A SysOps Administrator runs a web application that is using a microservices approach whereby different responsibilities of the application have been divided in a separate microservice running on a different Amazon EC2 instance. The administrator has been tasked with reconfiguring the infrastructure to support this approach.How can the administrator accomplish this with the LEAST administrative overhead?

Use an Application Load Balancer (ALB) and do path-based routing.

Use Amazon CloudFront to log the URL and forward the request.

Use Amazon CloudFront to rewrite the header based on the microservice and forward the request.

Use an Application Load Balancer (ALB) and do path-based routing.

Use a Network Load Balancer (NLB) and do path-based routing.

A SysOps administrator developed a Python script that uses the AWS SDK to conduct several maintenance tasks. The script needs to run automatically every night. What is the MOST operationally efficient solution that meets this requirement?

Convert the Python script to an AWS Lambda function. Use an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke the function every night.

Convert the Python script to an AWS Lambda function. Use AWS CloudTrail to invoke the function every night.

Deploy the Python script to an Amazon EC2 instance. Use Amazon EventBride (Amazon CloudWatch Events) to schedule the instance to start and stop every night.

Deploy the Python script to an Amazon EC2 instance. Use AWS Systems Manager to schedule the instance to start and stop every night.

A company has set up an IPsec tunnel between its AWS environment and its on-premises data center. The tunnel is reporting as UP, but the Amazon EC2 instances are not able to ping any on-premises resources. What should a SysOps administrator do to resolve this issue?

Create a new inbound rule on the EC2 instances' security groups to allow ICMP traffic from the on-premises CIDR.

Create a peering connection between the IPsec tunnel and the subnet of the EC2 instances.

Enable route propagation for the virtual private gateway in the route table that is assigned to the subnet of the EC2 instances.

Modify the VPC's DHCP options set. Add the IPsec tunnel to the VPN section.

A company using AWS Organizations requires that no Amazon S3 buckets in its production accounts should ever be deleted. What is the SIMPLEST approach the SysOps administrator can take to ensure S3 buckets in those accounts can never be deleted?

Use service control policies to deny the s3:DeleteBucket action on all buckets in production accounts.

Set up MFA Delete on all the S3 buckets to prevent the buckets from being deleted.

Use service control policies to deny the s3:DeleteBucket action on all buckets in production accounts.

Create an IAM group that has an IAM policy to deny the s3:DeleteBucket action on all buckets in production accounts.

Use AWS Shield to deny the s3:DeleteBucket action on the AWS account instead of all S3 buckets.

A company is running a flash sale on its website. The website is hosted on burstable performance Amazon EC2 instances in an Auto Scaling group. The Auto Scaling group is configured to launch instances when the CPU utilization is above 70%.A couple of hours into the sale, users report slow load times and error messages for refused connections. A SysOps administrator reviews Amazon CloudWatch metrics and notices that the CPU utilization is at 20% across the entire fleet of instances.The SysOps administrator must restore the website's functionality without making changes to the network infrastructure. Which solution will meet these requirements?

Move the website to a different AWS Region that is closer to the users.

Activate unlimited mode for the instances in the Auto Scaling group.

Implement an Amazon CloudFront distribution to offload the traffic from the Auto Scaling group.

Move the website to a different AWS Region that is closer to the users.

Reduce the desired size of the Auto Scaling group to artificially increase CPU average utilization.

A company hosts its website in the us-east-1 Region. The company is preparing to deploy its website into the eu-central-1 Region. Website visitors who are located in Europe should access the website that is hosted in eu-central-1. All other visitors access the website that is hosted in us-east-1. The company uses Amazon Route 53 to manage the website's DNS records. Which routing policy should a SysOps administrator apply to the Route 53 record set to meet these requirements?

Multivalue answer routing policy

A SysOps administrator is evaluating Amazon Route 53 DNS options to address concerns about high availability for an onpremises website. The website consists of two servers: a primary active server and a secondary passive server. Route 53 should route traffic to the primary server if the associated health check returns 2xx or 3xx HTTP codes. All other traffic should be directed to the secondary passive server. The failover record type, set ID, and routing policy have been set appropriately for both primary and secondary servers.Which next step should be taken to configure Route 53?

Create an alias record for each server with evaluate target health set to yes. Associate the records with the Route 53 HTTP health check.

Create an A record for each server. Associate the records with the Route 53 HTTP health check.

Create an A record for each server. Associate the records with the Route 53 TCP health check.

Create an alias record for each server with evaluate target health set to yes. Associate the records with the Route 53 HTTP health check.

Create an alias record for each server with evaluate target health set to yes. Associate the records with the Route 53 TCP health check.

A company is supporting a business-critical application that runs on Amazon EC2 instances. The application receives data from a service that runs in an on-premises data center. End users are reporting intermittent issues that are related to data refreshes. The issues are occurring because of fluctuations in available network bandwidth between AWS and the onpremises data center. A SysOps administrator must improve the user experience and the application's performance while minimizing changes to the application stack. Which solution will offer the MOST performance improvement while meeting these requirements?

Modify the service to use Amazon S3 Transfer Acceleration.

Migrate the service to AWS Implement auto scaling.

Modify the service to use Amazon S3 Transfer Acceleration.

Set up an AWS Direct Connect connection with the on-premises data center.

Use AWS Storage Gateway to move the data into AWS.

A company uses AWS CloudFormation to deploy its application infrastructure. Recently, a user accidentally changed a property of a database in a CloudFormation template and performed a stack update that caused an interruption to the application. A SysOps administrator must determine how to modify the deployment process to allow the DevOps team to continue to deploy the infrastructure, but prevent against accidental modifications to specific resources. Which solution will meet these requirements?

Launch the CloudFormation templates using a stack policy with an explicit allow for all resources and an explicit deny of the protected resources with an action of Update:*

Set up an AWS Config rule to alert based on changes to any CloudFormation stack. An AWS Lambda function can then describe the stack to determine if any protected resources were modified and cancel the operation.

Set up an Amazon CloudWatch Events event with a rule to trigger based on any CloudFormation API call. An AWS Lambda function can then describe the stack to determine if any protected resources were modified and cancel the operation.

Launch the CloudFormation templates using a stack policy with an explicit allow for all resources and an explicit deny of the protected resources with an action of Update:*

Attach an IAM policy to the DevOps team role that prevents a CloudFormation stack from updating, with a condition based on the specific Amazon Resource Names (ARNs) of the protected resources.

A software development company has multiple developers who work on the same product. Each developer must have their own development environments, and these development environments must be identical. Each development environment consists of Amazon EC2 instances and an Amazon RDS DB instance. The development environments should be created only when necessary, and they must be terminated each night to minimize costs. What is the MOST operationally efficient solution that meets these requirements?

Provide developers with CLI commands so that they can provision their own development environment when necessary. Schedule a nightly Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function to terminate all EC2 instances and the DB instance.

Provide developers with access to the same AWS CloudFormation template so that they can provision their development environment when necessary. Schedule a nightly cron job on each development instance to stop all running processes to reduce CPU utilization to nearly zero.

Provide developers with access to the same AWS CloudFormation template so that they can provision their development environment when necessary. Schedule a nightly Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function to delete the AWS CloudFormation stacks.

Provide developers with CLI commands so that they can provision their own development environment when necessary. Schedule a nightly Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function to terminate all EC2 instances and the DB instance.

Provide developers with CLI commands so that they can provision their own development environment when necessary. Schedule a nightly Amazon EventBridge (Amazon CloudWatch Events) rule to cause AWS CloudFormation to delete all of the development environment resources.

A SysOps administrator is optimizing the cost of a workload. The workload is running in multiple AWS Regions and is using AWS Lambda with Amazon EC2 On-Demand Instances for the compute. The overall usage is predictable. The amount of compute that is consumed in each Region varies, depending on the users' locations.Which approach should the SysOps administrator use to optimize this workload?

Purchase EC2 Instance Savings Plans based on the usage during the past 30 days.

Purchase Compute Savings Plans based on the usage during the past 30 days.

Purchase Convertible Reserved Instances by calculating the usage baseline.

Purchase EC2 Instance Savings Plans based on the usage during the past 30 days.

Purchase Standard Reserved Instances by calculating the usage baseline.

A SysOps administrator needs to give users the ability to upload objects to an Amazon S3 bucket. The SysOps administrator creates a presigned URL and provides the URL to a user, but the user cannot upload an object to the S3 bucket. The presigned URL has not expired, and no bucket policy is applied to the S3 bucket.Which of the following could be the cause of this problem?

The SysOps administrator does not have the necessary permissions to upload the object to the S3 bucket.

The user has not properly configured the AWS CLI with their access key and secret access key.

The SysOps administrator does not have the necessary permissions to upload the object to the S3 bucket.

The SysOps administrator must apply a bucket policy to the S3 bucket to allow the user to upload the object.

The object already has been uploaded through the use of the presigned URL, so the presigned URL is no longer valid.

A company's IT department noticed an increase in the spend of their developer AWS account. There are over 50 developers using the account, and the finance team wants to determine the service costs incurred by each developer. What should a SysOps administrator do to collect this information? (Choose two.)

Activate the createdBy tag in the account.

Analyze the usage with Cost Explorer.

Activate the createdBy tag in the account.

Analyze the usage with Amazon CloudWatch dashboards.

Analyze the usage with Cost Explorer.

Configure AWS Trusted Advisor to track resource usage.

Create a billing alarm in AWS Budgets.

A company uses an Amazon RDS DB instance for data storage for its web application. For disaster recovery purposes, a SysOps administrator has configured an AWS Lambda function that copies the daily DB snapshot to the us-west-2- Region.The SysOps administrator must provide a custom DNS name, myexampledb, for the DB instance so that the company's developers do not need to update the application code if the DB snapshot must be restored in another Region. The company hosts its corporate domain, example.com, on Amazon Route 53.Which solution will meet these requirements?

Locate the IP address of the DB instance. Create a Route 53 alias record that maps myexampledb.example.com to the IP address. Instruct the developers to refer to myexampledb.example.com in their application. After restoring the DB snapshot in us-west-2, update the alias record to point to the new DB instance IP address.

Create a Route 53 alias record that maps myexampledb.example.com to the DB instance domain name. Instruct the developers to refer to myexampledb.example.com in their application. After restoring the DB snapshot in us-west-2, update the alias record to point to the new DB instance domain name.

Create a Route 53 CNAME record that maps myexampledb.example.com to the DB instance domain name. Instruct the developers to refer to myexampledb.example.com in their application. After restoring the DB snapshot in us-west-2, update the CNAME record to point to the new DB instance domain name.

Locate the IP address of the DB instance. Create a Route 53 A record that maps myexamplebd.example.com to the IP address. Instruct the developers to refer to myexampledb.example.com in their application. After restoring the DB snapshot in us-west-2, update the A record to point to the new DB instance IP address.

Locate the IP address of the DB instance. Create a Route 53 alias record that maps myexampledb.example.com to the IP address. Instruct the developers to refer to myexampledb.example.com in their application. After restoring the DB snapshot in us-west-2, update the alias record to point to the new DB instance IP address.

With the threat of ransomware viruses encrypting and holding company data hostage, which action should be taken to protect an Amazon S3 bucket?

Enable Amazon S3 versioning on the bucket.

Deny Post, Put, and Delete on the bucket.

Enable server-side encryption on the bucket.

Enable Amazon S3 versioning on the bucket.

Enable snapshots on the bucket.

A company manages an application that uses Amazon ElastiCache for Redis with two extra-large nodes spread across two different Availability Zones. The company's IT team discovers that the ElastiCache for Redis cluster has 75% freeable memory. The application must maintain high availability.What is the MOST cost-effective way to resize the cluster?

