A SysOps administrator is using AWS Systems Manager Patch Manager to patch a fleet of Amazon EC2 instances. The SysOps administrator has configured a patch baseline and a maintenance window. The SysOps administrator also has used an instance tag to identify which instances to patch.The SysOps administrator must give Systems Manager the ability to access the EC2 instances.Which additional action must the SysOps administrator perform to meet this requirement?

Add an inbound rule to the instances' security group.

Attach an 1AM instance profile with access to Systems Manager to the instances.

Create a Systems Manager activation Then activate the fleet of instances.

Manually specify the instances to patch Instead of using tag-based selection.

A company is expanding globally and needs to back up data on Amazon Elastic Block Store (Amazon EBS) volumes to a different AWS Region. Most of the EBS volumes that store the data are encrypted, but some of the EBS volumes are unencrypted. The company needs the backup data from all the EBS volumes to be encrypted.Which solution will meet these requirements with the LEAST management overhead?

Configure a lifecycle policy in Amazon Data Lifecycle Manager (Amazon DLM) to create the EBS volume snapshots with cross-Region backups enabled. Encrypt the snapshot copies by using AWS Key Management Service (AWS KMS).

Create a point-in-time snapshot of the EBS volumes. When the snapshot status is COMPLETED, copy the snapshots to another Region and set the Encrypted parameter to False.

Create a point-in-time snapshot of the EBS volumes. Copy the snapshots to an Amazon S3 bucket that uses server-side encryption. Turn on S3 Cross-Region Replication on the S3 bucket.

Schedule an AWS Lambda function with the Python runtime. Configure the Lambda function to create the EBS volume snapshots, encrypt the unencrypted snapshots, and copy the snapshots to another Region.

A company has an initiative to reduce costs associated with Amazon EC2 and AWS Lambd a. Which action should a SysOps administrator take to meet these requirements?

Use AWS Compute Optimizer and take action on the provided recommendations.

Analyze the AWS Cost and Usage Report by using Amazon Athena to identity cost savings.

Create an AWS Budgets alert to alarm when account spend reaches 80% of the budget.

Purchase Reserved Instances through the Amazon EC2 console.

Use AWS Compute Optimizer and take action on the provided recommendations.

A company uses AWS Organizations. A SysOps administrator wants to use AWS Compute Optimizer and AWS tag policies in the management account to govern all member accounts in the billing family. The SysOps administrator navigates to the AWS Organizations console but cannot activate tag policies through the management account. What could be the reason for this issue?

The member accounts do not have tags enabled for cost allocation.

All features have not been enabled in the organization.

Consolidated billing has not been enabled.

The member accounts do not have tags enabled for cost allocation.

The member accounts have not manually enabled trusted access for Compute Optimizer.

A user working in the Amazon EC2 console increased the size of an Amazon Elastic Block Store(Amazon EBS) volume attached to an Amazon EC2 Windows instance. The change is not reflected in the file system. What should a SysOps administrator do to resolve this issue?

Reattach the EBS volume to the EC2 instance.

Extend the file system with operating system-level tools to use the new storage capacity.

Reattach the EBS volume to the EC2 instance.

Reboot the EC2 instance that is attached to the EBS volume.

Take a snapshot of the EBS volume. Replace the original volume with a volume that is created from the snapshot.

A SysOps administrator is reviewing AWS Trusted Advisor warnings and encounters a warning for an S3 bucket policy that has open access permissions. While discussing the issue with the bucket owner, the administrator realizes the S3 bucket is an origin for an Amazon CloudFront web distribution.Which action should the administrator take to ensure that users access objects in Amazon S3 by using only CloudFront URLs?

Create an origin access identity and grant it permissions to read objects in the S3 bucket.

Encrypt the S3 bucket content with Server-Side Encryption with Amazon S3-Managed Keys (SSES3).

Create an origin access identity and grant it permissions to read objects in the S3 bucket.

