A developer is writing a web application that must share secure documents with end users. The documents are stored in a private Amazon S3 bucket. The application must allow only authenticated users to download specific documents when requested, and only for a duration of 15 minutes.
How can the developer meet these requirements?

• A.Modify the S3 bucket policy to only allow specific users to download the documents. Revert the change after 15 minutes.
• B.Use server-side encryption with AWS KMS managed keys (SSE-KMS) and download the documents using HTTPS.
• C.Create a presigned S3 URL using the AWS SDK with an expiration time of 15 minutes.
• D.Copy the documents to a separate S3 bucket that has a lifecycle policy for deletion after 15 minutes.

Comment: *

Name: *

Email: *

Verification: *

A developer is designing a fault-tolerant environment where client sessions will be saved.
How can the developer ensure that no sessions are lost if an Amazon EC2 instance fails?

• A.Use sticky sessions with an Elastic Load Balancer target group.
• B.Use Amazon DynamoDB to perform scalable session handling.
• C.Use Elastic Load Balancer connection draining to stop sending requests to failing instances.
• D.Use Amazon SOS to save session data.

Comment: *

Name: *

Email: *

Verification: *

A company is using Amazon API Gateway to invoke a new AWS Lambda function The company has Lambda function versions in its PROD and DEV environments. In each environment, there is a Lambda function alias pointing to the corresponding Lambda function version API Gateway has one stage that is configured to point at the PROD alias The company wants to configure API Gateway to enable the PROD and DEV Lambda function versions to be simultaneously and distinctly available Which solution will meet these requirements?

• A.Enable a Lambda authorizer for the Lambda function alias in API Gateway Republish PROD and create a new stage for DEV Create API Gateway stage variables for the PROD and DEV stages. Point each stage variable to the PROD Lambda authorizer to the DEV Lambda authorizer.
• B.Set up a gateway response in API Gateway for the Lambda function alias. Republish PROD and create a new stage for DEV. Create gateway responses in API Gateway for PROD and DEV Lambda aliases
• C.Use an environment variable for the Lambda function alias in API Gateway. Republish PROD and create a new stage for development. Create API gateway environment variables for PROD and DEV stages. Point each stage variable to the PROD Lambda function alias to the DEV Lambda function alias.
• D.Use an API Gateway stage variable to configure the Lambda function alias Republish PROD and create a new stage for development Create API Gateway stage variables for PROD and DEV stages Point each stage variable to the PROD Lambda function alias and to the DEV Lambda function alias

Comment: *

Name: *

Email: *

Verification: *

A developer is creating a new batch application that will run on an Amazon EC2 instance. The application requires read access to an Amazon S3 bucket. The developer needs to follow security best practices to grant S3 read access to the application.
Which solution meets these requirements?

• A.Add the permissions to an 1AM policy. Attach the policy to a user. Attach the user to the EC2 instance profile.
• B.Add the permissions to an 1AM policy. Use 1AM web identity federation to access the S3 bucket with the policy.
• C.Add the permissions to an 1AM policy. Attach the policy to a role. Attach the role to the EC2 instance profile.
• D.Add the permissions inline to an 1AM group. Attach the group to the EC2 instance profile.

Comment: *

Name: *

Email: *

Verification: *

A gaming application stores scores for players in an Amazon DynamoDB table that has four attributes: user_id, user_name, user_score, and user_rank. The users are allowed to update their names only. A user is authenticated by web identity federation.
Which set of conditions should be added in the policy attached to the role for the dynamodb:PutItem API call?

• A."Condition": {
  "ForAllValues:StringEquals": {
  "dynamodb:LeadingKeys": ["${www.amazon.com:user_id}"],
  "dynamodb:Attributes": ["user_name"]
  }
  }
• B."Condition": {
  "ForAllValues:StringEquals": {
  "dynamodb:LeadingKeys": ["${www.amazon.com:user_name}"],
  "dynamodb:Attributes": ["user_id"]
  }
  }
• C."Condition": {
  "ForAllValues:StringEquals": {
  "dynamodb:LeadingKeys": ["${www.amazon.com:user_id}"],
  "dynamodb:Attributes": ["user_name", "user_id"]
  }
  }
• D."Condition": {
  "ForAllValues:StringEquals": {
  "dynamodb:LeadingKeys": ["${www.amazon.com:user_name}"],
  "dynamodb:Attributes": ["username", "userid"]
  }
  }

Comment: *

Name: *

Email: *

Verification: *