A developer is creating an AWS Lambda function that generates a new file each time it runs Each new file must be checked into an AWS CodeCommit repository hosted in the same AWS account How should the developer accomplish this?

Use an AWS SDK to instantiate a CodeCommit client Invoke the put_file method to add the file to the repository

When the Lambda function starts, use the Git CLI to clone the repository Check the new file into the cloned repository and push the change.

After the new file is created in Lambda, use cURL to invoke the CodeCommit API Send the file to the repository

Use an AWS SDK to instantiate a CodeCommit client Invoke the put_file method to add the file to the repository

Upload the new file to an Amazon S3 bucket Create an AWS Step Function to accept S3 events In the Step Function, add the new file to the repository

A company is using an AWS Lambda function to process records from an Amazon Kinesis data stream The company recently observed slow processing of the records .A developer notices that the iterator age metric for the function is increasing and that the Lambda run duration is constantly above normal.Which actions should the developer take to increase the processing speed? (Select TWO.)

Increase the number of shards of the Kinesis data stream.

Increase the memory that is allocated to the Lambda function

Increase the number of shards of the Kinesis data stream.

Decrease the timeout of the Lambda function

Increase the memory that is allocated to the Lambda function

Decrease the number of shards of the Kinesis data stream

Increase the timeout of the Lambda function.

A developer has created a web API that uses Amazon Elastic Container Service (Amazon ECS) and an Application Load Balancer (ALB) An Amazon CloudFront distribution uses the API as an origin for web clients The application has received millions of requests with a JSON Web Token (JWT) that is not valid in the authorization header The developer has scaled out the application to handle the unauthenticated requests What should the developer do to reduce the number of unauthenticated requests to the API?

Add a custom authorizer for AWS Lambda to the CloudFront distribution to validate the JWT

Add a request routing rule to the ALB to return a 401 status code if the authorization header is missing

Add a container to the ECS task definition to validate JWTs Set the new container as a dependency of the application container

Create a CloudFront function for the distribution Use the crypto module in the function to validate the JWT

Add a custom authorizer for AWS Lambda to the CloudFront distribution to validate the JWT

An application needs to encrypt data that is written to Amazon S3 where the keys are managed in an on-premises data center and the encryption is handled by S3 Which type of encryption should be used?

Use server-side encryption with customer-provided keys.

Use server-side encryption with Amazon S3-managed keys

Use server-side encryption with AWS KMS-managed keys

Use client-side encryption with AWS KMS-managed keys

Use server-side encryption with customer-provided keys.

A developer is writing a new AWS Serverless Application Model (AWS SAM) template with a new AWS Lambda function. The Lambda function runs complex code. T he developer wants to test the Lambda function with more CPU powerWhat should the developer do to meet this requirement?

Increase the runtime engine version

Increase the number of Lambda layers

A developer uses a single AWS CloudFormation template to configure the test environment and the production environment for an application The developer handles environment-specific requirements in the CloudFormation template. The developer decides to update the Amazon EC2 Auto Scaling launch template with new Amazon Machine Images (AMIs) for each environment The CloudFormation update for the new AMIs is successful in the test environment but the update fails in the production environment.What are the possible causes of the CloudFormation update failure in the production environment?(Select TWO )

The new AMIs do not fulfill the specified conditions in the CloudFormation template

The service quota for the number of EC2 vCPUs in the AWS Region has been exceeded. .

The new AMIs do not fulfill the specified conditions in the CloudFormation template

The service quota for the number of EC2 vCPUs in the AWS Region has been exceeded. .

The security group that is specified in the CloudFormation template does not exist

CloudFormation does not recognize the template change as an update

CloudFormation does not have sufficient 1AM permissions to make the changewww.VCEplus.is o

Given the source code for an AWS Lambda function in the local file store, py containing a handler function called get_store and the following AWS CloudFormation template: What should be done to prepare the template so that it can be deployed using the AWS CLI command aws cloudforroation deploy?

