True or False: Manually created DB Snapshots are deleted after the DB Instance is deleted.

• A.FALSE
• B.TRUE

Comment: *

Name: *

Email: *

Verification: *

A Solutions Architect is building a multi-tier website. The web servers will be in a public subnet, and the database servers will be in a private subnet. Only the web servers can be accessed from the internet.
The database servers must have Internet access for software updates. Which solution meets these requirements?

• A.Use a NAT Gateway.
• B.Assign Elastic IP addresses to the database instances
• C.Use an egress-only internet Gateway
• D.Allow Internet traffic on the private subnet through the network ACL

Comment: *

Name: *

Email: *

Verification: *

A company runs a web application that is backed by Amazon RDS. A new database administrator caused data loss by accidentally editing information in a database table To help recover from this type of incident, the company wants the ability to restore the database to its state from 5 minutes before any change within the last
30 days.
Which feature should the solutions architect include in the design to meet this requirement?

• A.Manual snapshots
• B.Automated backups
• C.Multi-AZ deployments
• D.Read replicas

Comment: *

Name: *

Email: *

Verification: *

A company is designing a new service that will run on Amazon EC2 instance behind an Elastic Load Balancer.
However, many of the web service clients can only reach IP addresses whitelisted on their firewalls.
What should a solution architect recommend to meet the clients' needs?
What should a solution architect recommend to meet the clients' needs?

• A.A Network Load Balancer with an associated Elastic IP address.
• B.An A record in an Amazon Route 53 hosted zone pointing to an Elastic IP address
• C.An EC2 instance with a public IP address running as a proxy in front of the load balancer
• D.An Application Load Balancer with an a associated Elastic IP address

Comment: *

Name: *

Email: *

Verification: *

A company has an application workflow that uses an AWS Lambda function to download and decrypt files from Amazon S3 These files are encrypted using AWS Key Management Service Customer Master Keys (AWS KMS CMKs) A solutions architect needs to design a solution that will ensure the required permissions are set correctly.
Which combination of actions accomplish this? (Select TWO.)

• A.Create a new IAM policy with the kms:decrypt permission and attach the policy to the Lambda function
• B.Attach the kms.decrypt permission to the Lambda function's resource policy.
• C.Create a new IAM role with the kms decrypt permission and attach the execution role to the Lambda function.
• D.Grant the decrypt permission for the Lambda IAM role in the KMS key's policy
• E.Grant the decrypt permission for the Lambda resource policy in the KMS key's policy.

Comment: *

Name: *

Email: *

Verification: *