🔍

DVA-C02 — questions

Page 16 of 28 · 557 total questions.

DVA-C02 Question 301

Single page →
Topic 1 · Question 301

A developer is building a serverless application on AWS for a workflow that processes high volumes of data. In the workflow, an AWS Step Functions state machine invokes several AWS Lambda functions. One of the Lambda functions occasionally fails because of timeout errors during periods of high demand. The developer must ensure that the workflow automatically retries the failed function invocation if a timeout error occurs. Which solution will meet this requirement?

  • AAdd a Retry field in the Step Functions state machine definition. Configure the state machine with the maximum number of retry attempts and the timeout error type to retry on. (correct answer)
  • BAdd a Timeout field in the Step Functions state machine definition. Configure the state machine with the maximum number of retry attempts.
  • CAdd a Fail state to the Step Functions state machine definition. Configure the state machine with the maximum number of retry attempts.
  • DUpdate the Step Functions state machine to pass the invocation request to an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe a Lambda function to the SNS topic. Configure the Lambda function with the maximum number of retry attempts for a timeout error type.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Add a Retry field in the Step Functions state machine definition. Configure the state machine with the maximum number of retry attempts and the timeout error type to retry on.

Explanation

AWS Step Functions coordinates multi-step workflows as a managed state machine. AWS Config tracks resource configuration changes and evaluates compliance.

DVA-C02 Question 302

Single page →
Topic 1 · Question 302

A company runs a serverless application on AWS. The application includes an AWS Lambda function. The Lambda function processes data and stores the data in an Amazon RDS for PostgreSQL database. A developer created a user credentials in the database for the application. The developer needs to use AWS Secrets Manager to manage the user credentials. The password must to be rotated on a regular basis. The solution needs to ensure that there is high availability and no downtime for the application during secret rotation. What should the developer do to meet these requirements?

  • AConfigure managed rotation with the single user rotation strategy.
  • BConfigure managed rotation with the alternating users rotation strategy.
  • CConfigure automatic rotation with the single user rotation strategy.
  • DConfigure automatic rotation with the alternating users rotation strategy. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Configure automatic rotation with the alternating users rotation strategy.

Explanation

AWS Config tracks resource configuration changes and evaluates compliance.

DVA-C02 Question 303

Single page →
Topic 1 · Question 303

A company runs an application on AWS. The application consists of a static website that is hosted on Amazon S3. The application includes Amazon API Gateway APIs that invoke AWS Lambda functions. During a period of high traffic on the application, application users reported that the application was slow at irregular intervals. There were no failed requests. A developer needs to find the slow executions across all the Lambda functions. Which solution will meet these requirements?

  • APerform a query across all the Lambda function log groups by using Amazon CloudWatch Logs Insights. Filter on type of report and sort descending by Lambda function execution duration.
  • BEnable AWS CloudTrail Insights on the account where the Lambda functions are running. After CloudTrail Insights has finished processing, review CloudTrail Insights to find the anomalous functions.
  • CEnable AWS X-Ray for all the Lambda functions. Configure an X-Ray insight on a new group that includes all the Lambda functions. After the X-Ray insight has finished processing, review the X-Ray logs. (correct answer)
  • DSet up AWS Glue to crawl through the logs in Amazon CloudWatch Logs for the Lambda functions. Configure an AWS Glue job to transform the logs into a structured format and to output the logs into Amazon S3. Use the Amazon CloudWatch dashboard to visualize the slowest functions based on the duration.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Enable AWS X-Ray for all the Lambda functions. Configure an X-Ray insight on a new group that includes all the Lambda functions. After the X-Ray insight has finished processing, review the X-Ray logs.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. AWS Config tracks resource configuration changes and evaluates compliance. AWS X-Ray traces requests to analyze and debug distributed applications.

DVA-C02 Question 304

Single page →
Topic 1 · Question 304

A company is building a serverless application on AWS. The application uses Amazon API Gateway and AWS Lambda. The company wants to deploy the application to its development, test, and production environments. Which solution will meet these requirements with the LEAST development effort?

