A company requires objects that are stored in Amazon S3 to be encrypted. The company is currently using server-side encryption with AWS KMS managed encryption keys (SSE-KMS) A developer needs to optimize the cost-effectiveness of the encryption mechanism without negatively affecting performance What should the developed to meet these requirements'?

• A.Change the encryption type to customer-provided keys
• B.Configure the S3 bucket to use an S3 Bucket Key for SSE-KMS
• C.Use a custom policy to limit the number of AWS KMS calls that are allowed
• D.Use S3 bucket policies to limit the principals who can create objects.

Comment: *

Name: *

Email: *

Verification: *

A Development team has pushed out 10 applications running on several Amazon EC2 instances. The Operations team is asking for a graphical representation of one key performance metric for each application.
These metrics should be available on one screen for easy monitoring.
Which steps should the Developer take to accomplish this using Amazon CloudWatch?

• A.Create a custom namespace with a unique metric name for each application.
• B.Create a custom dimension with a unique metric name for each application.
• C.Create a custom event with a unique metric name for each application.
• D.Create a custom alarm with a unique metric name for each application.

Comment: *

Name: *

Email: *

Verification: *

A company stores all personally identifiable information (PII) in an Amazon DynamoDB table named PII in Account A. An application running on Amazon EC2 instances in Account B requires access to the PII table.
An administrators in Account A created an IAM role named AccessPII with privileges to access the PII table, and made account B a trusted entity.
Which combination of actional steps should Developers take to access the table? (Select TWO )

• A.Include the AssumeRole API in the application code logic to obtain credentials to access the PlI table
• B.Ask an Administrator in Account B to allow the EC2 IAM role permission to assume the AccessPll role with predefined service control policies
• C.Include the GetSession token API in the application code logic to obtain credentials to access the Pll table
• D.Ask an Administrator in Account A to allow the EG2 IAM role permission to assume the AccessPII role with predefined service control policies.
• E.Ask an Administrator in Account B to allow the EC2 IAM role permission to assume the AccessPII role

Comment: *

Name: *

Email: *

Verification: *

A Developer must analyze performance issues with production-distributed applications written as AWS Lambda functions. These distributed Lambda applications invoke other components that make up the applications.
How should the Developer identify and troubleshoot the root cause of the performance issues in production?

• A.Add logging statements to the Lambda functions, then use Amazon CloudWatch to view the logs.
• B.Use AWS Cloud Trail and then examine the logs
• C.Use AWS X-Ray, then examine the segments and errors
• D.Run Amazon Inspector agents and then analyze performance

Comment: *

Name: *

Email: *

Verification: *

A developer wants to build an application that will allow new users to register and create new user accounts.
The application must also allow users with social media accounts to log in using their social media credentials.
Which AWS service or feature can be used to meet these requirements?

• A.Amazon Cognito identity pools
• B.AWS Directory Service
• C.Amazon Cognito user pools
• D.AWS IAM

Comment: *

Name: *

Email: *

Verification: *