AWS Certified Developer - Associate (DVA-C02) Exam Dumps with Solutions

A telemedicine startup runs a web portal where 12 partner clinics upload DICOM images (up to 5 GB each) to an Amazon S3 bucket using presigned URLs, and the company must enforce encryption in transit for all uploads/downloads while ensuring that any objects containing patient identifiers are encrypted at rest with AWS KMS keys that the security team can rotate on demand; which combination of steps will meet these requirements? (Choose two.)

A fintech startup serves its single-page web app (index.html, app.js, styles.css) from an Amazon S3 bucket named fintech-ui-prod behind an Amazon CloudFront distribution whose default TTL is 86,400 seconds (min TTL 0), and objects are cached due to Cache-Control: max-age=86400. After a CI/CD job deploys build 2025.08.15 by overwriting the same object keys in S3, the team confirms the new artifacts in S3, but end users still see the old UI for hours through CloudFront. How should the developer ensure the updated assets are delivered immediately via CloudFront?

A developer is building a serverless image-processing API on AWS Lambda behind Amazon API Gateway that must read two adjustable runtime parameters—maximum parallel transformations (initially 300) and maximum images processed per minute (initially 900)—which operations may update weekly, and these updates must be rolled out automatically with a canary release (e.g., 10% over 20 minutes), allow fast rollback, and apply across all function instances without redeploying the function code or causing downtime; which solution meets these requirements?

A telemedicine platform is rolling out nationwide training webinars, and as concurrent sessions surge, the DevOps team needs to be alerted if the Amazon EC2 instance running the WebRTC signaling service exceeds 85% CPU utilization for 10 consecutive minutes so that on-call engineers can scale capacity. Which solution will meet this requirement?

A team is using AWS Serverless Application Model (AWS SAM) to deploy a video-analytics microservice that includes one AWS Lambda function (512 MB memory with reserved concurrency of 5) and one Amazon S3 bucket named media-logs-789 that stores input files under the incoming/ prefix, and the function must be able to read objects from that bucket and prefix only (no write or delete) as part of the automated deployment; how should the developer configure the SAM template to grant the required read-only access?