Labour Day Special - Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: top65certs

Amazon Web Services DVA-C01 Dumps

Page: 1 / 23
Total 608 questions

AWS Certified Developer Associate Exam Questions and Answers

Question 1

A developer is troubleshooting a new AWS Lambda function. The function should run automatically each time a new object is uploaded to an Amazon S3 bucket. However, the developer finds that all calls failed before they reached the application code inside the function.

Which of the following is a possible reason for this failure?

Options:

A.

The function resource policy does not allow access from Amazon S3.

B.

The function execution role does not allow access from Amazon S3.

C.

The function execution role does not allow access to Amazon S3.

D.

The IAM user does not have access to Amazon S3.

Question 2

A developer is creating a new batch application that will run on an Amazon EC2 instance. The application requires read access to an Amazon S3 bucket. The developer needs to follow security best practices to grant S3 read access to the application.

Which solution meets these requirements?

Options:

A.

Add the permissions to an 1AM policy. Attach the policy to a role Attach the role to the EC2 instance profile.

B.

Add the permissions inline to an 1AM group. Attach the group to the EC2 instance profile.

C.

Add the permissions to an 1AM policy. Attach the policy to a user Attach the user to the EC2 instance profile.

D.

Add the permissions to an 1AM policy. Use 1AM web identity federation to access the S3 bucket with the policy

Question 3

A media company wants to test its web application more frequently. The company deploys the application by using a separate AWS CloudFormation stack for each environment. The same CloudFormation template is deployed to each stack as the application progresses through the development lifecycle.

A developer needs to build an automated alert for the quality assurance (QA) team. The developer wants the alert to occur for new deployments in the final pre-production environment.

Which solution will moot these requirements?

Options:

A.

Create an Amazon Simple Notification Service (Amazon SNS) topic. Add a subscription to notify the QA team. Update the CloudFormation stack options to point to the SNS topic in the pro-production environment. Most Voted

B.

Create an AWS Lambda function that notifies the QA team. Create an Amazon EventBridge rule to invoke the Lambda function on the default event bus. Filter the events on the CloudFormation service and the CloudFormation stack Amazon Resource Name (ARM).

C.

Create an Amazon CloudWatch alarm that monitors the metrics from CloudFormation. Filter the metrics on the stack name and the stack status. Configure the alarm to notify the QA team.

D.

Create an AWS Lambda function that notifies the QA team. Configure the event source mapping to receive events from CloudFormation. Specify the filtering values to limit invocations to the desired CloudFormation stack.

Question 4

A company has a front-end application that runs on four Amazon EC2 instances behind an Elastic Load Balancer (ELB) in a production environment that is provisioned by AWS Elastic Beanstalk. A developer needs to deploy and test new application code while updating the Elastic Beanstalk platform from the current version to a newer version of Node.js. The solution must result in zero downtime for the application.

Which solution meets these requirements?

Options:

A.

Clone the production environment to a different platform version. Deploy the new application code, and test it. Swap the environment URLs upon verification.

B.

Deploy the new application code in an all-at-once deployment to the existing EC2 instances. Test the code. Redeploy the previous code if verification fails.

C.

Perform an immutable update to deploy the new application code to new EC2 instances. Serve traffic to the new instances after they pass health checks

D.

Use a rolling deployment for the new application code. Apply the code to a subset of EC2 instances until the tests pass. Redeploy the previous code if the tests fail.

Question 5

A company is building an application for stock trading. The application needs sub-millisecond latency for processing trade requests. The company uses Amazon DynamoDB to store all the trading data that is used to process each trading request

A development team performs load testing on the application and finds that the data retrieval time is higher than expected. The development team needs a solution that reduces the data retrieval time with the least possible effort.

Which solution meets these requirements?

Options:

A.

Add local secondary indexes (LSIs) for the trading data

B.

Store the trading data in Amazon S3, and use S3 Transfer Acceleration.

C.

Add retries with exponential backoff for DynamoDB queries.

D.

Use DynamoDB Accelerator (DAX) to cache the trading data

Question 6

An open-source map application gathers data from several geolocation APIs. The application's source code repository is public and can be used by anyone, but the geolocation APIs must not be directly accessible.

A developer must implement a solution to prevent the credentials that are used to access the APIs from becoming public. The solution also must ensure that the application still functions properly.

Which solution will meet these requirements MOST cost-effectively?

Options:

A.

Store the credentials in AWS Secrets Manager. Retrieve the credentials by using the GetSecretValue API operation.

B.

Store the credentials in AWS Key Management Service (AWS KMS). Retrieve the credentials by using the GetPublicKey API operation.

C.

Store the credentials in AWS Security Token Service (AWS STS). Retrieve the credentials by using the GetCallerldentity API operation.

D.

Store the credentials in AWS Systems Manager Parameter Store. Retrieve the credentials by using the GetParameter API operation.

Question 7

A company has an ecommerce application. To track product reviews, the company's development team uses an Amazon DynamoDB table.

Every record includes the following:

• A Review ID, a 16-digit universally unique identifier (UUID)

• A Product ID and User ID. 16-digit UUIDs that reference other tables

• A Product Rating on a scale of 1—5 - An optional comment from the user

The table partition key is the Review ID. The most performed query against the table is to find the 10 reviews with the highest rating for a given product.

Which index will provide the FASTEST response tor this query?

Options:

A.

A global secondary index (GSI) with Product ID as the partition key and Product Rating as the sort key

B.

A global secondary index (GSI) with Product ID as the partition key and Review ID as the sort key

C.

A local secondary index (LSI) with Product ID as the partition key and Product Rating as the sort key

D.

A local secondary index (LSI) with Review ID as the partition key and Product ID as the sort key

Question 8

A developer is migrating to Amazon Cognito from a custom user management solution that stores user information in a database. The developer has created a…… Amazon Cognito user pool. The developer needs to migrate the existing user information to the user pool without forcing users to change their passwords.

Which solution will meet these requirements?

Options:

A.

Import users from a .csv file.

B.

Add an OpenID Connect (OIDC) identity provider to the user pool.

C.

Import users from a .json file.

D.

Import users with a user migration AWS Lambda trigger.

Question 9

A developer creates a web service that performs many critical activities. The web service code uses an AWS SDK to publish noncritical metrics to Amazon CloudWatch by using the PutMetricData API. The web service must return results to the caller as quickly as possible. The response data from the PutMetricData API is not necessary to create the web service response.

Which solution will MOST improve the response time of the web service?

Options:

A.

Upgrade to the latest version of the AWS SDK.

B.

Call the PutMetricData API in a background thread.

C.

Use the AWS SDK to perform a synchronous call to an AWS Lambda function. Call the PutMetricData API within the Lambda function.

