Test2A

A developer needs to use the AWS CLI on an on-premises development server temporarily to access AWS services while performing maintenance. The developer needs to authenticate to AWS with their identity for several hours.
What is the MOST secure way to call AWS CLI commands with the developer's IAM identity?

• Specify the developer's IAM access key ID and secret access key as parameters for each CLI command

• Run the aws configure CLI command. Provide the developer's IAM access key ID and secret access key.

• Specify the developer's IAM profile as a parameter for each CLI command.

• Run the get-session-token CLI command with the developer's IAM user. Use the returned credentials to call the CLI

An AWS Lambda function accesses two Amazon DynamoDB tables. A developer wants to improve the performance of the Lambda function by identifying bottlenecks in the function.
How can the developer inspect the timing of the DynamoDB API calls?

• Add DynamoDB as an event source to the Lambda function. View the performance with Amazon CloudWatch metrics

• Place an Application Load Balancer (ALB) in front of the two DynamoDB tables. Inspect the ALB logs

• Limit Lambda to no more than five concurrent invocations. Monitor from the Lambda console.

• Enable AWS X-Ray tracing for the function. View the traces from the X-Ray service.

A developer deployed an application to an Amazon EC2 instance. The application needs to know the public IPv4 address of the instance.
How can the application find this information?

• Query the instance metadata from http://169.254.169.254/latest/meta-data/.

• Query the instance user data from http://169.254.169.254/latest/user-data/.

• Query the Amazon Machine Image (AMI) information from http://169.254 169.254/latest/meta-data/ami/.

• Check the hosts file of the operating system.

A developer is designing an AWS Lambda function to perform a maintenance activity. The developer will use Amazon EventBridge (Amazon CloudWatch Events) to invoke the function on an hourly schedule. The developer wants the function to log information at different levels of detail according to the value of a log level variable. The developer must design the function so that the log level can be set without requiring a change to the function code.
Which solution will meet these requirements?

• Add a custom log level parameter for the Lambda function. Set the parameter by using the Lambda console

• Set the log level in a Lambda environment variable

• Set the log level in the Amazon CloudWatch Logs console.

• Add a custom log level parameter for the Lambda function. Set the parameter by using the AWS CLI.

A developer is creating a serverless application that uses an AWS Lambda function The developer will use AWS CloudFormation to deploy the application The application will write logs to Amazon CloudWatch Logs. The developer has created a log group in a CloudFormation template for the application to use. The developer needs to modify the CloudFormation template to make the name of the log group available to the application at runtime.
Which solution will meet this requirement?

• Use the AWS::Include transform in CloudFormation to provide the log group's name to the application.

• Pass the log group's name to the application in the user data section of the CloudFormation template

• Use the CloudFormation template's Mappings section to specify the log group's name for the application.

• Pass the log group's Amazon Resource Name (ARN) as an environment variable to the Lambda function.

A company is running an application on Amazon Elastic Container Service (Amazon ECS). When the company deploys a new version of the application, the company initially needs to expose 10% of live traffic to the new version. After a period of time, the company needs to immediately route all the remaining live traffic to the new version.
Which ECS deployment should the company use to meet these requirements?

• Rolling update

• Blue/green with canary

• Blue/green with all at once

• Blue/green with linear

A microservices application is deployed across multiple containers in Amazon Elastic Container Service (Amazon ECS). To improve performance, a developer wants to capture trace information between the microservices and visualize the microservices architecture.
Which solution will meet these requirements?

• Build the container from the amazon/aws-xray-daemon base image. Use the AWS X-Ray SDK to instrument the application.

• Install the Amazon CloudWatch agent on the container image. Use the CloudWatch SDK to publish custom metrics from each of the microservices.

• Install the AWS X-Ray daemon on each of the ECS instances.

• Configure AWS CloudTrail data events to capture the traffic between the microservices.

A company is planning to use AWS CodeDeploy to deploy an application to Amazon Elastic Container Service (Amazon ECS). During the deployment of a new version of the application, the company initially must expose only 10% of live traffic to the new version of the deployed application. Then, after 15 minutes elapse, the company must route all the remaining live traffic to the new version of the deployed application.
Which CodeDeploy predefined configuration will meet these requirements?

• CodeDeployDefault.ECSCanary10Percent15Minutes

• CodeDeployDefault.LambdaCanary10Percent5Minutes

• CodeDeployDefault.LambdaCanary10Percent15Minutes

• CodeDeployDefault.ECSLinear10PercentEvery1 Minutes

A developer notices timeouts from the AWS CLI when the developer runs list commands.
What should the developer do to avoid these timeouts?

• Use the --page-size parameter to request a smaller number of items.

• Use shorthand syntax to separate the list by a single space.

• Use the yaml-stream output for faster viewing of large datasets.

• Use quotation marks around strings to enclose data structure.

A company has moved a legacy on-premises application to AWS by performing a lift and shift. The application exposes a REST API that can be used to retrieve billing information. The application is running on a single Amazon EC2 instance. The application code cannot support concurrent invocations. Many clients access the API, and the company adds new clients all the time.
A developer is concerned that the application might become overwhelmed by too many requests. The developer needs to limit the number of requests to the API for all current and future clients. The developer must not change the API, the application, or the client code.
What should the developer do to meet these requirements?

• Place the API behind an Amazon API Gateway API. Set the server-side throttling limits.

• Place the API behind a Network Load Balancer. Set the target group throttling limits.

• Place the API behind an Application Load Balancer. Set the target group throttling limits.

• Place the API behind an Amazon API Gateway API. Set the per-client throttling limits.