A developer is preparing to deploy an AWS CloudFormation stack for an application from a template that includes an IAM user.
The developer needs to configure the application's resources to retain the IAM user after successful creation. However, the developer also needs to configure the application to delete the IAM user if the stack rolls back.

• A.Update CloudFormation template with the following deletion policy:
  AWSTemplateFormatVersion: '2010-05-09'
  Resources:
  appUser:
  Type: AWS::IAM::User
  DeletionPolicy: Retain
• B.Update CloudFormation template with the following deletion policy:
  AWSTemplateFormatVersion: '2010-09-09'
  Resources:
  appUser:
  Type: AWS::IAM::User
  DeletionPolicy: RetainExceptOnCreate
• C.Update the CloudFormation service role to include the following policy:
  {
  "Version": "2012-10-17",
  "Statement": [{
  "Effect": "Allow",
  "Action": ["cloudformation:UpdateTerminationProtection"],
  "Resource": "*"
  }]
  }
• D.Update the stack policy to include the following statements:
  {
  "Statement": [{
  "Effect": "Deny",
  "Action": "Update:*",
  "Principal": "*",
  "Resource": "*",
  "Condition": {
  "StringEquals": {

Comment: *

Name: *

Email: *

Verification: *

A developer wants to add request validation to a production environment Amazon API Gateway API. The developer needs to test the changes before the API is deployed to the production environment. For the test, the developer will send test requests to the API through a testing tool.
Which solution will meet these requirements with the LEAST operational overhead?

• A.Export the existing API to an OpenAPI file. Create a new API. Import the OpenAPI file. Modify the new API to add request validation. Perform the tests. Modify the existing API to add request validation. Deploy the existing API to production.
• B.Modify the existing API to add request validation. Deploy the updated API to a new API Gateway stage. Perform the tests. Deploy the updated API to the API Gateway production stage.
• C.Create a new API. Add the necessary resources and methods, including new request validation.
  Perform the tests. Modify the existing API to add request validation. Deploy the existing API to production
• D.Clone the existing API. Modify the new API to add request validation. Perform the tests. Modify the existing API to add request validation. Deploy the existing API to production.

Comment: *

Name: *

Email: *

Verification: *

A developer has an AWS Lambda function that needs to access an Amazon DynamoDB table named DailyOrders. The Lambda function must be able to perform read operations on the table.
The Lambda function must not be able to perform write operations on the table.
The developer needs to create an IAM policy to associate with the Lambda function's execution role.
Which IAM policy statement will meet these requirements?

• A.
• B.
• C.
• D.

Comment: *

Name: *

Email: *

Verification: *

A developer is receiving an intermittent ProvisionedThroughputExceededException error from an application that is based on Amazon DynamoDB. According to the Amazon CloudWatch metrics for the table, the application is not exceeding the provisioned throughput. What could be the cause of the issue?

• A.The DynamoDB table storage size is larger than the provisioned size.
• B.The application is exceeding capacity on a particular hash key.
• C.The DynamoDB table is exceeding the provisioned scaling operations.
• D.The application is exceeding capacity on a particular sort key.

Comment: *

Name: *

Email: *

Verification: *

A company is using AWS CioudFormation to deploy a two-tier application. The application will use Amazon RDS as its backend database. The company wants a solution that will randomly generate the database password during deployment. The solution also must automatically rotate the database password without requiring changes to the application.
What is the MOST operationally efficient solution that meets these requirements'?

• A.Use an AWS Lambda function as a CloudFormation custom resource to generate and rotate the password.
• B.Use an AWS Systems Manager Parameter Store resource with the SecureString data type to generate and rotate the password.
• C.Use a cron daemon on the application s host to generate and rotate the password.
• D.Use an AWS Secrets Manager resource to generate and rotate the password.

Comment: *

Name: *

Email: *

Verification: *