Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Amazon DVA-C02 Exam - Topic 1 Question 8 Discussion

A company has deployed infrastructure on AWS. A development team wants to create an AWS Lambda function that will retrieve data from an Amazon Aurora database. The Amazon Aurora database is in a private subnet in company's VPC. The VPC is named VPC1. The data is relational in nature. The Lambda function needs to access the data securely.Which solution will meet these requirements?
C) Create the Lambda function. Configure VPC1 access for the function. Assign a security group named SG1 to the Lambda function. Assign a second security group named SG2 to the database. Add an inbound rule to SG1 to allow TCP traffic from Port 3306.
A) Create the Lambda function. Configure VPC1 access for the function. Attach a security group named SG1 to both the Lambda function and the database. Configure the security group inbound and outbound rules to allow TCP traffic on Port 3306.
B) Create and launch a Lambda function in a new public subnet that is in a new VPC named VPC2. Create a peering connection between VPC1 and VPC2.
D) Export the data from the Aurora database to Amazon S3. Create and launch a Lambda function in VPC1. Configure the Lambda function query the data from Amazon S3.

Amazon DVA-C02 Exam - Topic 1 Question 8 Discussion

Actual exam question for Amazon's DVA-C02 exam
Question #: 8
Topic #: 1
[All DVA-C02 Questions]

A company has deployed infrastructure on AWS. A development team wants to create an AWS Lambda function that will retrieve data from an Amazon Aurora database. The Amazon Aurora database is in a private subnet in company's VPC. The VPC is named VPC1. The data is relational in nature. The Lambda function needs to access the data securely.

Which solution will meet these requirements?

Show Suggested Answer Hide Answer
Suggested Answer: C

by Dalene at Apr 24, 2023, 05:46 AM

Limited Time Offer

25%

Off

Get Premium DVA-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Lennie
10 months ago
Wait, can Lambda really access Aurora like that?
upvoted 0 times
...
Merissa
10 months ago
D sounds like a workaround, not a direct solution.
upvoted 0 times
...
Hubert
10 months ago
C is interesting, but why use two security groups?
upvoted 0 times
...
Yuki
11 months ago
I think B is a bit overcomplicated for this scenario.
upvoted 0 times
...
Tamie
11 months ago
Option A seems solid, direct access to the database.
upvoted 0 times
...
Karan
11 months ago
I feel like option D is a bit off since it involves exporting data to S3, which seems like an extra step. The Lambda should access the database directly, right?
upvoted 0 times
...
Shenika
11 months ago
I practiced a similar question where the Lambda function needed VPC access. I think option A is straightforward and meets the requirements without unnecessary complexity.
upvoted 0 times
...
Thurman
11 months ago
I'm not entirely sure, but I think the security groups need to be set up correctly for the Lambda to access the database. Option C sounds like it might be overcomplicating things with two security groups.
upvoted 0 times
...
Izetta
11 months ago
I remember we discussed how Lambda functions need to be in the same VPC as the resources they access. So, I think options A and C could be correct.
upvoted 0 times
...
Jamal
11 months ago
I think the key here is to focus on the conditions that indicate delivery has not occurred. Both A and B describe situations where that's the case, so the answer must be C.
upvoted 0 times
...
Roslyn
11 months ago
I'm a little confused on this one. Should I go for the incentive system or the schedule revision? I'm not sure which one would be the most effective first step.
upvoted 0 times
...
Aracelis
11 months ago
I'm pretty sure this has to do with pledging securities as collateral, so I'll go with option B.
upvoted 0 times
...
Isaac
11 months ago
This is a good question. I think the key is to place the NAS in a location that balances accessibility, security, and performance for the VM image files.
upvoted 0 times
...
Sean
1 year ago
Option A all the way! I'm a big fan of keeping things simple. No need to complicate it with extra VPCs or data exports.
upvoted 0 times
...
Keith
1 year ago
Option D seems like a bit of a detour. Exporting the data to S3 and then querying it from the Lambda function feels like an extra step.
upvoted 0 times
Lavonne
1 year ago
C: Yeah, Option D does seem like a detour. Option A is definitely the way to go for securely retrieving data from the database.
upvoted 0 times
...
Gregoria
1 year ago
B: I agree. Option A seems like the most direct and secure way to access the data from the Aurora database.
upvoted 0 times
...
Samira
1 year ago
A: Option A sounds like the best choice. We can configure VPC1 access for the Lambda function and attach a security group to both the function and the database.
upvoted 0 times
...
...
Alba
1 year ago
Hmm, Option B with the VPC peering connection is an interesting approach, but it might add unnecessary complexity for this use case.
upvoted 0 times
...
Rozella
1 year ago
I like the idea of Option C. Separating the security groups for the Lambda function and the database gives us more control over the access rules.
upvoted 0 times
Corrie
1 year ago
Definitely, it's important to have control over the access rules for both the Lambda function and the database.
upvoted 0 times
...
Rory
1 year ago
I agree, having separate security groups for the Lambda function and the database adds an extra layer of security.
upvoted 0 times
...
Annamaria
1 year ago
Option C sounds like a good choice. Separating the security groups is a smart move.
upvoted 0 times
...
...
Tyra
1 year ago
Option A seems like the straightforward way to go. Configuring the Lambda function and the database to be in the same VPC and security group should provide the secure access we need.
upvoted 0 times
Kirk
1 year ago
Definitely, it simplifies the setup and ensures that the communication between the Lambda function and the database is secure.
upvoted 0 times
...
Moon
1 year ago
I agree, having the Lambda function and database in the same VPC with the same security group makes it easier to manage and secure the access.
upvoted 0 times
...
Veronika
1 year ago
Option A seems like the straightforward way to go. Configuring the Lambda function and the database to be in the same VPC and security group should provide the secure access we need.
upvoted 0 times
...
...
Christiane
1 year ago
I'm not sure about option A. I think option C could also work by assigning different security groups to the Lambda function and the database. It might provide more flexibility in terms of security configurations.
upvoted 0 times
...
Twanna
1 year ago
I agree with Isidra. Option A seems to be the most secure way to retrieve data from the Amazon Aurora database in a private subnet.
upvoted 0 times
...
Isidra
1 year ago
I think option A is the best solution. It ensures secure access to the data by configuring VPC1 access for the Lambda function and attaching a security group to both the function and the database.
upvoted 0 times
...

Save Cancel