Get Updated Amazon DVA-C02 Exam Questions

QUESTION 1

A developer is creating a service that uses an Amazon S3 bucket for image uploads. The service will use an AWS Lambda function to create a thumbnail of each image. Each time an image is uploaded, the service needs to send an email notification and create the thumbnail. The developer needs to configure the image processing and email notifications setup.

Which solution will meet these requirements?

A

Create an Amazon Simple Notification Service (Amazon SNS) topic. Configure S3 event notifications with a destination of the SNS topic. Subscribe the Lambda function to the SNS topic. Create an email notification subscription to the SNS topic.

B

Create an Amazon Simple Notification Service (Amazon SNS) topic. Configure S3 event notifications with a destination of the SNS topic. Subscribe the Lambda function to the SNS topic. Create an Amazon Simple Queue Service (Amazon SQS) queue. Subscribe the SQS queue to the SNS topic. Create an emailnotification subscription to the SQS queue.

C

Create an Amazon Simple Queue Service (Amazon SQS) queue. Configure S3 event notifications with a destination of the SQS queue. Subscribe the Lambda function to the SQS queue. Create an email notification subscription to the SQS queue.

D

Create an Amazon Simple Queue Service (Amazon SQS) queue. Send S3 event notifications to Amazon EventBridge. Create an EventBridge rule that runs the Lambda function when images are uploaded to the S3 bucket. Create an EventBridge rule that sends notifications to the SQS queue. Create an email notification subscription to the SQS queue.

Correct Option: A

QUESTION 2

A developer adds new dependencies to an existing AWS Lambda function. The developer cannot deploy the Lambda function because the unzipped deployment package exceeds the maximum size quota for the Lambda function. The Instruction set architecture of the Lambda function is x86_64.

The developer must implement a solution to deploy the Lambda function with the new dependencies.

Which solution will meet these requirements?

A

Create a snapshot of all the dependencies. Configure the Lambda function to use the snapshot

B

Change the instruction set architecture of the Lambda function to use an arm64 architecture.

C

Associate an Amazon Elastic Block Store (Amazon EBS) volume With the Lambda function. Store all the dependencies on the EBS volume.

D

Create and deploy a Lambda container image with all the dependencies

Correct Option: D

QUESTION 3

A developer is working on a web application that uses Amazon DynamoDB as its data store. The application has two DynamoDB tables: one table that is named artists and one table that is named songs. The artists table has artistName as the partition key. The songs table has songName as the partition key and artistName as the sort key.

The table usage patterns include the retrieval of multiple songs and artists in a single database operation from the webpage. The developer needs a way to retrieve this information with minimal network traffic and optimal application performance.

Which solution will meet these requirements?

A

Perform a BatchGetltem operation that returns items from the two tables. Use the list of songName/artistName keys for the songs table and the list of artistName key for the artists table.

B

Create a local secondary index (LSI) on the songs table that uses artistName as the partition key. Perform a query operation for each artistName on the songs table that filters by the list of songName. Perform a query operation for each artistName on the artists table.

C

Perform a BatchGetltem operation on the songs table that uses the songName/artistName keys. Perform a BatchGetltem operation on the artists table that uses artistName as the key.

D

Perform a Scan operation on each table that filters by the list of songName/artistName for the songs table and the list of artistName in the artists table.

Correct Option: A

QUESTION 4

A developer is building a microservice that uses AWS Lambda to process messages from an Amazon Simple Queue Service (Amazon SQS) standard queue The Lambda function calls external APIs to enrich the SQS message data before loading the data into an Amazon Redshift data warehouse. The SQS queue must handle a maximum of 1,000 messages per

During initial testing, the Lambda function repeatedly inserted duplicate data into the Amazon Redshift table. The duplicate data led to a problem with data analysis. All duplicate messages were submitted to the queue within 1 minute of each other.

How should the developer resolve this issue?

A

Create an SQS FIFO queue. Enable message deduplication on the SQS FIFO queue.

B

Reduce the maximum Lambda concurrency that the SQS queue can invoke.

C

Use Lambda's temporary storage to keep track of processed message Identifiers

D

Configure a message group ID for every sent message Enable message deduplication on the SQS standard queue.

Correct Option: A

QUESTION 5

A company is running Amazon EC2 instances in multiple AWS accounts. A developer needs to implement an application that collects all the lifecycle events of the EC2 instances. The application needs to store the lifecycle events in a single Amazon Simple Queue Service (Amazon SQS) queue in the company's main AWS account for further processing.

Which solution will meet these requirements?

A

Configure Amazon EC2 to deliver the EC2 instance lifecycle events from all accounts to the Amazon EventBridge event bus of the main account. Add an EventBridge rule to the event bus of the main account that matches an EC2 instance lifecycle events. Add the SQS queue as a target of the rule.

B

Use the resource of the SQS queue in the main account to give each account permissions to write to that SOS queue. Add to the Amazon EventBridge event bus or each account an EventBridge rule that matches all EC2 instance lifecycle events. Add the SQS queue in the as a target or the rule.

C

Write an AWS Lambda function that scans through all EC2 instances in the company to detect EC2 instance lifecycle. Configure the Lambda function to write a notification message to the SQS queue in the main account if the function detects an EC2 instance lifecycle change. Add an Amazon EventBridge scheduled rule that invokes the Lambda function every minute.

D

Configure the permissions the main account event bus to receive events from all accounts. Create an Amazon EventBridge rule in each account to send an the EC2 instance lifecycle events to the main account event bus. Add an EventBridge rule to the main account event bus that matches all EC2 instance lifecycle events. Set the SQS queue as a target for the rule.

Correct Option: D

QUESTION 6

A developer is working on an AWS Lambda function. The developer notices that the Lambda function's logs do not appear in Amazon CloudWatch Logs

How should the developer resolve this issue?

A

Bundle the latest runtime version library With the Lambda function code. Redeploy the Lambda function

B

Configure the security group settings of the Lambda function to grant access to CloudWatch.

C

Increase the memory of the Lambda function

D

Update the Lambda function execution role with appropriate permission to write logs to CloudWatch Logs.

Correct Option: D

QUESTION 7

An online food company provides an Amazon API Gateway HTTP API to receive orders for partners. The API is integrated with an AWS Lambda function. The Lambda function stores the orders in an Amazon DynamoDB table.

The company expects to onboard additional partners. Some of the partners require additional Lambda functions to receive orders. The company has created an Amazon S3 bucket. The company needs to

store all orders and updates in the S3 bucket for future analysis.

How can the developer ensure that all orders and updates are stored to Amazon S3 with the LEAST development effort?

A

Create a new Lambda function and a new API Gateway API endpoint. Configure the new Lambda function to write to the S3 bucket. Modify the original Lambda function to post updates to the newAPI endpoint.

B

Use Amazon Kinesis Data Streams to create a new data stream. Modify the Lambda function to publish orders to the data stream. Configure the data stream to write to the S3 bucket.

C

Enable DynamoDB Streams on the DynamoDB table. Create a new Lambda function. Associate the stream's Amazon Resource Name (ARN) with the Lambda function. Configure the Lambdafunction to write to the S3 bucket as records appear in the table's stream.

D

Modify the Lambda function to publish to a new Amazon Simple Notification Service (Amazon SNS) topic as the Lambda function receives orders. Subscribe a new Lambda function to the topic. Configure the new Lambda function to write to the S3 bucket as updates come through the topic.

Correct Option: C

QUESTION 8

A developer has written a distributed application that uses microservices. The microservices are running on Amazon EC2 instances, Because of message volume, the developer is unable to match log output from each microservice to a specific transaction. The developer needs to analyze the message flow to debug the application.

Which combination of steps should the developer take to meet this requirement? (Select TWO.)

A

Download the AWS X-Ray daemon. Install the daemon on an EC2 instance. Ensure that the EC2 instance allows UDP traffic on port 2000,

B

Configure an interface VPC endpoint to allow traffic to reach the global AWS X-Ray daemon on TCP port 2000.

C

Enable AWS X-Ray, Configure Amazon CloudWatch to push logs to X-Ray

D

Add the AWS X-Ray software development kit (SDK) to the microservices. Use *Ray to trace requests that each microservice makes.

E

Set up Amazon CloudWatch metric streams to collect streaming data from the microservices.

Correct Option: A,D

QUESTION 9

A company is developing an ecommerce application that uses Amazon API Gateway APIs. The application uses AWS Lambda as a backend. The company needs to test the code in a dedicated, monitored test environment before the company releases the code to the production environment.

Which solution will meet these requirements?

A

Use a single stage in API Gateway. Create a Lambda function for each environment. Configure API clients to send a query parameter that indicates the environment and the specific Lambda.function.

B

Use multiple stages in API Gateway. Create a single Lambda function for all environments. Add different code blocks for different environments in the Lambda function based on Lambda.environment variables.

C

Use multiple stages in API Gateway. Create a Lambda function for each environment. Configure API Gateway stage variables to route traffic to the Lambda function in different environments.

D

Use a single stage in API Gateway. Configure API clients to send a query parameter that indicates the environment. Add different code blocks for different environments in the Lambda function tomatch the value of the query parameter.

Correct Option: C

QUESTION 10

A company has a web application that contains an Amazon API Gateway REST API, A developer has created an AWS CloudFormation template for the initial deployment of the application. The developer has deployed the application successfully as part of an AWS CodePipeIine continuous integration and continuous delivery (CIICD) process. All resources and methods are available through the deployed stage endpoint.

