A user is defining a policy for the IAM user. Which of the below mentioned elements can be found in an IAM policy?

• A.Not Effect
• B.Supported Data Types
• C.Principal Resource
• D.Version Management

Comment: *

Name: *

Email: *

Verification: *

Your application uses Amazon SQS and Auto Scaling to process background jobs.
The Auto Scaling policy is based on the number of messages in the queue, with a maximum Instance count of 100.
Since the application was launched, the group has never scaled above 50.
The Auto Scaling group has now scaled to 100, the queue size is increasing, and very few Jobs are being completed.
The number of messages being sent to the queue is at normal levels.
What should you do to identify why the queue size is unusually high, and to reduce it?

• A.Temporarily increase the Auto Scaling group's desired value to 200. When the queue size has been reduced, reduce it to 50.
• B.Analyze the application logs to identify possible reasons for message processing failure and resolve the cause for failures.
• C.Analyze CloudTrail logs for Amazon SQS to ensure that the instances' Amazon EC2 role has permission to receive messages from the queue.
• D.Create additional Auto Scaling groups, enabling the processing of the queue to be performed in parallel.

Comment: *

Name: *

Email: *

Verification: *

A company's application is currently deployed to a single AWS Region. Recently, the company opened a new office on a different continent. The users in the new office are experiencing high latency. The company's application runs on Amazon EC2 instances behind an Application Load Balancer (ALB) and uses Amazon DynamoDB as the database layer. The instances run in an EC2 Auto Scaling group across multiple Availability Zones. A DevOps Engineer is tasked with minimizing application response times and improving availability for users in both Regions.
Which combination of actions should be taken to address the latency issues? (Choose three.)

• A.Convert the DynamoDB table to a global table.
• B.Create Amazon Route 53 records, health checks, and latency-based routing policies to route to the AL
• C.Create new ALB and Auto Scaling group resources in the new Region and configure the new ALB to direct traffic to the new Auto Scaling group.
• D.Create Amazon Route 53 aliases, health checks, and failover routing policies to route to the ALB.
• E.Create a new DynamoDB table in the new Region with cross-Region replication enabled.
• F.Create new ALB and Auto Scaling group global resources and configure the new ALB to direct traffic to the new Auto Scaling group.

Comment: *

Name: *

Email: *

Verification: *

A company wants to use Amazon ECS to provide a Docker container runtime environment.
For compliance reasons, all Amazon EBS volumes used in the ECS cluster must be encrypted.
Rolling updates will be made to the cluster instances and the company wants the instances drained of all tasks before being terminated.
How can these requirements be met? (Select TWO.)

• A.Modify the default ECS AMI user data to create a script that executes docker rm ""f {id} for all running container instances. Copy the script to the /etc/ init.d/rc.d directory and execute chconfig enabling the script to run during operating system shutdown.
• B.Use AWS CodePipeline to build a pipeline that discovers the latest Amazon-provided ECS AMI, then copies the image to an encrypted AMI outputting the encrypted AMI ID. Use the encrypted AMI ID when deploying the cluster.
• C.Copy the default AWS CloudFormation template that ECS uses to deploy cluster instances.
  Modify the template resource EBS configuration setting to set `Encrypted: True' and include the AWS KMS alias:`aws/ebs' to encrypt the AMI.
• D.Create an Auto Scaling lifecycle hook backed by an AWS Lambda function that uses the AWS SDK to mark a terminating instance as DRAINING. Prevent the lifecycle hook from completing until the running tasks on the instance are zero.
• E.Create an IAM role that allows the action ECS::EncryptedImage. Configure the AWS CLI and a profile to use this role. Start the cluster using the AWS CLI providing the --use-encrypted-image and --kms-key arguments to the create-cluster ECS command.

Comment: *

Name: *

Email: *

Verification: *

You work for an accounting firm and need to store important financial data for clients. Initial frequent access to data is required, but after a period of 2 months, the data can be archived and brought back only in the case of an audit. What is the most cost-effective way to do this?

• A.Storeall data in a Glacier
• B.Storeall data in a private S3 bucket
• C.Uselifecycle management to store all data in Glacier
• D.Uselifecycle management to move data from S3 to Glacier

Comment: *

Name: *

Email: *

Verification: *