Assign an 1AM user to the CloudFront distribution and grant the user permissions in the S3 bucket policy.

Assign an 1AM role to the CloudFront distribution and grant the role permissions in the S3 bucket policy.

A SysOps administrator is reviewing AWS Trusted Advisor recommendations. The SysOps administrator notices that all the application servers for a finance application are listed in the Low Utilization Amazon EC2 Instances check. The application runs on three instances across three Availability Zones. The SysOps administrator must reduce the cost of running the application without affecting the application's availability or design. Which solution will meet these requirements?

Provision an Application Load Balancer in front of the instances.

Reduce the number of application servers.

Apply rightsizing recommendations from AWS Cost Explorer to reduce the instance size.

Provision an Application Load Balancer in front of the instances.

Scale up the instance size of the application servers.

A company is undergoing an external audit of its systems, which run wholly on AWS. A SysOps administrator must supply documentation of Payment Card Industry Data Security Standard (PCI DSS) compliance for the infrastructure managed by AWS.Which set of action should the SysOps administrator take to meet this requirement?

Download the applicable reports from the AWS Artifact portal and supply these to the auditors.

Download complete copies of the AWS CloudTrail log files and supply these to the auditors.

Download complete copies of the AWS CloudWatch logs and supply these to the auditors.

Provide the auditors with administrative access to the production AWS account so that the auditors can determine compliance.

A company wants to collect data from an application to use for analytics. For the first 90 days, the data will be infrequently accessed but must remain highly available. During this time, the company's analytics team requires access to the data in milliseconds. However, after 90 days, the company must retain the data for the long term at a lower cost. The retrieval time after 90 days must be less than 5 hours. Which solution will meet these requirements MOST cost-effectively?

Store the data in S3 Standard-Infrequent Access (S3 Standard-IA) for the first 90 days. Set up an S3 Lifecycle rule to move the data to S3 Glacier Flexible Retrieval after 90 days.

Store the data in S3 One Zone-Infrequent Access (S3 One Zone-IA) for the first 90 days. Set up an S3 Lifecycle rule to move the data to S3 Glacier Deep Archive after 90 days.

Store the data in S3 Standard for the first 90 days. Set up an S3 Lifecycle rule to move the data to S3 Glacier Flexible Retrieval after 90 days.

Store the data in S3 Standard for the first 90 days. Set up an S3 Lifecycle rule to move the data to S3 Glacier Deep Archive after 90 days.

A company hosts several write-intensive applications. These applications use a MySQL database that runs on a single Amazon EC2 instance. The company asks a SysOps administrator to implement a highly available database solution that is ideal for multi-tenant workloads.Which solution should the SysOps administrator implement to meet these requirements?

Migrate the database to an Amazon Aurora multi-master DB cluster.

Create a second EC2 instance for MySQL. Configure the second instance to be a read replica.

Migrate the database to an Amazon Aurora DB cluster. Add an Aurora Replica.

Migrate the database to an Amazon Aurora multi-master DB cluster.

Migrate the database to an Amazon RDS for MySQL DB instance.

A SysOps administrator created an AWS Cloud Formation template that provisions Amazon EC2 instances, an Elastic Load Balancer (ELB), and an Amazon RDS DB instance. During stack creation, the creation of the EC2 instances and the creation of the ELB are successful. However, the creation of the DB instance fails.What is the default behavior of CloudFormation in this scenario?

CloudFormation will prompt the user to roll back the stack or continue.

CloudFormation will roll back the stack and delete the stack.

CloudFormation will roll back the stack but will not delete the stack.

CloudFormation will prompt the user to roll back the stack or continue.

CloudFormation will successfully complete the stack but will report a failed status for the DB instance.

A company needs to deploy a new workload on AWS. The company must encrypt all data at rest and must rotate the encryption keys once each year. The workload uses an Amazon RDS for MySQL Multi- AZ database for data storage. Which configuration approach will meet these requirements?

Create a new AWS Key Management Service (AWS KMS) customer managed key. Enable automatic key rotation. Enable RDS encryption on the database at creation time by using the KMS key.

Enable Transparent Data Encryption (TDE) in the MySQL configuration file. Manually rotate the key every 12 months.

Enable RDS encryption on the database at creation time by using the AWS managed key for Amazon RDS.

Create a new AWS Key Management Service (AWS KMS) customer managed key. Enable automatic key rotation. Enable RDS encryption on the database at creation time by using the KMS key.

Create a new AWS Key Management Service (AWS KMS) customer managed key. Enable automatic key rotation. Enable encryption on the Amazon Elastic Block Store (Amazon EBS) volumes that are attached to the RDS DB instance.

A SysOps administrator needs to automate the invocation of an AWS Lambda function. The Lambda function must run at the end of each day to generate a report on data that is stored in an Amazon S3 bucket. What is the MOST operationally efficient solution that meets these requirements?

Create an S3 event notification to invoke the Lambda function whenever objects change in the S3 bucket.

Create an Amazon EventBridge {Amazon CloudWatch Events) rule that has an event pattern for Amazon S3 and the Lambda function as a target.

Create an Amazon EventBridge (Amazon CloudWatch Events) rule that has a schedule and the Lambda function as a target.

Create an S3 event notification to invoke the Lambda function whenever objects change in the S3 bucket.

Deploy an Amazon EC2 instance with a cron job to invoke the Lambda function.

A company's SysOps administrator needs to change the AWS Support plan for one of the company's AWS accounts. The account has multi-factor authentication (MFA) activated, and the MFA device is lost. What should the SysOps administrator do to sign in?

Sign in as a root user by using email and phone verification. Set up a new MFA device. Change the root user password.

Sign in as an 1AM user with administrator permissions. Resynchronize the MFA token by using the 1AM console.

Sign in as an 1AM user with administrator permissions. Reset the MFA device for the root user by adding a new device.

Use the forgot-password process to verify the email address. Set up a new password and MFA device.

A SysOps administrator has created an AWS Service Catalog portfolio and has shared the portfolio with a second AWS account in the company. The second account is controlled by a different administrator. Which action will the administrator of the second account be able to perform?

Add a product from the imported portfolio to a local portfolio.

Add new products to the imported portfolio.

Change the launch role for the products contained in the imported portfolio.

Customize the products in the imported portfolio.

A company has a policy that requires all Amazon EC2 instances to have a specific set of tags. If an EC2 instance does not have the required tags, the noncompliant instance should be terminated. What is the MOST operationally efficient solution that meets these requirements?

Create an AWS Config rule to check if the required tags are present. If an EC2 instance is noncompliant, invoke an AWS Systems Manager Automation document to terminate the instance.

Create an Amazon EventBridge (Amazon CloudWatch Events) rule to send all EC2 instance state changes to an AWS Lambda function to determine if each instance is compliant. Terminate any noncompliant instances.

Create an 1AM policy that enforces all EC2 instance tag requirements. If the required tags are not in place for an instance, the policy will terminate noncompliant instance.

Create an AWS Lambda function to determine if each EC2 instance is compliant and terminate an instance if it is noncompliant. Schedule the Lambda function to invoke every 5 minutes.

Create an AWS Config rule to check if the required tags are present. If an EC2 instance is noncompliant, invoke an AWS Systems Manager Automation document to terminate the instance.

A SysOps administrator wants to upload a file that is 1 TB in size from on-premises to an Amazon S3 bucket using multipart uploads. What should the SysOps administrator do to meet this requirement?

Upload the file using the S3 console.

Use the s3api copy-object command.

Use the s3api put-object command.

A SysOps administrator is responsible for a company's security groups. The company wants to maintain a documented trail of any changes that are made to the security groups. The SysOps administrator must receive notification whenever the security groups change.Which solution will meet these requirements?

