DVA-C02 Practice Test 13 — 15 Questions

Question 1

A developer is deploying a new version of a Lambda function using an AWS CodePipeline pipeline. The deployment fails during the 'Deploy' stage with an error indicating that the function's code is too large. What should the developer do to resolve this issue?

Accepted Answer

Upload the Lambda deployment package to Amazon S3 and reference it from the function. Option C is correct because Lambda has a deployment package size limit of 50 MB for direct upload via the console or API. For larger packages, developers should upload the deployment package to Amazon S3 and reference it. Option A is incorrect because increasing the Lambda timeout does not affect code size. Option B is incorrect because Lambda does not support X-Ray for code size issues. Option D is incorrect because CloudFront is a CDN, not a solution for Lambda package size.

Answer

Increase the Lambda function's timeout setting

Answer

Use Amazon CloudFront to distribute the Lambda code

Answer

Enable AWS X-Ray tracing on the Lambda function

Question 2

An application running on Amazon EC2 instances behind an Application Load Balancer (ALB) is experiencing intermittent 503 errors. The EC2 instances are in an Auto Scaling group. What is the MOST likely cause?

Accepted Answer

The target group health checks are failing.. Option C is correct because an unhealthy target is the most common cause of 503 errors with ALB. Option A is wrong because DNS resolution happens at the client side, not at the ALB. Option B is wrong because SSL certificate issues cause 502 errors. Option D is wrong because security group rules affect connectivity, not HTTP status codes.

Answer

The SSL certificate on the ALB has expired.

Answer

The ALB DNS name is not resolving.

Answer

The security group for the ALB is blocking traffic.

Question 3

A developer is designing a serverless application using AWS Lambda, Amazon API Gateway, and Amazon DynamoDB. The application experiences occasional throttling on the Lambda function during peak traffic. The developer needs to reduce the number of throttling errors without changing the Lambda function code. Which solution should the developer implement?

Accepted Answer

Configure reserved concurrency on the Lambda function.. Option C is correct because enabling reserved concurrency on the Lambda function ensures a set number of concurrent executions are available, preventing throttling due to account-level limits. Option A (increase DynamoDB read capacity) does not affect Lambda throttling. Option B (enable API Gateway caching) helps with API responses but not Lambda invocation throttling. Option D (increase Lambda timeout) does not affect concurrency limits.

Answer

Increase the Lambda function timeout.

Answer

Increase the DynamoDB read capacity units.

Answer

Enable API Gateway caching.

Question 4

A company has a monolithic application running on an EC2 instance that needs to be migrated to a microservices architecture on AWS. The development team wants to use AWS services to handle service discovery, configuration management, and secrets management. Which combination of AWS services should the team use?

Accepted Answer

Use AWS Cloud Map for service discovery, AWS AppConfig for configuration, and AWS Secrets Manager for secrets.. Option C is correct because AWS Cloud Map provides service discovery, AWS AppConfig manages application configuration, and AWS Secrets Manager securely stores secrets. Option A uses Systems Manager Parameter Store for configuration, but AppConfig is more feature-rich for config management. Option B uses Service Discovery (AWS Cloud Map) but EC2 Image Builder is for creating AMIs, not config. Option D uses ECS Service Discovery (part of Cloud Map) but Config is for resource compliance, not configuration management.

Answer

Use Amazon ECS Service Discovery for service discovery, AWS Config for configuration, and AWS Systems Manager Parameter Store for secrets.

Answer

Use AWS Cloud Map for service discovery, AWS Systems Manager Parameter Store for configuration, and AWS Secrets Manager for secrets.

Answer

Use AWS Service Discovery for service discovery, EC2 Image Builder for configuration, and AWS Key Management Service (KMS) for secrets.

Question 5

A developer is building a data processing pipeline that uses AWS Lambda to process files uploaded to an S3 bucket. The S3 bucket receives thousands of files per second, and the developer wants to minimize processing latency. Which approach should the developer use to trigger the Lambda function?

Accepted Answer

Configure S3 event notifications to directly invoke the Lambda function.. Option B is correct because S3 event notifications can directly invoke Lambda asynchronously, providing low-latency processing. Option A (SQS) adds polling latency. Option C (CloudWatch Events) is for scheduled events, not S3 events. Option D (SNS) adds an extra hop and requires subscription.

Answer

Configure an SQS queue and have the Lambda function poll the queue for S3 event notifications.

Answer

Use Amazon CloudWatch Events to trigger the Lambda function on a schedule.

Answer

Publish S3 events to an SNS topic and subscribe the Lambda function to that topic.

Question 6

A developer is building a serverless application using AWS Lambda functions that need to access an Amazon RDS database. Which of the following are best practices for managing database credentials? (Choose TWO.)

Accepted Answer

Use AWS Systems Manager Parameter Store to store encrypted credentials.. Options B and D are correct because they involve secure storage and rotation of credentials. Option A is wrong because storing credentials in Lambda environment variables is not secure if the variables are visible in the console. Option C is wrong because hardcoding is never a best practice. Option E is wrong because storing in source code is insecure.

Answer

Store the credentials as Lambda environment variables.

Answer

Hardcode the credentials in the Lambda function code.

Answer

Store the credentials in a file in the Lambda deployment package.

Question 7

A developer is creating a CloudFormation template to deploy an Amazon S3 bucket. The developer wants the bucket to be deleted automatically when the CloudFormation stack is deleted. What should the developer specify in the template?

Accepted Answer

Set the DeletionPolicy attribute to Delete.. Option C is correct because setting the DeletionPolicy attribute to Delete ensures the bucket is deleted when the stack is deleted. Option A is wrong because the default is to retain the bucket. Option B is wrong because DependsOn does not affect deletion. Option D is wrong because the bucket name is not related to deletion behavior.

