A developer is deploying an AWS Lambda function that writes to Amazon DynamoDB. Amazon CloudWatch metrics tor the Lambda function show that errors have occurred during some invocations of tho function However, there are no entries available in the CloudWatch logs for the function. The source code for the function shows that the function writes tog data before saving data What should the developer do to address the missing CloudWatch log entries of the Lambda function?

Enable CloudWatch Lambda insigne Redeploy the Lambda function

Assign permissions to the Lambda function's execution role to send logs to CloudWatch

Enable CloudWatch Lambda insigne Redeploy the Lambda function

Use AWS X-Ray Enable active tracing

Add CloudWatch as the trusted identity to the Lambda function's execution role

A developer wants to run a PHP website with an NGINX proxy and package them as Docker containers in one environment. The developer wants a managed environment with automated provisioning and load balancing. The developer cannot change the configuration and must minimize operational overhead How should the developer build the website to meet these requirements?

Create a new application in AWS Elastic Beanstalk that is preconfigured for a multicontamer Docker environment Upload the code, and deploy it to a web server environment.

Deploy the code on Amazon HC? instances in an Auto Scaling group behind an Application I oad Balancer

Construct an AWS Cloud Formation template that launches Amazon EC2 instances Install and configure the PHP code by using cfn helper scripts

Upload the code for the PHP website into an Amazon S3 bucket Host the website from the S3 bucket.

A global company has a mobile app with static data stored in an Amazon S3 bucket in the us-east-1 Region. The company serves the content through an Amazon CloudFront distribution The company is launching the mobile app In South Africa The data must reside in the af south 1 Region The company does not want to deploy a specific, mobile client for South Africa What should the company do to meet these requirements?

Create a Lambda@Edge function Associate the Lambda@Edge function as an origin request trigger with the CloudFront distribution to change the S3 origin Region

Use the CloudFront geographic restriction feature to block access to users in South Africa

Create a Lambda@Edge function Associate the Lambda@Edge function as an origin request trigger with the CloudFront distribution to change the S3 origin Region

Create a Lambda@Edge function. Associate the Lambda@Edge function as a viewer response trigger with the CloudFront distribution to change the S3 origin Region

Include af-south-1 in the alternate domain name (CNAME) of the CloudFront distribution

A developer needs to deploy an application running on AWS Fargate using Amazon ECS The application has environment variables that must be passed to a container for the application to initialize How should the environment variables be passed to the container?

Define an array that includes the environment variables under the environment parameter within the task definition

Define an array that includes the environment variables under the environment parameter within the service definition

Define an array that includes the environment variables under the environment parameter within the task definition

Define an array that includes the environment variables under the entryPoint parameter within the task definition

Define an array that includes the environment variables under the entryPoint parameter within the service definition.

A developer received the following error message during an AWS Cloud Formation deployment: Which action should the developer lake lo resolve this error?

Add a DependsOn attribute to the ASGInstanceRole12345678 resource in the Cloud Formation template Then delete the stack

Contact AWS Support to report an Issue with the Auto Scaling Groups (ASG) service

Add a DependsOn attribute to the ASGInstanceRole12345678 resource in the Cloud Formation template Then delete the stack

Modify the CloudFormation template to retain the ASGInstanceRole12345678 resource Then manually delete the resource after deployment

Add a force parameter when calling CloudFormation with the role-am of ASGInstanceRoiei2345678

A company is hosting a workshop for external users and wants to share the reference documents with the external users for 7 days. The company stores the reference documents In an Amazon S3 bucket that the company owns. What is the MOST secure way to share the documents with the external users?

Use S3 presigned URLs to share the documents with the external users Set an expiration time of 7 days

Move the documents to an Amazon WorkDocs folder. Share the links of the WorkDocs folder with the external users.

Create temporary 1AM users that have read only access to the S3 bucket Share the access keys with the external users Expire the credentials alter 7 days

Create a role that has read-only access to the S3 bucket Share the Amazon Resource Name (ARN) of this role with the external users

A software company is using AWS CodeButld to build an application. The buildspec runs the application build and creates a Docker imago that contains the application The company needs to push the Docker imago to Amazon Elastic Container Registry (Amazon ECR) only upon the completion of each successful build Which solution meets these requirements?