Use aws cloudformacion package to upload the source code to an Amazon S3 bucket and produce a modified CloudFormation template

Use aws cloudformacion compile to base64 encode and embed the source file into a modified CloudFormation template.

Use aws cloudformacion package to upload the source code to an Amazon S3 bucket and produce a modified CloudFormation template

Use aws lambda zip to package the source file together with the CloudFormation template and deploy the resulting zip archive

Use aws serveriess create-package to embed the source file directly into the existing CloudFormation template

A developer has a legacy application that is hosted on-premises Other applications hosted on AWS depend on the on-premises application for proper functioning In case of any application errors, the developer wants to be able to use Amazon CloudWatch to monitor and troubleshoot all applications from one place. How can the developer accomplish this?

Download the CloudWatch agent to the on-premises server Configure the agent to use I AM user credentials with permissions for CloudWatch

Install an AWS SDK on the on-premises server to automatically send logs to CloudWatch.

Download the CloudWatch agent to the on-premises server Configure the agent to use I AM user credentials with permissions for CloudWatch

Upload log files from the on-premises server to Amazon S3 and have CloudWatch read the files.

Upload log files from the on-premises server to an Amazon EC2 instance and have the instance forward the logs to CloudWatch

A developer is building a serverless application that is based on AWS Lambd a. The developer initializes the AWS software development kit (SDK) outside of the Lambda handler function. What is the PRIMARY benefit of this action?

Takes advantage of runtime environment reuse

Improves legibility and stylistic convention

Takes advantage of runtime environment reuse

Creates a new SDK instance for each invocation

A company has an application where reading objects from Amazon S3 is based on the type of user.The user types are registered user and guest user. The company has 25.000 users and is growing.Information is pulled from an S3 bucket depending on the user type.Which approaches are recommended to provide access to both user types? (Select TWO.)

Use Amazon Cognito to provide access using authenticated and unauthenticated roles

Use the AWS 1AM service and let the application assume the different roles using the AWS Security Token Service (AWS STS) AssumeRole action depending on the type of user and provide read access to Amazon S3 using theassumed role.

Provide a different access key and secret access key in the application code for registered users and guest users to provide read access to the objects.

Use S3 bucket policies to restrict read access to specific IAM users

Use Amazon Cognito to provide access using authenticated and unauthenticated roles

Create a new 1AM user for each user and grant read access

Use the AWS 1AM service and let the application assume the different roles using the AWS Security Token Service (AWS STS) AssumeRole action depending on the type of user and provide read access to Amazon S3 using theassumed role.

A company created an application to consume and process dat a. The application uses Amazon Simple Queue Service (Amazon SQS) and AWS Lambda functions.The application is currently working as expected, but it occasionally receives several messages that it cannot process properly The company needs to clear these messages to prevent the queue from becoming blocked A developer must implement a solution that makes queue processing always operational. The solution must give the company the ability to defer the messages with errors and save these messages for further analysis What is the MOST operationally efficient solution that meets these requirements?

Create a new SQS queue. Set the new queue as a dead-letter queue for the application queue Configure the Maximum Receives setting.

Configure Amazon CloudWatch Logs to save the error messages to a separate log stream

Create a new SQS queue. Set the new queue as a dead-letter queue for the application queue Configure the Maximum Receives setting.

Change the SQS queue to a FIFO queue Configure the message retention penod to 0 seconds

Configure an Amazon CloudWatch alarm for Lambda function errors Publish messages to an Amazon Simple Notification Service (Amazon SNS) topic to notify administrator users

A company is using Amazon RDS as the backend database for its application After a recent marketing campaign, a surge of read requests to the database increased the latency of data retrieval from the database. The company has decided to implement a caching layer in front of the database. The cached content must be encrypted and must be highly available Which solution will meet these requirements?

