Question 1

A company has an application that provides access to objects in Amazon S3 based on the type of user. The user types are registered user and guest user. The company has 30,000 users. Information is read from an S3 bucket depending on the user type.

Which approaches are recommended to provide access to both user types MOST efficiently? (Select TWO.)

Options :

A : Create a new IAM user for each user and grant access to the S3 objects.

B : Use the AWS IAM service and let the application assume different roles depending on the type of user.

C : Store separate access keys in the application code for registered users and guest users to provide access to the objects.

D : Use Amazon Cognito to provide access using authenticated and unauthenticated roles.

E : Use S3 bucket policies to restrict read access to specific IAM users.

Answer: B,D

Question 2

A Developer needs to access AWS CodeCommit over SSH. The SSH keys configured to access AWS CodeCommit are tied to a user with the following permissions:

1. {

2. "version": "2012-10-17"

3. "Statement": [

4. {

5. "Effect": "Allow",

6. "Action": [

7. "codecommit:BatchGetRepositories",

8. "codecommit:Get*"

9. "codecommit:List*",

10. "codecommit:GitPull"

11. ],

12. "Resource": "*"

13. }

14. ]

15. }

The Developer needs to create/delete branches.

Which specific IAM permissions need to be added based on the principle of least privilege?

Options :

A : “codecommit:*”

B : “codecommit:CreateBranch” and “codecommit:DeleteBranch”

C : “codecommit:Put*:”

D : “codecommit:Update*”

Answer: B

Question 3

A developer is creating an AWS Lambda function. The Lambda function will consume messages from an Amazon Simple Queue Service (Amazon SQS) queue. The developer wants to integrate unit testing as part of the function's continuous integration and continuous delivery (CI/CD) process.

How can the developer unit test the function?

Options :

A : Create an AWS CloudFormation template that creates an SQS queue and deploys the Lambda function. Create a stack from the template during the CI/CD process. Invoke the deployed function. Verify the output.

B : Create an SQS event for tests. Use a test that consumes messages from the SQS queue during the function-s Cl/CD process.

C : Create an SQS queue for tests. Use this SQS queue in the application-s unit test. Run the unit tests during the CI/CD process.

D : Use the aws lambda invoke command with a test event during the CIICD process.

Answer: D

Question 4

A company wants to migrate applications from its on-premises servers to AWS. As a first step, the company is modifying and migrating a non-critical application to a single Amazon EC2 instance. The application will store information in an Amazon S3 bucket. The company needs to follow security best practices when deploying the application on AWS.

Which approach should the company take to allow the application to interact with Amazon S3?

Options :

A : Create an IAM role that has administrative access to AWS. Attach the role to the EC2 instance.

B : Create an IAM user. Attach the AdministratorAccess policy. Copy the generated access key and secret key. Within the application code, use the access key and secret key along with the AWS SDK to communicate with Amazon S3.

C : Create an IAM role that has the necessary access to Amazon S3. Attach the role to the EC2 instance.

D : Create an IAM user. Attach a policy that provides the necessary access to Amazon S3. Copy the generated access key and secret key. Within the application code, use the access key and secret key along with the AWS SDK to communicate with Amazon S3.

Answer: C

Question 5

You were assigned to a project that requires the use of the AWS CLI to build a project with AWS CodeBuild. Your project's root directory includes the buildspec.yml file to run build commands and would like your build artifacts to be automatically encrypted at the end.

How should you configure CodeBuild to accomplish this?

Options :

A : Specify a KMS key to use

B : Use an AWS Lambda Hook

C : Use the AWS Encryption SDK

D : Use In Flight encryption (SSL)

Answer: A

Free DVA-C02 Mock Exam – Practice Online Confidently

Buying Options: