DVA-C02 Free Practice Test

An application that is hosted on an Amazon EC2 instance needs access to files that are stored in an Amazon S3 bucket. The application lists the objects that are stored in the S3 bucket and displays a table to the user. During testing, a developer discovers that the application does not show any objects in the list.
What is the MOST secure way to resolve this issue?

1. A. Update the IAM instance profile that is attached to the EC2 instance to include the S3:* permission for the S3 bucket.
2. B. Update the IAM instance profile that is attached to the EC2 instance to include the S3:ListBucket permission for the S3 bucket.
3. C. Update the developer's user permissions to include the S3:ListBucket permission for the S3 bucket.
4. D. Update the S3 bucket policy by including the S3:ListBucket permission and by setting the Principal element to specify the account number of the EC2 instance.

Correct Answer: B

A company needs to harden its container images before the images are in a running state. The company's application uses Amazon Elastic Container Registry (Amazon ECR) as an image registry. Amazon Elastic Kubernetes Service (Amazon EKS) forcompute, and an AWS CodePipeline pipeline that orchestrates a continuous integration and continuous delivery (CI/CD) workflow.
Dynamic application security testing occurs in the final stage of the pipeline after a new image is deployed to a development namespace in the EKS cluster. A developer needs to place an analysis stage before this
deployment to analyze the container image earlier in the CI/CD pipeline.
Which solution will meet these requirements with the MOST operational efficiency?

1. A. Build the container image and run the docker scan command locall
2. B. Mitigate any findings before pushing changes to the source code repositor
3. C. Write a pre-commit hook that enforces the use of this workflow before commit.
4. D. Create a new CodePipeline stage that occurs after the container image is buil
5. E. Configure ECR basic image scanning to scan on image pus
6. F. Use an AWS Lambda function as the action provide
7. G. Configure the Lambda function to check the scan results and to fail the pipeline if there are findings.
8. H. Create a new CodePipeline stage that occurs after source code has been retrieved from its repository.Run a security scanner on the latest revision of the source cod
9. I. Fail the pipeline if there are findings.
10. J. Add an action to the deployment stage of the pipeline so that the action occurs before the deployment to the EKS cluste
11. K. Configure ECR basic image scanning to scan on image pus
12. L. Use an AWS Lambda function as the action provide
13. M. Configure the Lambda function to check the scan results and to fail the pipeline if there are findings.

Correct Answer: D

A developer is working on a serverless application that needs to process any changes to an Amazon DynamoDB table with an AWS Lambda function.
How should the developer configure the Lambda function to detect changes to the DynamoDB table?

1. A. Create an Amazon Kinesis data stream, and attach it to the DynamoDB tabl
2. B. Create a trigger to connect the data stream to the Lambda function.
3. C. Create an Amazon EventBridge rule to invoke the Lambda function on a regular schedul
4. D. Conned to the DynamoDB table from the Lambda function to detect changes.
5. E. Enable DynamoDB Streams on the tabl
6. F. Create a trigger to connect the DynamoDB stream to the Lambda function.
7. G. Create an Amazon Kinesis Data Firehose delivery stream, and attach it to the DynamoDB table.Configure the delivery stream destination as the Lambda function.

Correct Answer: C

A development team wants to build a continuous integration/continuous delivery (CI/CD) pipeline. The team is using AWS CodePipeline to automate the code build and deployment. The team wants to store the program code to prepare for the CI/CD pipeline.
Which AWS service should the team use to store the program code?

1. A. AWS CodeDeploy
2. B. AWS CodeArtifact
3. C. AWS CodeCommit
4. D. Amazon CodeGuru

Correct Answer: C

A developer wants to store information about movies. Each movie has a title, release year, and genre. The movie information also can include additional properties about the cast and production crew. This additional information is inconsistent across movies. For example, one movie might have an assistant director, and another movie might have an animal trainer.
The developer needs to implement a solution to support the following use cases:
For a given title and release year, get all details about the movie that has that title and release year. For a given title, get all details about all movies that have that title.
For a given genre, get all details about all movies in that genre. Which data store configuration will meet these requirements?

1. A. Create an Amazon DynamoDB tabl
2. B. Configure the table with a primary key that consists of the title as the partition key and the release year as the sort ke
3. C. Create a global secondary index that uses the genre as the partition key and the title as the sort key.
4. D. Create an Amazon DynamoDB tabl
5. E. Configure the table with a primary key that consists of the genre as the partition key and the release year as the sort ke
6. F. Create a global secondary index that uses the title as the partition key.
7. G. On an Amazon RDS DB instance, create a table that contains columns for title, release year, and genre.Configure the title as the primary key.
8. H. On an Amazon RDS DB instance, create a table where the primary key is the title and all other data is encoded into JSON format as one additional column.

Correct Answer: A