Set up Amazon Detective to record security group changes. Specify an Amazon S3 bucket as the location for configuration snapshots and history files. Create an Amazon Simple Notification Service (Amazon SNS) topic for notifications about configuration changes. Subscribe the SysOps administrator's email address to the SNS topic.

Set up Amazon Detective to record security group changes. Specify an Amazon CloudWatch Logs log group to store configuration history logs. Create an Amazon Simple Queue Service (Amazon SOS) queue for notifications about configuration changes. Subscribe the SysOps administrator's email address to the SQS queue.

Set up AWS Systems Manager Change Manager to record security group changes. Specify an Amazon CloudWatch Logs log group to store configuration history logs. Create an Amazon Simple Notification Service (Amazon SNS) topic for notifications about configuration changes. Subscribe the SysOps administrator's email address to the SNS topic.

Set up AWS Config to record security group changes. Specify an Amazon S3 bucket as the location for configuration snapshots and history files. Create an Amazon Simple Notification Service (Amazon SNS) topic for notifications about configuration changes. Subscribe the SysOps administrator's email address to the SNS topic.

Set up Amazon Detective to record security group changes. Specify an Amazon S3 bucket as the location for configuration snapshots and history files. Create an Amazon Simple Notification Service (Amazon SNS) topic for notifications about configuration changes. Subscribe the SysOps administrator's email address to the SNS topic.

A SysOps administrator created an Amazon VPC with an IPv6 CIDR block, which requires access to the internet. However, access from the internet towards the VPC is prohibited. After adding and configuring the required components to the VPC. the administrator is unable to connect to any of the domains that reside on the internet.What additional route destination rule should the administrator add to the route tables?

Route ::/0 traffic to an egress-only internet gateway

Route ;:/0 traffic to a NAT gateway

Route ::/0 traffic to an internet gateway

Route 0.0.0.0/0 traffic to an egress-only internet gateway

Route ::/0 traffic to an egress-only internet gateway

A company is rolling out a new version of its website. Management wants to deploy the new website in a limited rollout to 20% of the company's customers. The company uses Amazon Route 53 for its website's DNS solution. Which configuration will meet these requirements?

Create a latency-based routing policy. Within the policy, configure a record pointing to the original resource with a weight of 80. Configure a record pointing to the new resource with a weight of 20.

Create a failover routing policy. Within the policy, configure 80% of the website traffic to be sent to the original resource. Configure the remaining 20% of traffic as the failover record that points to the new resource.

Create a multivalue answer routing policy. Within the policy, create 4 records with the name and IP address of the original resource. Configure 1 record with the name and IP address of the new resource.

Create a latency-based routing policy. Within the policy, configure a record pointing to the original resource with a weight of 80. Configure a record pointing to the new resource with a weight of 20.

Create a weighted routing policy. Within the policy, configure a weight of 80 for the record pointing to the original resource. Configure a weight of 20 for the record pointing to the new resource.

A company needs to view a list of security groups that are open to the internet on port 3389.What should a SysOps administrator do to meet this requirement?

Use AWS Trusted Advisor to find security groups that allow unrestricted access on port 3389.

Configure Amazon GuardDuly to scan security groups and report unrestricted access on port 3389.

Configure a service control policy (SCP) to identify security groups that allow unrestricted access on port 3389

Use AWS Identity and Access Management Access Analyzer to find any instances that have unrestricted access on port 3389.

Use AWS Trusted Advisor to find security groups that allow unrestricted access on port 3389.

A company has a simple web application that runs on a set of Amazon EC2 instances behind an Elastic Load Balancer in the eu-west-2 Region. Amazon Route 53 holds a DNS record for the application with a simple touting policy. Users from all over the world access the application through their web browsers.The company needs to create additional copies of the application in the us-east-1 Region and in the ap-south-1 Region. The company must direct users to the Region that provides the fastest response times when the users load the application.What should a SysOps administrator do to meet these requirements?

