There is a new version of the website that needs to be deployed in the Elastic Beanstalk environment. The company cannot tolerate having the website offline if an update fails. Deployments must have minimal impact and rollback as soon as possible.
What deployment method should be used?
- A. All at once
- B. Snapshots
- C. Rolling
- D. Immutable
Answer: D
Explanation:
Explanation
https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/environmentmgmt-updates-immutable.html
NEW QUESTION 151
A company has an application where reading objects from Amazon S3 is based on the type of user The user types are registered user and guest user The company has 25.000 users and is growing Information is pulled from an S3 bucket depending on the user type.
Which approaches are recommended to provide access to both user types? (Select TWO.)
- A. Use Amazon Cognito to provide access using authenticated and unauthenticated roles
- B. Provide a different access key and secret access key in the application code for registered users and guest users to provide read access to the objects
- C. Create a new IAM user for each user and grant read access.
- D. Use S3 bucket policies to restrict read access to specific IAM users
- E. Use the AWS IAM service and let the application assume the different roles using the AWS Security Token Service (AWS STS) AssumeRole action depending on the type of user and provide read access to Amazon S3 using the assumed role
Answer: A,D
NEW QUESTION 152
A Development team currently supports an application that uses an in-memory store to save accumulated game results. Individual results are stored in a database. As part of migrating to AWS, the team needs to use automatic scaling. The team knows this will yield inconsistent results.
Where should the team store these accumulated game results to BEST allow for consistent results without impacting performance?
- A. Amazon RDS
- B. Amazon ElastiCache
- C. Amazon S3
- D. Amazon Kinesis
Answer: A
NEW QUESTION 153
What happens, by default, when one of the resources in a CloudFormation stack cannot be created?
- A. Previously-created resources are deleted and the stack creation terminates.
- B. The stack creation continues, and the final results indicate which steps failed.
- C. Previously-created resources are kept but the stack creation terminates.
- D. CloudFormation templates are parsed in advance so stack creation is guaranteed to succeed.
Answer: A
Explanation:
Explanation
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacks.html AWS CloudFormation ensures all stack resources are created or deleted as appropriate. Because AWS CloudFormation treats the stack resources as a single unit, they must all be created or deleted successfully for the stack to be created or deleted. If a resource cannot be created, AWS CloudFormation rolls the stack back and automatically deletes any resources that were created. If a resource cannot be deleted, any remaining resources are retained until the stack can be successfully deleted.
NEW QUESTION 154
......
Verified DVA-C01 Exam Dumps Q&As - Provide DVA-C01 with Correct Answers: https://prep4sure.dumpexams.com/DVA-C01-vce-torrent.html