Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 871:

  A developer manages an application that interacts with Amazon RDS. Alter observing slow performance with read queries, the developer Implements Amazon ElastiCache to update the cache immediately following the primary database update.

  What will be the result of this approach to caching?

  A. Caching will increase the load on the database instance because the cache is updated for every database update.

  B. Caching will slow performance of the read queries because the cache is updated when the cache cannot find the requested data

  C. The cache will become large and expensive because the infrequently requested data is also written to the cache

  D. Overhead will be added to the initial response time because the cache is updated only after a cache miss

  Correct Answer: C

• Question 872:

  An ecommerce company manages its application's infrastructure by using AWS Elastic Beanstalk. A developer wants to deploy the new version of the application with the least possible application downtime. The developer also must minimize

  the application's rollback time if there are issues with the deployment.

  Which approach will meet these requirements?

  A. Use a rolling deployment to deploy the new version

  B. Use a rolling deployment with additional batches to deploy the new version

  C. Use an all-at-once deployment to deploy the new version

  D. Deploy the new version to a new environment Use a blue/green deployment

  Correct Answer: D

• Question 873:

  A company is hosting a workshop for external users and wants to share the reference documents with the external users for 7 days. The company stores the reference documents In an Amazon S3 bucket that the company owns. What is the MOST secure way to share the documents with the external users?

  A. Use S3 presigned URLs to share the documents with the external users Set an expiration time of 7 days

  B. Move the documents to an Amazon WorkDocs folder. Share the links of the WorkDocs folder with the external users.

  C. Create temporary 1AM users that have read only access to the S3 bucket Share the access keys with the external users Expire the credentials alter 7 days

  D. Create a role that has read-only access to the S3 bucket Share the Amazon Resource Name (ARN) of this role with the external users

  Correct Answer: A

• Question 874:

  A Lambda function processes data before sending it to a downstream service. Each piece of data is approximately 1MB in size. After a security audit, the function is now required to encrypt the data before sending it downstream.

  Which API call is required to perform the encryption?

  A. Pass the data to the KMS ReEncrypt API for encryption

  B. Use the KMS GenerateDataKeyAPi to get an encryption key

  C. Use the KMS GeneraceDaraHeywithoutPlainTexr API to get an encryption key

  D. Pass the data to KMS as part of the Encrypt API for encryption.

  Correct Answer: B

• Question 875:

  A company wants to migrate an existing on-premises web application to AWS. The existing technology stacks consist of configuration files, application code that connects to a MySQL database by using a language-specific MySQL API, and a source code repository that holds configuration files and program code A developer uses an Amazon RDS for MySQL DB instance as the target database The developer uses a container as the compute engine for the web application program code. The developer wants to configure the database connection from the web application code to the new RDS for MySQL DB instance without refactoring the existing code The developer also must maximize security for the storage of the database user name and password pair that the application code uses.

  Which combination of steps should the developer take to meet these requirements? (Select TWO )

  A. Use the RDS software development kit (SDK) to construct a database client.

  B. Keep the existing database connectivity API code unchanged Change the database connection string URL to the endpoint of the RDS for MySQL DB instance

  C. Store the database's user name and password pair in the configuration files

  D. Use AWS Secrets Manager to store the database's user name and password pair Use the GetSecretValue API operation to retrieve the user name and password pair when the application makes MySQL DB API calls

  E. Use the environment variables of the container definition to pass the database's user name and password pair to the application code

  Correct Answer: BD

• Question 876:

  A developer is making changes to a custom application that uses AWS Elastic Beanstalk.

  Which solutions will update the Elastic Beanstalk environment with the new application version after the developer completes the changes? (Select TWO)

  A. Package the application code into a zip file. Use the AWS Management Console to upload the .zip file and deploy the packaged application.

  B. Package the application code into a tar file Use the AWS Management Console to create a new application version from the tar file. Update the environment by using the AWS CLI.

  C. Package the application code into a tar file Use the AWS Management Console to upload the tar file and deploy the packaged application

  D. Package the application code into a zip file Use the AWS CLI to create a new application version from the zip file and to update the environment

  E. Package the application code into a zip file. Use the AWS Management Console to create a new application version from the .zip file. Rebuild the environment by using the AWS CLI.

  Correct Answer: AD

• Question 877:

  A developer has a stateful web server on-premises that is being migrated to AWS. The developer must have greater elasticity in the new design.

  How should the developer re-factor the application to make it more elastic? (Select TWO.)

  A. Use pessimistic concurrency on Amazon DynamoDB

  B. Use Amazon CloudFront with an Auto Scaling group.

  C. Use Amazon CloudFront with an AWS Web Application Firewall

  D. Store session state data m an Amazon DynamoDB table.

  E. Use an ELB with an Auto Scaling group

  Correct Answer: DE

• Question 878:

  An ecommerce application is running behind an Application Load Balancer. A developer observes some unexpected load on the application during non-peak hours. The developer wants to analyze patterns for the client IP addresses that use the application.

  Which HTTP header should the developer use for this analysis?

  A. The X-Forwarded-Proto header

  B. The X-Forwarded-Host header

  C. The X Forwarded For header

  D. The X-Forwarded-Port header

  Correct Answer: C

• Question 879:

  A developer creates an AWS Lambda function to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic All message content must be encrypted in transit and at rest between Lambda and Amazon SNS.

  A part of the Lambda execution role is as follows:

  

  Which combination of steps should the developer take to meet these requirements? (Select TWO.)

  A. Enable server-side encryption on the SNS topic

  B. Add a Deny statement to the Lambda execution role Specify the SNS topic ARN as the resource Specify "aws.SecureTransport" "true" as the condition.

  C. Create a VPC endpoint for Amazon SNS

  D. Add a StringEquals condition of "sns Protocol" "https" to the Lambda execution role

  E. Add a Deny statement to the Lambda execution role Specify the SNS topic ARN as the resource Specify "aws.SecureTransport" "false" as the condition.

  Correct Answer: AE

• Question 880:

  A developer has discovered that an application responsible for processing messages in an Amazon SQS queue is routinely falling behind The application is capable of processing multiple messages in one invocation, but is only receiving one message at a time.

  What should the developer do to increase the number of messages the application receives?

  A. Call the ChangeMessageVisibility API for the queue and set MaxNumberOfMessages to a value greater than the default of

  B. Call the AddPormission API to set MaxNumborOfMessages for the ReceiveMessage action to a value greater than the default of 1

  C. Call the ReceiveMessage API to set MaxNumberOfM ess ages to a value greater than the default of 1.

  D. Call the SetQueue Attributes API for the queue and set MaxNumberOfMessages to a value greater than the default of 1

  Correct Answer: D