DVA-C02 (Page 20)

A developer creates a VPC named VPC-A that has public and private subnets.The developer also creates an Amazon RDS database inside the private subnet of VPC-A.To perform some queries, the developer creates an AWS Lambda function in the default VPC.The Lambda function has code to access the RDS database.When the Lambda function runs, an error message indicates that the function cannot connect to the RDS database.How can the developer solve this problem?Read More →

A developer is creating an application on Amazon Elastic Container Service (Amazon ECS).The developer needs to configure the application parameters.The developer must configure limits for the application’s maximum number of simultaneous connections and maximum number of transactions per second.The maximum number of connections and transactions can change in the future.The developer needs a solution that can automatically deploy these changes to the application, as needed, without causing downtime.Which solution will meet these requirements?Read More →

A company has a website that displays a daily newsletter.When a user visits the website, an AWS Lambda function processes the browser’s request and queries the company’s on-premises database to obtain the current newsletter.The newsletters are stored in English.The Lambda function uses the Amazon Translate TranslateText API operation to translate the newsletters, and the translation is displayed to the user.Due to an increase in popularity, the website’s response time has slowed.The database is overloaded.The company cannot change the database and needs a solution that improves the response time of the Lambda function.Which solution meets these requirements?Read More →

When using the AWS Encryption SDK, how does the developer keep track of the data encryption keys used to encrypt data?Read More →

A company is preparing to migrate an application to the company’s first AWS environment.Before this migration, a developer is creating a proof-of-concept application to validate a model for building and deploying container-based applications on AWS.Which combination of steps should the developer take to deploy the containerized proof-of-concept application with the LEAST operational effort? (Choose two.)Read More →

A company has an application that is hosted on Amazon EC2 instances.The application stores objects in an Amazon S3 bucket and allows users to download objects from the S3 bucket.A developer turns on S3 Block Public Access for the S3 bucket.After this change, users report errors when they attempt to download objects.The developer needs to implement a solution so that only users who are signed in to the application can access objects in the S3 bucket.Which combination of steps will meet these requirements in the MOST secure way? (Choose two.)Read More →

A company runs an application on Amazon EC2 instances.The EC2 instances open connections to an Amazon RDS for SQL Server database.A developer needs to store and access the credentials and wants to automatically rotate the credentials.The developer does not want to store the credentials for the database in the code.Which solution will meet these requirements in the MOST secure way?Read More →

A company requires that all applications running on Amazon EC2 use IAM roles to gain access to AWS services.A developer is modifying an application that currently relies on IAM user access keys stored in environment variables to access Amazon DynamoDB tables using boto, the AWS SDK for Python.The developer associated a role with the same permissions as the IAM user to the EC2 instance, then deleted the IAM user.When the application was restarted, the AWS AccessDeniedException messages started appearing in the application logs.The developer was able to use their personal account on the server to run DynamoDB API commands using the AWS CLI.What is the MOST likely cause of the exception?Read More →

A developer has AWS Lambda functions that need to access a company’s internal data science libraries and reference data.Separate teams manage the libraries and the data.The teams must be able to update and upload new data independently.The Lambda functions are connected to the company’s central VPC.Which solution will provide the Lambda functions with access to the libraries and data?Read More →

A company needs to set up secure database credentials for all its AWS Cloud resources.The company’s resources include Amazon RDS DB instances, Amazon DocumentDB clusters, and Amazon Aurora DB instances.The company’s security policy mandates that database credentials be encrypted at rest and rotated at a regular interval.Which solution will meet these requirements MOST securely?Read More →