  • AUse API Gateway stage variables and create Lambda aliases to reference environment-specific resources. (correct answer)
  • BUse Amazon Elastic Container Service (Amazon ECS) to deploy the application to the environments.
  • CDuplicate the code for each environment. Deploy the code to a separate API Gateway stage.
  • DUse AWS Elastic Beanstalk to deploy the application to the environments.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use API Gateway stage variables and create Lambda aliases to reference environment-specific resources.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon API Gateway is a fully managed front door for creating and securing APIs at scale. This option needs the least custom development effort.

DVA-C02 Question 305

Single page →
Topic 1 · Question 305

A developer uses AWS CloudFormation to deploy an Amazon API Gateway API and an AWS Step Functions state machine. The state machine must reference the API Gateway API after the CloudFormation template is deployed. The developer needs a solution that uses the state machine to reference the API Gateway endpoint. Which solution will meet these requirements MOST cost-effectively?

  • AConfigure the CloudFormation template to reference the API endpoint in the DefinitionSubstitutions property for the AWS::StepFunctions::StateMachine resource. (correct answer)
  • BConfigure the CloudFormation template to store the API endpoint in an environment variable for the AWS::StepFunctions::StateMachine resource. Configure the state machine to reference the environment variable.
  • CConfigure the CloudFormation template to store the API endpoint in a standard AWS::SecretsManager::Secret resource. Configure the state machine to reference the resource.
  • DConfigure the CloudFormation template to store the API endpoint in a standard AWS::AppConfig::ConfigurationProfile resource. Configure the state machine to reference the resource.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Configure the CloudFormation template to reference the API endpoint in the DefinitionSubstitutions property for the AWS::StepFunctions::StateMachine resource.

Explanation

AWS Config tracks resource configuration changes and evaluates compliance. AWS CloudFormation provisions infrastructure as code repeatably. This option delivers the requirement at the lowest cost.

DVA-C02 Question 306

Single page →
Topic 1 · Question 306

A developer is building an application on AWS. The application includes an AWS Lambda function that processes messages from an Amazon Simple Queue Service (Amazon SQS) queue. The Lambda function sometimes fails or times out. The developer needs to figure out why the Lambda function fails to process some messages. Which solution will meet these requirements with the LEAST operational overhead?

  • AIncrease the maximum timeout of the Lambda function to 15 minutes. Check the AWS CloudTrail event history for error details.
  • BIncrease the visibility timeout of the SQS queue. Check logs in Amazon CloudWatch Logs for error details.
  • CCreate a dead-letter queue. Configure the Lambda function to send the failed messages to the dead-letter queue. (correct answer)
  • DCreate an Amazon DynamoDB table. Update the Lambda function to send the failed messages to the DynamoDB table.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create a dead-letter queue. Configure the Lambda function to send the failed messages to the dead-letter queue.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. AWS Config tracks resource configuration changes and evaluates compliance.

DVA-C02 Question 307

Single page →
Topic 1 · Question 307

A developer needs to deploy an application in three AWS Regions by using AWS CloudFormation. Each Region will use an AWS Elastic Beanstalk environment with an Application Load Balancer (ALB). The developer wants to use AWS Certificate Manager (ACM) to deploy SSL certificates to each ALB. Which solution will meet these requirements?

  • ACreate a certificate in ACM in any one of the Regions. Import the certificate into the ALB that is in each Region.
  • BCreate a global certificate in ACM. Update the CloudFormation template to deploy the global certificate to each ALB.
  • CCreate a certificate in ACM in each Region. Import the certificate into the ALB for each Region. (correct answer)
  • DCreate a certificate in ACM in the us-east-1 Region. Update the CloudFormation template to deploy the certificate to each ALB.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create a certificate in ACM in each Region. Import the certificate into the ALB for each Region.

Explanation

AWS Certificate Manager provisions and renews TLS certificates automatically.

DVA-C02 Question 308

Single page →
Topic 1 · Question 308

A company needs to deploy all its cloud resources by using AWS CloudFormation templates. A developer must create an Amazon Simple Notification Service (Amazon SNS) automatic notification to help enforce this rule. The developer creates an SNS topic and subscribes the email address of the company's security team to the SNS topic. The security team must receive a notification immediately if an IAM role is created without the use of CloudFormation. Which solution will meet this requirement?

  • ACreate an AWS Lambda function to filter events from CloudTrail if a role was created without CloudFormation. Configure the Lambda function to publish to the SNS topic. Create an Amazon EventBridge schedule to invoke the Lambda function every 15 minutes.
  • BCreate an AWS Fargate task in Amazon Elastic Container Service (Amazon ECS) to filter events from CloudTrail if a role was created without CloudFormation. Configure the Fargate task to publish to the SNS topic. Create an Amazon EventBridge schedule to run the Fargate task every 15 minutes.
  • CLaunch an Amazon EC2 instance that includes a script to filter events from CloudTrail if a role was created without CloudFormation. Configure the script to publish to the SNS topic. Create a cron job to run the script on tile EC2 instance every 15 minutes.
  • DCreate an Amazon EventBridge rule to filter events from CloudTrail if a role was created without CloudFormation. Specify the SNS topic as the target of the EventBridge rule. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Create an Amazon EventBridge rule to filter events from CloudTrail if a role was created without CloudFormation. Specify the SNS topic as the target of the EventBridge rule.

Explanation

Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers. Amazon EventBridge routes events between services with rules, enabling event-driven, decoupled architectures. AWS CloudTrail records API activity for auditing and governance.

DVA-C02 Question 309

Single page →
Topic 1 · Question 309

A company is adopting serverless computing for some of its new services. A development team needs to create a serverless infrastructure by using AWS Serverless Application Model (AWS SAM). All infrastructure must be deployed by using AWS CloudFormation templates. What should the development team do to meet these requirements?

  • AAdd a Resources section to the CloudFormation templates that contains AWS::Lambda::Function resources.
  • BAdd a Mappings section to the CloudFormation templates that contains AWS::Serverless::Function and AWS::Serverless::API.
  • CAdd a Transform section to the CloudFormation templates. Use the AWS SAM syntax to define the resources. (correct answer)
  • DAdd a Parameters section to the CloudFormation templates that specifies the relevant AWS SAM Globals section.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Add a Transform section to the CloudFormation templates. Use the AWS SAM syntax to define the resources.

Explanation

AWS CloudFormation provisions infrastructure as code repeatably.

DVA-C02 Question 310

Single page →
Topic 1 · Question 310

A developer is building an application that invokes AWS Lambda functions asynchronously to process events. The developer notices that a Lambda function fails to process some events at random times. The developer needs to investigate the failed events and capture the events that the Lambda function fails to process. Which solution will meet these requirements?

  • AAdd an Amazon EventBridge rule for the Lambda function. Configure the EventBridge rule to react to failed events and to store the events in an Amazon DynamoDB table.
  • BConfigure the Lambda function with a dead-letter queue based in Amazon Kinesis. Update the Lambda function's execution role with the required permissions.
  • CConfigure the Lambda function with an Amazon Simple Queue Service (Amazon SQS) dead-letter queue. Update the Lambda function's execution role with the required permissions. (correct answer)
  • DConfigure the Lambda function with an Amazon Simple Queue Service (Amazon SQS) FIFO dead-letter queue. Update the Lambda function's execution role with the required permissions.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Configure the Lambda function with an Amazon Simple Queue Service (Amazon SQS) dead-letter queue. Update the Lambda function's execution role with the required permissions.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon SQS is a fully managed message queue that decouples components and absorbs traffic spikes. AWS Config tracks resource configuration changes and evaluates compliance. This option decouples the components so they scale independently and absorb load spikes.

DVA-C02 Question 311

Single page →
Topic 1 · Question 311

A company has built a serverless application for its ecommerce website. The application includes a REST API in Amazon API Gateway that invokes an AWS Lambda function. The Lambda function processes data and stores the data in Amazon DynamoDB table. The Lambda function calls a third-party stock application API to process the order. After the ordered is processed, the Lambda function returns an HTTP 200 status code with no body to the client. During peak usage when the API calls exceeds a certain threshold, the third-party stock application sometimes fails to process the data and responds with error messages. The company needs a solution that will not overwhelm the third-party stock application. Which solution will meet these requirements?