D.

Send metric data to an Amazon Simple Queue Service (Amazon SQS) queue. Configure an AWS Lambda function with the queue as the event source. Call the PutMetricData API within the Lambda function.

Question 10

A company is migrating a web application from on premises to AWS. The company needs to move session storage from the application code to a shared service as part of the migration. The session storage data must be encrypted at rest.

Which AWS services meet these requirements? (Choose two.)

Options:

A.

Amazon ElastiCache for Redis

B.

Amazon ElastiCache for Memcached

C.

Amazon CloudWatch

D.

AWS CloudTrail

E.

Amazon DynamoDB

Question 11

A developer is implementing an AWS Lambda function that will be invoked when an object is uploaded to Amazon S3. The developer wants to test the Lambda function in a local development machine before publishing the function to a production AWS account.

Which solution will meet these requirements with the LEAST operational overhead?

Options:

A.

Upload an object to Amazon S3 by using the aws s3api put-object CLI command. Wait for the local Lambda invocation from the S3 event.

B.

Create a sample JSON text file for a put object S3 event. Invoke the Lambda function locally. Use the aws lambda invoke CLI command with the JSON file and Lambda function name as arguments.

C.

Use the sam local start-lambda CLI command lo start Lambda. Use the sam local generate-event s3 put CLI command to create the Lambda test JSON file. Use the sam local invoke CLI command with the JSON file as the argument to invoke the Lambda function.

D.

Create a JSON string for the put object S3 event. In the AWS Management Console, use the JSON string to create a test event for the local Lambda function. Perform the test.

Question 12

A developer is managing an application that uploads user files to an Amazon S3 bucket named companybucket. The company wants to maintain copies of all the files uploaded by users for compliance purposes, while ensuring users still have access to the data through the application.

Which IAM permissions should be applied to users to ensure they can create but not remove files from the bucket?

Options:

A.

B.

Text Description automatically generated

C.

Text, letter Description automatically generated

D.

Text Description automatically generated

Question 13

\ developer is designing a serverless application for a game in which users register and log in through a web browser. The application makes requests on behalf of users to a set of AWS Lambda functions that un behind an Amazon API Gateway HTTP API.

rhe developer needs to implement a solution to register and log in users on the application's sign-in page. The solution must minimize operational overhead and must minimize ongoing management of user identities.

Which solution will meet these requirements?

Options:

A.

Create Amazon Cognito user pools for external social identity providers. Configure 1AM roles for the identity pools.

B.

Program the sign-in page to create users' 1AM groups with the 1AM roles attached to the groups.

C.

Create an Amazon RDS for SQL Server DB instance to store the users and manage the permissions to the backend resources in AWS.

D.

Configure the sign-in page to register and store the users and their passwords in an Amazon DynamoDB table with an attached 1AM policy.

Question 14

A company is developing a microservice that will manage customer account data in an Amazon DynamoDB table. Insert, update, and delete requests will be rare. Read traffic will be heavy. The company must have the ability to access customer data quickly by using a customer ID. The microservice can tolerate stale data.

Which solution will meet these requirements with the FEWEST possible read capacity units (RCUs)?

Options:

A.

Read the table by using eventually consistent reads.

B.

Read the table by using strongly consistent reads.

C.

Read the table by using transactional reads.

D.

Read the table by using strongly consistent PartiQL queries.

Question 15

A developer is working on a Python application that runs on Amazon EC2 instances. The developer wants to enable tracing of application requests to debug performance issues in the code.

Which combination of actions should the developer take to achieve this goal? (Select TWO.)

Options:

A.

Install the Amazon CloudWatch agent on the EC2 instances.

B.

Install the AWS X-Ray daemon on the EC2 instances

C.

Configure the application to write JSON-formatted logs to /var/log/cloudwatch.

D.

Configure the application to write trace data to /var/log/xray.

E.

Install and configure the AWS X-Ray SDK for Python in the application.

Question 16

A developer has an Amazon DynamoDB table that must be in provisioned mode to comply with user requirements. The application needs to support the following:

• Average item size: 10 KB

• Item reads each second: 10 strongly consistent

• Item writes each second: 2 transactional

Which read and write capacity cost-effectively meets these requirements?

Options:

A.

Read 10; write 2

B.

Read 30; write 40

C.

Use on-demand scaling

D.

Read 300; write 400

Question 17

A company is migrating a legacy application to a serverless application on AWS. The legacy application consists of a set of web services that are exposed by a Amazon API Gateway API. A developer needs to replace the existing implementation of web services with AWS Lambda functions. The developer needs to test new version of the" API that uses the functions in production. The developer must minimize the impact of the testing on the application's users.

Which solution will meet these requirements?

Options:

A.

Create a beta stage for the new version of the API. Send the updated endpoint to the users.

B.

Create a development stage for the new version of the API. Use a canary deployment.

C.

Create a development stage for the new version of the API. Promote a canary release.

D.

Create a deployment stage. Enable mutual TLS for the new version of the API.

Question 18

A developer is deploying a company's application to Amazon EC2 instances. The application generates gigabytes of data files each day. The files are rarely accessed, but the files must be available to the application’s users within minutes of a request during the first year of storage. The company must retain the files for 7 years.

How can the developer implement the application to meet these requirements MOST cost-effectively?

Options:

A.

Store the files in an Amazon S3 bucket Use the S3 Glacier Instant Retrieval storage class. Create an S3 Lifecycle policy to transition the files to the S3 Glacier Deep Archive storage class after 1 year.

B.

Store the files in an Amazon S3 bucket. Use the S3 Standard storage class. Create an S3 Lifecycle policy to transition the files to the S3 Glacier Flexible Retrieval storage class after 1 year.

C.

Store the files on an Amazon Elastic Block Store (Amazon EBS) volume. Use Amazon Data Lifecycle Manager (Amazon DLM) to create snapshots of the EBS volumes and to store those snapshots in Amazon S3.

D.

Store the files on an Amazon Elastic File System (Amazon EFS) mount. Configure EFS lifecycle management to transition the files to the EFS Standard-Infrequent Access (Standard-IA) storage class after 1 year.

Question 19

A movie fan club hosts a serverless web application in an Amazon S3 bucket. The application uses an AWS Lambda function that is exposed by an Amazon API Gateway API. The function queries an Amazon DynamoDB table to list actors sorted by movie. In the DynamoDB table. Actor is the primary key, Movie is the sort key, and Role and Year are attributes.

In the web application, a developer wants to add a page that is named Phase 1 that lists only the movies that were released between 2008 and 2012. The developer needs to fetch the Phase 1 items in a way that minimizes the impact on the DynamoDB table.

Which solution will meet these requirements?

Options:

A.

