DVA-C02 Free Practice Test

A company is building a scalable data management solution by using AWS services to improve the speed and agility of development. The solution will ingest large volumes of data from various sources and will process this data through multiple business rules and transformations.
The solution requires business rules to run in sequence and to handle reprocessing of data if errors occur when the business rules run. The company needs the solution to be scalable and to require the least possible maintenance.
Which AWS service should the company use to manage and automate the orchestration of the data flows to meet these requirements?

1. A. AWS Batch
2. B. AWS Step Functions
3. C. AWS Glue
4. D. AWS Lambda

Correct Answer: D

A company wants to deploy and maintain static websites on AWS. Each website's source code is hosted in one of several version control systems, including AWS CodeCommit, Bitbucket, and GitHub.
The company wants to implement phased releases by using development, staging, user acceptance testing, and production environments in the AWS Cloud. Deployments to each environment must be started by code merges on the relevant Git branch. The company wants to use HTTPS for all data exchange. The company needs a solution that does not require servers to run continuously.
Which solution will meet these requirements with the LEAST operational overhead?

1. A. Host each website by using AWS Amplify with a serverless backen
2. B. Conned the repository branches that correspond to each of the desired environment
3. C. Start deployments by merging code changes to a desired branch.
4. D. Host each website in AWS Elastic Beanstalk with multiple environment
5. E. Use the EB CLI to link each repository branc
6. F. Integrate AWS CodePipeline to automate deployments from version control code merges.
7. G. Host each website in different Amazon S3 buckets for each environmen
8. H. Configure AWS CodePipeline to pull source code from version contro
9. I. Add an AWS CodeBuild stage to copy source code to Amazon S3.
10. J. Host each website on its own Amazon EC2 instanc
11. K. Write a custom deployment script to bundle each website's static asset
12. L. Copy the assets to Amazon EC2. Set up a workflow to run the script when code is merged.

Correct Answer: A

An application is processing clickstream data using Amazon Kinesis. The clickstream data feed into Kinesis experiences periodic spikes. The PutRecords API call occasionally fails and the logs show that the failed call returns the response shown below:

Which techniques will help mitigate this exception? (Choose two.)

1. A. Which techniques will help mitigate this exception? (Choose two.)
2. B. Use a PutRecord API instead of PutRecords.
3. C. Reduce the frequency and/or size of the requests.
4. D. Use Amazon SNS instead of Kinesis.
5. E. Reduce the number of KCL consumers.

Correct Answer: AC

An application that is hosted on an Amazon EC2 instance needs access to files that are stored in an Amazon S3 bucket. The application lists the objects that are stored in the S3 bucket and displays a table to the user. During testing, a developer discovers that the application does not show any objects in the list.
What is the MOST secure way to resolve this issue?

1. A. Update the IAM instance profile that is attached to the EC2 instance to include the S3:* permission for the S3 bucket.
2. B. Update the IAM instance profile that is attached to the EC2 instance to include the S3:ListBucket permission for the S3 bucket.
3. C. Update the developer's user permissions to include the S3:ListBucket permission for the S3 bucket.
4. D. Update the S3 bucket policy by including the S3:ListBucket permission and by setting the Principal element to specify the account number of the EC2 instance.

Correct Answer: B

A company needs to harden its container images before the images are in a running state. The company's application uses Amazon Elastic Container Registry (Amazon ECR) as an image registry. Amazon Elastic Kubernetes Service (Amazon EKS) forcompute, and an AWS CodePipeline pipeline that orchestrates a continuous integration and continuous delivery (CI/CD) workflow.
Dynamic application security testing occurs in the final stage of the pipeline after a new image is deployed to a development namespace in the EKS cluster. A developer needs to place an analysis stage before this
deployment to analyze the container image earlier in the CI/CD pipeline.
Which solution will meet these requirements with the MOST operational efficiency?

1. A. Build the container image and run the docker scan command locall
2. B. Mitigate any findings before pushing changes to the source code repositor
3. C. Write a pre-commit hook that enforces the use of this workflow before commit.
4. D. Create a new CodePipeline stage that occurs after the container image is buil
5. E. Configure ECR basic image scanning to scan on image pus
6. F. Use an AWS Lambda function as the action provide
7. G. Configure the Lambda function to check the scan results and to fail the pipeline if there are findings.
8. H. Create a new CodePipeline stage that occurs after source code has been retrieved from its repository.Run a security scanner on the latest revision of the source cod
9. I. Fail the pipeline if there are findings.
10. J. Add an action to the deployment stage of the pipeline so that the action occurs before the deployment to the EKS cluste
11. K. Configure ECR basic image scanning to scan on image pus
12. L. Use an AWS Lambda function as the action provide
13. M. Configure the Lambda function to check the scan results and to fail the pipeline if there are findings.

Correct Answer: D