  • AConfigure the REST API in API Gateway to write the requests directly into DynamoDB. Configure a DynamoDB intrinsic function to perform the transformation. Set up a DynamoDB stream to call the third-party stock application API with each new row. Delete the Lambda function.
  • BConfigure the REST API in API Gateway to write the requests directly into an Amazon Simple Queue Service (Amazon SQS) queue. Configure the Lambda function with a reserved concurrency equal to the third-party stock application's threshold. Set Lambda function to process the messages from the SQS queue. (correct answer)
  • CConfigure the REST API in API Gateway to write the requests directly into an Amazon Simple Notification Service (Amazon SNS) topic. Configure the Lambda function with a provisioned concurrency equal to the third-party stock application's threshold. Set the Lambda function to process the messages from the SNS topic.
  • DConfigure the REST API in API Gateway to write the requests directly into Amazon Athena. Configure the transformation of the data by using SQL with multiple query result locations set up to point to the DynamoDB table and the third-party stock fulfilment application API. Delete the Lambda function.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Configure the REST API in API Gateway to write the requests directly into an Amazon Simple Queue Service (Amazon SQS) queue. Configure the Lambda function with a reserved concurrency equal to the third-party stock app...

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon SQS is a fully managed message queue that decouples components and absorbs traffic spikes. Amazon API Gateway is a fully managed front door for creating and securing APIs at scale.

DVA-C02 Question 312

Single page →
Topic 1 · Question 312

A company hosts its application on AWS. The application runs on an Amazon Elastic Container Service (Amazon ECS) cluster that uses AWS Fargate. The cluster runs behind an Application Load Balancer. The application stores data in an Amazon Aurora database. A developer encrypts and manages database credentials inside the application. The company wants to use a more secure credential storage method and implement periodic credential rotation. Which solution will meet these requirements with the LEAST operational overhead?

  • AMigrate the secret credentials to Amazon RDS parameter groups. Encrypt the parameter by using an AWS Key Management Service (AWS KMS) key. Turn on secret rotation. Use IAM policies and roles to grant AWS KMS permissions to access Amazon RDS.
  • BMigrate the credentials to AWS Systems Manager Parameter Store. Encrypt the parameter by using an AWS Key Management Service (AWS KMS) key. Turn on secret rotation. Use IAM policies and roles to grant Amazon ECS Fargate permissions to access to AWS Secrets Manager.
  • CMigrate the credentials to ECS Fargate environment variables. Encrypt the credentials by using an AWS Key Management Service (AWS KMS) key. Turn on secret rotation. Use IAM policies and roles to grant Amazon ECS Fargate permissions to access to AWS Secrets Manager.
  • DMigrate the credentials to AWS Secrets Manager. Encrypt the credentials by using an AWS Key Management Service (AWS KMS) key. Turn on secret rotation. Use IAM policies and roles to grant Amazon ECS Fargate permissions to access to AWS Secrets Manager by using keys. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Migrate the credentials to AWS Secrets Manager. Encrypt the credentials by using an AWS Key Management Service (AWS KMS) key. Turn on secret rotation. Use IAM policies and roles to grant Amazon ECS Fargate permissions...

Explanation

AWS Fargate runs containers serverlessly so there are no EC2 hosts to manage or patch. Amazon ECS orchestrates containers and integrates natively with AWS networking and IAM. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

DVA-C02 Question 313

Single page →
Topic 1 · Question 313

A company has a mobile app. The app includes an Amazon API Gateway REST API that invokes AWS Lambda functions. The Lambda functions process data from the app. The company needs to test updated Lambda functions that have new features. The company must conduct these tests with a subset of users before deployment. The tests must not affect other users of the app. Which solution will meet these requirements with the LEAST amount of operational effort?