Create a global secondary index (GSl) with the Year attribute as the sort key. Create a Lambda function to return the results from a new method in the API.

B.

Design a Lambda function that scans the DynamoDB table and filters the results for the Phase 1 items. Invoke the function from a new method in the API.

C.

Use a DynamoDB stream to send items that are filtered by Year to a new DynamoDB table. Invoke a Lambda function from a new method in the API.

D.

Set up an Amazon CloudFront distribution. Create a Lambda@Edge function to filter the items that are returned from the API request.

Question 20

A developer is running an application on an Amazon EC2 instance. When the application tries to read an Amazon S3 bucket, the application fails. The developer notices that the associated IAM role is missing the S3 read permission. The developer needs to give the application the ability to read the S3 bucket.

Which solution will meet this requirement with the LEAST application disruption?

Options:

A.

Add the permission to the role. Terminate the existing EC2 instance. Launch a new EC2 instance.

B.

Add the permission to the role so that the change will take effect automatically.

C.

Add the permission to the role. Hibernate and restart the existing EC2 instance.

D.

Add the permission to the S3 bucket. Restart the EC2 instance.

Question 21

A developer is exposing an API by using Amazon API Gateway and AWS Lambda as the backend for an application. The developer wants to add validation rules for a POST method to ensure that the data (rom the frontend web form is valid. The validation rules must include mandatory fields, data type, length, and regular expressions.

Which solution will meet these requirements?

Options:

A.

Create an API Gateway model with schema for data validation.

B.

Create API Gateway HTTP request headers for data validation.

C.

Create API Gateway URL query string parameters for data validation.

D.

Create API Gateway URL path parameters for data validation

Question 22

A developer is integrating Amazon ElastiCache in an application. The cache will store data from a database. The cached data must populate real-time dashboards.

Which caching strategy will meet these requirements?

Options:

A.

A read-through cache

B.

A write-behind cache

C.

A lazy-loading cache

D.

A write-through cache

Question 23

A developer is creating a web application that collects highly regulated and confidential user data through a POST request. The web application is served through Amazon CloudFront. User names and phone numbers must be encrypted at the edge and must remain encrypted throughout the entire application stack.

What is the MOST secure way to meet these requirements?

Options:

A.

Enforce Match Viewer with HTTPS Only on CloudFront.

B.

Use only the newest TLS security policy on CloudFront.

C.

Enforce a signed URL on CloudFront on the front end.

D.

Use field-level encryption on CloudFront.

Question 24

What is the maximum number of S3 Buckets available per AWS account?

Options:

A.

100 per region

B.

there is no limit

C.

100 per account

D.

500 per account

E.

100 per IAM user

Question 25

A legacy service has an XML-based SOAP interface. The Developer wants to expose the functionality of the service to external clients with the Amazon API Gateway. Which technique will accomplish this?

Options:

A.

Create a RESTful API with the API Gateway; transform the incoming JSON into a valid XML message for the SOAP interface using mapping templates.

B.

Create a RESTful API with the API Gateway; pass the incoming JSON to the SOAP interface through an Application Load Balancer.

C.

Create a RESTful API with the API Gateway; pass the incoming XML to the SOAP interface through an Application Load Balancer.

D.

Create a RESTful API with the API Gateway; transform the incoming XML into a valid message for the

SOAP interface using mapping templates.

Question 26

What item operation allows the retrieval of multiple items from a DynamoDB table in a single API call?

Options:

A.

GetItem

B.

BatchGetItem

C.

GetMultipleItems

D.

GetItemRange

Question 27

A Developer has published an update to an application that is served to a global user base using Amazon CloudFront. After deploying the application, users are not able to see the updated changes.

How can the Developer resolve this issue?

Options:

A.

Remove the origin from the CloudFront configuration and add it again.

B.

Disable forwarding of query strings and request headers from the CloudFront distribution configuration.

C.

Invalidate all the application objects from the edge caches.

D.

Disable the CloudFront distribution and enable it again to update all the edge locations.

Question 28

A Developer is developing an application that manages financial transactions. To improve security, multi-factor authentication (MFA) will be required as part of the login protocol.

What services can the Developer use to meet these requirements?

Options:

A.

Amazon DynamoDB to store MFA session data, and Amazon SNS to send MFA codes

B.

Amazon Cognito with MFA

C.

AWS Directory Service

D.

AWS IAM with MFA enabled

Question 29

A company has written a Java AWS Lambda function to be triggered whenever a user uploads an image to an Amazon S3 bucket. The function converts the original image to several different formats and then copies the resulting images to another Amazon S3 bucket.

The Developers find that no images are being copied to the second Amazon S3 bucket. They have tested the code on an Amazon EC2 instance with 1GB of RAM, and it takes an average of 500 seconds to complete.

What is the MOST likely cause of the problem?

Options:

A.

The Lambda function has insufficient memory and needs to be increased to 1 GB to match the Amazon EC2 instance

B.

Files need to be copied to the same Amazon S3 bucket for processing, so the second bucket needs to be deleted.

C.

Lambda functions have a maximum execution limit of 300 seconds, therefore the function is not completing.

D.

There is a problem with the Java runtime for Lambda, and the function needs to be converted to node.js.

Question 30

A Developer must build an application that uses Amazon DynamoDB. The requirements state that items being stored in the DynamoDB table will be 7KB in size and that reads must be strongly consistent. The maximum read rate is 3 items per second, and the maximum write rate is 10 items per second.

How should the Developer size the DynamoDB table to meet these requirements?

Options:

A.

Read: 3 read capacity units

Write: 70 write capacity units

B.

Read: 6 read capacity units

Write: 70 write capacity units

C.

Read: 6 read capacity units

Write: 10 write capacity units

D.

Read: 3 read capacity units

Write: 10 write capacity units

Question 31

How can you secure data at rest on an EBS volume?

Options:

A.

Attach the volume to an instance using EC2's SSL interface.

B.

Write the data randomly instead of sequentially.

C.

Use an encrypted file system on top of the BBS volume.

D.

Encrypt the volume using the S3 server-side encryption service.

E.

Create an IAM policy that restricts read and write access to the volume.

Question 32

A Developer must re-implement the business logic for an order fulfilment system. The business logic has to make requests to multiple vendors to decide where to purchase an item. The whole process can take up to a week to complete.

What is the MOST efficient and SIMPLEST way to implement a system that meets these requirements?

Options:

A.

Use AWS Step Functions to execute parallel Lambda functions, and join the results.

B.

Create an AWS SQS for each vendor, poll the queue from a worker instance, and joint the results.

C.

Use AWS Lambda to asynchronously call a Lambda function for each vendor, and join the results.

D.

Use Amazon CloudWatch Events to orchestrate the Lambda functions.

