中文
中文English

DVA-C02（日语） 练习题 — DVA-C02:开发者-助理级（日语）

1. 問題集はネット接続型で自動更新されるため、再ダウンロードの必要はございません。

2. 日本語・英語に対応し、オンライン演習、模擬試験、PDFダウンロード機能を搭載しています。

3. WeChatミニプログラムまたはPCウェブサイトから学習・問題演習が可能で、有効期間は1年間です。

4. ご質問がある場合は、WeChat、WhatsApp、Lineよりカスタマーサポートまでお問い合わせください。

样题

DVA-C02（日语） · Q1
  • A.
    Use an AWS Systems Manager Parameter Store SecureString parameter that uses an AWS Key Management Service (AWS KMS) AWS managed key to store the access token. Add a resource-based policy to the parameter to allow access from other accounts. Update the IAM role of the EC2 instances with permissions to access Parameter Store. Retrieve the token from Parameter Store with the decrypt flag enabled. Use the decrypted access token to send the message to the chat.
  • B.
    Encrypt the access token by using an AWS Key Management Service (AWS KMS) customer managed key. Store the access token in an Amazon DynamoDB table. Update the IAM role of the EC2 instances with permissions to access DynamoDB and AWS KMS. Retrieve the token from DynamoDB. Decrypt the token by using AWS KMS on the EC2 instances. Use the decrypted access token to send the message to the chat.
  • C.
    Use AWS Secrets Manager with an AWS Key Management Service (AWS KMS) customer managed key to store the access token. Add a resource-based policy to the secret to allow access from other accounts. Update the IAM role of the EC2 instances with permissions to access Secrets Manager. Retrieve the token from Secrets Manager. Use the decrypted access token to send the message to the chat.
  • D.
    Encrypt the access token by using an AWS Key Management Service (AWS KMS) AWS managed key. Store the access token in an Amazon S3 bucket. Add a bucket policy to the S3 bucket to allow access from other accounts. Update the IAM role of the EC2 instances with permissions to access Amazon S3 and AWS KMS. Retrieve the token from the S3 bucket. Decrypt the token by using AWS KMS on the EC2 instances. Use the decrypted access token to send the message to the chat.

答案: C

Option C is the correct answer because AWS Secrets Manager is designed to handle secrets securely and efficiently. It integrates well with AWS KMS for encryption and provides a straightforward way to manage access across different AWS accounts through resource-based policies. This option requires less management overhead compared to the other solutions, as it doesn't require the additional complexity of managing DynamoDB tables or S3 bucket policies for the same level of access control and security.
DVA-C02（日语） · Q2
  • A.
    Configure Amazon EC2 to deliver the EC2 instance lifecycle events from all accounts to the Amazon EventBridge event bus of the main account. Add an EventBridge rule to the event bus of the main account that matches all EC2 instance lifecycle events. Add the SQS queue as a target of the rule.
  • B.
    Use the resource policies of the SQS queue in the main account to give each account permissions to write to that SQS queue. Add to the Amazon EventBridge event bus of each account an EventBridge rule that matches all EC2 instance lifecycle events. Add the SQS queue in the main account as a target of the rule.
  • C.
    Write an AWS Lambda function that scans through all EC2 instances in the company accounts to detect EC2 instance lifecycle changes. Configure the Lambda function to write a notification message to the SQS queue in the main account if the function detects an EC2 instance lifecycle change. Add an Amazon EventBridge scheduled rule that invokes the Lambda function every minute.
  • D.
    Configure the permissions on the main account event bus to receive events from all accounts. Create an Amazon EventBridge rule in each account to send all the EC2 instance lifecycle events to the main account event bus. Add an EventBridge rule to the main account event bus that matches all EC2 instance lifecycle events. Set the SQS queue as a target for the rule.

答案: D

Option D is the correct answer because it allows for centralized collection of EC2 lifecycle events from multiple accounts into a single SQS queue. By configuring the main account event bus to receive events from all other accounts and creating EventBridge rules to filter and forward these events to the SQS queue, the solution ensures that all lifecycle events are captured in one place for further processing. This approach is efficient and eliminates the need for scanning instances or managing permissions at the instance level. 
DVA-C02（日语） · Q3
  • A.
    Use S3 Event Notifications to validate the file upload and download requests and update the user interface (UI).
  • B.
    Save the details of the uploaded files in a separate Amazon DynamoDB table. Filter the list of files in the user interface (UI) by comparing the current user ID with the user ID associated with the file in the table.
  • C.
    Use Amazon API Gateway and an AWS Lambda function to upload and download files. Validate each request in the Lambda function before performing the requested operation.
  • D.
    Use an IAM policy within the Amazon Cognito identity prefix to restrict users to use their own folders in Amazon S3.

答案: D

Option D is the correct answer because it utilizes the IAM policies to enforce access control at the granularity of individual user directories within Amazon S3. By attaching these policies to the Cognito identity pools, each user is provided with unique credentials that only allow access to their specific directory, ensuring that users can only upload and download their own files. This approach is secure and does not require additional components like S3 Event Notifications, DynamoDB tables, or Lambda functions, which could introduce more complexity and potential security vulnerabilities.
DVA-C02（日语） · Q4
  • A.
    AWS Batch
  • B.
    AWS Step Functions
  • C.
    AWS Glue
  • D.
    AWS Lambda

答案: B

Option B, AWS Step Functions, is the correct answer. This service allows users to coordinate multiple AWS services into serverless workflows so that applications can reliably react to events and state changes. AWS Step Functions is designed to handle the sequencing of tasks and can automatically retry actions in case of failure, making it ideal for running business rules in sequence and handling errors. It is also scalable and requires minimal maintenance, which aligns with the company's requirements.
DVA-C02（日语） · Q5
  • A.
    The Lambda function's concurrency limit has been exceeded.
  • B.
    DynamoDB table requires a global secondary index (GSI) to support writes.
  • C.
    The Lambda function does not have IAM permissions to write to DynamoDB.
  • D.
    The DynamoDB table is not running in the same Availability Zone as the Lambda function.

答案: C

Option C is the most likely cause of the issue. For a Lambda function to write data to a DynamoDB table, it needs the appropriate IAM permissions. If the function's execution role does not have the necessary permissions to access the DynamoDB table, it will fail during the write operation. The other options are less likely because Lambda functions can handle concurrency, do not require a GSI for basic write operations, and can access DynamoDB tables across different Availability Zones.

常见问题

DVA-C02（日语） 有多少道练习题？

本题库收录 DVA-C02（日语） 练习题共 557 道，含单选、多选等题型，每题配有答案与解析。

DVA-C02（日语） 练习题支持中英文吗？

支持，DVA-C02（日语） 练习题为中英双语对照，便于对照原文理解。

DVA-C02（日语） 练习题可以免费试做吗？

可以，本页提供免费样题在线试做；完整题库可在掌学兔注册后获取。

免费试做 获取题库

相关考试