A Developer is creating a Lambda function that will generate and export a file. The function requires 100 MB of temporary storage for temporary files while executing. These files will not be needed after the function is complete. How can the Developer MOST efficiently handle the temporary files?

Store the files in the /tmp directory and delete the files at the end of the Lambda function.

Store the files in EBS and delete the files at the end of the Lambda function.

Copy the files to EFS and delete the files at the end of the Lambda function.

Store the files in the /tmp directory and delete the files at the end of the Lambda function.

Copy the files to an S3 bucket with a lifecycle policy to delete the files.

An organization is using Amazon CloudFront to ensure that its users experience low-latency access to its web application. The organization has identified a need to encrypt all traffic between users and CloudFront, and all traffic between CloudFront and the web application.How can these requirements be met? (Choose two.)

Use AWS KMS to encrypt traffic between CloudFront and the web application.

Set the Origin Protocol Policy to “HTTPS Only”.

Use AWS KMS to encrypt traffic between CloudFront and the web application.

Set the Origin Protocol Policy to “HTTPS Only”.

Set the Origin’s HTTP Port to 443.

Set the Viewer Protocol Policy to “HTTPS Only” or “Redirect HTTP to HTTPS”.

Enable the CloudFront option Restrict Viewer Access.

A web application is designed to allow new users to create accounts using their email addresses. The application will store attributes for each user, and is expecting millions of user to sign up. What should the Developer implement to achieve the design goals?

AWS Mobile Hub user data storage

A company needs a new REST API that can return information about the contents of an Amazon S3 bucket, such as a count of the objects stored in it. The company has decided that the new API should be written as a microservice using AWS Lambda and Amazon API Gateway.How should the Developer ensure that the microservice has the necessary access to the Amazon S3 bucket, while adhering to security best practices?

Create an IAM role that has permissions to access the Amazon S3 bucket and assign it to the Lambda function as its execution role.

Create an IAM user that has permissions to access the Amazon S3 bucket, and store the IAM user credentials in the Lambda function source code.

Create an IAM role that has permissions to access the Amazon S3 bucket and assign it to the Lambda function as its execution role.

Create an Amazon S3 bucket policy that specifies the Lambda service as its principal and assign it to the Amazon S3 bucket.

Create an IAM role, attach the AmazonS3FullAccess managed policy to it, and assign the role to the Lambda function as its execution role.

An application is running on an EC2 instance. The Developer wants to store an application metric in Amazon CloudWatch. What is the best practice for implementing this requirement?

Use the CloudWatch PutMetricData API call to submit a custom metric to CloudWatch. Launch the EC2 instance with the required IAM role to enable the API call.

Use the PUT Object API call to send data to an S3 bucket. Use an event notification to invoke a Lambda function to publish data to CloudWatch.

Publish the metric data to an Amazon Kinesis Stream using a PutRecord API call. Subscribe a Lambda function that publishes data to CloudWatch.

Use the CloudWatch PutMetricData API call to submit a custom metric to CloudWatch. Provide the required credentials to enable the API call.

Use the CloudWatch PutMetricData API call to submit a custom metric to CloudWatch. Launch the EC2 instance with the required IAM role to enable the API call.

Queries to an Amazon DynamoDB table are consuming a large amount of read capacity. The table has a significant number of large attributes. The application does not need all of the attribute data. How can DynamoDB costs be minimized while maximizing application performance?

Implement exponential backoffs in the application.

Batch all the writes, and perform the write operations when no or few reads are being performed.

Create a global secondary index with a minimum set of projected attributes.

Implement exponential backoffs in the application.

Load balance the reads to the table using an Application Load Balancer.

AWS CodeBuild builds code for an application, creates the Docker image, pushes the image to Amazon Elastic Container Registry (Amazon ECR), and tags the image with a unique identifier. If the Developers already have AWS CLI configured on their workstations, how can the Docker images be pulled to the workstations?

Run the output of the following:aws ecr get-loginand then run:docker pull REPOSITORY URI : TAG

Run the following:docker pull REPOSITORY URI : TAG

Run the output of the following:aws ecr get-loginand then run:docker pull REPOSITORY URI : TAG

Run the following:aws ecr get-loginand then run:docker pull REPOSITORY URI : TAG

Run the output of the following:aws ecr get-download-url-for-layerand then run:docker pull REPOSITORY URI : TAG

A company caches session information for a web application in an Amazon DynamoDB table. The company wants an automated way to delete old items from the table. What is the simplest way to do this?

Add an attribute with the expiration time; enable the Time To Live feature based on that attribute.

Write a script that deletes old records; schedule the scripts as a cron job on an Amazon EC2 instance.

Add an attribute with the expiration time; enable the Time To Live feature based on that attribute.

Each day, create a new table to hold session data; delete the previous day’s table.

Add an attribute with the expiration time; name the attribute ItemExpiration.

