A company has a serverless application that uses AWS Lambda functions and AWS Systems Manager parameters to store configuration data The company moves the Lambda functions inside the VPC and into private subnets The Lambda functions are now producing errors in their attempts to access Systems Manager parameters.
Which solution will allow the Lambda functions to access Systems Manager parameters inside the VPC?
A. Configure security groups to allow access to Systems Manager
B. Create an interface VPC endpoint for Systems Manager
C. Use an internet gateway from inside the VPC
D. Create a gateway VPC endpoint for Systems Manager
A developer has a legacy application that is hosted on-premises Other applications hosted on AWS depend on the on-premises application for proper functioning In case of any application errors, the developer wants to be able to use Amazon
CloudWatch to monitor and troubleshoot all applications from one place.
How can the developer accomplish this?
A. Install an AWS SDK on the on-premises server to automatically send logs to CloudWatch.
B. Download the CloudWatch agent to the on-premises server Configure the agent to use I AM user credentials with permissions for CloudWatch
C. Upload log files from the on-premises server to Amazon S3 and have CloudWatch read the files.
D. Upload log files from the on-premises server to an Amazon EC2 instance and have the instance forward the logs to CloudWatch
An application is using Amazon DynamoDB as its data store, and should be able to read 100 items per second as strongly consistent reads Each item is 5 KB in size.
To what value should the table's provisioned read throughput be set?
A. 50 read capacity units
B. 100 read capacity units
C. 200 read capacity units
D. 500 read capacity units
A developer has written code for an application and wants to share it with other developers on the team to receive feedback. The shared application code needs to be stored long-term with multiple versions and batch change tracking.
Which AWS service should the developer use?
A. AWS CodeBuild
B. Amazon S3
C. AWS CodeCommit
D. AWS Cloud9
A developer needs to modify an application architecture to meet new functional requirements Application data is stored in Amazon DynamoDB and processed for analysis in a nightly batch. The system analysts do not want to wait until the next day to view the processed data and have asked to have it available in near-real time.
Which application architecture pattern would enable the data to be processed as it is received?
A. Event driven
B. Client-server driven
C. Fan-out driven
D. Schedule driven
A developer is adding a feature to a client-side application so that users can upload videos to an Amazon S3 bucket. What is the MOST secure way to give the application the ability to write files to the S3 bucket?
A. Update the S3 bucket policy to allow public write access. Allow any user to upload videos by removing the need to handle user authentication within the client-side application
B. Create a new IAM policy and a corresponding 1AM user with permissions to write to the S3 bucket Store the key and the secret for the user in the application code Use the key to authenticate the video uploads
C. Configure the API layer of the application to have a new endpoint that creates signed URLs that allow an object to be put into the S3 bucket Generate a presigned URL through this API call in the client application. Upload the video by using the signed URL
D. Generate a new 1AM key and a corresponding secret by using the AWS account root user credentials Store the key and the secret for the user in the application code. Use the key to authenticate the video uploads
A company wants to improve its security and audit posture by limiting Amazon EC2 inbound access.
What should the company use to access instances remotely instead of opening inbound SSH ports and managing SSH keys?
A. EC2 key pairs
B. AWS Systems Manager Session Manager
C. AWS Identity and Access Management (IAM)
D. Network ACLs
Which duty is a responsibility of AWS under the AWS shared responsibility model?
A. Identity and access management (IAM)
B. Server-side encryption (SSE)
C. Firewall configuration
D. Maintaining physical hardware
A company is building an application for stock trading. The application needs sub- millisecond latency for processing trade requests. The company uses Amazon DynamoDB to store all the trading data that is used to process each trading
request.
A development team performs load testing on the application and finds that the data retrieval time is higher than expected. The development team needs a solution that reduces the data retrieval time with the least possible effort.
Which solution meets these requirements?
A. Add local secondary indexes (LSIs) for the trading data
B. Store the trading data in Amazon S3 and use S3 Transfer Acceleration
C. Add retries with exponential backoff for DynamoDB queries
D. Use DynamoDB Accelerator (DAX) to cache the trading data
Which of the following are economic benefits of using AWS Cloud? (Choose two.)
A. Consumption-based pricing
B. Perpetual licenses
C. Economies of scale
D. AWS Enterprise Support at no additional cost
E. Bring-your-own-hardware model
Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Amazon exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your CLF-C01 exam preparations and Amazon certification application, do not hesitate to visit our Vcedump.com to find your solutions here.