The CloudFormation template contains the following resource types:

• AWS::ApiGateway::RestAp1

• AWS::ApiGateway::Resource

• AWS::ApiGateway::Method

• AWS::ApiGateway::Stage

• AWS::ApiGateway::Deployment

The developer adds a new resource to the REST API with additional methods and redeploys the template- CloudFormation reports that the deployment is successful and that the stack is in the UPDATE COMPLETE state. However, calls to all new methods are returning 404 (Not Found) errors.

What should the developer do to make the new methods available?

A

Specify the disable-rollback option during the update-stack operation.

B

Unset the CloudFormation stack failure options.

C

Add an AWS CodeBuild stage to CodePipeline to run the aws apigateway create-deployment AWS CLI command.

D

Add an action to CodePipeline to run the aws cloudfront create-invalidation AWS CLI command.

Correct Option: C

QUESTION 11

A developer is writing unit tests a new application that will be deployed on AWS. The developer wants to validate all pull requests with unit tests and merge the code with the main branch only when all tests pass.

The developer stores the code in AWS CodeCommit and sets up AWS CodeBuild to run the unit tests. The developer creates an AWS Lambda function to start the CodeBuild task. The developer needs to identity the CodeCommit events an Amazon EventBridge event that can invoke the Lambda function when a pull request is created or updated.

Which CodeCommit event will meet these requirements?

A

B

C

D

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 12

A company has implemented a pipeline in AWS CodePipeline. The company is using a single AWS account and does not use AWS Organizations. The company needs to test its AWS CloudFormation templates in its primary AWS Region and a disaster recovery Region.

Which solution will meet these requirements with the MOST operational efficiency?

A

In the CodePipeIine pipeline, implement an AWS CodeDepIoy action for each Region to deploy and test the CloudFormation templates. Update CodePipeline and AWS CodeBuild with appropriate permissions.

B

Configure CodePipeline to deploy and test the CloudFormation templates. Use CloudFormation StackSets to start deployment across both Regions.

C

Configure CodePipeline to invoke AWS CodeBuild to deploy and test the CloudFormation templates in each Region. Update CodeBuild and CloudFormation with appropriate permissions.

D

Use the Snyk action in CodePipeline to deploy and test the CloudFormation templates in each Region.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 13

A developer is writing an AWS Lambda function. The developer wants to key events that occur while the function runs. The wants to include a unique identifier to associate the events with a specific function. The developer adds the following code to the function:

Which solution will meet this requirement?

A

Obtain the request identifier from the AWS request ID field in the context object. Configure the application to write logs to standard output.

B

Obtain the request identifier from the AWS request ID field in the event object. Configure the application to write logs to a file.

C

Obtain the request identifier from the AWS request ID field in the event object. Configure application to logs to standard output.

D

Obtain the request identifier from the AWS request ID field in the context object. Configure the application to write to a file.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 14

A developer must cache dependent artifacts from Maven Central, a public package repository. as part of an application's build pipeline. The build pipeline has an AWS CodeArtifact repository where artifacts of the build are published. The developer needs a solution that requires minimum changes to the build pipeline.

Which solution meets these requirements?

A

Modify the existing CodeArtifact repository to associate an upstream repository with the public package repository.

B

Create a new CodeArtifact repository that has an external connection to the public package repository,

C

Create a new CodeArtifact domain that contains a new repository that has an external connection to the public package repository.

D

Modify the CodeArtifact repository resource policy to allow artifacts to be fetched from the public package repository

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 15

A developer is building a new application on AWS. The application uses an AWS Lambda function that retrieves information from an Amazon DynamoDB table. The developer hard coded the DynamoDB table name into the Lambda function code. The table name might change over time. The developer does not want to modify the code if the table name changes.

Which solution will meet these requirements MOST efficiently?

A

Create a Lambda environment variable to store the table name. Use the standard method for the programming language to retrieve the variable.

B

Store the table name in a file. Store the file in the /tmp folder. Use the SDK for the programming language to retrieve the table name.

C

Create a file to store the table name. Zip the file and upload the file to the Lambda layer. Use the SDK for the programming language to retrieve the table name.

D

Create a global variable that is outside the handler in the Lambda function to store the table name.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 16

A company has an application that processes audio files for different departments. When aud10 files are saved to an Amazon S3 bucket, an AWS Lambda function receives an event notification and processes the audio input.

A developer needs to update the solution so that the application can process the audio files for each department independently. The application must publish the audio file location for each department to each department's existing Amazon Simple Queue Service (Amazon SQS) queue,

Which solution will meet these requirements with no changes to the Lambda function code?

A

Configure the S3 bucket to send the event notifications to an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe each department's SQS queue to the SNS topic. Configure subscription filter policies.

B

Update the Lambda function to write the file location to a single shared SOS queue. Configure the shared SQS queue to send the file reference to each department's SQS queue-

C

Update the Lambda function to send the file location to each department's SQS queue.

D

Configure the S3 bucket to send the event notifications to each department's SOS queue.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 17

A company wants to share information with a third party. The third party has an HTTP API endpoint that the company can use to share the information. The company has the required API key to access the HTTP API.

The company needs a way to manage the API key by using code. The integration of the API key with the application code cannot affect application performance.

Which solution will meet these requirements MOST securely?

A

Store the API credentials in AWS Secrets Manager. Retrieve the API credentials at runtime by using the AWS SDK. Use the credentials to make the API call.

B

Store the API credentials in a local code variable. Push the code to a secure Git repository. Use the local code variable at runtime to make the API call.

C

Store the API credentials as an object in a private Amazon S3 bucket. Restrict access to the S3 object by using IAM policies. Retrieve the API credentials at runtime by using the AWS SDK. Use the credentials to make the API call.

D

Store the API credentials in an Amazon DynamoDB table. Restrict access to the table by using resource-based policies. Retrieve the API credentials at runtime by using the AWS SDK. Use the credentials to make the API call.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 18

A large company has its application components distributed across multiple AWS accounts. The company needs to collect and visualize trace data across these accounts.

What should be used to meet these requirements?

A

AWS x-Ray

B

Amazon CloudWatch

C

Amazon VPC flow logs

D

Amazon OpenSearch Service

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 19

A company is building a serverless application that uses AWS Lambda functions. The company needs to create a set of test events to test Lambda functions in a development environment. The test events will be created once and then will be used by all the developers in an IAM developer group. The test events must be editable by any of the IAM users in the IAM developer group.

Which solution will meet these requirements?

A

Create and store the test events in Amazon S3 as JSON objects. Allow S3 bucket access to all IAM users.

B

Create the test events. Configure the event sharing settings to make the test events shareable.

C

Create and store the test events in Amazon DynamoDB. Allow access to DynamoDB by using IAM roles.

D

Create the test events. Configure the event sharing settings to make the test events private.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 20

A company's application includes an Amazon DynamoDB table for product orders. The table has a primary partition key of orderld and has no sort key. The company is adding a new feature that requires the application to query the table by using the customerld attribute.

Which solution will provide this query functionality?

A

Change the existing primary key by setting customerld as the sort key.

B

Create a new global secondary index (GSI) on the table with a partition key of customerld-

C

Create a new local secondary index (LSI) on the table with a partition key of customerld.

D

Create a new local secondary index (LSI) on the table with a partition key of orderld and a sort key of customerld.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 21

A company stores its data in data tables in a series of Amazon S3 buckets. The company received an alert that customer credit card information might have been exposed in a data table on one of the company's public applications. A developer needs to identify all potential exposures within the application environment.

Which solution will meet these requirements?

A

Use Amazon Athena to run a job on the S3 buckets that contain the affected data. Filter the findings by using the SensitiveData:S30bject/Personal finding type.

B

Use Amazon Macie to run a job on the S3 buckets that contain the affected data. Filter the findings by using the SensitiveData:S30bjecVFinancial finding type.

C

Use Amazon Macie to run a job on the S3 buckets that contain the affected data. Filter the findings by using the SensitiveData:S30bjecVPersonal finding type.

D

Use Amazon Athena to run a job on the S3 buckets that contain the affected data. Filter the findings by using the SensitiveData:S30bject/Financial finding type.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 22

A developer is troubleshooting a three-tier application, which is deployed on Amazon EC2 instances. There is a connectivity problem between the application servers and the database servers.

Which AWS services or tools should be used to identify the faulty component? (Select TWO.)

A

AWS CloudTrail

B

AWS Trusted Advisor

C

Amazon VPC Flow Logs

D

Network access control lists

E

AWS Config rules

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 23

A developer is using an AWS Lambda function to generate avatars for profile pictures that are uploaded to an Amazon S3 bucket. The Lambda function is automatically invoked for profile pictures that are saved under the /original/ S3 prefix. The developer notices that some pictures cause the Lambda function to time out. The developer wants to implement a fallback mechanism by using another function that resizes the profile picture.

Which solution will meet these requirements with the LEAST development effort?

A

Set the image resize Lambda function as a destination of the avatar generator Lambda function for the events that fail processing.

B

Create an Amazon Simple Queue Service (Amazon SQS) queue. Set the SOS queue as a destination with an on failure condition for the avatar generator Lambda function. Configure the image resize Lambda function to poll from the SOS queue.

C

Create an AWS Step Functions state machine that the avatar generator Lambda function and uses the image resize Lambda function as a fallback. Create an Amazon EventBridge rule that matches events from the S3 bucket to invoke the state machine.

