Question 1

A Developer needs to manage AWS services from a local development server using the AWS CLI. How can the Developer ensure that the CLI uses their IAM permissions?

Options :

A :

Put the Developer’s IAM user account in an IAM group that has the necessary permissions

B : Create an IAM Role with the required permissions and attach it to the local server’s instance profile

C : Save the Developer’s IAM login credentials as environment variables and reference them when executing AWS CLI commands

D : Run the aws configure command and provide the Developer’s IAM access key ID and secret access key

Answer: D

Question 2

A Developer at a company is working on a CloudFormation template to set up resources. Resources will be defined using code and provisioned based on certain conditions defined in the Conditions section.

Which section of a CloudFormation template cannot be associated with Condition?

Options :

A : Outputs

B : Conditions

C : Parameters

D : Resources

Answer: C

Question 3

A company is building a new application that runs on AWS and uses Amazon API Gateway to expose APIs Teams of developers are working on separate components of the application in parallel The company wants to publish an API without an integrated backend so that teams that depend on the application backend can continue the development work before the API backend development is complete. Which solution will meet these requirements?

Options :

A : Create API Gateway resources and set the integration type value to MOCK. Configure the method integration request and integration response to associate a response with an HTTP status code. Create an API Gateway stage and deploy the API.

B : Create API Gateway resources and set the integration type value to MOCK. Configure the method integration request and integration response to associate a response with an HTTP status code. Create an API Gateway stage and deploy the API.

C : Create an EC2 application that returns mocked HTTP responses. Create API Gateway resources and set the integration type value to AWS. Create an API Gateway stage and deploy the API.

D : Create API Gateway resources and set the integration type value set to HTTP_PROXY. Add mapping templates and deploy the API. Create an AWS Lambda layer that returns various HTTP status codes. Associate the Lambda layer with the API deployment.

Answer: A

Question 4

An organization needs to add encryption in-transit to an existing website running behind an Elastic Load Balancer. The website’s Amazon EC2 instances are CPU-constrained and therefore load on their CPUs should not be increased. What should be done to secure the website? (Select TWO.)

Options :

A : Configure an Elastic Load Balancer with SSL pass-through

B : Configure an Elastic Load Balancer with SSL termination

C : Install SSL certificates on the EC2 instances

D : Configure an Elastic Load Balancer with a KMS CMK

E : Configure SSL certificates on an Elastic Load Balancer

Answer: A,B

Question 5

A developer received the following error message during an AWS CloudFormation deployment:

Which action should the developer take to resolve this error?

Options :

A : Manually delete the security group. Then execute a change set to force deletion of the CloudFormation stack.

B : Add a DependsOn attribute to the sg-11223344 resource in the CloudFormation template. Then delete the stack.

C : Update the logical ID of the security group resource with the security groups ARN. Then delete the stack.

D :

Modify the CloudFormation template to retain the ASGInstanceRolet 2345678 resource. Then manually delete the resource after deployment.

Answer: D

Confidently Practice Online with Free DVA-C02 Exam Cram

Buying Options: