Amazon Amazon Certifications CLF-C01 Questions & Answers

• Question 891:

  A developer is receiving kttp 400 : ThrorclingExceprion errors intermittently when calling the Amazon CloudWatch API. When a call (ails, no data is retrieved. What best practice should first be applied to address this issue?

  A. Contact AWS Support for a limit increase.

  B. Use the AWS CLI to get the metrics

  C. Analyze the applications and remove the API call

  D. Retry the call with exponential backoff

  Correct Answer: D

• Question 892:

  A company has dn application that analyzes photographs. A developer is preparing the application for deployment to Amazon EC2 instances. The application's image analysis functions require a mix of GPU instances and CPU instances that run on Amazon Linux. The developer needs to add code to the application so that the functions can determine whether they are running on a GPU instance.

  What should the functions do to obtain this information?

  A. Call the Descnbeinstances API operation and filter on the current instance ID Examine the EiasticGpuAssociations property

  B. Evaluate the GPU_AVA1LABLE environment variable

  C. Call the DescribeElasticGpus API operation

  D. Retrieve the instance type from the instance metadata

  Correct Answer: A

• Question 893:

  A developer has created an AWS Lambda function lo provide notification through Amazon Simple Notification Service (Amazon SNS) whenever a file is uploaded to Amazon S3 that is larger than 50 MB The developer has deployed and tested the Lambda function by using the CI I However, when the event notification is added to the S3 bucket and a 3.000 MB file is uploaded, the Lambda function does not launch.

  Which of the following is a possible reason for the Lambda function's inability to launch?

  A. The S3 event notification does not activate for files that are larger than 1.000 MB

  B. The resource based policy for the Lambda function does not have the required permissions to be invoked by Amazon S3

  C. Lambda functions cannot be invoked directly from an S3 event.

  D. The S3 bucket needs to be made public

  Correct Answer: B

• Question 894:

  A company is using an AWS Lambda function to process records from an Amazon Kinesis data stream The company recently observed slow processing of the records .A developer notices that the iterator age metric for the function is increasing and that the Lambda run duration is constantly above normal.

  Which actions should the developer take to increase the processing speed? (Select TWO.)

  A. Increase the number of shards of the Kinesis data stream.

  B. Decrease the timeout of the Lambda function

  C. Increase the memory that is allocated to the Lambda function

  D. Decrease the number of shards of the Kinesis data stream

  E. Increase the timeout of the Lambda function.

  Correct Answer: AC

• Question 895:

  A developer is creating an AWS Lambda function that generates a new file each time it runs Each new file must be checked into an AWS CodeCommit repository hosted in the same AWS account. How should the developer accomplish this?

  A. When the Lambda function starts, use the Git CLI to clone the repository Check the new file into the cloned repository and push the change.

  B. After the new file is created in Lambda, use cURL to invoke the CodeCommit API Send the file to the repository.

  C. Use an AWS SDK to instantiate a CodeCommit client Invoke the put_file method to add the file to the repository

  D. Upload the new file to an Amazon S3 bucket Create an AWS Step Function to accept S3 events In the Step Function, add the new file to the repository

  Correct Answer: C

• Question 896:

  A developer is deploying an AWS Lambda function that writes to Amazon DynamoDB. Amazon CloudWatch metrics tor the Lambda function show that errors have occurred during some invocations of tho function However, there are no entries available in the CloudWatch logs for the function. The source code for the function shows that the function writes tog data before saving data.

  What should the developer do to address the missing CloudWatch log entries of the Lambda function?

  A. Assign permissions to the Lambda function's execution role to send logs to CloudWatch

  B. Enable CloudWatch Lambda insigne Redeploy the Lambda function

  C. Use AWS X-Ray Enable active tracing D. Add CloudWatch as the trusted identity to the Lambda function's execution role

  Correct Answer: B

• Question 897:

  A company has a website that is developed in PHP and is launched using AWS Elastic Beanstalk. There is a new version of the website that needs to be deployed In the Elastic Beanstalk environment. The company cannot tolerate having the

  website offline if an update fails Deployments must have minimal impact and rollback as soon as possible.

  What deployment method should be used?

  A. All at once

  B. Rolling

  C. Snapshots

  D. Immutable

  Correct Answer: D

• Question 898:

  A developer created a Lambda function for a web application backend When testing the Lambda function from the AWS Lambda console, the developer can see that the function is being run, but there is no log data being generated in Amazon CloudWatch Logs, even after several minutes.

  What could cause this situation?

  A. The Lambda function does not have any explicit log statements for the log data to send it to CloudWatch Logs

  B. The Lambda function is missing CloudWatch Logs as a source trigger to send log data

  C. The execution role for the Lambda function is missing permissions to write log data to the CloudWatch Logs

  D. The Lambda function is missing a target CloudWatch Log group

  Correct Answer: C

• Question 899:

  An application running on Amazon EC2 opens connections to an Amazon RDS SQL Server database The developer does not want to store the user name and password for the database in the code. The developer would also like to automatically rotate the credentials. What is the MOST secure way to store and access the database credentials?

  A. Create an IAM role that has permissions to access the database Attach the role to the EC2 instance

  B. Use AWS Secrets Manager to store the credentials Retrieve the credentials from Secrets Manager as needed

  C. Store the credentials in an encrypted text file in an Amazon S3 bucket Configure the EC2 instance's user data to download the credentials from Amazon S3 as the instance boots.

  D. Store the user name and password credentials directly in the source code No further action is needed because the source code is stored in a private repository

  Correct Answer: B

• Question 900:

  A development team is building a new application that will run on Amazon EC2 and use Amazon DynamoDB as a storage layer. The developers all have assigned IAM user accounts in the same IAM group The developers currently can launch EC2 instances, and they need to be able to launch EC2 instances with an instance role allowing access to Amazon DynamoDB.

  Which AWS 1AM changes are needed when creating an instance role to provide this functionality?

  A. Create an iam permission policy attached to the role that allows access to DynamoDB Add a trust policy to the role that allows DynamoDB to assume the role Attach a permissions policy to the development group in AWS IAM that allows developers to use the lamGetRole and lamPassRole permissions for the role.

  B. Create an IAM permissions policy attached to the role that allows access to DynamoDB Add a trust policy to the role that allows Amazon EC2 to assume the role. Attach a permissions policy to the development group in AWS IAM that allows developers to use the iam PassRole permission for the role.

  C. Create an IAM permission policy attached to the role that allows access to Amazon EC2. Add a trust policy to the role that allows DynamoDB to assume the role Attach a permissions policy to the development group in AWS IAM that allows developers to use the iam PassRole permission for the role.

  D. Create an IAM permissions policy attached to the role that allows access to DynamoDB Add a trust policy to the role that allows Amazon EC2 to assume the role Attach a permissions policy to the development group in AWS IAM that allows developers to use the iam GetRole permission for the role.

  Correct Answer: B