Perform an online resizing for the ElastiCache for Redis cluster. Change the node types from extra-large nodes to large nodes.

Decrease the number of nodes in the ElastiCache for Redis cluster from 2 to 1.

Deploy a new ElastiCache for Redis cluster that uses large node types. Migrate the data from the original cluster to the new cluster. After the process is complete, shut down the original cluster.

Deploy a new ElastiCache for Redis cluster that uses large node types. Take a backup from the original cluster, and restore the backup in the new cluster. After the process is complete, shut down the original cluster.

Perform an online resizing for the ElastiCache for Redis cluster. Change the node types from extra-large nodes to large nodes.

An existing, deployed solution uses Amazon EC2 instances with Amazon EBS General Purpose SSD volumes, an Amazon RDS PostgreSQL database, an Amazon EFS file system, and static objects stored in an Amazon S3 bucket. The Security team now mandates that at-rest encryption be turned on immediately for all aspects of the application, without creating new resources and without any downtime. To satisfy the requirements, which one of these services can the SysOps administrator enable at-rest encryption on?

EBS General Purpose SSD volumes

A SysOps administrator notices a scale-up event for an Amazon EC2 Auto Scaling group. Amazon CloudWatch shows a spike in the RequestCount metric for the associated Application Load Balancer. The administrator would like to know the IP addresses for the source of the requests.Where can the administrator find this information?

Elastic Load Balancer access logs

A company is running an application on premises and wants to use AWS for data backup. All of the data must be available locally. The backup application can write only to block-based storage that is compatible with the Portable Operating System Interface (POSIX).Which backup solution will meet these requirements?

Use AWS Storage Gateway, and configure it to use gateway-stored volumes.

Configure the backup software to use Amazon S3 as the target for the data backups.

Configure the backup software to use Amazon S3 Glacier as the target for the data backups.

Use AWS Storage Gateway, and configure it to use gateway-cached volumes.

Use AWS Storage Gateway, and configure it to use gateway-stored volumes.

A company has an Amazon RDS DB instance. The company wants to implement a caching service while maintaining high availability. Which combination of actions will meet these requirements? (Choose two.)

Add Auto Discovery to the data store.

Enable Multi-AZ for the data store.

Add Auto Discovery to the data store.

Create an Amazon ElastiCache for Memcached data store.

Create an Amazon ElastiCache for Redis data store.

Enable Multi-AZ for the data store.

Enable Multi-threading for the data store.

A SysOps administrator must create a solution that immediately notifies software developers if an AWS Lambda function experiences an error. Which solution will meet this requirement?

Verify each developer mobile phone in Amazon Simple Email Service (Amazon SES). Create an Amazon EventBridge (Amazon CloudWatch Events) rule by using Error as the event pattern and the Lambda function name as a resource. Configure the rule to send a push notification through Amazon SES when the rule state reaches ALARM.

Create an Amazon Simple Notification Service (Amazon SNS) topic with an email subscription for each developer. Create an Amazon CloudWatch alarm by using the Errors metric and the Lambda function name as a dimension. Configure the alarm to send a notification to the SNS topic when the alarm state reaches ALARM.

Create an Amazon Simple Notification Service (Amazon SNS) topic with a mobile subscription for each developer. Create an Amazon EventBridge (Amazon CloudWatch Events) alarm by using the LambdaError as the event pattern and the SNStopic name as a resource. Configure the alarm to send a notification to the SNS topic when the alarm state reaches ALARM.

Verify each developer email address in Amazon Simple Email Service (Amazon SES). Create an Amazon CloudWatch rule by using the LambdaError metric and developer email addresses as dimensions. Configure the rule to send an email through Amazon SES when the rule state reaches ALARM.

Verify each developer mobile phone in Amazon Simple Email Service (Amazon SES). Create an Amazon EventBridge (Amazon CloudWatch Events) rule by using Error as the event pattern and the Lambda function name as a resource. Configure the rule to send a push notification through Amazon SES when the rule state reaches ALARM.

A large company is using AWS Organizations to manage its multi-account AWS environment. According to company policy, all users should have read-level access to a particular Amazon S3 bucket in a central account. The S3 bucket data should not be available outside the organization. A SysOps administrator must set up the permissions and add a bucket policy to the S3 bucket. Which parameters should be specified to accomplish this in the MOST efficient manner?

Specify "*" as the principal and PrincipalOrgId as a condition.

Specify all account numbers as the principal.

Specify PrincipalOrgId as the principal.

Specify the organization's master account as the principal.

A company is planning to host an application on a set of Amazon EC2 instances that are distributed across multiple Availability Zones. The application must be able to scale to millions of requests each second.A SysOps administrator must design a solution to distribute the traffic to the EC2 instances. The solution must be optimized to handle sudden and volatile traffic patterns while using a single static IP address for each Availability Zone.Which solution will meet these requirements?

Amazon Simple Queue Service (Amazon SQS) queue

A company has a critical serverless application that uses multiple AWS Lambda functions. Each Lambda function generates 1 GB of log data daily in its own Amazon CloudWatch Logs log group. The company's security team asks for a count of application errors, grouped by type, across all of the log group.What should a SysOps administrator do to meet this requirement?

Perform a CloudWatch Logs Insights query that uses the stats command and count function.

Perform a CloudWatch Logs search that uses the groupby keyword and count function.

Perform an Amazon Athena query that uses the SELECT and GROUP BY keywords.

Perform an Amazon RDS query that uses the SELECT and GROUP BY keywords.

A company is running an application on a fleet of Amazon EC2 instances behind an Application Load Balancer (ALB). The EC2 instances are launched by an Auto Scaling group and are automatically registered in a target group. A SysOps administrator must set up a notification to alert application owners when targets fail health checks. What should the SysOps administrator do to meet these requirements?

Create an Amazon CloudWatch alarm on the UnHealthyHostCount metric. Configure an action to send an Amazon Simple Notification Service (Amazon SNS) notification when the metric is greater than 0.

Configure an Amazon EC2 Auto Scaling custom lifecycle action to send an Amazon Simple Notification Service (Amazon SNS) notification when an instance is in the Pending: Wait state.

Update the Auto Scaling group. Configure an activity notification to send an Amazon Simple Notification Service (Amazon SNS) notification for the Unhealthy event type.

Update the ALB health check to send an Amazon Simple Notification Service (Amazon SNS) notification when an instance is unhealthy.

A SysOps administrator is troubleshooting an AWS CloudFormation template whereby multiple Amazon EC2 instances are being created. The template is working in us-east-1, but it is failing in us-west-2 with the error code:AMI [ami-12345678] does not existHow should the Administrator ensure that the AWS CloudFormation template is working in every region?

Modify the AWS CloudFormation template by including the AMI IDs in the "Mappings" section. Refer to the proper mapping within the template for the proper AMI ID.

Copy the source region's Amazon Machine Image (AMI) to the destination region and assign it the same ID.

Edit the AWS CloudFormation template to specify the region code as part of the fully qualified AMI ID.

Edit the AWS CloudFormation template to offer a drop-down list of all AMIs to the user by using the AWS::EC2::AMI::ImageID control.

Modify the AWS CloudFormation template by including the AMI IDs in the "Mappings" section. Refer to the proper mapping within the template for the proper AMI ID.

An organization created an Amazon Elastic File System (Amazon EFS) volume with a file system ID of fs-85ba41fc, and it is actively used by 10 Amazon EC2 hosts. The organization has become concerned that the file system is not encrypted.How can this be resolved?

Enable encryption on a newly created volume and copy all data from the original volume. Reconnect each host to the new volume.

Enable encryption on each host's connection to the Amazon EFS volume. Each connection must be recreated for encryption to take effect.

