A SysOps administrator is reviewing VPC Flow Logs to troubleshoot connectivity issues in a VPC.While reviewing the togs the SysOps administrator notices that rejected traffic is not listed.What should the SysOps administrator do to ensure that all traffic is logged?

Create a new flow tog that has a titter setting to capture all traffic

Create a new flow log set the tog record format to a custom format Select the proper fields to include in the tog

Edit the existing flow log Change the fitter setting to capture all traffic

Edit the existing flow log. Set the log record format to a custom format Select the proper fields to include in the tog

A company uses an Amazon CloudFront distribution to deliver its website Traffic togs for the website must be centrally stored and all data must be encrypted at rest Which solution will meet these requirements?

Create an Amazon S3 bucket that is configured with default server side encryption that uses AES- 256 Configure CloudFront to use the S3 bucket as a log destination

Create an Amazon OpenSearch Service (Amazon Elasttcsearch Service) domain with internet access and server-side encryption that uses the default AWS managed key Configure CloudFront to use the Amazon OpenSearch Service (Amazon Elasticsearch Service) domain as a log destination

Create an Amazon OpenSearch Service (Amazon Elasticsearch Service) domain with VPC access and server-side encryption that uses AES-256 Configure CloudFront to use the Amazon OpenSearch Service (Amazon Elastcsearch Service) domain as a log destination

Create an Amazon S3 bucket that is configured with default server side encryption that uses AES- 256 Configure CloudFront to use the S3 bucket as a log destination

Create an Amazon S3 bucket that is configured with no default encryption Enable encryption in the CloudFront dtstnbubon and use the S3 bucket as a log destination

A company creates custom AMI images by launching new Amazon EC2 instances from an AWS CloudFormation template it installs and configure necessary software through AWS OpsWorks and takes images of each EC2 instance. The process of installing and configuring software can take between 2 to 3 hours but at limes the process stalls due to installation errors. The SysOps administrator must modify the CloudFormation template so if the process stalls, the entire stack will tail and roil back. Based on these requirements what should be added to the template?

CreationPolicy with timeout set to 4 hours.

Conditions with a timeout set to 4 hours.

CreationPolicy with timeout set to 4 hours.

DependsOn a timeout set to 4 hours.

Metadata with a timeout set to 4 hours

A company uses an Amazon Simple Queue Service (Amazon SQS) standard queue with its application. The application sends messages to the queue with unique message bodies The company decides to switch to an SQS FIFO queue What must the company do to migrate to an SQS FIFO queue?

Create a new SQS FIFO gueue Turn on content based deduplication on the new FIFO queue Update the application to include a message group ID in the messages

Create a new SQS FIFO queue Update the application to include the DelaySeconds parameter in the messages

Modify the queue type from SQS standard to SQS FIFO Turn off content-based deduplication on the queue Update the application to include a message group ID in the messages

Modify the queue type from SQS standard to SQS FIFO Update the application to send messages with identical message bodies and to include the DelaySeconds parameter in the messages

A database is running on an Amazon RDS Mufti-AZ DB instance. A recent security audit found the database to be out of compliance because it was not encrypted. Which approach will resolve the encryption requirement?

Take a snapshot of the RDS instance, copy and encrypt the snapshot and then restore to the new RDS instance

Log in to the RDS console and select the encryption box to encrypt the database

Create a new encrypted Amazon EBS volume and attach it to the instance

Encrypt the standby replica in the secondary Availability Zone and promote it to the primary instance.

Take a snapshot of the RDS instance, copy and encrypt the snapshot and then restore to the new RDS instance

A SysOps administrator is tasked with deploying a company's infrastructure as code. The SysOps administrator want to write a single template that can be reused for multiple environments. How should the SysOps administrator use AWS CloudFormation to create a solution?

Use parameters in a CloudFormation template

Use Amazon EC2 user data in a CloudFormation template

Use nested stacks to provision resources

Use parameters in a CloudFormation template

Use stack policies to provision resources

A company's web application is available through an Amazon CloudFront distribution and directly through an internet-facing Application Load Balancer (ALB) A SysOps administrator must make the application accessible only through the CloudFront distribution and not directly through the ALB. The SysOps administrator must make this change without changing the application code Which solution will meet these requirements?