Amazon ElastiCache for Redis in cluster mode

Amazon ElastiCache for Memcached

Amazon ElastiCache for Redis in cluster mode

Amazon DynamoDB Accelerator (DAX)

An application running on Amazon EC2 opens connections to an Amazon RDS SQL Server database The developer does not want to store the user name and password for the database in the code. The developer would also like to automatically rotate the credentials.What is the MOST secure way to store and access the database credentials?

Use AWS Secrets Manager to store the credentials Retrieve the credentials from Secrets Manager as needed

Create an IAM role that has permissions to access the database Attach the role to the EC2 instance

Use AWS Secrets Manager to store the credentials Retrieve the credentials from Secrets Manager as needed

Store the credentials in an encrypted text file in an Amazon S3 bucket Configure the EC2 instance's user data to download the credentials from Amazon S3 as the instance boots.

Store the user name and password credentials directly in the source code No further action is needed because the source code is stored in a private repository

A developer is writing an application to analyze the traffic to a fleet of Amazon EC2 instances. The EC2 instances run behind a public Application Load Balancer (ALB) An HTTP server runs on each of the EC2 instances, logging all requests to a log file.The developer wants to capture the client public IP addresses. The developer analyzes the log files and notices only the IP address of the ALB What must the developer do to capture the client public IP addresses in the log file?

Add an X-Forwarded-For header to the HTTP server log configuration file

Add a Host header to the HTTP server log configuration file.

Install the Amazon CloudWatch Logs agent on each EC2 instance Configure the agent to write to the log filwww.VCEplus.ie o

Install the AWS X-Ray daemon on each EC2 instance. Configure the daemon to write to the log file

Add an X-Forwarded-For header to the HTTP server log configuration file

A developer is writing an application in Python. The application runs on AWS Lambd a. The application generates a file and needs to upload this file to Amazon S3. The developer must implement this upload functionality with the least possible change to the application code Which solution meets these requirements?

Use the AWS SDK for Python that is installed in the Lambda environment to upload the file

Make an HTTP request directly to the S3 API to upload the file

Include the AWS SDK for Python in the Lambda function Use the SDK to upload the file

Use the AWS SDK for Python that is installed in the Lambda environment to upload the file

Use the AWS CLI that is installed in the Lambda environment to upload the file

A company's ecommerce website is experiencing sudden and significant traffic changes that are causing performance problems in the company database. Users report that attempts to access the website are taking too long. A developer needs to implement a caching layer by using Amazon ElastiCache. The website must be responsive, no matter which product a user views Updates to product information and prices must be strongly consistent.Which cache-writing strategy will meet these requirements?

Write to the cache and the backend at the same time

Write to the cache directly Synchronize the backend later

Write to the backend first Wait for the cache to expire

Write to the cache and the backend at the same time

Write to the backend first. Then update the TTL of the item in the cache=

A developer needs to migrate an application from on premises to AWS. The application is written m PHP, uses a MySQL database, and has a small number of users. The application receives a significant load for 1 week each month The developer must minimize the cost of migrating and running the application Which solution will meet these requirements?

Migrate the database to an Amazon Aurora single-instance cluster Deploy the application on Amazon EC2 instances that are in an Auto Scaling group behind an Application Load Balancer (ALB) Set the Auto Scaling group's minimumcapacity to 1 Enable session affinity (sticky sessions) on the ALB

Migrate the database to an Amazon Aurora single-instance cluster Deploy the application on Amazon EC2 instances that are in an Auto Scaling group behind an Application Load Balancer Set the Auto Scaling group's minimum capacityto 1 Set up an Amazon ElastiCache for Memcached instance for sessions.

