A production account has a requirement that any Amazon EC2 instance that has been logged into manually must be terminated within 24 hours. All applications in the production account are using Auto Scaling groups with Amazon CloudWatch Logs agent configured.
How can this process be automated?

• A.Create a CloudWatch alarm that will trigger on the login event. Configure the alarm to send to an Amazon SQS queue. Use a group of worker instances to process messages from the queue, which then schedules the Amazon CloudWatch Events rule to trigger.
• B.Create a CloudWatch alarm that will trigger on the login event. Send the notification to an Amazon SNS topic that the Operations team is subscribed to, and have them terminate the EC2 instance within 24 hours.
• C.Create a CloudWatch Logs subscription in an AWS Lambda function. Configure the function to add a tag to the EC2 instance that produced the login event and mark the instance to be decommissioned. Create a CloudWatch Events rule to trigger a daily Lambda function that terminates all instances with this tag.
• D.Create a CloudWatch Logs subscription to an AWS Step Functions application. Configure the function to add a tag to the EC2 instance that produced the login event and mark the instance to be decommissioned.
  Then create a CloudWatch Events rule to trigger a second AWS Lambda function once a day that will terminate all instances with this tag.

Comment: *

Name: *

Email: *

Verification: *

Which of the following CLI commands can be used to describe the stack resources.

• A.awscloudformationdescribe-stack
• B.awscloudformationdescribe-stack-resources
• C.awscloudformation list-stack-resources
• D.awscloudformation list-stack

Comment: *

Name: *

Email: *

Verification: *

Two teams are working together on different portions of an architecture and are using AWS CloudFormation to manage their resources. One team administers operating system-level updates and patches, while the other team manages application-level dependencies and updates. The Application team must take the most recent AMI when creating new instances and deploying the application.
What is the MOST scalable method for linking these two teams and processes?

• A.The Operating System team maintains a nested stack that includes both the operating system and Application team templates. The Operating System team uses a stack update to deploy updates to the application stack whenever the Application team changes the application code.
• B.The Operating System team uses CloudFormation to create new versions of their AMIs and lists the Amazon Resource names (ARNs) of the AMIs in an encrypted Amazon S3 object as part of the stack output section. The Application team uses a cross-stack reference to load the encrypted S3 object and obtain the most recent AMI ARNs.
• C.The Operating System team uses CloudFormation stack to create an AWS CodePipeline pipeline that builds new AMIs, then places the latest AMI ARNs in an encrypted Amazon S3 object as part of the pipeline output. The Application team uses a cross-stack reference within their own CloudFormation template to get that S3 object location and obtain the most recent AMI ARNs to use when deploying their application.
• D.The Operating System team uses CloudFormation stack to create an AWS CodePipeline pipeline that builds new AMIs. The team then places the AMI ARNs as parameters in AWS Systems Manager Parameter Store as part of the pipeline output. The Application team specifies a parameter of type ssmin their CloudFormation stack to obtain the most recent AMI ARN from the Parameter Store.

Comment: *

Name: *

Email: *

Verification: *

An n-tier application requires a table in an Amazon RDS MySQL DB instance to be dropped and repopulated at each deployment. This process can take several minutes and the web tier cannot come online until the process is complete. Currently, the web tier is configured in an Amazon EC2 Auto Scaling group, with instances being terminated and replaced at each deployment. The MySQL table is populated by running a SQL query through an AWS CodeBuild job.
What should be done to ensure that the web tier does not come online before the database is completely configured?

• A.Use Amazon Aurora as a drop-in replacement for RDS MySQL. Use snapshots to populate the table with the correct data.
• B.Modify the launch configuration of the Auto Scaling group to pause user data execution for 600 seconds, allowing the table to be populated.
• C.Use AWS Step Functions to monitor and maintain the state of data population. Mark the database in service before continuing with the deployment.
• D.Use an EC2 Auto Scaling lifecycle hook to pause the configuration of the web tier until the table is populated.

Comment: *

Name: *

Email: *

Verification: *

You use Amazon CloudWatch as your primary monitoring system for your web application. After a recent software deployment, your users are getting Intermittent 500 Internal Server Errors when using the web application. You want to create a CloudWatch alarm, and notify an on-call engineer when these occur.
How can you accomplish this using AWS services? Choose 3 answers

• A.Use Amazon Simple Email Service to notify an on-call engineer when a CloudWatch alarm is triggered.
• B.Create a CloudWatch Logs group and define metric filters that capture 500 Internal Server Errors.
  Set a CloudWatch alarm on that metric.
• C.Use Amazon Simple Notification Service to notify an on-call engineer when a CloudWatch alarm is triggered.
• D.Deploy your web application as an AWS Elastic Beanstalk application.
  Use the default Elastic Beanstalk Cloudwatch metrics to capture 500 Internal Server Errors.
  Set a CloudWatch alarm on that metric.
• E.Install a CloudWatch Logs Agent on your servers to stream web application logs to CloudWatch.
• F.Use AWS Data Pipeline to stream web application logs from your servers to CloudWatch.

Comment: *

Name: *

Email: *

Verification: *