Question 33

EC2 instances are launched from Amazon Machine images (AMIs). A given public AMI can:

Options:

A.

be used to launch EC2 Instances in any AWS region.

B.

only be used to launch EC2 instances in the same country as the AMI is stored.

C.

only be used to launch EC2 instances in the same AWS region as the AMI is stored.

D.

only be used to launch EC2 instances in the same AWS availability zone as the AMI is stored

Question 34

A large e-commerce site is being designed to deliver static objects from Amazon S3. The Amazon S3 bucket wills server more than 300 GET requests per second. What should be done to optimize performance? (Select TWO.)

Options:

A.

Integrate Amazon CloudFront with Amazon S3.

B.

Enable Amazon S3 cross-region replication.

C.

Delete expired Amazon S3 server log files.

D.

Configure Amazon S3 lifecycle rules.

E.

Randomize Amazon S3 key name prefixes.

Question 35

A company is providing services to many downstream consumers. Each consumer may connect to one or more services. This has resulted in a complex architecture that is difficult to manage and does not scale well. The company needs a single interface to manage these services to consumers.

Which AWS service should be used to refactor this architecture?

Options:

A.

AWS Lambda

B.

AWS X-Ray

C.

Amazon SQS

D.

Amazon API Gateway

Question 36

What is one key difference between an Amazon EBS-backed and an instance-store backed instance?

Options:

A.

Virtual Private Cloud requires EBS backed instances

B.

Amazon EBS-backed instances can be stopped and restarted

C.

Auto scaling requires using Amazon EBS-backed instances.

D.

Instance-store backed instances can be stopped and restarted.

Question 37

A company wants to migrate its web application to AWS and leverage Auto Scaling to handle pear workloads.

The Solutions Architect determined that the best metric for an Auto Scaling event is the number of concurrent users.

Based on this information, what should the Developer use to autoscale based on concurrent users?

Options:

A.

An Amazon SNS topic to be triggered when a concurrent user threshold is met

B.

An Amazon Cloudwatch Networkin metric

C.

Amazon CloudFront to leverage AWS Edge Locations

D.

A Custom Amazon CloudWatch metric for concurrent users.

Question 38

An application overwrites an object in Amazon S3, and then immediately reads the same object. Why would the application sometimes retrieve the old version of the object?

Options:

A.

S3 overwrite PUTS are eventually consistent, so the application may read the old object.

B.

The application needs to add extra metadata to label the latest version when uploading to Amazon S3.

C.

All S3 PUTS are eventually consistent, so the application may read the old object.

D.

The application needs to explicitly specify latest version when retrieving the object.

Question 39

If an application is storing hourly log files from thousands of instances from a high traffic web site, which naming scheme would give optimal performance on S3?

Options:

A.

Sequential

B.

instanceID_log-HH-DD-MM-YYYY

C.

instanceID_log-YYYY-MM-DD-HH

D.

HH-DD-MM-YYYY-log_instanceID

E.

YYYY-MM-DD-HH-log_instanceID

Question 40

A Developer created a Lambda function for a web application backend. When testing the Lambda function from the AWS Lambda console, the Developer can see that the function is being executed, but there is no log data being generated in Amazon CloudWatch Logs, even after several minutes.

What could cause this situation?

Options:

A.

The Lambda function does not have any explicit log statements for the log data to send it to CloudWatch Logs.

B.

The Lambda function is missing CloudWatch Logs as a source trigger to send log data.

C.

The execution role for the Lambda function is missing permissions to write log data to the CloudWatch Logs.

D.

The Lambda function is missing a target CloudWatch Log group.

Question 41

A Developer has created an S3 bucket s3://mycoolapp and has enabled server across logging that points to the folder s3://mycoolapp/logs. The Developer moved 100 KB of Cascading Style Sheets (CSS) documents to the folder s3://mycoolapp/css, and then stopped work. When the developer came back a few days later, the bucket was 50 GB.

What is the MOST likely cause of this situation?

Options:

A.

The CSS files were not compressed and S3 versioning was enabled.

B.

S3 replication was enabled on the bucket.

C.

Logging into the same bucket caused exponential log growth.

D.

An S3 lifecycle policy has moved the entire CSS file to S3 Infrequent Access.

Question 42

A Developer executed a AWS CLI command and received the error shown below:

What action should the Developer perform to make this error human-readable?

Options:

A.

Make a call to AWS KMS to decode the message.

B.

Use the AWS STS decode-authorization-message API to decode the message.

C.

Use an open source decoding library to decode the message.

D.

Use the AWS IAM decode-authorization-message API to decode this message.

Question 43

A deployment package uses the AWS CLI to copy files into any S3 bucket in the account, using access keys stored in environment variables. The package is running on EC2 instances, and the instances have been modified to run with an assumed IAM role and a more restrictive policy that allows access to only one bucket.

After the change, the Developer logs into the host and still has the ability to write into all of the S3 buckets in that account.

What is the MOST likely cause of this situation?

Options:

A.

An IAM inline policy is being used on the IAM role

B.

An IAM managed policy is being used on the IAM role

C.

The AWS CLI is corrupt and needs to be reinstalled

D.

The AWS credential provider looks for instance profile credentials last

Question 44

An application will ingest data at a very high throughput from many sources and must store the data in an Amazon S3 bucket. Which service would BEST accomplish this task?

Options:

A.

Amazon Kinesis Firehose

B.

Amazon S3 Acceleration Transfer

C.

Amazon SQS

D.

Amazon SNS

Question 45

A supplier is writing a new RESTful API for customers to query the status of orders. The customers requested the following API endpoint.

Which of the following application designs meet the requirements? (Select two.)

Options:

A.

Amazon SQS; Amazon SNS

B.

Elastic Load Balancing; Amazon EC2

C.

Amazon ElastiCache; Amazon Elacticsearch Service

D.

Amazon API Gateway; AWS Lambda

E.

Amazon S3; Amazon CloudFront

Question 46

A Developer has setup an Amazon Kinesis Stream with 4 shards to ingest a maximum of 2500 records per second. A Lambda function has been configured to process these records.

In which order will these records be processed?

Options:

A.

Lambda will receive each record in the reverse order it was placed into the stream following a LIFO (last-in, first-out) method

B.

Lambda will receive each record in the exact order it was placed into the stream following a FIFO (first-in, first-out) method.

C.

Lambda will receive each record in the exact order it was placed into the shard following a FIFO (first-in, first-out) method. There is no guarantee of order across shards.

D.

The Developer can select FIFO, (first-in, first-out), LIFO (last-in, last-out), random, or request specific record using the getRecords API.

