1. A Developer is creating a mobile application that will not require users to log in. What is the MOST efficient method to grant users access to AWS resources?

A) Create credentials using AWS KMS and apply these credentials to users when using the application.
B) Use an identity provider to securely authenticate with the application.
C) Create an AWS Lambda function to create an IAM user when a user accesses the application.
D) Use Amazon Cognito to associate unauthenticated users with an IAM role that has limited access to resources.



2. An application displays a status dashboard. The status is updated by 1 KB messages from an SQS queue. Although the status changes infrequently, the Developer must minimize the time between the message arrival in the queue and the dashboard update. What technique provides the shortest delay in updating the dashboard?

A) Retrieve the messages from the queue using long polling every 20 seconds.
B) Retrieve the messages from the queue using short polling every 10 seconds.
C) Reduce the size of the messages by compressing them before sending.
D) Reduce the size of each message payload by sending it in two parts.



3. A Developer wants to upload data to Amazon S3 and must encrypt the data in transit. Which of the following solutions will accomplish this task? (Choose two.)(Select 2answers)

A) Transfer the data over an SSL connection
B) Set up Server-Side Encryption with AWS KMS-Managed Keys
C) Set up Client-Side Encryption with an AWS KMS-Managed Customer Master Key
D) Set up hardware VPN tunnels to a VPC and access S3 through a VPC endpoint
E) Set up Server-Side Encryption with S3-Managed Keys


4. A Developer created a dashboard for an application using Amazon API Gateway, Amazon S3, AWS Lambda, and Amazon RDS. The Developer needs an authentication mechanism allowing a user to sign in and view the dashboard. It must be accessible from mobile applications, desktops, and tablets, and must remember user preferences across platforms. Which AWS service should the Developer use to support this authentication scenario?

A) Amazon Cognito
B) AWS KMS
C) Amazon IAM
D) AWS Directory Service



5. An application uses Lambda functions to extract metadata from files uploaded to an S3 bucket; the metadata is stored in Amazon DynamoDB. The application starts behaving unexpectedly, and the Developer wants to examine the logs of the Lambda function code for errors. Based on this system configuration, where would the Developer find the logs?

A) Amazon CloudWatch
B) Amazon S3
C) AWS CloudTrail
D) Amazon DynamoDB