Question 1

A Development team manage a hybrid cloud environment. They would like to collect system-level metrics from on-premises servers and Amazon EC2 instances. How can the Development team collect this information MOST efficiently?

Options :

A : Use CloudWatch detailed monitoring for both EC2 instances and on-premises servers

B : Install the CloudWatch agent on the on-premises servers and EC2 instances

C : Use CloudWatch for monitoring EC2 instances and custom AWS CLI scripts using the put-metric-data API

D : Install the CloudWatch agent on the EC2 instances and use a cron job on the on-premises servers

Answer: B

Question 2

An organization has encrypted a large quantity of data. To protect their data encryption keys they are planning to use envelope encryption. Which of the following processes is a correct implementation of envelope encryption?

Options :

A : Encrypt plaintext data with a data key and then encrypt the data key with a top-level encrypted master key

B : Encrypt plaintext data with a master key and then encrypt the master key with a top-level encrypted data key

C : Encrypt plaintext data with a data key and then encrypt the data key with a top-level plaintext master key.

D : Encrypt plaintext data with a master key and then encrypt the master key with a top-level plaintext data key

Answer: C

Question 3

A company deploys a new application to AWS. The company is streaming application logs to Amazon CloudWatch Logs. The company's development team must receive notification by email when the word "ERROR" appears in any log lines. A developer sets up an Amazon Simple Notification Service (Amazon SNS) topic and subscribes the development team to the topic.

What should the developer do next to meet the requirements?

Options :

A : Select the appropriate log group. Create a CloudWatch metric filter with "ERROR" as the search term. Create an alarm on this metric that notifies the SNS topic when the metric is 1 or higher.

B : In CloudWatch Logs Insights, select the appropriate log group. Create a metric query to search for the term "ERROR" in the logs. Create an alarm on this metric that notifies the SNS topic when the metric is 1 or higher.

C : Select the appropriate log group. Create an SNS subscription filter with "ERROR" as the filter pattern. Select the SNS topic as the destination.

D : Create a CloudWatch alarm that includes "ERROR" as a filter pattern, a log group dimension that defines the appropriate log group, and a destination that notifies the SNS topic.

Answer: A

Question 4

An application writes items to an Amazon DynamoDB table. As the application scales to thousands of instances, calls to the DynamoDB API generate occasional ThrottlingException errors. The application is coded in a language incompatible with the AWS SDK.

How should the error be handled?

Options :

A : Use Amazon SQS as an API message bus

B : Send the items to DynamoDB through Amazon Kinesis Data Firehose

C : Add exponential backoff to the application logic

D : Pass API calls through Amazon API Gateway

Answer: C

Question 5

A developer has a legacy application that is hosted on-premises. Other applications hosted on AWS depend on the on-premises application for proper functioning. In case of any application errors, the developer wants to be able to use Amazon CloudWatch to monitor and troubleshoot all applications from one place. How can the developer accomplish this?

Options :

A : Install an AWS SDK on the on-premises server to automatically send logs to CloudWatch.

B :

Download the CloudWatch agent to the on-premises server. Configure the agent to use IAM user credentials with permissions for CloudWatch.

C : Upload log files from the on-premises server to Amazon S3 and have CloudWatch read the files.

D :

Upload log files from the on-premises server to an Amazon EC2 instance and have the instance forward the logs to CloudWatch.

Answer: B

Confidently Practice Online with Free DVA-C02 Exam Cram

Buying Options: