A solutions architect is designing a solution to access a catalog of images and provide users with the ability to submit requests to customize images Image customization parameters will be in any request sent to an AWS API Gateway API The customized image will be generated on demand, and users will receive a link they can click to view or download their customized image The solution must be highly available for viewing and customizing images What is the MOST cost-effective solution to meet these requirements?

• A.Use Amazon EC2 instances to manipulate the original image into the requested customization Store the original and manipulated images in Amazon S3 Configure an Elastic Load Balancer in front of the EC2 instances
• B.Use AWS Lambda to manipulate the original image to the requested customization Store the original and manipulated images in Amazon S3 Configure an Amazon CloudFront distribution with the S3 bucket as the origin
• C.Use AWS Lambda to manipulate the original image to the requested customization Store the original images in Amazon S3 and the manipulated images in Amazon DynamoDB Configure an Elastic Load Balancer in front of the Amazon EC2 instances
• D.Use Amazon EC2 instances to manipulate the original image into the requested customization Store the original images in Amazon S3 and the manipulated images in Amazon DynamoDB Configure an Amazon CloudFront distribution with the S3 bucket as the origin

Comment: *

Name: *

Email: *

Verification: *

You require the ability to analyze a customer's clickstream data on a website so they can do behavioral analysis. Your customer needs to know what sequence of pages and ads their customer clicked on. This data will be used in real time to modify the page layouts as customers click through the site to increase stickiness and advertising click-through. Which option meets the requirements for captioning and analyzing this data?

• A.Log clicks in weblogs by URL store to Amazon S3, and then analyze with Elastic MapReduce
• B.Push web clicks by session to Amazon Kinesis and analyze behavior using Kinesis workers
• C.Write click events directly to Amazon Redshift and then analyze with SQL
• D.Publish web clicks by session to an Amazon SQS queue men periodically drain these events to Amazon RDS and analyze with sol

Comment: *

Name: *

Email: *

Verification: *

A company wants to migrate its on-premises data center to AWS. According to the company's compliance requirements, the company can use only the ap-northeast-3 Region. Company administrators are not permitted to connect VPCs to the internet.
Which solutions will meet these requirements? (Choose two.)

• A.Use AWS Organizations to configure service control policies (SCPS) that prevent VPCs from gaining internet access. Deny access to all AWS Regions except ap-northeast-3.
• B.Use rules in AWS WAF to prevent internet access. Deny access to all AWS Regions except ap-northeast-3 in the AWS account settings.
• C.Use AWS Control Tower to implement data residency guardrails to deny internet access and deny access to all AWS Regions except ap-northeast-3.
• D.Use AWS Config to activate managed rules to detect and alert for internet gateways and to detect and alert for new resources deployed outside of ap-northeast-3.
• E.Create an outbound rule for the network ACL in each VPC to deny all traffic from 0.0.0.0/0. Create an
  1AM policy for each user to prevent the use of any AWS Region other than ap-northeast-3.

Comment: *

Name: *

Email: *

Verification: *

A company runs demonstration environments for its customers on Amazon EC2 instances. Each environment is isolated in its own VPC. The company's operations team needs to be notified when RDP or SSH access to an environment has been established.
What should a solutions architect recommend to meet these requirements?

• A.Configure Amazon CloudWatch Application Insights to create AWS Systems Manager Opsltems when RDP or SSH access is detected.
• B.Configure an Amazon EventBridge (Amazon CloudWatch Events) rule to listen for events of type EC2 Instance State-change Notification. Configure an Amazon Simple Notification Service (Amazon SNS) topic as a target. Subscribe the operations team to the topic.
• C.Publish VPC flow logs to Amazon CloudWatch Logs. Create required metric filters. Create an Amazon CloudWatch metric alarm with a notification action for when the alarm is in the ALARM state.
• D.Configure the EC2 instances with an IAM instance profile that has an IAM role with the AmazonSSMManagedlnstanceCore policy attached.

Comment: *

Name: *

Email: *

Verification: *

A company has a serverless website with millions of objects in an Amazon S3 bucket The company uses tie S3 bucket as the origin tor an Amazon CloudFront distribution The company did not set encryption on the S3 bucket before the objects were loaded A solutions architect needs to enable encryption for all existing objects and for all objects that are added to the S3 bucket in the future Which solution will meet these requirements with the LEAST amount of effort?

• A.Create a new S3 bucket Turn on the default encryption settings for the new S3 bucket Download all existing objects to temporary local storage Upload the objects to the new S3 bucket
• B.Create a new encryption key by using AWS Key Management Service (AWS KMS) Change the settings on the S3 bucket to use server-side encryption with AWS KMS managed encryption keys (SSE-KMS) Turn on versioning for the S3 bucket
• C.Navigate to Amazon S3 in the AWS Management Console Browse the S3 bucket's objects Sort by the encryption field Select each unencrypted object Use the Modify button to apply default encryption settings to every unencrypted object in the S3 bucket
• D.Turn on the default encryption settings for the S3 bucket Use the S3 Inventory feature to create a csv file that lists the unencrypted objects Run an S3 Batch Operations job that uses the copy command to encrypt those objects

Comment: *

Name: *

Email: *

Verification: *