Question 47

A company is adding stored value for gift card) capability to its highly popular casual gaming website. Users need to be able to trade this value for other users' items on the platform. This would require both users' records be updated as a single transaction, or both users' records to be completely rolled back.

Which AWS database options can provide the transactional capability required for this new feature? (Select TWO )

Options:

A.

Amazon DynamoDB with operations made with the ConsistentRead parameter set to true

B.

Amazon ElastiCache for Memcached with operations made within a transaction block

C.

Amazon Aurora MySQL with operations made within a transaction block

D.

Amazon DynamoDB with reads and writes made using Transact" operations

E.

Amazon Redshift with operations made within a transaction block

Question 48

A developer registered an AWS Lambda function as a target for an Application Load Balancer (ALB) using a CLI command. However, the Lambda function is not being invoked when the client sends requests through the ALB.

Why is the Lambda function not being invoked?

Options:

A.

A Lambda function cannot be registered as a target for an ALB

B.

A Lambda function can be registered with an ALB using AWS Management Console only

C.

The permissions to invoke the Lambda function are missing

D.

Cross-zone is not enabled on the ALB

Question 49

A company has an application where reading objects from Amazon S3 is based on the type of user The user types are registered user and guest user The company has 25.000 users and is growing Information is pulled from an S3 bucket depending on the user type.

Which approaches are recommended to provide access to both user types? (Select TWO.)

Options:

A.

Provide a different access key and secret access key in the application code for registered users and guest users to provide read access to the objects

B.

Use S3 bucket policies to restrict read access to specific IAM users

C.

Use Amazon Cognito to provide access using authenticated and unauthenticated roles

D.

Create a new IAM user for each user and grant read access.

E.

Use the AWS IAM service and let the application assume the different roles using the AWS Security Token Service (AWS STS) AssumeRole action depending on the type of user and provide read access to Amazon S3 using the assumed role

Question 50

A developer is writing a web application that must share secure documents with end users The documents are stored in a private Amazon S3 bucket The application must allow only authenticated users to download specific documents when requested, and only for a duration of 15 minutes

How can the developer meet these requirements?

Options:

A.

Copy the documents to a separate S3 bucket that has a lifecycle policy for deletion after 15 minutes

B.

Create a presigned S3 URL using the AWS SDK with an expiration time of 15 minutes

C.

Use server-side encryption with AWS KMS managed keys (SSE-KMS) and download the documents using HTTPS

D.

Modify the S3 bucket policy to only allow specific users to download the documents Revert the change after 15 minutes.

Question 51

A developer is creating as AWS lambda function that generates a new file each time it runs. Each new file must be checked into an AWS CodeCommit repository hosted in the same AWS account.

How should the developer accomplish this?

Options:

A.

When the Lambda function starts, use the Git CLI to Clone the repository. Check the new file into the cloned repository and push the change.

B.

After the new file is created in Lambda, use cURL to invoke the CodeCommit API. Send the file to the repository.

C.

Use an AWS SDK to instantiate a CodeCommit Client. Invoke the put _ file method to add the file to the repository.

D.

Upload the new file to an Amazon S3 bucket. Create an AWS step Function to accept S3 events. In the step Function, add the new file to the repository.

Question 52

A company is developing an application that will be accessed through the Amazon API Gateway REST API Registered users should be the only ones who can access certain resources of this API. The token being used should expire automatically and needs to be refreshed periodically.

How can a developer meet these requirements'?

Options:

A.

Create an Amazon Cognito identity pool, configure the Amazon Cognito Authorizer in API Gateway, and use the temporary credentials generated by the identity pool

B.

Create and maintain a database record for each user with a corresponding token and use an AWS Lambda authorizer m API Gateway

C.

Create an Amazon Cognito user pool, configure the Cognito Authorizer in API Gateway, and use the identity or access token

D.

Create an IAM user for each API user, attach an invoke permissions policy to the API. and use an IAM authorizer in API Gateway.

Question 53

An on-premises application is implemented using a Linux, Apache, MySQL and PHP (LAMP) stack. The Developer wants to run this application in AWS.

Which of the following sets of AWS services can be used to run this stack?

Options:

A.

Amazon API Gateway, Amazon S3

B.

AWS Lambda, Amazon DynamoDB

C.

Amazon EC2, Amazon Aurora

D.

Amazon Cognito, Amazon RDS

E.

Amazon ECS, Amazon EBS

Question 54

A developer is testing a Docker-based application that uses the AWS SDK to interact with Amazon DynamoDB In the local development environment, the application has used IAM access keys The application is now ready for deployment onto an ECS duster.

How should the application authenticate with AWS services in production?

Options:

A.

Configure an ECS task IAM role for the application to use

B.

Refactor the application to call AWS STS AssumeRole based on an instance role

C.

Configure AWS access key/secret access key environment variables with new credentials

D.

Configure the credentials file with a new access key/secret access key

Question 55

A developer has written an Amazon kinesis Data streams application. As usage grows and traffic over time, the application is regularly receiving provisionedThroughputExceededException error messages.

Which steps should the Developer take to resolve the error? (Select Two.)

Options:

A.

Use Auto scaling to scale the stream for better performance.

B.

Increase the delay between the GetRecords call and the PutRecords call.

C.

Increase the number of shards in the data stream.

D.

Specify a shard iterator using the shardlterator parameter.

E.

Implement exponential backoff on the GetRecords call and the PutRecords call.

Question 56

A development team is creating a new application designed to run on AWS. While the test and production environments will run on Amazon EC2 instances, developers will each run their own environment on their laptops.

Which of the following is the simplest and MOST secure way to access AWS services from the local development machines?

Options:

A.

Use an IAM role to assume a role and execute API calls using the role.

B.

Create an IAM user to be shared with the entire development team, provide the development team with the access key.

C.

Create an IAM user for each developer on the team: provide each developer with a unique access key

D.

Set up a federation through an Amazon Cognito user pool.

Question 57

A developer has written an application that runs on Amazon EC2 instances and generates a value every minute. The Developer wants to monitor and graph the values generated over time without logging in to the instance each time.

Which approach should the Developer use to achieve this goal?

Options:

A.

Use the Amazon CloudWatch metrics reported by default for all EC2 instances View each value from the CloudWatch console.

B.

Develop the application to store each value in a file on Amazon S3 every minute with the Umestamp as the name

C.

Publish each generated value as a custom metric to Amazon CloudWatch using available AWS SDKs

D.

Store each value as a variable and add the variable to the list of EC2 metrics that should be reported to the Amazon CloudWatch console

Question 58

A company has an AWS CloudFormation template that is stored as a single file. The template is able to launch and create a full infrastructure stack.

Which best practice would increase the maintainability of the template?

Options:

A.

Use nested stacks for common template patterns.

B.

