A company updates its security policy to clarify cloud hosting arrangements for regulated workloads. Workloads that are identified as sensitive must run on hardware that is not shared with other customers or with other AWS accounts within the company. Which solution will ensure compliance with this policy?
A. Deploy workloads only to Dedicated Hosts.
B. Deploy workloads only to Dedicated Instances.
C. Deploy workloads only to Reserved Instances.
D. Place all instances in a dedicated placement group.
A company uses AWS Cloud Formation to deploy its infrastructure. The company recently retired an application. A cloud operations engineer initiates CloudFormation stack deletion, and the stack gets stuck in DELETE FAILED status. A SysOps administrator discovers that the stack had deployed a security group. The security group is referenced by other security groups in the environment. The SysOps administrator needs to delete the stack without affecting other applications. Which solution will meet these requirements m the MOST operationally efficient manner?
A. Create a new security group that has a different name Apply identical rules to the newsecurity group. Replace all other security groups that reference the new security group. Delete the stack.
B. Create a CloudFormation change set to delete the security group. Deploy the change set.
C. Delete the stack again. Specify that the security group be retained.
D. Perform CloudFormation drift detection Delete the stack.
A company is using AWS to deploy a critical application on a fleet of Amazon EC2 instances The company is rewriting the application because the application failed a security review The application will take 12 months to rewrite While this rewrite happens, the company needs to rotate IAM access keys that the application uses. A SysOps administrator must implement an automated solution that finds and rotates IAM access Keys that are at least 30 days old. The solution must then continue to rotate the IAM access Keys every 30 days. Which solution will meet this requirement with the MOST operational efficiency?
A. Use an AWS Config rule to identify IAM access Keys that are at least 30 days old.Configure AWS Config to invoKe an AWS Systems Manager Automation runbook to rotatethe identified IAM access keys.
B. Use AWS Trusted Advisor to identify IAM access Keys that are at least 30 days old.Configure Trusted Advisor to invoke an AWS Systems Manager Automation runbook torotate the identified IAM access keys
C. Create a script that checks the age of IAM access Keys and rotates them if they are atleast 30 days old. Launch an EC2 instance. Schedule the script to run as a cron expressionon the EC2 instance every day.
D. Create an AWS Lambda function that checks the age of IAM access keys and rotatesthem if they are at least 30 days old Use an Amazon EventBridge rule to invoke theLambda function every time a new IAM access key is created.
A company has an application that customers use to search for records on a website. The application's data is stored in an Amazon Aurora DB cluster. The application's usage varies by season and by day of the week. The website's popularity is increasing, and the website is experiencing slower performance because of increased load on the DB cluster during periods of peak activity. The application logs show that the performance issues occur when users are searching for information. The same search is rarely performed multiple times. A SysOps administrator must improve the performance of the platform by using a solution that maximizes resource efficiency. Which solution will meet these requirements?
A. Deploy an Amazon ElastiCache for Redis cluster in front of the DB cluster. Modify theapplication to check the cache before the application issues new queries to the database.Add the results of any queries to the cache.
B. Deploy an Aurora Replica for the DB cluster. Modify the application to use the readerendpoint for search operations. Use Aurora Auto Scaling to scale the number of replicasbased on load. Most Voted
C. Use Provisioned IOPS on the storage volumes that support the DB cluster to improveperformance sufficiently to support the peak load on the application.
D. Increase the instance size in the DB cluster to a size that is sufficient to support thepeak load on the application. Use Aurora Auto Scaling to scale the instance size based onload.
A company is deploying an ecommerce application to an AWS Region that is located in France. The company wants users from only France to be able to access the first version of the application. The company plans to add more countries for the next version of the application. A SysOps administrator needs to configure the routing policy in Amazon Route 53. Which solution will meet these requirements?
A. Use a geoproximity routing policy. Select France as the location in the record.
B. Use a geolocation routing policy. Select France as the location in the record.
C. Use an IP-based routing policy. Select all IP addresses that are allocated to France inthe record.
D. Use a geoproximity routing policy. Select all IP addresses that are allocated to France inthe record.
A company recently deployed an application in production. The production environment currently runs on a single Amazon EC2 instance that hosts the application's web application and a MariaDB database. Company policy states that all IT production environments must be highly available. What should a SysOps administrator do to meet this requirement?
A. Migrale the database from the EC2 instance to an Amazon RDS for MariaDB Multi-AZDB instance. Run the application on EC2 instances that are in an Auto Scaling group thatextends across multiple Availability Zones. Place the EC2 instances behind a loadbalancer.