Redevelop the application to use serverless capabilities that include AWS Lambda. Amazon API Gateway, and Amazon Aurora Serverless Run the application code by using the standard Lambda PHP runtime environment Migrate thedatabase to Aurora Serverless

Migrate the database to an Amazon Aurora single-instance cluster Deploy the application on Amazon EC2 instances that are in an Auto Scaling group behind an Application Load Balancer (ALB) Set the Auto Scaling group's minimumcapacity to 1 Enable session affinity (sticky sessions) on the ALB

Migrate the application to an Amazon Aurora two-instance cluster. Deploy the application on Amazon EC2 instances that are in an Auto Scaling group behind an Application Load Balancer Set the Auto Scaling group's minimum capacityto 2 Set up an Amazon ElastiCache for Memcached twoinstance cluster.

An application runs on multiple EC2 instances behind an ELB.Where is the session data best written so that it can be served reliably across multiple requests?

Write data to Amazon ElastiCache.

Write data to Amazon Elastic Block Store

Write data to Amazon EC2 Instance Store

Write data to the root filesystem

A company is developing a report implemented using AWS Step Functions. Amazon CloudWatch shows errors in the Step Functions task state machine. To troubleshoot each task the state input needs to be included along with the error message in the state output.Which coding practice can preserve both the original input and the error for the state?

Use ResultPath in a Catch statement to include the error with the original input

Use InputPath in a Catch statement and set the value to null.

Use ErrorEquals in a Retry statement to include the error with the original input

Use OutputPath in a Retry statement and set the value to $.

A company is building an application for stock trading. The application needs sub-millisecond latency for processing trade requests. The company uses Amazon DynamoDB to store all the trading data that is used to process each trading request A development team performs load testing on the application and finds that the data retrieval time is higher than expected. The development team needs a solution that reduces the data retrieval time with the least possible effort Which solution meets these requirements?

Use DynamoDB Accelerator (DAX) to cache the trading data

Add local secondary indexes (LSIs) for the trading data

Store the trading data in Amazon S3 and use S3 Transfer Acceleration

Add retries with exponential backoff for DynamoDB queries

Use DynamoDB Accelerator (DAX) to cache the trading data

A static website is hosted in an Amazon S3 bucket Several HTML pages on the site use JavaScript to download images from another Amazon S3 bucket These images are not displayed when users browse the site. What is the possible cause for the issue?

Cross Origin Resource Sharing must be enabled on the Amazon S3 bucket

The referenced Amazon S3 bucket is in another region

The images must be stored in the same Amazon S3 bucket

Port 80 must be opened on the security group in which the Amazon S3 bucket is located

Cross Origin Resource Sharing must be enabled on the Amazon S3 bucket

A developer creates an AWS Lambda function to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic All message content must be encrypted in transit and at rest between Lambda and Amazon SNS. A part of the Lambda execution role is as follows: Which combination of steps should the developer take to meet these requirements'? (Select TWO.)

Enable server-side encryption on the SNS topic

Add a Deny statement to the Lambda execution role Specify the SNS topic ARN as the resource Specify "aws.SecureTransport" "false" as the condition.

Enable server-side encryption on the SNS topic

Add a Deny statement to the Lambda execution role Specify the SNS topic ARN as the resource Specify "aws.SecureTransport" "true" as the condition.

Create a VPC endpoint for Amazon SNS

Add a StringEquals condition of "sns Protocol" "https" to the Lambda execution role

Add a Deny statement to the Lambda execution role Specify the SNS topic ARN as the resource Specify "aws.SecureTransport" "false" as the condition.

A developer needs to use the AWS CLI on an on-premises development server temporarily to access AWS services while performing maintenance. The developer needs to authenticate to AWS with their identity for several hours. What is the MOST secure way to call AWS CLI commands with the developer's IAM identity?

Run the aws configure CLI command Provide the developer's IAM access key ID and secret access key

Specify the developer's IAM access key ID and secret access key as parameters for each CLI command

Run the aws configure CLI command Provide the developer's IAM access key ID and secret access key

Specify the developer's IAM profile as a parameter for each CLI command

Run the get-session-token CLI command with the developer's IAM user. Use the returned credentials to call the CLI

A developer created a Lambda function for a web application backend When testing the Lambda function from the AWS Lambda console, the developer can see that the function is being run, but there is no log data being generated in Amazon CloudWatch Logs, even after several minutes. What could cause this situation?

