A company has established tagging and configuration standatrds for its infrastructure resources running on AWS. A DevOps Engineer is developing a design that will provide a near-real-time dashboard of the compliance posture with the ability to highlight violations.
Which approach meets the stated requirements?

• A.Define the resource configurations in AWS Service Catalog, and monitor the AWS Service Catalog compliance and violations in Amazon CloudWatch. Then, set up and share a live CloudWatch dashboard. Set up Amazon SNS notifications for violations and corrections.
• B.Use AWS Config to record configuration changes and output the data to an Amazon S3 bucket.
  Create an Amazon QuickSight analysis of the dataset, and use the information on dashboards and mobile devices.
• C.Create a resource group that displays resources with the specified tags and those without tags.
  Use the AWS Management Console to view compliant and non-compliant resources.
• D.Define the compliance and tagging requirements in Amazon inspector. Output the results to Amazon CloudWatch Logs. Build a metric filter to isolate the monitored elements of interest and present the data in a CloudWatch dashboard.

Comment: *

Name: *

Email: *

Verification: *

Your company has developed a web application and is hosting it in an Amazon S3 bucket configured for static website hosting. The application is using the AWS SDK for JavaScript in the browser to access data stored in an Amazon DynamoDB table. How can you ensure that API keys for access to your data in DynamoDB are kept secure?

• A.Create an Amazon S3 role in 1AM with access to the specific DynamoDB tables, and assign it to the bucket hosting your website.
• B.Configure S3 bucket tags with your AWS access keys for your bucket hosing your website so that the application can query them for access.
• C.Configure a web identity federation role within 1AM to enable access to the correct DynamoDB resources and retrieve temporary credentials.
• D.Store AWS keys in global variables within your application and configure the application to use these credentials when making requests.

Comment: *

Name: *

Email: *

Verification: *

You have an asynchronous processing application using an Auto Scaling Group and an SQS Queue. The Auto Scaling Group scales according to the depth of the job queue. The completion velocity of the jobs has gone down, the Auto Scaling Group size has maxed out, but the inbound job velocity did not increase.
What is a possible issue?

• A.Some of the new jobs coming in are malformed and unprocessable.
• B.The routing tables changed and none of the workers can process events anymore.
• C.Someone changed the IAM Role Policy on the instances in the worker group and broke permissions to access the queue.
• D.The scaling metric is not functioning correctly.

Comment: *

Name: *

Email: *

Verification: *

Which of the following resource is used in Cloudformation to create nested stacks

• A.AWS::CloudFormation::Stack
• B.AWS::CloudFormation::Nested
• C.AWS::CloudFormation::NestedStack
• D.AWS::CloudFormation::StackNest

Comment: *

Name: *

Email: *

Verification: *

By default in Opswork, how many application versions can you rollback up to?

• A.1
• B.2
• C.3
• D.4

Comment: *

Name: *

Email: *

Verification: *