D

Create an Amazon Simple Notification Service (Amazon SNS) topic. Set the SNS topic as a destination with an on failure for the avatar generator Lambda function. Subscribe the image resize Lambda function to the SNS topic.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 24

A developer is building an image-processing application that includes an AWS Lambda function. The Lambda function moves images from one AWS service to another AWS service for image processing. For images that are larger than 2 MB, the Lambda function returns the following error "Task timed out after 3.01 seconds."

The developer needs to resolve the error without modifying the Lambda function code.

Which solution will meet these requirements?

A

Increase the Lambda function's timeout value.

B

Configure the Lambda function to not move images that are larger than 2 MB-

C

Request a concurrency quota increase for the Lambda function.

D

Configure provisioned concurrency for the Lambda function.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 25

A company hosts a batch processing application on AWS Elastic Beanstalk with instances that run the most recent version of Amazon Linux. The application and processes large datasets.

In recent weeks, the application's performance has decreased significantly during a peak period for traffic. A developer suspects that the application issues are related to the memory usage. The developer checks the Elastic Beanstalk console and notices that memory usage is not being tracked.

How should the developer gather more information about the application performance issues?

A

Configure the Amazon CloudWatch agent to push logs to Amazon CloudWatch Logs by using port 443.

B

Configure the Elastic Beanstalk .ebextensions directory to track the memory usage of the instances.

C

Configure the Amazon CloudWatch agent to track the memory usage of the instances.

D

Configure an Amazon CloudWatch dashboard to track the memory usage of the instances.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 26

A development team has an Amazon API Gateway REST API that is backed by an AWS Lambda function.

Users have reported performance issues for the Lambda function. The development team identified the source of the issues as a cold start of the Lambda function. The development team needs to reduce the time needed for the Lambda function to initialize.

Which solution will meet this requirement?

A

Change the Lambda concurrency to reserved concurrency.

B

Increase the timeout of the Lambda function.

C

Increase the memory allocation of the Lambda function.

D

Configure provisioned concurrency for the Lambda function.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 27

A developer needs to create an application that supports Security Assertion Markup Language (SAML) and authentication with social media providers. It must also allow access to AWS services, such as Amazon DynamoDB.

Which AWS service or feature will meet these requirements with the LEAST amount of additional coding?

A

AWS AppSync

B

Amazon Cognito identity pools

C

Amazon Cognito user pools

D

Amazon Lambda@Edge

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 28

An application interacts with Amazon Aurora to store and track customer information. The primary database is set up with multiple read replicas for improving the performance of the read queries. However. one of the Aurora replicas is receiving most or all of the traffic, while the other Aurora replica remains idle.

How can this issue be resolved?

A

Disable application-level DNS caching-

B

Enable application-level DNS caching,

C

Enable application pooling.

D

Disable application pooling.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 29

A Development team decides to adopt a continuous integration/continuous delivery (CI/CD) process using AWS CodePipeline and AWS CodeCommit for a new application. However, management wants a person to review and approve the code before it is deployed to production.

How can the Development team add a manual approver to the CI/CD pipeline?

A

Use AWS SES to send an email to approvers when their action is required. Develop a simple application that allows approvers to accept or reject a build. Invoke an AWS Lambda function to advance the pipeline when a build is accepted.

B

If approved, add an approved tag when pushing changes to the CodeCommit repository. CodePipeline will proceed to build and deploy approved commits without interruption.

C

Add an approval step to CodeCommit. Commits will not be saved until approved.

D

Add an approval action to the pipeline. Configure the approval action to publish to an Amazon SNS topic when approval is required. The pipeline execution will stop and wait for an approval.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 30

A company is building an application to accept data from customers. The data must be encrypted at rest and in transit.

The application uses an Amazon API Gateway API that resolves to AWS Lambda functions. The Lambda functions store the data in an Amazon Aurora MySQL DB cluster. The application worked property during testing.

A developer configured an Amazon CloudFront distribution with field-level encryption that uses an AWS Key Management Service (AWS KMS) key. After the configuration of the distribution, the application behaved unexpectedly. All the data in the database changed from plaintext to ciphertext

The developer must ensure that the data is not stored in the database as the ciphertext from the CloudFront field-level encryption.

Which solution will meet this requirement?

A

Change the CloudFront Viewer protocol policy from "HTTP and HTTPS" to "HTTPS only."

B

Add a Lambda function that uses the KMS key to decrypt the data fields before saving the data to the database-

C

Enable encryption on the DB cluster by using the same KMS key that is used in CloudFront.

D

Request and deploy a new SSL certificate to use with the CloudFront distribution.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 31

A company has an application that writes files to an Amazon S3 bucket. Whenever there is a new file, an S3 notification event invokes an AWS Lambda function to process the file. The Lambda function code works as expected. However, when a developer checks the Lambda function logs, the developer finds that multiple invocations occur for every file.

What is causing the duplicate entries?

A

The S3 bucket name is incorrectly specified in the application and is targeting another S3 bucket.

B

The Lambda function did not run correctly, and Lambda retried the invocation with a delay.

C

Amazon S3 is delivering the same event multiple times.

D

The application stopped intermittently and then resumed, splitting the logs into multiple smaller files.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 32

Users receive occasional HTTP 500 internal server errors from an application that includes an AWS Lambda function. A developer has identified an unhandled exception that produces the errors-

The log statements in the Lambda function's code occur immediately before where the exception occurs. All exceptions are logged. The Lambda function writes its log messages to a log group in Amazon CloudWatch Logs,

The developer must implement a solution to track the frequency of the log messages from immediately before the exception and during the exception. The solution must track the frequency of log messages in near real time.

Which solution will meet these requirements with the LEAST development effort?

A

Create an AWS X-Ray trace to show the frequency of calls to the location in the code before the exception occurs and during the exception.

B

Create metric filters to match the log messages from the code's log statements before the exception occurs. Use a filter pattern that is recognizable and unique for each scenario. Access the metric in CloudWatch metrics.

C

Configure the Lambda code before where the exception occurs and in an exception handler to write the Lambda event request to an Amazon S3 bucket. Process the request in the S3 bucket later-

D

Configure the Lambda code before where the exception occurs to send metric data to CloudWatch. Add a top-level exception handler to the Lambda code.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 33

A developer is writing an AWS Lambda function. The developer wants to log key events that occur during the Lambda function and include a unique identifier to associate the events with a specific function invocation.

Which of the following will help the developer accomplish this objective?

A

Obtain the request identifier from the Lambda context object. Architect the application to write logs to the console.

B

Obtain the request identifier from the Lambda event object. Architect the application to write logs to a file.

C

Obtain the request identifier from the Lambda event object. Architect the application to write logs to the console.

D

Obtain the request identifier from the Lambda context object. Architect the application to write logs to a file.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 34

A developer is writing a web application that must share secure documents with end users. The documents are stored in a private Amazon S3 bucket. The application must allow only authenticated users to download specific documents when requested, and only for a duration of 15 minutes-

How can the developer meet these requirements?

A

Copy the documents to a separate S3 bucket that has a lifecycle policy for deletion after 15 minutes.

B

Create a preassigned S3 URL using the AWS SDK with an expiration time of 15 minutes,

C

Use server-side encryption with AWS KMS managed keys (SSE-KMS) and download the documents using HTTPS.

D

Modify the S3 bucket policy to only allow specific users to download the documents. Revert the change after 15 minutes.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 35

A development team has been using a builder server that is hosted on an Amazon EC2 instance to perform builds and deployments for the last 3 months. The EC2 instance's instance profile uses an IAM role that contains the Administrator Access managed policy. The development team must replace that policy with a policy that provides only the required permissions.

What is the FASTEST way to create a custom 1AM policy for the EC2 instance to meet this requirement?

A

Create a new IAM policy based on services that the build server deployed or updated in the last 3 months.

B

Create a new IAM policy that includes all actions that AWS CloudTrail recorded for the IAM role in the last 3 months.

C

Create a new permissions boundary policy that denies all access. Associate the permissions boundaries with the IAM role.

D

Create a new IAM policy by using Amazon Athena to query an Amazon S3 bucket that contains AWS CloudTrail events that the IAM role performed in the last 3 months.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 36

A company runs an application on Amazon EC2 instances in an Auto Scaling group. The application experiences variable loads throughout each day.

The company needs to collect detailed metrics from the EC2 instances to right-size the instances. The company also wants to monitor custom application metrics to ensure the application is performing efficiently

Which solution will meet these requirements?

A

Install the AWS X-Ray agent on the instances. Configure the agent to collect the EC2 instance metrics and the custom application metrics,

B

Install the Amazon CloudWatch agent on the instances- Configure the agent to collect the EC2 instance metrics and the custom application metrics.

C

Install the AWS SDK in the application's code. Update the application to use the AWS SDK to collect and publish the EC2 instance metrics and the custom application metrics,

D

Configure AWS CloudTrail to capture and analyze the EC2 instance metrics and the custom application metrics.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 37

A developer has created a Java application that makes HTTP requests directly to AWS services. Application logging shows 5xx HTTP response codes that occur at irregular intervals. The errors are affecting users.

How should the developer update the application to improve the application's resiliency?

A

Revise the request content in the application code.

B

Use the AWS SDK for Java to interact with AWS APIs.

C

Scale out the application so that more instances of the application are running.

D

Add additional logging to the application code.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 38

A developer is implementing a serverless application by using AWS CloudFormation to provision Amazon S3 web hosting. Amazon API Gateway, and AWS Lambda functions, The Lambda function source code is zipped and uploaded to an S3 bucket. The S3 object key of the zipped source code is specified in the Lambda resource in the CloudFormation template.

The developer notices that there are no changes in the Lambda function every time the CloudFormation stack is updated.

How can the developer resolve this issue?

A

Create a new Lambda function alias before updating the CloudFormation stack.

B

Change the S3 object key or the S3 version in the CloudFormation template before updating the CloudFormation stack.

C

Upload the zipped source code to another S3 bucket before updating the CloudFormation stack.

D

Associate a code signing configuration with the Lambda function before updating the CloudFormation stack.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 39

A company has an application that runs on AWS Elastic Beanstalk in a load-balanced environment. The company needs to update the instance types in the environment to a more recent generation of instance types. The company must minimize downtime during the deployment of this configuration change.

Which deployment options will meet these requirements? (Choose two.)

A

Disabled

B

Rolling based on Health.

C

Immutable

D

All at once

E

Canary

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 40

A developer is designing an event-driven architecture. An AWS Lambda function that processes data needs to push processed data to a subset of four consumer Lambda functions, The data must be routed based on the value of one field in the data.

Which solution will meet these requirements with the LEAST operational overhead?

A

Create an Amazon Simple Queue Service (Amazon SQS) queue and event source mapping for each consumer Lambda function. Add message routing logic to the data-processing Lambda function.

B

Create an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe the four consumer Lambda functions to the topic. Add message filtering logic to each consumer Lambda function. Subscribe the data-processing Lambda function to the SNS topic-

C

Create a separate Amazon Simple Notification Service (Amazon SNS) topic and subscription for each consumer Lambda function. Add message routing logic to the data-processing Lambda function to publish to the appropriate topic.

D

Create a single Amazon Simple Notification Service (Amazon SNS) topic. Subscribe the four consumer Lambda functions to the topic. Add SNS subscription filter policies to each subscription- Configure the data-processing Lambda function to publish to the topic.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 41

A developer deploys an AWS Lambda function that runs each time a new Amazon S3 bucket is created. The Lambda function is supposed to attach an S3 Lifecycle policy to each new S3 bucket. The developer discovers that newly created S3 buckets have no S3 Lifecycle policy attached.

Which AWS service should the developer use to find a possible error in the Lambda function?

A

AWS CloudTrail

B

Amazon S3

C

AWS CloudFormation

D

Amazon CloudWatch

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 42

A company is developing a serverless application by using AWS Lambda functions. One of the Lambda functions needs to access an Amazon RDS DB instance. The DB instance is in a private subnet inside a VPC.

The company creates a role that includes the necessary permissions to access the DB instance. The company then assigns the role to the Lambda function. A developer must take additional action to give the Lambda function access to the DB instance.

What should the developer do to meet these requirements?

A

Assign a public IP address to the DB instance. Modify the security group of the DB instance to allow inbound traffic from the IP address of the Lambda function.

B

Set up an AWS Direct Connect connection between the Lambda function and the DB instance.

C

Configure an Amazon CloudFront distribution to create a secure connection between the Lambda function and the DB instance.

D

Configure the Lambda function to connect to the private subnets in the VPC. Add security group rules to allow traffic to the DB instance from the Lambda function.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 43

A developer is creating a serverless application that uses an AWS Lambda function. The developer will use AWS CloudFormation to deploy the application The application will write logs to Amazon CloudWatch Logs. The developer has created a log group in a CloudFormation template for the application to use. The developer needs to modify the CloudFormation template to make the name of the log group available to the application at runtime.

Which solution will meet this requirement?

A

Use the AWS::Include transform in CloudFormation to provide the log group's name to the application.

B

Pass the log group's name to the application in the user data section of the CloudFormation template.

C

Use the CloudFormation template's Mappings section to specify the log group's name for the application.

D

Pass the log group's Amazon Resource Name (ARN) as an environment variable to the Lambda function.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 44

A developer is deploying an application on an Amazon Elastic Container Service (Amazon ECS) cluster that uses AWS Faregate. The developer is using a Docker container with an Ubuntu image.

The developer needs to implement a solution to store application data that is available from multiple ECS tasks. The application data must remain accessible after the container is terminated.

Which solution will meet these requirements?

A

Attach an Amazon FSx for Windows File Server volume to the container definition.

B

Specify the DockerVolumeConfiguration parameter in the ECS task definition to attach a Docker volume.

C

Create an Amazon Elastic File System (Amazon EFS) file system. Specify the mountpoints attribute and the efsVolumeConfiguration attribute in the ECS task definition.

D

Create an Amazon Elastic Block Store (Amazon EBS) volume- Specify the mount point configuration in the ECS task definition.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 45

A developer is building a serverless application by using AWS Serverless Application Model (AWS SAM) on multiple AWS Lambda functions. When the application is deployed, the developer wants to shift 10% of the traffic to the new deployment of the application for the first 10 minutes after deployment. If there are no issues, all traffic must switch over to the new version.

Which change to the AWS SAM template will meet these requirements?

A

Set the Deployment Preference Type to CanarylOPercent10Minutes. Set the AutoPublishAlias property to the Lambda alias.

B

Set the Deployment Preference Type to LinearlOPercentEvery1 0Minutes. Set AutoPublishAlias property to the Lambda alias.

C

Set the Deployment Preference Type to CanarylOPercent10Minutes. Set the PreTraffic and PostTraffic properties to the Lambda alias.

D

Set the Deployment Preference Type to LinearlOPercentEvery10Minutes. Set PreTraffc and PostTraffic properties to the Lambda alias.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 46

A developer manages encryption keys in AWS Key Management Service (AWS KMS). The developer must ensure that all encryption keys can be deleted immediately when the keys are no longer required. The developer wants a solution that is highly available and does not require manual management for compute infrastructure.

Which solution will meet these requirements?

A

Use AWS KMS managed keys. When the keys are no longer required, schedule the keys for immediate deletion.

B

use customer managed keys with imported key material. When the keys are no longer required, delete the imported key material.

C

Use customer managed keys. When the keys are no longer required. delete the key material.

D

Use customer managed keys and an AWS CloudHSM key store. When the keys are no longer required, schedule the keys for immediate deletion,

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 47

A company recently deployed an AWS Lambda function. A developer notices an increase in the function throttle metrics in Amazon CloudWatch.

What are the MOST operationally efficient solutions to reduce the function throttling? (Select TWO.)

A

Migrate the function to Amazon Elastic Kubernetes Service (Amazon EKS).

B

Increase the maximum age of events in Lambda.

C

Increase the function's reserved concurrency.

D

Add the lambda:GetFunctionConcurrency action to the execution role.

E

Request a service quota change for increased concurrency.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 48

A developer is building an application that includes an AWS Lambda function that is written in .NET Core. The Lambda function’s code needs to interact with Amazon DynamoDB tables and Amazon S3 buckets. The developer must minimize the Lambda function’s deployment time and invocation duration.

Which solution will meet these requirements?

A

Increase the Lambda function’s memory.

B

Include the entire AWS SDK for .NET in the Lambda function’s deployment package.

C

Include only the AWS SDK for .NET modules for DynamoDB and Amazon S3 in the Lambda function’s deployment package.

D

Configure the Lambda function to download the AWS SDK for .NET from an S3 bucket at runtime.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 49

A developer needs to troubleshoot an AWS Lambda function in a development environment. The Lambda function is configured in VPC mode and needs to connect to an existing Amazon RDS for SQL Server DB instance. The DB instance is deployed in a private subnet and accepts connections by using port 1433.

When the developer tests the function. the function reports an error when it tries to connect to the database.

Which combination of steps should the developer take to diagnose this issue? (Select TWO.)

A

Check that the function's security group has outbound access on port 1433 to the DB instance's security group. Check that the DB instance's security group has inbound access on port 1433 from the function's security group.

B

Check that the function's security group has inbound access on port 1433 from the DB instance's security group. Check that the DB instance's security group has outbound access on port 1433 to the function's security group.

C

Check that the VPC is set up for a NAT gateway Check that the DB instance has the public access option turned on.

D

Check that the function's execution role permissions include rds:DescribeDBlnstances. rds:ModifyDBlnstance. and rds:DescribeDBSecurityGroups for the DB instance.

E

Check that the function's execution role permissions include ec2:CreateNetworklnterface, ec2:DescribeNetworklnterfaces, and ec2:DeleteNetworklnterface.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 50

A developer IS creating a stock trading application. The developer needs a solution to send text messages to application users to confirmation when a trade has been completed.

The solution must deliver messages in the order a user makes stock trades. The solution must not send duplicate messages.

Which solution will meet these requirements?

A

Configure the application to publish messages to an Amazon Data Firehose delivery stream. Configure the delivery stream to have a destination of each user's mobile phone number that is passed in the trade confirmation message.

B

Create an Amazon Simple Queue Service (Amazon SOS) FIFO queue. Use the SendMessageln API call to send the trade confirmation messages to the queue. Use the SendMessageOut API to send messages to users by using the information provided in the trade confirmation message.

C

Configure a pipe in Amazon EventBridge Pipes. Connect the application to the pipe as a source, Configure the pipe to use each user's mobile phone number as a target. Configure the pipe to send incoming events to the users.

D

Create an Amazon Simple Notification Service (SNS) FIFO topic. Configure the application to use the AWS SDK to publish notifications to the SNS topic to send SMS messages to the users.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 51

A developer is preparing to begin development of a new version of an application. The previous version of the application is deployed in a production environment. The developer needs to deploy fixes and updates to the current version during the development of the new version of the application. The code for the new version of the application is stored in AWS CodeCommit.

Which solution will meet these requirements?

A

From the main branch, create a feature branch for production bug fixes. Create a second feature branch from the main branch for development of the new version.

B

Create a Git tag of the code that is currently deployed in production. Create a Git tag for the development of the new version. Push the two tags to the CodeCommit repository.

C

From the main branch. create a branch of the code that is currently deployed in production. Apply an IAM policy that ensures no other users can push or merge to the branch.

D

Create a new CodeCommit repository for development of the new version of the application. Create a Git tag for the development of the new version.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 52

A developer created several AWS Lambda functions that write data to a single Amazon S3 bucket. The developer configured all the Lambda functions to send logs and metrics to Amazon CloudWatch.

The developer receives reports that one of the Lambda functions writes data to the bucket very slowly. The developer needs to measure the latency between the problematic Lambda function and the S3 bucket.

Which solution will meet this requirement?

A

Enable AWS X-Ray on the Lambda function. In the generated trace map. select the line between Lambda and Amazon S3.

B

Query the Lambda function's log file in Amazon CloudWatch Logs Insights. Return the average of the auto-discovered @duration field-

C

Enable CloudWatch Lambda Insights on the function, View the latency graph that CloudWatch Lambda Insights provides.

D

Enable AWS X-Ray on the Lambda function. Select Amazon $3 in the latency graph to view the latency histogram,

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 53

A company requires that all applications running on Amazon EC2 use IAM roles to gain access to AWS services. A developer is modifying an application that currently relies on IAM user access keys stored in environment variables to access Amazon DynamoDB tables using boto, the AWS SDK for Python.

The developer associated a role with the same permissions as the IAM user to the EC2 instance, then deleted the IAM user. When the application was restarted. the AWS AccessDeniedException messages started appearing in the application logs. The developer was able to use their personal account on the server to run DynamoDB API commands using the AWS CLI.

What is the MOST likely cause of the exception?

A

IAM policies might take a few minutes to propagate to resources.

B

Disabled environment variable credentials are still being used by the application.

C

The AWS SDK does not support credentials obtained using an instance role.

D

The instance's security group does not allow access to http:/f169.254.169.254.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 54

A developer is building a three-tier web application that should be able to handle a minimum of 5000 requests per minute. Requirements state that the web tier should be completely stateless while the

application maintains session state for the users.

How can session data be externalized, keeping latency at the LOWEST possible value?

A

Create an Amazon RDS instance, then implement session handling at the application level to leverage a database inside the RDS database instance for session data storage.

B

Imp4ement a shared file system solution across the underlying Amazon EC2 instances, then implement session handling at the application level to leverage the shared file system for session datastorage.

C

Create an Amazon ElastiCache (Memcached) cluster. then implement session handling at the application level to leverage the cluster for session data storage.

D

Create an Amazon DynamoDB table, then implement session handling at the application level to leverage the table for session data storage.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 55

An developer is building a serverless application by using the AWS Serverless Application Model (AWS SAM). The developer is currently testing the application in a development environment. When the application is nearly finished, the developer will need to set up additional testing and staging environments for a quality assurance team.

The developer wants to use a feature of the AWS SAM to set up deployments to multiple environments.

Which solution will meet these requirements with the LEAST development effort?

A

Add a configuration file in TOML format to group configuration entries to every environment. Add a table for each testing and staging environment. Deploy updates to the environments by using the sam deploy command and the -config-env flag that corresponds to the each environment.

B

Create additional AWS SAM templates for each testing and staging environment. Write a custom shell script that uses the sam deploy command and the - template-file flag to deploy updates to the environments.

C

Create one AWS SAM configuration file that has default parameters. Perform updates to the testing and staging environments by using the -parameter- overrides flag in the AWS SAM CLI and the parameters that the updates will override.

D

Use the existing AWS SAM template. Add additional parameters to configure specific attributes for the serverless function and database table resources that are in each environment. Deploy updates to the testing and staging environments by using the sam deploy command.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 56

A gaming company has deployed a web portal on AWS Elastic Beanstalk. The company sometimes needs to deploy new versions three or four times in a day. The company needs to deploy new features for

all users as quickly as possible. The solution must minimize performance impact and must maximize availability.

What solution will meet these requirements?

A

Use a rolling deployment policy to deploy to Amazon EC2 instances-

B

Use an immutable deployment policy to deploy to Amazon EC2 instances.

C

Use an all-at-once deployment policy to deploy to Amazon EC2 instances.

D

Use a canary deployment strategy to deploy changes to Amazon EC2 instances.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 57

A developer is planning to migrate on-premises company data to Amazon S3. The data must be encrypted, and the encryption keys must support automatic annual rotation.

The company must use AWS Key Management Service (AWS KMS) to encrypt the data.

Which type of keys should the developer use to meet these requirements?

A

Amazon S3 managed keys

B

Symmetric customer managed keys with key material that is generated by AWS.

C

Asymmetric customer managed keys with key material that is generated by AWS.

D

Symmetric customer managed keys with imported key material

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 58

A developer is working on a new authorization mechanism for an application. The developer must create an Amazon API Gateway API and must test JSON Web

Token (JWT) authorization on the API.

The developer must use the built-in authorizer and must avoid managing the code with custom logic. The developer needs to define an API route that is available at auth to test the authorizer configuration.

Which solution will meet these requirements?

A

Create a WebSocket API and the Lauth route. Configure and attach the JWT authorizer to the API. Deploy the API.

B

Create a WebSocket API and the Lauth route. Create and configure an AWS Lambda authorizer. Attach the Lambda authorizer to the API. Deploy the API.

C

Create an HTTP API and the 'auth route. Create and configure an AWS Lambda authorizer. Attach the Lambda authorizer to the /auth route. Deploy the

D

Create an HTTP API and the (auth route. Configure the JWT authorizer, Attach the JWT authorizer to the 'auth route. Deploy the API.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 59

A company has an application that runs as a series of AWS Lambda functions. Each Lambda function receives data from an Amazon Simple Notification Service (Amazon SNS) topic and writes the data to an Amazon Aurora DB instance.

To comply with an information security policy, the company must ensure that the Lambda functions all use a single securely encrypted database connection string to access Aurora.

Which solution will meet these requirements?

A

Use IAM database authentication for Aurora to enable secure database connections for all the Lambda functions.

B

Store the credentials and read the credentials from an encrypted Amazon RDS DB instance.

C

Store the credentials in AWS Systems Manager Parameter Store as a secure string parameter.

D

Use Lambda environment variables with a shared AWS Key Management Service (AWS KMS) key for encryption.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 60

A company is developing a new application that uses Amazon EC2, Amazon S3, and AWS Lambda resources. The company wants to allow employees to access the AWS Management Console by using existing credentials that the company stores and manages in an on-premises Microsoft Active Directory. Each employee must have a specific level of access to the AWS resources that is based on the employee's role.

Which solution will meet these requirements with the LEAST operational overhead?

A

Configure AWS Directory Service to create an Active Directory in AWS Directory Service for Microsoft Active Directory. Establish a trust relationship with the on-premises Active Directory. Configure IAM roles and trust policies to give the employees access to the AWS resources.

B

Use LDAP to directly integrate the on-premises Active Directory with AWS Identity and Access Management (IAM). Map Active Directory groups to Iam roles to control access to AWS resources.

C

Implement a custom identity broker to authenticate users into the on-premises Active Directory. Configure the identity broker to use AWS Security Token Service (AWS STS) to grant authorized users IAM role-based access to the AWS resources.

D

Configure Amazon Cognito to federate users into the on-premises Active Directory. Use Cognito user pools to manage user identities and to manage user access to the AWS resources.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 61

An IT department uses Amazon S3 to store sensitive images. After more than 1 year, the company moves the images into archival storage. The company rarely accesses the images, but the company wants a storage solution that maximizes resiliency. The IT department needs access to the images that have been moved to archival storage within 24 hours.

Which solution will meet these requirements MOST cost-effectively?

A

Use S3 Standard-Infrequent Access (S3 Standard-IA) to store the images. Use S3 Glacier Deep Archive with standard retrieval to store and retrieve archived images.

B

Use S3 Standard-Infrequent Access (S3 Standard-IA) to store the images. use S3 Glacier Deep Archive with bulk retrieval to store and retrieve archived images.

C

Use S3 Intelligent-Tiering to store the images. Use S3 Glacier Deep Archive with standard retrieval to store and retrieve archived images.

D

Use S3 One Zone-infrequent Access (S3 One Zone-IA) to store the images. Use S3 Glacier Deep Archive with bulk retrieval to store and retrieve archived images.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 62

A developer is building an application that will process messages from an Amazon Simple Queue Service (Amazon SQS) standard queue. The application needs to process the messages in an Amazon Elastic Container Service (Amazon ECS) task.

Which actions will result in the MOST cost-effective processing of the messages? (Select TWO.)

A

Use long polling to query the queue for new messages.

B

Use short polling to query the queue for new messages.

C

Use message batching to retrieve messages from the queue.

D

Use Amazon ElastiCache to cache messages in the queue.

E

Use an SQS FIFO queue to manage the messages.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 63

A company has an existing application that has hardcoded database credentials. A developer needs to modify the existing application. The application is deployed in two AWS Regions with an active-passive failover configuration to meet company's disaster recovery strategy.

The developer needs a solution to store the credentials outside the code. The solution must comply with the company’s disaster recovery strategy.

Which solution will meet these requirements in the MOST secure way?

A

Store the credentials in AWS Secrets Manager in the primary Region. Enable secret replication to the secondary Region. Update the application to use the Amazon Resource Name (ARN) based on the Region.