Add a custom HTTP header to the origin settings for the distribution in the ALB listener add a ruleto forward requests that contain the matching custom header and the header's value Add a defaultrule to return a fixed response code of 403.

Modify the ALB type to internal Set the distribution's origin to the internal ALB domain name

Create a Lambda@Edge function Configure the function to compare a custom header value in the request with a stored password and to forward the request to the origin in case of a match Associate the function with the distribution.

Replace the ALB with a new internal ALB Set the distribution's origin to the internal ALB domain name Add a custom HTTP header to the origin settings for the distribution In the ALB listener add a rule to forward requests that contain the matching custom header and the header's value Add a default rule to return a fixed response code of 403.

Add a custom HTTP header to the origin settings for the distribution in the ALB listener add a ruleto forward requests that contain the matching custom header and the header's value Add a defaultrule to return a fixed response code of 403.

A compliance team requires all administrator passwords tor Amazon RDS DB instances to be changed at toast annually Which solution meets this requirement in the MOST operationally efficient manned

Store the database credentials in AWS Secrets Manager Configure automate rotation for the secret every 365 days

Store the database credentials as a parameter in the RDS parameter group Create a database trigger to rotate the password every 365 days

Store the database credentials in a private Amazon S3 bucket Schedule an AWS Lambda function to generate a new set of credentials every 365 days

Store the database credentials in AWS Systems Manager Parameter Store as a secure string parameter Configure automatic rotation for the parameter every 365 days

A SysOps administrator is responsible for a large fleet of Amazon EC2 instances and must know whether any instances will be affected by upcoming hardware maintenance. Which option would provide this information with the LEAST administrative overhead?

Review the AWS Personal Health Dashboard

Deploy a third-party monitoring solution to provide real-time EC2 instance monitoring

List any instances with failed system status checks using the AWS Management Console

Monitor AWS CloudTrail for Stopinstances API calls

Review the AWS Personal Health Dashboard

A SysOps administrator must configure a resilient tier of Amazon EC2 instances for a high performance computing (HPC) application. The HPC application requires minimum latency between nodes Which actions should the SysOps administrator take to meet these requirements? (Select TWO.)

Create an Amazon Elastic File System (Amazon EPS) file system Mount the file system to the EC2 instances by using user data

Launch the EC2 instances into a cluster placement group

Create an Amazon Elastic File System (Amazon EPS) file system Mount the file system to the EC2 instances by using user data

Create a Multi-AZ Network Load Balancer in front of the EC2 instances

Place the EC2 instances in an Auto Scaling group within a single subnet

Launch the EC2 instances into a cluster placement group

Launch the EC2 instances into a partition placement group

A SysOps administrator is unable to authenticate an AWS CLI call to an AWS service Which of the following is the cause of this issue?

The server certificate is missing

A company is expanding its use of AWS services across its portfolios The company wants to provision AWS accounts for each team to ensure a separation of business processes for security compliance and billing Account creation and bootstrapping should be completed m a scalable and efficient way so new accounts are created with a defined baseline and governance guardrails in place A SysOps administrator needs to design a provisioning process that saves time and resources Which action should be taken to meet these requirements?

Use AWS Control Tower to create a template in Account Factory and use the template to provision new accounts

Automate using AWS Elastic Beanstalk to provision the AWS accounts set up infrastructure and integrate with AWS Organizations

Create bootstrapping scripts in AWS OpsWorks and combine them with AWS CloudFormation templates to provision accounts and infrastructure

Use AWS Config to provision accounts and deploy instances using AWS Service Catalog

Use AWS Control Tower to create a template in Account Factory and use the template to provision new accounts

A SysOps administrator is unable to launch Amazon EC2 instances into a VPC because there are no available private IPv4 addresses in the VPC. Which combination of actions must the SysOps administrator take to launch the instances? (Select TWO.)