Change the buildspec by adding a post_build phase that uses the commands block to push the Docker image

Change the buildspec by adding a post_build phase that uses the finally block to push the Docker image

Specify the Docker image in the buildspec's artifacts sequence with an action lo push the image

Use a batch build to define a build matrix Use the batch build to push the Docker image

A company has a serverless application that uses AWS Lambda functions and AWS Systems Manager parameters to store configuration data The company moves the Lambda functions inside the VPC and into private subnets The Lambda functions are now producing errors in their attempts to access Systems Manager parameters.Which solution will allow the Lambda functions to access Systems Manager parameters inside the VPC?

Create a gateway VPC endpoint for Systems Manager

Configure security groups to allow access to Systems Manager

Create an interface VPC endpoint for Systems Manager

Use an internet gateway from inside the VPC

Create a gateway VPC endpoint for Systems Manager

A developer has created an AWS Lambda function lo provide notification through Amazon Simple Notification Service (Amazon SNS) whenever a file is uploaded to Amazon S3 that is larger than 50 MB The developer has deployed and tested the Lambda function by using the CI I However, when the event notification is added to the S3 bucket and a 3.000 MB file is uploaded, the Lambda function does not launch Which of the following is a possible reason for the Lambda function's inability to launch?

The resource based policy for the Lambda function does not have the required permissions to be invoked by Amazon S3

The S3 event notification does not activate for files that are larger than 1.000 MB

The resource based policy for the Lambda function does not have the required permissions to be invoked by Amazon S3

Lambda functions cannot be invoked directly from an S3 event.

The S3 bucket needs to be made public

A company is running a web application that is using Amazon Cognito for authentication The company does not want to use multi-factor authentication (MFA) for all the visitors every time, but the company's security team has concerns about compromised credentials The development team needs to configure mandatory MFA only when suspicious sign in attempts are detected. Which Amazon Cognito feature will meet these requirements?

Short message service (SMS) text message MFA

Time-based one-time password (TOTP) software token MFA

A developer is receiving kttp 400 : ThrorclingExceprion errors intermittently when calling the Amazon CloudWatch API. When a call (ails, no data is retrieved What best practice should first be applied to address this issue?

Retry the call with exponential backoff

Contact AWS Support for a limit increase.

Use the AWS CLI to get the metrics

Analyze the applications and remove the API call

Retry the call with exponential backoff

A developer needs to build and deploy a serverless application that has an API that mobile clients will use. The API will use Amazon DynamoDB and Amazon OpenSearch Service (Amazon Elasticsearch Service) as data sources Responses that are sent to the clients will contain aggregated data from both data sources The developer must minimize the number of API endpoints and must minimize the number of API calls that are required to retrieve the necessary data Which solution should the developer use to meet these requirements?

GraphGL API on an Amazon EC2 instance

REST API on AWS Elastic Beanstalk

A company wants to migrate an existing on-premises web application to AWS. The existing technology stacks consist of configuration files, application code that connects to a MySQL database by using a language-specific MySQL API, and a source code repository that holds configuration files and program code A developer uses an Amazon RDS for MySQL DB instance as the target database The developer uses a container as the compute engine for the web application program code The developer wants to configure the database connection from the web application code to the new RDS for MySQL DB instance without refactoring the existing code The developer also must maximize security for the storage of the database user name and password pair that the application code uses Which combination of steps should the developer take to meet these requirements? (Select TWO )

Keep the existing database connectivity API code unchanged Change the database connection string URL to the endpoint of the RDS for MySQL DB instance

Use AWS Secrets Manager to store the database's user name and password pair Use the GetSecretValue API operation to retrieve the user name and password pair when the application makes MySQL DB API calls

Use the RDS software development kit (SDK) to construct a database client.

Keep the existing database connectivity API code unchanged Change the database connection string URL to the endpoint of the RDS for MySQL DB instance

Store the database's user name and password pair in the configuration files

Use AWS Secrets Manager to store the database's user name and password pair Use the GetSecretValue API operation to retrieve the user name and password pair when the application makes MySQL DB API calls

Use the environment variables of the container definition to pass the database's user name and password pair to the application code

Which of the following security resources are supplied by AWS? (Select TWO.)