In each new Region, create a copy of the application on new EC2 instances. Add these new EC2 instances to the Elastic Load Balancer in eu-west-2. Transition to a latency routing policy.

In each new Region, create a new Elastic Load Balancer and a new set of EC2 Instances to run a copy of the application. Transition to a geolocation routing policy.

In each new Region, create a copy of the application on new EC2 instances. Add these new EC2 instances to the Elastic Load Balancer in eu-west-2. Transition to a latency routing policy.

In each new Region, create a copy of the application on new EC2 instances. Add these new EC2 instances to the Elastic Load Balancer in eu-west-2. Transition to a multivalue routing policy.

In each new Region, create a new Elastic Load Balancer and a new set of EC2 instances to run a copy of the application. Transition to a latency routing policy.

A company is managing many accounts by using a single organization in AWS Organizations. The organization has all features enabled. The company wants to turn on AWS Config in all the accounts of the organization and in all AWS Regions.What should a Sysops administrator do to meet these requirements in the MOST operationally efficient way?

Use service control policies (SCPs) to configure AWS Config in all accounts and in all Regions.

Use AVVS CloudFormation StackSets to deploy stack instances that turn on AWS Config in all accounts and in all Regions.

Use AWS CloudFormation StackSets to deploy stack policies that turn on AWS Config in all accounts and in all Regions.

Use service control policies (SCPs) to configure AWS Config in all accounts and in all Regions.

Create a script that uses the AWS CLI to turn on AWS Config in all accounts in the organization. Run the script from the organization's management account.

A company updates its security policy to prohibit the public exposure of any data in Amazon S3 buckets in the company's account. What should a SysOps administrator do to meet this requirement?

Turn on S3 Block Public Access from the account level.

Create an Amazon EventBridge (Amazon CloudWatch Events) rule to enforce that all S3 objects are private.

Use Amazon Inspector to search for S3 buckets and to automatically reset S3 ACLs if any public S3 buckets are found.

Use S3 Object Lambda to examine S3 ACLs and to change any public S3 ACLs to private.

A SysOps administrator needs to secure the credentials for an Amazon RDS database that is created by an AWS CloudFormation template. The solution must encrypt the credentials and must support automatic rotation. Which solution will meet these requirements?

Create an AWS::SecretsManager::Secret resource in the CloudFormation template. Reference the credentials in the AWS::RDS::DBInstance resource by using the resolve:secretsmanager dynamic reference.

Create an AWS::SecretsManager::Secret resource in the CloudFormation template. Reference the credentials in the AWS::RDS::DBInstance resource by using the resolve:ssm-secure dynamic reference.

Create an AWS::SSM::Parameter resource in the CloudFormation template. Reference the credentials in the AWS::RDS::DBInstance resource by using the resolve:ssm dynamic reference.

Create parameters for the database credentials in the CloudFormation template. Use the Ref intrinsic function to provide the credentials to the AWS::RDS::DBInstance resource.

A company has two VPC networks named VPC A and VPC B. The VPC A CIDR block is 10.0.0.0/16 and the VPC B CIDR block is 172.31.0.0/16. The company wants to establish a VPC peering connection named pcx-12345 between both VPCs.Which rules should appear in the route table of VPC A after configuration? (Select TWO.)

Destination: 10.0.0.0/16, Target: Local

Destination: 172.31.0.0/16, Target: pcx-12345

Destination: 10.0.0.0/16, Target: Local

Destination: 172.31.0.0/16, Target: Local

Destination: 10.0.0.0/16, Target: pcx-12345

Destination: 172.31.0.0/16, Target: pcx-12345

Destination: 10.0.0.0/16. Target: 172.31.0.0/16

A company has a public website that recently experienced problems. Some links led to missing webpages, and other links rendered incorrect webpages. The application infrastructure was running properly, and all the provisioned resources were healthy. Application logs and dashboards did not show any errors, and no monitoring alarms were raised. Systems administrators were not aware of any problems until end users reported the issues.The company needs to proactively monitor the website for such issues in the future and must implement a solution as soon as possible. Which solution will meet these requirements with the LEAST operational overhead?

