A web application is using Amazon Kinesis Streams for clickstream data that may not be consumed for up to 12 hours.
How can the Developer implement encryption at rest for data within the Kinesis Streams?

• A.Enable SSL connections to Kinesis
• B.Use Amazon Kinesis Consumer Library
• C.Encrypt the data once it is at rest with a Lambda function
• D.Enable server-side encryption in Kinesis Streams

Comment: *

Name: *

Email: *

Verification: *

An existing serverless application processes uploaded image files. The process currently uses a single Lambda function that takes an image file, performs the processing, and stores the file in Amazon S3. Users of the application now require thumbnail generation of the images. Users want to avoid any impact to the time it takes to perform the image uploads.
How can thumbnail generation be added to the application, meeting user requirements while minimizing changes to existing code?

• A.Change the existing Lambda function handling the uploads to create thumbnails at the time of upload. Have the function store both the image and thumbnail in Amazon S3.
• B.Create a second Lambda function that handles thumbnail generation and storage. Change the existing Lambda function to invoke it asynchronously.
• C.Create an S3 event notification with a Lambda function destination. Create a new Lambda function to generate and store thumbnails.
• D.Create an S3 event notification to an SQS Queue. Create a scheduled Lambda function that processes the queue, and generates and stores thumbnails.

Comment: *

Name: *

Email: *

Verification: *

A Developer is working on an application that handles 10MB documents that contain highly-sensitive dat a. The application will use AWS KMS to perform client-side encryption.
What steps must be followed?

• A.Invoke the Encrypt API passing the plaintext data that must be encrypted, then reference the customer managed key ARN in the KeyId parameter
• B.Invoke the GenerateRandom API to get a data encryption key, then use the data encryption key to encrypt the data
• C.Invoke the GenerateDataKey API to retrieve the encrypted version of the data encryption key to encrypt the data
• D.Invoke the GenerateDataKey API to retrieve the plaintext version of the data encryption key to encrypt the data

Comment: *

Name: *

Email: *

Verification: *

An AWS Lambda function must read data from an Amazon RDS MySQL database in a VPC and also reach a public endpoint over the internet to get additional data.
Which steps must be taken to allow the function to access both the RDS resource and the public endpoint? (Select TWO.)

• A.Add a NAT Gateway to the VPC.
• B.Add an environmental variable to the Lambda function to allow outbound internet access.
• C.Modify the default network access control list to allow outbound traffic.
• D.Modify the default configuration for the Lambda function to associate it with an Amazon VPC private subnet.
• E.Modify the default configuration of the Lambda function to associate it with a VPC public subnet.

Comment: *

Name: *

Email: *

Verification: *

An e-commerce web application that shares session state on-premises is being migrated to AWS. The application must be fault tolerant, natively highly scalable, and any service interruption should not affect the user experience.
What is the best option to store the session state?

• A.Store the session state in Amazon ElastiCache
• B.Store the session state in Amazon CloudFront
• C.Store the session state in Amazon S3
• D.Enable session stickiness using elastic load balancers

Comment: *

Name: *

Email: *

Verification: *