  • ACreate a new version of each Lambda function with a weighted alias. Configure a weight value for each version of the Lambda function. Update the new weighted alias Amazon Resource Name (ARN) in the REST API. (correct answer)
  • BCreate a new REST API in API Gateway. Set up a Lambda proxy integration to connect to multiple Lambda functions. Enable canary settings on the deployment stage. Specify a smaller percentage of API traffic to go to the new version of the Lambda function.
  • CCreate a new version of each Lambda function. Integrate a predefined canary deployment in AWS CodeDeploy to slowly shift the traffic to the new versions automatically.
  • DCreate a new REST API in API Gateway. Set up a Lambda non-proxy integration to connect to multiple Lambda functions. Specify the necessary parameters and properties in API Gateway. Enable canary settings on the deployment stage. Specify a smaller percentage of API traffic to go to the new version of the Lambda function.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create a new version of each Lambda function with a weighted alias. Configure a weight value for each version of the Lambda function. Update the new weighted alias Amazon Resource Name (ARN) in the REST API.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. AWS Config tracks resource configuration changes and evaluates compliance.

DVA-C02 Question 314

Single page →
Topic 1 · Question 314

A developer works for a company that only has a single pre-production AWS account with an AWS CloudFormation AWS Serverless Application Model (AWS SAM) stack. The developer made changes to an existing AWS Lambda function specified in the AWS SAM template and additional Amazon Simple Notification service (Amazon SNS) topics. The developer wants to do a one-time deploy of the changes to test if the changes are working. The developer does not want to impact the existing pre-production application that is currently being used by other team members as part of the release pipeline. Which solution will meet these requirements?

  • AUse the AWS SAM CLI to package and deploy the SAM application to the pre-production AWS account. Specify the debug parameter.
  • BUse the AWS SAM CLI to package and create a change set against the pre-production AWS account. Execute the change set in a new AWS account designated for a development environment.
  • CUse the AWS SAM CLI to package and deploy the SAM application to a new AWS account designated for a development environment. (correct answer)
  • DUpdate the CloudFormation stack in the pre-production account. Add a separate stage that points to a new AWS account designated for a development environment.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Use the AWS SAM CLI to package and deploy the SAM application to a new AWS account designated for a development environment.

DVA-C02 Question 315

Single page →
Topic 1 · Question 315

A company built an online event platform. For each event, the company organizes quizzes and generates leaderboards that are based on the quiz scores. The company stores the leaderboard data in Amazon DynamoDB and retains the data for 30 days after an event is complete. The company then uses a scheduled job to delete the old leaderboard data. The DynamoDB table is configured with a fixed write capacity. During the months when many events occur, the DynamoDB write API requests are throttled when the scheduled delete job runs. A developer must create a long-term solution that deletes the old leaderboard data and optimizes write throughput. Which solution meets these requirements?

  • AConfigure a TTL attribute for the leaderboard data. (correct answer)
  • BUse DynamoDB Streams to schedule and delete the leaderboard data.
  • CUse AWS Step Functions to schedule and delete the leaderboard data.
  • DSet a higher write capacity when the scheduled delete job runs.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Configure a TTL attribute for the leaderboard data.

Explanation

AWS Config tracks resource configuration changes and evaluates compliance.

DVA-C02 Question 316

Single page →
Topic 1 · Question 316

A company uses an AWS Lambda function that reads messages from an Amazon Simple Queue Service (Amazon SQS) standard queue. The Lambda function makes an HTTP call to a third-party API for each message. The company wants to ensure that the Lambda function does not overwhelm the third-party API with more than two concurrent requests. Which solution will meet these requirements?

  • AConfigure a provisioned concurrency of two on the Lambda function.
  • BConfigure a batch size of two on the Amazon SQS event source mapping for the Lambda function.
  • CConfigure Lambda event filtering to process two messages from Amazon SQS at every invocations.
  • DConfigure a maximum concurrency of two on the Amazon SQS event source mapping for the Lambda function. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Configure a maximum concurrency of two on the Amazon SQS event source mapping for the Lambda function.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon SQS is a fully managed message queue that decouples components and absorbs traffic spikes. AWS Config tracks resource configuration changes and evaluates compliance.

DVA-C02 Question 317

Single page →
Topic 1 · Question 317

A company is using Amazon API Gateway to develop an API for its application on AWS. A developer needs to test and generate API responses. Other teams are required to test the API immediately. What should the developer do to meet these requirements?

