A developer is receiving an intermittent ProvisionedThroughputExceededException error from an application that is based on Amazon DynamoDB. According to the Amazon CloudWatch metrics for the table, the application is not exceeding the provisioned throughput. What could be the cause of the issue?

• A.The DynamoDB table storage size is larger than the provisioned size.
• B.The application is exceeding capacity on a particular hash key.
• C.The DynamoDB table is exceeding the provisioned scaling operations.
• D.The application is exceeding capacity on a particular sort key.

Comment: *

Name: *

Email: *

Verification: *

A company has an Amazon S3 bucket that contains sensitive dat
a. The data must be encrypted in transit and at rest. The company encrypts the data in the S3 bucket by using an AWS Key Management Service (AWS KMS) key. A developer needs to grant several other AWS accounts the permission to use the S3 GetObject operation to retrieve the data from the S3 bucket.
How can the developer enforce that all requests to retrieve the data provide encryption in transit?

• A.Define a resource-based policy on the S3 bucket to deny access when a request meets the condition "aws:SecureTransport": "false".
• B.Define a resource-based policy on the S3 bucket to allow access when a request meets the condition "aws:SecureTransport": "false".
• C.Define a role-based policy on the other accounts' roles to deny access when a request meets the condition of "aws:SecureTransport": "false".
• D.Define a resource-based policy on the KMS key to deny access when a request meets the condition of "aws:SecureTransport": "false".

Comment: *

Name: *

Email: *

Verification: *

A company used AWS to develop an application for customers. The application includes an Amazon API Gateway API that invokes AWS Lambda functions. The Lambda functions process data and store the data in Amazon DynamoDB tables.
The company must monitor the entire application to identify potential bottlenecks in the architecture that can negatively affect customers.
Which solution will meet this requirement with the LEAST development effort?

• A.Configure API Gateway to log responses to Amazon CloudWatch. Create a metric filter for the TooManyRequestsException error message.
• B.Configure Lambda exceptions and additional logging to Amazon CloudWatch. Use CloudWatch Logs Insights to query the logs.
• C.Instrument the application with AWS X-Ray. Inspect the service map to identify errors and issues.
• D.Use Amazon CloudWatch metrics for the DynamoDB tables to identify all the ProvisionedThroughputExceededException error messages.

Comment: *

Name: *

Email: *

Verification: *

An application that runs on AWS Lambda requires access to specific highly confidential objects in an Amazon S3 bucket. In accordance with the principle of least privilege, a company grants access to the S3 bucket by using only temporary credentials.
How can a developer configure access to the S3 bucket in the MOST secure way?

• A.Hardcode the credentials that are required to access the S3 objects in the application code. Use the credentials to access the required S3 objects.
• B.Create a secret access key and access key ID with permission to access the S3 bucket. Store the key and key ID in AWS Secrets Manager. Configure the application to retrieve the Secrets Manager secret and use the credentials to access the S3 objects.
• C.Create a Lambda function execution role. Attach a policy to the role that grants access to specific objects in the S3 bucket.
• D.Create a secret access key and access key ID with permission to access the S3 bucket. Store the key and key ID as environment variables in Lambda. Use the environment variables to access the required S3 objects.

Comment: *

Name: *

Email: *

Verification: *

A developer accesses AWS CodeCommit over SSH. The SSH keys configured to access AWS CodeCommit are tied to a user with the following permissions:

The developer needs to create/delete branches
Which specific IAM permissions need to be added based on the principle of least privilege?

• A.Option A
• B.Option B
• C.Option C
• D.Option D

Comment: *

Name: *

Email: *

Verification: *