Embed credentials to prevent typos.

C.

Remove mappings to decrease the number of variables.

D.

Use AWS::Include to reference publicly-hosted template files.

Question 59

An application is using Amazon DynamoDB as its data store, and should be able to read 100 items per second as strongly consistent reads. Each item is 5 KB in size.

To what value should the table’s provisioned read throughput be set?

Options:

A.

50 read capacity units

B.

100 read capacity units

C.

200 read capacity units

D.

500 read capacity unitsc

Question 60

An Amazon DynamoDB table uses a Global Secondary Index (GSI) to support read queries. The primary table is write-heavy, whereas the GSI is used for read operations. Looking at Amazon CloudWatch metrics, the Developer notices that write operations to the primary table are throttled frequently under heavy write activity. However, write capacity units to the primary table are available and not fully consumed.

Why is the table being throttled?

Options:

A.

The GSI write capacity units are underprovisioned

B.

There are not enough read capacity units on the primary table

C.

Amazon DynamoDB Streams is not enabled on the table

D.

A large write operation is being performed against another table

Question 61

An application is running on a cluster of Amazon EC2 instance. While trying to read objects stored within a single Amazon S3 bucket that are encrypted with server-side encryption with AWS KMS managed keys (SSE-KMS), the application receives the following error:

Service : AWSKMS: Status Code: 400: Code : ThrottlingException

Which combination of steps should be taken to prevent this failure? (Select TWO.)

Options:

A.

Contact AWS Support to request an AWS KMS rate limit increase.

B.

Perform error retries with exponential backoff in the application code.

C.

Contact AWS Support to request a S3 rate limit increase.

D.

Import a customer master key (CMK) with a larger key size.

E.

Use more than one customer master key (CMK) to encrypt S3 data

Question 62

A developer is setting up Amazon API gateway for their company’s products. The API will be registered developers to query and update their environments. The company wants to limit the amount of requests end users send for.bot cost and security reason management wants to offer registered the option of buying larger packages that allow for more requests.

Options:

A.

Enable throttling for the API Gateway stage Set a value tor both the rate and burst capacity If a registered larger package, create a stage for them, adjust the values, and share the new URL with them.

B.

Set up Amazon CloudWatch API logging in API Gateway Create a filter based on the user and requestTime fields and create an alarm on this filter Write an AWS Lambda function to analyze the values and requester information, and respond accordingly Set up the function as the target tor the alarm If a registered user chooses a larger package, update the Lambda code with the values

C.

Enable Amazon CloudWatch metrics for the API Gateway stage Set up CloudWatch alarms based oft the Count metric and the ApiName, Method, Resource, and Stage dimensions to alerts when request rates pass the threshold Set the alarm action to Deny If a registered user chooses a larger package, create a user-specific alarm and adjust the values

D.

Set up a default usage plan specify values for the rate and burst capacity, and associate it with a stage If a registered user chooses a larger package, create a custom plan with the appropriate values and associate the plan with the user

Question 63

An application runs on multiple EC2 instances behind an ELB.

Where is the session data best written so that it can be served reliably across multiple requests?

Options:

A.

Write data to Amazon ElastiCache

B.

Write data to Amazon Elastic Block Store.

C.

Write data to Amazon EC2 Instance Store.

D.

Write data to the root filesystem.

Question 64

A Developer is migrating existing applications to AWS. These applications use MongoDB as their primary data store, and they will be deployed to Amazon EC2 instances. Management requires that the Developer minimize changes to applications while using AWS services

Which solution should the Developer use to host MongoDB in AWS?

Options:

A.

Install MongoDB on the same instance where the application is running

B.

Deploy Amazon DocumentDB in MongoDB compatibility mode

C.

Use Amazon API Gateway to translate API calls from MongoDB to Amazon DynamoDB.

D.

Replicate the existing MongoDB workload to Amazon DynamoDB

Question 65

A developer has discovered that an application responsible for processing messages in an Amazon SQS queue is routinely falling behind. The application is capable of processing multiple messages in one execution, but is only receiving one message at a time

What should the developer do to increase the number of messages the application receives?

Options:

A.

Call the ChangeMessageVisibility API for the queue and set MaxNumberOfMessages to a value greater than the default of 1.

B.

Call the AddPermission API to set MaxNumberOfMessages for the ReceiveMessage action to a value greater than the default of 1.

C.

Call the ReceiveMessage API to set MaxNumberOfMessages to a value greater than the default of 1

D.

Call the SetQueueAttributes API for the queue and set MaxNumberOfMessages to a value greater than the default of 1.

Question 66

A Developer is migrating an on-premises application to AWS. The application currently takes user uploads and saves them to a local directory on the server. All uploads must be saved and made immediately available to all instances in an Auto scaling group.

Which approach will meet these requirements?

Options:

A.

Use Amazon EBS and configure the application AMI to use a snapshot of the same EBS instance on boot.

B.

Use Amazon S3 and rearchitect the application so all uploads are placed in S3.

C.

Use instance storage and share it between instances launched from the same Amazon machine image (AMI).

D.

Use Amazon EBS and file synchronization software to achieve eventual consistency among the auto scaling group.

Question 67

A developer implemented a static website hosted in amazon s3 that makes web service requests in amazon api gateway and aws lambda. The site is showing an error that reads.

''No 'access control-allow-origin'header' header is present on the requested resource. Origin 'null is therefore not allowed access ''

What should the developer do to resolve this issue?

Options:

A.

Enable cross-origin resource sharing (cors) on the s3 bucket

B.

Enable cross-origin resource sharing (cors) for the method in api gateway

C.

Add the access control-request-method header to the request

D.

Add the access-control inquest headers header to the request

Question 68

While developing an application that runs on Amazon EC2 in an Amazon VPC, a Developer identifies the need for centralized storage of application-level logs.

Which AWS service can be used to securely store these logs?

Options:

A.

Amazon EC2 VPC Flow Logs

B.

Amazon CloudWatch Logs

C.

Amazon CloudSearch

D.

AWS CloudTrail

Question 69

An application needs to encrypt data that is written to Amazon S3 where the keys are managed in an on-premises data center and the encryption is handled by S3. Which type of encryption should be used?

Options:

A.

Use server-side encryption with Amazon S3-managed keys

B.

Use server-side encryption with AWS KMS-managed keys.

C.

Use client-side encryption with customer master keys

D.

Use server-side encryption with customer-provided keys

Question 70

A company is using AWS CloudFormation templates to deploy AWS resources. The company needs to update one of its AWS CloudFormation stacks What can the company do to find out how the changes will impact the resources that are running?

Options:

A.

Investigate the change sets

B.

Investigate the stack policies

C.

Investigate the Metadata section.

D.

Investigate the Resources section.

