Quiz DVA-C02: Amazon AWS Certified Developer - Associate
Free Test
Question: / 10
Quiz
Question 1/101/10
AcompanyisimplementinganapplicationonAmazonEC2instances.Theapplicationneedsto
processincomingtransactions.Whentheapplicationdetectsatransactionthatisnotvalid,the
applicationmustsendachatmessagetothecompany'ssupportteam.Tosendthemessage,the
applicationneedstoretrievetheaccesstokentoauthenticatebyusingthechatAPI.
Adeveloperneedstoimplementasolutiontostoretheaccesstoken.Theaccesstokenmustbe
encryptedatrestandintransit.TheaccesstokenmustalsobeaccessiblefromotherAWSaccounts.
WhichsolutionwillmeettheserequirementswiththeLEASTmanagementoverhead?
A.UseanAWSSystemsManagerParameterStoreSecureStringparameterthatusesanAWSKey
ManagementService(AWSKMS)AWSmanagedkeytostoretheaccesstoken.Addaresource-based
policytotheparametertoallowaccessfromotheraccounts.UpdatetheIAMroleoftheEC2
instanceswithpermissionstoaccessParameterStore.RetrievethetokenfromParameterStorewith
thedecryptflagenabled.Usethedecryptedaccesstokentosendthemessagetothechat.
B.EncrypttheaccesstokenbyusinganAWSKeyManagementService(AWSKMS)customer
managedkey.StoretheaccesstokeninanAmazonDynamoDBtable.UpdatetheIAMroleoftheEC2
instanceswithpermissionstoaccessDynamoDBandAWSKMS.RetrievethetokenfromDynamoDB.
DecryptthetokenbyusingAWSKMSontheEC2instances.Usethedecryptedaccesstokentosend
themessagetothechat.
C.UseAWSSecretsManagerwithanAWSKeyManagementService(AWSKMS)customermanaged
keytostoretheaccesstoken.Addaresource-basedpolicytothesecrettoallowaccessfromother
accounts.UpdatetheIAMroleoftheEC2instanceswithpermissionstoaccessSecretsManager.
RetrievethetokenfromSecretsManager.Usethedecryptedaccesstokentosendthemessageto
thechat.
D.EncrypttheaccesstokenbyusinganAWSKeyManagementService(AWSKMS)AWSmanaged
key.StoretheaccesstokeninanAmazonS3bucket.AddabucketpolicytotheS3buckettoallow
accessfromotheraccounts.UpdatetheIAMroleoftheEC2instanceswithpermissionstoaccess
[http://www.justcerts.com](http://www.justcerts.com)
Questions&AnswersPDF P-3
AmazonS3andAWSKMS.RetrievethetokenfromtheS3bucket.DecryptthetokenbyusingAWS
KMSontheEC2instances.Usethedecryptedaccesstokentosendthemassagetothechat.
processincomingtransactions.Whentheapplicationdetectsatransactionthatisnotvalid,the
applicationmustsendachatmessagetothecompany'ssupportteam.Tosendthemessage,the
applicationneedstoretrievetheaccesstokentoauthenticatebyusingthechatAPI.
Adeveloperneedstoimplementasolutiontostoretheaccesstoken.Theaccesstokenmustbe
encryptedatrestandintransit.TheaccesstokenmustalsobeaccessiblefromotherAWSaccounts.
WhichsolutionwillmeettheserequirementswiththeLEASTmanagementoverhead?
A.UseanAWSSystemsManagerParameterStoreSecureStringparameterthatusesanAWSKey
ManagementService(AWSKMS)AWSmanagedkeytostoretheaccesstoken.Addaresource-based
policytotheparametertoallowaccessfromotheraccounts.UpdatetheIAMroleoftheEC2
instanceswithpermissionstoaccessParameterStore.RetrievethetokenfromParameterStorewith
thedecryptflagenabled.Usethedecryptedaccesstokentosendthemessagetothechat.
B.EncrypttheaccesstokenbyusinganAWSKeyManagementService(AWSKMS)customer
managedkey.StoretheaccesstokeninanAmazonDynamoDBtable.UpdatetheIAMroleoftheEC2
instanceswithpermissionstoaccessDynamoDBandAWSKMS.RetrievethetokenfromDynamoDB.
DecryptthetokenbyusingAWSKMSontheEC2instances.Usethedecryptedaccesstokentosend
themessagetothechat.
C.UseAWSSecretsManagerwithanAWSKeyManagementService(AWSKMS)customermanaged
keytostoretheaccesstoken.Addaresource-basedpolicytothesecrettoallowaccessfromother
accounts.UpdatetheIAMroleoftheEC2instanceswithpermissionstoaccessSecretsManager.