The execution role for the Lambda function is missing permissions to write log data to the CloudWatch Logs

The Lambda function does not have any explicit log statements for the log data to send it to CloudWatch Logs

The Lambda function is missing CloudWatch Logs as a source trigger to send log data

The execution role for the Lambda function is missing permissions to write log data to the CloudWatch Logs

The Lambda function is missing a target CloudWatch Log group

A developer is making changes to a custom application that uses AWS Elastic Beanstalk.Which solutions will update the Elastic Beanstalk environment with the new application version after the developer completes the changes? (Select TWO/)

Package the application code into a zip file. Use the AWS Management Console to upload the .zip file and deploy the packaged application.

Package the application code into a zip file Use the AWS CLI to create a new application version from the zip file and to update the environment

Package the application code into a zip file. Use the AWS Management Console to upload the .zip file and deploy the packaged application.

Package the application code into a tar file Use the AWS Management Console to create a new application version from the tar file. Update the environment by using the AWS CLI.

Package the application code into a tar file Use the AWS Management Console to upload the tar file and deploy the packaged application

Package the application code into a zip file Use the AWS CLI to create a new application version from the zip file and to update the environment

Package the application code into a zip file. Use the AWS Management Console to create a new application version from the .zip file. Rebuild the environment by using the AWS CLI.

A developer manages an application that interacts with Amazon RDS. Alter observing slow performance with read queries, the developer Implements Amazon ElastiCache to update the cache immediately following the primary database update.What will be the result of this approach to caching?

The cache will become large and expensive because the infrequently requested data is also written to the cache

Caching will increase the load on the database instance because the cache is updated for every database update.

Caching will slow performance of the read queries because the cache is updated when the cache cannot find the requested data

The cache will become large and expensive because the infrequently requested data is also written to the cache

Overhead will be added to the initial response time because the cache is updated only after a cache miss

A developer is testing a Docker-based application that uses the AWS SDK to interact with Amazon DynamoDB. In the local development environment the application has used 1AM access keys. The application is now ready for deployment onto an ECS cluster How should the application authenticate with AWS services in production?

Configure an ECS task 1AM role for the application to use

Refactor the application to call AWS STS AssumeRole based on an instance role

Configure AWS access key/secret access key environment variables with new credentials

Configure the credentials file with a new access key/secret access key

A company has dn application that analyzes photographs. A developer is preparing the application for deployment to Amazon EC2 instances. The application's image analysis functions require a mix of GPU instances and CPU instances that run on Amazon Linux. The developer needs to add code to the application so that the functions can determine whether they are running on a GPU instance What should the functions do to obtain this information?

Call the Descnbeinstances API operation and filter on the current instance ID Examine the EiasticGpuAssociations property

Evaluate the GPU_AVA1LABLE environment variable

Call the DescribeElasticGpus API operation

Retrieve the instance type from the instance metadata

A developer is creating a serverless web application and maintains different branches of code. The developer wants to avoid updating the Amazon API Gateway target endpoint each time a new code push is performed What solution would allow the developer to perform a code push efficiently, without the need to update the API Gateway'^

Create aliases and versions in AWS Lambda

Associate different AWS Lambda functions to an API Gateway target endpoint

Create different stages in API Gateway then associate API Gateway with AWSLambda.

Create aliases and versions in AWS Lambda

Tag the AWS Lambda functions with different names

An application running on multiple Amazon EC2 instances pulls messages from a standard Amazon SQS queue. A requirement for the application is that all messages must be encrypted at rest Developers are instructed to use methods that allow tor centralized key management and minimize possible support requirements whenever possible. Which of the following solutions supports these requirements?