Enable encryption on the existing EFS volume by using the AWS Command Line Interface.

Enable encryption on each host's local drive. Restart each host to encrypt the drive.

Enable encryption on a newly created volume and copy all data from the original volume. Reconnect each host to the new volume.

An organization finds that a high number of gp2 Amazon EBS volumes are running out of space.Which solution will provide the LEAST disruption with MINIMAL effort?

Leverage the Elastic Volumes feature of EBS to increase gp2 volume size.

Create a snapshot and restore it to a larger gp2 volume.

Create a RAID 0 with another new gp2 volume to increase capacity.

Leverage the Elastic Volumes feature of EBS to increase gp2 volume size.

Write a script to migrate data to a larger gp2 volume.

A company hosts a website on multiple Amazon EC2 instances that run in an Auto Scaling group. Users are reporting slow responses during peak times between 6 PM and 11 PM every weekend. A SysOps administrator must implement a solution to improve performance during these peak times.What is the MOST operationally efficient solution that meets these requirements?

Configure a scheduled scaling action with a recurrence option to change the desired capacity before and after peak times.

Create a scheduled Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function to increase the desired capacity before peak times.

Configure a scheduled scaling action with a recurrence option to change the desired capacity before and after peak times.

Create a target tracking scaling policy to add more instances when memory utilization is above 70%.

Configure the cooldown period for the Auto Scaling group to modify desired capacity before and after peak times.

A company's SysOps administrator has created an Amazon EC2 instance with custom software that will be used as a template for all new EC2 instances across multiple AWS accounts. The Amazon Elastic Block Store (Amazon EBS) volumes that are attached to the EC2 instance are encrypted with AWS managed keys.The SysOps administrator creates an Amazon Machine Image (AMI) of the custom EC2 instance and plans to share the AMI with the company's other AWS accounts. The company requires that all AMIs are encrypted with AWS Key Management Service (AWS KMS) keys and that only authorized AWS accounts can access the shared AMIs.Which solution will securely share the AMI with the other AWS accounts?

In the account where the AMI was created, create a customer master key (CMK). Modify the key policy to provide kms:DescribeKey, kms:ReEncrypt*, kms:CreateGrant, and kms:Decrypt permissions to the AWS accounts that the AMI will be shared with. Create a copy of the AMI, and specify the CMK. Modify the permissions on the copied AMI to make it public.

In the account where the AMI was created, create a customer master key (CMK). Modify the key policy to provide kms:DescribeKey, kms:ReEncrypt*, kms:CreateGrant, and kms:Decrypt permissions to the AWS accounts that the AMI will be shared with. Modify the AMI permissions to specify the AWS account numbers that the AMI will be shared with.

In the account where the AMI was created, create a customer master key (CMK). Modify the key policy to provide kms:DescribeKey, kms:ReEncrypt*, kms:CreateGrant, and kms:Decrypt permissions to the AWS accounts that the AMI will be shared with. Create a copy of the AMI, and specify the CMK. Modify the permissions on the copied AMI to specify the AWS account numbers that the AMI will be shared with.

In the account where the AMI was created, create a customer master key (CMK). Modify the key policy to provide kms:DescribeKey, kms:ReEncrypt*, kms:CreateGrant, and kms:Decrypt permissions to the AWS accounts that the AMI will be shared with. Create a copy of the AMI, and specify the CMK. Modify the permissions on the copied AMI to make it public.

In the account where the AMI was created, modify the key policy of the AWS managed key to provide kms:DescribeKey, kms:ReEncrypt*, kms:CreateGrant, and kms:Decrypt permissions to the AWS accounts that the AMI will be shared with.Modify the AMI permissions to specify the AWS account numbers that the AMI will be shared with.

A company needs to restrict access to an Amazon S3 bucket to Amazon EC2 instances in a VPC only. All traffic must be over the AWS private network. What actions should the SysOps administrator take to meet these requirements?