RetrievethetokenfromSecretsManager.Usethedecryptedaccesstokentosendthemessageto
thechat.
D.EncrypttheaccesstokenbyusinganAWSKeyManagementService(AWSKMS)AWSmanaged
key.StoretheaccesstokeninanAmazonS3bucket.AddabucketpolicytotheS3buckettoallow
accessfromotheraccounts.UpdatetheIAMroleoftheEC2instanceswithpermissionstoaccess
[http://www.justcerts.com](http://www.justcerts.com)
Questions&AnswersPDF P-3
AmazonS3andAWSKMS.RetrievethetokenfromtheS3bucket.DecryptthetokenbyusingAWS
KMSontheEC2instances.Usethedecryptedaccesstokentosendthemassagetothechat.
Check the image below to see the right answer:Select the answer
1 correct answer[https://aws.amazon.com/premiumsupport/knowledge-center/secrets-manager-share-between-](https://aws.amazon.com/premiumsupport/knowledge-center/secrets-manager-share-between-)
accounts/[https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-](https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-)
access_examples_cross.html
accounts/[https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-](https://docs.aws.amazon.com/secretsmanager/latest/userguide/auth-and-)
access_examples_cross.html
Quiz
Question 2/102/10
AcompanyisrunningAmazonEC2instancesinmultipleAWSaccounts.Adeveloperneedsto
implementanapplicationthatcollectsallthelifecycleeventsoftheEC2instances.Theapplication
needstostorethelifecycleeventsinasingleAmazonSimpleQueueService(AmazonSQS)queuein
thecompany'smainAWSaccountforfurtherprocessing.
Whichsolutionwillmeettheserequirements?
A.ConfigureAmazonEC2todelivertheEC2instancelifecycleeventsfromallaccountstotheAmazon
EventBridgeeventbusofthemainaccount.AddanEventBridgeruletotheeventbusofthemain
accountthatmatchesallEC2instancelifecycleevents.AddtheSQSqueueasatargetoftherule.
B.UsetheresourcepoliciesoftheSQSqueueinthemainaccounttogiveeachaccountpermissions
towritetothatSQSqueue.AddtotheAmazonEventBridgeeventbusofeachaccountan
EventBridgerulethatmatchesallEC2instancelifecycleevents.AddtheSQSqueueinthemain
accountasatargetoftherule.
C.WriteanAWSLambdafunctionthatscansthroughallEC2instancesinthecompanyaccountsto
detectEC2instancelifecyclechanges.ConfiguretheLambdafunctiontowriteanotificationmessage
totheSQSqueueinthemainaccountifthefunctiondetectsanEC2instancelifecyclechange.Addan
AmazonEventBridgescheduledrulethatinvokestheLambdafunctioneveryminute.
D.Configurethepermissionsonthemainaccounteventbustoreceiveeventsfromallaccounts.
CreateanAmazonEventBridgeruleineachaccounttosendalltheEC2instancelifecycleeventsto
themainaccounteventbus.AddanEventBridgeruletothemainaccounteventbusthatmatchesall
EC2instancelifecycleevents.SettheSQSqueueasatargetfortherule.
implementanapplicationthatcollectsallthelifecycleeventsoftheEC2instances.Theapplication
needstostorethelifecycleeventsinasingleAmazonSimpleQueueService(AmazonSQS)queuein
thecompany'smainAWSaccountforfurtherprocessing.
Whichsolutionwillmeettheserequirements?
A.ConfigureAmazonEC2todelivertheEC2instancelifecycleeventsfromallaccountstotheAmazon
EventBridgeeventbusofthemainaccount.AddanEventBridgeruletotheeventbusofthemain
accountthatmatchesallEC2instancelifecycleevents.AddtheSQSqueueasatargetoftherule.
B.UsetheresourcepoliciesoftheSQSqueueinthemainaccounttogiveeachaccountpermissions
towritetothatSQSqueue.AddtotheAmazonEventBridgeeventbusofeachaccountan
EventBridgerulethatmatchesallEC2instancelifecycleevents.AddtheSQSqueueinthemain
accountasatargetoftherule.
C.WriteanAWSLambdafunctionthatscansthroughallEC2instancesinthecompanyaccountsto
detectEC2instancelifecyclechanges.ConfiguretheLambdafunctiontowriteanotificationmessage
totheSQSqueueinthemainaccountifthefunctiondetectsanEC2instancelifecyclechange.Addan
AmazonEventBridgescheduledrulethatinvokestheLambdafunctioneveryminute.
D.Configurethepermissionsonthemainaccounteventbustoreceiveeventsfromallaccounts.
