Question 1

When running a Rolling deployment in Elastic Beanstalk environment, only two batches completed the deployment successfully, while rest of the batches failed to deploy the updated version. Following this, the development team terminated the instances from the failed deployment.

What will be the status of these failed instances post termination?

Options :

A : Elastic Beanstalk will replace the failed instances after the application version to be installed is manually chosen from AWS Console

B : Elastic Beanstalk will not replace the failed instances

C : Elastic Beanstalk will replace the failed instances with instances running the application version from the oldest successful deployment

D : Elastic Beanstalk will replace the failed instances with instances running the application version from the most recent successful deploymen

Answer: D

Question 2

A company runs multiple microservices that each use their own Amazon DynamoDB table. The “customers” microservice needs data that originates in the “orders” microservice.

What approach represents the SIMPLEST method for the “customers” table to get near real-time updates from the “orders” table?

Options :

A :

Enable DynamoDB streams for the “customers” table, trigger an AWS Lambda function to read records from the stream and write them to the “orders” table

B : Enable Amazon DynamoDB streams on the “orders” table, configure the “customers” microservice to read records from the stream

C : Use Amazon CloudWatch Events to send notifications every time an item is added or modified in the “orders” table

D : Use Amazon Kinesis Firehose to deliver all changes in the “orders” table to the “customers” table

Answer: B

Question 3

An application that is being migrated to AWS and refactored requires a storage service. The storage service should provide a standards-based REST web service interface and store objects based on keys.

Which AWS service would be MOST suitable?

Options :

A : Amazon DynamoDB

B : Amazon S3

C : Amazon EFS

D : Amazon EBS

Answer: B

Question 4

A developer is creating an AWS Lambda function that needs network access to private resources in a VPC.

Options :

A :

Attach the Lambda function to the VPC through private subnets. Create a security group that allows network access to the private resources. Associate the security group with the Lambda function.

B :

Configure the Lambda function to route traffic through a VPN connection. Create a security group that allows network access to the private resources. Associate the security group with the Lambda function.

C :

Configure a VPC endpoint connection for the Lambda function. Set up the VPC endpoint to route traffic through a NAT gateway.

D :

Configure an AWS PrivateLink endpoint for the private resources. Configure the Lambda function to reference the PrivateLink endpoint.

Answer: A

Question 5

A company has an application that is hosted on Amazon EC2 instances The application stores objects in an Amazon S3 bucket and allows users to download objects from the S3 bucket A developer turns on S3 Block Public Access for the S3 bucket After this change, users report errors when they attempt to download objects The developer needs to implement a solution so that only users who are signed in to the application can access objects in the S3 bucket. Which combination of steps will meet these requirements in the MOST secure way? (Select TWO.)

Options :

A :

Create an EC2 instance profile and role with an appropriate policy Associate the role with the EC2 instances

B :

Create an 1AM user with an appropriate policy. Store the access key ID and secret access key on the EC2 instances

C :

Modify the application to use the S3 GeneratePresignedUrl API call

D :

Modify the application to use the S3 GetObject API call and to return the object handle to the user

E : Modify the application to delegate requests to the S3 bucket.

Answer: A,C

Free DVA-C02 Mock Exam – Practice Online Confidently

Buying Options: