You run a 2000-engineer organization. You are about to begin using AWS at a large scale for the first time.
You want to integrate with your existing identity management system running on Microsoft Active Directory, because your organization is a power-user of Active Directory. How should you manage your AWS identities in the most simple manner?

• A.Use AWS Directory Sen/ice Simple AD.
• B.Use AWS Directory Service AD Connector.
• C.Use an Sync Domain running on AWS Directory Sen/ice.
• D.Use an AWS Directory Sync Domain running on AWS Lambda.

Comment: *

Name: *

Email: *

Verification: *

If Erin has three clusters of server types that are all managed by Ansible and she needs to provision each cluster so that they are configured with their appropriate NTP server addresses.
What is the best method Erin should use in Ansible for managing this?

• A.Write a task that scans the network in the target hosts' region for the NTP server, register the resulting address so that the next task can write the NTP configuration.
• B.Break down the hosts by region in the Ansible inventory file and assign an inventory group variable the NTP address value for the respective region. The playbook can contain just the single play referencing the NTP variable from the inventory.
• C.Create a playbook for each different region and store the NTP address in a variable in the play in the event the NTP server changes.
• D.Create three plays, each one has the hosts for their respective regions and set the NTP server address in each task.

Comment: *

Name: *

Email: *

Verification: *

On which local address does the Docker DNS server listen?

• A.127.0.0.1
• B.127.0.0.111
• C.127.0.0.254
• D.127.0.0.11

Comment: *

Name: *

Email: *

Verification: *

A company that uses electronic health records is running a fleet of Amazon EC2 instances with an Amazon Linux operating system. As part of patient privacy requirements, the company must ensure continuous compliance for patches for operating system and applications running on the EC2 instances.
How can the deployments of the operating system and application patches be automated using a default and custom repository?

• A.Use AWS Systems Manager to create a new patch baseline including the custom repository. Execute the AWS-RunPatchBaseline document using the runcommand to verify and install patches.
• B.Use AWS Direct Connect to integrate the corporate repository and deploy the patches using Amazon CloudWatch scheduled events, then use the CloudWatch dashboard to create reports.
• C.Use yum-config-managerto add the custom repository under /etc/yum.repos.dand run yum- config-manager-enableto activate the repository.
• D.Use AWS Systems Manager to create a new patch baseline including the corporate repository. Execute the AWS-AmazonLinuxDefaultPatchBaseline document using the runcommand to verify and install patches.

Comment: *

Name: *

Email: *

Verification: *

You need the absolute highest possible network performance for a cluster computing application. You already selected homogeneous instance types supporting 10 gigabit enhanced networking, made sure that your workload was network bound, and put the instances in a placement group. What is the last optimization you can make?

• A.Use 9001 MTU instead of 1500 for Jumbo Frames, to raise packet body to packet overhead ratios.
• B.Segregate the instances into different peered VPCs while keeping them all in a placement group, so each one has its own Internet Gateway.
• C.Bake an AMI for the instances and relaunch, so the instances are fresh in the placement group and do not have noisy neighbors.
• D.Turn off SYN/ACK on your TCP stack or begin using UDP for higher throughput.

Comment: *

Name: *

Email: *

Verification: *