CreateanAmazonEventBridgeruleineachaccounttosendalltheEC2instancelifecycleeventsto
themainaccounteventbus.AddanEventBridgeruletothemainaccounteventbusthatmatchesall
EC2instancelifecycleevents.SettheSQSqueueasatargetfortherule.
Check the image below to see the right answer:Select the answer
1 correct answerAmazonEC2instancescansendthestate-changenotificationeventstoAmazonEventBridge.
[https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/monitoring-instance-state-changes.html](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/monitoring-instance-state-changes.html)
AmazonEventBridgecansendandreceiveeventsbetweeneventbusesinAWSaccounts.
[https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-cross-account.html](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-cross-account.html)
[https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/monitoring-instance-state-changes.html](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/monitoring-instance-state-changes.html)
AmazonEventBridgecansendandreceiveeventsbetweeneventbusesinAWSaccounts.
[https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-cross-account.html](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-cross-account.html)
Quiz
Question 3/103/10
AnapplicationisusingAmazonCognitouserpoolsandidentitypoolsforsecureaccess.Adeveloper
wantstointegratetheuser-specificfileuploadanddownloadfeaturesintheapplicationwith
AmazonS3.Thedevelopermustensurethatthefilesaresavedandretrievedinasecuremannerand
thatuserscanaccessonlytheirownfiles.Thefilesizesrangefrom3KBto300MB.
WhichoptionwillmeettheserequirementswiththeHIGHESTlevelofsecurity?
A.UseS3EventNotificationstovalidatethefileuploadanddownloadrequestsandupdatetheuser
interface(UI).
B.SavethedetailsoftheuploadedfilesinaseparateAmazonDynamoDBtable.Filterthelistoffiles
intheuserinterface(UI)bycomparingthecurrentuserIDwiththeuserIDassociatedwiththefilein
thetable.
C.UseAmazonAPIGatewayandanAWSLambdafunctiontouploadanddownloadfiles.Validate
eachrequestintheLambdafunctionbeforeperformingtherequestedoperation.
D.UseanIAMpolicywithintheAmazonCognitoidentityprefixtorestrictuserstousetheirown
foldersinAmazonS3.
wantstointegratetheuser-specificfileuploadanddownloadfeaturesintheapplicationwith
AmazonS3.Thedevelopermustensurethatthefilesaresavedandretrievedinasecuremannerand
thatuserscanaccessonlytheirownfiles.Thefilesizesrangefrom3KBto300MB.
WhichoptionwillmeettheserequirementswiththeHIGHESTlevelofsecurity?
A.UseS3EventNotificationstovalidatethefileuploadanddownloadrequestsandupdatetheuser
interface(UI).
B.SavethedetailsoftheuploadedfilesinaseparateAmazonDynamoDBtable.Filterthelistoffiles
intheuserinterface(UI)bycomparingthecurrentuserIDwiththeuserIDassociatedwiththefilein
thetable.
C.UseAmazonAPIGatewayandanAWSLambdafunctiontouploadanddownloadfiles.Validate
eachrequestintheLambdafunctionbeforeperformingtherequestedoperation.
D.UseanIAMpolicywithintheAmazonCognitoidentityprefixtorestrictuserstousetheirown
foldersinAmazonS3.
Check the image below to see the right answer:Select the answer
1 correct answerQuiz
Question 4/104/10
AcompanyisbuildingascalabledatamanagementsolutionbyusingAWSservicestoimprovethe
speedandagilityofdevelopment.Thesolutionwillingestlargevolumesofdatafromvarioussources
[http://www.justcerts.com](http://www.justcerts.com)
Questions&AnswersPDF P-5
andwillprocessthisdatathroughmultiplebusinessrulesandtransformations.
Thesolutionrequiresbusinessrulestoruninsequenceandtohandlereprocessingofdataiferrors
occurwhenthebusinessrulesrun.Thecompanyneedsthesolutiontobescalableandtorequirethe
leastpossiblemaintenance.
WhichAWSserviceshouldthecompanyusetomanageandautomatetheorchestrationofthedata
flowstomeettheserequirements?
A.AWSBatch
B.AWSStepFunctions
C.AWSGlue
D.AWSLambda
speedandagilityofdevelopment.Thesolutionwillingestlargevolumesofdatafromvarioussources
[http://www.justcerts.com](http://www.justcerts.com)
Questions&AnswersPDF P-5
andwillprocessthisdatathroughmultiplebusinessrulesandtransformations.
Thesolutionrequiresbusinessrulestoruninsequenceandtohandlereprocessingofdataiferrors
occurwhenthebusinessrulesrun.Thecompanyneedsthesolutiontobescalableandtorequirethe
leastpossiblemaintenance.
WhichAWSserviceshouldthecompanyusetomanageandautomatetheorchestrationofthedata
flowstomeettheserequirements?
A.AWSBatch
B.AWSStepFunctions
C.AWSGlue
D.AWSLambda
Check the image below to see the right answer:Select the answer
1 correct answerQuiz
Question 5/105/10
AdeveloperhascreatedanAWSLambdafunctionthatiswritteninPython.TheLambdafunction
readsdatafromobjectsinAmazonS3andwritesdatatoanAmazonDynamoDBtable.Thefunctionis
successfullyinvokedfromanS3eventnotificationwhenanobjectiscreated.However,thefunction
failswhenitattemptstowritetotheDynamoDBtable.
WhatistheMOSTlikelycauseofthisissue?
A.TheLambdafunction'sconcurrencylimithasbeenexceeded.
B.DynamoDBtablerequiresaglobalsecondaryindex(GSI)tosupportwrites.
C.TheLambdafunctiondoesnothaveIAMpermissionstowritetoDynamoDB.
D.TheDynamoDBtableisnotrunninginthesameAvailabilityZoneastheLambdafunction.
readsdatafromobjectsinAmazonS3andwritesdatatoanAmazonDynamoDBtable.Thefunctionis
successfullyinvokedfromanS3eventnotificationwhenanobjectiscreated.However,thefunction
failswhenitattemptstowritetotheDynamoDBtable.
WhatistheMOSTlikelycauseofthisissue?
A.TheLambdafunction'sconcurrencylimithasbeenexceeded.
B.DynamoDBtablerequiresaglobalsecondaryindex(GSI)tosupportwrites.
C.TheLambdafunctiondoesnothaveIAMpermissionstowritetoDynamoDB.
D.TheDynamoDBtableisnotrunninginthesameAvailabilityZoneastheLambdafunction.
Check the image below to see the right answer:Select the answer
1 correct answerQuiz
Question 6/106/10
AdeveloperiscreatinganAWSCloudFormationtemplatetodeployAmazonEC2instancesacross
multipleAWSaccounts.ThedevelopermustchoosetheEC2instancesfromalistofapproved
instancetypes.
HowcanthedeveloperincorporatethelistofapprovedinstancetypesintheCloudFormation
template?
A.CreateaseparateCloudFormationtemplateforeachEC2instancetypeinthelist.
B.IntheResourcessectionoftheCloudFormationtemplate,createresourcesforeachEC2instance
typeinthelist.
C.IntheCloudFormationtemplate,createaseparateparameterforeachEC2instancetypeinthe
list.
D.IntheCloudFormationtemplate,createaparameterwiththelistofEC2instancetypesas
AllowedValues.
multipleAWSaccounts.ThedevelopermustchoosetheEC2instancesfromalistofapproved
instancetypes.
HowcanthedeveloperincorporatethelistofapprovedinstancetypesintheCloudFormation
template?
A.CreateaseparateCloudFormationtemplateforeachEC2instancetypeinthelist.
B.IntheResourcessectionoftheCloudFormationtemplate,createresourcesforeachEC2instance
typeinthelist.
C.IntheCloudFormationtemplate,createaseparateparameterforeachEC2instancetypeinthe
list.
D.IntheCloudFormationtemplate,createaparameterwiththelistofEC2instancetypesas
AllowedValues.
Check the image below to see the right answer:Select the answer
1 correct answerIntheCloudFormationtemplate,thedevelopershouldcreateaparameterwiththelistofapproved
EC2instancetypesasAllowedValues.Thisway,userscanselecttheinstancetypetheywanttouse
whenlaunchingtheCloudFormationstack,butonlyfromtheapprovedlist.
EC2instancetypesasAllowedValues.Thisway,userscanselecttheinstancetypetheywanttouse
whenlaunchingtheCloudFormationstack,butonlyfromtheapprovedlist.
Quiz
Question 7/107/10
AdeveloperhasanapplicationthatmakesbatchrequestsdirectlytoAmazonDynamoDBbyusing
theBatchGetItemlow-levelAPIoperation.Theresponsesfrequentlyreturnvaluesinthe
UnprocessedKeyselement.
Whichactionsshouldthedevelopertaketoincreasetheresiliencyoftheapplicationwhenthebatch
responseincludesvaluesinUnprocessedKeys?(Choosetwo.)
A.Retrythebatchoperationimmediately.
[http://www.justcerts.com](http://www.justcerts.com)
Questions&AnswersPDF P-7
B.Retrythebatchoperationwithexponentialbackoffandrandomizeddelay.
C.UpdatetheapplicationtouseanAWSsoftwaredevelopmentkit(AWSSDK)tomaketherequests.
D.IncreasetheprovisionedreadcapacityoftheDynamoDBtablesthattheoperationaccesses.
E.IncreasetheprovisionedwritecapacityoftheDynamoDBtablesthattheoperationaccesses.
theBatchGetItemlow-levelAPIoperation.Theresponsesfrequentlyreturnvaluesinthe
UnprocessedKeyselement.
Whichactionsshouldthedevelopertaketoincreasetheresiliencyoftheapplicationwhenthebatch
responseincludesvaluesinUnprocessedKeys?(Choosetwo.)
A.Retrythebatchoperationimmediately.
[http://www.justcerts.com](http://www.justcerts.com)
Questions&AnswersPDF P-7
B.Retrythebatchoperationwithexponentialbackoffandrandomizeddelay.
C.UpdatetheapplicationtouseanAWSsoftwaredevelopmentkit(AWSSDK)tomaketherequests.
D.IncreasetheprovisionedreadcapacityoftheDynamoDBtablesthattheoperationaccesses.
E.IncreasetheprovisionedwritecapacityoftheDynamoDBtablesthattheoperationaccesses.
Check the image below to see the right answer:Select the answer
2 correct answersTheUnprocessedKeyselementindicatesthattheBatchGetItemoperationdidnotprocessallofthe
requesteditemsinthecurrentresponse.Thiscanhappeniftheresponsesizelimitisexceededorif
thetable’sprovisionedthroughputisexceeded.Tohandlethissituation,thedevelopershouldretry
thebatchoperationwithexponentialbackoffandrandomizeddelaytoavoidthrottlingerrorsand
reducetheloadonthetable.ThedevelopershouldalsouseanAWSSDKtomaketherequests,as
theSDKsautomaticallyretryrequeststhatreturnUnprocessedKeys.
Reference:
[BatchGetItem-AmazonDynamoDB]
[WorkingwithQueriesandScans-AmazonDynamoDB]
[BestPracticesforHandlingDynamoDBThrottlingErrors]
requesteditemsinthecurrentresponse.Thiscanhappeniftheresponsesizelimitisexceededorif
thetable’sprovisionedthroughputisexceeded.Tohandlethissituation,thedevelopershouldretry
thebatchoperationwithexponentialbackoffandrandomizeddelaytoavoidthrottlingerrorsand
reducetheloadonthetable.ThedevelopershouldalsouseanAWSSDKtomaketherequests,as
theSDKsautomaticallyretryrequeststhatreturnUnprocessedKeys.
Reference:
[BatchGetItem-AmazonDynamoDB]
[WorkingwithQueriesandScans-AmazonDynamoDB]
[BestPracticesforHandlingDynamoDBThrottlingErrors]
Quiz
Question 8/108/10
Acompanyisrunningacustomapplicationonasetofon-premisesLinuxserversthatareaccessed
usingAmazonAPIGateway.AWSX-RaytracinghasbeenenabledontheAPIteststage.
HowcanadeveloperenableX-Raytracingontheon-premisesserverswiththeLEASTamountof
configuration?
A.InstallandruntheX-RaySDKontheon-premisesserverstocaptureandrelaythedatatotheX-
Rayservice.
B.InstallandruntheX-Raydaemonontheon-premisesserverstocaptureandrelaythedatatothe
X-Rayservice.
C.Captureincomingrequestson-premisesandconfigureanAWSLambdafunctiontopull,process,
andrelayrelevantdatatoX-RayusingthePutTraceSegmentsAPIcall.
[http://www.justcerts.com](http://www.justcerts.com)
Questions&AnswersPDF P-8
D.Captureincomingrequestson-premisesandconfigureanAWSLambdafunctiontopull,process,
andrelayrelevantdatatoX-RayusingthePutTelemetryRecordsAPIcall.
usingAmazonAPIGateway.AWSX-RaytracinghasbeenenabledontheAPIteststage.
HowcanadeveloperenableX-Raytracingontheon-premisesserverswiththeLEASTamountof
configuration?
A.InstallandruntheX-RaySDKontheon-premisesserverstocaptureandrelaythedatatotheX-
Rayservice.
B.InstallandruntheX-Raydaemonontheon-premisesserverstocaptureandrelaythedatatothe
X-Rayservice.
C.Captureincomingrequestson-premisesandconfigureanAWSLambdafunctiontopull,process,
andrelayrelevantdatatoX-RayusingthePutTraceSegmentsAPIcall.
[http://www.justcerts.com](http://www.justcerts.com)
Questions&AnswersPDF P-8
D.Captureincomingrequestson-premisesandconfigureanAWSLambdafunctiontopull,process,
andrelayrelevantdatatoX-RayusingthePutTelemetryRecordsAPIcall.
Check the image below to see the right answer:Select the answer
1 correct answerTheX-RaydaemonisasoftwarethatcollectstracedatafromtheX-RaySDKandrelaysittotheX-Ray
service.TheX-RaydaemoncanrunonanyplatformthatsupportsGo,includingLinux,Windows,and
macOS.ThedevelopercaninstallandruntheX-Raydaemonontheon-premisesserverstocapture
andrelaythedatatotheX-Rayservicewithminimalconfiguration.TheX-RaySDKisusedto
instrumenttheapplicationcode,nottocaptureandrelaydata.TheLambdafunctionsolutionsare
morecomplexandrequireadditionalconfiguration.
Reference:
[AWSX-Rayconcepts-AWSX-Ray]
[SettingupAWSX-Ray-AWSX-Ray]
service.TheX-RaydaemoncanrunonanyplatformthatsupportsGo,includingLinux,Windows,and
macOS.ThedevelopercaninstallandruntheX-Raydaemonontheon-premisesserverstocapture
andrelaythedatatotheX-Rayservicewithminimalconfiguration.TheX-RaySDKisusedto
instrumenttheapplicationcode,nottocaptureandrelaydata.TheLambdafunctionsolutionsare
morecomplexandrequireadditionalconfiguration.
Reference:
[AWSX-Rayconcepts-AWSX-Ray]
[SettingupAWSX-Ray-AWSX-Ray]
Quiz
Question 9/109/10
Acompanywantstoshareinformationwithathirdparty.ThethirdpartyhasanHTTPAPIendpoint
thatthecompanycanusetosharetheinformation.ThecompanyhastherequiredAPIkeytoaccess
theHTTPAPI.
ThecompanyneedsawaytomanagetheAPIkeybyusingcode.TheintegrationoftheAPIkeywith
theapplicationcodecannotaffectapplicationperformance.
WhichsolutionwillmeettheserequirementsMOSTsecurely?
A.StoretheAPIcredentialsinAWSSecretsManager.RetrievetheAPIcredentialsatruntimebyusing
theAWSSDK.UsethecredentialstomaketheAPIcall.
B.StoretheAPIcredentialsinalocalcodevariable.PushthecodetoasecureGitrepository.Usethe
localcodevariableatruntimetomaketheAPIcall.
C.StoretheAPIcredentialsasanobjectinaprivateAmazonS3bucket.RestrictaccesstotheS3
objectbyusingIAMpolicies.RetrievetheAPIcredentialsatruntimebyusingtheAWSSDK.Usethe
credentialstomaketheAPIcall.
D.StoretheAPIcredentialsinanAmazonDynamoDBtable.Restrictaccesstothetablebyusing
resource-basedpolicies.RetrievetheAPIcredentialsatruntimebyusingtheAWSSDK.Usethe
[http://www.justcerts.com](http://www.justcerts.com)
Questions&AnswersPDF P-9
credentialstomaketheAPIcall.
thatthecompanycanusetosharetheinformation.ThecompanyhastherequiredAPIkeytoaccess
theHTTPAPI.
ThecompanyneedsawaytomanagetheAPIkeybyusingcode.TheintegrationoftheAPIkeywith
theapplicationcodecannotaffectapplicationperformance.
WhichsolutionwillmeettheserequirementsMOSTsecurely?
A.StoretheAPIcredentialsinAWSSecretsManager.RetrievetheAPIcredentialsatruntimebyusing
theAWSSDK.UsethecredentialstomaketheAPIcall.
B.StoretheAPIcredentialsinalocalcodevariable.PushthecodetoasecureGitrepository.Usethe
localcodevariableatruntimetomaketheAPIcall.
C.StoretheAPIcredentialsasanobjectinaprivateAmazonS3bucket.RestrictaccesstotheS3
objectbyusingIAMpolicies.RetrievetheAPIcredentialsatruntimebyusingtheAWSSDK.Usethe
credentialstomaketheAPIcall.
D.StoretheAPIcredentialsinanAmazonDynamoDBtable.Restrictaccesstothetablebyusing
resource-basedpolicies.RetrievetheAPIcredentialsatruntimebyusingtheAWSSDK.Usethe
[http://www.justcerts.com](http://www.justcerts.com)
Questions&AnswersPDF P-9
credentialstomaketheAPIcall.
