Exam AWS Certified Developer - Associate DVA-C02 topic 1 question 219 discussion

Exam question from Amazon's AWS Certified Developer - Associate DVA-C02

Question #: 219
Topic #: 1

[All AWS Certified Developer - Associate DVA-C02 Questions]

A company has an existing application that has hardcoded database credentials. A developer needs to modify the existing application. The application is deployed in two AWS Regions with an active-passive failover configuration to meet company’s disaster recovery strategy.

The developer needs a solution to store the credentials outside the code. The solution must comply with the company’s disaster recovery strategy.

Which solution will meet these requirements in the MOST secure way?

A. Store the credentials in AWS Secrets Manager in the primary Region. Enable secret replication to the secondary Region. Update the application to use the Amazon Resource Name (ARN) based on the Region.
B. Store credentials in AWS Systems Manager Parameter Store in the primary Region. Enable parameter replication to the secondary Region. Update the application to use the Amazon Resource Name (ARN) based on the Region.
C. Store credentials in a config file. Upload the config file to an S3 bucket in the primary Region. Enable Cross-Region Replication (CRR) to an S3 bucket in the secondary region. Update the application to access the config file from the S3 bucket, based on the Region.
D. Store credentials in a config file. Upload the config file to an Amazon Elastic File System (Amazon EFS) file system. Update the application to use the Amazon EFS file system Regional endpoints to access the config file in the primary and secondary Regions.

Show Suggested Answer

Suggested Answer: A 🗳️

by didorins at Oct. 28, 2023, 8:35 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

didorins

Highly Voted 12 months ago

Selected Answer: A

https://docs.aws.amazon.com/secretsmanager/latest/userguide/create-manage-multi-region-secrets.html

upvoted 10 times

...

kaes

Highly Voted 11 months ago

Selected Answer: A

Must be A. The Secret Manager supports region replication out-of-the-box in contrast to the Paramter Store which doesn't support it.

upvoted 5 times

...

65703c1

Most Recent 5 months ago

Selected Answer: B

B is the correct answer.

upvoted 1 times

...

Claire_KMT

12 months ago

B. Store credentials in AWS Systems Manager Parameter Store in the primary Region. Enable parameter replication to the secondary Region. Update the application to use the Amazon Resource Name (ARN) based on the Region.

upvoted 3 times

...

Exam AWS Certified Developer - Associate DVA-C02 All Questions

View all questions & answers for the AWS Certified Developer - Associate DVA-C02 exam