Associate a secondary IPv4 CIDR block with the VPC

Modify the CIDR block of the VPC

Associate a secondary IPv4 CIDR block with the VPC

Associate a primary IPv6 CIDR block with the VPC

Create a new subnet for the VPC

Modify the CIDR block of the VPC

Modify the CIDR block of the subnet that is associated with the instances

A SysOps administrator needs to develop a solution that provides email notification and inserts a record into a database every time a file is put into an Amazon S3 bucket. What is the MOST operationally efficient solution that meets these requirements?

Create an AWS Lambda function to send the email notification and insert the record into the database whenever a new object is detected in the S3 bucket invoke the function every minute with an Amazon EventBridge (Amazon CloudWatch Events) scheduled rule

Set up an S3 event notification that targets an Amazon Simple Notification Service (Amazon SNS) topic Create two subscriptions for the SNS topic Use one subscription to send the email notification Use the other subscription to invoke an AWS Lambda function that inserts the record into the database

Set up an Amazon CloudWatch alarm that enters ALARM state whenever an object is created in the S3 bucket Configure the alarm to invoke an AWS Lambda (unction that sends the email notification and inserts the record into the database

Create an AWS Lambda function to send the email notification and insert the record into the database whenever a new object is detected in the S3 bucket invoke the function every minute with an Amazon EventBridge (Amazon CloudWatch Events) scheduled rule

Set up two S3 event notifications Target a separate AWS Lambda function with each notification Configure one function to send the email notification Configure the other function to insert the record into the database

A company needs to upload gigabytes of files every day. The company need to achieve higher throughput and upload speeds to Amazon S3 Which action should a SysOps administrator take to meet this requirement?

Enable S3 Transfer Acceleration and use the acceleration endpoint when uploading files

Create an Amazon CloudFront distribution with the GET HTTP method allowed and the S3 bucketas an origin.

Create an Amazon ElastiCache duster and enable caching for the S3 bucket

Set up AWS Global Accelerator and configure it with the S3 bucket

Enable S3 Transfer Acceleration and use the acceleration endpoint when uploading files

A company requires that all IAM user accounts that have not been used for 90 days or more must have their access keys and passwords immediately disabled A SysOps administrator must automate the process of disabling unused keys using the MOST operationally efficient method.How should the SysOps administrator implement this solution?

Set up an AWS Config managed rule to identify IAM users that have not been active for 90 days Set up an AWS Systems Manager automation runbook to disable the AWS access keys for these IAM users

Create an AWS Step Functions workflow to identify IAM users that have not been active for 90 days Run an AWS Lambda function when a scheduled Amazon EventBridge (Amazon CloudWatch Events) rule is invoked to automatically remove the AWS access keys and passwords for these IAM users

Configure an AWS Config rule to identify IAM users that have not been active for 90 days Set up an automatic weekly batch process on an Amazon EC2 instance to disable the AWS access keys and passwords for these IAM users

Develop and run a Python script on an Amazon EC2 instance to programmatically identify IAM users that have not been active for 90 days Automatically delete these 1AM users

Set up an AWS Config managed rule to identify IAM users that have not been active for 90 days Set up an AWS Systems Manager automation runbook to disable the AWS access keys for these IAM users

A company plans to run a public web application on Amazon EC2 instances behind an Elastic Load Balancer (ELB). The company's security team wants to protect the website by using AWS Certificate Manager (ACM) certificates The ELB must automatically redirect any HTTP requests to HTTPS Which solution will meet these requirements?

Create an Application Load Balancer that has one HTTP listener on port 80 and one HTTPS protocollistener on port 443 Attach an SSL TLS certificate to listener port 443 Create a rule to redirect requestsfrom port 80 to port 443

Create an Application Load Balancer that has one HTTPS listener on port 80 Attach an SSLTLScertificate to listener port 80 Create a rule to redirect requests from HTTP to HTTPS

Create an Application Load Balancer that has one HTTP listener on port 80 and one HTTPS protocollistener on port 443 Attach an SSL TLS certificate to listener port 443 Create a rule to redirect requestsfrom port 80 to port 443

Create an Application Load Balancer that has two TCP listeners on port 80 and port 443 Attach an SSLTLS certificate to listener port 443 Create a rule to redirect requests from port 80 to port 443

Create a Network Load Balancer that has two TCP listeners on port 80 and port 443 Attach an SSLTLS certificate to listener port 443 Create a rule to redirect requests from port 80 to port 443

A SysOps administrator is setting up a fleet of Amazon EC2 instances in an Auto Scaling group for an application. The fleet should have 50% CPU available at that times to accommodate bursts of traffic. The load will increase significantly between the hours of 09:00 and 17:00,7 days a week How should the SysOps administrator configure the scaling of the EC2 instances to meet these requirements?

