A company is building an application that consists of several microservices. The company has decided to use container technologies to deploy its software on AWS The company needs a solution that minimizes the amount of ongoing effort for maintenance and scaling. The company cannot manage additional infrastructure Which combination of actions should a solutions architect take to meet these requirements? {Select TWO )

• A.Deploy an Amazon Elastic Container Service (Amazon ECS) cluster
• B.Deploy the Kubernetes control plane on Amazon EC2 instances that span multiple Availability Zones
• C.Deploy an Amazon Elastic Container Service (Amazon ECS) service with an Amazon EC2 launch type Specify a desired task number level of greater than or equal to 2
• D.Deploy an Amazon Elastic Container Service (Amazon ECS) service with a Fargate launch type Specify a desired task number level of greater than or equal to 2
• E.Deploy Kubernetes worker nodes on Amazon EC2 instances that span multiple Availability Zones Create a deployment that specifies two or more replicas for each microservice

Comment: *

Name: *

Email: *

Verification: *

You have been storing massive amounts of data on Amazon Glacier for the past 2 years and now start to wonder if there are any limitations on this. What is the correct answer to your question?

• A.The total volume of data is limited but the number of archives you can store are unlimited.
• B.The total volume of data is unlimited but the number of archives you can store are limited.
• C.The total volume of data and number of archives you can store are unlimited.
• D.The total volume of data is limited and the number of archives you can store are limited.

Comment: *

Name: *

Email: *

Verification: *

Can you encrypt EBS volumes?

• A.Yes, you can enable encryption when you create a new EBS volume using the AWS Management Console, API, or CLI.
• B.No, you should use a third-party software to perform raw block-level encryption of an EBS volume.
• C.Yes, but you must use a third-party API for encrypting data before it's loaded on EBS.
• D.Yes, you can encrypt with the special "ebs_encrypt" command through Amazon APIs.

Comment: *

Name: *

Email: *

Verification: *

A bank is designing an online customer service portal where customers can chat with customer service agents. The portal is required to maintain a 15-minute RPO or RTO in case of a regional disaster. Banking regulations require that all customer service chat transcripts must be preserved on durable storage for at least 7 years, chat conversations must be encrypted in-flight, and transcripts must be encrypted at rest.
The Data Loss Prevention team requires that data at rest must be encrypted using a key that the team controls, rotates, and revokes.
Which design meets these requirements?

• A.The chat application logs each chat message into Amazon CloudWatch Logs. A scheduled AWS Lambda function invokes a CloudWatch Logs CreateExportTask every 5 minutes to export chat transcripts to Amazon S3. The S3 bucket is configured for cross-region replication to the backup region.
  Separate AWS KMS keys are specified for the CloudWatch Logs group and the S3 bucket.
• B.The chat application logs each chat message into two different Amazon CloudWatch Logs groups in two different regions, with the same AWS KMS key applied. Both CloudWatch Logs groups are configured to export logs into an Amazon Glacier vault with a 7-year vault lock policy with a KMS key specified.
• C.The chat application logs each chat message into Amazon CloudWatch Logs. A subscription filter on the CloudWatch Logs group feeds into an Amazon Kinesis Data Firehose which streams the chat messages into an Amazon S3 bucket in the backup region. Separate AWS KMS keys are specified for the CloudWatch Logs group and the Kinesis Data Firehose.
• D.The chat application logs each chat message into Amazon CloudWatch Logs. The CloudWatch Logs group is configured to export logs into an Amazon Glacier vault with a 7-year vault lock policy. Glacier cross-region replication mirrors chat archives to the backup region. Separate AWS KMS keys are specified for the CloudWatch Logs group and the Amazon Glacier vault.

Comment: *

Name: *

Email: *

Verification: *

A photo-sharing website running on AWS allows users to generate thumbnail images of photos stored in Amazon S3. An Amazon DynamoDB table maintains the locations of photos, and thumbnails are easily re- created from the originals if they are accidentally deleted.
How should the thumbnail images be stored to ensure the LOWEST cost?

• A.Amazon S3
• B.Amazon S3 with cross-region replication
• C.Amazon S3 Standard-Infrequent Access (S3 Standard-IA) with cross-region replication
• D.Amazon Glacier

Comment: *

Name: *

Email: *

Verification: *