A) US-STANDARD uses eventual consistency and it can take time for an object to be readable in a bucket
B) Objects in Amazon S3 do not become visible until they are replicated to a second region.
C) US-STANDARD imposes a 1 second delay before new objects are readable.
D) You exceeded the bucket object limit, and once this limit is raised the object will be visible.
Correct Answer
verified
Multiple Choice
A) HTTP
B) UDP
C) SMS
D) DynamoDB
E) Named Pipes
Correct Answer
verified
Multiple Choice
A) Use Amazon Cognito with web identity federation.
B) Use Amazon Cognito with SAML-based identity federation.
C) Use AWS IAM Access/Secret keys in the application code to allow Get* on the S3 bucket. Use AWS IAM Access/Secret keys in the application code to allow Get* on the S3 bucket.
D) Use AWS STS AssumeRole in the application code and assume a role with Get* permissions on the S3 bucket. Use AWS STS AssumeRole in the application code and assume a role with permissions on the S3 bucket.
Correct Answer
verified
Multiple Choice
A) Use the Amazon Cognito user pools to get short-lived credentials for the second account.
B) Create a dedicated IAM access key for the second account, and send it by mail.
C) Create a cross-account access role, and use sts:AssumeRole API to get short-lived credentials. Create a cross-account access role, and use sts:AssumeRole API to get short-lived credentials.
D) Establish trust, and add an SSH key for the second account to the IAM user.
Correct Answer
verified
Multiple Choice
A) Increase the amount of RAM allocated to the Lambda function, which will increase the number of threads the Lambda can use.
B) Increase the size of the RDS database to allow for an increased number of database connections each hour.
C) Move the database connection and close statement out of the handler. Place the connection in the global space.
D) Replace RDS wit Amazon DynamoDB to implement control over the number of writes per second.
Correct Answer
verified
Multiple Choice
A) Use the KMS Encrypt API to encrypt the data. Store the encrypted data key and data. Use the KMS Encrypt API to encrypt the data. Store the encrypted data key and data.
B) Use a cryptography library to generate an encryption key for the application. Use the encryption key to encrypt the data. Store the encrypted data.
C) Use the KMS GenerateDataKey API to get a data key. Encrypt the data with the data key. Store the encrypted data key and data. GenerateDataKey API to get a data key. Encrypt the data with the data key. Store the encrypted data key and data.
D) Upload the data to an S3 bucket using server side-encryption with an AWS KMS key.
Correct Answer
verified
Multiple Choice
A) Implement an AWS Lambda authorizer that references the DynamoDB authentication table
B) Create a model that requires the credentials, then grant API Gateway access to the authentication table
C) Modify the integration requests to require the credentials, then grant API Gateway access to the authentication table
D) Implement an Amazon Cognito authorizer that references the DynamoDB authentication table
Correct Answer
verified
Multiple Choice
A) All at once
B) Rolling
C) Rolling with additional batch
D) Immutable
Correct Answer
verified
Multiple Choice
A) Amazon API Gateway, Amazon S3
B) AWS Lambda, Amazon DynamoDB
C) Amazon EC2, Amazon Aurora
D) Amazon Cognito, Amazon RDS
E) Amazon ECS, Amazon EBS
Correct Answer
verified
Multiple Choice
A) Redeploy the function within the default VPC.
B) Increase the function's memory.
C) Redeploy the function by using Lambda layers.
D) Increase the function's reserved concurrency.
Correct Answer
verified
Multiple Choice
A) AWS Lambda@Edge
B) Amazon S3 Transfer Acceleration
C) Amazon DynamoDB Accelerator (DAX)
D) AWS Amplify with AWS AppSync
Correct Answer
verified
Multiple Choice
A) Lambda will scale out to execute the requests concurrently.
B) Lambda will handle the requests sequentially in the order received.
C) Lambda will process multiple images in a single execution.
D) Lambda will add more compute to each execution to reduce processing time.
Correct Answer
verified
Multiple Choice
A) Publish errors to a dedicated Amazon SQS queue.
B) Create an Amazon CloudWatch Events event trigger based on certain Lambda events.
C) Report errors through logging statements in Lambda function code.
D) Set up an Amazon SNS topic that sends logging statements upon failure.
Correct Answer
verified
Multiple Choice
A) Store the database credentials as encrypted parameters in AWS Systems Manager Parameters Store. Obtain the credentials from Systems Manager when the Lambda function needs to connect to the database.
B) Store the database credentials in AWS Secrets Manager. Let Secrets Manager handle the rotation of the credentials, as required.
C) Store the database credentials in an Amazon S3 bucket that has a restrictive bucket policy for the Lambda role when accessing the credentials. Use AWS KMS to encrypt the data.
D) Create a policy with rds-db:connect access to the database and attach it to the role assigned to the Lambda function.
Correct Answer
verified
Multiple Choice
A) S3 overwrite PUTS are eventually consistent, so the application may read the old object.
B) The application needs to add extra metadata to label the latest version when uploading to Amazon S3.
C) All S3 PUTS are eventually consistent, so the application may read the old object.
D) The application needs to explicitly specify latest version when retrieving the object.
Correct Answer
verified
Multiple Choice
A) Enable AWS CloudTrail logging and use the logs to map each latency and bottleneck.
B) Enable and configure AWS X-Ray tracing on API Gateway and the Lambda function. Use X-Ray to trace and analyze user requests.
C) Enable Amazon CloudWatch Logs for the Lambda function. Enable execution logs for API Gateway to view and analyze user request logs.
D) Enable VPC Flow Logs to capture and analyze network traffic within the VPC.
Correct Answer
verified
Multiple Choice
A) The last known good deployment is automatically restored using the snapshot stored in Amazon S3.
B) CodeDeploy switches the Amazon Route 53 alias records back to the known good green deployment and terminates the failed blue deployment.
C) A new deployment of the last known version of the application is deployed with a new deployment ID.
D) AWS CodePipeline promotes the most recent deployment with a SUCCEEDED status to production.
Correct Answer
verified
Multiple Choice
A) Update the policy of the IAM user to allow the s3:Encrypt action.
B) Update the bucket policy of the S3 bucket to allow the IAM user to upload objects.
C) Update the policy of the IAM user to allow the kms:GenerateDataKey action.
D) Update the ACL of the S3 bucket to allow the IAM user to upload objects.
Correct Answer
verified
Multiple Choice
A) Make a call to AWS KMS to decode the message.
B) Use the AWS STS decode-authorization-message API to decode the message.
C) Use an open source decoding library to decode the message.
D) Use the AWS IAM decode-authorization-message API to decode this message.
Correct Answer
verified
Multiple Choice
A) Amazon SQS
B) Amazon Cognito
C) Amazon Kinesis
D) Amazon SNS
E) Amazon ElastiCache
Correct Answer
verified
Showing 101 - 120 of 470
Related Exams