Create a target tracking scaling policy that runs when the CPU utilization is higher than 50%.Create a scheduled scaling policy that ensures that the fleet is available at 09:00 Create a second scheduled scaling policy that scales in the fleet at 17:00

Create a target tracking scaling policy that runs when the CPU utilization is higher than 90%

Create a target tracking scaling policy that runs when the CPU utilization is higher than 50%.Create a scheduled scaling policy that ensures that the fleet is available at 09:00 Create a second scheduled scaling policy that scales in the fleet at 17:00

Set the Auto Scaling group to start with 2 instances by setting the desired instances maximum instances, and minimum instances to 2 Create a scheduled scaling policy that ensures that the fleet is available at 09:00

Create a scheduled scaling policy that ensures that the fleet is available at 09.00. Create a second scheduled scaling policy that scales in the fleet at 17:00

A SysOps administrator receives an alert from Amazon GuardDuty about suspicious network activity on an Amazon FC2 instance. The GuardDuty finding lists a new external IP address as a traffic destination. The SysOps administrator does not recognize the external IP address. The SysOps administrator must block traffic to the external IP address that GuardDuty identified Which solution will meet this requirement?

Create a new security group to block traffic to the external IP address. Assign the new security group to the EC2 instance

Use VPC flow logs with Amazon Athena to block traffic to the external IP address

Create a network ACL Add an outbound deny rule tor traffic to the external IP address

Create a new security group to block traffic to the external IP address Assign the new security group to the entire VPC

A SysOps administrator is designing a solution for an Amazon RDS for PostgreSQL DB instance.Database credentials must be stored and rotated monthly. The applications that connect to the DB instance send write-intensive traffic with variable client connections that sometimes increase significantly in a short period of time. Which solution should a SysOps administrator choose to meet these requirements?

Configure AWS Key Management Service (AWS KMS) to automatically rotate the keys for the DB instance. Use RDS Proxy to handle the increases in database connections.

Configure AWS Key Management Service (AWS KMS) to automatically rotate the keys for the DB instance. Use RDS read replicas to handle the increases in database connections.

Configure AWS Secrets Manager to automatically rotate the credentials for the DB instance. Use RDS Proxy to handle the increases in database connections.

Configure AWS Secrets Manager to automatically rotate the credentials for the DB instance. Use RDS read replicas to handle the increases in database connections.

An ecommerce company uses an Amazon ElastiCache for Memcached cluster for in-memory caching of popular product queries on the shopping site. When viewing recent Amazon CloudWatch metrics data for the ElastiCache cluster, the SysOps administrator notices a large number of evictions.Which of the following actions will reduce these evictions? (Choose two.)

Add an additional node to the ElastiCache cluster.

Increase the individual node size inside the ElastiCache cluster.

Add an additional node to the ElastiCache cluster.

Increase the ElastiCache time to live (TTL).

Increase the individual node size inside the ElastiCache cluster.

Put an Elastic Load Balancer in front of the ElastiCache cluster.

Use Amazon Simple Queue Service (Amazon SQS) to decouple the ElastiCache cluster.

A company is deploying a third-party unit testing solution that is delivered as an Amazon EC2 Amazon Machine Image (AMI). All system configuration data is stored in Amazon DynamoDB. The testing results are stored in Amazon S3. A minimum of three EC2 instances are required to operate the product. The company's testing team wants to use an additional three EC2 Instances when the Spot Instance prices are at a certain threshold. A SysOps administrator must Implement a highly available solution that provides this functionality.Which solution will meet these requirements with the LEAST operational overhead?