Peer-to-peer file-sharing detection

A retail company is migrating its IT infrastructure applications from on premises to the AWS Cloud.Which costs will the company eliminate with this migration? (Select TWO.)

Cost of physical server hardware

A company needs a centralized, secure way to create and manage cryptographic keys. The company will use the keys across a wide range of AWS services and applications. The company needs to track and document when the keys are created, used, and deleted.Which AWS service or feature will meet these requirements?

AWS Key Management Service (AWS KMS)

AWS Systems Manager Parameter Store

AWS Key Management Service (AWS KMS)

A company wants to expand from one AWS Region into a second AWS Region. What does the company need to do to expand into the second Region?

Begin to deploy resources in the second Region.

Contact an AWS account manager to sign a new contract.

Move an Availability Zone to the second Region.

Begin to deploy resources in the second Region.

Download the AWS Management Console for the second Region.

Which of the following are AWS best practice recommendations for the use of AWS Identity and Access Management (IAM)? (Select TWO.)

Rotate credentials on a regular basis.

Configure multi-factor authentication (MFA).

Use the AWS account root user for daily access.

Use access keys and secret access keys on Amazon EC2.

Rotate credentials on a regular basis.

Create a shared set of access keys for system administrators.

Configure multi-factor authentication (MFA).

Which of the following are aspects of the AWS shared responsibility model? (Select TWO.)

Configuration management of infrastructure devices is the customerís responsibility.

AWS is responsible for protecting the physical cloud infrastructure.

Configuration management of infrastructure devices is the customerís responsibility.

For Amazon S3, AWS operates the infrastructure layer, the operating systems, and the platforms.

AWS is responsible for protecting the physical cloud infrastructure.

AWS is responsible for training the customerís employees on AWS products and services.

How does consolidated billing help reduce costs for a company that has multiple AWS accounts?

It aggregates usage across accounts so that the company can reach volume discount thresholds sooner.

It offers an additional 5% discount on purchases of All Upfront Reserved Instances.

It provides a simplified billing invoice that the company can process more quickly than a standard invoice.

It gives AWS resellers the ability to bill their customers for usage.

What is an AWS Region?

A physical location around the world where data centers are clustered

A broad set of global, cloud-based products that include compute, storage, and databases

A physical location around the world where data centers are clustered

One or more discrete data centers with redundant power, networking, and connectivity

A service that developers use to build applications that deliver latencies of single-digit milliseconds to userwww.VCEplus.is o

A company has existing software licenses that it wants to bring to AWS, but the licensing model requires licensing physical cores. How can the company meet this requirement in the AWS Cloud?

Launch an Amazon EC2 instance on a Dedicated Host.

Launch an Amazon EC2 instance with default tenancy.

Launch an Amazon EC2 instance on a Dedicated Host.

Create an On-Demand Capacity Reservation.

Purchase Dedicated Reserved Instances.

A company is using AWS Lambd a. Which task is the companyís responsibility, according to the AWS shared responsibility model?

Update the Lambda runtime language.

Maintain the runtime environment.

Maintain the networking infrastructure.

Which tasks require use of the AWS account root user? (Select TWO.)

Modifying an Amazon EC2 instance type

Grouping resources in AWS Systems Manager

Running applications in Amazon Elastic Kubernetes Service (Amazon EKS)

A company needs to schedule the rotation of database credentials in the AWS Cloud. Which AWS service should the company use to perform this task?

AWS Identity and Access Management (IAM)

Amazon CLF-C01 Practice Test 16 - Free Online Exam Questions 601-640

A developer has created a Java application that runs on AWS Elastic Beanstalk with the default Elastic Beanstalk instance profile. The developer needs to visualize a map of the application's interactions with AWS services to help identify and debug issues with the application Which combination of steps should the developer take to meet this requirement with the LEAST operational effort? (Select TWO.)

Become a Premium Member for full access

Unlock Premium Member

Amazon CLF-C01 Practice Test 16

Question

Amazon CLF-C01 Practice Tests

Practice Tests