Company policies require that information about IP traffic going between instances in the production Amazon VPC is captured. The capturing mechanism must always be enabled and the Security team must be notified when any changes in configuration occur.
What should be done to ensure that these requirements are met?

• A.Create a flow log for the production VPC and assign an Amazon S3 bucket as a destination for delivery. Using Amazon S3 Event Notification, set up an AWS Lambda function that is triggered when a new log file gets delivered. This Lambda function updates an entry in Amazon DynamoDB, which is periodically checked by scheduling an Amazon CloudWatch Events rule to notify security when logs have not arrived.
• B.Using the UserData section of an AWS CloudFormation template, install tcpdump on every provisioned Amazon EC2 instance. The output of the tool is sent to Amazon EFS for aggregation and querying. In addition, scheduling an Amazon CloudWatch Events rule calls an AWS Lambda function to check whether tcpdump is up and running and sends an email to the security organization when there is an exception.
• C.Configure a new trail using AWS CloudTrail service. Using the UserData section of an AWS CloudFormation template, install tcpdump on every provisioned Amazon EC2 instance. Connect Amazon Athena to the CloudTrail and write an AWS Lambda function that monitors for a flow log disable event. Once the CloudTrail entry has been spotted, alert the security organization.
• D.Create a flow log for the production VPC. Create a new rule using AWS Config that is triggered by configuration changes of resources of type `EC2:VPC'. As part of configuring the rule, create an AWS Lambda function that looks up flow logs for a given VPC. If the VPC flow logs are not configured, return a `NON_COMPLIANT' status and notify the security organization.

Comment: *

Name: *

Email: *

Verification: *

A company is implementing AWS CodePipeline to automate its testing process. The company wants to be notified when the execution state fails and used the following custom event pattern in Amazon CloudWatch:

Which type of events will match this event pattern?

• A.Failed deploy and build actions across all the pipelines.
• B.All rejected or failed approval actions across all the pipelines.
• C.All the events across all pipelines.
• D.Approval actions across all the pipelines.

Comment: *

Name: *

Email: *

Verification: *

You need to create an audit log of all changes to customer banking data. You use DynamoDB to store this
customer banking data. It's important not to lose any information due to server failures. What is an elegant way
to accomplish this?

• A.Use a DynamoDB StreamSpecification and stream all changes to AWS Lambda. Log the changes to
  AWS CloudWatch Logs, removing sensitive information before logging.
• B.Before writing to DynamoDB, do a pre-write acknoledgment to disk on the application server, removing
  sensitive information before logging. Periodically rotate these log files into S3.
• C.Use a DynamoDB StreamSpecification and periodically flush to an EC2 instance store, removing
  sensitive information before putting the objects. Periodically flush these batches to S3.
• D.Before writing to DynamoDB, do a pre-write acknoledgment to disk on the application server, removing
  sensitive information before logging. Periodically pipe these files into CloudWatch Logs.

Comment: *

Name: *

Email: *

Verification: *

What is the scope of an EBS snapshot?

• A.Availability Zone
• B.Placement Group
• C.Region
• D.VPC

Comment: *

Name: *

Email: *

Verification: *

A company has migrated its container-based applications to Amazon EKS and want to establish automated email notifications. The notifications sent to each email address are for specific activities related to EXS components. The solution will include Amazon SNS topics and an AWS Lambda function to evaluate incoming log events and publish messages to the correct SNS topic.
Which logging solution will support these requirements?

• A.Enable Amazon S3 logging for the EKS components. Configure S3 PUT Object event notifications with AWS Lambda as the destination.
• B.Enable Amazon CloudWatch Logs to log the EKS components. Create a CloudWatch subscription filter for each component with Lambda as the subscription feed destination.
• C.Enable Amazon S3 logging for the EKS components. Configure an Amazon CloudWatch subscription filter for each component with Lambda as the subscription feed destination.
• D.Enable Amazon CloudWatch Logs to log the EKS components. Create CloudWatch Logs Insights queries linked to Amazon CloudWatch Events events that trigger Lambda.

Comment: *

Name: *

Email: *

Verification: *