Define an Amazon EC2 Auto Scaling group by using a launch configuration. Use the provided AMI In the launch configuration. Configure three On-Demand Instances and three Spot Instances. Configure a maximum Spot Instance price In the launch configuration.

Define an Amazon EC2 Auto Scaling group by using a launch template. Use the provided AMI in the launch template. Configure three On-Demand Instances and three Spot Instances. Configure a maximum Spot Instance price In the launch template.

Define two Amazon EC2 Auto Scaling groups by using launch configurations. Use the provided AMI in the launch configurations. Configure three On-Demand Instances for one Auto Scaling group. Configure three Spot Instances for the other Auto Scaling group. Configure a maximum Spot Instance price in the launch configuration for the Auto Scaling group that has Spot Instances.

Define two Amazon EC2 Auto Scaling groups by using launch templates. Use the provided AMI in the launch templates. Configure three On-Demand Instances for one Auto Scaling group. Configure three Spot Instances for the other Auto Scaling group. Configure a maximum Spot Instance price in the launch template for the Auto Scaling group that has Spot Instances.

A company stores sensitive data in an Amazon S3 bucket. The company must log all access attempts to the S3 bucket. The company's risk team must receive immediate notification about any delete events. Which solution will meet these requirements?

Enable S3 server access logging for audit logs. Set up an Amazon Simple Notification Service(Amazon SNSJ notification for the S3 bucket. Select DeleteObject tor the event type for the alert system.

Enable S3 server access logging for audit logs. Launch an Amazon EC2 instance for the alert system. Run a cron job on the EC2 instance to download the access logs each day and to scan for a DeleteObject event.

Use Amazon CloudWatch Logs for audit logs. Use Amazon CloudWatch alarms with an Amazon Simple Notification Service (Amazon SNS) notification for the alert system.

Use Amazon CloudWatch Logs for audit logs. Launch an Amazon EC2 instance for The alert system.Run a cron job on the EC2 Instance each day to compare the list of the items with the list from the previous day. Configure the cron job to send a notification if an item is missing.

A compliance learn requites all administrator passwords for Amazon RDS DB instances to be changed at least annually. Which solution meets this requirement in the MOST operationally efficient manner?

Store the database credentials in AWS Secrets Manager. Configure automatic rotation for the secret every 365 days.

Store the database credentials as a parameter In the RDS parameter group. Create a database trigger to rotate the password every 365 days.

Store the database credentials in a private Amazon S3 bucket. Schedule an AWS Lambda function to generate a new set of credentials every 365 days.

Store the database credentials in AWS Systems Manager Parameter Store as a secure string parameter. Configure automatic rotation for the parameter every 365 days.

A company runs workloads on 90 Amazon EC2 instances in the eu-west-1 Region in an AWS account.In 2 months, the company will migrate the workloads from eu-west-1 to the eu-west-3 Region.The company needs to reduce the cost of the EC2 instances. The company is willing to make a 1-year commitment that will begin next week. The company must choose an EC2 Instance purchasing option that will provide discounts for the 90 EC2 Instances regardless of Region during the 1-year period.Which solution will meet these requirements?

Purchase an EC2 Instance Savings Plan.

Purchase EC2 Standard Reserved Instances.

Purchase an EC2 Instance Savings Plan.

Purchase EC2 Convertible Reserved Instances.

Purchase a Compute Savings Plan.

A company wants to archive sensitive data on Amazon S3 Glacier. The company's regulatory and compliance requirements do not allow any modifications to the data by any account. Which solution meets these requirements?

Attach a vault lock policy to an S3 Glacier vault that contains the archived data. Use the lock ID to validate the vault lock policy within 24 hours.

Attach a vault lock policy to an S3 Glacier vault that contains the archived data. Use the lock ID to validate the vault lock policy after 24 hours.

Attach a vault lock policy to an S3 Glacier vault that contains the archived data. Use the lock ID to validate the vault lock policy within 24 hours.

Configure S3 Object Lock in governance mode. Upload all files after 24 hours.