Question 71

A developer must extend an existing application that is based on the AWS Services Application Model (AWS SAM). The developer has used the AWS SAM CLI to create the project. The project contains different AWS Lambda functions.

Which combination of commands must the developer use to redeploy the AWS SAM application (Select TWO.)

Options:

A.

Sam init

B.

Sam validate

C.

Sam build

D.

Sam deploy

E.

Sam publish

Question 72

A company hosts a client-side web application for one of its subsidiaries on Amazon S3. The web application can be accessed through Amazon CloudFront from After a successful rollout, the company wants to host three more client-side web applications for its remaining subsidiaries on three separate S3 buckets.

To achieve this goal, a developer moves all the common JavaScript files and web fonts to a central S3 bucket that serves the web applications. However, during testing, the developer notices that the browser blocks the JavaScript files and web fonts.

What should the developer do to prevent the browser from blocking the JavaScript files and web fonts?

Options:

A.

Create four access points that allow access to the central S3 bucket. Assign an access point to each web application bucket.

B.

Create a bucket policy that allows access to the central S3 bucket. Attach the bucket policy to the central S3 bucket.

C.

Create a cross-origin resource sharing (CORS) configuration that allows access to the central S3 bucket. Add the CORS configuration to the central S3 bucket.

D.

Create a Content-MD5 header that provides a message integrity check for the central S3 bucket. insert the Content-MD5 header for each web application request.

Question 73

A developer is creating a role to access Amazon S3 buckets To create the role, the developer uses the AWS CLI create-role command. Which policy should be added to allow the Amazon EC2 service to assume the role?

Options:

A.

Managed policy

B.

Trust policy

C.

Inline policy

D.

Service control policy (SCP)

Question 74

A company is using Amazon API Gateway to manage its public-facing API. The CISO requires that the APIs be used by test account users only. What is the MOST secure way to restrict API access to users of this particular AWS account?

Options:

A.

Client-side SSL certificates for authentication

B.

API Gateway resource policies

C.

Cross-origin resource sharing (CORS)

D.

Usage plans

Question 75

A developer has launched an application that calls an API by way of Amazon API Gateway. It offers information that changes several times a day, but is not updated in real time. The application has become so popular that the API endpoint is overloaded and that traffic to the endpoint must be reduced.

What can the developer do to address the performance issues?

Options:

A.

Enable API caching in Amazon ElastiCache.

B.

Enable an Auto Scaling group on the endpoint service and database.

C.

Create an additional API Gateway and use an Application Load Balancer

Question 76

A developer is building a backend system for the long-term storage of information from an inventory management system. The information needs to be stored so that other teams can build tools to report and analyze the data

How should the developer implement this solution to achieve the FASTEST running time?

Options:

A.

Create an AWS Lambda function that writes to Amazon S3 synchronously Increase the function's concurrency to match the highest expected value of concurrent scans and requests.

B.

Create an AWS Lambda function that writes to Amazon S3 asynchronously Configure a dead-letter queue to collect unsuccessful invocations

C.

Create an AWS Lambda function that writes to Amazon S3 synchronously Set the inventory system to retry failed requests.

D.

Create an AWS Lambda function that writes to an Amazon ElastiCache for Redis cluster asynchronously Configure a dead-letter queue to collect unsuccessful invocations.

Question 77

A company's ecommerce website is experiencing massive traffic spikes, which are causing performance problems in the company database. Users are reporting that accessing the website takes a long time

A developer wants to implement a caching layer using Amazon ElastiCache. The website is required to be responsive no matter which product a user views, and the updates to product information and prices must be strongly consistent

Options:

A.

Which cache writing policy will satisfy these requirements?

B.

Write to the cache directly and sync the backend at a later time.

C.

Write to the backend first and wait for the cache to expire.

D.

Write to the cache and the backend at the same time

E.

Write to the backend first and invalidate the cache

Question 78

A company is adding items to an Amazon DynamoDB table from an AWS Lambda function that is written in Python A developer needs to implement a solution that inserts records in the DynamoDB table and performs automatic retry when the insert fails

Which solution meets these requirements with MINIMUM code changes?

Options:

A.

Configure the Python code to run the AWS CLl through shell to call the Putltem operation

B.

Call the Putltem operation from Python by using the DynamoDB HTTP API

C.

Queue the items in AWS Glue: which will put them into the DynamoDB table

D.

Use the AWS software development kit (SDK) for Python (boto3) to call the Putltem operation

Question 79

A developer Is working with a Docker application that needs to be quickly deployed using AWS without changing the infrastructure or configuring health checks. The application should be configured so that changes and updates can be made automatically without any downtime

Which solution will meet these requirements?

Options:

A.

Use AWS Elastic Beanstalk for application deployment and select an all-at-once update policy.

B.

Use AWS Elastic Beanstalk for application deployment and select a rolling deployment policy.

C.

Deploy the Docker container on an Amazon EC2 instance in an Auto Scaling group and configure a health check on the EC2 instance

D.

Deploy the Docker container using AWS Lambda and enable Amazon CloudWatch monitoring

Question 80

A company is migrating the content delivery network for its dynamic PHP website to AWS An Amazon CloudFront web distribution is part of the new infrastructure The distnbution has the following cache behavior settings

• Allowed HTTP Methods is set to GET, HEAD

• Viewer Protocol Policy is set to HTTP and HTTPS

Developers test the solution and can reach the company's website over HTTP and HTTPS However the developers are unable to tog in lo the previously working administration panel of the website

Which action will resolve this login issue1?

Options:

A.

Set Allowed HTTP Methods to GET. HEAD; OPTIONS

B.

Set Viewer Protocol Policy to HTTPS Only

C.

Set Allowed HTTP Methods to GET, HEAD: OPTIONS, PUT, POST PATCH, DELETE

D.

Set Viewer Protocol Policy to Redirect HTTP to HTTPS

Question 81

An application contains two components one component to handle HI IP requests, and another component to handle background processing tasks Bach component must scale independently The developer wants to deploy this application using AWS Elastic Beanstalk.

How should this application be deployed, based on these requirements?

Options:

A.

Deploy the application in a single Elastic Beanstalk environment

B.

Deploy each component in a separate Elastic Beanstalk environment

C.

Use multiple Elastic Beanstalk environments for the HTTP component but one environment for the background task component

D.

Use multiple Elastic Beanstalk environments for the background task component but one environment tor the HTTP component

Question 82

An AWS Lambda function accesses two Amazon DynamoDB tables. A developer wants to improve the performance of the Lambda function by identifying bottlenecks in the function. How can the developer inspect the timing of the DynamoDB API calls?

Options:

A.

Add DynamoDB as an event source to the Lambda function. View the performance with Amazon CloudWatch metrics

B.

