An AWS Elastic Beanstalk application needs to be deployed in multiple regions and requires a different Amazon Machine Image (AMI) in each region.
Which AWS CloudFormation template key can be used to specify the correct AMI for each region?

A. Parameters
B. Outputs
C. Mappings
D. Resources

A Developer is designing a new application that uses Amazon S3. To satisfy compliance requirements, the Developer must encrypt the data at rest.
How can the Developer accomplish this?

A. Use s3:x-amz-aclas a condition in the S3 bucket policy.
B. Use Amazon RDS with default encryption.
C. Use aws:SecureTransportas a condition in the S3 bucket policy.
D. Turn on S3 default encryption for the S3 bucket.

A Developer wants to enable AWS X-Ray for a secure application that runs in an Amazon ECS environment.
What combination of steps will enable X-Ray? (Choose three.)

A. Create a Docker image that runs the X-Ray daemon.
B. Add instrumentation to the application code for X-Ray.
C. Install the X-Ray daemon on the underlying EC2 instance.
D. Configure and use an IAM EC2 instance role.
E. Register the application with X-Ray.
F. Configure and use an IAM role for tasks.

A Developer must deploy a new AWS Lambda function using an AWS CloudFormation template.
Which procedures will deploy a Lambda function? (Choose two.)

A. Upload the code to an AWS CodeCommit repository, then add a reference to it in an AWS::Lambda::Functionresource in the template.
B. Create an AWS::Lambda::Functionresource in the template, then write the code directly inside the CloudFormation template.
C. Upload a .ZIP file containing the function code to Amazon S3, then add a reference to it in an AWS::Lambda::Function resource in the template.
D. Upload a .ZIP file to AWS CloudFormation containing the function code, then add a reference to it in an AWS::Lambda::Functionresource in the template.
E. Upload the function code to a private Git repository, then add a reference to it in an AWS::Lambda::Functionresource in the template.

A Developer has published an update to an application that is served to a global user base using Amazon CloudFront. After deploying the application, users are not able to see the updated changes.
How can the Developer resolve this issue?

A. Remove the origin from the CloudFront configuration and add it again.
B. Disable forwarding of query strings and request headers from the CloudFront distribution configuration.
C. Invalidate all the application objects from the edge caches.
D. Disable the CloudFront distribution and enable it again to update all the edge locations.

A Developer wants to find a list of items in a global secondary index from an Amazon DynamoDB table. Which DynamoDB API call can the Developer use in order to consume the LEAST number of read capacity units?

A. Scan operation using eventually-consistent reads
B. Query operation using strongly-consistent reads
C. Query operation using eventually-consistent reads
D. Scan operation using strongly-consistent reads

An AWS Lambda function generates a 3MB JSON file and then uploads it to an Amazon S3 bucket daily. The file contains sensitive information, so the Developer must ensure that it is encrypted before uploading to the bucket.
Which of the following modifications should the Developer make to ensure that the data is encrypted before uploading it to the bucket?

A. Use the default AWS KMS customer master key for S3 in the Lambda function code.
B. Use the S3 managed key and call the GenerateDataKeyAPI to encrypt the file.
C. Use the GenerateDateKeyAPI, then use that data key to encrypt the file in the Lambda function code.
D. Use a custom KMS customer master key created for S3 in the Lambda function code.

A company needs to secure its existing website running behind an Elastic Load Balancer. The website’s Amazon EC2 instances are CPU-constrained.
What should be done to secure the website while not increasing the CPU load on the EC2 web servers? (Choose two.)

A. Configure an Elastic Load Balancer with SSL pass-through.
B. Configure SSL certificates on an Elastic Load Balancer.
C. Configure an Elastic Load Balancer with a Loadable Storage System.
D. Install SSL certificates on the EC2 instances.
E. Configure an Elastic Load Balancer with SSL termination.

How should custom libraries be utilized in AWS Lambda?

A. Host the library on Amazon S3 and reference to it from the Lambda function.
B. Install the library locally and upload a ZIP file of the Lambda function.
C. Import the necessary Lambda blueprint when creating the function.
D. Modify the function runtime to include the necessary library.

In a move toward using microservices, a company’s Management team has asked all Development teams to build their services so that API requests depend only on that service’s data store. One team is building a Payments service which has its own database; the service needs data that originates in the Accounts database. Both are using Amazon DynamoDB.
What approach will result in the simplest, decoupled, and reliable method to get near-real time updates from the Accounts database?

A. Use Amazon Glue to perform frequent ETL updates from the Accounts database to the Payments database.
B. Use Amazon ElastiCache in Payments, with the cache updated by triggers in the Accounts database.
C. Use Amazon Kinesis Data Firehose to deliver all changes from the Accounts database to the Payments database.
D. Use Amazon DynamoDB Streams to deliver all changes from the Accounts database to the Payments database.