An application runs on Amazon EC2 instances in private subnets. The application needs to access an Amazon DynamoDB table. What is the MOST secure way to access the table while ensuring that the traffic does not leave the AWS network?

• A.Use a VPC endpoint for DynamoDB.
• B.Use a NAT instance in a private subnet.
• C.Use the internet gateway attached to the VPC.
• D.Use a NAT gateway in a public subnet.

Comment: *

Name: *

Email: *

Verification: *

Which Amazon Storage behaves like raw, unformatted, external block devices that you can attach to your instances?

• A.Amazon EBS
• B.All of these
• C.None of these.
• D.Amazon Instance Storage

Comment: *

Name: *

Email: *

Verification: *

True or False: When you perform a restore operation to a point in time or from a DB Snapshot, a new DB Instance is created with a new endpoint.

• A.TRUE
• B.FALSE

Comment: *

Name: *

Email: *

Verification: *

A reporting team receives files each day in an Amazon S3 bucket. The reporting team manually reviews and copies the files from this initial S3 bucket to an analysis S3 bucket each day at the same time to use with Amazon QuickSight. Additional teams are starting to send more files in larger sizes to the initial S3 bucket.
The reporting team wants to move the files automatically analysis S3 bucket as the files enter the initial S3 bucket. The reporting team also wants to use AWS Lambda functions to run pattern-matching code on the copied data. In addition, the reporting team wants to send the data files to a pipeline in Amazon SageMaker Pipelines.
What should a solutions architect do to meet these requirements with the LEAST operational overhead?

• A.Create a Lambda function to copy the files to the analysis S3 bucket. Create an S3 event notification for the analysis S3 bucket. Configure Lambda and SageMaker Pipelines as destinations of the event notification. Configure s30bjectCreated:Put as the event type.
• B.Create a Lambda function to copy the files to the analysis S3 bucket. Configure the analysis S3 bucket to send event notifications to Amazon EventBridge (Amazon CloudWatch Events). Configure an ObjectCreated rule in EventBridge (CloudWatch Events). Configure Lambda and SageMaker Pipelines as targets for the rule.
• C.Configure S3 replication between the S3 buckets. Configure the analysis S3 bucket to send event notifications to Amazon EventBridge (Amazon CloudWatch Events). Configure an ObjectCreated rule in EventBridge (CloudWatch Events). Configure Lambda and SageMaker Pipelines as targets for the rule.
• D.Configure S3 replication between the S3 buckets. Create an S3 event notification for the analysis S3 bucket. Configure Lambda and SageMaker Pipelines as destinations of the event notification. Configure s30bjectCreated:Put as the event type.

Comment: *

Name: *

Email: *

Verification: *

An organization has recently grown through acquisitions. Two of the purchased companies use the same IP CIDR range. There is a new short-term requirement to allow AnyCompany A (VPC-A) to communicate with a server that has the IP address 10.0.0.77 in AnyCompany B (VPC-B). AnyCompany A must also communicate with all resources in AnyCompany C (VPC-C). The Network team has created the VPC peer links, but it is having issues with communications between VPC-A and VPC-B. After an investigation, the team believes that the routing tables in the VPCs are incorrect.
What configuration will allow AnyCompany A to communicate with AnyCompany C in addition to the database in AnyCompany B?

• A.On VPC-A, enable dynamic route propagation on pcx-AB and pcx-AC.
  On VPC-B, enable dynamic route propagation and use security groups to allow only the IP address
  10.0.0.77/32 on VPC peer pcx-AB.
  On VPC-C, enable dynamic route propagation with VPC-A on peer pcx-AC.
• B.On VPC-A, create a static route for the VPC-B CIDR range (10.0.0.0/24) across VPC peer pcx-AB.
  Create a static route of 10.0.0.0/16 across VPC peer pcx-AC.
  On VPC-B, create a static route for VPC-A CIDR (172.16.0.0/24) on peer pcx-AB.
  On VPC-C, create a static route for VPC-A CIDR (172.16.0.0/24) across peer pcx-AC.
• C.On VPC-A, create a static route for the VPC-B (10.0.0.77/32) database across VPC peer pcx-AB.
  Create a static route for the VPC-C CIDR on VPC peer pcx-AC.
  On VPC-B, create a static route for VPC-A CIDR (172.16.0.0/24) on peer pcx-AB.
  On VPC-C, create a static route for VPC-A CIDR (172.16.0.0/24) across peer pcx-AC.
• D.On VPC-A, create network access control lists that block the IP address 10.0.0.77/32 on VPC peer pcx- AC.
  On VPC-A, create a static route for VPC-B CIDR (10.0.0.0/24) on pcx-AB and a static route for VPC-C CIDR (10.0.0.0/24) on pcx-AC.
  On VPC-B, create a static route for VPC-A CIDR (172.16.0.0/24) on peer pcx-AB.
  On VPC-C, create a static route for VPC-A CIDR (172.16.0.0/24) across peer pcx-AC.

Comment: *

Name: *

Email: *

Verification: *