Which AWS Serverless Application Model Command Line Interface (AWS SAM CLI) subcommand will meet these requirements?

2026-03-28
By:
In: DVA-C02
With: 2 Comments

A developer is creating a new REST API by using Amazon API Gateway and AWS Lambda.The development team tests the API and validates responses for the known use cases before deploying the API to the production environment.The developer wants to make the REST API available for testing by using API Gateway locally.Which AWS Serverless Application Model Command Line Interface (AWS SAM CLI) subcommand will meet these requirements?Read More →

Which combination of steps will meet these requirements?

2026-03-28
By:
In: DOP-C02
With: 2 Comments

A company uses AWS Secrets Manager to store a set of sensitive API keys that an AWS Lambda function uses.When the Lambda function is invoked the Lambda function retrieves the API keys and makes an API call to an external service.The Secrets Manager secret is encrypted with the default AWS Key Management Service (AWS KMS) key.A DevOps engineer needs to update the infrastructure to ensure that only the Lambda function’s execution role can access the values in Secrets Manager.The solution must apply the principle of least privilege.Which combination of steps will meet these requirements? (Choose two.)Read More →

What should be done to manage the host with the LEAST amount of administrative effort?

2026-03-28
By:
In: SAP-C01
With: 2 Comments

A company runs a Windows Server host in a public subnet that is configured to allow a team of administrators to connect over RDP to troubleshoot issues with hosts in a private subnet.The host must be available at all times outside of a scheduled maintenance window, and needs to receive the latest operating system updates within 3 days of release.What should be done to manage the host with the LEAST amount of administrative effort?Read More →

Which combination of steps should the security engineer recommend?

2026-03-28
By:
In: SCS-C01
With: 2 Comments

A company has a VPC with several Amazon EC2 instances behind a NAT gateway.The company’s security policy states that all network traffic must be logged and must include the original source and destination IP addresses.The existing VPC Flow Logs do not include this information.A security engineer needs to recommend a solution.Which combination of steps should the security engineer recommend? (Choose two.)Read More →

Which solution will meet these requirements?

2026-03-28
By:
In: SAP-C02
With: 2 Comments

A company needs to move some on-premises Oracle databases to AWS.The company has chosen to keep some of the databases on premises for business compliance reasons.The on-premises databases contain spatial data and run cron jobs for maintenance.The company needs to connect to the on-premises systems directly from AWS to query data as a foreign table.Which solution will meet these requirements?Read More →

How should the developer configure AWS SAM to grant the necessary read privilege to the S3 bucket?

2026-03-28
By:
In: DVA-C01
With: 2 Comments

A developer is automating a new application deployment with AWS Serverless Application Model (AWS SAM).The new application has one AWS Lambda function and one Amazon S3 bucket.The Lambda function must access the S3 bucket to only read objects.How should the developer configure AWS SAM to grant the necessary read privilege to the S3 bucket?Read More →