Question 1

An organization has an Amazon S3 bucket containing premier content that they intend to make available to only paid subscribers of their website. The objects in the S3 bucket are private to prevent inadvertent exposure of the premier content to non-paying website visitors.

How can the organization provide only paid subscribers the ability to download the premier content in the S3 bucket?

Options :

A : Enable server-side encryption on the S3 bucket for data protection against the non-paying website visitors

B : Apply a bucket policy that grants anonymous users to download the content from the S3 bucket

C : Generate a pre-signed object URL for the premier content file when a paid subscriber requests a download

D : Add a bucket policy that requires Multi-Factor Authentication for requests to access the S3 bucket objects

Answer: C

Question 2

A company is planning to use AWS CodeDeploy to deploy a new AWS Lambda function

What are the MINIMUM properties required in the 'resources' section of the AppSpec file for CodeDeploy to deploy the function successfully?

Options :

A : TaskDefinition, PlatformVersion, and ContainerName

B : name, alias, PlatformVersion, and type

C : name, alias, currentversion, and targetversion

D : TaskDefinition, LoadBalancerInfo, and ContainerPort

Answer: C

Question 3

An e-commerce company has multiple EC2 instances operating in a private subnet which is part of a custom VPC. These instances are running an image processing application that needs to access images stored on S3. Once each image is processed, the status of the corresponding record needs to be marked as completed in a DynamoDB table.

How would you go about providing private access to these AWS resources which are not part of this custom VPC?

Options :

A : Create a separate gateway endpoint for S3 and DynamoDB each. Add two new target entries for these two gateway endpoints in the route table of the custom VPC

B : Create a separate interface endpoint for S3 and DynamoDB each. Then connect to these services using the private IP address

C : Create a gateway endpoint for S3 and add it as a target in the route table of the custom VPC. Create an interface endpoint for DynamoDB and then connect to the DynamoDB service using the private IP address

D : Create a gateway endpoint for DynamoDB and add it as a target in the route table of the custom VPC. Create an API endpoint for S3 and then connect to the S3 service using the private IP address

Answer: A

Question 4

A Developer is writing a web application that allows users to view images from an Amazon S3 bucket. The users will log in with their Amazon login, as well as Facebook and/or Google accounts.

How can the Developer provide this authentication capability?

Options :

A : Use AWS STS AssumeRole in the application code and assume a role with Get* permissions on the S3 bucket

B : Use Amazon Cognito with SAML-based identity federation

C : Use AWS IAM Access/Secret keys in the application code to allow Get* on the S3 bucket

D : Use Amazon Cognito with web identity federation

Answer: D

Question 5

A company wants to test its web application more frequently. The company deploys the application by using a separate AWS CloudFormation stack for each environment. The company deploys the same CloudFormation template to each stack as the application progresses through the development lifecycle.

A developer needs to build in notifications for the quality assurance (QA) team. The developer wants the notifications to occur for new deployments in the final preproduction environment.

Which solution will meet these requirements?

Options :

A : Create an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe the QA team to the Amazon SNS topic. Update the CloudFormation stack options to point to the SNS topic in the pre-production environment.

B : Create an AWS Lambda function that notifies the QA team. Create an Amazon EventBridge rule to invoke the Lambda function on the default event bus. Filter the events on the CloudFormation service and on the CloudFormation stack Amazon Resource Name (ARN).

C : Create an Amazon CloudWatch alarm that monitors the metrics from CloudFormation. Filter the metrics on the stack name and the stack status. Configure the CloudWatch alarm to notify the QA team.

D : Create an AWS Lambda function that notifies the QA team. Configure the event source mapping to receive events from CloudFormation. Specify the filtering values to limit invocations to the desired CloudFormation stack.

Answer: A

Free DVA-C02 Mock Exam – Practice Online Confidently

Buying Options: