Free AWS Certified Developer - Associate DVA-C02 Exam Braindumps (page: 50)

Page 50 of 116

A company needs to set up secure database credentials for all its AWS Cloud resources. The company’s resources include Amazon RDS DB instances, Amazon
DocumentDB clusters, and Amazon Aurora DB instances. The company’s security policy mandates that database credentials be encrypted at rest and rotated at a regular interval.
Which solution will meet these requirements MOST securely?

  1. Set up IAM database authentication for token-based access. Generate user tokens to provide centralized access to RDS DB instances, Amazon DocumentDB
    clusters, and Aurora DB instances.
  2. Create parameters for the database credentials in AWS Systems Manager
    Parameter Store. Set the Type parameter to SecureString. Set up automatic rotation on the parameters.
  3. Store the database access credentials as an encrypted Amazon S3 object in an
    S3 bucket. Block all public access on the S3 bucket. Use S3 server-side encryption to set up automatic rotation on the encryption key.
  4. Create an AWS Lambda function by using the SecretsManagerRotationTemplate template in the AWS Secrets Manager console. Create secrets for the database credentials in Secrets Manager. Set up secrets rotation on a schedule.

Answer(s): D



A developer has created an AWS Lambda function that makes queries to an Amazon
Aurora MySQL DB instance.
When the developer performs a test, the DB instance shows an error for too many connections.
Which solution will meet these requirements with the LEAST operational effort?

  1. Create a read replica for the DB instance. Query the replica DB instance instead of the primary DB instance.
  2. Migrate the data to an Amazon DynamoDB database.
  3. Configure the Amazon Aurora MySQL DB instance for Multi-AZ deployment.
  4. Create a proxy in Amazon RDS Proxy. Query the proxy instead of the DB
    instance.

Answer(s): D



A developer is creating a new REST API by using Amazon API Gateway and AWS Lambda.
The development team tests the API and validates responses for the known use cases before deploying the API to the production environment.
The developer wants to make the REST API available for testing by using API Gateway locally.
Which AWS Serverless Application Model Command Line Interface (AWS SAM CLI) subcommand will meet these requirements?

  1. Sam local invoke
  2. Sam local generate-event
  3. Sam local start-lambda
  4. Sam local start-api

Answer(s): D



A company has a serverless application on AWS that uses a fleet of AWS Lambda functions that have aliases. The company regularly publishes new Lambda function by using an in-house deployment solution. The company wants to improve the release process and to use traffic shifting. A newly published function version should initially make available only to a fixed percentage of production users.
Which solution will meet these requirements?

  1. Configure routing on the alias of the new function by using a weighted alias.
  2. Configure a canary deployment type for Lambda.
  3. Configure routing on the new versions by using environment variables.
  4. Configure a linear deployment type for Lambda.

Answer(s): A



Page 50 of 116



Post your Comments and Discuss Amazon AWS Certified Developer - Associate DVA-C02 exam with other Community members:

Ernesto commented on August 26, 2024
Prepared and passed this exam. Valid question and very tough exam. So good luck.
Spain
upvote