Configure S3 Object Lock in governance mode. Upload all files within 24 hours.

A global company handles a large amount of personally identifiable information (Pll) through an internal web portal. The company's application runs in a corporate data center that is connected to AWS through an AWS Direct Connect connection. The application stores the Pll in Amazon S3.According to a compliance requirement, traffic from the web portal to Amazon S3 must not travel across the internet. What should a SysOps administrator do to meet the compliance requirement?

Provision an interface VPC endpoint for Amazon S3. Modify the application to use the interface endpoint.

Configure AWS Network Firewall to redirect traffic to the internal S3 address.

Modify the application to use the S3 path-style endpoint.

Set up a range of VPC network ACLs to redirect traffic to the Internal S3 address.

A SysOps administrator recently configured Amazon S3 Cross-Region Replication on an S3 bucket Which of the following does this feature replicate to the destination S3 bucket by default?

Objects that are stored in S3 Glacier

Objects in the source S3 bucket for which the bucket owner does not have permissions

Objects that are stored in S3 Glacier

Objects that existed before replication was configured

A company must migrate its applications to AWS The company is using Chef recipes for configuration management The company wants to continue to use the existing Chef recipes after the applications are migrated to AWS. What is the MOST operationally efficient solution that meets these requirements?

Use AWS OpsWorks to create a stack and add layers with Chef recipes.

Use AWS Cloud Format ion to create an Amazon EC2 instance, install a Chef server, and add Chef recipes.

Use AWS CloudFormation to create a stack and add layers for Chef recipes.

Use AWS Elastic Beanstalk with the Docker platform to upload Chef recipes.

Use AWS OpsWorks to create a stack and add layers with Chef recipes.

A company uses an Amazon CloudFront distribution to deliver its website. Traffic logs for the website must be centrally stored, and all data must be encrypted at rest. Which solution will meet these requirements?

Create an Amazon S3 bucket that Is configured with default server-side encryption that uses AES- 256. Configure CloudFront to use the S3 bucket as a log destination.

Create an Amazon OpenSearch Service (Amazon Elasticsearch Service) domain with internet access and server-side encryption that uses the default AWS managed key. Configure CloudFront to use the Amazon OpenSearch Service (Amazon Elasticsearch Service) domain as a log destination.

Create an Amazon OpenSearch Service (Amazon Elasticsearch Service) domain with VPC access and server-side encryption that uses AES-256 Configure CloudFront to use the Amazon OpenSearch Service (Amazon Elasticsearch Service) domain as a log destination.

Create an Amazon S3 bucket that Is configured with default server-side encryption that uses AES- 256. Configure CloudFront to use the S3 bucket as a log destination.

Create an Amazon S3 bucket that is configured with no default encryption. Enable encryption in the CloudFront distribution, and use the S3 bucket as a log destination.

A SysOps administrator is creating an Amazon EC2 Auto Scaling group in a new AWS account. After adding some instances, the SysOps administrator notices that the group has not reached the minimum number of instances. The SysOps administrator receives the following error message: Which action will resolve this issue?

Request a quota Increase for the Instance type family by using Service Quotas on the AWS Management Console.

Adjust the account spending limits for Amazon EC2 on the AWS Billing and Cost Management console

Modify the EC2 quota for that AWS Region in the EC2 Settings section of the EC2 console.

Request a quota Increase for the Instance type family by using Service Quotas on the AWS Management Console.

Use the Rebalance action In the Auto Scaling group on the AWS Management Console.

A company needs to view a list of security groups that are open to the internet on port 3389.What should a SysOps administrator do to meet this requirement?

Use AWS Trusted Advisor to find security groups that allow unrestricted access on port 3389

Configure Amazon GuardDuty to scan security groups and report unrestricted access on port 3389.

Configure a service control policy (SCP) to identify security groups that allow unrestricted access on port 3389.

Use AWS Identity and Access Management Access Analyzer to find any instances that have unrestricted access on port 3389.