B. Migrate the database from the EC2 instance to an Amazon RDS for MariaDB Multi-AZDB instance. Use AWS Application Migration Service to convert the application into anAWS Lambda function. Specify the Multi-AZ option for the Lambda function.
C. Copy the database to a different EC2 instance in a different Availability Zone. Use AWSBackup to create Amazon Machine Images (AMIs) of the application EC2 instance and thedatabase EC2 instance. Create an AWS Lambda function that performs health checksevery minute. In case of failure, configure the Lambda function to launch a new EC2instance from the AMIs that AWS Backup created.
D. Migrate the database to a different EC2 instance. Place the application EC2 instance inan Auto Scaling group that extends across multiple Availability Zones. Create an AmazonMachine Image (AMI) from the database EC2 instance. Use the AMI to launch a seconddatabase EC2 instance in a different Availability Zone. Put the second database EC2instance in the stopped state. Use the second database EC2 instance as a standby.
A SysOps administrator must configure Amazon S3 to host a simple nonproduction webpage. The SysOps administrator has created an empty S3 bucket from the AWS Management Console. The S3 bucket has the default configuration in place. Which combination of actions should the SysOps administrator take to complete this process? (Choose two.)
A. Configure the S3 bucket by using the "Redirect requests for an object" functionality topoint to the bucket root URL.
B. Turn off the "Block all public access" setting. Allow public access by using a bucket ACLthat contains <Permission>WEBSITE</Permission>.
C. Turn off the "Block all public access" setting. Allow public access by using a bucket ACLthat allows access to the AuthenticatedUsers grantee.
D. Turn off the "Block all public access" setting. Set a bucket policy that allows "Principal":the s3:GetObject action.
E. Create an index.html document. Configure static website hosting, and upload the indexdocument to the S3 bucket.
A company is running Amazon RDS for PostgreSOL Multi-AZ DB clusters. The company uses an AWS Cloud Formation template to create the databases individually with a default size of 100 GB. The company creates the databases every Monday and deletes the databases every Friday. Occasionally, the databases run low on disk space and initiate an Amazon CloudWatch alarm. A SysOps administrator must prevent the databases from running low on disk space in the future. Which solution will meet these requirements with the FEWEST changes to the application?
A. Modify the CloudFormation template to use Amazon Aurora PostgreSOL as the DBengine.
B. Modify the CloudFormation template to use Amazon DynamoDB as the database.Activate storage auto scaling during creation of the tables
C. Modify the Cloud Formation template to activate storage auto scaling on the existing DBinstances.
D. Create a CloudWatch alarm to monitor DB instance storage space. Configure the alarmto invoke the VACUUM command.
A company has applications that process transaction requests multiple times each minute. The applications write transaction data to a single Amazon RDS DB instance. As the company begins to process more transactions, the company becomes concerned that it has no failover solution in place for disaster recovery (DR). The company needs the DB instance to fail over automatically without losing any committed transactions. Which solution will meet these requirements?
A. Create an RDS read replica in the same AWS Region. Configure an AWS Lambdafunction to promote the replica as the primary DB instance during a DR scenario.
B. Create an RDS read replica in a different AWS Region. Configure an AWS Lambdafunction to promote the replica as the primary DB instance during a DR scenario.
C. Modify the DB instance to be a Multi-AZ deployment.
D. Setup an Amazon CloudWatch alarm that monitors the DB instance memory utilizationwith a threshold greater than 90%. Invoke an AWS Lambda function to restart the DB instance.
Accompany wants to monitor the number of Amazon EC2 instances that it is running. The company also wants to automate a service quota increase when the number of instances reaches a specific threshold. Which solution meets these requirements?
A. Create an Amazon CloudWatch alarm to monitor Service Quotas. Configure the alarm to invoke an AWS Lambda function to request a quota increase when the alarm reaches the threshold.
B. Create an AWS Config rule to monitor Service Quotas. Call an AWS Lambda function to remediate the action and increase the quota.
C. Create an Amazon CloudWateh alarm to monitor the AWS Health Dashboard. Configurethe alarm to invoke an AWS Lambda function to request a quota increase when the alarmreaches the threshold.
D. Create an Amazon CloudWatch alarm to monitor AWS Trusted Advisor service quotas.Configure the alarm to publish a message to an Amazon Simple Notification Service(Amazon SNS) topic to increase the quota.