Free Amazon DVA-C02 Exam Questions

Question 1

A developer is creating an AWS Lambda function that searches for items from an Amazon DynamoDB tablethat contains customer contact information. The DynamoDB table items have the customer ' s email_addressas the partition key and additional properties such as customer_type, name, and job_title.The Lambda function runs whenever a user types a new character into the customer_type text input. Thedeveloper wants the search to return partial matches of the email_address property for a particularcustomer_type value. The developer does not want to recreate the DynamoDB table.What should the developer do to meet these requirements?

A : Add a global secondary index (GSI) to the DynamoDB table with customer_type as the partition keyand email_address as the sort key. Perform a query operation on the GSI by using the begins_with keycondition expression with the email_address property.

B : Add a global secondary index (GSI) to the DynamoDB table with email_address as the partition keyand customer_type as the sort key. Perform a query operation on the GSI by using the begins_with keycondition expression with the email_address property.

C : Add a local secondary index (LSI) to the DynamoDB table with customer_type as the partition key andemail_address as the sort key. Perform a query operation on the LSI by using the begins_with keycondition expression with the email_address property.

D : Add a local secondary index (LSI) to the DynamoDB table with job_title as the partition key andemail_address as the sort key. Perform a query operation on the LSI by using the begins_with keycondition expression with the email_address property.

Answer: A

Question 2

A developer is deploying an application on Amazon EC2 instances that run in Account A. The applicationneeds to read data from an existing Amazon Kinesis data stream in Account B.Which actions should the developer take to provide the application with access to the stream? (Select TWO.)

A : Update the instance profile role in Account A with stream read permissions.

B : Create an IAM role with stream read permissions in Account B.

C : Add a trust policy to the instance profile role and IAM role in Account B to allow the instance profilerole to assume the IAM role.

D : Add a trust policy to the instance profile role and IAM role in Account B to allow reads from the stream.

E : Add a resource-based policy in Account B to allow read access from the instance profile role.

Answer: B,C

Question 3

A company is migrating its PostgreSQL database into the AWS Cloud. The company wants to use a databasethat will secure and regularly rotate database credentials. The company wants a solution that does not requireadditional programming overhead.Which solution will meet these requirements?

A : Use Amazon Aurora PostgreSQL tor the database. Store the database credentials in AWS SystemsManager Parameter Store Turn on rotation.

B : Use Amazon Aurora PostgreSQL for the database. Store the database credentials in AWS SecretsManager Turn on rotation.

C : Use Amazon DynamoDB for the database. Store the database credentials in AWS Systems ManagerParameter Store Turn on rotation.

D : Use Amazon DynamoDB for the database. Store the database credentials in AWS Secrets ManagerTurn on rotation.

Answer: B

Question 4

A company is migrating its PostgreSQL database into the AWS Cloud. The company wants to use a databasethat will secure and regularly rotate database credentials. The company wants a solution that does not requireadditional programming overhead.Which solution will meet these requirements?

A : Use Amazon Aurora PostgreSQL tor the database. Store the database credentials in AWS SystemsManager Parameter Store Turn on rotation.

B : Use Amazon Aurora PostgreSQL for the database. Store the database credentials in AWS SecretsManager Turn on rotation.

C : Use Amazon DynamoDB for the database. Store the database credentials in AWS Systems ManagerParameter Store Turn on rotation.

D : Use Amazon DynamoDB for the database. Store the database credentials in AWS Secrets ManagerTurn on rotation.

Answer: B

Question 5

A developer needs to build an AWS CloudFormation template that self-populates the AWS Region variablethat deploys the CloudFormation templateWhat is the MOST operationally efficient way to determine the Region in which the template is beingdeployed?

A : Use the AWS:.Region pseudo parameter

B : Require the Region as a CloudFormation parameter

C : Find the Region from the AWS::Stackld pseudo parameter by using the Fn::Split intrinsic function

D : Dynamically import the Region by referencing the relevant parameter in AWS Systems ManagerParameter Store

Answer: A