Rewrite the application to surface a custom error to the application log when issues occur.Automatically parse logs for errors. Create an Amazon CloudWatch alarm to provide alerts when issues are detected.

Create an AWS Lambda function to test the website. Configure the Lambda function to emit an Amazon CloudWatch custom metric when errors are detected. Configure a CloudWatch alarm to provide alerts when issues are detected.

Create an Amazon CloudWatch Synthetics canary. Use the CloudWatch Synthetics Recorder plugin to generate the script for the canary run. Configure the canary in line with requirements. Create an alarm to provide alerts when issues are detected.

A company hosts a database on an Amazon RDS Multi-AZ DB instance. The database is not encrypted.The company's new security policy requires all AWS resources to be encrypted at rest and in transit. What should a SysOps administrator do to encrypt the database?

Take a snapshot of the DB instance. Encrypt the snapshot. Restore the snapshot to the same DB instance.

Configure encryption on the existing DB instance.

Take a snapshot of the DB instance. Encrypt the snapshot. Restore the snapshot to the same DB instance.

Encrypt the standby replica in a secondary Availability Zone. Promote the standby replica to the primary DB instance.

Take a snapshot of the DB instance. Copy and encrypt the snapshot. Create a new DB instance by restoring the encrypted copy.

A company uses an Amazon S3 bucket to store data files. The S3 bucket contains hundreds of objects. The company needs to replace a tag on all the objects in the S3 bucket with another tag.What is the MOST operationally efficient way to meet this requirement?

Use S3 Batch Operations. Specify the operation to replace all object tags.

Use the AWS CLI to get the tags for each object. Save the tags in a list. Use S3 Batch Operations. Specify the operation to delete all object tags. Use the AWS CLI and the list to retag the objects.

Use the AWS CLI to get the tags for each object. Save the tags in a list. Use the AWS CLI and the list to remove the object tags. Use the AWS CLI and the list to retag the objects.

Use the AWS CLI to copy the objects to another S3 bucket. Add the new tag to the copied objects. Delete the original objects.

A company runs several workloads on AWS. The company identifies five AWS Trusted Advisor service quota metrics to monitor in a specific AWS Region. The company wants to receive email notification each time resource usage exceeds 60% of one of the service quotas.Which solution will meet these requirements?

Create five Amazon CloudWatch alarms, one for each Trusted Advisor service quota metric.Configure an Amazon Simple Notification Service (Amazon SNS) topic for email notification each time that usage exceeds 60% of one of the service quotas.

Create five Amazon CloudWatch alarms, one for each Trusted Advisor service quota metric.Configure an Amazon Simple Queue Service (Amazon SQS) queue for email notification each time that usage exceeds 60% of one of the service quotas.

Use the AWS Service Health Dashboard to monitor each Trusted Advisor service quota metric.Configure an Amazon Simple Queue Service (Amazon SQS) queue for email notification each time that usage exceeds 60% of one of the service quotas.

Use the AWS Service Health Dashboard to monitor each Trusted Advisor service quota metric.Configure an Amazon Simple Notification Service (Amazon SNS) topic for email notification each time that usage exceeds 60% of one of the service quotas.

A company runs its entire suite of applications on Amazon EC2 instances. The company plans to move the applications to containers and AWS Fargate. Within 6 months, the company plans to retire its EC2 instances and use only Fargate. The company has been able to estimate its future Fargate costs.A SysOps administrator needs to choose a purchasing option to help the company minimize costs.The SysOps administrator must maximize any discounts that are available and must ensure that there are no unused reservations. Which purchasing option will meet these requirements?

