A company has written a Java AWS Lambda function to be triggered whenever a user uploads an image to an Amazon S3 bucket. The function converts the original image to several different formats and then copies the resulting images to another Amazon S3 bucket.
The Developers find that no images are being copied to the second Amazon S3 bucket. They have tested the code on an Amazon EC2 instance with 1GB of RAM, and it takes an average of 500 seconds to complete.
What is the MOST likely cause of the problem?

• A.The Lambda function has insufficient memory and needs to be increased to 1 GB to match the Amazon EC2 instance
• B.Lambda functions have a maximum execution limit of 300 seconds, therefore the function is not completing.
• C.There is a problem with the Java runtime for Lambda, and the function needs to be converted to node.js.
• D.Files need to be copied to the same Amazon S3 bucket for processing, so the second bucket needs to be deleted.

Comment: *

Name: *

Email: *

Verification: *

A front-end web application is using Amazon Cognito user pools to handle the user authentication flow. A developer is integrating Amazon DynamoDB into the application using the AWS SDK for JavaScript How would the developer securely call the API without exposing the access or secret keys?

• A.Use Amazon Cognito user pool JSON Web Tokens (JWTs) to access the DynamoDB APIs.
• B.Hardcode the credentials use Amazon S3 to host the web application, and enable server-side encryption
• C.Run the web application in an Amazon EC2 instance with the instance profile configured
• D.Configure Amazon Cognito identity pools and exchange the JSON Web Token (JWT) for temporary credentials

Comment: *

Name: *

Email: *

Verification: *

A company is using Amazon API Gateway to manage its public-facing API. The CISO requires that the APIs be used by test account users only. What is the MOST secure way to restrict API access to users of this particular AWS account?

• A.Usage plans
• B.API Gateway resource policies
• C.Cross-origin resource sharing (CORS)
• D.Client-side SSL certificates for authentication

Comment: *

Name: *

Email: *

Verification: *

A developer is preparing a deployment package using AWS Cloud Formation. The package consists of two separate templates: one for the infrastructure and one for the application. The application has to be inside the VPC that is created from the infrastructure template How can the application stack refer to the VPC created from the infrastructure template?

• A.Use the DependsOn attribute to specify that the application instance depends on the VPC in the application template
• B.Use the export flag in the infrastructure template, and then use the Fn::lmportValue function in the application template
• C.Use the Ret function to import the VPC into the application stack from the infrastructure template
• D.Use the Fn::GetAtt function to include the attribute of the VPC in the application template.

Comment: *

Name: *

Email: *

Verification: *

A Developer wants to enable AWS X-Ray for a secure application that runs in an Amazon ECS environment.
What combination of steps will enable X-Ray? (Select THREE.)

• A.Create a Docker image that runs the X-Ray daemon.
• B.Add instrumentation to the application code for X-Ray.
• C.Install the X-Ray daemon on the underlying EC2 instance.
• D.Configure and use an IAM EC2 instance role.
• E.Register the application with X-Ray.
• F.Configure and use an IAM role for tasks.

Comment: *

Name: *

Email: *

Verification: *