Place an Application Load Balancer (ALB) in front of the two DynamoDB tables. Inspect the ALB logs

C.

Limit Lambda to no more than five concurrent invocations Monitor from the Lambda console

D.

Enable AWS X-Ray tracing for the function. View the traces from the X-Ray service.

Question 83

A company has an AWS Lambda function that runs hourly, reads log files that are stored in Amazon S3, and forwards alerts to Amazon Simple Notification Service (Amazon SNS) topics based on content A developer wants to add a custom metric to the Lambda function to track the number of alerts of each type for each run The developer needs to log this information in Amazon CloudWatch in a metnc that is named Lambda/AlertCounts

How should the developer modify the Lambda function to meet this requirement with the LEAST operational overhead1?

Options:

A.

Add a print statement to standard out for each alert and the number of occurrences

B.

Add a call to the PutMetncData API operation Pass an array for alerts and the number of occurrences in the Values and Counts fields with a namespace of "Lambda/AlertCounts"

C.

Add a call to the PutMetncAlarm API operation Pass an array of alerts in the metrics member with the namespace of "Lambda/AlertCounts"

D.

Add a call to the PutDashboard API operation Pass an array of alerts in the metrics member with the namespace of "Lambda/AlertCounts"

Question 84

A developer is working on a serverless application. The application uses Amazon API Gateway. AWS Lambda functions that are written in Python, and Amazon DynamoDB.

Which combination of steps should the developer take so that the Lambda functions can be debugged in the event of application failures? (Select TWO )

Options:

A.

Configure an AWS CloudTrail trail to deliver log files to an Amazon S3 bucket

B.

Ensure that the Lambda functions write log messages to stdout and stderr

C.

Enable an AWS CloudTrail trail for the Lambda function

D.

Ensure that the execution role for the Lambda function has access to write to Amazon CloudWatch Logs.

E.

Use the Amazon CloudWatch metric for Lambda errors to create a CloudWatch alarm.

Question 85

A video-hosting website has two types of members: those who pay a fee. and those who do not Each video upload places a message in Amazon SQS A fleet of Amazon EC2 instances polls Amazon SQS and processes each video

The developer needs to ensure that the videos uploaded by the paying members are processed first

How can the developer meet this requirement?

Options:

A.

Create two SQS queues: one for paying members, and one for non-paying members Poll the paying member queue first and then poll the non-paying member queue

B.

Use SQS to set priorities on individual items within a single queue: give the paying members' videos the highest priority.

C.

Use SQS to set priorities on individual items within a single queue and use Amazon SNS to encode the videos

D.

Create two Amazon SNS topics: one for paying members and one for non-paying members Use SNS topic subscription priorities to differentiate between the two types of members.

Question 86

A development team uses AWS Elastic Beanstalk to deploy a Java-based web application. The team wants to ensure that the changes to the source code and the configuration are always deployed on new instances The team configures the Elastic Beanstalk environment to use immutable updates. However an error occurs the first time a change is deployed with the new update policy

What is the MOST likely cause of this issue?

Options:

A.

Immutable updates are not supported for Java-based applications

B.

The account has reached its on-demand instance limit

C.

Immutable updates are only supported for m4 large and larger instance types.

D.

The developer must also modify the ebextensions/immutable-updates config file to enable immutable updates

Question 87

A developer is creating a script to automate the deployment process for a serverless application. The developer wants to use an existing AWS Serverless Application Model (AWS SAM) template for the application

What should the developer use for the project? (Select TWO)

Options:

A.

Callaws cloudformation package to create the deployment package Call aws cloudformation deploy to deploy the package afterward.

B.

Call sam package to create the deployment package Call sam deploy to deploy the package afterward

C.

Callaws s3 cp to upload the AWS SAM template to Amazon S3 Call aws lambda update-function-code to create the application.

D.

Create a ZIP package locally and call aws serverlessrepo create-applicarion to create the application.

E.

Create a ZIP package and upload it to Amazon S3 Callaws cloudfonnation create-stack to create the application

Question 88

A company recently experienced some unexpected downtime. After investigating, the company determines that a developer mistakenly terminated several production Amazon EC2 instances.

What should the company do to BEST protect against accidental terminations in the future.

Options:

A.

Enable EC2 termination protection on all production instances unless approval has been given through AWS Resource Access Manager.

B.

Modify the developer group’s permissions policy to deny them access to delete production instances unless approved has been given through AWS Resource Access Manager.

C.

Modify the developer group’s permission policy to require multi-factor authentication (MFA) only production instances are being delete Enable EC2 termination protection on production instances.

D.

Enable EC2 termination protection on production instances. Deny the developer group’s permissions policy access to terminate instance. Create a new role that developer can assume when termination is necessary.

Question 89

A developer must modify an Alexa skill backed by an AWS Lambda function to access an Amazon DynamoDB table in a second account A role in the second account has been created with permissions to access the table

How should the table be accessed?

Options:

A.

Modify the Lambda function execution role's permissions to include the new role

B.

Change the Lambda function execution role to be the new role

C.

Assume the new role in the Lambda function when accessing the table

D.

Store the access key and the secret key for the new role and use them when accessing the table

Question 90

A company hosts a microservices application that uses Amazon API Gateway, AWS Lambda, Amazon Simple Queue Service (Amazon SOS), and Amazon DynamoDB, One of the Lambda functions adds messages to an SOS FIFO queue.

When a developer checks the application logs, the developer finds a few duplicated items in a DynamoDB table. The items were inserted by another polling function that processes messages from the queue.

What is the MOST likely cause of this issue?

Options:

A.

Write operations on the DynamoDB table are being throttled

B.

The SOS queue delivered the message to the function more than once

C.

API Gateway duplicated the message in the SOS queue

D.

The polling function timeout is greater than the queue visibility timeout

Question 91

A developer has code stored in an Amazon S3 bucket The code must be deployed as an AWS Lambda function across multiple accounts in the same Region as the S3 bucket The Lambda function will be deployed using an AWS CloudFormation template that is run for each account

What is the MOST secure approach to allow access to the Lambda code in the S3 bucket?

Options:

A.

Grant the CloudFormation execution role S3 list and get permissions Add a bucket policy to Amazon S3 with the Pnncipal of "AWS": [account numbers].

B.

Grant the CloudFormation execution role S3 get permissions Add a bucket policy to Amazon S3 with the Principal of "".

C.

Use a service-based link to grant the Lambda function S3 list and get permissions by explicitly adding the S3 bucket's account number in the resource

D.

Use a service-based link to grant the Lambda function S3 get permissions and add a Resource of "*" to allow access to the S3 bucket.

Page: 1 / 23
Total 608 questions