A company has multiple AWS accounts hosting IT applications. An Amazon CloudWatch Logs agent is installed on all Amazon EC2 instances. The company wants to aggregate all security events in a centralized AWS account dedicated to log storage.
Security Administrators need to perform near-real-time gathering and correlating of events across multiple AWS accounts.
Which solution satisfies these requirements?

• A.Configure CloudWatch Logs agents to publish data to an Amazon Kinesis Data Firehose stream in the logging AWS account, use an AWS Lambda function to read messages from the stream and push messages to Data Firehose, and persist the data in Amazon S3.
• B.Create Amazon Kinesis Data Streams in the logging account, subscribe the stream to CloudWatch Logs streams in each application AWS account, configure an Amazon Kinesis Data Firehose delivery stream with the Data Streams as its source, and persist the log data in an Amazon S3 bucket inside the logging AWS account.
• C.Create a Log Audit IAM role in each application AWS account with permissions to view CloudWatch Logs, configure an AWS Lambda function to assume the Log Audit role, and perform an hourly export of CloudWatch Logs data to an Amazon S3 bucket in the logging AWS account.
• D.Configure CloudWatch Logs streams in each application AWS account to forward events to CloudWatch Logs in the logging AWS account. In the logging AWS account, subscribe an Amazon Kinesis Data Firehose stream to Amazon CloudWatch Events, and use the stream to persist log data in Amazon S3.

Comment: *

Name: *

Email: *

Verification: *

An online magazine will launch its latest edition this month. This edition will be the first to be distributed globally. The magazine's dynamic website currently uses an Application Load Balance in front of the web tier, a fleet of Amazon EC2 instances for web and application servers, and Amazon Aurora MySQL. Portions of the website include static content and almost all traffic is read-only.
The magazine is exporting a significant spike in internet traffic when the new edition is launched. Optimal performance is a top priority for the week following the launch.
Which combination of steps should a solutions architect take to reduce system response times for a global audience? (Select Two.)

• A.Ensure the web and application tiers are each in Auto Scaling groups. Introduce an AWS Direct Connect connection Deploy the web and application liars in Regions across the world.
• B.Migrate the database from Amazon Aurora to Amazon RDS tor MySQL Ensure all three of the application tiers-web. application, and database-are in private subnets.
• C.Introduce Amazon Route 53 with latency-based routing and Amazon CloudFront distributions. Ensure the web and application tiers are each in Auto Scaling groups.
• D.Use an Aurora global database for physical cross-Region replication. Use Amazon S3 with cross-Region replication tor static content and resources. Deploy the web and application tiers in Regions across the world.
• E.Use logical cross-Region replication to replicate the Aurora MySQL database to a secondary Region Replace the web servers with Amazon S3. Deploy S3 buckets in cross-Region replication mode.

Comment: *

Name: *

Email: *

Verification: *

A media storage application uploads user photos to Amazon S3 for processing. End users are reporting that some uploaded photos are not being processed properly. The Application Developers trace the logs and find that AWS Lambda is experiencing execution issues when thousands of users are on the system simultaneously. Issues are caused by:
- Limits around concurrent executions.
- The performance of Amazon DynamoDB when saving data.
Which actions can be taken to increase the performance and reliability of the application?
(Choose two.)

• A.Evaluate and adjust the read capacity units (RCUs) for the DynamoDB tables.
• B.Evaluate and adjust the write capacity units (WCUs) for the DynamoDB tables.
• C.Add an Amazon ElastiCache layer to increase the performance of Lambda functions.
• D.Configure a dead letter queue that will reprocess failed or timed-out Lambda functions.
• E.Use S3 Transfer Acceleration to provide lower-latency access to end users.

Comment: *

Name: *

Email: *

Verification: *

A company has been using a third-party provider for its content delivery network and recently decided to switch to Amazon CloudFront the Development team wants to maximize performance for the global user base.
The company uses a content management system (CMS) that serves both static and dynamic content. The CMS is both md an Application Load Balancer (ALB) which is set as the default origin for the distribution.
Static assets are served from an Amazon S3 bucket. The Origin Access Identity (OAI) was created property d the S3 bucket policy has been updated to allow the GetObject action from the OAI, but static assets are receiving a 404 error Which combination of steps should the Solutions Architect take to fix the error? (Select TWO. )

• A.Add a host header condition to the ALB listener and forward the header from CloudFront to add traffic to the allow list
• B.Add a behavior to the CloudFront distribution for the path pattern and the origin of the static assets
• C.Add an RTMP distribution to allow caching of both static and dynamic content
• D.Add a path based rule to the ALB to forward requests for the static assets
• E.Add another origin to the CloudFront distribution for the static assets

Comment: *

Name: *

Email: *

Verification: *

A user is hosting a public website on AWS. The user wants to have the database and the app server on the AWS VPC. The user wants to setup a database that can connect to the Internet for any patch upgrade but cannot receive any request from the internet. How can the user set this up?

• A.Setup DB in a private subnet with the security group allowing only outbound traffic.
• B.Setup DB in a public subnet with the security group allowing only inbound data.
• C.Setup DB in a local data center and use a private gateway to connect the application with DB.
• D.Setup DB in a private subnet which is connected to the internet via NAT for outbound.

Comment: *

Name: *

Email: *

Verification: *