  • ASet up a mock integration request in API Gateway. Configure the method's integration request and integration response to associate a response with a given status code. (correct answer)
  • BSet up the request validators in the API's OpenAPI definition file. Import the OpenAPI definitions into API Gateway to test the API.
  • CSet up a gateway response for the API in API Gateway. Configure response headers with hardcoded HTTP status codes and responses.
  • DSet up a request parameter-based Lambda authorizer to control access to the API. Configure the Lambda function with the necessary mapping template.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Set up a mock integration request in API Gateway. Configure the method's integration request and integration response to associate a response with a given status code.

Explanation

Amazon API Gateway is a fully managed front door for creating and securing APIs at scale. AWS Config tracks resource configuration changes and evaluates compliance.

DVA-C02 Question 318

Single page →
Topic 1 · Question 318

A company is releasing a new feature. Users can request early access to the new feature by using an application form. The company expects a surge of requests when the application form becomes available. Each request will be stored as an item in an Amazon DynamoDB table. Each item will contain the user's username, the submission date, and a validation status of UNVALIDATED. VALID, or NOT VALID. Each item also will contain the user's rating of the process on a scale of 1 to 5. Each user can submit one request. For the DynamoDB table, the developer must choose a partition key that will give the workload well-distributed records across partitions. Which DynamoDB attribute will meet these requirements?

  • AUsername (correct answer)
  • BSubmission date
  • CValidation status
  • DRating of the process on a scale of 1 to 5
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Username.

DVA-C02 Question 319

Single page →
Topic 1 · Question 319

A developer is creating a publicly accessible enterprise website consisting of only static assets. The developer is hosting the website in Amazon S3 and serving the website to users through an Amazon CloudFront distribution. The users of this application must not be able to access the application content directly from an S3 bucket. All content must be served through the Amazon CloudFront distribution. Which solution will meet these requirements?

  • ACreate a new origin access control (OAC) in CloudFront. Configure the CloudFront distribution's origin to use the new OAC. Update the S3 bucket policy to allow CloudFront OAC with read and write access to access Amazon S3 as the origin. (correct answer)
  • BUpdate the S3 bucket settings. Enable the block all public access setting in Amazon S3. Configure the CloudFront distribution's with Amazon S3 as the origin. Update the S3 bucket policy to allow CloudFront write access.
  • CUpdate the S3 bucket's static website settings. Enable static website hosting and specifying index and error documents. Update the CloudFront origin to use the S3 bucket's website endpoint.
  • DUpdate the CloudFront distribution's origin to send a custom header. Update the S3 bucket policy with a condition by using the aws:RequestTag/tag-key key. Configure the tag-key as the custom header name, and the value being matched is the header's value.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create a new origin access control (OAC) in CloudFront. Configure the CloudFront distribution's origin to use the new OAC. Update the S3 bucket policy to allow CloudFront OAC with read and write access to access Amazo...

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon CloudFront caches content at edge locations to reduce latency and offload origins. AWS Config tracks resource configuration changes and evaluates compliance.

DVA-C02 Question 320

Single page →
Topic 1 · Question 320

A developer built an application that calls an external API to obtain data, processes the data, and saves the result to Amazon S3. The developer built a container image with all of the necessary dependencies to run the application as a container. The application runs locally and requires minimal CPU and RAM resources. The developer has created an Amazon ECS cluster. The developer needs to run the application hourly in Amazon Elastic Container Service (Amazon ECS). Which solution will meet these requirements with the LEAST amount of infrastructure management overhead?

  • AAdd a capacity provider to manage instances.
  • BAdd an Amazon EC2 instance that runs the application.
  • CDefine a task definition with an AWS Fargate launch type. (correct answer)
  • DCreate an Amazon ECS cluster and add the managed node groups feature to run the application.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Define a task definition with an AWS Fargate launch type.

Explanation

AWS Fargate runs containers serverlessly so there are no EC2 hosts to manage or patch.

Showing questions 301–320 of 557 · Page 16 of 28