Answer

Specify a unique bucket name to avoid conflicts.

Answer

Use the DependsOn attribute to specify the bucket depends on the stack.

Answer

Set the DeletionPolicy attribute to Retain.

Question 8

A developer needs to store session state for a stateless web application running on EC2 instances behind an Application Load Balancer. Which AWS service should the developer use to ensure session data is not lost if an instance fails?

Accepted Answer

Amazon ElastiCache. Option A (ElastiCache) is correct because it provides a managed in-memory cache that can store session state externally, making the application stateless. Option B (S3) is designed for object storage, not low-latency session storage. Option C (RDS) is a relational database, which adds latency and complexity for session state. Option D (DynamoDB) can also store session state but is not the simplest or most cost-effective for this use case; ElastiCache is more common for session caching.

Answer

Amazon S3

Answer

Amazon DynamoDB

Answer

Amazon RDS

Question 9

Which THREE actions can be performed using AWS Lambda and Amazon S3 event notifications? (Choose three.)

Accepted Answer

Resize an image when a new image is uploaded to an S3 bucket.. Options A, B, and C are correct. S3 event notifications can trigger Lambda on PUT, POST, DELETE, etc. Option D (pre-signed URL generation) is not an event; it's a client action. Option E (versioning) is a bucket property, not triggered by events.

Answer

Generate a pre-signed URL for an object.

Answer

Enable versioning on the S3 bucket.

Question 10

A company uses AWS CodeCommit and wants to automatically trigger a build in AWS CodePipeline when code is pushed to the master branch. Which action should be taken?

Accepted Answer

Configure a CloudWatch Events rule to start the pipeline on repository changes. CodePipeline can use a CloudWatch Events rule to detect changes in CodeCommit and start the pipeline. Option A is correct.

Answer

Add a webhook in CodeCommit to directly invoke CodePipeline

Answer

Set up a scheduled pipeline that polls CodeCommit every minute

Answer

Use an S3 trigger to start the pipeline when code is uploaded

Question 11

A developer is writing code to upload an object to an Amazon S3 bucket. The object is 200 MB in size. Which AWS SDK method should the developer use to perform this upload?

Accepted Answer

Use the multipart upload API.. Option C is correct because the multipart upload API is designed for objects over 100 MB. Option A is wrong because PutObject is for objects up to 5 GB, but recommended for smaller objects. Option B is wrong because pre-signed URLs are for granting temporary access, not uploading large objects efficiently. Option D is wrong because S3 Transfer Acceleration speeds up uploads over long distances but does not change the API method needed.

Answer

Enable S3 Transfer Acceleration and use the PutObject API.

Answer

Use the PutObject API operation.

Answer

Use a pre-signed URL and upload using HTTP PUT.

Question 12

A company is deploying a containerized application on Amazon ECS with Fargate launch type. The application needs to store sensitive configuration data such as database passwords. The developer must ensure that the secrets are encrypted at rest and in transit, and that they are rotated automatically. Which solution should the developer use?

Accepted Answer

Store secrets in AWS Secrets Manager and use a Lambda function to rotate the secrets.. Option D is correct because AWS Secrets Manager provides automatic rotation, encryption at rest, and integration with ECS for secure retrieval. Option A (Parameter Store with KMS) does not support automatic rotation. Option B (Secrets Manager with Lambda rotation) is essentially correct but the Lambda function is needed for custom rotation; however, Secrets Manager can manage rotation automatically with built-in rotation for AWS services. Option C (EC2 Systems Manager) is not for secrets management.

Answer

Store secrets in AWS Secrets Manager and enable automatic rotation.

Answer

Store secrets in AWS Systems Manager Parameter Store with a secure string parameter encrypted using AWS KMS.

Answer

Store secrets in an encrypted S3 bucket and retrieve them in the task definition.

Question 13

Which TWO of the following are valid use cases for Amazon S3 event notifications?

Accepted Answer

Send a notification to an SQS queue when a new object is created. S3 event notifications can trigger Lambda functions and send messages to SQS or SNS. Options B and D are correct.

Answer

Automatically replicate objects to another bucket

Answer

Automatically delete objects after 30 days

Answer

Encrypt objects automatically with KMS

Question 14

A company is using Amazon API Gateway to expose a REST API. The API is integrated with an AWS Lambda function. Lately, the API is returning 502 Bad Gateway errors. What is the MOST likely cause?

Accepted Answer

The Lambda function is returning an unhandled exception.. Option B is correct because 502 errors in API Gateway with Lambda integration typically indicate that the Lambda function returned an error. Option A is wrong because throttling would cause 429 Too Many Requests. Option C is wrong because IAM permissions would cause 403 Forbidden. Option D is wrong because API keys are used for client authentication, not for backend integration.

Answer

The API Gateway request throttling limit has been exceeded.

Answer

The API Gateway API key is invalid.

Answer

The Lambda function's execution role does not allow API Gateway to invoke it.

Question 15

A developer wants to share an Amazon Machine Image (AMI) from one AWS account to another. The AMI is backed by Amazon EBS snapshots. What must the developer do to ensure the target account can launch an EC2 instance from the AMI?

Accepted Answer

Modify the AMI permissions to allow the target account and share the underlying EBS snapshots.. Option A is correct because the AMI must be shared with the target account, and the EBS snapshots must be shared as well. Option B (copy to target account) is not necessary. Option C (public) is not required. Option D (encryption key) is only needed if the snapshots are encrypted.

Answer

Copy the AMI to the target account's region and share the AMI.

Answer

Make the AMI public and share the EBS snapshots.

Answer

Share the KMS key used to encrypt the EBS snapshots with the target account.