DVA-C02 Exam Dumps – Our Features

A company has an application that uses Amazon Cognito user pools as an identity provider. The company must secure access to user records. The company has set up multi-factor authentication (MFA). The company also wants to send a login activity notification by email every time a user logs in.What is the MOST operationally efficient solution that meets this requirement?

• Create an AWS Lambda function that uses Amazon Simple Email Service (Amazon SES) to send the email notification. Add an Amazon API Gateway API to invoke the function. Call the API from the client side when login confirmation is received.
• Create an AWS Lambda function that uses Amazon Simple Email Service (Amazon SES) to send the email notification. Add an Amazon Cognito post authentication Lambda trigger for the function.
• Create an AWS Lambda function that uses Amazon Simple Email Service (Amazon SES) to send the email notification. Create an Amazon CloudWatch Logs log subscription filter to invoke the function based on the login status.
• Configure Amazon Cognito to stream all logs to Amazon Kinesis Data Firehose. Create an AWS Lambda function to process the streamed logs and to send the email notification based on the login status of each user.

A developer is using an AWS Lambda function to generate avatars for profile pictures that are uploaded to an Amazon S3 bucket. The Lambda function is automatically invoked for profile pictures that are saved under the /original/ S3 prefix. The developer notices that some pictures cause the Lambda function to time out. The developer wants to implement a fallback mechanism by using another Lambda function that resizes the profile picture.Which solution will meet these requirements with the LEAST development effort?

• Set the image resize Lambda function as a destination of the avatar generator Lambda function for the events that fail processing.
• Create an Amazon Simple Queue Service (Amazon SQS) queue. Set the SQS queue as a destination with an on failure condition for the avatar generator Lambda function. Configure the image resize Lambda function to poll from the SQS queue.
• Create an AWS Step Functions state machine that invokes the avatar generator Lambda function and uses the image resize Lambda function as a fallback. Create an Amazon EventBridge rule that matches events from the S3 bucket to invoke the state machine.
• Create an Amazon Simple Notification Service (Amazon SNS) topic. Set the SNS topic as a destination with an on failure condition for the avatar generator Lambda function. Subscribe the image resize Lambda function to the SNS topic.

A developer is building a web application that uses Amazon API Gateway to expose an AWS Lambda function to process requests from clients. During testing, the developer notices that the API Gateway times out even though the Lambda function finishes under the set time limit.Which of the following API Gateway metrics in Amazon CloudWatch can help the developer troubleshoot the issue? (Choose two.)

• CacheHitCount
• IntegrationLatency
• CacheMissCount
• Latency
• Count

An application that is hosted on an Amazon EC2 instance needs access to files that are stored in an Amazon S3 bucket. The application lists the objects that are stored in the S3 bucket and displays a table to the user. During testing, a developer discovers that the application does not show any objects in the list.What is the MOST secure way to resolve this issue?

• Update the IAM instance profile that is attached to the EC2 instance to include the S3:* permission for the S3 bucket.
• Update the IAM instance profile that is attached to the EC2 instance to include the S3:ListBucket permission for the S3 bucket.
• Update the developer's user permissions to include the S3:ListBucket permission for the S3 bucket.
• Update the S3 bucket policy by including the S3:ListBucket permission and by setting the Principal element to specify the account number of the EC2 instance.

A company is running Amazon EC2 instances in multiple AWS accounts. A developer needs to implement an application that collects all the lifecycle events of the EC2 instances. The applicationneeds to store the lifecycle events in a single Amazon Simple Queue Service (Amazon SQS) queue in the company's main AWS account for further processing.Which solution will meet these requirements?

• Configure Amazon EC2 to deliver the EC2 instance lifecycle events from all accounts to the Amazon EventBridge event bus of the main account. Add an EventBridge rule to the event bus of the main account that matches all EC2 instance lifecycle events. Add the SQS queue as a target of the rule.
• Use the resource policies of the SQS queue in the main account to give each account permissions to write to that SQS queue. Add to the Amazon EventBridge event bus of each account an EventBridge rule that matches all EC2 instance lifecycle events. Add the SQS queue in the main account as a target of the rule.
• Write an AWS Lambda function that scans through all EC2 instances in the company accounts to detect EC2 instance lifecycle changes. Configure the Lambda function to write a notification message to the SQS queue in the main account if the function detects an EC2 instance lifecycle change. Add an Amazon EventBridge scheduled rule that invokes the Lambda function every minute.
• Configure the permissions on the main account event bus to receive events from all accounts. Create an Amazon EventBridge rule in each account to send all the EC2 instance lifecycle events to the main account event bus. Add an EventBridge rule to the main account event bus that matches all EC2 instance lifecycle events. Set the SQS queue as a target for the rule.

For a deployment using AWS Code Deploy, what is the run order of the hooks for in-place deployments?

• BeforeInstall -> ApplicationStop -> ApplicationStart -> AfterInstall
• ApplicationStop -> BeforeInstall -> AfterInstall -> ApplicationStart
• BeforeInstall -> ApplicationStop -> ValidateService -> ApplicationStart
• ApplicationStop -> BeforeInstall -> ValidateService -> ApplicationStart

A developer is creating a template that uses AWS CloudFormation to deploy an application. The application is serverless and uses Amazon API Gateway, Amazon DynamoDB, and AWS Lambda.Which AWS service or tool should the developer use to define serverless resources in YAML?

• CloudFormation serverless intrinsic functions
• AWS Elastic Beanstalk
• AWS Serverless Application Model (AWS SAM)
• AWS Cloud Development Kit (AWS CDK)

A developer wants to insert a record into an Amazon DynamoDB table as soon as a new file is addedto an Amazon S3 bucket.Which set of steps would be necessary to achieve this?

• Create an event with Amazon EventBridge that will monitor the S3 bucket and then insert the records into DynamoDB.
• Configure an S3 event to invoke an AWS Lambda function that inserts records into DynamoDB.
• Create an AWS Lambda function that will poll the S3 bucket and then insert the records into DynamoDB.
• Create a cron job that will run at a scheduled time and insert the records into DynamoDB.

A developer is creating a mobile app that calls a backend service by using an Amazon API Gateway REST API. For integration testing during the development phase, the developer wants to simulate different backend responses without invoking the backend service.Which solution will meet these requirements with the LEAST operational overhead?

• Create an AWS Lambda function. Use API Gateway proxy integration to return constant HTTP responses.
• Create an Amazon EC2 instance that serves the backend REST API by using an AWSCloudFormation template.
• Customize the API Gateway stage to select a response type based on the request.
• Use a request mapping template to select the mock integration response.

A developer is creating an application that includes an Amazon API Gateway REST API in the us-east- 2 Region. The developer wants to use Amazon CloudFront and a custom domain name for the API. The developer has acquired an SSL/TLS certificate for the domain from a third-party provider.How should the developer configure the custom domain for the application?

• Import the SSL/TLS certificate into AWS Certificate Manager (ACM) in the same Region as the API. Create a DNS A record for the custom domain.
• Import the SSL/TLS certificate into CloudFront. Create a DNS CNAME record for the custom domain.
• Import the SSL/TLS certificate into AWS Certificate Manager (ACM) in the same Region as the API. Create a DNS CNAME record for the custom domain.
• Import the SSL/TLS certificate into AWS Certificate Manager (ACM) in the us-east-1 Region. Create a DNS CNAME record for the custom domain.