Create a VPC endpoint for the S3 bucket, and create an S3 bucket policy that conditionally limits all S3 actions on the bucket to the VPC endpoint as the source.

Create a VPC endpoint for the S3 bucket, and create an IAM policy that conditionally limits all S3 actions on the bucket to the VPC endpoint as the source.

Create a VPC endpoint for the S3 bucket, and create an S3 bucket policy that conditionally limits all S3 actions on the bucket to the VPC endpoint as the source.

Create a service-linked role for Amazon EC2 that allows the EC2 instances to interact directly with Amazon S3, and attach an IAM policy to the role that allows the EC2 instances full access to the S3 bucket.

Create a NAT gateway in the VPC, and modify the VPC route table to route all traffic destined for Amazon S3 through the NAT gateway.

A company has a VPC with public and private subnets. An Amazon EC2 based application resides in the private subnets and needs to process raw .csv files stored in an Amazon S3 bucket. A SysOps administrator has set up the correct IAM role with the required permissions for the application to access the S3 bucket, but the application is unable to communicate with the S3 bucket. Which action will solve this problem while adhering to least privilege access?

Configure the route table to allow the instances on the private subnet access through the internet gateway.

Add a bucket policy to the S3 bucket permitting access from the IAM role.

Attach an S3 gateway endpoint to the VPC. Configure the route table for the private subnet.

Configure the route table to allow the instances on the private subnet access through the internet gateway.

Create a NAT Gateway in a private subnet and configure the route table for the private subnets.

A SysOps administrator noticed that a large number of Elastic IP addresses are being created on the company's AWS account, but they are not being associated with Amazon EC2 instance, and are incurring Elastic IP address charges in the monthly bill.How can the administrator identify who is creating the Elastic IP addresses?

Attach a cost-allocation tag to each requested Elastic IP address with the IAM user name of the developer who creates it.

Query AWS CloudTrail logs by using Amazon Athena to search for Elastic IP address events.

Create a CloudWatch alarm on the EIPCreated metric and send an Amazon SNS notification when the alarm triggers.

Use Amazon Inspector to get a report of all Elastic IP addresses created in the last 30 days.

A SysOps administrator is deploying an application on 10 Amazon EC2 instances. The application must be highly available. The instances must be placed on distinct underlying hardware.What should the SysOps administrator do to meet these requirements?

Launch the instances into a partition placement group in multiple AWS Regions.

Launch the instances into a cluster placement group in a single AWS Region.

Launch the instances into a partition placement group in multiple AWS Regions.

Launch the instances into a spread placement group in multiple AWS Regions.

Launch the instances into a spread placement group in a single AWS Region.

A SysOps administrator is investigating issues on an Amazon RDS for MariaDB DB instance. The SysOps administrator wants to display the database load categorized by detailed wait events. How can the SysOps administrator accomplish this goal?

Enable Amazon RDS Performance Insights.

Create an Amazon CloudWatch dashboard.

Enable Amazon RDS Performance Insights.

Enable and configure Enhanced Monitoring.

Review the database logs in Amazon CloudWatch Logs.

Amazon SOA-C02 Practice Test 1 - Free Online Exam Prep & Questions

Question 1 / 40

A data storage company provides a service that gives users the ability to upload and download files as needed. The files are stored in Amazon S3 Standard and must be immediately retrievable for 1 year. Users access files frequently during the first 30 days after the files are stored. Users rarely access files after 30 days.

The company's SysOps administrator must use S3 Lifecycle policies to implement a solution that maintains object availability and minimizes cost.

Which solution will meet these requirements?

Move objects to S3 Glacier after 30 days.

Move objects to S3 One Zone-Infrequent Access (S3 One Zone-IA) after 30 days.

Move objects to S3 Standard-Infrequent Access (S3 Standard-IA) after 30 days.

Move objects to S3 Standard-Infrequent Access (S3 Standard-IA) immediately.

Comment (0)

Amazon SOA-C02 Practice Test 1

Question

Amazon SOA-C02 Practice Tests

Practice Tests