Use AWS Trusted Advisor to find security groups that allow unrestricted access on port 3389

A company uses AWS Organizations to manage its AWS accounts. A SysOps administrator must create a backup strategy for all Amazon EC2 instances across all the company's AWS accounts. Which solution will meet these requirements In the MOST operationally efficient way?

Create an AWS CloudFormation stack set in the management account to add an AutoBackup=True tag to every EC2 instance

Deploy an AWS Lambda function to each account to run EC2 instance snapshots on a scheduled basis.

Create an AWS CloudFormation stack set in the management account to add an AutoBackup=True tag to every EC2 instance

Use AWS Backup In the management account to deploy policies for all accounts and resources.

Use a service control policy (SCP) to run EC2 instance snapshots on a scheduled basis in each account.

A company uploaded its website files to an Amazon S3 bucket that has S3 Versioning enabled. The company uses an Amazon CloudFront distribution with the S3 bucket as the origin. The company recently modified the tiles, but the object names remained the same. Users report that old content is still appearing on the website.How should a SysOps administrator remediate this issue?

Create a CloudFront invalidation, and add the path of the updated files.

Create a CloudFront signed URL to update each object immediately.

Configure an S3 origin access identity (OAI) to display only the updated files to users.

Disable S3 Versioning on the S3 bucket so that the updated files can replace the old files.

A company uses AWS Organizations to manage multiple AWS accounts. The company's SysOps team has been using a manual process to create and manage 1AM roles. The team requires an automated solution to create and manage the necessary 1AM roles for multiple AWS accounts.What is the MOST operationally efficient solution that meets these requirements?

Use AWS CloudFormation StackSets with AWS Organizations to deploy and manage 1AM roles for the AWS accounts.

Create AWS CloudFormation templates. Reuse the templates to create the necessary 1AM roles in each of the AWS accounts.

Use AWS Directory Service with AWS Organizations to automatically associate the necessary 1AM roles with Microsoft Active Directory users.

Use AWS Resource Access Manager with AWS Organizations to deploy and manage shared resources across the AWS accounts.

Use AWS CloudFormation StackSets with AWS Organizations to deploy and manage 1AM roles for the AWS accounts.

A company's SysOps administrator attempts to restore an Amazon Elastic Block Store (Amazon EBS) snapshot. However, the snapshot is missing because another system administrator accidentally deleted the snapshot. The company needs the ability to recover snapshots for a specified period of time after snapshots are deleted.Which solution will provide this functionality?

Create an 1AM policy that denies the deletion of EBS snapshots by using a condition statement for the snapshot age Apply the policy to all users

Turn on deletion protection on individual EBS snapshots that need to be kept.

Create an 1AM policy that denies the deletion of EBS snapshots by using a condition statement for the snapshot age Apply the policy to all users

Create a Recycle Bin retention rule for EBS snapshots for the desired retention period.

Use Amazon EventBridge (Amazon CloudWatch Events) to schedule an AWS Lambda function to copy EBS snapshots to Amazon S3 Glacier.

A company is using Amazon Elastic Container Sen/ice (Amazon ECS) to run a containerized application on Amazon EC2 instances. A SysOps administrator needs to monitor only traffic flows between the ECS tasks. Which combination of steps should the SysOps administrator take to meet this requirement? (Select TWO.)

Configure VPC Flow Logs on the elastic network interface of each task.

Specify the awsvpc network mode in the task definition.

Configure Amazon CloudWatch Logs on the elastic network interface of each task.

Configure VPC Flow Logs on the elastic network interface of each task.

Specify the awsvpc network mode in the task definition.

Specify the bridge network mode in the task definition.

Specify the host network mode in the task definition.

Amazon SOA-C02 Practice Test 4 - Free Online Exam Prep & Questions

An environment consists of 100 Amazon EC2 Window* instances The Amazon CloudWatch agent Is deployed and running on at EC2 instances with a baseline configuration file to capture log files There is a new requirement to capture the DHCP tog tiles that exist on 50 of the instances What is the MOST operational efficient way to meet this new requirement?

Become a Premium Member for full access

Unlock Premium Member

Amazon SOA-C02 Practice Test 4

Question

Amazon SOA-C02 Practice Tests

Practice Tests