An ERP application is deployed across multiple AZs in a single region. In the event of failure, the Recovery Time Objective (RTO) must be less than 3 hours, and the Recovery Point Objective (RPO) must be 15 minutes. The customer realizes that data corruption occurred roughly 1.5 hours ago.
What DR strategy could be used to achieve this RTO and RPO in the event of this kind of failure?

• A.Use synchronous database master-slave replication between two availability zones.
• B.Take hourly DB backups to EC2 Instance store volumes with transaction logs stored In S3 every 5 minutes.
• C.Take hourly DB backups to S3, with transaction logs stored in S3 every 5 minutes.
• D.Take 15 minute DB backups stored In Glacier with transaction logs stored in S3 every 5 minutes.

Comment: *

Name: *

Email: *

Verification: *

A bucket owner has allowed another account's IAM users to upload or access objects in his bucket. The IAM user of Account A is trying to access an object created by the IAM user of account B. What will happen in this scenario?

• A.It is not possible to give permission to multiple IAM users
• B.AWS S3 will verify proper rights given by the owner of Account A, the bucket owner as well as by the IAM user B to the object
• C.The bucket policy may not be created as S3 will give error due to conflict of Access Rights
• D.It is not possible that the IAM user of one account accesses objects of the other IAM user

Comment: *

Name: *

Email: *

Verification: *

A company recently announced the deployment of its retail website to a global audience. The website runs on multiple Amazon EC2 instances behind an Elastic Load Balancer. The instances run in an Auto Scaling group across multiple Availability Zones.
The company wants to provide its customers with different versions of content based on the devices that the customers use to access the website.
Which combination of actions should a solutions architect take to meet these requirements7 (Select TWO.)

• A.Configure a host header in a Network Load Balancer to forward traffic to different instances.
• B.Configure Amazon CloudFront to cache multiple versions of the content.
• C.Configure AWS Global Accelerator. Forward requests to a Network Load Balancer (NLB). Configure the NLB to set up host-based routing to different EC2 instances.
• D.Configure a Lambda@Edge function to send specific objects to users based on the User-Agent header.
• E.Configure AWS Global Accelerator. Forward requests to a Network Load Balancer (NLB). Configure the NLB to set up path-based routing to different EC2 instances.

Comment: *

Name: *

Email: *

Verification: *

You are designing an intrusion detection prevention (IDS/IPS) solution for a customer web application in a single VPC. You are considering the options for implementing IOS IPS protection for traffic coming from the Internet.
Which of the following options would you consider? (Choose 2 answers)

• A.Configure an instance in each subnet to switch its network interface card to promiscuous mode and analyze network traffic.
• B.Implement IDS/IPS agents on each Instance running In VPC
• C.Implement a reverse proxy layer in front of web servers and configure IDS/IPS agents on each reverse proxy server.
• D.Implement Elastic Load Balancing with SSL listeners In front of the web applications

Comment: *

Name: *

Email: *

Verification: *

Amazon RDS supports SOAP only through __________.

• A.HTTPS
• B.HTTP or HTTPS
• C.HTTP
• D.TCP/IP

Comment: *

Name: *

Email: *

Verification: *