EC2 Instance Savings Plans for 1 year with the All Upfront payment option

Compute Savings Plans for 1 year with the No Upfront payment option

Compute Savings Plans for 1 year with the Partial Upfront payment option

EC2 Instance Savings Plans for 1 year with the All Upfront payment option

EC2 Reserved Instances for 1 year with the Partial Upfront payment option

A company creates a new member account by using AWS Organizations. A SysOps administrator needs to add AWS Business Support to the new account Which combination of steps must the SysOps administrator take to meet this requirement? (Select TWO.)

Sign in to the new account by using root user credentials. Change the support plan.

Create an 1AM user that has administrator privileges in the new account.

Sign in to the new account by using 1AM credentials. Change the support plan.

Sign in to the new account by using root user credentials. Change the support plan.

Use the AWS Support API to change the support plan.

Reset the password of the account root user.

Create an 1AM user that has administrator privileges in the new account.

A company needs to automatically monitor an AWS account for potential unauthorized AWS Management Console logins from multiple geographic locations. Which solution will meet this requirement?

Configure Amazon GuardDuty to monitor the UnauthorizedAccess:IAMUser/ConsoleLoginSuccess finding.

Configure Amazon Cognito to detect any compromised 1AM credentials.

Set up Amazon Inspector. Scan and monitor resources for unauthorized logins.

Set up AWS Config. Add the iam-policy-blacklisted-check managed rule to the account.

Configure Amazon GuardDuty to monitor the UnauthorizedAccess:IAMUser/ConsoleLoginSuccess finding.

Application A runs on Amazon EC2 instances behind a Network Load Balancer (NLB). The EC2 instances are in an Auto Scaling group and are in the same subnet that is associated with the NLB. Other applications from an on-premises environment cannot communicate with Application A on port 8080.To troubleshoot the issue, a SysOps administrator analyzes the flow logs. The flow logs include the following records: What is the reason for the rejected traffic?

The security group of the EC2 instances has no Allow rule for the traffic from the NLB.

The security group of the NLB has no Allow rule for the traffic from the on-premises environment.

The ACL of the on-premises environment does not allow traffic to the AWS environment.

The network ACL that is associated with the subnet does not allow outbound traffic for the ephemeral port range.

A company's SysOps administrator deploys a public Network Load Balancer (NLB) in front of the company's web application. The web application does not use any Elastic IP addresses. Users must access the web application by using the company's domain name. The SysOps administrator needs to configure Amazon Route 53 to route traffic to the NLB. Which solution will meet these requirements MOST cost-effectively?

Create a Route 53 alias record for the NLB.

Create a Route 53 AAAA record for the NLB.

Create a Route 53 alias record for the NLB.

Create a Route 53 CAA record for the NLB.

Create a Route 53 CNAME record for the NLB.

A company is creating a new multi-account architecture. A Sysops administrator must implement a login solution to centrally manage user access and permissions across all AWS accounts. The solution must be integrated with AWS Organizations and must be connected to a third-party Security Assertion Markup Language (SAML) 2.0 identity provider (IdP). What should the SysOps administrator do to meet these requirements?

Configure an Amazon Cognito user pool. Integrate the user pool with the third-party IdP.

Enable and configure AWS Single Sign-On with the third-party IdP.

Federate the third-party IdP with AWS Identity and Access Management (IAM) for each AWS account in the organization.

Integrate the third-party IdP directly with AWS Organizations.

Amazon SOA-C02 Practice Test 5 - Free Online Exam Prep & Questions

A company runs a website from Sydney, Australi a. Users in the United States (US) and Europe are reporting that images and videos are taking a long time to load. However, local testing in Australia indicates no performance issues. The website has a large amount of static content in the form of images and videos that are stored m Amazon S3. Which solution will result In the MOST Improvement In the user experience for users In the US and Europe?

Become a Premium Member for full access

Unlock Premium Member

Amazon SOA-C02 Practice Test 5

Question

Amazon SOA-C02 Practice Tests

Practice Tests