DVA-C02 (Page 27)

A company wants to share information with a third party.The third party has an HTTP API endpoint that the company can use to share the information.The company has the required API key to access the HTTP API.The company needs a way to manage the API key by using code.The integration of the API key with the application code cannot affect application performance.Which solution will meet these requirements MOST securely?Read More →

A developer is creating an AWS CloudFormation template to deploy Amazon EC2 instances across multiple AWS accounts.The developer must choose the EC2 instances from a list of approved instance types.How can the developer incorporate the list of approved instance types in the CloudFormation template?Read More →

An application is using Amazon Cognito user pools and identity pools for secure access.A developer wants to integrate the user-specific file upload and download features in the application with Amazon S3.The developer must ensure that the files are saved and retrieved in a secure manner and that users can access only their own files.The file sizes range from 3 KB to 300 MB.Which option will meet these requirements with the HIGHEST level of security?Read More →

A company is implementing an application on Amazon EC2 instances.The application needs to process incoming transactions.When the application detects a transaction that is not valid, the application must send a chat message to the company’s support team.To send the message, the application needs to retrieve the access token to authenticate by using the chat API.A developer needs to implement a solution to store the access token.The access token must be encrypted at rest and in transit.The access token must also be accessible from other AWS accounts.Which solution will meet these requirements with the LEAST management overhead?Read More →

A developer is writing an application that will retrieve sensitive data from a third-party system.The application will format the data into a PDF file.The PDF file could be more than 1 MB.The application will encrypt the data to disk by using AWS Key Management Service (AWS KMS).The application will decrypt the file when a user requests to download it.The retrieval and formatting portions of the application are complete.The developer needs to use the GenerateDataKey API to encrypt the PDF file so that the PDF file can be decrypted later.The developer needs to use an AWS KMS symmetric customer managed key for encryption.Which solutions will meet these requirements?Read More →

A company is using AWS Elastic Beanstalk to manage web applications that are running on Amazon EC2 instances.A developer needs to make configuration changes.The developer must deploy the changes to new instances only.Which types of deployment can the developer use to meet this requirement? (Choose two.)Read More →

A developer created a web API that receives requests by using an internet-facing Application Load Balancer (ALB) with an HTTPS listener.The developer configures an Amazon Cognito user pool and wants to ensure that every request to the API is authenticated through Amazon Cognito.What should the developer do to meet this requirement?Read More →

A developer has created a large AWS Lambda function.Deployment of the function is failing because of an InvalidParameterValueException error.The error message indicates that the unzipped size of the function exceeds the maximum supported value.Which actions can the developer take to resolve this error? (Choose two.)Read More →

A developer registered an AWS Lambda function as a target for an Application Load Balancer (ALB) using a CLI command.However, the Lambda function is not being invoked when the client sends requests through the ALB.Why is the Lambda function not being invoked?Read More →

A developer needs to build an AWS CloudFormation template that self-populates the AWS Region variable that deploys the CloudFormation template.What is the MOST operationally efficient way to determine the Region in which the template is being deployed?Read More →