An application is expected to process many files. Each file takes four minutes to process each AWS Lambda invocation. The Lambda function does not return any important data. What is the fastest way to process all the files?

Make asynchronous Event Lambda invocations and process the files in parallel.

First split the files to make them smaller, then process with synchronous RequestResponse Lambda invocations.

Make synchronous RequestResponse Lambda invocations and process the files one by one.

Make asynchronous Event Lambda invocations and process the files in parallel.

First join all the files, then process it all at once with an asynchronous Event Lambda invocation.

The upload of a 15 GB object to Amazon S3 fails. The error message reads: “Your proposed upload exceeds the maximum allowed object size.” What technique will allow the Developer to upload this object?

Upload the object using the multi-part upload API.

Upload the object over an AWS Direct Connect connection.

Contact AWS Support to increase the object size limit.

Upload the object to another AWS region.

A company has an AWS CloudFormation template that is stored as a single file. The template is able to launch and create a full infrastructure stack. Which best practice would increase the maintainability of the template?

Use nested stacks for common template patterns.

Embed credentials to prevent typos.

Remove mappings to decrease the number of variables.

Use AWS::Include to reference publicly-hosted template files.

A Developer wants to encrypt new objects that are being uploaded to an Amazon S3 bucket by an application. There must be an audit trail of who has used the key during this process. There should be no change to the performance of the application.Which type of encryption meets these requirements?

Server-side encryption with AWS KMS-managed keys

Server-side encryption using S3-managed keys

Server-side encryption with AWS KMS-managed keys

Client-side encryption with a client-side symmetric master key

Client-side encryption with AWS KMS-managed keys

An on-premises application makes repeated calls to store files to Amazon S3. As usage of the application has increased, “LimitExceeded” errors are being logged. What should be changed to fix this error?

Implement exponential backoffs in the application.

Load balance the application to multiple servers.

Move the application to Amazon EC2.

Add a one second delay to each API call.

A stock market monitoring application uses Amazon Kinesis for data ingestion. During simulated tests of peak data rates, the Kinesis stream cannot keep up with the incoming data. What step will allow Kinesis to accommodate the traffic during peak hours?

Increase the shard count of the stream using UpdateShardCount.

Install the Kinesis Producer Library (KPL) for ingesting data into the stream.

Reduce the data retention period to allow for more data ingestion using DecreaseStreamRetentionPeriod.

Increase the shard count of the stream using UpdateShardCount.

Ingest multiple records into the stream in a single call using PutRecords.

Where can PortMapping be defined when launching containers in Amazon ECS?

Amazon Elastic Container Registry (Amzon ECR)

A Development team is working on a case management solution that allows medical claims to be processed and reviewed. Users log in to provide information related to their medical and financial situations. As part of the application, sensitive documents such as medical records, medical imaging, bank statements, and receipts are uploaded to Amazon S3. All documents must be securely transmitted and stored. All access to the documents must be recorded for auditing.What is the MOST secure approach?

Use S3 default encryption using Advanced Encryption Standard-256 (AES-256) on the destination bucket.

Use Amazon Cognito for authorization and authentication to ensure the security of the application and documents.

Use AWS Lambda to encrypt and decrypt objects as they are placed into the S3 bucket.

Use client-side encryption/decryption with Amazon S3 and AWS KMS.

An Amazon RDS database instance is used by many applications to look up historical dat a. The query rate is relatively constant. When the historical data is updated each day, the resulting write traffic slows the read query performance and affects all application users.What can be done to eliminate the performance impact on application users?

Create an RDS Read Replica and direct all read traffic to the replica.

Make sure Amazon RDS is Multi-AZ so it can better absorb increased traffic.

Create an RDS Read Replica and direct all read traffic to the replica.

Implement Amazon ElastiCache in front of Amazon RDS to buffer the write traffic.

Use Amazon DynamoDB instead of Amazon RDS to buffer the read traffic.

A company wants to implement authentication for its new REST service using Amazon API Gateway.To authenticate the calls, each request must include HTTP headers with a client ID and user ID. Thesecredentials must be compared to authentication data in an Amazon DynamoDB table. What MUST the company do to implement this authentication in API Gateway?

Implement an AWS Lambda authorizer that references the DynamoDB authentication table

Create a model that requires the credentials, then grant API Gateway access to the authentication table

Modify the integration requests to require the credentials, then grant API Gateway access to the authentication table

Implement an Amazon Cognito authorizer that references the DynamoDB authentication table

A company is creating a REST service using an Amazon API Gateway with AWS Lambda integration.The service must run different versions for testing purposes.What would be the BEST way to accomplish this?

Use an X-Version header to denote which version is being called and pass that header to the Lambda function(s)

Create an API Gateway Lambda authorizer to route API clients to the correct API version

Create an API Gateway resource policy to isolate versions and provide context to the Lambda function(s)

Deploy the API versions as unique stages with unique endpoints and use stage variables to provide further context

A Developer is storing sensitive documents in Amazon S3 that will require encryption at rest. The encryption keys must be rotated annually, at least. What is the easiest way to achieve this?