Check the image below to see the right answer:Select the answer
1 correct answerAWSSecretsManagerisaservicethathelpssecurelystore,rotate,andmanagesecretssuchasAPI
keys,passwords,andtokens.ThedevelopercanstoretheAPIcredentialsinAWSSecretsManager
andretrievethematruntimebyusingtheAWSSDK.Thissolutionwillmeettherequirementsof
security,codemanagement,andperformance.StoringtheAPIcredentialsinalocalcodevariableor
anS3objectisnotsecure,asitexposesthecredentialstounauthorizedaccessorleakage.Storingthe
APIcredentialsinaDynamoDBtableisalsonotsecure,asitrequiresadditionalencryptionand
accesscontrolmeasures.Moreover,retrievingthecredentialsfromS3orDynamoDBmayaffect
applicationperformanceduetonetworklatency.
Reference:
[WhatIsAWSSecretsManager?-AWSSecretsManager]
[RetrievingaSecret-AWSSecretsManager]
keys,passwords,andtokens.ThedevelopercanstoretheAPIcredentialsinAWSSecretsManager
andretrievethematruntimebyusingtheAWSSDK.Thissolutionwillmeettherequirementsof
security,codemanagement,andperformance.StoringtheAPIcredentialsinalocalcodevariableor
anS3objectisnotsecure,asitexposesthecredentialstounauthorizedaccessorleakage.Storingthe
APIcredentialsinaDynamoDBtableisalsonotsecure,asitrequiresadditionalencryptionand
accesscontrolmeasures.Moreover,retrievingthecredentialsfromS3orDynamoDBmayaffect
applicationperformanceduetonetworklatency.
Reference:
[WhatIsAWSSecretsManager?-AWSSecretsManager]
[RetrievingaSecret-AWSSecretsManager]
Quiz
Question 10/1010/10
AdeveloperisdeployinganewapplicationtoAmazonElasticContainerService(AmazonECS).The
developerneedstosecurelystoreandretrievedifferenttypesofvariables.Thesevariablesinclude
authenticationinformationforaremoteAPI,theURLfortheAPI,andcredentials.Theauthentication
informationandAPIURLmustbeavailabletoallcurrentandfuturedeployedversionsofthe
applicationacrossdevelopment,testing,andproductionenvironments.
HowshouldthedeveloperretrievethevariableswiththeFEWESTapplicationchanges?
A.UpdatetheapplicationtoretrievethevariablesfromAWSSystemsManagerParameterStore.Use
uniquepathsinParameterStoreforeachvariableineachenvironment.StorethecredentialsinAWS
SecretsManagerineachenvironment.
B.UpdatetheapplicationtoretrievethevariablesfromAWSKeyManagementService(AWSKMS).
StoretheAPIURLandcredentialsasuniquekeysforeachenvironment.
C.Updatetheapplicationtoretrievethevariablesfromanencryptedfilethatisstoredwiththe
application.StoretheAPIURLandcredentialsinuniquefilesforeachenvironment.
D.Updatetheapplicationtoretrievethevariablesfromeachofthedeployedenvironments.Define
theauthenticationinformationandAPIURLintheECStaskdefinitionasuniquenamesduringthe
[http://www.justcerts.com](http://www.justcerts.com)
Questions&AnswersPDF P-10
deploymentprocess.
developerneedstosecurelystoreandretrievedifferenttypesofvariables.Thesevariablesinclude
authenticationinformationforaremoteAPI,theURLfortheAPI,andcredentials.Theauthentication
informationandAPIURLmustbeavailabletoallcurrentandfuturedeployedversionsofthe
applicationacrossdevelopment,testing,andproductionenvironments.
HowshouldthedeveloperretrievethevariableswiththeFEWESTapplicationchanges?
A.UpdatetheapplicationtoretrievethevariablesfromAWSSystemsManagerParameterStore.Use
uniquepathsinParameterStoreforeachvariableineachenvironment.StorethecredentialsinAWS
SecretsManagerineachenvironment.
B.UpdatetheapplicationtoretrievethevariablesfromAWSKeyManagementService(AWSKMS).
StoretheAPIURLandcredentialsasuniquekeysforeachenvironment.
C.Updatetheapplicationtoretrievethevariablesfromanencryptedfilethatisstoredwiththe
application.StoretheAPIURLandcredentialsinuniquefilesforeachenvironment.
D.Updatetheapplicationtoretrievethevariablesfromeachofthedeployedenvironments.Define
theauthenticationinformationandAPIURLintheECStaskdefinitionasuniquenamesduringthe
[http://www.justcerts.com](http://www.justcerts.com)
Questions&AnswersPDF P-10
deploymentprocess.
Check the image below to see the right answer:Select the answer
1 correct answerAWSSystemsManagerParameterStoreisaservicethatprovidessecure,hierarchicalstoragefor
configurationdatamanagementandsecretsmanagement.Thedevelopercanupdatetheapplication
toretrievethevariablesfromParameterStorebyusingtheAWSSDKortheAWSCLI.Thedeveloper
canuseuniquepathsinParameterStoreforeachvariableineachenvironment,suchas/dev/api-url,
/test/api-url,and/prod/api-url.ThedevelopercanalsostorethecredentialsinAWSSecrets
Manager,whichisintegratedwithParameterStoreandprovidesadditionalfeaturessuchas
automaticrotationandencryption.
Reference:
[WhatIsAWSSystemsManager?-AWSSystemsManager]
[ParameterStore-AWSSystemsManager]
[WhatIsAWSSecretsManager?-AWSSecretsManager]
configurationdatamanagementandsecretsmanagement.Thedevelopercanupdatetheapplication
toretrievethevariablesfromParameterStorebyusingtheAWSSDKortheAWSCLI.Thedeveloper
canuseuniquepathsinParameterStoreforeachvariableineachenvironment,suchas/dev/api-url,
/test/api-url,and/prod/api-url.ThedevelopercanalsostorethecredentialsinAWSSecrets
Manager,whichisintegratedwithParameterStoreandprovidesadditionalfeaturessuchas
automaticrotationandencryption.
Reference:
[WhatIsAWSSystemsManager?-AWSSystemsManager]
[ParameterStore-AWSSystemsManager]
[WhatIsAWSSecretsManager?-AWSSecretsManager]
Looking for more questions?Buy now
DVA-C02: Amazon AWS Certified Developer - Associate Practice test unlocks all online simulator questions
Thank you for choosing the free version of the DVA-C02: Amazon AWS Certified Developer - Associate practice test! Further deepen your knowledge on Amazon Simulator; by unlocking the full version of our DVA-C02: Amazon AWS Certified Developer - Associate Simulator you will be able to take tests with over 600 constantly updated questions and easily pass your exam. 98% of people pass the exam in the first attempt after preparing with our 600 questions.
BUY NOWWhat to expect from our DVA-C02: Amazon AWS Certified Developer - Associate practice tests and how to prepare for any exam?
The DVA-C02: Amazon AWS Certified Developer - Associate Simulator Practice Tests are part of the Amazon Database and are the best way to prepare for any DVA-C02: Amazon AWS Certified Developer - Associate exam. The DVA-C02: Amazon AWS Certified Developer - Associate practice tests consist of 600 questions and are written by experts to help you and prepare you to pass the exam on the first attempt. The DVA-C02: Amazon AWS Certified Developer - Associate database includes questions from previous and other exams, which means you will be able to practice simulating past and future questions. Preparation with DVA-C02: Amazon AWS Certified Developer - Associate Simulator will also give you an idea of the time it will take to complete each section of the DVA-C02: Amazon AWS Certified Developer - Associate practice test . It is important to note that the DVA-C02: Amazon AWS Certified Developer - Associate Simulator does not replace the classic DVA-C02: Amazon AWS Certified Developer - Associate study guides; however, the Simulator provides valuable insights into what to expect and how much work needs to be done to prepare for the DVA-C02: Amazon AWS Certified Developer - Associate exam.
BUY NOWDVA-C02: Amazon AWS Certified Developer - Associate Practice test therefore represents an excellent tool to prepare for the actual exam together with our Amazon practice test . Our DVA-C02: Amazon AWS Certified Developer - Associate Simulator will help you assess your level of preparation and understand your strengths and weaknesses. Below you can read all the quizzes you will find in our DVA-C02: Amazon AWS Certified Developer - Associate Simulator and how our unique DVA-C02: Amazon AWS Certified Developer - Associate Database made up of real questions:
Info quiz:
- Quiz name:DVA-C02: Amazon AWS Certified Developer - Associate
- Total number of questions:600
- Number of questions for the test:50
- Pass score:80%
You can prepare for the DVA-C02: Amazon AWS Certified Developer - Associate exams with our mobile app. It is very easy to use and even works offline in case of network failure, with all the functions you need to study and practice with our DVA-C02: Amazon AWS Certified Developer - Associate Simulator.
Use our Mobile App, available for both Android and iOS devices, with our DVA-C02: Amazon AWS Certified Developer - Associate Simulator . You can use it anywhere and always remember that our mobile app is free and available on all stores.
Our Mobile App contains all DVA-C02: Amazon AWS Certified Developer - Associate practice tests which consist of 600 questions and also provide study material to pass the final DVA-C02: Amazon AWS Certified Developer - Associate exam with guaranteed success. Our DVA-C02: Amazon AWS Certified Developer - Associate database contain hundreds of questions and Amazon Tests related to DVA-C02: Amazon AWS Certified Developer - Associate Exam. This way you can practice anywhere you want, even offline without the internet.
BUY NOW