Question # 101
A company wants to migrate applications from its on-premises servers to AWS. As a first step, the company is modifying and migrating a non-critical application to a single Amazon EC2 instance. The application will store information in an Amazon S3 bucket. The company needs to follow security best practices when deploying the application on AWS. Which approach should the company take to allow the application to interact with Amazon S3?
A. Create an 1AM role that has administrative access to AWS. Attach the role to the EC2
instance.
B. Create an 1AM user. Attach the AdministratorAccess policy. Copy the generated access key and secret key. Within the application code, use the access key and secret key along with the AWS SDK to communicate with Amazon S3.
C. Create an 1AM role that has the necessary access to Amazon S3. Attach the role to the EC2 instance.
D. Create an 1AM user. Attach a policy that provides the necessary access to Amazon S3. Copy the generated access key and secret key. Within the application code, use the access key and secret key along with the AWS SDK to communicate with Amazon S3.
Question # 102
A developer is building an application on AWS. The application has an Amazon API Gateway API that sends requests to an AWS Lambda function. The API is experiencing increased latency because the Lambda function has limited available CPU to fulfill the requests. Before the developer deploys the API into production, the developer must configure the Lambda function to have more CPU. Which solution will meet this requirement?
A. Increase the virtual CPU (vCPU) cores quota of the Lambda function.
B. Increase the amount of memory that is allocated to the Lambda function.
C. Increase the ephemeral storage size of the Lambda function.
D. Increase the timeout value of the Lambda function.
Question # 103
A company deploys a new application to AWS. The company is streaming application logs to Amazon CloudWatch Logs. The company's development team must receive notification by email when the word "ERROR" appears in any log lines. A developer sets up an Amazon SNS topic and subscribes the development team to the topic. What should the developer do next to meet the requirements?
A. Select the appropriate log group. Create a CloudWatch metric filter with "ERROR" as
the search term. Create an alarm on this metric that notifies the SNS topic when the metric
is 1 or higher.
B. In CloudWatch Logs Insights, select the appropriate log group. Create a metric query to search for the term "ERROR" in the logs. Create an alarm on this metric that notifies the SNS topic when the metric is 1 or higher.
C. Select the appropriate log group. Create an SNS subscription filter with "ERROR" as the filter pattern. Select the SNS topic as the destination.
D. Create a CloudWatch alarm that includes "ERROR" as a filter pattern, a log group dimension that defines the appropriate log group, and a destination that notifies the SNS topic.
Question # 104
A developer needs to modify an application architecture to meet new functional requirements. Application data is stored in Amazon DynamoDB and processed tor analysis in a nightly batch. The system analysts do not want to wait until the next day to view the processed data and have asked to have it available in near-real time. Which application architecture pattern would enable the data to be processed as it is received?
A. Event driven
B. Client-server d riven
C. Fan-out driven
D. Schedule driven
Question # 105
A developer created an AWS Lambda function to process data in an application. The function pulls large objects from an Amazon S3 bucket, processes the data, and loads the processed data into a second S3 bucket. Application users have reported slow response times. The developer checks the logs and finds that Lambda function invocations run much slower than expected. The function itself is simple and has a small deployment package. The function initializes quickly. The developer needs to improve the performance of the application. Which solution will meet this requirement with the LEAST operational overhead?
A. Store the data in an Amazon EFS file system. Mount the file system to a local directory
in the function.
B. Create an Amazon EventBridge rule to schedule invocations of the function every minute.
C. Configure the function to use ephemeral storage. Upload the objects and process data in the /tmp directory.
D. Create a Lambda layer to package the function dependencies. Add the layer to the function.
Question # 106
A developer created several AWS Lambda functions that write data to a single Amazon S3 bucket. The developer configured all the Lambda functions to send logs and metrics to Amazon CloudWatch. The developer receives reports that one of the Lambda functions writes data to the bucket very slowly. The developer needs to measure the latency between the problematic Lambda function and the S3 bucket. Which solution will meet this requirement?
A. Enable AWS X-Ray on the Lambda function. In the generated trace map. select the line
between Lambda and Amazon S3.
B. Query the Lambda function's log file in Amazon CloudWatch Logs Insights. Return the average of the auto-discovered ©duration field.
C. Enable CloudWatch Lambda Insights on the function. View the latency graph that CloudWatch Lambda Insights provides.
D. Enable AWS X-Ray on the Lambda function. Select Amazon S3 in the latency graph to view the latency histogram.
Question # 107
A developer is preparing to deploy an AWS CloudFormation stack for an application from a template that includes an IAM user. The developer needs to configure the application's resources to retain the IAM user after successful creation. However, the developer also needs to configure the application to delete the IAM user if the stack rolls back.
A. Update CloudFormation template with the following deletion policy:
AWSTemplateFormatVersion: '2010-05-09'
Resources:
appUser:
Type: AWS::IAM::User
DeletionPolicy: Retain
B. Update CloudFormation template with the following deletion policy: AWSTemplateFormatVersion: '2010-09-09' Resources: appUser: Type: AWS::IAM::User DeletionPolicy: RetainExceptOnCreate
C. Update the CloudFormation service role to include the following policy: { "Version": "2012-10-17", "Statement": [{ "Effect": "Allow", "Action": ["cloudformation:UpdateTerminationProtection"], "Resource": "*" }] }
D. Update the stack policy to include the following statements: { "Statement": [{ "Effect": "Deny", "Action": "Update:*", "Principal": "*", "Resource": "*", "Condition": { "StringEquals": { "ResourceType": "AWS::IAM::User" } } }] }
Question # 108
A developer is building an application that uses an AWS Lambda function to process data. The application requires minimum latency. The Lambda function must have predictable function start times. All setup activities for the execution environment must happen before invocation of the Lambda function. Which solution will meet these requirements?
A. Increase the memory of the Lambda function to the maximum amount. Configure an
Amazon EventBridge rule to schedule invocations of the Lambda function every minute to keep the execution environment active.
B. Optimize the static initialization code that runs when a new execution environment is prepared for the first time. Decrease and compress the size of the Lambda function package and the imported libraries and dependencies.
C. Increase the reserved concurrency of the Lambda function to the maximum value for unreserved account concurrency. Run any setup activities manually before the initial invocation of the Lambda function.
D. Publish a new version of the Lambda function. Configure provisioned concurrency for the Lambda function with the required minimum number of execution environments.
Question # 109
An application stores user data in Amazon S3 buckets in multiple AWS Regions. A developer needs to implement a solution that analyzes the user data in the S3 buckets to find sensitive information. The analysis findings from all the S3 buckets must be available in the eu-west-2 Region. Which solution will meet these requirements with the LEAST development effort?
A. Create an AWS Lambda function to generate findings. Program the Lambda function to
send the findings to another S3 bucket in eu-west-2.
B. Configure Amazon Made to generate findings. Use Amazon EventBridge to create rules that copy the findings to eu-west-2.
C. Configure Amazon Inspector to generate findings. Use Amazon EventBridge to create rules that copy the findings to eu-west-2.
D. Configure Amazon Macie to generate findings and to publish the findings to AWS CloudTrail. Use a CloudTrail trail to copy the results to eu-west-2.
Question # 110
A developer compiles an AWS Lambda function and packages the result as a .zip file. The
developer uses the Functions page on the Lambda console to attempt to upload the local
packaged .zip file. When pushing the package to Lambda, the console returns the following
error:
Which solutions can the developer use to publish the code? (Select TWO.)
A. Upload the package to Amazon S3. Use the Functions page on the Lambda console to
upload the package from the S3 location.
B. Create an AWS Support ticket to increase the maximum package size.
C. Use the update-function-code AWS CLI command. Pass the -publish parameter.
D. Repackage the Lambda function as a Docker container image. Upload the image to Amazon Elastic Container Registry {Amazon ECR). Create a new Lambda function by using the Lambda console. Reference the image that is deployed to Amazon ECR. E. Sign the .zip file digitally. Create a new Lambda function by using the Lambda console. Update the configuration of the new Lambda function to include the Amazon Resource Name (ARN) of the code signing configuration.
‹ First<91011