Create an SQS queue and encrypt the queue by using server-side encryption with AWS KMS

Encrypt individual messages by using client-side encryption with customer managed keys, then write to the SQS queue

Encrypt individual messages by using SQS Extended Client and the Amazon S3 encryption client

Create an SQS queue and encrypt the queue by using server-side encryption with AWS KMS

Create an SQS queue, and encrypt the queue by using client-record encryption

An ecommerce company manages its application's infrastructure by using AWS Elastic Beanstalk. A developer wants to deploy the new version of the application with the least possible application downtime. The developer also must minimize the application's rollback time if there are issues with the deployment Which approach will meet these requirements?

Use a rolling deployment to deploy the new version

Use a rolling deployment with additional batches to deploy the new version

Use an all-at-once deployment to deploy the new version

A developer is adding a feature to a client-side application so that users can upload videos to an Amazon S3 bucket. What is the MOST secure way to give the application the ability to write files to the S3 bucket?

Create a new IAM policy and a corresponding 1AM user with permissions to write to the S3 bucket Store the key and the secret for the user in the application code Use the key to authenticate the video uploads

Update the S3 bucket policy to allow public write access. Allow any user to upload videos by removing the need to handle user authentication within the client-side application

Create a new IAM policy and a corresponding 1AM user with permissions to write to the S3 bucket Store the key and the secret for the user in the application code Use the key to authenticate the video uploads

Configure the API layer of the application to have a new endpoint that creates signed URLs that allow an object to be put into the S3 bucket Generate a presigned URL through this API call in the client application. Upload the video byusing the signed URL

Generate a new 1AM key and a corresponding secret by using the AWS account root user credentials Store the key and the secret for the user in the application code. Use the key to authenticate the video uploads

A development team is building a new application that will run on Amazon EC2 and use Amazon DynamoDB as a storage layer. The developers all have assigned IAM user accounts in the same IAM group The developers currently can launch EC2 instances, and they need to be able to launch EC2 instances with an instance role allowing access to Amazon DynamoDB Which AWS 1AM changes are needed when creating an instance role to provide this functionality?

Create an IAM permissions policy attached to the role that allows access to DynamoDB Add a trust policy to the role that allows Amazon EC2 to assume the role. Attach a permissions policy to the development group in AWS IAM thatallows developers to use the iam PassRole permission for the role

Create an iam permission policy attached to the role that allows access to DynamoDB Add a trust policy to the role that allows DynamoDB to assume the role Attach a permissions policy to the development group in AWS IAM that allowsdevelopers to use the lamGetRole and lamPassRole permissions for the role

Create an IAM permissions policy attached to the role that allows access to DynamoDB Add a trust policy to the role that allows Amazon EC2 to assume the role. Attach a permissions policy to the development group in AWS IAM thatallows developers to use the iam PassRole permission for the role

Create an IAM permission policy attached to the role that allows access to Amazon EC2. Add a trust policy to the role that allows DynamoDB to assume the role Attach a permissions policy to the development group in AWS IAM thatallows developers to use the iam PassRole permission for the role

Create an IAM permissions policy attached to the role that allows access to DynamoDB Add a trust policy to the role that allows Amazon EC2 to assume the role Attach a permissions policy to the development group in AWS IAM thatallows developers to use the iam GetRole permission for the role

Amazon CLF-C01 Practice Test 15 - Free Online Exam Questions 561-600

A company has a web application that runs on Amazon EC2 instances with a custom Amazon Machine Image (AMI) The company uses AWS CloudFormation to provision the application. The application runs in the us-east-1 Region, and the company needs to deploy the application to the uswest- 1 Region An attempt to create the AWS CloudFormation stack in us-west-1 fails An error message states that the AMI ID does not exist A developer must resolve this error with a solution that uses the least amount of operational overhead. Which solution meets these requirements?

Become a Premium Member for full access

Unlock Premium Member

Amazon CLF-C01 Practice Test 15

Question

Amazon CLF-C01 Practice Tests

Practice Tests