Question 1

An application that runs on AWS receives messages from an Amazon Simple Queue Service (Amazon SQS) queue and processes the messages in batches. The application sends the data to another SQS queue to be consumed by another legacy application. The legacy system can take up to 5 minutes to process some transaction data. A developer wants to ensure that there are no out-of-order updates in the legacy system. The developer cannot alter the behavior of the legacy system. Which solution will meet these requirements?

Options :

A : Use an SQS FIFO queue. Configure the visibility timeout value.

B : Use an SQS standard queue with a SendMessageBatchRequestEntry data type. Configure the DelaySeconds values.

C : Use an SQS standard queue with a SendMessageBatchRequestEntry data type. Configure the visibility timeout value.

D : Use an SQS FIFO queue. Configure the DelaySeconds value.

Answer: A

Question 2

A Developer has updated an AWS Lambda function and published a new version. To ensure the code is working as expected the Developer needs to initially direct a percentage of traffic to the new version and gradually increase this over time. It is important to be able to rollback if there are any issues reported.

What is the BEST way the Developer can implement the migration to the new version SAFELY?

Options :

A : Use an immutable update with a new ASG to deploy the new version in parallel, following testing cutover to the new version

B : Create an Amazon Route 53 weighted routing policy pointing to the current and new versions, assign a lower weight to the new version

C : Create an Alias, assign the current and new versions and use traffic shifting to assign a percentage of traffic to the new version

D : Use an Amazon Elastic Load Balancer to direct a percentage of traffic to each target group containing the Lambda function versions

Answer: C

Question 3

An application uses multiple Lambda functions to write data to an Amazon RDS database. The Lambda functions must share the same connection string. What is the BEST solution to ensure security and operational efficiency?

Options :

A : Create a secure string parameter using AWS systems manager parameter store

B : Embed the connection string within the Lambda function code

C : Use a CloudHSM encrypted environment variable that is shared between the functions

D : Use KMS encrypted environment variables within each Lambda function

Answer: A

Question 4

An IT department uses Amazon S3 to store sensitive images. After more than 1 year, the company moves the images into archival storage. The company rarely accesses the images, but the company wants a storage solution that maximizes resiliency. The IT department needs access to the images that have been moved to archival storage within 24 hours.

Which solution will meet these requirements MOST cost-effectively?

Options :

A : Use S3 Standard-Infrequent Access (S3 Standard-IA) to store the images. Use S3 Glacier Deep Archive with standard retrieval to store and retrieve archived images.

B : Use S3 Standard-Infrequent Access (S3 Standard-IA) to store the images. Use S3 Glacier Deep Archive with bulk retrieval to store and retrieve archived images.

C : Use S3 Intelligent-Tiering to store the images. Use S3 Glacier Deep Archive with standard retrieval to store and retrieve archived images.

D : Use S3 One Zone-Infrequent Access (S3 One Zone-IA) to store the images. Use S3 Glacier Deep Archive with bulk retrieval to store and retrieve archived images.

Answer: D

Question 5

A developer created a web API that receives requests by using an internet-facing Application Load Balancer (ALB) with an HTTPS listener. The developer configures an Amazon Cognito user pool and wants to ensure that every request to the API is authenticated through Amazon Cognito.

What should the developer do to meet this requirement?

Options :

A : Add a listener rule to the listener to return a fixed response if the Authorization header is missing. Set the fixed response to 401 Unauthorized.

B : Create an authentication action for the listener rules of the ALSet the rule action type to authenticate-cognito. Set the OnUnauthenticatedRequest field to “deny.”

C : Create an Amazon API Gateway API. Configure all API methods to be forwarded to the ALB endpoint. Create an authorizer of the COGNITO_USER_POOLS type. Configure every API method to use that authorizer.

D : Create a new target group that includes an AWS Lambda function target that validates the Authorization header by using Amazon Cognito. Associate the target group with the listener.

Answer: B