Question 1

A security company is requiring all developers to perform server-side encryption with customer-provided encryption keys when performing operations in AWS S3. Developers should write software with C# using the AWS SDK and implement the requirement in the PUT, GET, Head, and Copy operations.

Which of the following encryption methods meets this requirement?

Options :

A : Client-Side Encryption

B : SSE-C

C : SSE-S3

D : SSE-KMS

Answer: B

Question 2

A company has an existing application that has hardcoded database credentials A developer needs to modify the existing application The application is deployed in two AWS Regions with an active-passive failover configuration to meet company’s disaster recovery strategy The developer needs a solution to store the credentials outside the code. The solution must comply With the company's disaster recovery strategy Which solution Will meet these requirements in the MOST secure way?

Options :

A :

Store the credentials in AWS Secrets Manager in the primary Region. Enable secret replication to the secondary Region Update the application to use the Amazon Resource Name (ARN) based on the Region.

B :

Store credentials in AWS Systems Manager Parameter Store in the primary Region. Enable parameter replication to the secondary Region. Update the application to use the Amazon Resource Name (ARN) based on the Region.

C :

Store credentials in a config file. Upload the config file to an S3 bucket in me primary Region. Enable Cross-Region Replication (CRR) to an S3 bucket in the secondary region. Update the application to access the config file from the S3 bucket based on the Region.

D :

Store credentials in a config file. Upload the config file to an Amazon Elastic File System (Amazon EFS) file system. Update the application to use the Amazon EFS file system Regional endpoints to access the config file in the primary and secondary Regions.

Answer: A

Question 3

A developer must analyze performance issues with production-distributed applications written as AWS Lambda functions. These distributed Lambda applications invoke other components that make up the applications.

How should the developer identify and troubleshoot the root cause of the performance issues in production?

Options :

A : Add logging statements to the Lambda functions, then use Amazon CloudWatch to view the logs.

B : Use AWS CloudTrail and then examine the logs.

C : Use AWS X-Ray, then examine the segments and errors.

D : Run Amazon Inspector agents and then analyze performance.

Answer: C

Question 4

A team is developing an application that is deployed on Amazon EC2 instances. During testing, the team receives an error. The EC2 instances are unable to access an Amazon S3 bucket.

Which steps should the team take to troubleshoot this issue? (Choose two.)

Options :

A : Check whether the policy that is assigned to the IAM role that is attached to the EC2 instances grants access to Amazon S3.

B : Check the S3 bucket policy to validate the access permissions for the S3 bucket.

C : Check whether the policy that is assigned to the IAM user that is attached to the EC2 instances grants access to Amazon S3.

D : Check the S3 Lifecycle policy to validate the permissions that are assigned to the S3 bucket.

E : Check the security groups that are assigned to the EC2 instances. Make sure that a rule is not blocking the access to Amazon S3.

Answer: A,B

Question 5

A Development team are currently creating a new application that uses a microservices design pattern and runs on Docker containers. The team would like to run the platform on AWS using a managed platform. They want minimize management overhead for the platform. Which service should the Development team use?

Options :

A : AWS Lambda

B : Amazon ECS with EC2 launch type

C : Amazon Elastic Kubernetes Service (EKS)

D : Amazon ECS with Fargate launch type

Answer: D

Free DVA-C02 Mock Exam – Practice Online Confidently

Buying Options: