Amazon Web Services edusum aws Certified Associate Changed Dva-c02 Questions by Ishaaq q65 vce pdf

Page: 22 / 25

Exam Name:	AWS Certified Developer - Associate
Exam Code:	DVA-C02 Dumps
Vendor:	Amazon Web Services	Certification:	AWS Certified Associate
Questions:	368 Q&A's	Shared By:	ishaaq

Question 88

An AWS Lambda function requires read access to an Amazon S3 bucket and requires read/write access to an Amazon DynamoDB table The correct 1AM policy already exists

What is the MOST secure way to grant the Lambda function access to the S3 bucket and the DynamoDB table?

Options:

Attach the existing 1AM policy to the Lambda function.

Create an 1AM role for the Lambda function Attach the existing 1AM policy to the role Attach the role to the Lambda function

Create an 1AM user with programmatic access Attach the existing 1AM policy to the user. Add the user access key ID and secret access key as environment variables in the Lambda function.

Add the AWS account root user access key ID and secret access key as encrypted environment variables in the Lambda function

Discussion

Aliza

I used these dumps for my recent certification exam and I can say with certainty that they're absolutely valid dumps. The questions were very similar to what came up in the actual exam.

Jakub Aug 12, 2025

That's great to hear. I am going to try them soon.

Conor

I recently used these dumps for my exam and I must say, I was impressed with their authentic material.

Yunus Aug 26, 2025

Exactly…….The information in the dumps is so authentic and up-to-date. Plus, the questions are very similar to what you'll see on the actual exam. I felt confident going into the exam because I had studied using Cramkey Dumps.

Andrew

Are these dumps helpful?

Jeremiah Aug 18, 2025

Yes, Don’t worry!!! I'm confident you'll find them to be just as helpful as I did. Good luck with your exam!

Joey

I highly recommend Cramkey Dumps to anyone preparing for the certification exam. They have all the key information you need and the questions are very similar to what you'll see on the actual exam.

Dexter Aug 15, 2025

Agreed. It's definitely worth checking out if you're looking for a comprehensive and reliable study resource.

Question 89

A developer is preparing to deploy an AWS CloudFormation stack for an application from a template that includes an IAM user.

The developer needs to configure the application's resources to retain the IAM user after successful creation. However, the developer also needs to configure the application to delete the IAM user if the stack rolls back.

Options:

Update CloudFormation template with the following deletion policy:

AWSTemplateFormatVersion: '2010-05-09'

Resources:

appUser:

Type: AWS::IAM::User

DeletionPolicy: Retain

Update CloudFormation template with the following deletion policy:

AWSTemplateFormatVersion: '2010-09-09'

Resources:

appUser:

Type: AWS::IAM::User

DeletionPolicy: RetainExceptOnCreate

Update the CloudFormation service role to include the following policy:

{

"Version": "2012-10-17",

"Statement": [{

"Effect": "Allow",

"Action": ["cloudformation:UpdateTerminationProtection"],

"Resource": "*"

}]

}

Update the stack policy to include the following statements:

{

"Statement": [{

"Effect": "Deny",

"Action": "Update:*",

"Principal": "*",

"Resource": "*",

"Condition": {

"StringEquals": {

"ResourceType": "AWS::IAM::User"

}

}]

}

Discussion

Question 90

A developer is creating an application that includes an Amazon API Gateway REST API in the us-east-2 Region. The developer wants to use Amazon CloudFront and a custom domain name for the API. The developer has acquired an SSL/TLS certificate for the domain from a third-party provider.

How should the developer configure the custom domain for the application?

Options:

Import the SSL/TLS certificate into AWS Certificate Manager (ACM) in the same Region as the API. Create a DNS A record for the custom domain.

Import the SSL/TLS certificate into CloudFront. Create a DNS CNAME record for the custom domain.

Import the SSL/TLS certificate into AWS Certificate Manager (ACM) in the same Region as the API. Create a DNS CNAME record for the custom domain.

Import the SSL/TLS certificate into AWS Certificate Manager (ACM) in the us-east-1 Region. Create a DNS CNAME record for the custom domain.

Discussion

Question 91

A company is using the AWS Serverless Application Model (AWS SAM) to develop a social media application. A developer needs a quick way to test AWS Lambda functions locally by using test event payloads. The developer needs the structure of these test event payloads to match the actual events that AWS services create.

Options:

Create shareable test Lambda events. Use these test Lambda events for local testing.

Store manually created test event payloads locally. Use the sam local invoke command with the file path to the payloads.

Store manually created test event payloads in an Amazon S3 bucket. Use the sam local invoke command with the S3 path to the payloads.

Use the sam local generate-event command to create test payloads for local testing.