A company plans to stop using Amazon EC2 key pairs for SSH access, and instead plans to use AWS Systems Manager Session Manager. To further enhance security, access to Session Manager must take place over a private network only.
Which combinations of actions will accomplish this? (Choose two.)

• A.Allow inbound access to TCP port 22 in all associated EC2 security groups from the VPC CIDR range.
• B.Deploy a new EC2 instance that will act as a bastion host to the rest of the EC2 instance fleet.
• C.Create a VPC endpoint for Systems Manager in the desired Region.
• D.Attach an IAM policy with the necessary Systems Manager permissions to the existing IAM instance profile.
• E.Remove any default routes in the associated route tables.

Comment: *

Name: *

Email: *

Verification: *

For auditing, analytics, and troubleshooting purposes, a DevOps Engineer for a data analytics application needs to collect all of the application and Linux system logs from the Amazon EC2 instances before termination. The company, on average, runs 10,000 instances in an Auto Scaling group. The company requires the ability to quickly find logs based on instance IDs and date ranges.
Which is the MOST cost-effective solution?

• A.Create an EC2 Instance-terminate Lifecycle Action on the group, write a termination script for pushing logs into Amazon S3, and trigger an AWS Lambda function based on S3 PUT to create a catalog of log files in an Amazon DynamoDB table with the primary key being Instance ID and sort key being Instance Termination Date.
• B.Create an EC2 Instance-terminate Lifecycle Action on the group, write a termination script for pushing logs into Amazon CloudWatch Logs, create a CloudWatch Events rule to trigger an AWS Lambda function to create a catalog of log files in an Amazon DynamoDB table with the primary key being Instance ID and sort key being Instance Termination Date.
• C.Create an EC2 Instance-terminate Lifecycle Action on the group, create an Amazon CloudWatch Events rule based on it to trigger an AWS Lambda function for storing the logs in Amazon S3, and create a catalog of log files in an Amazon DynamoDB table with the primary key being Instance ID and sort key being Instance Termination Date.
• D.Create an EC2 Instance-terminate Lifecycle Action on the group, push the logs into Amazon Kinesis Data Firehouse, and select Amazon ES as the destination for providing storage and search capability.

Comment: *

Name: *

Email: *

Verification: *

The AWS Code Deploy service can be used to deploy code from which of the below mentioned source repositories. Choose 3 answers from the options given below

• A.S3Buckets
• B.GitHubrepositories
• C.Subversionrepositories
• D.Bit bucket repositories

Comment: *

Name: *

Email: *

Verification: *

A company is building a web and mobile application that uses a serverless architecture powered by AWS Lambda and Amazon API Gateway. The company wants to fully automate the backend Lambda deployment based on code that is pushed to the appropriate environment branch in an AWS CodeCommit repository.
The deployment must have the following:
Separate environment pipelines for testing and production.

Automatic deployment that occurs for test environments only.

Which steps should be taken to meet these requirements?

• A.Configure a new AWS CodePipeline service. Create a CodeCommit repository for each environment.
  Set up CodePipeline to retrieve the source code from the appropriate repository. Set up a deployment step to deploy the Lambda functions with AWS CloudFormation.
• B.Create two AWS CodePipeline configurations for test and production environments. Configure the production pipeline to have a manual approval step. Create one CodeCommit repository with a branch for each environment. Set up each CodePipeline to retrieve the source code from the appropriate branch in the repository. Set up the deployment step to deploy the Lambda functions with AWS CloudFormation.
• C.Create an AWS CodeBuild configuration for test and production environments. Configure the production pipeline to have a manual approval step. Create one CodeCommit repository with a branch for each environment. Push the Lambda function code to an Amazon S3 bucket. Set up the deployment step to deploy the Lambda functions from the S3 bucket.
• D.Create two AWS CodePipeline configurations for test and production environments. Configure the production pipeline to have a manual approval step. Create a CodeCommit repository for each environment. Set up each CodePipeline to retrieve the source code from the appropriate repository.
  Set up the deployment step to deploy the Lambda functions with AWS CloudFormation.

Comment: *

Name: *

Email: *

Verification: *

What is the amount of time that Opswork stacks services waits for a response from an underlying instance before deeming it as a failed instance?

• A.Iminute.
• B.5minutes.
• C.20minutes.
• D.60minutes

Comment: *

Name: *

Email: *

Verification: *