A company offers a business-to-business software service that runs on dedicated infrastructure deployed in each customer’s AWS account. Before a feature release, the company needs to run integration tests on real AWS test infrastructure. The test infrastructure consists of Amazon EC2 instances and an Amazon RDS database.
A developer must set up a continuous delivery process that will provision the test infrastructure across the different AWS accounts. The developer then must run the integration tests.
Which solution will meet these requirements with the LEAST administrative effort?
A. Use AWS CodeDeploy with AWS CloudFormation StackSets to deploy the infrastructure. Use Amazon CodeGuru to run the tests.
B. Use AWS CodePipeline with AWS CloudFormation StackSets to deploy the infrastructure. Use AWS CodeBuild to run the tests.
C. Use AWS CodePipeline with AWS CloudFormation change sets to deploy the infrastructure. Use a CloudFormation custom resource to run the tests.
D. Use AWS Serverless Application Model (AWS SAM) templates with AWS CloudFormation change sets to deploy the infrastructure. Use AWS CodeDeploy to run the tests.
Show Answer
Correct Answer: B
Explanation: AWS CodePipeline orchestrates the continuous delivery workflow, AWS CloudFormation StackSets are designed to provision and manage infrastructure consistently across multiple AWS accounts, and AWS CodeBuild is a managed service well suited to execute integration tests after deployment. This combination provides the required cross-account infrastructure deployment and automated testing with the least administrative effort. The other options either use services not intended for testing (CodeDeploy, CodeGuru), rely on change sets rather than multi-account deployment (change sets), or use AWS SAM, which is intended for serverless applications rather than EC2/RDS infrastructure.
Question 80
A company has an Amazon API Gateway REST API that integrates with an AWS Lambda function. The API’s development stage references a development alias of the Lambda function named dev.
A developer needs make a production alias of the Lambda function named prod available through the API.
Which solution meets these requirements?
A. Create a new method on the API. Name the method production. Configure the method to include a stage variable that points to the prod Lambda function alias.
B. Create a new method on the API. Name the method production. Configure an integration request on the API’s development stage that points to the prod Lambda function alias.
C. Deploy the API to a new stage named production. Configure the stage to include a stage variable that points to the prod Lambda function alias.
D. Deploy the API to a new stage named production. Configure an integration request on the API’s production stage that points to the prod Lambda function alias.
Show Answer
Correct Answer: C
Explanation: API Gateway stages are the appropriate way to separate environments. Configure the Lambda integration to use a stage variable for the function alias, then deploy a new stage named production with the stage variable set to the prod alias. This allows the same API configuration to target different Lambda aliases without creating separate methods or hardcoding integrations.
Question 81
A company is hosting an Amazon AP! Gateway REST API that calls a single AWS Lambda function. The function is infrequently invoked by multiple clients at the same time.
The code performance is optimal, but the company wants to optimize the startup time of the function
What can a developer do to optimize the initialization of the function?
A. Enable API Gateway caching for the REST API.
B. Configure provisioned concurrency for the Lambda function.
C. Use Lambda proxy integration for the REST API.
D. Configure AWS Global Accelerator for the Lambda function.
Show Answer
Correct Answer: B
Explanation: Provisioned concurrency keeps Lambda execution environments pre-initialized, significantly reducing or eliminating cold-start initialization latency. API Gateway caching caches responses rather than Lambda startup, Lambda proxy integration changes request/response handling but not initialization time, and AWS Global Accelerator optimizes network routing rather than Lambda cold starts.
Question 82
A gaming company has deployed a web portal on AWS Elastic Beanstalk. The company sometimes needs to deploy new versions three or four times in a day. The company needs to deploy new features for all users as quickly as possible. The solution must minimize performance impact and must maximize availability.
What solution will meet these requirements?
A. Use a rolling deployment policy to deploy to Amazon EC2 instances.
B. Use an immutable deployment policy to deploy to Amazon EC2 instances.
C. Use an all-at-once deployment policy to deploy to Amazon EC2 instances.
D. Use a-canary deployment strategy to deploy changes to Amazon EC2 instances.
Show Answer
Correct Answer: B
Explanation: Immutable deployments launch a fresh Auto Scaling group of EC2 instances with the new application version while keeping the existing instances serving traffic. After the new instances pass health checks, Elastic Beanstalk switches over, maximizing availability and minimizing performance impact during deployment. Rolling deployments reduce capacity during updates, all-at-once causes downtime/performance impact, and canary is not an Elastic Beanstalk deployment policy for this requirement and intentionally delays rollout to all users.
Question 83
An Amazon Data Firehose delivery stream is receiving customer data that contains personally identifiable information. A developer needs to remove pattern-based customer identifiers from the data and store the modified data in an Amazon S3 bucket.
What should the developer do to meet these requirements?
A. Implement Firehose data transformation as an AWS Lambda function. Configure the function to remove the customer identifiers. Set an Amazon S3 bucket as the destination of the delivery stream.
B. Launch an Amazon EC2 instance. Set the EC2 instance as the destination of the delivery stream. Run an application on the EC2 instance to remove the customer identifiers. Store the transformed data in an Amazon S3 bucket.
C. Create an Amazon OpenSearch Service instance. Set the OpenSearch Service instance as the destination of the delivery stream. Use search and replace to remove the customer identifiers. Export the data to an Amazon S3 bucket.
D. Create an AWS Step Functions workflow to remove the customer identifiers. As the last step in the workflow, store the transformed data in an Amazon S3 bucket. Set the workflow as the destination of the delivery stream.
Show Answer
Correct Answer: A
Explanation: Amazon Data Firehose supports invoking an AWS Lambda function for in-flight data transformation before delivering records to the destination. A Lambda function can remove or mask pattern-based PII, and the transformed records can then be delivered directly to an Amazon S3 bucket. The other options are not supported Firehose transformation patterns or are unnecessarily complex.
Question 84
A company hosts applications on premises. The on-premises servers generate audit logs that are available through an HTTP endpoint.
The company needs an automated solution to regularly ingest and store large volumes of audit data from the on-premises servers. The company also needs to perform queries on the audit data.
Which solution will meet these requirements in the MOST operationally efficient way?
A. Export the audit logs. Upload the logs to Amazon S3. Import the logs to an Amazon RDS DB instance.
B. Create an AWS Lambda function to call the HTTP endpoint to fetch audit logs. Configure an Amazon EventBridge scheduled rule to invoke the Lambda function. Configure the Lambda function to push the logs to AWS CloudTrail Lake.
C. Use AWS DataSync to transfer audit logs to an Amazon S3 bucket. Load the logs into an Amazon S3 bucket. Use Amazon Athena to query the bucket.
D. Install the Amazon CloudWatch agent on the on-premises servers. Give the agent the ability to push audit logs to CloudWatch. Use CloudWatch Insights to query the logs.
Show Answer
Correct Answer: D
Explanation: The requirement is to regularly ingest large volumes of on-premises audit logs and query them with minimal operational overhead. The Amazon CloudWatch agent is designed to collect log files from on-premises servers and send them to CloudWatch Logs, where CloudWatch Logs Insights provides managed querying. Option B misuses CloudTrail Lake, which is intended for CloudTrail and supported audit event sources rather than as a general log ingestion target. Option C is not appropriate because AWS DataSync transfers files from storage systems, not by polling an HTTP endpoint. Option A introduces unnecessary database management and is not operationally efficient.
Question 85
A company has an ecommerce application. The application's API sends order data to an Amazon Simple Queue Service (Amazon SOS) queue. A developer needs to modify the application to enrich the order data before the application sends the order data to a fulfillment system.
Which solution will meet this requirement with the LEAST development effort?
A. Create an AWS Lambda function to poll the SOS queue. enrich the message data, and send the enriched data to the fulfilment system, Create an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe the Lambda function to the SNS topic.
B. Create an AWS Step Functions state machine. Configure an Amazon EventBridge rule to run the state machine when an order is published to the SQS queue. Map the orders to an AWS Lambda function. Program the Lambda function to perform the data enrichment and to invoke the state machine. Configure the last step of the state machine to send the enriched data to the fulfilment system,
C. Create an Amazon EMR cluster to read messages from the SQS queue. Configure an EMR job to enrich the order data. Create and configure an Amazon S3 bucket as the output location. Adjust the order fulfilment system to retrieve the enriched files from the S3 bucket.
D. Create an Amazon EventBridge pipe that uses event enrichment. Configure the SQS queue as a source for the pipe. Set the fulfillment system as the target of the pipe.
Show Answer
Correct Answer: D
Explanation: Amazon EventBridge Pipes can directly connect an Amazon SQS queue to a target and supports optional event enrichment (for example, via Lambda or API destinations) and transformations with minimal custom code. This provides the required enrichment before delivery to the fulfillment system with the least development effort. The other options introduce unnecessary components or are not appropriate for this integration pattern.
Question 86
A developer is creating an application that uses an Amazon DynamoDB table. The developer needs to develop code that reads all records that were added to the table during the previous day, creates HTML reports, and pushes the reports into third-party storage. The item size varies from 1 KB to 4 KB, and the index structure is defined with the date. The developer needs to minimize the read capacity that the application requires from the DynamoDB table.
Which DynamoDB API operation should the developer use in the code to meet these requirements?
A. Query
B. Scan
C. BatchGetItem
D. GetItem
Show Answer
Correct Answer: A
Explanation: Query is the most efficient operation when you need to retrieve items that match a specific partition key (and optionally a sort key/range). Because the access pattern is based on the date indexed in DynamoDB, Query can read only the items for the previous day instead of scanning the entire table, minimizing read capacity consumption. Scan reads every item, GetItem retrieves only one item by its full primary key, and BatchGetItem retrieves multiple known keys rather than querying by date.
Question 87
A developer needs to configure an AWS Lambda function to make HTTP POST requests to an internal application. The application is in the same AWS account that hosts the function. The internal application runs on Amazon EC2 instances in a private subnet within a VPC.
Which solution will meet these requirements?
A. Configure a VPC endpoint to connect to the private subnet. Attach the endpoint to the Lambda function.
B. Attach the Lambda function to the VPC and to the private subnet.
C. Configure a VPN connection between the Lambda function and the private subnet. Attach the VPN to the Lambda function.
D. Configure the VPC route table to include the Lambda function’s IP address.
Show Answer
Correct Answer: B
Explanation: To allow a Lambda function to access EC2 instances in private subnets, configure the Lambda function to run inside the same VPC by attaching it to appropriate private subnets and security groups. Lambda creates elastic network interfaces in the selected subnets, enabling private IP connectivity to the internal application. VPC endpoints are for accessing supported AWS services, not arbitrary EC2-hosted applications. A VPN is unnecessary within the same AWS account/VPC, and route tables cannot target a Lambda function's ephemeral IP address.
Question 88
A company runs a new application on AWS Elastic Beanstalk. The company needs to deploy updates to the application. The updates must not cause any downtime for application users.
The deployment must forward a specified percentage of incoming client traffic to a new application version during an evaluation period.
Which deployment type will meet these requirements?
A. rolling
B. traffic-splitting
C. in-place
D. immutable
Show Answer
Correct Answer: B
Explanation: Traffic-splitting deployments route a configurable percentage of incoming client requests to the new application version for an evaluation period while the remaining traffic continues to use the existing version. This provides zero-downtime canary-style deployment. Rolling deployments update batches of instances, immutable deployments launch a separate Auto Scaling group but do not perform percentage-based traffic evaluation, and in-place deployments can cause downtime.
$19
Get all 553 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.