You are building a mobile app for consumers to post cat pictures online. You will be storing the images in
AWS S3. You want to run the system very cheaply and simply. Which one of these options allows you to
build a photo sharing application without needing to worry about scaling expensive uploads processes,
authentication/authorization and so forth?

• A.Build the application out using AWS Cognito and web identity federation to allow users to log in using
  Facebook or Google Accounts. Once they are logged in, the secret token passed to that user is used to
  directly access resources on AWS, like AWS S3.
• B.Use JWT or SAML compliant systems to build authorization policies. Users log in with a username and
  password, and are given a token they can use indefinitely to make calls against the photo infrastructure.
• C.Use AWS API Gateway with a constantly rotating API Key to allow access from the client-side.
  Construct a custom build of the SDK and include S3 access in it.
• D.Create an AWS oAuth Service Domain ad grant public signup and access to the domain. During setup,
  add at least one major social media site as a trusted Identity Provider for users.

Comment: *

Name: *

Email: *

Verification: *

A news organization plans to migrate their 20 TB video archive to AWS. The files are rarely accessed, but
when they are, a request is made in advance and a 3 to 5-hour retrieval time frame is acceptable. However,
when there is a breaking news story, the editors require access to archived footage within minutes.
Which storage solution meets the needs of this organization while providing the LOWEST cost of storage?

• A.Store the archive in Amazon Glacier and pay the additional charge for expedited retrieval when needed.
• B.Store the archive in Amazon S3 Reduced Redundancy Storage.
• C.Store the archive in Amazon Glacier and use standard retrieval for all content.
• D.Store the archive in Amazon S3 with a lifecycle policy to move this to S3 Infrequent Access after 30
  days.

Comment: *

Name: *

Email: *

Verification: *

A company needs to introduce automatic DNS failover for a distributed web application to a disaster recovery or standby installation. The DevOps Engineer plans to configure Amazon Route 53 to provide DNS routing to alternate endpoint in the event of an application failure. What steps should the Engineer take to accomplish this? (Select TWO.)

• A.Map the primary and secondary Amazon Route 53 record sets to an Amazon CloudFront distribution using primary and secondary origins.
• B.Create alias records that route traffic to AWS resources and set the value of the Evaluate Target Health option to Yes, then create all the non-alias records.
• C.Create Amazon Route 53 health checks for each endpoint that cannot be entered as alias records. Ensure firewall and routing rules allow Amazon Route 53 to send requests to the endpoints that are specified in the health checks.
• D.Create an Amazon CloudWatch alarm to monitor the primary Amazon Route 53 DNS entry. Then create an associated AWS Lambda function to execute the failover API call to Route 53 to the secondary DNS entry.
• E.Create a governing Amazon Route 53 record set, set it to failover, and associate it with the primary and secondary Amazon Route 53 record sets to distribute traffic to healthy DNS entries.

Comment: *

Name: *

Email: *

Verification: *

Management has reported an increase in the monthly bill from Amazon web services, and they are extremely concerned with this increased cost.
Management has asked you to determine the exact cause of this increase.
After reviewing the billing report, you notice an increase in the data transfer cost.
How can you provide management with a better insight into data transfer use?

• A.Deliver custom metrics to Amazon CloudWatch per application that breaks down application data transfer into multiple, more specific data points.
• B.Using Amazon CloudWatch metrics, pull your Elastic Load Balancing outbound data transfer metrics monthly, and include them with your billing report to show which application is causing higher bandwidth usage.
• C.Update your Amazon CloudWatch metrics to use five-second granularity, which will give better detailed metrics that can be combined with your billing data to pinpoint anomalies.
• D.Use Amazon CloudWatch Logs to run a map-reduce on your logs to determine high usage and data transfer.

Comment: *

Name: *

Email: *

Verification: *

You have just developed a new mobile application that handles analytics workloads on large scale datasets that are stored on Amazon Redshift. Consequently, the application needs to access Amazon Redshift tables. Which of the below methods would be the best, both practically and security-wise, to access the tables? Choose the correct answer from the options below

• A.Createan 1AM user and generate encryption keys for that user. Create a policy for RedShiftread-only access. Embed the keys in the application.
• B.Createa HSM client certificate in Redshift and authenticate using this certificate.
• C.Createa RedShift read-only access policy in 1AM and embed those credentials in theapplication.
• D.Useroles that allow a web identity federated user to assume a role that allowsaccess to the RedShift table by providing temporary credentials.

Comment: *

Name: *

Email: *

Verification: *