A SysOps Administrator runs a web application that is using a microservices approach whereby different responsibilities of the application have been divided in a separate microservice running on a different Amazon EC2 instance. The Administrator has been tasked with reconfiguring the infrastructure to support this approach.
How can the Administrator accomplish this with the LEAST administrative overhead?

• A.Use Amazon CloudFront to log the URL and forward the request.
• B.Use Amazon CloudFront to rewrite the header based on the microservice and forward the request.
• C.Use an Application Load Balancer (ALB) and do path-based routing.
• D.Use a Network Load Balancer (NLB) and do path-based routing.

Comment: *

Name: *

Email: *

Verification: *

You have two Elastic Compute Cloud (EC2) instances inside a Virtual Private Cloud (VPC) in the same Availability Zone (AZ) but in different subnets.One instance is running a
database and the other instance an application that will interface with the database. You want to confirm that they can talk to each other for your application to work properly.
Which two things do we need to confirm in the VPC settings so that these EC2 instances can communicate inside the VPC?
Choose 2 answers

• A.A network ACL that allows communication between the two subnets.
• B.Both instances are the same instance class and using the same Key-pair.
• C.Security groups are set to allow the application host to talk to the database on the right port/protocol.
• D.That the default route is set to a NAT instance or internet Gateway (IGW) for them to communicate.

Comment: *

Name: *

Email: *

Verification: *

A storage admin wants to encrypt all the objects stored in S3 using server side encryption. The user does not want to use the AES 256 encryption key provided by S3. How can the user achieve this?

• A.The admin should upload his secret key to the AWS console and let S3 decrypt the objects
• B.The admin should use CLI or API to upload the encryption key to the S3 bucket. When making a call to the S3 API mention the encryption key URL in each request
• C.S3 does not support client supplied encryption keys for server side encryption
• D.The admin should send the keys and encryption algorithm with each API call

Comment: *

Name: *

Email: *

Verification: *

A company has a multi-account AWS environment that includes the following:
A central identity account that contains all IAM users and groups
Several member accounts that contain IAM roles
A SysOp administrator must grant permissions for a particular IAM group to assume o role in one of the member accounts How should the SysOps administrator accomplish this task?

• A.In the member account, add the group Amazon Resource Name (ARN) to the role's inline policy. In the identity account, add a trust policy to the group with sts:AssumeRole permissions.
• B.In the member account, add the group Amazon Resource Name (ARN) to the role's trust policy. In the identity account. Add an inline policy to the group with sts: PassRole permission.
• C.In the member account, add the group Amazon Resource Name (ARN) to the role's trust policy. In the identity account, add an inline policy to the group with sts: AssumeRole permissions.
• D.In the member account, add sts: AssumeRole permissions to the role's policy. In the identity account, add a trusted policy to the group that specifies the account number of the member account.

Comment: *

Name: *

Email: *

Verification: *

A user has setup an RDS DB with Oracle.
The user wants to get notifications when someone modifies the security group of that DB.
How can the user configure that?

• A.It is not possible to get the notifications on a change in the security group
• B.Configure SNS to monitor security group changes
• C.Configure event notification on the DB security group
• D.Configure the CloudWatch alarm on the DB for a change in the security group

Comment: *

Name: *

Email: *

Verification: *