AWS_Certified_Security-Specialty_Practice_Questions

Practice Questions
1. You are developing an application which will use Kinesis stream. The stream will be encrypted using the KMS keys. Upon conducting a load test with around 1500 requests per second; requests were throttled. What could be the reason for it?
A. The number of streams has a limit
B. There is a limit on KMS API calls
C. You can only have 100 shards with 10 records processed per shard
D. AWS Kinesis only allows 1000 records to be read per second
2. The data streams generated by your application are going to be processed by Lambda functions. Which of the two requirements ensure that Kinesis could work with Lambda? (Choose 2)
A. Use the AWSLambdaKinesisExecutionRole
B. Use the AWSLambdaExecutionRole
C. Create a service role of the type AWS Lambda
D. Create a service role of the type AWS Kinesis
3. You are planning to use Kinesis Data Firehose. The data will be sent to S3 bucket and will be encrypted at rest using a KMS key. Which of the following permissions should be there in the policy attached to Kinesis Data Firehose? (Choose 2)
A. Kms:Encrypt
B. Kms:Decrypt
C. Kms:GenerateDataKey
D. Kms:GenerateCustomerKey