B

Store credentials in AWS Systems Manager Parameter Store in the primary Region. Enable parameter replication to the secondary Region. Update the application to use the Amazon Resource Name (ARN) based on the Region.

C

Store credentials in a config file. Upload the config file to an S3 bucket in the primary Region. Enable Cross-Region Replication (CRR) to an S3 bucket in the secondary region. Update the application to access the config file from the S3 bucket, based on the Region.

D

Store credentials in a config file. Upload the config file to an Amazon Elastic File System (Amazon EFS) file system. Update the application to use the Amazon EFS file system Regional endpoints to access the config file in the primary and secondary Regions.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 64

A developer is troubleshooting the permissions of an application that needs to make changes to an Amazon RDS database, The developer has access to the IAM role that the application is using.

Which command structure should the developer use to test the role permissions?

A

aws Sts assume-role

B

aws iam attach-role-policy

C

aws ssm resume-session

D

aws rds add-role-to-db-cluster

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 65

A company uses Amazon API Gateway to expose a set of APIs to customers. The APIs have caching enabled in API Gateway. Customers need a way to invalidate the cache for each API when they test the API.

What should a developer do to give customers the ability to invalidate the API cache?

A

Ask the customers to use AWS credentials to call the InvalidateCache API operation.

B

Attach an InvalidateCache policy to the IAM execution role that the customers use to invoke the API. Ask the customers to send a request that contains the Cache-Control:max-age=0 HTTP header when they make an API call.

C

Ask the customers to use the AWS SDK API Gateway class to invoke the InvalidateCache API operation.

D

Attach an InvalidateCache policy to the IAM execution role that the customers use to invoke the API. Ask the customers to add the INVALIDATE_CACHE query string parameter when they make an API call.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 66

A developer is updating the code for an AWS Lambda function to add new capabilities. The Lambda function has version aliases for production and development environments that run separate versions of the function. The developer needs to configure a staging environment for the Lambda function to handle invocations to both the development version and the production version.

Which solution will meet these requirements?

A

Create a weighted alias that references the production version of the function and the updated version of the function.

B

Add a Network Load Balancer. Add the production version of the function and updated version of the function as targets.

C

Use AWS Code Deploy to create a linear traffic shifting deployment.

D

Create a tag for the Lambda function that contains the production version and updated version of the code.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 67

An AWS Lambda function is running in a company's shared AWS account. The function needs to perform an additional ec2:Describelnstances action that is directed at the company's development accounts. A developer must configure the required permissions across the accounts.

How should the developer configure the permissions to adhere to the principle of least privilege?

A

Create an IAM role in the shared account. Add the ec2:Describelnstances permission to the role. Establish a trust relationship between the development accounts for this role. Update the Lambda function IAM role in the shared account by adding the ec2:Describelnstances permission to the role.

B

Create an IAM role in the development accounts. Add the ec2:Describelnstances permission to the role. Establish a trust relationship with the shared account for this role. Update the Lambda function IAM role in the shared account by adding the iam:AssumeRole permissions.

C

Create an IAM role in the shared account. Add the ec2:Describelnstances permission to the role. Establish a trust relationship between the development accounts for this role. Update the Lambda function IAM role in the shared account by adding the iam:AssumeRole permissions.

D

Create an IAM role in the development accounts. Add the ec2:Describelnstances permission to the role. Establish a trust relationship with the shared account for this role. Update the Lambda function IAM role in the shared account by adding the ec2:Describelnstances permission to the role.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 68

A developer manages an application that writes customer orders to an Amazon DynamoDB table. The orders use customer_id as the partition key, order_id as the sort of key, and order_date as an attribute. A new access pattern requires accessing data by order_date and order_id. The developer needs to implement a new AWS Lambda function to support the new access pattern.

How should the developer support the new access pattern in the MOST operationally efficient way?

A

Add a new local secondary index (LSI) to the DynamoDB table that specifies order_date as the partition key and order_id as the sort of key. Write the new Lambda function to query the new LSI index.

B

Write the new Lambda function to scan the DynamoDB table. In the Lambda function, write a method to retrieve and combine results by order_date and order id.

C

Add a new global secondary index (GSI) to the DynamoDB table that specifies order_date as the partition key and order_id as the sort of key. Write the new Lambda function to query the new GSI index.

D

Enable DynamoDB Streams on the table, Choose the new and old images information to write to the DynamoDB stream, Write the new Lambda function to query the DynamoDB stream.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 69

A developer is creating a machine learning (ML) pipeline in AWS Step Functions that contains AWS Lambda functions. The developer has configured an Amazon Simple Queue Service (Amazon SQS) queue to deliver ML model parameters to the ML pipeline to train ML models. The developer uploads the trained models are uploaded to an Amazon S3 bucket.

The developer needs a solution that can locally test the ML pipeline without making service integration calls to Amazon SQS and Amazon S3.

Which solution will meet these requirements?

A

Use the Amazon CodeGuru Profiler to analyze the Lambda functions used in the AWS Step Functions pipeline.

B

Use the AWS Step Functions Local Docker image to run and locally test the Lambda functions.

C

Use the AWS Serverless Application Model (AWS SAM) CLI to run and locally test the Lambda functions.

D

Use AWS Step Functions Local with mocked service integrations.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 70

Two containerized microservices are hosted on Amazon EC2 ECS. The first microservice reads an Amazon RDS Aurora database instance, and the second microservice reads an Amazon DynamoDB table.

How can each microservice be granted the minimum privileges?

A

Set ECS ENABLE TASK IAM ROLE to false on EC2 instance boot in ECS agent configuration file. Run the first microservice with an IAM role for ECS tasks with read-only access for the Aurora database. Run the second microservice with an IAM role for ECS tasks with read-only access to DynamoDB.

B

Set ECS ENABLE TASK IAM ROLE, to false on EC2 instance boot in the ECS agent configuration file. Grant the instance profile role read-only accesses to the Aurora database and DynamoDB.

C

Set ECS ENABLE TASK IAM ROLE to true on EC2 instance boot in the ECS agent configuration file. Run the first microservice with an IAM role for ECS tasks with read-only access for the Aurora database. Run the second microservice with an IAM role for ECS tasks with read-only access to DynamoDB.

D

Set ECS ENABLE TASK IAM ROLE to true on EC2 instance boot in the ECS agent configuration file. Grant the instance profile role read-only accesses to the Aurora database and DynamoDB.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 71

A company is migrating its PostgreSQL database into the AWS Cloud. The company wants to use a database that Will secure and regularly rotate database credentials. The company wants a solution that does not require additional programming overhead.

Which solution will meet these requirements?

A

Use Amazon Aurora PostgreSQL for the database. Store the database credentials in AWS Systems Manager Parameter Store. Turn on rotation.

B

Use Amazon Aurora PostgreSQL for the database. Store the database credentials in AWS Secrets Manager. Turn on rotation.

C

Use Amazon DynamoDB for the database. Store the database credentials in AWS Systems Manager Parameter Store. Tum on rotation

D

Use Amazon DynamoDB for the database. Store the database credentials in AWS Secrets Manager. Tum on rotation.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 72

A company has an Amazon DynamoDB table that contains records of users that have signed up for a trial of the company's product, The company is using a spreadsheet to track data about the product trial. The company needs to ensure the spreadsheet is automatically updated with the latest information when

individual trials begin, are updated, or finish.

Which solution will meet these requirements?

A

Create a DynamoDB Accelerator (DAX) cluster from the table. Set the view type to old image. Create an AWS Lambda function that uses the cluster data to update the spreadsheet. Subscribe the Lambda function to the cluster.

B

Create a DynamoDB Accelerator (DAX) cluster from the table. Set the view type to new image. Create an AWS Lambda function that uses the cluster data to update the spreadsheet. Subscribe the Lambda function to the cluster.

C

Enable a DynamoDB stream for the table. Set the view type to new image. Create an AWS Lambda function that uses the stream data to update the spreadsheet. Subscribe the Lambda function to the stream.

D

Enable a DynamoDB stream for the table, Set the view type to old image. Create an AWS Lambda function that uses the stream data to update the spreadsheet. Subscribe the Lambda function to the stream.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 73

A company has a serverless application on AWS that uses a fleet of AWS Lambda functions that have aliases. The company regularly publishes new Lambda function by using an in-house deployment solution. The company wants to improve the release process and to use traffic shifting. A newly published function version should initially made available only to a fixed percentage of production users.

Which solution Will meet these requirements?

A

Configure routing on the alias of the new function by using a weighted alias.

B

Configure a canary deployment type for Lambda.

C

Configure routing on the new versions by using environment variables.

D

Configure a linear deployment type for Lambda.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 74

A developer is deploying an application on Amazon EC2 instances that run in Account A. The application needs to read data from an existing Amazon Kinesis data stream in Account B.

Which actions should the developer take to provide the application with access to the stream? (Choose two.)

A

Update the instance profile role in Account A with stream read permissions.

B

Create an IAM role with stream read permissions in Account B.

C

Add a trust policy to the instance profile role and IAM role in Account B to allow the instance profile role to assume the IAM role.

D

Add a trust policy to the instance profile role and IAM role in Account B to allow reads from the stream.

E

Add a resource-based policy in Account B to allow read access from the instance profile role.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 75

A developer has created a large AWS Lambda function. Deployment of the function IS falling because of an InvalidParameterValueException error. The error message indicates that the unzipped size of the function exceeds the maximum supported value.

Which actions can the developer take to resolve this error? (Select TINO.)

A

Submit a quota increase request to AWS Support to increase the function to the required size.

B

Use a compression algorithm that is more efficient than ZIP.

C

Break up the function into multiple smaller functions.

D

Zip the .zip file twice to compress the file more.

E

Move common libraries, function dependencies, and custom runtimes into Lambda layers.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 76

An application that is running on Amazon EC2 instances stores data in an Amazon S3 bucket. All the data must be encrypted in transit.

How can a developer ensure that all traffic to the S3 bucket is encrypted?

A

Install certificates on the EC2 instances.

B

Create a private VPC endpoint,

C

Configure the S3 bucket with server-side encryption with AWS KMS managed encryption keys (SSE-KMS).

D

Create an S3 bucket policy that denies traffic when the value for the aws:SecureTransport condition key is false.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 77

A developer is updating the production version of an AWS Lambda function to fix a defect. The developer has tested the updated code in a test environment. The developer wants to slowly roll out the updates to a small subset of production users before rolling out the changes to all users. Only 10% of the users should be initially exposed to the new code in production.

Which solution will meet these requirements?

A

Update the Lambda code and create a new version of the Lambda function. Create a Lambda function trigger. Configure the traffic weights in the trigger between the two Lambda function versions. Send 90% of the traffic to the production version, and send 10% of the traffic to the new version.

B

Create a new Lambda function that uses the updated code. Create a Lambda alias for the production Lambda function. Configure the Lambda alias to send 90% of the traffic to the production Lambda function. and send 10% of the traffic to the test Lambda function.

C

Update the Lambda code and create a new version of the Lambda function. Create a Lambda proxy integration. Configure the Lambda proxy to split traffic between the two Lambda function versions. Send 90% of the traffic to the production version, and send 10% of the traffic to the new version.

D

Update the Lambda code and create a new version of the Lambda function. Create a Lambda function alias. Configure the traffic weights in the Lambda alias between the two Lambda function versions. Send 90% of the traffic to the production version. and send 10% of the traffic to the new version.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 78

An AWS Lambda function generates a 3 MB JSON file and then uploads it to an Amazon S3 bucket daily, the file contains sensitive information, so the developer must ensure that it is encrypted before uploading to the bucket.

Which of the following modifications should the developer make to ensure that the data is encrypted before uploading it to the bucket?

A

Use the default AWS Key Management Service (AWS KMS) key for Amazon S3 in the Lambda function code.

B

Use the S3 managed key and call the Generate Data key API to encrypt the file.

C

Use the Generate Data key API, then use that data key to encrypt the file in the Lambda function code.

D

Use an AWS Key Management Service (AWS KMS) customer managed key for Amazon S3 in the Lambda function code.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 79

An application that runs on AWS receives messages from an Amazon Simple Queue Service (Amazon SQS) queue and processes the messages in batches. The application sends the data to another SQS queue to be consumed by another legacy application. The legacy system can take up to 5 minutes to process some transaction data.

A developer wants to ensure that there are no out-of-order updates in the legacy system. The developer cannot alter the behavior of the legacy system.

Which solution Will meet these requirements?

A

Use an SQS FIFO queue. Configure the visibility timeout value.

B

Use an SQS standard queue with a SendMessageBatchRequestEntry data type. Configure the DelaySeconds values.

C

Use an SOS standard queue with a SendMessageBatchRequestEntry data type. Configure the visibility timeout value.

D

Use an SQS FIFO queue. Configure the DelaySeconds value.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 80

A company has an application that runs on Amazon EC2 instances. The application needs to use dynamic feature flags that will be shared with other applications. The application must poll on an interval for new feature flag values. The values must be cached when they are retrieved.

Which solution will meet these requirements in the MOST operationally efficient way?

A

Store the feature flag values in AWS Secrets Manager. Configure an Amazon ElastiCache node to cache the values by using a lazy loading strategy in the application. Update the application to poll for the values on an interval from ElastiCache.

B

Store the feature flag values in an Amazon DynamoDB table. Configure DynamoDB Accelerator (DAX) to cache the values by using a lazy loading strategy in the application. Update the application to poll for the values on an interval from DynamoDB.

C

Store the feature flag values in AWS AppConfig. Configure AWS AppConfig Agent on the EC2 instances to poll for the values on an interval. Update the application to retrieve the values from the AppConfig Agent localhost endpoint.

D

Store the feature flag values in AWS Systems Manager Parameter Store. Configure the application to poll on an interval. Configure the application to use the AWS SDK to retrieve the values from Parameter Store and to store the values in memory.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 81

A developer is working on an application that processes operating data from IoT devices. Each IoT device uploads a data file once every hour to an Amazon S3 bucket. The developer wants to immediately process each data file when the data file is uploaded to Amazon S3.

The developer will use an AWS Lambda function to process the data files from Amazon S3. The Lambda function is configured with the S3 bucket information where the files are uploaded. The developer wants to configure the Lambda function to immediately invoke after each data file is uploaded.

Which solution Will meet these requirements?

A

Add an asynchronous invocation to the Lambda function. Select the S3 bucket as the source.

B

Add an Amazon EventBridge event to the Lambda function. Select the S3 bucket as the source.

C

Add a trigger to the Lambda function. Select the S3 bucket as the source.

D

Add a layer to the Lambda function. Select the $3 bucket as the source.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 82

A developer created an AWS Lambda function named Process Messages. The Lambda function is invoked asynchronously when a message is published to an Amazon Simple Notification Service (Amazon SNS) topic named Input Topic. The developer uses a second SNS topic named Error Topic to handle alerts of failures for other services.

The developer wants to receive notifications from the Error Topic SNS topic when the Process Messages Lambda function fails to process a message.

Which solution will meet this requirement?

A

Configure a subscription for the Error Topic SNS topic. Configure a filter policy for failures. Specify the Process Messages Lambda function as the endpoint.

B

Configure a failure destination for the Process Messages Lambda function. Specify the Amazon Resource Name (ARN) of the Error Topic SNS topic as the destination ARN.

C

Configure a trigger for the Process Messages Lambda function. Specify the Error Topic SNS topic as the trigger topic. Configure a filter policy on the topic for failures.

D

Configure a delivery policy on the Error Topic SNS topic. Configure a filter policy for failures. Specify the Lambda function as the input endpoint.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 83

A developer must provide an API key to an AWS Lambda function to authenticate with a third-party system. The Lambda function Will run on a schedule. The developer needs to ensure that the API key remains encrypted at rest.

Which solution will meet these requirements?

A

Store the API key as a Lambda environment variable by using an AWS Key Management Service (AWS KMS) customer managed key.

B

Configure the application to prompt the user to provide the password to the Lambda function on the first run.

C

Store the API key as a value in the application code.

D

Use Lambda@Edge and only communicate over the HTTPS protocol.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 84

A developer has an application that uses AWS Security Token Service (AWS STS). The application calls the STS Assume Role API operation to provide trusted users with temporary security credentials. The application calls AWS STS at the service's default endpoint: https:/fsts.amazonaws.com.

The application is deployed in an Asia Pacific AWS Region. The application is experiencing errors that are related to intermittent latency when the application calls AWS STS.

What should the developer do to resolve this issue?

A

Update the application to use the GetSessionToken API operation.

B

Update the application to use the AssumeRoleWithSAML API operation.

C

Update the application to use a Regional STS endpoint that is closer to the application deployment.

D

Update the application to use the AssumeRoleWithWebldentity API operation. Move the STS endpoint to a global endpoint.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 85

An application uses AWS X-Ray to generate a large amount of trace data on an hourly basis. A developer wants to use filter expressions to limit the returned results through user-specified custom attributes.

How should the developer use filter expressions to filter the results in X-Ray?

A

Add custom attributes as annotations in the segment document.

B

Add custom attributes as metadata in the segment document.

C

Add custom attributes as new segment fields in the segment document.

D

Create new sampling rules that are based on custom attributes.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 86

A company is hosting an Amazon API Gateway REST API that calls a single AWS Lambda function. The function is infrequently invoked by multiple clients at the

same time. The code performance is optimal, but the company wants to optimize the startup time of the function.

What can a developer do to optimize the initialization of the function?

A

Enable API Gateway caching for the REST API.

B

Configure provisioned concurrency for the Lambda function.

C

Use Lambda proxy integration for the REST API,

D

Configure AWS Global Accelerator for the Lambda function.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 87

A developer wants to reduce risk when deploying a new version of an existing AWS Lambda function. To test the Lambda function, the developer needs to split the traffic between the existing version and the new version of the Lambda function.

Which solution will meet these requirements?

A

Configure a weighted routing policy in Amazon Route 53. Associate the versions of the Lambda function with the weighted routing policy.

B

Create a function alias. Configure the alias to split the traffic between the two versions of the Lambda function.

C

Create an Application Load Balancer (ALB) that uses the Lambda function as a target. Configure the ALB to split the traffic between the two versions of the Lambda function.

D

Create the new version of the Lambda function as a Lambda layer on the existing version. Configure the function to split the traffic between the two layers.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 88

A company stores customer credit report in an Amazon S3 bucket. An analytics service uses standard Amazon S3 GET requests to access the reports, A developer must implement a solution to redact personally identifiable information (PII) from the reports before the reports reach the analytics service.

Which solution will meet this requirement with the MOST operational efficiency?

A

Load the S3 objects into Amazon Redshift by using a COPY command. Implement dynamic data masking. Refactor the analytics service to read from Amazon Redshift.

B

Set up an S3 Object Lambda function. Attach the function to an S3 Object Lambda Access Point. Program the function to call a PII redaction API.

C

Use AWS Key Management Service (AWS KMS) to implement encryption in the S3 bucket. Re-upload all the existing S3 objects. Give the kms:Decrypt permission to the analytics service.

D

Create an Amazon Simple Notification Service (Amazon SNS) topic. Implement message data protection. Refactor the analytics service to publish data access requests to the SNS topic,

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 89

A developer created a web API that receives requests by using an internet-facing Application Load Balancer (ALB) with an HTTPS listener. The developer configures an Amazon Cognito user pool and wants to ensure that every request to the API is authenticated through Amazon Cognito.

What should the developer do to meet this requirement?

A

Add a listener rule to the listener to return a fixed response if the Authorization header is missing. Set the fixed response to 401 Unauthorized.

B

Create an authentication action for the listener rules of the ALSet the rule action type to authenticate-cognito. Set the OnUnauthenticatedRequest field to "deny."

C

Create an Amazon API Gateway API. Configure all API methods to be forwarded to the ALB endpoint. Create an authorizer of the COGNITO_USER_POOLS type. Configure every API method to use that authorizer.

D

Create a new target group that includes an AWS Lambda function target that validates the Authorization header by using Amazon Cognito. Associate the target group with the listener.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 90

A developer is creating an AWS Lambda function that needs network access to private resources in a VPC.

Which solution will provide this access with the LEAST operational overhead?

A

Attach the Lambda function to the VPC through private subnets. Create a security group that allows network access to the private resources- Associate the security group with the Lambda function.

B

Configure the Lambda function to route traffic through a VPN connection. Create a security group that allows network access to the private resources. Associate the security group with the Lambda function.

C

Configure a VPC endpoint connection for the Lambda function. Set up the VPC endpoint to route traffic through a NAT gateway.

D

Configure an AWS PrivateLink endpoint for the private resources. Configure the Lambda function to reference the PrivateLink endpoint.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 91

A web application is using Amazon Kinesis Streams for clickstream data that may not be consumed for up to 12 hours.

How can the Developer implement encryption at rest for data within the Kinesis Streams?

A

Enable SSL connections to Kinesis.

B

Use Amazon Kinesis Consumer Library

C

Encrypt the data once it is at rest with a Lambda function.

D

Enable server-side encryption in Kinesis Streams

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 92

A team deploys an AWS CloudFormation template to update a stack that already included an Amazon DynamoDB table. However, before the deployment of the update, the team changed the name of the DynamoDB table on the template by mistake. The Deletion Policy attribute for all resources has the default value.

What will be the result of this mistake?

A

CloudFormation will create a new table and will delete the existing table.

B

CloudFormation will create a new table and will keep the existing table.

C

CloudFormation will overwrite the existing table and will rename the existing table.

D

CloudFormation will keep the existing table and will not create a new table.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 93

When a Developer tries to run an AWS CodeBuild project, it raises an error because the length of all environment variables exceeds the limit for the combined maximum of characters.

What is the recommended solution?

A

Add the export LC_ALL=“en_US.utf8” command to the pre_build section to ensure POS1X localization.

B

Use Amazon Cognito to store key-value pairs for large numbers of environment variables.

C

Update the settings for the build project to use an Amazon S3 bucket for large numbers of environment variables.

D

Use AWS Systems Manager Parameter Store to store large numbers of environment variables.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 94

A company has an Amazon API Gateway REST API that integrates with an AWS Lambda function. The API's development stage references a development alias of the Lambda function named dev. A developer needs make a production alias of the Lambda function named prod available through the API.

Which solution meets these requirements?

A

Create a new method on the API. Name the method production. Configure the method to include a stage variable that points to the prod Lambda function alias.

B

Create a new method on the API. Name the method production. Configure an integration request on the API's development stage that points to the prod Lambda function alias.

C

Deploy the API to a new stage named production. Configure the stage to include a stage variable that points to the prod Lambda function alias.

D

Deploy the API to a new stage named production. Configure an integration request on the API's production stage that points to the prod Lambda function alias.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 95

An application is real-time processing millions of events that are received through an API.

What service could be used to allow multiple consumers to process the data concurrently and MOST cost- effectively?

A

Amazon SNS with fanout to an SQS queue for each application

B

Amazon SNS with fanout to an SQS F1FO (first-in, first-out queue for each application

C

Amazon Kinesis Firehouse

D

Amazon Kinesis Data Streams

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 96

A developer is building an ecommerce application that uses multiple AWS Lambda functions. Each function performs a specific step in a customer order workflow, such as order processing and inventory management. The developer must ensure that the Lambda functions run in a specific order.

Which solution will meet this requirement with the LEAST operational overhead?

A

Configure an Amazon Simple Queue Service (Amazon SQS) queue to contain messages about each step a function must perform. Configure the Lambda functions to run sequentially based on the order of messages in the SQS queue.

B

Configure an Amazon Simple Notification Service (Amazon SNS) topic to contain notifications about each step a function must perform. Subscribe the Lambda functions to the SNS topic. use subscription filters based on the Step each function must perform.

C

configure an AWS Step Functions state machine to invoke the Lambda functions in a specific order.

D

Configure Amazon Event Bridge Scheduler schedules to invoke the Lambda functions in a specific order.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 97

A gaming company is developing a mobile game application for iOS® and Android® platforms. This mobile game securely stores user data locally on the device. The company wants to allow users to use multiple device for the game, which requires user data synchronization across devices.

Which service should be used to synchronize user data across devices without the need to create a backend application?

A

AWS Lambda

B

Amazon S3

C

Amazon DynamoDB

D

Amazon Cognito

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 98

A company needs to deploy all its cloud resources by using AWS CloudFormation templates. A developer must create an Amazon Simple Notification Service (Amazon SNS) automatic notification to help enforce this rule. The developer creates an SNS topic and subscribes the email address of the company's security team to the SNS topic.

The security team must receive a notification immediately if an IAM role is created without the use of CloudFormation.

Which solution will meet this requirement?

A

Create an AWS Lambda function to filter events from CloudTrail if a role was created without CloudFormation. Configure the Lambda function to publish to the SNS topic. Create an Amazon Event Bridge schedule to invoke the Lambda function every 15 minutes.

B

Create an AWS Faregate task in Amazon Elastic Container Service (Amazon ECS) to filter events from CloudTrail if a role was created without CloudFormation. Configure the Faregate task to publish to the SNS topic. Create an Amazon Event Bridge schedule to run the Faregate task every 15 minutes.

C

Launch an Amazon EC2 instance that includes a script to filter events from CloudTrail if a role was created without CloudFormation. Configure the script to publish to the SNS topic. Create a cron job to run the script on tile EC2 instance every 15 minutes.

D

Create an Amazon Event Bridge rule to filter events from CloudTrail if a role was created without CloudFormation. Specify the SNS topic as the target of the Event Bridge rule.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 99

A company is using AWS CodePipeline to deliver one of its applications. The delivery pipeline is triggered by changes to the master branch of an AWS CodeCommit repository and uses AWS CodeBuild to implement the test and build stages of the process and AWS CodeDeploy to deploy the application.

The pipeline has been operating successfully for several months and there have been no modifications. Following a recent change to the application's source code, AWS CodeDeploy has not deployed the updates application as expected.

What are the possible causes? (Choose two.)

A

The change was not made in the master branch of the AWS CodeCommit repository.

B

One of the earlier stages in the pipeline failed and the pipeline has terminated.

C

One of the Amazon EC2 instances in the company's AWS CodePipeline cluster is inactive.

D

The AWS CodePipeline is incorrectly configured and is not executing AWS CodeDeploy.

E

AWS CodePipeline does not have permissions to access AWS CodeCommit.

Premium Solution Locked

Unlock all 614 answers & explanations

QUESTION 100

A developer creates a static website for their department. The developer deploys the static assets for the website to an Amazon S3 bucket and serves the assets with Amazon CloudFront. The developer uses origin access control (OAC) on the CloudFront distribution to access the S3 bucket.

The developer notices users can access the root URL and specific pages but cannot access directories without specifying a file name. For example, /products/index.html works, but /products/ return an error. The developer needs to enable accessing directories without specifying a file name without exposing the S3 bucket publicly.

Which solution will meet these requirements?

A

Update the CloudFront distribution's settings to index.html as the default root object is set.

B

Update the Amazon S3 bucket settings and enable static website hosting. Specify index.html as the Index document. Update the S3 bucket policy to enable access. Update the CloudFront distribution's origin to use the S3 website endpoint.

C

Create a CloudFront function that examines the request URL and appends index.html when directories are being accessed. Add the function as a viewer request CloudFront function to the CloudFront distribution's behaviour.

D

Create a custom error response on the CloudFront distribution with the HTTP error code set to the HTTP 404 Not Found response code and the response page path to /index.html. Set the HTTP response code to the HTTP 200 OK response code.

Premium Solution Locked

Unlock all 614 answers & explanations

Amazon AWS Certified Developer - Associate (DVA-C02)

Test the Practice Engine

Premium Bundle

Standard Simulation

Basic Tier

Verified Community

Success Network

Exam Overview

Skills Measured

Career Path

Common Questions

Is the material up to date?

What format do I get?

Is there a guarantee?

When do I get the download?

Free Study Guide Samples

Full Question Bank Locked

Certification Path

Related Certifications

Customer Reviews

David M.

Sarah J.

Michael C.

Need Assistance?

Get Exam Updates