Use AWS KMS with automatic key rotation

Encrypt the data before sending it to Amazon S3

Import a custom key into AWS KMS with annual rotation enabled

Use AWS KMS with automatic key rotation

Export a key from AWS KMS to encrypt the data

When developing an AWS Lambda function that processes Amazon Kinesis Data Streams, Administrators within the company must receive a notice that includes the processed data. How should the Developer write the function to send processed data to the Administrators?

Publish the processed data to an Amazon SNS topic

Separate the Lambda handler from the core logic

Use Amazon CloudWatch Events to send the processed data

Publish the processed data to an Amazon SNS topic

Push the processed data to Amazon SQS

A Developer is writing a REST service that will add items to a shopping list. The service is built on Amazon API Gateway with AWS Lambda integrations. The shopping list items are send as query string parameters in the method request. How should the Developer convert the query string parameters to arguments for the Lambda function?

Include the Amazon Resource Name (ARN) of the Lambda function

A Development team would like to migrate their existing application code from a GitHub repository to AWS CodeCommit. What needs to be created before they can migrate a cloned repository to CodeCommit over HTTPS?

A set of Git credentials generated from IAM

A GitHub secure authentication token

A public and private SSH key file

A set of Git credentials generated from IAM

An Amazon EC2 IAM role with CodeCommit permissions

A Developer must encrypt a 100-GB object using AWS KMS.What is the BEST approach?

Make a GenerateDataKeyWithoutPlaintext API call that returns an encrypted copy of a data key.Use an encrypted key to encrypt the data

Make an Encrypt API call to encrypt the plaintext data as ciphertext using a customer master key (CMK)

Make an Encrypt API call to encrypt the plaintext data as ciphertext using a customer master key (CMK) with imported key material

Make a GenerateDataKey API call that returns a plaintext key and an encrypted copy of a data key. Use a plaintext key to encrypt the data

Make a GenerateDataKeyWithoutPlaintext API call that returns an encrypted copy of a data key.Use an encrypted key to encrypt the data

A team of Developers must migrate an application running inside an AWS Elastic Beanstalk environment from a Classic Load Balancer to an Application Load Balancer. Which steps should be taken to accomplish the task using the AWS Management Console?

Select a new load balancer type before running the deployment.

1. Update the application code in the existing deployment.

Select a new load balancer type before running the deployment.

Deploy the new version of the application code to the environment.

1. Create a new environment with the same configurations except for the load balancer type.

Deploy the same application version as used in the original environment.

Run the swap-environment-cnames action.

1. Clone the existing environment, changing the associated load balancer type.

Deploy the same application version as used in the original environment.

Run the swap-environment-cnames action.

1. Edit the environment definitions in the existing deployment.

A Development team wants to instrument their code to provide more detailed information to AWS XQuestions & Answers PDF P-99 Ray than simple outgoing and incoming requests. This will generate large amounts of data, so the Development team wants to implement indexing so they can filter the data.What should the Development team do to achieve this?

Add annotations to the segment document and the code

Add metadata to the segment document and the code

Configure the necessary X-Ray environment variables

Install required plugins for the appropriate AWS SDK

A Developer created a new AWS account and must create a scalable AWS Lambda function that meets the following requirements for concurrent execution:Average execution time of 100 seconds50 requests per secondWhich step must be taken prior to deployment to prevent errors?

Contact AWS Support to increase the concurrent execution limits

Implement dead-letter queues to capture invocation errors

Add an event source from Amazon API Gateway to the Lambda function

Implement error handling within the application code

Contact AWS Support to increase the concurrent execution limits

An Amazon DynamoDB table uses a Global Secondary Index (GSI) to support read queries. The primary table is write-heavy, whereas the GSI is used for read operations. Looking at Amazon CloudWatch metrics, the Developer notices that write operations to the primary table are throttled frequently under heavy write activity. However, write capacity units to the primary table are available and not fully consumed. Why is the table being throttled?

The GSI write capacity units are underprovisioned

There are not enough read capacity units on the primary table

Amazon DynamoDB Streams is not enabled on the table

A large write operation is being performed against another table

A Developer is building a three-tier web application that should be able to handle a minimum of 5000 requests per minute. Requirements state that the web tier should be completely stateless while the application maintains session state for the users.How can session data be externalized, keeping latency at the LOWEST possible value?

Create an Amazon RDS instance, then implement session handling at the application level to leverage a database inside the RDS database instance for session data storage

Implement a shared file system solution across the underlying Amazon EC2 instances, then implement session handling at the application level to leverage the shared file system for session data storage

Create an Amazon ElastiCache Memcached cluster, then implement session handling at the application level to leverage the cluster for session data storage