A developer is building an application that runs behind an application Load Balancer (ALB). The application is configured as the origin for an Amazon CloudFront distribution. Users will log in to the application using their social media accounts.
How can the developer authenticate and authorize users?

• A.Configure the ALB to use Amazon Cognito as one of the authentication providers
• B.Authorize the users by calling the Amazon Cognito API in the AWS Lambda authorizer on the ALB
• C.Validate the user by inspecting the tokens using AWS Lambda authorizers on the ALB
• D.Configure Cloudfront to use Amazon Cognito as one of the authentication providers

Comment: *

Name: *

Email: *

Verification: *

A Developer decides lo store highly secure data in Amazon S3 and wants to implement server-side encryption (SSF) with granular control of who can access the master key Company policy requires that the master key be created, rotated, and disabled easily when needed, all for security reasons.
Which solution should be used to moot these requirements?

• A.SSE with Amazon S3 managed keys (SSE-S3)
• B.SSE with customer provided encryption keys
• C.SSE with AWS Secrets Manager
• D.SSFE with AWS KMS managed keys (SSE KMS)

Comment: *

Name: *

Email: *

Verification: *

A developer has built a market application that stores pricing data in Amazon DynamoDB with Amazon ElastiCache in front. The prices of items in the market change frequently Sellers have begun complaining that, after they update the price of an item, the price does not actually change in the product listing What could be causing this issue?

• A.The cache is not being invalidated when the price of the item is changed
• B.The price of the item is being retrieved using a write-through ElastiCache cluster
• C.The DynamoDB table was provisioned with insufficient write capacity.
• D.The DynamoDB table was provisioned with insufficient read capacity

Comment: *

Name: *

Email: *

Verification: *

A developer is automating a new application deployment with AWS Serverless Application Model (AWS SAM) The new application has one AWS Lambda function and one Amazon S3 bucket The Lambda function must access the S3 bucket to only read objects How should the developer configure AWS SAM to grant the necessary read privilege to the S3 bucket?

• A.Reference a second Lambda authonzer function
• B.Add a custom S3 bucket policy to the Lambda function
• C.Add the S3ReadPolicy template to the Lambda function's execution role
• D.Create an Amazon Simple Queue Service (SQS) topic for only S3 object reads Reference the topic in the template.

Comment: *

Name: *

Email: *

Verification: *

A company wants to make sure that only one user from its Admin group has the permanent right to delete an Amazon EC2 resource There should be no changes in the existing policy under the Admin group What should a developer use to meet these requirements?

• A.Inline policy
• B.AWS managed policy
• C.IAM trust relationship
• D.AWS Security Token Service (AWS STS)

Comment: *

Name: *

Email: *

Verification: *